dsh-packycode-api 1.3.4 → 1.3.5

package/lib/index.js

@@ -2,11 +2,11 @@ import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypt
 import { homedir } from "node:os";
 import { basename, dirname, join, posix, resolve, win32 } from "node:path";
 import z from "@deepseek-ai/schemastery";
+import { constants, existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
 import { spawn } from "node:child_process";
-import { constants, existsSync, readFileSync, readdirSync } from "node:fs";
 import { lstat, mkdir, open, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
-import { createServer } from "node:http";
 import { fileURLToPath } from "node:url";
+import { createServer } from "node:http";
 import { HarnessError, LlmError, QUOTA_EXCEEDED_CODE, createUserMessage, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { credentialKey } from "@deepseek-ai/dsh-credentials";
@@ -565,6 +565,362 @@ function withProgramDirOnPath(env, program, platform = process.platform) {
 	};
 }
 //#endregion
+//#region src/plugin-version.js
+/**
+* Version self-knowledge for the settings panel.
+*
+* The running version comes from this package. The latest version comes from
+* the npm registry. An in-place update is only offered for a registry install,
+* and it installs that exact version with the host's own pnpm — never through
+* `dsh plugin --profile desktop`, which the desktop app refuses. The install
+* runs under the profile's own `minimumReleaseAge`: a version installed past
+* it would sit in the profile's lockfile, and pnpm then refuses every later
+* plugin install in that profile until the version is old enough. A version
+* pnpm still holds back is reported as pending, with when it clears. Registry
+* bodies and package-manager output stay host-side.
+*
+* @module dsh-packycode-api/plugin-version
+*/
+const PACKAGE_NAME = "dsh-packycode-api";
+const NPM_REGISTRY_LATEST_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+const DEFAULT_VERSION_TTL_MS = 5 * 6e4;
+const DEFAULT_VERSION_TIMEOUT_MS = 1e4;
+const DEFAULT_UPDATE_TIMEOUT_MS = 18e4;
+const RELEASE_AGE_ERROR = /ERR_PNPM_(?:NO_MATURE_MATCHING_VERSION|MINIMUM_RELEASE_AGE_VIOLATION)/u;
+const RELEASE_AGE_ENTRY = /(\S+@\S+) was published at (\S+?), within the minimumReleaseAge cutoff \((\S+?)\)/gu;
+/**
+* Recognize pnpm refusing a version that is younger than its
+* `minimumReleaseAge`, whether the version was requested or already sits in
+* the lockfile. Each refused entry reads `<name>@<version> was published at
+* <time>, within the minimumReleaseAge cutoff (<time>)`.
+* @param output - the install's stdout and stderr.
+* @param finishedAt - when the install ended; pnpm drew its cutoff then.
+* @returns undefined when this is not a release-age refusal; otherwise
+*   `{ availableAt }`, when the youngest refused entry clears, if pnpm said.
+*/
+function releaseAgeRefusal(output, finishedAt) {
+	const text = String(output ?? "").replace(/\u001b\[[0-9;]*m/gu, "");
+	if (!RELEASE_AGE_ERROR.test(text)) return void 0;
+	let availableAt;
+	for (const [, , published, cutoff] of text.matchAll(RELEASE_AGE_ENTRY)) {
+		const clears = Date.parse(published) + (finishedAt - Date.parse(cutoff));
+		if (Number.isFinite(clears) && (availableAt === void 0 || clears > availableAt)) availableAt = clears;
+	}
+	return availableAt === void 0 ? {} : { availableAt };
+}
+/** Parse a strict `x.y.z[-pre][+build]` version; anything else is undefined. */
+function parseSemver(value) {
+	if (typeof value !== "string") return void 0;
+	const match = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/u.exec(value.trim());
+	if (match === null) return void 0;
+	return {
+		major: Number(match[1]),
+		minor: Number(match[2]),
+		patch: Number(match[3]),
+		pre: match[4]
+	};
+}
+/** Compare two versions: -1/0/1, or undefined when either side is not semver. */
+function compareSemver(a, b) {
+	const left = parseSemver(a);
+	const right = parseSemver(b);
+	if (left === void 0 || right === void 0) return void 0;
+	for (const key of [
+		"major",
+		"minor",
+		"patch"
+	]) if (left[key] !== right[key]) return left[key] < right[key] ? -1 : 1;
+	if (left.pre === right.pre) return 0;
+	if (left.pre === void 0) return 1;
+	if (right.pre === void 0) return -1;
+	return left.pre < right.pre ? -1 : 1;
+}
+/**
+* Classify how the running package reached the profile. Only registry specs
+* may be updated in place; local checkouts belong to the owner's iteration.
+*/
+function classifySpec(spec) {
+	if (typeof spec !== "string" || spec === "") return "unknown";
+	if (/^(?:link|file):/u.test(spec)) return "link";
+	if (/^(?:\d|[~^*])/u.test(spec)) return "npm";
+	return "unknown";
+}
+const readManifest = async (path) => {
+	try {
+		const parsed = JSON.parse(await readFile(path, "utf8"));
+		return parsed !== null && typeof parsed === "object" ? parsed : void 0;
+	} catch {
+		return;
+	}
+};
+/**
+* A zero exit only proves the command ran. pnpm can skip a too-new version
+* and still exit zero, so the landed manifest is what makes the answer true.
+*/
+async function confirmInstalled({ profileDir, expected, settleDelayMs, attempts = 3 }) {
+	for (let attempt = 1; attempt <= attempts; attempt += 1) {
+		if ((await readManifest(join(profileDir, "node_modules", "dsh-packycode-api", "package.json")))?.version === expected) return;
+		if (attempt < attempts) await new Promise((resolve) => {
+			setTimeout(resolve, settleDelayMs);
+		});
+	}
+	throw new Error("PackyCode plugin update did not install the requested version");
+}
+/**
+* Find the profile that owns this running installation. pnpm symlinks resolve
+* to the same realpath on both sides. When no realpath matches, fall back to
+* the only profile that declares the dependency at all.
+*/
+async function findInstall({ dshHome, ownPackageJsonUrl }) {
+	let ownReal;
+	try {
+		ownReal = await realpath(fileURLToPath(ownPackageJsonUrl));
+	} catch {
+		ownReal = void 0;
+	}
+	let entries = [];
+	try {
+		entries = await readdir(join(dshHome, "profiles"), { withFileTypes: true });
+	} catch {
+		entries = [];
+	}
+	const declared = [];
+	for (const entry of entries) {
+		if (!entry.isDirectory()) continue;
+		const profileDir = join(dshHome, "profiles", entry.name);
+		const spec = (await readManifest(join(profileDir, "package.json")))?.dependencies?.[PACKAGE_NAME];
+		if (typeof spec !== "string") continue;
+		declared.push({
+			profile: entry.name,
+			spec
+		});
+		if (ownReal === void 0) continue;
+		try {
+			if (await realpath(join(profileDir, "node_modules", "dsh-packycode-api", "package.json")) === ownReal) return {
+				kind: classifySpec(spec),
+				profile: entry.name
+			};
+		} catch {}
+	}
+	if (declared.length === 1) return {
+		kind: classifySpec(declared[0].spec),
+		profile: declared[0].profile
+	};
+	return { kind: "unknown" };
+}
+const isExistingPath = (value) => typeof value === "string" && value !== "" && existsSync(value);
+/** Anchored to the file name so a directory that merely contains the word cannot match. */
+const PNPM_SCRIPT = /[\\/]pnpm\.(?:mjs|cjs|js)$/u;
+const dshRuntimeRoot = (value) => isExistingPath(value) && existsSync(join(value, "node_modules", "@deepseek-ai", "dsh", "package.json")) ? value : void 0;
+/**
+* Locate the package manager that owns this profile.
+*
+* `dsh plugin --profile desktop` is refused by the desktop app, so the update
+* installs with pnpm directly. The desktop host puts the bundled pnpm in its
+* own arguments; nothing is guessed from the entry script.
