diff --git a/AGENTS.md b/AGENTS.md
index a40500c..c7520a5 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -38,9 +38,12 @@ src/wire-shared.ts    Shared boundary-validation + Remote-descriptor plumbing
                       for the hand-rolled Typert wire contracts (dependency-free;
                       imported by the wire files so the client can inline it).
 src/client/index.ts   Browser client entry: registers the "Command Code"
-                      settings page (settings.section, id `commandcode`) and
-                      the Models-page provider card
-                      (settings.models.provider-card, key `llm-commandcode`).
+                      settings page (settings.section, id `commandcode`), the
+                      Models-page provider card
+                      (settings.models.provider-card, key `llm-commandcode`), the
+                      plans & quota panel's `main` cell + gated
+                      `sidebar.footer.action` card, and the composer
+                      `conversation.composer.dock` session-cost entry.
 src/client/settings.ts  Settings-page controller (scope + credentials + staged
                       form; React-free so node tests can drive it).
 src/client/legacy-credentials.ts  Pre-0.1.2 ApiProxy-to-current credential face adapter.
@@ -53,10 +56,34 @@ src/client/card.tsx   The Models-page provider card (keyed-slot component +
                       the SlotMap merge for `settings.models.provider-card` /
                       `settings.models.footer` mirroring upstream 0.1.2).
 src/client/sessions.ts  selectModel friendly-error wrapper (React-free).
+src/client/panel.ts    Plans & quota panel view model + the shared background
+                      auto-refresh loop (React-free).
+src/client/panel-view.tsx  Sidebar footer card + center dashboard components.
+src/client/panel-copy.ts   English copy for the panel (deliberately NOT a locale
+                      namespace — the panel is English on every harness).
+src/client/panel-slots.ts  SlotMap merge for `main` + `sidebar.footer.action`.
+src/client/panel-styles.ts  The panel stylesheet + its `data-plugin-css` id (the
+                      idempotence key `injectPanelCss` selects on).
+src/client/prices.ts   Price-table controller over `commandcode/prices` (cached,
+                      bounded transient retries, manual retry, rebind reload).
+src/client/session-cost.ts  Session-cost calculation + copy (React-free).
+src/client/session-cost-view.tsx  The dock entry that feeds the injected cost.
+src/client/session-cost-display.ts  DOM injection into the harness's token-usage
+                      pill and usage dialog (browser only).
+src/client/session-cost-slots.ts  SlotMap merge for `conversation.composer.dock`.
+src/cost-facts.ts      JSON-only billing facts shared by the Host projection and
+                      the browser readout (groups, peak/hour rule, pricing key).
+src/cost-projection.ts  Durable `commandCodeCost` session projection: folds each
+                      request's model, attempt time and prompt band so the
+                      readout prices history instead of cumulative totals.
 src/client/version.ts  Plugin version for the settings-page footer (package.json import, inlined at build).
 src/client/update.ts   Update hint: throttled npm-registry `latest` check +
                        tolerant semver compare (React-free, storage/fetch/time
                        seams); the page footer links to releases when newer.
+src/model-prices.ts    Vendored per-token price table (input/output/cache-read/
+                      cache-write, peak overrides) + the catalog-id → pricing-slug
+                      join, served to the browser through `commandcode/prices`.
+                      Generated rows; see the dsh-commandcode-upstream skill.
 src/login.ts           Host half of the browser login: loopback callback
                        server mirroring `command-code login` (POST /callback,
                        state token, whoami validation) → storeKey seam.
@@ -97,6 +124,20 @@ tests/login-client.test.ts login-panel controller poll lifecycle.
 tests/client.test.ts  selectModel friendly-error rewrite tests (real envelope shape).
 tests/client-boot.test.ts client-boot integration tests (real apply() against a
                       DSH 0.1.2 client assembly; settings page + provider card).
+tests/panel.test.ts   plans & quota projection + auto-refresh loop tests.
+tests/model-prices.test.ts  price table ↔ catalog join tests (fails when a
+                      catalog model has no price).
+tests/session-cost.test.ts  session-cost calculation tests (peak/off-peak, a
+                      missing rate, the invisible-when-unpriceable rules).
+tests/session-cost-display.test.ts  DOM-injection tests for the pill and the
+                      usage dialog, driven through the real class and its
+                      `doc`/`observe` seams against a fake DOM (confirmation,
+                      self-heal, hide/restore, disposal).
+tests/cost-projection.test.ts  durable cost-fact fold tests against the real
+                      projection registry (v1/v2 settlements, retries, history
+                      restore, tier boundaries, free/unpriced subtotals).
+tests/prices-client.test.ts  price-table controller tests (cache, bounded
+                      transient retries, a Host without the endpoint).
 tests/package.test.ts package-metadata contract (Harness peers start at rc.1,
                       no dsh-client-runtime).
 tests/config-schema.test.ts Config credential contract: literal apiKey fields
@@ -130,7 +171,13 @@ tsdown.config.ts      Build config (tsdown -> lib/, ESM, .d.ts + client.js).
   leak into a settings document. The retained legacy credential adapter is
   defensive only; the published peer contract starts at 0.1.2-rc.1.
   `tests/settings.test.ts` and `tests/legacy-credentials.test.ts` pin these
-  internal faces.
+  internal faces. The panel and session-cost slots have PER-SLOT version floors,
+  not one shared one (see the panel bullet below): the composer dock and the
+  sidebar foot have existed since 0.1.1-rc.2, the keyed `main` seat arrives in
+  0.1.5-alpha.2, and `layout.selectPanel` in 0.1.5-rc.1. Never restate that as
+  "the panel needs 0.1.5" — that is true of the `main` seat only, and the
+  sidebar seat exists everywhere, which is why the footer registration is gated
+  on the layout seam instead of on a slot declaration.
