dsh-openai-subscription 0.1.5 → 0.1.6

package/README.md

@@ -53,7 +53,22 @@ Restart `dsh web`, then refresh the existing page. DSH registers the plugin auto
 4. Return to DSH after authorization completes; the plugin fetches and syncs models automatically.
 5. Select an available model from the DSH model picker.
 
-`llm-pi-ai` automatically renews refreshable OAuth credentials during model requests. **Refresh authorization** in this settings page is primarily a manual recovery action.
+The main area keeps **Sync models / Update models**: fetch the model list while preserving local configuration, without switching accounts. Expand **Connection management** for infrequent operations:
+
+- **Refresh authorization / Reconnect**: recover from authorization problems. `llm-pi-ai` automatically renews refreshable credentials during requests; routine manual refresh is unnecessary. Recovery is also shown directly for expired or unknown authorization.
+- **Reload status**: read local state only; does not renew authorization or sync models.
+- **Disconnect**: remove the local connection after confirmation; does not delete your ChatGPT account.
+
+### 1M and custom context windows
+
+Under **Model context**, select a model, choose **Use model default / 1M / Custom**, then **Save context**. 1M means `1,000,000` tokens for input and output combined, not a fixed request size or a higher output-token limit.
+
+- Only the selected model’s `llm-pi-ai.providers.openai-codex.models[].contextWindow` changes. Other models are not forced to 1M.
+- Catalog defaults and maximum windows are separate. The 1M option is disabled below a known 1M maximum, and custom values cannot exceed known maxima.
+- When no maximum is declared, an explicit override is allowed with a warning. Local configuration does not guarantee model/account capacity or unlock upstream access.
+- Later model syncs preserve this local edit. Choose **Use model default** and save to restore the latest synchronized default field.
+- Saving changes local settings only, without login or discovery. Concurrent edits produce a settings conflict; reload before saving again.
+- Older snapshots may lack default/maximum metadata; **Update models** fills in facts the catalog supplies. After upgrading, load both the new host and client plugin, restart DSH, and refresh the page.
 
 ### Status and recovery
 

package/README.zh.md

@@ -53,7 +53,22 @@ dsh plugin --profile web add dsh-openai-subscription
 4. 授权完成后返回 DSH；插件会自动获取并同步模型。
 5. 在 DSH 的模型选择器中选择可用模型。
 
-`llm-pi-ai` 会在模型请求期间自动续期可刷新的 OAuth 凭证。设置页中的 **刷新授权** 主要用于授权异常时的手动恢复。
+常用区域只保留 **同步模型 / 更新模型**：重新获取模型列表，保留本地配置，不切换账号。展开 **连接管理** 才会看到低频操作：
+
+- **刷新授权 / 重新连接**：用于授权异常恢复。`llm-pi-ai` 会在模型请求期间自动续期可刷新的凭证，无需日常手动刷新；过期或有效性未知时会直接显示恢复按钮。
+- **重新读取状态**：只读取本机状态，不刷新授权、不同步模型。
+- **断开连接**：清理本机连接，操作前需确认，不会删除 ChatGPT 账号。
+
+### 1M 与自定义上下文
+
+在 **模型上下文** 中选择模型，再选择 **跟随模型默认 / 1M / 自定义**，点击 **保存上下文**。1M 表示 `1,000,000` tokens，是输入与输出合计窗口；不是每次固定发送 1M tokens，也不会提高单次输出上限。
+
+- 仅修改选中模型的 `llm-pi-ai.providers.openai-codex.models[].contextWindow`，不把所有模型强制提升到 1M。
+- 目录的默认窗口与最大窗口分开处理；已知上限低于 1M 时禁用 1M 选项，自定义也不能超过已知上限。
+- 未知上限时允许明确设置，但本机配置不代表模型或账号支持该容量，不会解锁上游权限。
+- 后续模型同步会保留本地上下文编辑；选择 **跟随模型默认** 并保存可恢复最近一次同步的默认字段。
+- 保存仅操作本机设置，不触发登录或模型发现；其他页面同时改动时会报设置冲突，请重新读取后再保存。
+- 旧版记录可能缺少默认/上限信息；点击 **更新模型** 可补齐目录提供的元数据。升级后需同时加载新版主机端与客户端，并重启 DSH、刷新页面。
 
 ### 状态与恢复
 

package/dist/client.d.ts

@@ -30,6 +30,18 @@ interface ModelSyncInfo {
     count: number;
     warningCode?: string;
 }
+interface ModelContextInfo {
+    id: string;
+    name?: string;
+    contextWindow?: number;
+    defaultContextWindow?: number;
+    maxContextWindow?: number;
+    customized: boolean;
+}
+interface ModelContextsInfo {
+    revision: number;
+    models: ModelContextInfo[];
+}
 interface RemoteResult<T> {
     ok?: boolean;
     error?: {