+*/
+function resolvePnpm({ argv } = {}) {
+	const entries = Array.isArray(argv) ? argv : [];
+	for (const entry of entries) if (isExistingPath(entry) && PNPM_SCRIPT.test(entry)) return entry;
+	for (const entry of entries) {
+		const root = dshRuntimeRoot(entry);
+		if (root === void 0) continue;
+		const script = join(root, "..", "pnpm", "bin", "pnpm.mjs");
+		if (existsSync(script)) return script;
+	}
+}
+function resolveLauncher({ argv, execPath }) {
+	const pnpm = resolvePnpm({ argv });
+	if (pnpm === void 0) return {
+		command: "pnpm",
+		prefix: []
+	};
+	return {
+		command: execPath,
+		prefix: [pnpm]
+	};
+}
+/** Run pnpm host-side. Its output is never returned to the browser. */
+function spawnRunCommand({ command, args, cwd }, { signal, timeoutMs }) {
+	return new Promise((resolve, reject) => {
+		if (signal?.aborted) {
+			reject(signal.reason instanceof Error ? signal.reason : /* @__PURE__ */ new Error("PackyCode plugin update aborted"));
+			return;
+		}
+		const controller = new AbortController();
+		const onAbort = () => controller.abort(signal.reason);
+		signal?.addEventListener("abort", onAbort, { once: true });
+		const timer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("PackyCode plugin update timed out")), timeoutMs);
+		let settled = false;
+		const settle = (callback, value) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			signal?.removeEventListener("abort", onAbort);
+			callback(value);
+		};
+		let child;
+		try {
+			child = spawn(command, args, {
+				stdio: [
+					"ignore",
+					"pipe",
+					"pipe"
+				],
+				signal: controller.signal,
+				...cwd === void 0 ? {} : { cwd }
+			});
+		} catch (error) {
+			settle(reject, error);
+			return;
+		}
+		let stdout = "";
+		let stderr = "";
+		child.stdout?.on("data", (chunk) => {
+			stdout = (stdout + chunk).slice(-8192);
+		});
+		child.stderr?.on("data", (chunk) => {
+			stderr = (stderr + chunk).slice(-8192);
+		});
+		child.on("error", (error) => settle(reject, error));
+		child.on("close", (code) => {
+			if (controller.signal.aborted) {
+				const reason = controller.signal.reason;
+				settle(reject, reason instanceof Error ? reason : /* @__PURE__ */ new Error("PackyCode plugin update aborted"));
+				return;
+			}
+			settle(resolve, {
+				code: code ?? 1,
+				stdout,
+				stderr
+			});
+		});
+	});
+}
+/**
+* The running version, the latest registry version, which profile installed
+* this copy, and registry-spec updates against that profile.
+*/
+function createPackyCodePluginManager({ fetchImpl = ambientFetch, runCommand = spawnRunCommand, execPath = process.execPath, argv = process.argv, env = process.env, ownPackageJsonUrl = new URL("../package.json", import.meta.url), registryUrl = NPM_REGISTRY_LATEST_URL, now = Date.now, ttlMs = DEFAULT_VERSION_TTL_MS, timeoutMs = DEFAULT_VERSION_TIMEOUT_MS, updateTimeoutMs = DEFAULT_UPDATE_TIMEOUT_MS, settleDelayMs = 250 } = {}) {
+	if (typeof fetchImpl !== "function") throw new Error("PackyCode plugin manager requires fetch");
+	if (typeof runCommand !== "function") throw new Error("PackyCode plugin manager requires runCommand");
+	const dshHome = typeof env.DSH_HOME === "string" && env.DSH_HOME !== "" ? env.DSH_HOME : join(homedir(), ".dsh");
+	const launcher = resolveLauncher({
+		argv,
+		execPath
+	});
+	let updating = false;
+	const fetchLatest = async (signal) => {
+		let response;
+		try {
+			response = await boundedFetch(registryUrl, { headers: { Accept: "application/json" } }, {
+				fetchImpl,
+				timeoutMs,
+				signal
+			});
+		} catch (error) {
+			if (error.aborted) throw error.cause;
+			throw new Error("PackyCode plugin version check failed");
+		}
+		if (!response.ok) throw new Error("PackyCode plugin version check failed");
+		let version;
+		try {
+			version = (await response.json())?.version;
+		} catch {
+			version = void 0;
+		}
+		if (parseSemver(version) === void 0) throw new Error("PackyCode plugin version check failed");
+		return version;
+	};
+	const readOwnVersion = async () => {
+		const version = (await readManifest(fileURLToPath(ownPackageJsonUrl)))?.version;
+		if (parseSemver(version) === void 0) throw new Error("PackyCode plugin version is unavailable");
+		return version;
+	};
+	const load = async (signal) => {
+		signal?.throwIfAborted();
+		const [current, install, latest] = await Promise.all([
+			readOwnVersion(),
+			findInstall({
+				dshHome,
+				ownPackageJsonUrl
+			}),
+			fetchLatest(signal)
+		]);
+		return {
+			current,
+			latest,
+			updateAvailable: compareSemver(latest, current) === 1,
+			install,
+			fetchedAt: now()
+		};
+	};
+	const cache = createCachedRead(load, {
+		ttlMs,
+		now
+	});
+	return Object.freeze({
+		read: (options) => cache.read(options),
+		async update({ signal } = {}) {
+			signal?.throwIfAborted();
+			if (updating) throw new Error("PackyCode plugin update is already running");
+			updating = true;
+			try {
+				const install = await findInstall({
+					dshHome,
+					ownPackageJsonUrl
+				});
+				if (install.kind === "link") throw new Error("PackyCode plugin is installed from a local checkout");
+				if (install.kind !== "npm" || install.profile === void 0) throw new Error("PackyCode plugin update could not find the owning profile");
+				const latest = await fetchLatest(signal);
+				const profileDir = join(dshHome, "profiles", install.profile);
+				let result;
+				try {
+					result = await runCommand({
+						command: launcher.command,
+						args: [
+							...launcher.prefix,
+							"add",
+							"--save-exact",
+							`${PACKAGE_NAME}@${latest}`
+						],
+						cwd: profileDir
+					}, {
+						signal,
+						timeoutMs: updateTimeoutMs
+					});
+				} catch (error) {
+					if (signal?.aborted) throw error;
+					throw new Error("PackyCode plugin update failed");
+				}
+				if (result.code !== 0) {
+					const refusal = releaseAgeRefusal(`${result.stdout ?? ""}\n${result.stderr ?? ""}`, now());
+					if (refusal !== void 0) return {
+						version: latest,
+						profile: install.profile,
+						pending: true,
+						...refusal
+					};
+					throw new Error("PackyCode plugin update failed");
+				}
+				await confirmInstalled({
+					profileDir,
+					expected: latest,
+					settleDelayMs
+				});
+				cache.invalidate();
+				return {
+					version: latest,
+					profile: install.profile
+				};
+			} finally {
+				updating = false;
+			}
+		},
+		invalidate: () => cache.invalidate()
+	});
+}
+//#endregion
 //#region src/claude-binary.js
 /**
 * Finding and starting the official Claude Code CLI.
@@ -578,10 +934,18 @@ function withProgramDirOnPath(env, program, platform = process.platform) {
 */
 /** The npm package the official CLI ships as. */
 const CLAUDE_NPM_PACKAGE = "@anthropic-ai/claude-code";
+/** The oldest CLI that takes every option the transport passes (`--permission-prompts` arrived in 2.1.259). */
+const CLAUDE_MIN_VERSION = "2.1.259";
+/**
+* Whether a detected CLI is older than the transport needs. An unknown
+* version is not judged; a CLI that then refuses an option still says so.
+* @param version - the version `claude --version` printed.
+*/
+const isClaudeCliOutdated = (version) => compareSemver(version, CLAUDE_MIN_VERSION) === -1;
 /** Isolated CLI home; the plugin owns the endpoint and key it runs with. */
 const DEFAULT_CLAUDE_CONFIG_DIR = join(homedir(), ".dsh", "packycode-claude-cli");
 /** What a request reports when no CLI could be started at all. */
-const CLAUDE_MISSING_MESSAGE = "本机没有可用的 Claude Code CLI，而当前 Key 的 Claude 分组只接受官方 CLI 发出的请求。请在 设置 → PackyCode → Claude Code CLI 安装，或在终端运行 npm install -g @anthropic-ai/claude-code，然后重发。 / Claude Code CLI is not installed on this device, and this key's Claude group only serves the official CLI. Install it under Settings → PackyCode, or run: npm install -g @anthropic-ai/claude-code";
+const CLAUDE_MISSING_MESSAGE = "本机没有可用的 Claude Code CLI，而当前 Key 的 Claude 分组只接受官方 CLI 发出的请求。请在 设置 → PackyCode → Claude Code CLI 安装，或在终端运行 npm install -g @anthropic-ai/claude-code --allow-scripts=@anthropic-ai/claude-code，然后重发。 / Claude Code CLI is not installed on this device, and this key's Claude group only serves the official CLI. Install it under Settings → PackyCode, or run: npm install -g @anthropic-ai/claude-code --allow-scripts=@anthropic-ai/claude-code";
 /** The CLI's file names on PATH: the native installer ships an `.exe`, npm a `.cmd` launcher. */
 const claudeFileNames = (platform) => platform === "win32" ? ["claude.exe", "claude.cmd"] : ["claude"];
 /**
@@ -683,23 +1047,40 @@ function resolveSpawnCommand(binary, { platform = process.platform, exists = exi
 //#endregion
 //#region src/claude-install.js
 /**
-* Detecting, and installing, the local Claude Code CLI.
+* Detecting, installing and updating the local Claude Code CLI.
 *
 * Claude requests on a key whose group serves only the official client are
 * sent by this device's Claude Code CLI, so the settings panel shows whether
 * one is installed (and which version), and offers to install it with
 * `npm install -g @anthropic-ai/claude-code` — the same command on macOS and
-* Windows. Installation runs on the host, never in a shell built from user
-* text: npm's arguments are constants.
+* Windows — or to update one older than the transport needs. Both run on the
+* host, never in a shell built from user text: their arguments are constants.