 - **Isolated package install**: pnpm 10 auto-installs the package's DSH peers
   when a desktop marketplace prepares a fresh generation. Keep
   `@deepseek-ai/dsh-invariants` as an explicit `^0.1.2-rc.1` peer matching
@@ -175,11 +222,135 @@ tsdown.config.ts      Build config (tsdown -> lib/, ESM, .d.ts + client.js).
   - Web search: `POST {apiBase}/alpha/web-search` — body `{ query, numResults, allowedDomains?, blockedDomains? }` → `{ results: [{ title, url, snippet }] }`; same `Authorization: Bearer <key>` + `x-command-code-version` as generate.
   - Defaults: `apiBase = https://api.commandcode.ai`, `COMMAND_CODE_CLI_VERSION = '1.53.1'`.
 - **API key resolution order** (in `src/index.ts`): `config.apiKey` → credential ref `apiKeyEnv` (default `COMMANDCODE_API_KEY`, via the dsh credentials seam) → launch environment → official CLI auth file `~/.commandcode/auth.json`. **pi/OMP auth files are intentionally NOT scanned** — keep it that way.
-- **Multi-account rotation** (`src/accounts.ts` + the adapter's connect loop): the top-level key forms the `default` slot; `Config.accounts` (`[{ label, apiKeyEnv | apiKey }]`) adds more, in rotation order. Rotation is **passive**: a key is marked only on a real pre-stream rejection (429 → `unknown` cooldown, 401 → `disabled`), and the adapter's `rotateApiKey` hook re-sends the same request with the next account's key (safe: nothing streamed, the body is account-independent, `threadId` random per request — mid-stream failures NEVER rotate). When every account is marked, the pool probes `/alpha/billing/credits` per key (`probeFiveHourWindow`) to revive reset windows, else throws `RATE_LIMIT` naming the earliest `resetAt` (all-401 → `INVALID_CREDENTIAL`). State is keyed by API key, not slot — shared credentials share one mark. **Manual selection**: `Config.activeAccount` (a slot id) pins the serving account via the pool's `preferredId` seam + `selectActiveAccount()` (shared with the usage view's active badge); a pinned-but-exhausted or unknown id falls back to rotation order. **Model routing**: `Config.modelAccountRules` (`[{ models: string[], account }]`) lists catalog model ids per account slot; the request's model reaches key resolution (`resolveApiKey(connection, model)`), the pool's `modelAccountRules` seam re-reads rules per resolution, and `matchModelRule()`/`selectAccountForModel()` serve the routed account before preferred/rotation — an unusable routed account falls back, so the router is a hint, never a hard gate. The rules editor's model list comes from a Host-side `commandcode/models` Remote (the FULL adapter catalog via `listModels(…, { unfiltered: true })`, sorted), so the browser never calls the Command Code API; `SettingsPageApi.models` is optional, so legacy transports degrade to the empty-catalog state. Extra-account slot ids are the credential reference itself (`COMMANDCODE_API_KEY_2`, …) so a stored selection survives list reorders/removals; only literal-only composition entries keep positional `account-N` ids. The settings page edits `activeAccount` through the generic section-field machinery (a `<select>` bound to a text field) and `modelAccountRules` through its own rules card (staged rows like `accounts`, one `modelAccountRules` write). The picker's billing-access cache is per key. The usage Remote result is `CommandCodeAccountsReport` (`{ accounts: [...] }`); host and client ship in one bundle, so wire-shape changes need no migration — only synced edits in `src/usage-wire.ts`, `src/usage-remote.ts`, `src/client/usage.ts`, and `src/commands.ts`.
+- **Multi-account rotation** (`src/accounts.ts` + the adapter's connect loop): the top-level key forms the `default` slot; `Config.accounts` (`[{ label, apiKeyEnv | apiKey }]`) adds more, in rotation order. Rotation is **passive**: a key is marked only on a real pre-stream rejection (429 → `unknown` cooldown, 401 → `disabled`), and the adapter's `rotateApiKey` hook re-sends the same request with the next account's key (safe: nothing streamed, the body is account-independent, `threadId` random per request — mid-stream failures NEVER rotate). When every account is marked, the pool probes `/alpha/billing/credits` per key (`probeFiveHourWindow`) to revive reset windows, else throws `RATE_LIMIT` naming the earliest `resetAt` (all-401 → `INVALID_CREDENTIAL`). State is keyed by API key, not slot — shared credentials share one mark. **Manual selection**: `Config.activeAccount` (a slot id) pins the serving account via the pool's `preferredId` seam + `selectActiveAccount()` (shared with the usage view's active badge); a pinned-but-exhausted or unknown id falls back to rotation order. **Model routing**: `Config.modelAccountRules` (`[{ models: string[], account }]`) lists catalog model ids per account slot; the request's model reaches key resolution (`resolveApiKey(connection, model)`), the pool's `modelAccountRules` seam re-reads rules per resolution, and `matchModelRule()`/`selectAccountForModel()` serve the routed account before preferred/rotation — an unusable routed account falls back, so the router is a hint, never a hard gate. The rules editor's model list comes from a Host-side `commandcode/models` Remote (the FULL adapter catalog via `listModels(…, { unfiltered: true })`, sorted), so the browser never calls the Command Code API; `SettingsPageApi.models` is optional, so legacy transports degrade to the empty-catalog state. Extra-account slot ids are the credential reference itself (`COMMANDCODE_API_KEY_2`, …) so a stored selection survives list reorders/removals; only literal-only composition entries keep positional `account-N` ids. The settings page edits `activeAccount` through the generic section-field machinery (a `<select>` bound to a text field) and `modelAccountRules` through its own rules card (staged rows like `accounts`, one `modelAccountRules` write). The picker's billing-access cache is per key. The usage Remote result is `CommandCodeAccountsReport` (`{ accounts: [...] }`); host and client ship in one bundle, so wire-shape changes need no migration — only synced edits in `src/usage-wire.ts`, `src/usage-remote.ts`, `src/client/usage.ts`, and `src/commands.ts`. **`report.credits` distinguishes "reported" from "zero", and that distinction is load-bearing**: `monthlyReported` is optional-tri-state (`undefined` = a pre-field Host, read as "assume reported"; explicit `false` = the endpoint omitted the balance, which the panel renders as `—` and never as a consumed quota), and `fiveHour`/`weekly` are OPTIONAL members that are absent when the endpoint reported no such window — a present window with `cap: 0` means uncapped spend and keeps its row, an absent one keeps no row at all. Reading an absent balance as `0` is what turned a transient `/alpha/billing/credits` failure into a confident "100% used, quota exhausted"; the official CLI gates its own meter on the credits payload being present (`hasCreditsInfo`) and computes no depletion percentage without it. The wire schema validates a PRESENT `monthlyReported` as a boolean, so a malformed frame is rejected rather than coerced.