package/dist/client.js

@@ -17,7 +17,35 @@ const ZH = {
     'model.synced': '模型已同步',
     'model.attention': '模型需要同步',
     'model.count': '{count} 个可用模型',
-    'model.synced.detail': '账号目录、内置目录和本地编辑已安全合并。',
+    'model.synced.detail': '已合并账号模型与 DSH 内置模型，保留你的本地编辑。',
+    'model.sync.help': '重新获取可用模型列表，不会更换账号或重置本地配置。',
+    'context.title': '模型上下文',
+    'context.help': '按模型设置总上下文窗口（输入 + 输出）。同步模型会保留此设置。',
+    'context.model': '模型',
+    'context.window': '上下文窗口',
+    'context.default': '跟随模型默认',
+    'context.million': '1M · 1,000,000 tokens',
+    'context.custom': '自定义',
+    'context.tokens': '自定义 tokens 数',
+    'context.current': '当前：{count} tokens',
+    'context.maximum': '目录声明上限：{count} tokens',
+    'context.unknown': '目录未声明最大窗口；本机配置不会解锁上游权限，请确认模型和账号支持。',
+    'context.limit.help': '超过目录声明上限的配置不可保存；实际可用性仍取决于账号和上游。',
+    'context.empty': '同步模型后即可配置上下文。',
+    'context.loading': '正在读取模型配置…',
+    'context.save': '保存上下文',
+    'context.saving': '正在保存…',
+    'context.saved': '上下文配置已保存，后续模型请求会使用新设置。',
+    'context.error': '无法读取上下文配置。请确认插件主机端已更新并重启 DSH 后重试。',
+    'error.invalid-context-window': '请输入正整数 tokens 数。',
+    'error.context-window-exceeded': '此设置超过了模型目录声明的最大上下文窗口。',
+    'error.model-not-found': '模型已不在当前列表中，请重新读取配置。',
+    'action.more': '连接管理',
+    'action.less': '收起连接管理',
+    'manage.refresh.help': '请求时会自动续期；仅在授权异常时手动刷新，无需重新登录。',
+    'manage.reconnect.help': '重新进行设备验证，以恢复此账号的授权。',
+    'manage.reload.help': '只重新读取本机状态，不刷新授权，也不同步模型。',
+    'manage.disconnect.help': '删除本机授权和未修改的插件模型项，不影响 ChatGPT 账号。',
     'model.attention.detail': '确认同步后会保留本地新增项与已编辑字段。',
     'action.connect': '连接 ChatGPT',
     'action.connecting': '正在连接…',
@@ -120,7 +148,35 @@ const EN = {
     'model.synced': 'Models synced',
     'model.attention': 'Models need syncing',
     'model.count': '{count} models available',
-    'model.synced.detail': 'Account, built-in, and locally edited catalogs are safely merged.',
+    'model.synced.detail': 'Account and DSH models are merged, keeping your local edits.',
+    'model.sync.help': 'Fetch the available model list without switching accounts or resetting local settings.',
+    'context.title': 'Model context',
+    'context.help': 'Set each model’s total context window (input + output). Model sync preserves this setting.',
+    'context.model': 'Model',
+    'context.window': 'Context window',
+    'context.default': 'Use model default',
+    'context.million': '1M · 1,000,000 tokens',
+    'context.custom': 'Custom',
+    'context.tokens': 'Custom token count',
+    'context.current': 'Current: {count} tokens',
+    'context.maximum': 'Catalog limit: {count} tokens',
+    'context.unknown': 'The catalog does not declare a maximum. Local settings do not unlock upstream access; confirm model and account support.',
+    'context.limit.help': 'Values above the catalog limit cannot be saved. Availability still depends on your account and upstream service.',
+    'context.empty': 'Sync models to configure their context windows.',
+    'context.loading': 'Reading model settings…',
+    'context.save': 'Save context',
+    'context.saving': 'Saving…',
+    'context.saved': 'Context settings saved. Subsequent model requests will use the new setting.',
+    'context.error': 'Could not read context settings. Ensure the host plugin is updated and restart DSH before retrying.',
+    'error.invalid-context-window': 'Enter a positive whole number of tokens.',
+    'error.context-window-exceeded': 'This exceeds the maximum context window declared by the model catalog.',
+    'error.model-not-found': 'The model is no longer in the current list. Reload settings.',
+    'action.more': 'Connection management',
+    'action.less': 'Hide connection management',
+    'manage.refresh.help': 'Authorization renews automatically during requests. Refresh manually only to recover from authorization errors.',
+    'manage.reconnect.help': 'Repeat device verification to restore authorization for this account.',
+    'manage.reload.help': 'Read local status only. Does not renew authorization or sync models.',
+    'manage.disconnect.help': 'Remove local authorization and unchanged plugin models, not your ChatGPT account.',
     'model.attention.detail': 'Syncing preserves local additions and fields you edited.',
     'action.connect': 'Connect ChatGPT',
     'action.connecting': 'Connecting…',
@@ -250,8 +306,8 @@ window.__ModuleLoader__.load({
   color: var(--dsw-alias-label-primary, #0f1115);
 }
 .oasub-wrap, .oasub-wrap * { box-sizing: border-box; }
-/* Align the header icon and footer button with the card's outer frame. Only the card is inset. */
-.oasub-header, .oasub-footer { padding-inline: 0; }
+/* The header stays flush with the card's outer frame. */
+.oasub-header { padding-inline: 0; }
 .oasub-header { display: flex; align-items: center; gap: 12px; }
 .oasub-mark {
   display: grid;
@@ -307,6 +363,16 @@ window.__ModuleLoader__.load({
 .oasub-model-title { font-size: 13px; font-weight: 500; line-height: 19px; }
 .oasub-model-detail { color: var(--dsw-alias-label-tertiary, #81858c); font-size: 11px; line-height: 17px; }
 .oasub-actions { display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }
+.oasub-management { display: flex; flex-direction: column; gap: 16px; border-top: 1px solid var(--dsw-alias-border-l2, rgba(15, 17, 21, .14)); padding-top: 16px; }
+.oasub-manage-row { display: flex; align-items: center; justify-content: space-between; gap: 16px; }
+.oasub-manage-row > .oasub-button { flex: 0 0 auto; }
+.oasub-button.disclosure { border-color: transparent; border-radius: 8px; color: var(--dsw-alias-label-secondary, #61666b); padding: 4px 0; min-height: 32px; align-self: flex-start; }
+.oasub-context { display: flex; flex-direction: column; gap: 10px; }
+.oasub-field { display: flex; flex-direction: column; gap: 6px; flex: 1 1 180px; min-width: 0; font-size: 12px; }
+.oasub-context > .oasub-field { flex: none; }
+.oasub-select { width: 100%; min-height: 36px; border: 1px solid var(--oasub-control-border); border-radius: 8px; padding: 7px 10px; font: inherit; color: inherit; background: var(--dsw-alias-bg-layer-1, #fff); }
+.oasub-select:focus-visible { outline: 2px solid var(--dsw-alias-brand-primary, #4176e6); outline-offset: 2px; }
+.oasub-select:disabled { opacity: .55; }
 .oasub-button {
   appearance: none;
   min-height: 36px;
@@ -379,6 +445,7 @@ window.__ModuleLoader__.load({
   .oasub-status-line { flex-direction: column; }
   .oasub-button { flex: 1 1 auto; }
   .oasub-button.quiet { margin-left: 0; }
+  .oasub-manage-row { align-items: flex-start; flex-direction: column; gap: 8px; }
 }
 @media (forced-colors: active) {
   .oasub-button { border-color: ButtonText; }
@@ -414,6 +481,7 @@ window.__ModuleLoader__.load({
             'timeout', 'invalid-response', 'process-exited', 'credential-write-failed', 'credential-changed',
             'settings-unavailable', 'models-unavailable', 'models-empty', 'models-confirmation-required',
             'settings-conflict', 'settings-write-failed', 'ownership-save-failed', 'cancelled', 'unknown',
+            'invalid-context-window', 'context-window-exceeded', 'model-not-found',
         ]);
         function allowedCode(value) {
             return typeof value === 'string' && ERROR_CODES.has(value) ? value : undefined;
@@ -560,6 +628,25 @@ window.__ModuleLoader__.load({
             }
             return { synced: true, count: raw.count, warningCode: raw.warningCode == null ? undefined : allowedCode(raw.warningCode) ?? 'unknown' };
         }
+        function positiveInteger(value) {
+            return typeof value === 'number' && Number.isSafeInteger(value) && value > 0 ? value : undefined;
+        }
+        function parseModelContexts(value) {
+            const raw = recordOf(value);
+            if (raw === null || typeof raw.revision !== 'number' || !Number.isSafeInteger(raw.revision) || raw.revision < 0 || !Array.isArray(raw.models)) {
+                throw new ClientFailure('invalid-response');
+            }
+            const models = [];
+            for (const item of raw.models) {
+                const row = recordOf(item);
+                if (!row || typeof row.id !== 'string' || !row.id || models.some((model) => model.id === row.id))