+*
+* npm 12 skips install scripts unless they are allowed, and the CLI's
+* postinstall is what puts its native binary in place, so every npm install
+* allows the package's scripts (npm 10 and 11 accept the option as well).
 *
 * @module dsh-packycode-api/claude-install
 */
-const CLAUDE_INSTALL_COMMAND = `npm install -g ${CLAUDE_NPM_PACKAGE}`;
+const ALLOW_SCRIPTS = `--allow-scripts=${CLAUDE_NPM_PACKAGE}`;
+const CLAUDE_INSTALL_COMMAND = `npm install -g ${CLAUDE_NPM_PACKAGE} ${ALLOW_SCRIPTS}`;
+/** How an npm install of the CLI is updated. */
+const CLAUDE_NPM_UPDATE_COMMAND = `npm install -g ${CLAUDE_NPM_PACKAGE}@latest ${ALLOW_SCRIPTS}`;
+/** How any other install (the native installer's, Homebrew's) is updated: by the CLI itself. */
+const CLAUDE_SELF_UPDATE_COMMAND = "claude update";
 const INSTALL_ARGS = Object.freeze([
 	"install",
 	"-g",
-	CLAUDE_NPM_PACKAGE
+	CLAUDE_NPM_PACKAGE,
+	ALLOW_SCRIPTS
 ]);
+const NPM_UPDATE_ARGS = Object.freeze([
+	"install",
+	"-g",
+	`${CLAUDE_NPM_PACKAGE}@latest`,
+	ALLOW_SCRIPTS
+]);
+const SELF_UPDATE_ARGS = Object.freeze(["update"]);
 const PREFIX_ARGS = Object.freeze(["prefix", "-g"]);
 const VERSION_TIMEOUT_MS = 2e4;
 const PREFIX_TIMEOUT_MS = 2e4;
@@ -768,6 +1149,28 @@ function locateNpm({ platform = process.platform, home = homedir(), env = proces
 	}).find((candidate) => exists(candidate));
 }
 /**
+* Whether a located CLI is npm's global package. npm's own update must then
+* be used: the CLI's `claude update` runs npm without allowing the package's
+* scripts, which on npm 12 reports success and leaves no native binary.
+* @param binary - the located CLI.
+* @param options - platform and a realpath seam.
+*/
+function isNpmClaudeInstall(binary, { platform = process.platform, realpath = realpathSync } = {}) {
+	if (typeof binary !== "string" || binary === "") return false;
+	if (platform === "win32" && /\.(?:cmd|bat)$/iu.test(binary)) return true;
+	let resolved = binary;
+	try {
+		resolved = realpath(binary);
+	} catch {}
+	return /[\\/]node_modules[\\/]@anthropic-ai[\\/]claude-code[\\/]/u.test(resolved);
+}
+/**
+* The parent environment without the user's own Claude settings: a
+* `DISABLE_AUTOUPDATER`, config directory or key there must not steer the
+* plugin's update.
+*/
+const withoutClaudeSettings = (env) => Object.fromEntries(Object.entries(env ?? {}).filter(([name, value]) => value !== void 0 && !/^(?:ANTHROPIC_|CLAUDE_|CLAUDECODE|DISABLE_)/iu.test(name)));
+/**
 * Classify an npm failure so the panel can say what to do about it.
 * @param result - the captured npm run.
 * @returns `{ code, detail }`.
@@ -864,7 +1267,7 @@ function runCaptured(spawnImpl, command, args, options, timeoutMs) {
 *   applies without a restart), plus platform, environment, and process seams.
 * @returns `{ binary, detect, install, status }`.
 */
-function createClaudeCliManager({ explicitPath = () => "", platform = process.platform, home = homedir(), env = process.env, execPath = process.execPath, configDir = DEFAULT_CLAUDE_CONFIG_DIR, spawnImpl = spawn, exists = existsSync, readFile = (file) => readFileSync(file, "utf8"), readdir, now = () => Date.now() } = {}) {
+function createClaudeCliManager({ explicitPath = () => "", platform = process.platform, home = homedir(), env = process.env, execPath = process.execPath, configDir = DEFAULT_CLAUDE_CONFIG_DIR, spawnImpl = spawn, exists = existsSync, readFile = (file) => readFileSync(file, "utf8"), realpath = realpathSync, readdir, now = () => Date.now() } = {}) {
 	const path = pathFor(platform);
 	const configured = () => {
 		const value = explicitPath();
@@ -968,6 +1371,7 @@ function createClaudeCliManager({ explicitPath = () => "", platform = process.pl
 		});
 		return detecting;
 	};
+	/** The install or update in flight or last finished; `action` says which. */
 	let installation = { state: "idle" };
 	let installing;
 	const install = () => {
@@ -976,6 +1380,7 @@ function createClaudeCliManager({ explicitPath = () => "", platform = process.pl
 		if (program === void 0) {
 			installation = {
 				state: "failed",
+				action: "install",
 				code: "npm-missing",
 				finishedAt: now()
 			};
@@ -983,6 +1388,7 @@ function createClaudeCliManager({ explicitPath = () => "", platform = process.pl
 		}
 		installation = {
 			state: "running",
+			action: "install",
 			startedAt: now(),
 			npm: program
 		};
@@ -991,6 +1397,7 @@ function createClaudeCliManager({ explicitPath = () => "", platform = process.pl
 			if (result.code !== 0) {
 				installation = {
 					state: "failed",
+					action: "install",
 					...explainNpmFailure(result),
 					finishedAt: now()
 				};
@@ -1000,9 +1407,11 @@ function createClaudeCliManager({ explicitPath = () => "", platform = process.pl
 			const found = await detect({ force: true });
 			installation = found.installed && found.version !== void 0 ? {
 				state: "succeeded",
+				action: "install",
 				finishedAt: now()
 			} : {
 				state: "failed",
+				action: "install",
 				code: "not-found-after-install",
 				detail: detailOf(result.stdout, result.stderr),
 				finishedAt: now()
@@ -1010,6 +1419,112 @@ function createClaudeCliManager({ explicitPath = () => "", platform = process.pl
 		}).catch((error) => {
 			installation = {
 				state: "failed",
+				action: "install",
+				code: "failed",
+				detail: error instanceof Error ? error.message : String(error),
+				finishedAt: now()
+			};
+		}).finally(() => {
+			installing = void 0;
+		});
+		return installation;
+	};
+	/** npm for an npm install of the CLI: the one beside it shares its global prefix. */
+	const npmBeside = (binary) => {
+		const beside = path.join(path.dirname(binary), platform === "win32" ? "npm.cmd" : "npm");
+		return exists(beside) ? beside : npm();
+	};
+	/**
+	* Update the located CLI the way it was installed: npm's global package
+	* through npm, anything else through `claude update` with the plugin's
+	* own CLI home. Success means the CLI now detected is new enough.
+	*/
+	const runUpdate = async () => {
+		const before = await detect({ force: true });
+		if (!before.installed || typeof before.path !== "string") {
+			installation = {
+				state: "failed",
+				action: "update",
+				code: "not-installed",
+				finishedAt: now()
+			};
+			return;
+		}
+		let result;
+		if (isNpmClaudeInstall(before.path, {
+			platform,
+			realpath
+		})) {
+			const program = npmBeside(before.path);
+			if (program === void 0) {
+				installation = {
+					state: "failed",
+					action: "update",
+					code: "npm-missing",
+					finishedAt: now()
+				};
+				return;
+			}
+			installation = {
+				...installation,
+				npm: program
+			};
+			result = await runNpm(program, NPM_UPDATE_ARGS, INSTALL_TIMEOUT_MS);
+			globalBin = void 0;
+		} else {
+			const command = resolveSpawnCommand(before.path, {
+				platform,
+				exists,
+				readFile
+			});
+			result = await runCaptured(spawnImpl, command.command, [...command.args, ...SELF_UPDATE_ARGS], { env: {
+				...withProgramDirOnPath(withoutClaudeSettings(env), before.path, platform),
+				CLAUDE_CONFIG_DIR: configDir,
+				DISABLE_TELEMETRY: "1",
+				DISABLE_ERROR_REPORTING: "1"
+			} }, INSTALL_TIMEOUT_MS);
+		}
+		const after = await detect({ force: true });
+		const from = before.version === void 0 ? {} : { from: before.version };
+		if (after.version !== void 0 && !isClaudeCliOutdated(after.version)) installation = {
+			state: "succeeded",
+			action: "update",
+			...from,
+			to: after.version,
+			finishedAt: now()
+		};
+		else if (result.code !== 0) installation = {
+			state: "failed",
+			action: "update",
+			...explainNpmFailure(result),
+			finishedAt: now()
+		};
+		else if (after.version === void 0) installation = {
+			state: "failed",
+			action: "update",
+			code: "broken-after-update",
+			detail: detailOf(after.error, result.stdout, result.stderr),
+			finishedAt: now()
+		};
+		else installation = {
+			state: "failed",
+			action: "update",
+			code: "still-outdated",
+			detail: detailOf(result.stdout, result.stderr),
+			finishedAt: now()
+		};
+	};
+	const update = () => {
+		if (installing !== void 0) return installation;
+		installation = {
+			state: "running",
+			action: "update",
+			startedAt: now()
+		};
+		installing = runUpdate().catch((error) => {
+			installation = {
+				state: "failed",
+				action: "update",
 				code: "failed",
 				detail: error instanceof Error ? error.message : String(error),
 				finishedAt: now()
@@ -1033,17 +1548,24 @@ function createClaudeCliManager({ explicitPath = () => "", platform = process.pl
 		/** The last detection, without probing again; undefined before the first. */
 		lastDetection: () => detection === void 0 ? void 0 : { ...detection },
 		install,
-		/** Wait for an install in flight; for tests and scripts. */
+		update,
+		/** Wait for an install or update in flight; for tests and scripts. */
 		settled: () => installing ?? Promise.resolve(),
 		/**
-		* What the settings panel shows. While an install runs, the last detection
-		* stands instead of probing a half-written package.