 - **Web search (`src/web-search.ts` + the optional `web` seam)**: the model-facing `web_search` tool (from `@deepseek-ai/dsh-tool-web`) is served by a `CommandCodeSearchProvider` registered as `commandcode` on `ctx.web` — same `Authorization: Bearer <key>` + `x-command-code-version` chain, same `apiBase`, so DSH's web search needs NO separate key/endpoint config (unlike `dsh-web-search-deepseek`, which needs its own Anthropic-compatible base). It POSTs `{ query, numResults, allowedDomains?, blockedDomains? }` to `/alpha/web-search` and maps `{ title, url, snippet }` → `WebSearchSource`. Registration rides `ctx.inject(['web'], ...)` exactly like `commands`/`typert`: the provider is registered only when the profile mounts the web service, and the fiber never activates otherwise (this stays an LLM-provider-only plugin without web). The pool's `resolveKey()` (rotation + auth-file revived) is reused, so search benefits from the same multi-account selection; the search endpoint is account-independent so no mid-flight rotation happens. **Selection**: whether the `commandcode` provider WINS over the shipped `deepseek-official` (or a sibling search plugin's pin, e.g. modsearch's `searchProvider: modsearch`) is `Config.webSearch` (default on). The web seam has NO public runtime selector, so the plugin writes its private `searchProviderId` field (read per call by `web.search()`) via `applyCommandCodeSearchSelection()` in `src/web-search.ts` — applied at boot AND on every settings change (the `installSection` `onChange` hook), and restored on fiber unload. The tracked `CommandCodeSearchSelection` remembers the displaced backend id, so toggle-off (and unload) hands the selection back to it — it NEVER forces the factory default, because that is what silenced sibling plugins with Command Code search off (issue #26); a fresh boot straight into `webSearch: false` leaves the field untouched. Re-enables keep the original `displaced` (the field holds our own id then, which must not overwrite the memory), and a field already reading `commandcode` at first touch means "nothing to restore". That write depends on the runtime shape (a plain writable property, not `#private`); the durable alternative is the boot-time `searchProvider: commandcode` cordis patch. The legacy `selectCommandCodeSearchProvider()` stays exported for compatibility but always restores the factory default on disable — new code must not use it. `dsh-web` is a `^0.1.2-rc.1` peer (kept external in tsdown); `tests/web-search.test.ts` pins the wire body, header, result mapping, the `WEB_ABORTED`/`WEB_PROVIDER_CREDENTIAL_MISSING`/`WEB_PROVIDER_ERROR` taxonomy, the selection-field handoff (sibling-pin restore, re-enable memory, unload path via the real host `apply()`), and the legacy rewrite.
 - **StreamChunk contract** (dsh-llm): each block starts with `block-start`, deltas by `index`, ends with `block-end`; `usage` before `finish`; nothing after `finish`. Tool-call `arguments` are raw JSON strings. Historical reasoning blocks are replayed on BOTH transports for tool-loop continuity — as a `{ type: 'reasoning', text }` assistant part on `/alpha/generate` (the official CLI's shape) and as `reasoning_content` on `/provider/v1/chat/completions` (see the wire-protocol bullet; issue #34). Only tool calls with a paired tool result are replayed on both transports. **Tool-result images** (`read_image` returns text + a nested `image` block): neither wire can hold an image inside a tool result — the CLI's `tool-result.output` is text-only (the official CLI's own `toV2ToolOutput` filters out everything but text) and Chat Completions forbids non-text `role: 'tool'` content — so `toolResultMedia()` splits each result and both converters emit the bytes in a user message immediately after the tool message, led by the `Attached image(s) from tool result:` note (the shape `@deepseek-ai/dsh-llm-deepseek` uses). Deduplicated by attachment id per result; an image-only result gets a `(image returned; see the attached image)` tool text instead of an empty string; a result without a paired call drops its images with the result. Never flatten a tool result with `blockText` alone again — that is issue #30. The `hasImageContent` gate (model Vision capability + attachment seam) already recurses into tool results, so these images ride the same `readImage` resolver user attachments use.
 - **Errors**: throw `LlmError` with stable codes. 401 → `INVALID_CREDENTIAL`; 429 → `RATE_LIMIT`; other HTTP → `PROVIDER_HTTP_ERROR` (403 body's `error.code`, e.g. `MODEL_NOT_IN_PLAN`, is parsed into the message). Unsupported options (`stop`) and image input throw `UNSUPPORTED_OPTION` / `UNSUPPORTED_CONTENT` rather than silently dropping.