+                    throw new ClientFailure('invalid-response');
+                models.push({ id: row.id, name: typeof row.name === 'string' ? row.name : undefined,
+                    contextWindow: positiveInteger(row.contextWindow), defaultContextWindow: positiveInteger(row.defaultContextWindow),
+                    maxContextWindow: positiveInteger(row.maxContextWindow), customized: row.customized === true });
+            }
+            return { revision: raw.revision, models };
+        }
         function safeVerificationUrl(value) {
             if (typeof value !== 'string' || value !== value.trim())
                 return null;
@@ -591,6 +678,14 @@ window.__ModuleLoader__.load({
             const [cancelPending, setCancelPending] = React.useState(false);
             const [confirm, setConfirm] = React.useState(null);
             const [statusRevision, setStatusRevision] = React.useState(0);
+            const [managementOpen, setManagementOpen] = React.useState(false);
+            const [contexts, setContexts] = React.useState(null);
+            const [contextLoading, setContextLoading] = React.useState(false);
+            const [contextError, setContextError] = React.useState(null);
+            const [modelId, setModelId] = React.useState('');
+            // null means no pending edit; '' selects the synchronized model default.
+            const [contextDraft, setContextDraft] = React.useState(null);
+            const [contextChoice, setContextChoice] = React.useState(null);
             const actionLock = React.useRef(false);
             const cancelAcknowledged = React.useRef(false);
             const flowObserved = React.useRef(false);
@@ -649,6 +744,32 @@ window.__ModuleLoader__.load({
                     controller.abort();
                 };
             }, [connection, statusRevision]);
+            React.useEffect(() => {
+                if (!configured) {
+                    setContexts(null);
+                    setContextDraft(null);
+                    setContextChoice(null);
+                    return;
+                }
+                const controller = new AbortController();
+                setContextLoading(true);
+                setContextError(null);
+                remoteCall(connection, 'getModelContexts', {}, controller.signal).then(parseModelContexts).then((result) => {
+                    if (controller.signal.aborted)
+                        return;
+                    setContexts(result);
+                    setModelId((id) => result.models.some((model) => model.id === id) ? id : result.models[0]?.id ?? '');
+                    setContextDraft(null);
+                    setContextChoice(null);
+                }).catch((error) => {
+                    if (!controller.signal.aborted) {
+                        setContexts(null);
+                        setContextError(errorKey(error, 'context.error'));
+                    }
+                }).finally(() => { if (!controller.signal.aborted)
+                    setContextLoading(false); });
+                return () => controller.abort();
+            }, [connection, configured, statusRevision]);
             React.useEffect(() => {
                 if (props.subscribeReset === undefined)
                     return;
@@ -967,6 +1088,41 @@ window.__ModuleLoader__.load({
                     }
                 });
             };
+            const selectedModel = contexts?.models.find((model) => model.id === modelId);
+            const savedContext = selectedModel?.customized && selectedModel.contextWindow ? String(selectedModel.contextWindow) : '';
+            const draft = contextDraft ?? savedContext;
+            const contextMode = contextChoice ?? (draft === '' ? 'default' : draft === '1000000' ? 'million' : 'custom');
+            const requestedContext = draft === '' ? null : /^\d+$/.test(draft) ? positiveInteger(Number(draft)) : undefined;
+            const contextValidation = requestedContext === undefined ? 'error.invalid-context-window'
+                : requestedContext !== null && selectedModel?.maxContextWindow !== undefined && requestedContext > selectedModel.maxContextWindow
+                    ? 'error.context-window-exceeded' : null;
+            const contextDirty = contextDraft !== null && (draft !== savedContext || (draft === '' && selectedModel?.customized === true));
+            const saveContext = () => {
+                const signal = lifetime.current?.signal;
+                if (phaseRef.current !== 'idle' || actionLock.current || !signal || signal.aborted || !contexts || !selectedModel || !contextDirty || contextValidation || contextLoading || statusLoading)
+                    return;
+                actionLock.current = true;
+                changePhase('saving-context');
+                setNotice(null);
+                remoteCall(connection, 'setModelContext', {
+                    modelId: selectedModel.id, contextWindow: requestedContext, revision: contexts.revision,
+                }, signal, MUTATION_TIMEOUT_MS).then((result) => {
+                    if (signal.aborted)
+                        return;
+                    if (result?.saved !== true)
+                        throw new ClientFailure('invalid-response');
+                    setNotice({ tone: 'success', key: 'context.saved' });
+                }).catch((error) => {
+                    if (!signal.aborted)
+                        setNotice({ tone: 'error', key: failureCode(error) === 'timeout' ? 'error.long-action' : errorKey(error, 'error.settings-write-failed') });
+                }).finally(() => {
+                    if (!signal.aborted) {
+                        actionLock.current = false;
+                        changePhase('idle');
+                        reloadStatus();
+                    }
+                });
+            };
             const selectCode = () => {
                 codeRef.current?.focus();
                 codeRef.current?.select();
@@ -1014,6 +1170,7 @@ window.__ModuleLoader__.load({
                         type: 'button',
                         className: 'oasub-button ' + (info.modelsSynced ? '' : 'primary'),
                         disabled: busy,
+                        'aria-describedby': 'oasub-sync-help',
                         onClick: requestModelSync,
                     }, phase === 'syncing' ? t('action.syncing') : t(info.modelsSynced ? 'action.updateModels' : 'action.sync'))
                     : el('button', {
@@ -1021,25 +1178,32 @@ window.__ModuleLoader__.load({
                         className: 'oasub-button primary',
                         disabled: busy || !ready,
                         onClick: () => startAuthorization('device_code'),
-                    }, phase === 'starting' || phase === 'authorizing' ? t('action.connecting') : t('action.connect')), configured
+                    }, phase === 'starting' || phase === 'authorizing' ? t('action.connecting') : t('action.connect')), configured && info.credentialState !== 'valid'
                     ? el('button', {
-                        type: 'button',
-                        className: 'oasub-button',
-                        disabled: busy || !ready,
+                        type: 'button', className: 'oasub-button primary', disabled: busy || !ready,
+                        title: t(info.refreshable ? 'manage.refresh.help' : 'manage.reconnect.help'),
                         onClick: () => startAuthorization(info.refreshable ? 'refresh' : 'device_code'),
-                    }, phase === 'starting' || phase === 'authorizing'
-                        ? t('action.refreshing')
-                        : t(info.refreshable ? 'action.refresh' : 'action.reconnect'))
-                    : null, info.cleanupAvailable
-                    ? el('button', {
-                        type: 'button',
-                        className: 'oasub-button danger quiet',
-                        disabled: busy,
-                        onClick: () => openConfirm('disconnect'),
-                    }, phase === 'disconnecting' ? t('action.disconnecting') : t('action.disconnect'))
-                    : null));