+		* What the settings panel shows. While an install or update runs, the
+		* last detection stands instead of probing a half-written package.
 		*/
 		async status({ force = false } = {}) {
 			const value = installing === void 0 ? await detect({ force }) : detection;
 			return {
 				installed: value?.installed === true,
 				...value?.version === void 0 ? {} : { version: value.version },
+				minVersion: CLAUDE_MIN_VERSION,
+				outdated: isClaudeCliOutdated(value?.version),
+				...value?.path === void 0 ? {} : { updateCommand: isNpmClaudeInstall(value.path, {
+					platform,
+					realpath
+				}) ? CLAUDE_NPM_UPDATE_COMMAND : CLAUDE_SELF_UPDATE_COMMAND },
 				...value?.path === void 0 ? {} : { path: value.path },
 				...value?.configuredPath === void 0 ? {} : { configuredPath: value.configuredPath },
 				...value?.error === void 0 ? {} : { error: value.error },
@@ -1434,7 +1956,7 @@ const classifyCliOutdated = (message) => typeof message === "string" && message.
 */
 function explainCliUnavailable(message) {
 	const detail = relayedMessage(message).replace(/^[\s\S]*?dsh_cli_unavailable:?\s*/u, "").replace(/\b\d{3}\b/gu, "").replace(/\b(?:network|connection|socket|fetch|timed?\s*out|timeout|terminated)\b/giu, "…").trim().slice(0, 300);
-	return "本机没有可用的 Claude Code CLI，而当前 Key 所在的 Claude 分组（cc）只接受官方 Claude Code 客户端。请在 设置 → PackyCode → Claude Code CLI 一键安装，或在终端执行 npm install -g @anthropic-ai/claude-code，然后重发这条消息。也可以改用 cc-sale / cc-expensive 分组的 Key，它们走插件内置的 HTTP 通道。" + (detail === "" || detail === "dsh_cli_unavailable" ? "" : `（启动失败：${detail}）`) + " / Claude Code CLI is not available, and this key's Claude group only serves the official client. Install it under Settings → PackyCode (npm install -g @anthropic-ai/claude-code), then resend.";
+	return "本机没有可用的 Claude Code CLI，而当前 Key 所在的 Claude 分组（cc）只接受官方 Claude Code 客户端。请在 设置 → PackyCode → Claude Code CLI 一键安装，或在终端执行 npm install -g @anthropic-ai/claude-code --allow-scripts=@anthropic-ai/claude-code，然后重发这条消息。也可以改用 cc-sale / cc-expensive 分组的 Key，它们走插件内置的 HTTP 通道。" + (detail === "" || detail === "dsh_cli_unavailable" ? "" : `（启动失败：${detail}）`) + " / Claude Code CLI is not available, and this key's Claude group only serves the official client. Install it under Settings → PackyCode (npm install -g @anthropic-ai/claude-code --allow-scripts=@anthropic-ai/claude-code), then resend.";
 }
 /**
 * Explain a CLI that is too old for the options this plugin passes.
@@ -1442,7 +1964,7 @@ function explainCliUnavailable(message) {
 * @returns the replacement sentence.
 */
 function explainCliOutdated(message) {
-	return `本机的 Claude Code CLI 版本过旧，不支持插件所需的参数。请在终端执行 claude update，或 npm install -g @anthropic-ai/claude-code@latest 更新后重发。 / The installed Claude Code CLI is too old for this plugin; update it (claude update). CLI said: ${relayedMessage(message).replace(/^[\s\S]*?dsh_cli_outdated:?\s*/u, "").replace(/\b\d{3}\b/gu, "").slice(0, 300)}`;
+	return `本机的 Claude Code CLI 版本过旧，插件需要 ${CLAUDE_MIN_VERSION} 或更新版本。请在 设置 → PackyCode → Claude Code CLI 点「更新 Claude Code CLI」，或在终端执行 claude update，然后重发这条消息。 / The installed Claude Code CLI is too old for this plugin (needs ${CLAUDE_MIN_VERSION} or later). Update it under Settings → PackyCode, or run claude update, then resend. CLI said: ${relayedMessage(message).replace(/^[\s\S]*?dsh_cli_outdated:?\s*/u, "").replace(/(?<![\d.])\d{3}(?!\d|\.\d)/gu, "").slice(0, 300)}`;
 }
 /**
 * Explain a client-policy refusal of a request the official CLI itself sent.
@@ -2300,7 +2822,9 @@ function baseUrlOf(input) {
 /**
 * Create the transport.
 * @param options - how to find the CLI binary (`binary()` resolves a path or
-*   throws), the isolated CLI home, the version recorded in transcripts,
+*   throws), the isolated CLI home, the detected CLI version (read once the
+*   binary is resolved: an outdated one is refused, and it is recorded in
+*   transcripts),
 *   limits, a logger, and process seams for tests.
 * @returns `{ fetch(input, init, meta), close(), stats() }`.
 */
@@ -2346,24 +2870,29 @@ function createClaudeCliTransport({ binary, configDir = DEFAULT_CLAUDE_CONFIG_DI
 		await mkdir(fallback, { recursive: true });
 		return fallback;
 	};
-	const open = async (request, meta, { oneShot }) => startClaudeCliSession({
-		binary,
-		configDir,
-		runDirectory: join(configDir, "runs", runDirectoryName()),
-		baseUrl: meta.baseUrl,
-		apiKey: meta.apiKey,
-		request,
-		conversation: splitConversation(request.messages),
-		cwd: await workingDirectory(meta.cwd),
-		sessionId: oneShot ? randomUUID() : meta.sessionId,
-		cliVersion: version(),
-		oneShot,
-		logger,
-		...spawnImpl === void 0 ? {} : { spawnImpl },
-		...platform === void 0 ? {} : { platform },
-		...parentEnv === void 0 ? {} : { parentEnv },
-		...startupTimeoutMs === void 0 ? {} : { startupTimeoutMs }
-	});
+	const open = async (request, meta, { oneShot }) => {
+		const program = await binary();
+		const cliVersion = version();
+		if (isClaudeCliOutdated(cliVersion)) throw Object.assign(/* @__PURE__ */ new Error(`Claude Code ${cliVersion} is older than ${CLAUDE_MIN_VERSION}`), { code: "CLAUDE_CLI_OUTDATED" });
+		return startClaudeCliSession({
+			binary: async () => program,
+			configDir,
+			runDirectory: join(configDir, "runs", runDirectoryName()),
+			baseUrl: meta.baseUrl,
+			apiKey: meta.apiKey,
+			request,
+			conversation: splitConversation(request.messages),
+			cwd: await workingDirectory(meta.cwd),
+			sessionId: oneShot ? randomUUID() : meta.sessionId,
+			cliVersion,
+			oneShot,
+			logger,
+			...spawnImpl === void 0 ? {} : { spawnImpl },
+			...platform === void 0 ? {} : { platform },
+			...parentEnv === void 0 ? {} : { parentEnv },
+			...startupTimeoutMs === void 0 ? {} : { startupTimeoutMs }
+		});
+	};
 	/**
 	* Send one Messages request through the CLI.
 	* @param input - the request URL the native client targeted.
@@ -2419,6 +2948,10 @@ function createClaudeCliTransport({ binary, configDir = DEFAULT_CLAUDE_CONFIG_DI
 			return await session.respond({ kind: "start" }, init?.signal);
 		} catch (error) {
 			if (init?.signal?.aborted) throw error;
+			if (error?.code === "CLAUDE_CLI_OUTDATED") {
+				logger?.warn?.("packycode-api: %s", error.message);
+				return errorResponse(400, `${CLI_OUTDATED}: ${error.message}`, CLI_OUTDATED);
+			}
 			const reason = error?.code === "CLAUDE_CLI_MISSING" ? "" : `: ${String(error?.message ?? error).slice(0, 300)}`;
 			logger?.warn?.("packycode-api: Claude Code CLI could not start%s", reason);
 			return errorResponse(400, `${CLI_UNAVAILABLE}${reason}`, CLI_UNAVAILABLE);
@@ -2452,8 +2985,9 @@ function createClaudeCliTransport({ binary, configDir = DEFAULT_CLAUDE_CONFIG_DI
 * PackyCode's `cc` group ("claude code专用") serves only the official client,
 * so a key in it sends its Claude requests through the real CLI.