 - **Adapter is cordis-free** by design: `src/adapter.ts` takes a per-request `options()` thunk + `resolveApiKey()` from the plugin entry, so settings changes reach the next request without re-registration. It also accepts an injectable `fetchImpl` for tests.
+- **Plans & quota panel + composer session cost (ported from PR #36)**: two
+  client surfaces using Host usage and durable request-cost facts. (1) The sidebar footer
+  card (`sidebar.footer.action`, order 1 — directly above Settings) and the
+  dashboard it opens in the layout's keyed `main` slot both render one
+  projection, `buildPanelView()` in `src/client/panel.ts`: plan, the 5-hour and
+  weekly windows with their own spend/limits, monthly credits derived the CLI's
+  way (`limit - remaining`), and the purchased/free balances. The projections
+  fetch nothing themselves: both read the usage controller's snapshot, and
+  `startPanelAutoRefresh()` is a refcounted 2-minute tick that calls
+  `usage.refresh()` while mounted. The Host report determines configuration,
+  including composition literals and CLI-auth fallback; browser credential
+  references must never gate this read. Unreported credit fields stay dashes.
+  (2) The composer readout (`conversation.composer.dock`, id
+  `commandcode-session-cost` — never the shipped `stats` id, which would REPLACE
+  the harness's token/cache-hit/throughput cell) renders NO surface of its own:
+  `src/client/session-cost-display.ts` injects the amount into the shipped pill
+  and a price per row into the shipped usage dialog, matched POSITIONALLY (the
+  labels are the `chat` locale's, so they are never read) and confirmed by the
+  token count each row must be showing. `buildSessionCostView()` owns every
+  number and string: it prices only `commandcode` sessions, never invents a
+  cache-write rate the pricing page omits (those tokens are reported as
+  unpriced and the total stays a floor), and returns `undefined` — no pill at
+  all — for no usage, no table, an unknown model, all-zero buckets, or a session
+  whose EVERY billed token is unpriced (the guard is "unpriced tokens and no
+  priced spend", never "the total rounds to zero": a real sub-cent session keeps
+  its `<$0.0001` bound). The dialog row for cache-write tokens is hidden only
+  when their rate is missing; when it is published the row stays, because its
+  cost is already inside the total and hiding it makes the rows unable to
+  explain the figure above them. Both surfaces are English by construction
+  (`panel-copy.ts`, `SESSION_COST_COPY`) rather than through `ctx.locale`; that
+  is a deliberate, documented limitation.
+  **Version floors are PER SLOT, and getting this wrong ships a dead button.**
+  Measured across 0.1.1-rc.2 … 0.1.5-rc.2: `sidebar.footer.action` and
+  `conversation.composer.dock` are declared AND rendered in every one of those
+  releases; the keyed `main` seat arrives in 0.1.5-alpha.2 and
+  `layout.selectPanel` in 0.1.5-rc.1. So "the panel needs 0.1.5" is true of the
+  `main` seat ONLY — on an older engine the sidebar seat still exists, so an
+  ungated `slots.inject` there would render a card that silently does nothing
+  when clicked. The footer registration is therefore gated on
+  `ctx.inject(['layout'], …)` plus a `typeof selectPanel === 'function'` check
+  (`src/client/index.ts`), and the dashboard cell needs no gate because
+  registering against an undeclared slot is a no-op by construction. The DOM
+  anchors (`[data-composer-stats]`, `[data-session-stats-usage]`) are the one
+  genuinely 0.1.5-alpha.1 marker. `tests/client-boot.test.ts` pins all of this by
+  modelling the declaration set and the layout seam separately.
+  The three slot declarations are re-stated locally
+  (`panel-slots.ts`, `session-cost-slots.ts`) and must stay structurally
+  identical to upstream's, exactly like the Models-card merge in `card.tsx`.
+- **Durable session cost facts** (`src/cost-projection.ts`): optional reflective
+  `sessionProjections` registration folds `request/header` model selection and
+  `step/start` / `llm/retry-started` timestamps alongside v1 usage chunks and v2
+  assistant message/attempt stream settlements. Samples replace within an
+  attempt; retries add. Rate-equivalent requests aggregate into bounded groups,
+  using all prompt token buckets for each request's context tier. The pricing
+  fingerprint versions checkpoints and guards the client table; schema/fold
+  changes must bump the fingerprint seed. Restoring/forking uses the Host log,
+  not browser memory. Match all buckets against `tokenUsage` before decorating.
+  Never price cumulative usage with `modelSelection.lastUsed` or current time.
+  Missing projection means hidden cost; missing rates/other-provider usage
+  produce a labeled subtotal. Published-rate estimates are not provider invoices.
+  **KNOWN LIMITATION — one fold rule cannot serve both log generations.** The
+  replacement semantics here are the 0.1.5 token-meter's (`llm/retry-started`
+  closes the replacement slot, so a retried attempt ADDS). The 0.1.2/0.1.3-era
+  fold instead replaced on `(turn, step)` alone and never handled that event
+  (`dsh-client-connection`'s fixture projection is exactly that rule). On those
+  engines the two folds therefore disagree by the retried attempt's tokens, and
+  because the client requires per-bucket EQUALITY against `tokenUsage`
+  (`src/client/session-cost.ts`), a session that retried there loses the readout
+  entirely rather than showing a wrong figure. Retries are routine on this route
+  (429 plus the near-unbounded retry policy) and 0.1.2-rc.1/0.1.3 are declared
+  compatible in `package.json`, so this is a real gap, not a theoretical one.
+  Closing it means recording which fold rule wrote a group (or versioning the
+  projection per engine generation). Until then, do NOT "fix" the equality gate
+  by loosening it: that gate is what keeps a mismatched fold from being priced.