-            return el('div', { className: 'oasub-wrap' }, el('header', { className: 'oasub-header' }, el('div', { className: 'oasub-mark', 'aria-hidden': true }, el(OpenAIIcon, { size: 24 })), el('div', { className: 'oasub-heading' }, el('h2', { className: 'oasub-title' }, t('title')), el('p', { className: 'oasub-subtitle' }, t('subtitle')))), statusCard, statusError !== null
-                ? el('div', { className: 'oasub-notice error', role: 'alert' }, t(statusError), info !== null ? ' ' + t('status.stale') : null, el('button', { type: 'button', className: 'oasub-button quiet', disabled: statusLoading, onClick: reloadStatus }, t('action.retry'))) : null, el('div', { className: 'oasub-actions oasub-footer' }, el('button', { ref: reloadRef, type: 'button', className: 'oasub-button', disabled: statusLoading, onClick: reloadStatus }, t(statusLoading ? 'status.reloading' : 'action.reload'))), device !== null
+                    }, phase === 'starting' || phase === 'authorizing' ? t('action.refreshing') : t(info.refreshable ? 'action.refresh' : 'action.reconnect'))
+                    : null), configured ? el('div', { id: 'oasub-sync-help', className: 'oasub-status-detail' }, t('model.sync.help')) : null);
+            return el('div', { className: 'oasub-wrap' }, el('header', { className: 'oasub-header' }, el('div', { className: 'oasub-mark', 'aria-hidden': true }, el(OpenAIIcon, { size: 24 })), el('div', { className: 'oasub-heading' }, el('h2', { className: 'oasub-title' }, t('title')), el('p', { className: 'oasub-subtitle' }, t('subtitle')))), statusCard, configured ? el('section', { className: 'oasub-card oasub-context', 'aria-labelledby': 'oasub-context-title' }, el('div', { id: 'oasub-context-title', className: 'oasub-status-title' }, t('context.title')), el('div', { className: 'oasub-status-detail' }, t('context.help')), contextLoading ? el('div', { role: 'status', className: 'oasub-status-detail' }, t('context.loading')) : null, contextError ? el('div', { role: 'alert', className: 'oasub-notice error' }, t(contextError), el('button', { type: 'button', className: 'oasub-button quiet', disabled: contextLoading, onClick: reloadStatus }, t('action.retry'))) : null, !contextLoading && contexts?.models.length === 0 ? el('div', { className: 'oasub-status-detail' }, t('context.empty')) : null, selectedModel ? el('div', { className: 'oasub-context' }, el('div', { className: 'oasub-actions' }, el('label', { className: 'oasub-field' }, t('context.model'), el('select', { className: 'oasub-select', 'aria-label': t('context.model'), value: modelId, disabled: busy || contextLoading || statusLoading,
+                onChange: (event) => { setModelId(event.currentTarget.value); setContextDraft(null); setContextChoice(null); } }, contexts?.models.map((model) => el('option', { key: model.id, value: model.id }, model.name && model.name !== model.id ? model.name + ' (' + model.id + ')' : model.id)))), el('label', { className: 'oasub-field' }, t('context.window'), el('select', { className: 'oasub-select', 'aria-label': t('context.window'), value: contextMode, disabled: busy || contextLoading || statusLoading,
+                'aria-describedby': 'oasub-context-limit',
+                onChange: (event) => {
+                    const choice = event.currentTarget.value === 'default' ? 'default' : event.currentTarget.value === 'million' ? 'million' : 'custom';
+                    setContextChoice(choice);
+                    setContextDraft(choice === 'default' ? '' : choice === 'million' ? '1000000' : '-');
+                } }, el('option', { value: 'default' }, t('context.default') + (selectedModel.defaultContextWindow ? ' · ' + selectedModel.defaultContextWindow.toLocaleString() : '')), el('option', { value: 'million', disabled: selectedModel.maxContextWindow !== undefined && selectedModel.maxContextWindow < 1_000_000 }, t('context.million')), el('option', { value: 'custom' }, t('context.custom'))))), contextMode === 'custom' ? el('label', { className: 'oasub-field' }, t('context.tokens'), el('input', { className: 'oasub-select', type: 'text', inputMode: 'numeric', 'aria-label': t('context.tokens'),
+                value: draft === '-' ? '' : draft, disabled: busy || contextLoading || statusLoading,
+                'aria-invalid': contextValidation !== null, 'aria-describedby': 'oasub-context-limit',
+                onChange: (event) => setContextDraft(event.currentTarget.value || '-') })) : null, selectedModel.contextWindow ? el('div', { className: 'oasub-status-detail' }, t('context.current', { count: selectedModel.contextWindow.toLocaleString() })) : null, el('div', { id: 'oasub-context-limit', className: 'oasub-status-detail' }, selectedModel.maxContextWindow ? t('context.maximum', { count: selectedModel.maxContextWindow.toLocaleString() }) + ' · ' + t('context.limit.help') : t('context.unknown')), contextDirty && contextValidation ? el('div', { role: 'alert', className: 'oasub-status-detail' }, t(contextValidation)) : null, contextDirty ? el('div', { className: 'oasub-actions' }, el('button', { type: 'button', className: 'oasub-button primary', disabled: busy || contextLoading || statusLoading || contextValidation !== null,
+                onClick: saveContext }, t(phase === 'saving-context' ? 'context.saving' : 'context.save'))) : null) : null) : null, statusError !== null
+                ? el('div', { className: 'oasub-notice error', role: 'alert' }, t(statusError), info !== null ? ' ' + t('status.stale') : null, el('button', { type: 'button', className: 'oasub-button quiet', disabled: statusLoading, onClick: reloadStatus }, t('action.retry'))) : null, el('button', { ref: reloadRef, type: 'button', className: 'oasub-button disclosure',
+                'aria-expanded': managementOpen, 'aria-controls': managementOpen ? 'oasub-management' : undefined,
+                onClick: () => setManagementOpen((open) => !open) }, t(managementOpen ? 'action.less' : 'action.more')), managementOpen ? el('section', { id: 'oasub-management', className: 'oasub-management', 'aria-label': t('action.more') }, configured && info?.credentialState === 'valid' ? el('div', { className: 'oasub-manage-row' }, el('div', { className: 'oasub-status-detail', id: 'oasub-refresh-help' }, t(info.refreshable ? 'manage.refresh.help' : 'manage.reconnect.help')), el('button', { type: 'button', className: 'oasub-button', disabled: busy || !ready,
+                'aria-describedby': 'oasub-refresh-help',
+                onClick: () => startAuthorization(info.refreshable ? 'refresh' : 'device_code') }, phase === 'starting' || phase === 'authorizing' ? t('action.refreshing') : t(info.refreshable ? 'action.refresh' : 'action.reconnect'))) : null, el('div', { className: 'oasub-manage-row' }, el('div', { className: 'oasub-status-detail', id: 'oasub-reload-help' }, t('manage.reload.help')), el('button', { type: 'button', className: 'oasub-button', disabled: statusLoading,
+                'aria-describedby': 'oasub-reload-help', onClick: reloadStatus }, t(statusLoading ? 'status.reloading' : 'action.reload'))), info?.cleanupAvailable ? el('div', { className: 'oasub-manage-row' }, el('div', { className: 'oasub-status-detail', id: 'oasub-disconnect-help' }, t('manage.disconnect.help')), el('button', { type: 'button', className: 'oasub-button', disabled: busy,
+                'aria-describedby': 'oasub-disconnect-help', onClick: () => openConfirm('disconnect') }, t(phase === 'disconnecting' ? 'action.disconnecting' : 'action.disconnect'))) : null) : null, device !== null
                 ? el('section', { className: 'oasub-card oasub-device', 'aria-label': t('device.title') }, el('div', { className: 'oasub-device-head' }, el('div', { className: 'oasub-status-title' }, t('device.title')), el('div', { className: 'oasub-status-detail' }, t('device.detail'))), el('input', { ref: codeRef, className: 'oasub-code', type: 'text', readOnly: true, value: device.code,
                     'aria-label': t('device.code'), autoComplete: 'off', spellCheck: false, onFocus: (event) => event.currentTarget.select() }), el('div', { className: 'oasub-actions' }, device.url !== null
                     ? el('a', { className: 'oasub-button primary', href: device.url, target: '_blank', rel: 'noopener noreferrer',