 * `cc-expensive`, `cc-sale` and `claude-officially` keep the native HTTP
-* route. The user can pin either transport in the settings panel.
-* (`claude-sale` is delisted for now; it joins the CLI list if it returns.)
+* route. The groups alone decide: a cc key cannot be sent over HTTP, where
+* the gateway refuses it as a third-party client, and no other key needs the
+* CLI. (`claude-sale` is delisted for now; it joins the CLI list if it returns.)
 *
 * Only the transport changes: DSH's agent loop, tools, permissions, plan mode,
 * attachments and history are identical on both, and no other provider or
@@ -2469,33 +3003,17 @@ const HTTP_CLAUDE_GROUPS = Object.freeze([
 	"cc-sale",
 	"claude-officially"
 ]);
-/** `auto` follows the key's groups; `cli` and `http` pin one transport. */
-const CLAUDE_TRANSPORTS = Object.freeze([
-	"auto",
-	"cli",
-	"http"
-]);
-const DEFAULT_CLAUDE_TRANSPORT = "auto";
 /** Whether a catalog model is served over the Anthropic Messages protocol. */
 const isClaudeModel = (modelId) => typeof modelId === "string" && modelId.startsWith("claude-");
-/** Read the stored preference; anything unknown is the default. */
-function readClaudeTransport(value) {
-	return CLAUDE_TRANSPORTS.includes(value) ? value : DEFAULT_CLAUDE_TRANSPORT;
-}
 /**
 * Decide the transport for a Claude request.
-* @param options - the stored preference and the request key's groups, as the
-*   last group reading saw them (undefined when there is no reading yet).
+* @param options - the request key's groups, as the last group reading saw
+*   them (undefined when there is no reading yet).
 * @returns `{ transport: 'cli' | 'http', reason, groups? }`. `reason` is
-*   `preference`, `group` (the key's groups decided), or `unknown` (no reading
-*   yet; the native HTTP route stands, as it did before this choice existed).
+*   `group` (the key's groups decided) or `unknown` (no reading yet; the
+*   native HTTP route stands, as it did before the CLI route existed).
 */
-function claudeTransportFor({ preference, groups } = {}) {
-	const pinned = readClaudeTransport(preference);
-	if (pinned !== "auto") return {
-		transport: pinned,
-		reason: "preference"
-	};
+function claudeTransportFor({ groups } = {}) {
 	if (!Array.isArray(groups)) return {
 		transport: "http",
 		reason: "unknown"
@@ -3365,8 +3883,7 @@ function validateImageOptions({ model = DEFAULT_IMAGE_MODEL, quality = "auto", s
 *   plugin's own row, read through a live reference, written through
 *   `settings.update(rowId, patch)`, and announced by `loader/volatile-update`.
 *   Only volatile fields are writable there, so the host overrides stay
-*   read-only while web search, model visibility, images and the Claude
-*   transport are editable.
+*   read-only while web search, model visibility and images are editable.
 *
 * @module dsh-packycode-api/preferences
 */
@@ -3403,7 +3920,7 @@ function unwritable(message) {
 *   current source and how to replace it, what to do when the section changes,
 *   and the preference targets this fills in (host overrides, search, models).
 */
-function connectSettings(settingsCtx, { ctx, Config, namespace, source, setSource, onChange, hostPreference, searchPreference, modelPreference, imagePreference, claudePreference }) {
+function connectSettings(settingsCtx, { ctx, Config, namespace, source, setSource, onChange, hostPreference, searchPreference, modelPreference, imagePreference }) {
 	const settings = settingsCtx.settings;
 	if (typeof settings?.installSection === "function") {
 		try {
@@ -3421,7 +3938,6 @@ function connectSettings(settingsCtx, { ctx, Config, namespace, source, setSourc
 				Object.assign(searchPreference, target);
 				Object.assign(modelPreference, target);
 				if (imagePreference !== void 0) Object.assign(imagePreference, target);
-				if (claudePreference !== void 0) Object.assign(claudePreference, target);
 			}
 		} catch (error) {
 			ctx.logger?.warn?.("packycode-api: host overrides unavailable, defaults stand: %s", error.message);
@@ -3437,7 +3953,6 @@ function connectSettings(settingsCtx, { ctx, Config, namespace, source, setSourc
 	Object.assign(searchPreference, target);
 	Object.assign(modelPreference, target);
 	if (imagePreference !== void 0) Object.assign(imagePreference, target);
-	if (claudePreference !== void 0) Object.assign(claudePreference, target);
 	if (typeof settings.configure === "function") {
 		const scope = typeof settingsCtx.effect === "function" ? settingsCtx : ctx;
 		try {
@@ -4519,435 +5034,79 @@ var PackyCodeKeyRing = class {
 					label: candidate.label,
 					key: candidate.key,
 					addedAt: candidate.addedAt
-				} : candidate)
-			};
-		}));
-	}
-	/**
-	* Mark a key unusable and move the active pointer on. Called from the stream
-	* guard, so the retry of the failed step resolves the next key.
-	*/
-	async disable(id, reason) {
-		return projection(await this.#write((state) => {
-			const now = Date.now();
-			const keys = state.keys.map((candidate) => candidate.id === id ? {
-				...candidate,
-				disabledAt: now,
-				disabledReason: text$1(reason) === "" ? "unusable" : text$1(reason)
-			} : candidate);
-			if (!keys.some((candidate) => candidate.id === id)) return {
-				activeId: state.activeId,
-				keys: state.keys
-			};
-			return {
-				activeId: state.activeId === id ? (keys.find((candidate) => candidate.id !== id && candidate.disabledAt === void 0) ?? keys.find((candidate) => candidate.id !== id))?.id : state.activeId,
-				keys
-			};
-		}));
-	}
-};
-//#endregion
-//#region src/model-selection.js
-/** Profile preferences for the models advertised in PackyCode's picker. */
-/** Store exclusions so new catalog models are selected by default as well. */
-function readHiddenModels(preference) {
-	const value = fieldValue(preference?.hiddenModels);
-	if (!Array.isArray(value)) return [];
-	const hidden = new Set(value);
-	return PACKYCODE_MODEL_IDS.filter((id) => hidden.has(id));
-}
-function createModelSelectionController({ readPreference, writePreference, isWritable, onChange }) {
-	const hidden = () => readHiddenModels(readPreference());
-	let advertised = hidden().join(",");
-	const reconcile = () => {
-		const next = hidden().join(",");
-		if (next === advertised) return;
-		onChange?.();
-		advertised = next;
-	};
-	const status = () => {
-		const excluded = new Set(hidden());
-		return {
-			writable: isWritable() === true,
-			models: PACKYCODE_MODELS.map(({ id, name }) => ({
-				id,
-				name,
-				selected: !excluded.has(id)
-			}))
-		};
-	};
-	return Object.freeze({
-		status,
-		reconcile,
-		isVisible: (id) => !hidden().includes(id),
-		async update({ selectedIds } = {}) {
-			if (!Array.isArray(selectedIds) || selectedIds.some((id) => !PACKYCODE_MODEL_IDS.includes(id))) throw new Error("That PackyCode model selection is not supported");
-			if (isWritable() !== true) throw new Error("PackyCode settings are not writable in this profile");
-			const selected = new Set(selectedIds);
-			try {
-				await writePreference({ hiddenModels: PACKYCODE_MODEL_IDS.filter((id) => !selected.has(id)) });
-			} catch {
-				throw new Error("PackyCode could not save the model selection");
-			}
-			reconcile();
-			return status();
-		}
-	});
-}
-//#endregion
-//#region src/plugin-version.js
-/**
-* Version self-knowledge for the settings panel.
-*
-* The running version comes from this package. The latest version comes from
-* the npm registry. An in-place update is only offered for a registry install,
-* and it installs that exact version with the host's own pnpm — never through
-* `dsh plugin --profile desktop`, which the desktop app refuses. The install
-* runs under the profile's own `minimumReleaseAge`: a version installed past
-* it would sit in the profile's lockfile, and pnpm then refuses every later
-* plugin install in that profile until the version is old enough. A version
-* pnpm still holds back is reported as pending, with when it clears. Registry
-* bodies and package-manager output stay host-side.
-*
-* @module dsh-packycode-api/plugin-version
-*/
-const PACKAGE_NAME = "dsh-packycode-api";
-const NPM_REGISTRY_LATEST_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
-const DEFAULT_VERSION_TTL_MS = 5 * 6e4;
-const DEFAULT_VERSION_TIMEOUT_MS = 1e4;
-const DEFAULT_UPDATE_TIMEOUT_MS = 18e4;
-const RELEASE_AGE_ERROR = /ERR_PNPM_(?:NO_MATURE_MATCHING_VERSION|MINIMUM_RELEASE_AGE_VIOLATION)/u;
-const RELEASE_AGE_ENTRY = /(\S+@\S+) was published at (\S+?), within the minimumReleaseAge cutoff \((\S+?)\)/gu;
-/**
-* Recognize pnpm refusing a version that is younger than its
-* `minimumReleaseAge`, whether the version was requested or already sits in
-* the lockfile. Each refused entry reads `<name>@<version> was published at
-* <time>, within the minimumReleaseAge cutoff (<time>)`.