+- **Settings usage card availability** (`usageCardState()` in
+  `src/client/usage.ts`): the card's auto-fetch, refresh button and "no key"
+  hint derive from the HOST report's `entry.configured`, never from a browser
+  credential reference. A composition literal (`Config.apiKey`) is a stripped
+  secret and the official CLI auth file is not in the credentials store, so both
+  are invisible to the browser while the Host happily serves requests with them
+  — `state.anyAccountConfigured` must not gate this card or the post-save
+  refresh trigger (`src/client/index.ts`). `shouldRefresh` is true only in
+  `status === 'idle'`, so a failed fetch never becomes an automatic request
+  loop, and the button stays enabled for a manual retry.
+- **Price table Remote (`commandcode/prices`)**: `src/model-prices.ts` vendors
+  the official per-token rates and serves them Host-side over the SAME
+  `commandcodeUsage` service and one combined contribution (report + catalog +
+  prices + login). Rows are keyed by CATALOG id wherever the two namespaces
+  reconcile (the page drops vendor prefixes and sometimes inserts a hyphen —
+  `priceSlugCandidates()` generates the plausible slugs and takes the first hit),
+  and a row no catalog model claims is still served under its slug; free models
+  are served explicitly at zero with `free: true`. The peak windows travel WITH
+  the table (`peakHours`), so the browser prices against this snapshot's schedule
+  instead of restating it; the model-independent half of that rule is
+  `isPeakPricingHour()` in `capabilities.ts`, which `peakPricingState()` now
+  delegates to. `CommandCodePricesController` (`src/client/prices.ts`) is a
+  cache with three bounded transient retries (1/2/4 seconds), and both the namespace member and `UsageRemote.prices` are
+  OPTIONAL because the Host and bundle can be a cross-version pair — a Host
+  without the endpoint lands in a permanent "no prices" state instead of
+  throwing. `tests/model-prices.test.ts` fails whenever a catalog model has no
+  price row (free models are exempt, since they are served explicitly at zero),
+  which is the visible decision point when upstream adds a model.
+  **Syncing the table is a script, not a hand edit**: `node
+  scripts/sync-model-prices.mjs` re-reads the page's embedded model JSON, asserts
+  it still duplicates its base rates into `offPeak` and that peak ≥ off-peak,
+  carries every `contextTiers` band including its inclusive input-token bound,
+  CROSS-CHECKS each rewritten row against the page's own rendered table,
+  and rewrites only the `MODEL_PRICE_ROWS` literal. `--check` reports drift
+  without writing (exit 1 on drift, exit 2 when the page could not be read, so a
+  network failure never reads as "up to date"). The cross-check is the point: a
+  row can be internally consistent and still be the wrong row, which is exactly
+  how `deepseek-v4-flash-vision-exp` shipped ~47% high. Two documented upstream
+  inconsistencies to leave alone rather than "fix" in the table: the four GPT
+  rows publish a literal `cacheWriteCost: 0` in the JSON while the rendered
+  column shows `—` (the table stays faithful to the machine-readable source),
+  and the Mon–Fri rule is restated in the browser because only the WINDOWS
+  travel with the table. The live copies are `isPeakPricingHour()` in
+  `capabilities.ts` (Host picker labels) and `peakHour()` in `cost-facts.ts`
+  (the readout's path, imported by the client bundle) — a weekday-rule change
+  is a two-place edit across those two. `isPeakHour()` in
+  `src/client/session-cost.ts` is a leftover third copy that nothing calls:
+  only `tests/session-cost.test.ts` references it, and it is dead-code-eliminated
+  out of `lib/client.js`. Delete it (and that one test) rather than re-wiring it.
+
 - **Usage Remote (`commandcode/report`)**: the settings page's account card
   fetches the usage report Host-side through the Typert Gateway — the browser
   never holds the API key. Host: `src/usage-remote.ts` registers a
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c2aaf0b..d5ef458 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,30 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+- **A plans & quota card in the sidebar and a dashboard behind it.** The bottom of the sidebar now carries a Command Code card — directly above Settings — showing the serving account's plan and both quota windows (5-hour and weekly) with their spend and limits. Clicking it opens a dashboard in the center column with the plan badge and billing period, the two windows as progress bars with reset times, monthly credit consumption, and the purchased/free credit balances. Both surfaces are driven by the same Host-side usage report the settings page's account card already uses, so no key ever reaches the browser, and the panel refreshes itself in the background on a 2-minute tick while it is on screen. The card is English by construction rather than following the harness language. It needs a harness whose layout can select a center panel — dsh 0.1.5 (rc.1) or newer: on an older engine the card is not registered at all, because a button that opens nothing is worse than no button, and every other screen is unaffected. Ported from [#36](https://github.com/Mars-Sea/dsh-commandcode-provider/pull/36) by [@xer-on](https://github.com/xer-on).
+
+- **The composer now shows a published-rate estimate for the current session.** Under the input, next to the harness's own token counter, a session served by Command Code gains an amount (for example `1.2M tokens · Cache hit 87% · ≈$0.02`), and the token-usage dialog the counter opens gains a price per row (uncached input, completion, cache read). The figures are computed from the session's own token buckets against Command Code's published per-token rates, including the peak/off-peak halves of the hourly-priced DeepSeek models. The readout decorates the harness's counter instead of replacing it, so the existing token/cache-hit/throughput figures and their translations stay exactly as they are. Three rules keep it honest: only Command Code sessions are priced, a model with no published cache-write rate says so rather than guessing a multiplier, and a session with nothing to price (no usage yet, an unknown model) renders no figure at all instead of a misleading `$0.00`. Ported from [#36](https://github.com/Mars-Sea/dsh-commandcode-provider/pull/36) by [@xer-on](https://github.com/xer-on).