package/dist/errors.d.ts

@@ -1,5 +1,5 @@
 /** Stable, non-sensitive failures shared by the host's public boundaries. */
-export declare const FAILURE_CODES: readonly ['credentials-unavailable', 'shell-unavailable', 'timer-unavailable', 'component-unavailable', 'runtime-unsupported', 'busy', 'invalid-method', 'not-connected', 'not-refreshable', 'device-auth-disabled', 'access-denied', 'authorization-expired', 'rate-limited', 'network', 'timeout', 'invalid-response', 'process-exited', 'credential-write-failed', 'credential-changed', 'settings-unavailable', 'models-unavailable', 'models-empty', 'models-confirmation-required', 'settings-conflict', 'settings-write-failed', 'ownership-save-failed', 'cancelled', 'unknown'];
+export declare const FAILURE_CODES: readonly ['credentials-unavailable', 'shell-unavailable', 'timer-unavailable', 'component-unavailable', 'runtime-unsupported', 'busy', 'invalid-method', 'not-connected', 'not-refreshable', 'device-auth-disabled', 'access-denied', 'authorization-expired', 'rate-limited', 'network', 'timeout', 'invalid-response', 'process-exited', 'credential-write-failed', 'credential-changed', 'settings-unavailable', 'models-unavailable', 'models-empty', 'models-confirmation-required', 'settings-conflict', 'settings-write-failed', 'ownership-save-failed', 'invalid-context-window', 'context-window-exceeded', 'model-not-found', 'cancelled', 'unknown'];
 export type FailureCode = typeof FAILURE_CODES[number];
 /** The marker survives RPC implementations which serialize only Error.message. */
 export declare class SubscriptionError extends Error {

package/dist/errors.js

@@ -6,7 +6,8 @@ export const FAILURE_CODES = [
     'network', 'timeout', 'invalid-response', 'process-exited', 'credential-write-failed',
     'credential-changed', 'settings-unavailable', 'models-unavailable', 'models-empty',
     'models-confirmation-required', 'settings-conflict', 'settings-write-failed',
-    'ownership-save-failed', 'cancelled', 'unknown',
+    'ownership-save-failed', 'invalid-context-window', 'context-window-exceeded', 'model-not-found',
+    'cancelled', 'unknown',
 ];
 /** The marker survives RPC implementations which serialize only Error.message. */
 export class SubscriptionError extends Error {

package/dist/host.d.ts

@@ -2,6 +2,7 @@ export { authModuleCandidates } from './platform.js';
 import { type FailureCode } from './errors.js';
 import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
 import type { Context } from '@deepseek-ai/cordis';
+import { type ModelContextInfo } from './models.js';
 /** Stable progress keys let the browser localize notices without exposing diagnostics. */
 type FlowNoticeKind = 'requesting-code' | 'enter-code' | 'refreshing' | 'models-synced' | 'models-sync-failed';
 /** Host-side notice queued for the polling client. Mirrors `AuthorizationNotice`. */
@@ -49,6 +50,11 @@ interface ModelSyncResult {
     count: number;
     warningCode?: 'ownership-save-failed';
 }
+/** Local-only context settings, guarded by the DSH settings revision. */
+interface ModelContextsResult {
+    revision: number;
+    models: ModelContextInfo[];
+}
 /** `openaiSubscription/poll` reply. */
 type PollResult = {
     status: 'idle';
@@ -71,6 +77,7 @@ declare class OpenAISubscriptionController extends TypertRemoteService {
     private syncingModels;
     private modelSyncController;
     private modelDiscovery;
+    private configuringModel;
     private disconnecting;
     constructor(ctx: Context);
     private credentials;
@@ -106,6 +113,15 @@ declare class OpenAISubscriptionController extends TypertRemoteService {
         ok: true;
     }>;
     syncModels(confirmed?: unknown): Promise<ModelSyncResult>;
+    private assertContextIdle;
+    /** Never discovers models or resolves authorization: this is a local settings read. */
+    private readContextSettings;
+    getModelContexts(): Promise<ModelContextsResult>;
+    /** Only the named row changes; stale tabs must reload rather than overwrite. */
+    setModelContext(modelId: unknown, contextWindow: unknown, revision: unknown): Promise<{
+        saved: true;
+    }>;
+    private performContextUpdate;
     /** Serialize disconnect with authorization and sync, including other tabs. */
     logout(): Promise<{
         ok: true;