-* @param output - the install's stdout and stderr.
-* @param finishedAt - when the install ended; pnpm drew its cutoff then.
-* @returns undefined when this is not a release-age refusal; otherwise
-*   `{ availableAt }`, when the youngest refused entry clears, if pnpm said.
-*/
-function releaseAgeRefusal(output, finishedAt) {
-	const text = String(output ?? "").replace(/\u001b\[[0-9;]*m/gu, "");
-	if (!RELEASE_AGE_ERROR.test(text)) return void 0;
-	let availableAt;
-	for (const [, , published, cutoff] of text.matchAll(RELEASE_AGE_ENTRY)) {
-		const clears = Date.parse(published) + (finishedAt - Date.parse(cutoff));
-		if (Number.isFinite(clears) && (availableAt === void 0 || clears > availableAt)) availableAt = clears;
-	}
-	return availableAt === void 0 ? {} : { availableAt };
-}
-/** Parse a strict `x.y.z[-pre][+build]` version; anything else is undefined. */
-function parseSemver(value) {
-	if (typeof value !== "string") return void 0;
-	const match = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/u.exec(value.trim());
-	if (match === null) return void 0;
-	return {
-		major: Number(match[1]),
-		minor: Number(match[2]),
-		patch: Number(match[3]),
-		pre: match[4]
-	};
-}
-/** Compare two versions: -1/0/1, or undefined when either side is not semver. */
-function compareSemver(a, b) {
-	const left = parseSemver(a);
-	const right = parseSemver(b);
-	if (left === void 0 || right === void 0) return void 0;
-	for (const key of [
-		"major",
-		"minor",
-		"patch"
-	]) if (left[key] !== right[key]) return left[key] < right[key] ? -1 : 1;
-	if (left.pre === right.pre) return 0;
-	if (left.pre === void 0) return 1;
-	if (right.pre === void 0) return -1;
-	return left.pre < right.pre ? -1 : 1;
-}
-/**
-* Classify how the running package reached the profile. Only registry specs
-* may be updated in place; local checkouts belong to the owner's iteration.
-*/
-function classifySpec(spec) {
-	if (typeof spec !== "string" || spec === "") return "unknown";
-	if (/^(?:link|file):/u.test(spec)) return "link";
-	if (/^(?:\d|[~^*])/u.test(spec)) return "npm";
-	return "unknown";
-}
-const readManifest = async (path) => {
-	try {
-		const parsed = JSON.parse(await readFile(path, "utf8"));
-		return parsed !== null && typeof parsed === "object" ? parsed : void 0;
-	} catch {
-		return;
-	}
-};
-/**
-* A zero exit only proves the command ran. pnpm can skip a too-new version
-* and still exit zero, so the landed manifest is what makes the answer true.
-*/
-async function confirmInstalled({ profileDir, expected, settleDelayMs, attempts = 3 }) {
-	for (let attempt = 1; attempt <= attempts; attempt += 1) {
-		if ((await readManifest(join(profileDir, "node_modules", "dsh-packycode-api", "package.json")))?.version === expected) return;
-		if (attempt < attempts) await new Promise((resolve) => {
-			setTimeout(resolve, settleDelayMs);
-		});
-	}
-	throw new Error("PackyCode plugin update did not install the requested version");
-}
-/**
-* Find the profile that owns this running installation. pnpm symlinks resolve
-* to the same realpath on both sides. When no realpath matches, fall back to
-* the only profile that declares the dependency at all.
-*/
-async function findInstall({ dshHome, ownPackageJsonUrl }) {
-	let ownReal;
-	try {
-		ownReal = await realpath(fileURLToPath(ownPackageJsonUrl));
-	} catch {
-		ownReal = void 0;
-	}
-	let entries = [];
-	try {
-		entries = await readdir(join(dshHome, "profiles"), { withFileTypes: true });
-	} catch {
-		entries = [];
-	}
-	const declared = [];
-	for (const entry of entries) {
-		if (!entry.isDirectory()) continue;
-		const profileDir = join(dshHome, "profiles", entry.name);
-		const spec = (await readManifest(join(profileDir, "package.json")))?.dependencies?.[PACKAGE_NAME];
-		if (typeof spec !== "string") continue;
-		declared.push({
-			profile: entry.name,
-			spec
-		});
-		if (ownReal === void 0) continue;
-		try {
-			if (await realpath(join(profileDir, "node_modules", "dsh-packycode-api", "package.json")) === ownReal) return {
-				kind: classifySpec(spec),
-				profile: entry.name
-			};
-		} catch {}
-	}
-	if (declared.length === 1) return {
-		kind: classifySpec(declared[0].spec),
-		profile: declared[0].profile
-	};
-	return { kind: "unknown" };
-}
-const isExistingPath = (value) => typeof value === "string" && value !== "" && existsSync(value);
-/** Anchored to the file name so a directory that merely contains the word cannot match. */
-const PNPM_SCRIPT = /[\\/]pnpm\.(?:mjs|cjs|js)$/u;
-const dshRuntimeRoot = (value) => isExistingPath(value) && existsSync(join(value, "node_modules", "@deepseek-ai", "dsh", "package.json")) ? value : void 0;
-/**
-* Locate the package manager that owns this profile.
-*
-* `dsh plugin --profile desktop` is refused by the desktop app, so the update
-* installs with pnpm directly. The desktop host puts the bundled pnpm in its
-* own arguments; nothing is guessed from the entry script.
-*/
-function resolvePnpm({ argv } = {}) {
-	const entries = Array.isArray(argv) ? argv : [];
-	for (const entry of entries) if (isExistingPath(entry) && PNPM_SCRIPT.test(entry)) return entry;
-	for (const entry of entries) {
-		const root = dshRuntimeRoot(entry);
-		if (root === void 0) continue;
-		const script = join(root, "..", "pnpm", "bin", "pnpm.mjs");
-		if (existsSync(script)) return script;
+				} : candidate)
+			};
+		}));
 	}
+	/**
+	* Mark a key unusable and move the active pointer on. Called from the stream
+	* guard, so the retry of the failed step resolves the next key.
+	*/
+	async disable(id, reason) {
+		return projection(await this.#write((state) => {
+			const now = Date.now();
+			const keys = state.keys.map((candidate) => candidate.id === id ? {
+				...candidate,
+				disabledAt: now,
+				disabledReason: text$1(reason) === "" ? "unusable" : text$1(reason)
+			} : candidate);
+			if (!keys.some((candidate) => candidate.id === id)) return {
+				activeId: state.activeId,
+				keys: state.keys
+			};
+			return {
+				activeId: state.activeId === id ? (keys.find((candidate) => candidate.id !== id && candidate.disabledAt === void 0) ?? keys.find((candidate) => candidate.id !== id))?.id : state.activeId,
+				keys
+			};
+		}));
+	}
+};
+//#endregion
+//#region src/model-selection.js
+/** Profile preferences for the models advertised in PackyCode's picker. */
+/** Store exclusions so new catalog models are selected by default as well. */
+function readHiddenModels(preference) {
+	const value = fieldValue(preference?.hiddenModels);
+	if (!Array.isArray(value)) return [];
+	const hidden = new Set(value);
+	return PACKYCODE_MODEL_IDS.filter((id) => hidden.has(id));
 }
-function resolveLauncher({ argv, execPath }) {
-	const pnpm = resolvePnpm({ argv });
-	if (pnpm === void 0) return {
-		command: "pnpm",
-		prefix: []
-	};
-	return {
-		command: execPath,
-		prefix: [pnpm]
-	};
-}
-/** Run pnpm host-side. Its output is never returned to the browser. */
-function spawnRunCommand({ command, args, cwd }, { signal, timeoutMs }) {
-	return new Promise((resolve, reject) => {
-		if (signal?.aborted) {
-			reject(signal.reason instanceof Error ? signal.reason : /* @__PURE__ */ new Error("PackyCode plugin update aborted"));
-			return;
-		}
-		const controller = new AbortController();
-		const onAbort = () => controller.abort(signal.reason);
-		signal?.addEventListener("abort", onAbort, { once: true });
-		const timer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("PackyCode plugin update timed out")), timeoutMs);
-		let settled = false;
-		const settle = (callback, value) => {
-			if (settled) return;
-			settled = true;
-			clearTimeout(timer);
-			signal?.removeEventListener("abort", onAbort);
-			callback(value);
-		};
-		let child;
-		try {
-			child = spawn(command, args, {
-				stdio: [
-					"ignore",
-					"pipe",
-					"pipe"
-				],
-				signal: controller.signal,
-				...cwd === void 0 ? {} : { cwd }
-			});
-		} catch (error) {
-			settle(reject, error);
-			return;
-		}
-		let stdout = "";
-		let stderr = "";
-		child.stdout?.on("data", (chunk) => {
-			stdout = (stdout + chunk).slice(-8192);
-		});
-		child.stderr?.on("data", (chunk) => {
-			stderr = (stderr + chunk).slice(-8192);
-		});
-		child.on("error", (error) => settle(reject, error));
-		child.on("close", (code) => {
-			if (controller.signal.aborted) {
-				const reason = controller.signal.reason;
-				settle(reject, reason instanceof Error ? reason : /* @__PURE__ */ new Error("PackyCode plugin update aborted"));
-				return;
-			}
-			settle(resolve, {
-				code: code ?? 1,
-				stdout,
-				stderr
-			});
-		});
-	});
-}
-/**
-* The running version, the latest registry version, which profile installed
-* this copy, and registry-spec updates against that profile.