+
+### Changed
+- **The model price table is served to the browser over a new `commandcode/prices` Remote.** The official per-token rates (input, output, cache-read, cache-write where published, plus the peak-hour override for the hourly-priced models) are vendored Host-side and reach the composer through the existing `commandcodeUsage` service, so the browser bundle carries no copy that could drift and a price row reaches an open page without a rebuild. A price row whose catalog name differs from the pricing page's slug (a vendor prefix, a dated suffix) is matched automatically, and a model the page does not price renders no cost rather than a guess. The table is pinned against the catalog by `tests/model-prices.test.ts`, which fails when a catalog model has no price — the visible decision point when upstream adds a model. It is refreshed with `node scripts/sync-model-prices.mjs`, which re-reads the page, cross-checks the embedded rates against the page's own rendered table and rewrites only the rows (`--check` reports drift without writing).
+
+### Fixed
+- **Free usage mixed with unpriced usage no longer displays a zero subtotal.** Purely free sessions retain `Free`, while partial sessions need positive priced spend before a figure is shown.
+- **The settings usage card also resolves availability from the Host.** Literal and CLI-auth keys can fetch and refresh usage without a browser credential reference. The slash command omits its balance ratio when either input is unreported or the denominator is zero, and displays a single percent sign for known ratios.
+
+- **Session estimates preserve each request's model and time across reloads and model switches.** An optional Host projection replays durable usage, including failed attempts and retry replacement rules; all eight context-tiered price rows retain their bands. Missing history hides the estimate, and unpriced or other-provider usage is labeled as a subtotal. The result uses the installed published-rate snapshot, not the provider invoice.
+- **Quota refresh resolves credentials on the Host**, including literal config keys and CLI-auth fallback. Omitted purchased/free balances remain unknown instead of appearing as zero.
+- **Transient price-table failures retry automatically** three times with bounded backoff. Host rebinds invalidate stale results; manual refresh remains available after retries are exhausted.
+
+- **A session cost on a model with no published cache-write rate no longer shows `$0.00`.** If every billed token was one the price table has no rate for, the total was zero for lack of a rate rather than for lack of spending, and the readout announced a confident `$0.00`. It now renders nothing, exactly as it already did for an unknown model. Relatedly, a cache-write row whose rate IS published is no longer hidden from the usage dialog: its cost was already part of the total above it, so dropping the row left the visible figures unable to explain the amount.
+
+- **The plans panel no longer reports a failed billing call as a fully consumed quota.** The credits endpoint is fetched in parallel with the plan and can fail on its own; the monthly balance then arrived as an absent number, which the panel read as `0` and turned into "100% used, quota exhausted" — with purchased/free tiles showing balances that were never fetched. Unreported figures now render as a dash, and the quota bar is simply not drawn until both halves of the ratio are known. Only the quota windows the endpoint actually reported get a row, so an unlimited plan no longer shows two fabricated 0%-of-limit meters.
+
+- **The hourly-priced DeepSeek V4 Flash Vision (exp) is priced at its published rate.** The table carried `$0.22 / $0.66 / $0.003`, which is ~47% above the official `$0.15 / $0.60 / $0.003` (peak `$0.30 / $1.20`). Every session cost and per-row price for that model was overstated; the row now matches the page and `scripts/sync-model-prices.mjs` cross-checks the table against the page's rendered rates so the same class of error is caught at sync time.
+
 ## [0.10.6] - 2026-09-12
 
 ### Fixed
diff --git a/README.md b/README.md
index 44ff7a9..f62f3d4 100644
--- a/README.md
+++ b/README.md
@@ -27,6 +27,8 @@ Unofficial [DeepSeek Harness](https://deepseek-harness.github.io/deepseek-harnes
 - **Plan-aware picker** — models above your subscription tier are hidden by default (toggleable); an optional **Model allowlist** keeps only your favorites in the picker.
 - **Reasoning-effort support** — models with selectable reasoning effort levels expose them in the picker.
 - **Image input** — Vision-capable models accept images.
+- **Plans & quota panel** — a Command Code card at the bottom of the sidebar (directly above Settings) shows the serving account's plan and its 5-hour and weekly windows; clicking it opens a dashboard with the billing period, both windows as progress bars with reset times, monthly credit consumption, and the purchased/free balances. Needs dsh 0.1.5 (rc.1) or newer, and reads in English on every harness language.
+- **Session cost estimate** — published-rate estimates (`≈`) beside the composer token counter and in its usage dialog, using each request's model, request time and context tier from durable session history. Model switches and viewing the session later do not reprice earlier requests. Mixed-provider or unpriced usage shows a labeled subtotal (`≥`); missing history or wholly unpriceable usage stays hidden. These are estimates from the installed price snapshot, not provider invoices. Also English on every harness language.
 - **Web search** — the dsh `web_search` tool is backed by the Command Code Provider API (`/alpha/web-search`) with the same key/endpoint as chat, so no separate search key or base URL is needed. See [Web search](#web-search).
 
 See [Screenshots](#screenshots) below for what the UI looks like.