package/dist/host.js

@@ -6,7 +6,7 @@ import { DRIVER_REFRESH, parseDriverMessage, runDeviceDriver } from './driver.js
 import { SubscriptionError, failureCode, oauthFailureCode, logFailure } from './errors.js';
 import { Remote, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
 import { normalizeOAuthCredential } from './oauth.js';
-import { discoverOpenAIModels, mergeModelCatalog, removeManagedModels, } from './models.js';
+import { discoverOpenAIModels, describeModelContexts, configureModelContext, validateContextWindow, mergeModelCatalog, removeManagedModels, } from './models.js';
 /** Plugin-owned authorization metadata. */
 const KEY = 'dsh-openai-subscription/chatgpt';
 /** Credential consumed by the `openai-codex` model provider. */
@@ -66,7 +66,7 @@ function settingsConflict(error) {
 }
 //#endregion
 /** Register source-mode remote methods without decorator syntax. */
-const REMOTE_METHODS = ['status', 'authorize', 'poll', 'cancel', 'syncModels', 'logout'];
+const REMOTE_METHODS = ['status', 'authorize', 'poll', 'cancel', 'syncModels', 'getModelContexts', 'setModelContext', 'logout'];
 function decorateRemoteMethods(klass, methods) {
     const initializers = [];
     for (const name of methods) {
@@ -93,6 +93,7 @@ class OpenAISubscriptionController extends TypertRemoteService {
     syncingModels = null;
     modelSyncController = null;
     modelDiscovery = discoverOpenAIModels;
+    configuringModel = null;
     disconnecting = null;
     constructor(ctx) {
         super(ctx, 'openaiSubscription', { namespace: 'openaiSubscription' });
@@ -100,7 +101,7 @@ class OpenAISubscriptionController extends TypertRemoteService {
         ctx.effect(() => async () => {
             this.pendingBridge?.controller.abort();
             this.modelSyncController?.abort();
-            await Promise.allSettled([this.pendingBridge?.task, this.syncingModels, this.disconnecting]);
+            await Promise.allSettled([this.pendingBridge?.task, this.syncingModels, this.configuringModel, this.disconnecting]);
             this.pendingBridge = null;
         });
     }
@@ -474,6 +475,19 @@ class OpenAISubscriptionController extends TypertRemoteService {
             throw new SubscriptionError(failureCode(error, 'models-unavailable'));
         }
         const discovered = unionModelCatalog(remoteModels, builtinModels);
+        const builtinById = new Map(builtinModels.map((model) => [model.id, model]));
+        const limitsById = new Map((remoteModels.contextLimits ?? []).map((limit) => [limit.id, limit.maxContextWindow]));
+        const contextMetadata = discovered.map(({ id }) => {
+            const catalogContextWindow = builtinById.get(id)?.contextWindow;
+            const maxContextWindow = limitsById.get(id);
+            return {
+                id,
+                ...(typeof catalogContextWindow === 'number' && Number.isSafeInteger(catalogContextWindow) && catalogContextWindow > 0
+                    ? { catalogContextWindow } : {}),
+                ...(typeof maxContextWindow === 'number' && Number.isSafeInteger(maxContextWindow) && maxContextWindow > 0
+                    ? { maxContextWindow } : {}),
+            };
+        });
         for (let attempt = 0; attempt < 3; attempt++) {
             if (signal.aborted)
                 throw new SubscriptionError('cancelled');
@@ -528,6 +542,7 @@ class OpenAISubscriptionController extends TypertRemoteService {
                             ...payload,
                             managedPiRoute: payload.managedPiRoute === true || createdRoute,
                             managedModels: merged.managed,
+                            modelContextMetadata: contextMetadata,
                             suppressedModelIds: merged.suppressed,
                             modelsSyncedAt: Date.now(),
                         },
@@ -603,7 +618,7 @@ class OpenAISubscriptionController extends TypertRemoteService {
         if (method !== 'device_code' && method !== 'refresh') {
             return { started: false, error: '[openai-subscription:invalid-method]', errorCode: 'invalid-method' };
         }
-        if (this.disconnecting != null || this.syncingModels !== null || (this.pendingBridge !== null && !this.pendingBridge.done)) {
+        if (this.disconnecting != null || this.configuringModel != null || this.syncingModels !== null || (this.pendingBridge !== null && !this.pendingBridge.done)) {
             return { started: false, error: '[openai-subscription:busy]', errorCode: 'busy' };
         }
         this.pendingBridge = null;
@@ -785,7 +800,7 @@ class OpenAISubscriptionController extends TypertRemoteService {
         return { ok: true };
     }
     async syncModels(confirmed) {
-        if (this.disconnecting != null || (this.pendingBridge !== null && !this.pendingBridge.done))
+        if (this.disconnecting != null || this.configuringModel != null || (this.pendingBridge !== null && !this.pendingBridge.done))
             throw new SubscriptionError('busy');
         try {
             return await this.synchronizeModels(undefined, confirmed === true);
@@ -794,6 +809,78 @@ class OpenAISubscriptionController extends TypertRemoteService {
             throw new SubscriptionError(failureCode(error, 'settings-write-failed'));
         }
     }
+    assertContextIdle() {
+        if (this.disconnecting != null || this.syncingModels !== null || this.configuringModel != null
+            || (this.pendingBridge !== null && !this.pendingBridge.done))
+            throw new SubscriptionError('busy');
+    }
+    /** Never discovers models or resolves authorization: this is a local settings read. */
+    async readContextSettings() {
+        const settings = this.ctx.get('settings');
+        if (settings === undefined || typeof settings.describe !== 'function')
+            throw new SubscriptionError('settings-unavailable');
+        const credentials = this.credentials();
+        if (credentials === undefined)
+            throw new SubscriptionError('credentials-unavailable');
+        let owner;
+        try {
+            owner = await credentials.readRecord(KEY);
+        }
+        catch (error) {
+            throw new SubscriptionError(failureCode(error, 'credentials-unavailable'));
+        }
+        const descriptor = settings.describe({ redactSecrets: true }).find((entry) => entry.ns === 'llm-pi-ai');
+        if (descriptor === undefined || !Number.isSafeInteger(descriptor.revision) || descriptor.revision < 0) {
+            throw new SubscriptionError('settings-unavailable');
+        }
+        return { settings, descriptor, plugin: grantPayload(owner) };
+    }
+    async getModelContexts() {
+        this.assertContextIdle();
+        try {
+            const { descriptor, plugin } = await this.readContextSettings();
+            // A sync/logout may have started while the local record was being read.
+            this.assertContextIdle();
+            return {
+                revision: descriptor.revision,
+                models: describeModelContexts(explicitRouteModels(descriptor.user, descriptor.base), plugin.managedModels, plugin.modelContextMetadata, piRoute(descriptor.value)?.defaultContextWindow),
+            };
+        }
+        catch (error) {
+            throw new SubscriptionError(failureCode(error, 'settings-unavailable'));
+        }
+    }
+    /** Only the named row changes; stale tabs must reload rather than overwrite. */
+    async setModelContext(modelId, contextWindow, revision) {
+        validateContextWindow(contextWindow);
+        if (typeof revision !== 'number' || !Number.isSafeInteger(revision) || revision < 0) {
+            throw new SubscriptionError('settings-conflict');
+        }
+        this.assertContextIdle();
+        const pending = this.performContextUpdate(modelId, contextWindow, revision).catch((error) => {
+            throw new SubscriptionError(failureCode(error, 'settings-write-failed'));
+        });
+        this.configuringModel = pending;
+        try {
+            return await pending;
+        }
+        finally {
+            if (this.configuringModel === pending)
+                this.configuringModel = null;
+        }
+    }
+    async performContextUpdate(modelId, contextWindow, revision) {
+        const { settings, descriptor, plugin } = await this.readContextSettings();
+        if (typeof settings.mutate !== 'function')
+            throw new SubscriptionError('settings-unavailable');
+        if (descriptor.revision !== revision)
+            throw new SubscriptionError('settings-conflict');
+        const models = configureModelContext(explicitRouteModels(descriptor.user, descriptor.base), plugin.managedModels, plugin.modelContextMetadata, modelId, contextWindow);
+        // Settings' optimistic revision check is the final guard against file edits
+        // and other processes. Never retry the same UI intent against a newer state.
+        await settings.mutate('llm-pi-ai', [{ op: 'set', path: ['providers', 'openai-codex', 'models'], value: models }], revision);
+        return { saved: true };
+    }
     /** Serialize disconnect with authorization and sync, including other tabs. */
     async logout() {
         if (this.disconnecting != null)
@@ -831,6 +918,9 @@ class OpenAISubscriptionController extends TypertRemoteService {
         const activeSync = this.syncingModels;
         if (activeSync !== null)
             await activeSync.catch(() => { });
+        const activeContextUpdate = this.configuringModel;
+        if (activeContextUpdate != null)
+            await activeContextUpdate.catch(() => { });
         const credentials = this.credentials();
         if (credentials === undefined)
             throw new SubscriptionError('credentials-unavailable');