-*/
-function createPackyCodePluginManager({ fetchImpl = ambientFetch, runCommand = spawnRunCommand, execPath = process.execPath, argv = process.argv, env = process.env, ownPackageJsonUrl = new URL("../package.json", import.meta.url), registryUrl = NPM_REGISTRY_LATEST_URL, now = Date.now, ttlMs = DEFAULT_VERSION_TTL_MS, timeoutMs = DEFAULT_VERSION_TIMEOUT_MS, updateTimeoutMs = DEFAULT_UPDATE_TIMEOUT_MS, settleDelayMs = 250 } = {}) {
-	if (typeof fetchImpl !== "function") throw new Error("PackyCode plugin manager requires fetch");
-	if (typeof runCommand !== "function") throw new Error("PackyCode plugin manager requires runCommand");
-	const dshHome = typeof env.DSH_HOME === "string" && env.DSH_HOME !== "" ? env.DSH_HOME : join(homedir(), ".dsh");
-	const launcher = resolveLauncher({
-		argv,
-		execPath
-	});
-	let updating = false;
-	const fetchLatest = async (signal) => {
-		let response;
-		try {
-			response = await boundedFetch(registryUrl, { headers: { Accept: "application/json" } }, {
-				fetchImpl,
-				timeoutMs,
-				signal
-			});
-		} catch (error) {
-			if (error.aborted) throw error.cause;
-			throw new Error("PackyCode plugin version check failed");
-		}
-		if (!response.ok) throw new Error("PackyCode plugin version check failed");
-		let version;
-		try {
-			version = (await response.json())?.version;
-		} catch {
-			version = void 0;
-		}
-		if (parseSemver(version) === void 0) throw new Error("PackyCode plugin version check failed");
-		return version;
-	};
-	const readOwnVersion = async () => {
-		const version = (await readManifest(fileURLToPath(ownPackageJsonUrl)))?.version;
-		if (parseSemver(version) === void 0) throw new Error("PackyCode plugin version is unavailable");
-		return version;
+function createModelSelectionController({ readPreference, writePreference, isWritable, onChange }) {
+	const hidden = () => readHiddenModels(readPreference());
+	let advertised = hidden().join(",");
+	const reconcile = () => {
+		const next = hidden().join(",");
+		if (next === advertised) return;
+		onChange?.();
+		advertised = next;
 	};
-	const load = async (signal) => {
-		signal?.throwIfAborted();
-		const [current, install, latest] = await Promise.all([
-			readOwnVersion(),
-			findInstall({
-				dshHome,
-				ownPackageJsonUrl
-			}),
-			fetchLatest(signal)
-		]);
+	const status = () => {
+		const excluded = new Set(hidden());
 		return {
-			current,
-			latest,
-			updateAvailable: compareSemver(latest, current) === 1,
-			install,
-			fetchedAt: now()
+			writable: isWritable() === true,
+			models: PACKYCODE_MODELS.map(({ id, name }) => ({
+				id,
+				name,
+				selected: !excluded.has(id)
+			}))
 		};
 	};
-	const cache = createCachedRead(load, {
-		ttlMs,
-		now
-	});
 	return Object.freeze({
-		read: (options) => cache.read(options),
-		async update({ signal } = {}) {
-			signal?.throwIfAborted();
-			if (updating) throw new Error("PackyCode plugin update is already running");
-			updating = true;
+		status,
+		reconcile,
+		isVisible: (id) => !hidden().includes(id),
+		async update({ selectedIds } = {}) {
+			if (!Array.isArray(selectedIds) || selectedIds.some((id) => !PACKYCODE_MODEL_IDS.includes(id))) throw new Error("That PackyCode model selection is not supported");
+			if (isWritable() !== true) throw new Error("PackyCode settings are not writable in this profile");
+			const selected = new Set(selectedIds);
 			try {
-				const install = await findInstall({
-					dshHome,
-					ownPackageJsonUrl
-				});
-				if (install.kind === "link") throw new Error("PackyCode plugin is installed from a local checkout");
-				if (install.kind !== "npm" || install.profile === void 0) throw new Error("PackyCode plugin update could not find the owning profile");
-				const latest = await fetchLatest(signal);
-				const profileDir = join(dshHome, "profiles", install.profile);
-				let result;
-				try {
-					result = await runCommand({
-						command: launcher.command,
-						args: [
-							...launcher.prefix,
-							"add",
-							"--save-exact",
-							`${PACKAGE_NAME}@${latest}`
-						],
-						cwd: profileDir
-					}, {
-						signal,
-						timeoutMs: updateTimeoutMs
-					});
-				} catch (error) {
-					if (signal?.aborted) throw error;
-					throw new Error("PackyCode plugin update failed");
-				}
-				if (result.code !== 0) {
-					const refusal = releaseAgeRefusal(`${result.stdout ?? ""}\n${result.stderr ?? ""}`, now());
-					if (refusal !== void 0) return {
-						version: latest,
-						profile: install.profile,
-						pending: true,
-						...refusal
-					};
-					throw new Error("PackyCode plugin update failed");
-				}
-				await confirmInstalled({
-					profileDir,
-					expected: latest,
-					settleDelayMs
-				});
-				cache.invalidate();
-				return {
-					version: latest,
-					profile: install.profile
-				};
-			} finally {
-				updating = false;
+				await writePreference({ hiddenModels: PACKYCODE_MODEL_IDS.filter((id) => !selected.has(id)) });
+			} catch {
+				throw new Error("PackyCode could not save the model selection");
 			}
-		},
-		invalidate: () => cache.invalidate()
+			reconcile();
+			return status();
+		}
 	});
 }
 //#endregion
@@ -6239,8 +6398,8 @@ function createPackyCodeRpc({ ring, balance, groups, hosts, preference, claude,
 			cli().install();
 			return cli().status();
 		},
-		"claude-cli/update": async (payload) => {
-			await cli().update({ transport: payload?.transport });
+		"claude-cli/update": () => {
+			cli().update();
 			return cli().status();
 		},
 		"plugin/version": (payload, signal) => manager().read({
@@ -7198,12 +7357,6 @@ const Config = z.object({
 	imageEnabled: live(z.boolean().default(true)),
 	imageModel: live(z.union([...IMAGE_MODEL_IDS]).default(DEFAULT_IMAGE_MODEL)),
 	imageQuality: live(z.union([...IMAGE_QUALITIES]).default("auto")),
-	/**
-	* How Claude requests travel: `auto` sends a key in the `cc` group through
-	* the official Claude Code CLI and every other key over HTTP; `cli` and
-	* `http` pin one transport.