diff --git a/README.zh-CN.md b/README.zh-CN.md
index 301eb07..7987689 100644
--- a/README.zh-CN.md
+++ b/README.zh-CN.md
@@ -27,6 +27,8 @@
 - **按套餐过滤**：默认隐藏超出订阅套餐的模型，可一键关闭；「模型白名单」可进一步只保留常用模型。
 - **推理强度支持**：支持推理强度的模型可在选择器中选择档位。
 - **图片输入**：Vision 模型支持发送图片。
+- **套餐与配额面板**：侧边栏底部（Settings 正上方）新增 Command Code 卡片，显示当前服务账号的套餐与 5 小时 / 每周两个配额窗口；点击后在中间栏打开面板，包含计费周期、两个窗口的进度条与重置时间、月度额度消耗，以及已购买 / 赠送余额。需要 dsh 0.1.5（rc.1）或更高版本；无论 Harness 语言如何，该面板固定为英文。
+- **会话费用估算**：在输入框下方的 token 计数旁及用量对话框中显示估算金额（`≈`），根据持久化历史中每次请求的模型、请求时间和上下文阶梯分别计价。切换模型或稍后查看不会重新定价之前的请求。混合供应商或缺少费率时显示已定价部分的小计（`≥`）；缺少历史事实或完全无法定价时不显示金额。结果基于插件内的价格快照，不等同于供应商账单。同样固定为英文。
 - **联网搜索**：dsh 的 `web_search` 工具由 Command Code Provider API（`/alpha/web-search`）承载，复用聊天同一个 key 与端点，无需单独配置搜索 key 或地址。详见[联网搜索](#联网搜索)。
 
 ## 安装
diff --git a/lib/client.js b/lib/client.js
index 199a00f..9a22a9a 100644
--- a/lib/client.js
+++ b/lib/client.js
@@ -1225,7 +1225,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/usage.ts
-		const IDLE = {
+		const IDLE$1 = {
 			status: "idle",
 			report: void 0,
 			error: void 0,
@@ -1239,7 +1239,7 @@ window.__ModuleLoader__.load({
 		var CommandCodeUsageController = class {
 			remote;
 			listeners = /* @__PURE__ */ new Set();
-			current = IDLE;
+			current = IDLE$1;
 			generation = 0;
 			inFlight = false;
 			disposed = false;
@@ -1341,6 +1341,166 @@ window.__ModuleLoader__.load({
 			if (ms <= 0) return "";
 			return new Date(ms).toLocaleString();
 		}
+		/** Host facts drive the usage card, including keys invisible to browser credentials. */
+		function usageCardState(usage) {
+			const accounts = usage.report?.accounts ?? [];
+			return {
+				loading: usage.status === "loading",
+				shouldRefresh: usage.status === "idle",
+				noKey: accounts.length > 0 && !accounts.some((account) => account.configured)
+			};
+		}
+		//#endregion
+		//#region src/client/prices.ts
+		const IDLE = {
+			status: "idle",
+			table: void 0,
+			error: void 0
+		};
+		const RETRY_TIMER = {
+			set(callback, ms) {
+				const handle = setTimeout(callback, ms);
+				handle.unref?.();
+				return handle;
+			},
+			clear(handle) {
+				clearTimeout(handle);
+			}
+		};
+		/**
+		* Cache over the `commandcode/prices` Remote, with a bounded transient-retry
+		* budget. Public API mirrors {@link CommandCodeUsageController}: `state()`,
+		* `subscribe`, and `ensure()`; `reload()` additionally drops the cache and
+		* restarts the budget when the Host namespace rebinds.
+		*
+		* Not a one-shot: the last fetch is cached until `reload()`, a transient
+		* failure is retried three times at 1/2/4 s (the delays are bounded, not a
+		* poll), and a MANUAL `ensure()` still fetches after that budget is spent. A
+		* PERMANENT failure — the Host serving no such endpoint — is terminal for the
+		* binding and is only cleared by `reload()`.
+		*/
+		var CommandCodePricesController = class {
+			remote;
+			listeners = /* @__PURE__ */ new Set();
+			current = IDLE;
+			generation = 0;
+			inFlight = false;
+			disposed = false;
+			retryHandle;
+			attempts = 0;
+			permanent = false;
+			timer;
+			constructor(remote, timer = RETRY_TIMER) {
+				this.timer = timer;
+				this.remote = remote;
+			}
+			/** Release every subscription. Idempotent; in-flight results are dropped. */
+			dispose() {
+				this.disposed = true;
+				this.clearRetry();
+				this.listeners.clear();
+			}
+			/** Subscribe to state projections. @returns the disposer. */
+			subscribe(listener) {
+				this.listeners.add(listener);
+				return () => this.listeners.delete(listener);
+			}
+			/** The current state face. */
+			state() {
+				return this.current;
+			}
+			/**
+			* Fetch the table unless it is already loaded, permanent, or in flight — and
+			* unless a bounded retry already owns the next attempt.
+			*
+			* The only callers are the client entry: `reload()` when the Remote namespace
+			* lands or rebinds, and a manual refresh. Nothing in the composer calls it, so
+			* a mounted readout does not trigger a fetch of its own — it renders whatever
+			* the table's state currently is.
+			*/
+			ensure() {
+				if (this.disposed || this.permanent || this.inFlight || this.current.status === "ready") return;
+				this.clearRetry();
+				const call = this.remote.prices;
+				if (typeof call !== "function") {
+					this.permanent = true;
+					this.publish({
+						status: "error",
+						table: void 0,
+						error: "the Host serves no commandcode/prices endpoint"
+					});
+					return;
+				}
+				const generation = this.generation;
+				this.inFlight = true;
+				this.attempts += 1;
+				this.publish({
+					status: "loading",
+					table: this.current.table,
+					error: void 0
+				});
+				let request;
+				try {
+					request = call.call(this.remote);
+				} catch (error) {
+					request = Promise.reject(error);
+				}
+				request.then((result) => {
+					if (this.disposed || generation !== this.generation) return;
+					this.inFlight = false;
+					if (result.ok) {
+						this.publish({
+							status: "ready",
+							table: result.value,
+							error: void 0
+						});
+						return;
+					}
+					this.permanent = result.error.permanent === true;
+					this.publish({
+						status: "error",
+						table: void 0,
+						error: result.error.message
+					});
+					this.scheduleRetry();
+				}, (error) => {
+					if (this.disposed || generation !== this.generation) return;
+					this.inFlight = false;
+					this.publish({
+						status: "error",
+						table: void 0,
+						error: error instanceof Error ? error.message : String(error)
+					});
+					this.scheduleRetry();
+				});
+			}
+			/** Rebinding a Host invalidates cached prices and restarts the bounded retry budget. */
+			reload() {
+				if (this.disposed) return;
+				this.generation += 1;
+				this.inFlight = false;
+				this.clearRetry();
+				this.permanent = false;
+				this.attempts = 0;
+				this.current = IDLE;
+				this.ensure();
+			}
+			clearRetry() {
+				if (this.retryHandle !== void 0) this.timer.clear(this.retryHandle);
+				this.retryHandle = void 0;
+			}
+			scheduleRetry() {
+				if (this.disposed || this.permanent || this.attempts >= 4) return;
+				this.retryHandle = this.timer.set(() => {
+					this.retryHandle = void 0;
+					this.ensure();
+				}, 1e3 * 2 ** (this.attempts - 1));
+			}
+			publish(next) {
+				this.current = next;
+				for (const listener of this.listeners) listener();
+			}
+		};
 		//#endregion
 		//#region src/client/login.ts
 		/** How often a live attempt is polled. */
@@ -1680,7 +1840,16 @@ window.__ModuleLoader__.load({
 		*/
 		const { reject: reject$1, record: record$1, stringField: stringField$1, numberField, booleanField } = makeBoundaryValidator("commandcode/report result:");
 		/** Validate one window-limit block (`fiveHour` / `weekly`). */
+		/**
+		* Parse one quota window, or undefined when the frame carries no such window.