package/dist/models.d.ts

@@ -21,11 +21,34 @@ export interface ModelDiscoveryOptions {
     signal?: AbortSignal;
     timeoutMs?: number;
 }
+export interface ModelContextLimit {
+    id: string;
+    /** A disclosed upper bound, not the model's default context window. */
+    maxContextWindow: number;
+}
 export interface DiscoveredModelCatalog {
     /** Models the account-scoped picker exposes. */
     models: ModelProfile[];
     /** Every valid slug mentioned upstream, including explicitly hidden rows. */
     seenIds: string[];
+    /** Kept outside DSH model profiles: its schema only accepts contextWindow. */
+    contextLimits?: ModelContextLimit[];
+}
+/** Non-secret catalog facts kept alongside the ownership snapshot. */
+export interface ModelContextMetadata {
+    id: string;
+    maxContextWindow?: number;
+    /** The installed catalog fallback used when an explicit field is removed. */
+    catalogContextWindow?: number;
+}
+/** Safe, deliberately whitelisted facts for the context settings UI. */
+export interface ModelContextInfo {
+    id: string;
+    name?: string;
+    contextWindow?: number;
+    defaultContextWindow?: number;
+    maxContextWindow?: number;
+    customized: boolean;
 }
 export interface MergedModelCatalog {
     /** Complete explicit settings list: live remote entries plus local custom entries. */
@@ -42,6 +65,16 @@ export interface MergedModelCatalog {
 export declare function parseOpenAIModelCatalog(value: unknown): DiscoveredModelCatalog;
 /** Fetch the live model catalog available to this exact ChatGPT account. */
 export declare function discoverOpenAIModels(credential: ModelDiscoveryCredential, options?: ModelDiscoveryOptions): Promise<DiscoveredModelCatalog>;
+/** Read only context metadata; never pass unknown settings or owner fields to Web. */
+export declare function describeModelContexts(existing: unknown, previousManaged: unknown, contextMetadata: unknown, defaultContextWindow?: unknown): ModelContextInfo[];
+/** Validate at the public boundary before reading or modifying any services. */
+export declare function validateContextWindow(value: unknown): asserts value is number | null;
+/**
+ * Update exactly one explicit row as a local edit. The provider snapshot stays
+ * untouched, so subsequent three-way merges retain this choice. Null restores
+ * that snapshot's field (or removes it to inherit the installed catalog).
+ */
+export declare function configureModelContext(existing: unknown, previousManaged: unknown, contextMetadata: unknown, modelId: unknown, contextWindow: unknown): ModelProfile[];
 /** Return local model entries not still equal to the plugin's previous provider snapshot. */
 export declare function removeManagedModels(existing: unknown, previousManaged: unknown): ModelProfile[];
 /**

package/dist/models.js

@@ -74,6 +74,7 @@ export function parseOpenAIModelCatalog(value) {
     if (root === null || !Array.isArray(root.models))
         throw new SubscriptionError('invalid-response');
     const candidates = [];
+    const contextLimits = [];
     const seenIds = new Set();
     const adoptedIds = new Set();
     for (let index = 0; index < root.models.length; index++) {
@@ -88,7 +89,15 @@ export function parseOpenAIModelCatalog(value) {
             continue;
         const model = { id };
         const name = nonEmptyString(raw.display_name);
-        const contextWindow = positiveInteger(raw.context_window) ?? positiveInteger(raw.max_context_window);
+        const defaultContextWindow = positiveInteger(raw.context_window);
+        const maxContextWindow = positiveInteger(raw.max_context_window);
+        // A larger advertised maximum is opt-in, not permission to enlarge every
+        // model automatically. Inconsistent defaults must not exceed a known cap.
+        const contextWindow = defaultContextWindow === undefined ? maxContextWindow
+            : maxContextWindow === undefined ? defaultContextWindow
+                : Math.min(defaultContextWindow, maxContextWindow);
+        if (maxContextWindow !== undefined)
+            contextLimits.push({ id, maxContextWindow });
         const input = normalizeInputs(raw.input_modalities);
         const reasoningEfforts = normalizeReasoning(raw.supported_reasoning_levels);
         if (name !== undefined)
@@ -110,7 +119,7 @@ export function parseOpenAIModelCatalog(value) {
     const models = candidates.map((candidate) => candidate.model);
     if (models.length === 0)
         throw new SubscriptionError('models-empty');
-    return { models, seenIds: [...seenIds] };
+    return { models, seenIds: [...seenIds], ...(contextLimits.length > 0 ? { contextLimits } : {}) };
 }
 function abortableSignal(parent, timeoutMs) {
     const controller = new AbortController();
@@ -290,6 +299,68 @@ function modelProfiles(value) {
     }
     return result;
 }
+/** Read only context metadata; never pass unknown settings or owner fields to Web. */
+export function describeModelContexts(existing, previousManaged, contextMetadata, defaultContextWindow) {
+    const managed = new Map(modelProfiles(previousManaged).map((model) => [model.id, model]));
+    const metadata = new Map(modelProfiles(contextMetadata).map((model) => [model.id, model]));
+    return modelProfiles(existing).map((model) => {
+        const previous = managed.get(model.id);
+        const facts = metadata.get(model.id);
+        // Metadata presence proves this id was compared with the installed catalog.
+        // Without it (pre-upgrade snapshots), an absent field is unknown rather than
+        // an invented fallback that could misrepresent DSH's actual model capacity.
+        const inherited = facts === undefined ? undefined
+            : positiveInteger(facts.catalogContextWindow) ?? positiveInteger(defaultContextWindow);
+        const current = positiveInteger(model.contextWindow) ?? inherited;
+        const baseline = positiveInteger(previous?.contextWindow) ?? inherited;
+        const max = positiveInteger(facts?.maxContextWindow);
+        const name = nonEmptyString(model.name);
+        return {
+            id: model.id,
+            ...(name === undefined ? {} : { name }),
+            ...(current === undefined ? {} : { contextWindow: current }),
+            ...(baseline === undefined ? {} : { defaultContextWindow: baseline }),
+            ...(max === undefined ? {} : { maxContextWindow: max }),
+            customized: !Object.is(model.contextWindow, previous?.contextWindow),
+        };
+    });
+}
+/** Validate at the public boundary before reading or modifying any services. */
+export function validateContextWindow(value) {
+    if (value !== null && positiveInteger(value) === undefined)
+        throw new SubscriptionError('invalid-context-window');
+}
+/**
+ * Update exactly one explicit row as a local edit. The provider snapshot stays
+ * untouched, so subsequent three-way merges retain this choice. Null restores
+ * that snapshot's field (or removes it to inherit the installed catalog).
+ */
+export function configureModelContext(existing, previousManaged, contextMetadata, modelId, contextWindow) {
+    validateContextWindow(contextWindow);
+    if (typeof modelId !== 'string' || modelId.length === 0 || !Array.isArray(existing)) {
+        throw new SubscriptionError('model-not-found');
+    }
+    const matches = existing.filter((model) => recordOf(model)?.id === modelId);
+    if (matches.length !== 1)
+        throw new SubscriptionError('model-not-found');
+    const previous = modelProfiles(previousManaged).find((model) => model.id === modelId);
+    const facts = modelProfiles(contextMetadata).find((model) => model.id === modelId);
+    const next = contextWindow === null ? positiveInteger(previous?.contextWindow) : contextWindow;
+    const max = positiveInteger(facts?.maxContextWindow);
+    if (next !== undefined && max !== undefined && next > max)
+        throw new SubscriptionError('context-window-exceeded');
+    // Preserve every other row/field, including fields this plugin does not own.
+    return existing.map((candidate) => {
+        if (recordOf(candidate)?.id !== modelId)
+            return candidate;
+        const model = { ...candidate };
+        if (next === undefined)
+            delete model.contextWindow;
+        else
+            model.contextWindow = next;
+        return model;
+    });
+}
 function jsonEqual(left, right) {
     if (Object.is(left, right))
         return true;

package/docs/DSH_SETTINGS_ICONS.md

@@ -43,13 +43,29 @@ For a Bun global installation, that root is typically `~/.bun/install/global`.
 Confirm the actual installation location before applying.
 