-	*/
-	claudeTransport: live(z.union([...CLAUDE_TRANSPORTS]).default(DEFAULT_CLAUDE_TRANSPORT)),
 	/** Path to the Claude Code CLI; empty means "the usual install places, then PATH". */
 	claudeCliPath: live(z.string().default(""))
 });
@@ -7219,7 +7372,6 @@ function apply(ctx, config) {
 		imageEnabled: fieldValue(config?.imageEnabled),
 		imageModel: fieldValue(config?.imageModel),
 		imageQuality: fieldValue(config?.imageQuality),
-		claudeTransport: fieldValue(config?.claudeTransport),
 		claudeCliPath: fieldValue(config?.claudeCliPath)
 	});
 	const hosts = () => {
@@ -7289,7 +7441,8 @@ function apply(ctx, config) {
 	const claudeCli = createClaudeCliManager({ explicitPath: () => fieldValue(source()?.claudeCliPath) });
 	const cliTransport = createClaudeCliTransport({
 		binary: async () => {
-			const found = await claudeCli.detect();
+			let found = await claudeCli.detect();
+			if (isClaudeCliOutdated(found.version)) found = await claudeCli.detect({ force: true });
 			if (typeof found.path !== "string" || found.path === "") throw Object.assign(/* @__PURE__ */ new Error("Claude Code CLI is not installed"), { code: "CLAUDE_CLI_MISSING" });
 			return found.path;
 		},
@@ -7299,16 +7452,8 @@ function apply(ctx, config) {
 	ctx.effect(() => () => {
 		cliTransport.close();
 	}, "packycode-api: Claude Code CLI processes");
-	const claudePreference = {
-		writable: false,
-		set: void 0
-	};
-	const claudeTransportPreference = () => readClaudeTransport(source()?.claudeTransport);
 	/** The transport a Claude request on this key takes, by its last group reading. */
-	const claudeTransportOf = (keyId) => claudeTransportFor({
-		preference: claudeTransportPreference(),
-		groups: keyId === void 0 ? void 0 : groups.groupsOf(keyId)
-	});
+	const claudeTransportOf = (keyId) => claudeTransportFor({ groups: keyId === void 0 ? void 0 : groups.groupsOf(keyId) });
 	const registration = ctx.llm.registerAdapter([PROVIDER], createRouteAdapter({
 		ring,
 		keys,
@@ -7316,7 +7461,7 @@ function apply(ctx, config) {
 		resolveAttachments: attachments,
 		isModelVisible: modelSelection.isVisible,
 		claudeCli: Object.freeze({
-			followsGroups: () => claudeTransportPreference() === "auto",
+			followsGroups: () => true,
 			choose: ({ apiKey, model }) => isClaudeModel(model) && claudeTransportOf(keys.idOf(apiKey)).transport === "cli",
 			fetch: (input, init, meta) => cliTransport.fetch(input, init, meta)
 		}),
@@ -7403,8 +7548,7 @@ function apply(ctx, config) {
 		hostPreference,
 		searchPreference,
 		modelPreference,
-		imagePreference,
-		claudePreference
+		imagePreference
 	}));
 	ctx.on?.("loader/volatile-update", () => {
 		modelSelection.reconcile();
@@ -7450,25 +7594,12 @@ function apply(ctx, config) {
 			async status({ force = false } = {}) {
 				return {
 					...await claudeCli.status({ force }),
-					transport: claudeTransportPreference(),
-					writable: claudePreference.writable === true && typeof claudePreference.set === "function",
 					processes: cliTransport.stats()
 				};
 			},
 			install: () => claudeCli.install(),
-			async update({ transport } = {}) {
-				if (!CLAUDE_TRANSPORTS.includes(transport)) throw new Error("That PackyCode Claude transport is not supported");
-				if (claudePreference.writable !== true || typeof claudePreference.set !== "function") throw new Error("PackyCode settings are not writable in this profile");
-				try {
-					await claudePreference.set({ claudeTransport: transport });
-				} catch {
-					throw new Error("PackyCode could not save the Claude transport");
-				}
-			},
-			transportFor: (names) => claudeTransportFor({
-				preference: claudeTransportPreference(),
-				groups: names
-			})
+			update: () => claudeCli.update(),
+			transportFor: (names) => claudeTransportFor({ groups: names })
 		}),
 		search,
 		modelSelection,
@@ -7512,4 +7643,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { CHANNEL, CLAUDE_INSTALL_COMMAND, CLAUDE_MISSING_MESSAGE, CLAUDE_NPM_PACKAGE, CLAUDE_TRANSPORTS, CLI_ONLY_GROUPS, CLI_SESSION_IDLE_MS, CLI_TOOL_NOTE, Config, DEFAULT_API_HOST, DEFAULT_CLAUDE_CONFIG_DIR, DEFAULT_CLAUDE_TRANSPORT, DEFAULT_IMAGE_MODEL, DEFAULT_SEARCH_BACKEND, DEFAULT_STATUS_HOST, DIAGNOSTICS_FORMAT, DIAGNOSTICS_LIMITS, DISPLAY_NAME, HTTP_CLAUDE_GROUPS, IMAGE_MODELS, IMAGE_MODEL_IDS, IMAGE_QUALITIES, IMAGE_TIMEOUT_MS, IMAGE_TOOL_NAME, LEGACY_STATUS_HOSTS, MAX_IMAGE_BYTES, MAX_LIVE_CLI_SESSIONS, MCP_SERVER_NAME, MCP_TOOL_PREFIX, PACKYCODE_AUTO_SEARCH_PROVIDER_ID, PACKYCODE_MODELS, PACKYCODE_MODEL_IDS, PACKYCODE_SEARCH_PROVIDER_ID, PLUGIN_ID, PROVIDER, PackyCodeKeyRing, SEARCH_BACKENDS, SEARCH_BACKEND_MODELS, SEARCH_MODES, SETTINGS_NAMESPACE, TEST_MESSAGE_POLICY_CODE, apply, assertApiKey, baseUrlOf, buildCliArgs, buildCliEnvironment, buildSearchRequest, buildTranscript, canonicalMessage, catalogCoverage, classifyCliOutdated, classifyCliUnavailable, classifyClientPolicy, classifyGatewayFailure, classifyTestMessagePolicy, classifyUpstreamServerError, claudeBinaryCandidates, claudeTransportFor, cliErrorMessage, cliToolName, createBalanceReader, createClaudeCliManager, createClaudeCliTransport, createClaudeToolNames, createDiagnostics, createGroupReader, createImageController, createKeyChooser, createModelSelectionController, createPackyCodeAutoSearchProvider, createPackyCodeImageClient, createPackyCodeImageTool, createPackyCodeProfile, createPackyCodeProvider, createPackyCodeRpc, createPackyCodeSearchProvider, createProfileSearchComposition, createRouteAdapter, createSearchComposition, createSearchController, decodeImagePng, describeRequest, dshSystemText, explainCliClientPolicyFailure, explainCliOutdated, explainCliUnavailable, explainClientPolicyFailure, explainNpmFailure, explainTestMessagePolicyFailure, guardKeyRotation, inject, locateClaudeBinary, locateNpm, name, normalizeFailureMessage, normalizeHost, parseClaudeVersion, parseMessagesSearchResponse, parsePricing, parseResponsesSearchResponse, parseSelectedGroups, parseTokenUsage, pickKeyForModel, planContinuation, pngDimensions, readClaudeTransport, readHiddenModels, readImagePreference, readSearchChoice, resolveSpawnCommand, splitConversation, startClaudeCliSession, startClaudeMcpBridge, statusHostOrder, summarizeSessionEvents, toolResultToMcp, validateImageOptions };
+export { CHANNEL, CLAUDE_INSTALL_COMMAND, CLAUDE_MIN_VERSION, CLAUDE_MISSING_MESSAGE, CLAUDE_NPM_PACKAGE, CLAUDE_NPM_UPDATE_COMMAND, CLAUDE_SELF_UPDATE_COMMAND, CLI_ONLY_GROUPS, CLI_SESSION_IDLE_MS, CLI_TOOL_NOTE, Config, DEFAULT_API_HOST, DEFAULT_CLAUDE_CONFIG_DIR, DEFAULT_IMAGE_MODEL, DEFAULT_SEARCH_BACKEND, DEFAULT_STATUS_HOST, DIAGNOSTICS_FORMAT, DIAGNOSTICS_LIMITS, DISPLAY_NAME, HTTP_CLAUDE_GROUPS, IMAGE_MODELS, IMAGE_MODEL_IDS, IMAGE_QUALITIES, IMAGE_TIMEOUT_MS, IMAGE_TOOL_NAME, LEGACY_STATUS_HOSTS, MAX_IMAGE_BYTES, MAX_LIVE_CLI_SESSIONS, MCP_SERVER_NAME, MCP_TOOL_PREFIX, PACKYCODE_AUTO_SEARCH_PROVIDER_ID, PACKYCODE_MODELS, PACKYCODE_MODEL_IDS, PACKYCODE_SEARCH_PROVIDER_ID, PLUGIN_ID, PROVIDER, PackyCodeKeyRing, SEARCH_BACKENDS, SEARCH_BACKEND_MODELS, SEARCH_MODES, SETTINGS_NAMESPACE, TEST_MESSAGE_POLICY_CODE, apply, assertApiKey, baseUrlOf, buildCliArgs, buildCliEnvironment, buildSearchRequest, buildTranscript, canonicalMessage, catalogCoverage, classifyCliOutdated, classifyCliUnavailable, classifyClientPolicy, classifyGatewayFailure, classifyTestMessagePolicy, classifyUpstreamServerError, claudeBinaryCandidates, claudeTransportFor, cliErrorMessage, cliToolName, createBalanceReader, createClaudeCliManager, createClaudeCliTransport, createClaudeToolNames, createDiagnostics, createGroupReader, createImageController, createKeyChooser, createModelSelectionController, createPackyCodeAutoSearchProvider, createPackyCodeImageClient, createPackyCodeImageTool, createPackyCodeProfile, createPackyCodeProvider, createPackyCodeRpc, createPackyCodeSearchProvider, createProfileSearchComposition, createRouteAdapter, createSearchComposition, createSearchController, decodeImagePng, describeRequest, dshSystemText, explainCliClientPolicyFailure, explainCliOutdated, explainCliUnavailable, explainClientPolicyFailure, explainNpmFailure, explainTestMessagePolicyFailure, guardKeyRotation, inject, isClaudeCliOutdated, isNpmClaudeInstall, locateClaudeBinary, locateNpm, name, normalizeFailureMessage, normalizeHost, parseClaudeVersion, parseMessagesSearchResponse, parsePricing, parseResponsesSearchResponse, parseSelectedGroups, parseTokenUsage, pickKeyForModel, planContinuation, pngDimensions, readHiddenModels, readImagePreference, readSearchChoice, resolveSpawnCommand, splitConversation, startClaudeCliSession, startClaudeMcpBridge, statusHostOrder, summarizeSessionEvents, toolResultToMcp, validateImageOptions };