 `--check` validates without writing. `--apply` is idempotent for the same patch.
-The script requires `@babel/parser` and `esbuild` resolvable from `ROOT`; both
-were already installed in the tested environment. It does not install tools,
-access credentials, change account settings, restart DSH, or launch a server.
-It is never invoked automatically by plugin installation.
+For each of `@babel/parser` and `esbuild`, the script resolves `ROOT` first, then
+its own package directory (not the invoking working directory). Only a missing
+module falls back; a broken installed tool is reported rather than hidden.
+These tools are development dependencies of this repository. If `--check`
+reports a missing tool, install them in a source checkout, **not the DSH host**:
 
-`--check` 只检查，`--apply` 才修改，重复执行不会叠加补丁。构建工具必须已存在于
-DSH 安装目录，脚本不会联网安装。它不读取凭证、不修改账号设置，也不重启服务。
+```sh
+# In a source checkout of dsh-openai-subscription:
+pnpm install --frozen-lockfile
+node scripts/patch-dsh-settings-icons.mjs --root /path/to/dsh --check
+```
+
+A production-only/plugin installation may omit development dependencies; run
+the script from the prepared source checkout instead. Dependency installation
+is a separate explicit action and can write to pnpm's store. The patch script
+itself never installs tools, accesses credentials, changes account settings,
+restarts DSH, or launches a server. Plugin installation never invokes it.
+
+`--check` 只检查，`--apply` 才修改，重复执行不会叠加补丁。构建工具逐个先从
+DSH 安装目录解析，缺少时再从脚本所属插件目录解析，不依赖当前工作目录；已存在
+但损坏的工具会报错。工具作为本仓库开发依赖安装，无需修改宿主的依赖清单。
+生产安装可能省略开发依赖，此时先在源码仓库显式运行 `pnpm install --frozen-lockfile`，
+再从该仓库执行脚本。脚本本身不会联网安装、读取凭证、修改账号设置或重启服务。
 
 Supported package versions (also guarded by exact SHA-256 file hashes):
 
@@ -80,15 +96,24 @@ minifier symbol names blindly or substitute a different Web server.
 渲染器外，还通过 AST 定位静态注册表并用 esbuild 重新生成 Web 产物。新文件
 采用内容哈希命名，保留原文件，最后切换 HTML 入口。
 
-Rebuild/reinstall this plugin's client bundle as well. The tested DSH client-HMR
-file poller notices modified built plugin bundles, but the **shell change always
-requires refreshing the existing DSH page**. If that poller is disabled, arrange
-a DSH restart yourself before refreshing. Editing TypeScript alone does not
-rebuild installed plugin bundles; no automatic source-watcher behavior is assumed.
-
-插件自身也要重新构建并安装。当前测试环境的文件监听会拾取已构建插件的变化，
-但 **Web 壳层修改必须刷新现有页面**；没有监听时，还需自行安排重启 DSH。
-仅修改 TypeScript 源码不会更新已安装的 GUI，脚本也不会自动重启正在进行的会话。
+The installed plugin client must also contain its `icon: OpenAIIcon` registration;
+if it already does, no plugin rebuild is needed for this host-only patch.
+Otherwise rebuild/reinstall this plugin's client bundle as well. The tested DSH
+client-HMR file poller notices modified built plugin bundles, but the **shell
+change always requires refreshing the existing DSH page**. If that poller is
+disabled, arrange a DSH restart yourself before refreshing. Editing TypeScript
+alone does not rebuild installed plugin bundles. A DSH source checkout's
+`pnpm run dev:web` watcher and the host's client-HMR receiver are different:
+confirm the watcher before expecting source edits to rebuild automatically.
+This compiled global installation does not provide that source-checkout script;
+do not start a replacement Vite server to update an existing DSH GUI.
+
+已安装的插件客户端也必须包含 `icon: OpenAIIcon` 注册；如果已有，修补宿主时
+无需重复构建插件，否则先构建并安装插件。当前测试环境的文件监听会拾取已构建
+插件的变化，但 **Web 壳层修改必须刷新现有页面**；没有监听时，还需自行安排
+重启 DSH。`pnpm run dev:web` 源码构建 watcher 不等于客户端 HMR 接收器，未确认
+watcher 时不能宣称源码修改会自动生效。本编译包安装根不提供源码 watcher 脚本，
+另起 Vite 服务也不会更新现有 GUI。脚本不会自动重启正在进行的会话。
 
 ## Backup and restore / 备份与还原
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-openai-subscription",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "ChatGPT subscription sign-in for DeepSeek Harness via OpenAI device authorization.",
   "type": "module",
   "packageManager": "pnpm@10.6.3",
@@ -75,10 +75,11 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.2-rc.1"
+    "@deepseek-ai/dsh-client-connection": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.2-rc.1"
   },
   "devDependencies": {
+    "@babel/parser": "^8.0.4",
     "@deepseek-ai/cordis": "^4.0.2",
     "@deepseek-ai/cordis-plugin-timer": "^1.1.4",
     "@deepseek-ai/dsh-authorization": "^0.1.2-rc.1",
@@ -87,6 +88,7 @@
     "@deepseek-ai/dsh-shell": "^0.1.2-rc.1",
     "@deepseek-ai/dsh-typert-protocol": "^0.1.2-rc.1",
     "@types/node": "^25.6.1",
+    "esbuild": "^0.28.2",
     "typescript": "^7.0.2"
   }
 }

package/scripts/patch-dsh-settings-icons.mjs

@@ -7,8 +7,8 @@
  *   node scripts/patch-dsh-settings-icons.mjs --root /path/to/dsh --apply
  *   node scripts/patch-dsh-settings-icons.mjs --root /path/to/dsh --restore
  *
- * Requires @babel/parser and esbuild resolvable from ROOT (already present in
- * the tested installation). This is an exact-version AND SHA-256 guarded patch,
+ * Requires @babel/parser and esbuild: resolve each from ROOT first, then this
+ * patch package's own dependencies. This is an exact-version AND SHA-256 guarded patch,
  * NOT a general updater: an upstream update must be reviewed before extending
  * the allowlist. No network, credential files, process discovery, or restarts.
  *
@@ -156,9 +156,21 @@ function imports(source, parse) {
   return values.sort()
 }
 export function loadToolchain(root) {
-  const require = createRequire(join(root, 'package.json'))
-  try { return { parse: require('@babel/parser').parse, transform: require('esbuild').transform } }
-  catch (error) { throw new Error('Build requires @babel/parser and esbuild resolvable from --root; no files changed', { cause: error }) }
+  const resolvers = [createRequire(join(root, 'package.json')), createRequire(new URL('../package.json', import.meta.url))]
+  const load = (name) => {
+    for (const require of resolvers) {
+      let path
+      try { path = require.resolve(name) }
+      catch (error) {
+        if (error.code !== 'MODULE_NOT_FOUND') throw error
+        continue
+      }
+      // Only missing resolution falls back: do not hide broken installed tools.
+      return require(path)
+    }
+    throw new Error(`Build requires ${name} resolvable from --root or the patch package; install this package's development dependencies with pnpm install; no files changed`)
+  }
+  return { parse: load('@babel/parser').parse, transform: load('esbuild').transform }
 }
 function checkVersions(root) {
   for (const [name, version] of Object.entries(VERSIONS)) {