+		*
+		* The distinction is load-bearing at this boundary: an ABSENT window means the
+		* billing endpoint reported none (an unlimited plan), while a present block with
+		* `cap: 0` means uncapped spend that was really reported. Collapsing the two
+		* would draw a zeroed quota row for an account that has no such limit.
+		*/
 		function windowLimit(value, field) {
+			if (value === void 0) return void 0;
 			const source = record$1(value, field);
 			return {
 				used: numberField(source, "used", `${field}.used`),
@@ -1728,13 +1897,18 @@ window.__ModuleLoader__.load({
 			}
 			if (source.credits !== void 0) {
 				const credits = record$1(source.credits, "credits");
-				report.credits = {
+				const parsed = {
 					monthlyCredits: numberField(credits, "monthlyCredits", "credits.monthlyCredits"),
 					purchasedCredits: numberField(credits, "purchasedCredits", "credits.purchasedCredits"),
-					freeCredits: numberField(credits, "freeCredits", "credits.freeCredits"),
-					fiveHour: windowLimit(credits.fiveHour, "credits.fiveHour"),
-					weekly: windowLimit(credits.weekly, "credits.weekly")
+					freeCredits: numberField(credits, "freeCredits", "credits.freeCredits")
 				};
+				if (credits.monthlyReported !== void 0) parsed.monthlyReported = booleanField(credits, "monthlyReported", "credits.monthlyReported");
+				for (const flag of ["purchasedReported", "freeReported"]) if (credits[flag] !== void 0) parsed[flag] = booleanField(credits, flag, `credits.${flag}`);
+				const fiveHour = windowLimit(credits.fiveHour, "credits.fiveHour");
+				const weekly = windowLimit(credits.weekly, "credits.weekly");
+				if (fiveHour !== void 0) parsed.fiveHour = fiveHour;
+				if (weekly !== void 0) parsed.weekly = weekly;
+				report.credits = parsed;
 			}
 			if (source.plan !== void 0) {
 				const plan = record$1(source.plan, "plan");
@@ -1803,6 +1977,72 @@ window.__ModuleLoader__.load({
 			package: USAGE_REMOTE_PACKAGE,
 			descriptors: [makeRemoteDescriptor(MODELS_ENDPOINT, "models", `${USAGE_REMOTE_PACKAGE}#CommandCodeCatalog`, { parse: parseCatalog })]
 		};
+		/** Canonical `<namespace>/<method>` endpoint of the price-table Remote. */
+		const PRICES_ENDPOINT = "commandcode/prices";
+		/**
+		* The shared read/validate helpers for the price-table endpoint — its own
+		* instance so price boundary errors name `commandcode/prices`.
+		*/
+		const { reject: priceReject, record: priceRecord, stringField: priceString, numberField: priceNumber, booleanField: priceBoolean } = makeBoundaryValidator("commandcode/prices result:");
+		/** Parse one rate block (`rates`, or a model's `peak` override). */
+		function parseRates(source, field) {
+			const rates = {
+				inputCost: priceNumber(source, "inputCost", `${field}.inputCost`),
+				outputCost: priceNumber(source, "outputCost", `${field}.outputCost`),
+				cacheReadCost: priceNumber(source, "cacheReadCost", `${field}.cacheReadCost`)
+			};
+			if (source.cacheWriteCost !== void 0) rates.cacheWriteCost = priceNumber(source, "cacheWriteCost", `${field}.cacheWriteCost`);
+			return rates;
+		}
+		/** Parse one untrusted boundary value into a {@link CommandCodeModelPrice}. */
+		function parseModelPrice(value) {
+			const source = priceRecord(value, "model");
+			const price = {
+				id: priceString(source, "id", "model.id"),
+				slug: priceString(source, "slug", "model.slug"),
+				...parseRates(source, "model")
+			};
+			if (source.peak !== void 0) price.peak = parseRates(priceRecord(source.peak, "model.peak"), "model.peak");
+			if (source.contextTiers !== void 0) {
+				if (!Array.isArray(source.contextTiers) || source.contextTiers.length === 0) priceReject("contextTiers");
+				let previous = 0;
+				price.contextTiers = source.contextTiers.map((value, index, tiers) => {
+					const tier = priceRecord(value, "contextTier");
+					const out = parseRates(tier, "contextTier");
+					if (tier.maxContext !== void 0) {
+						const max = priceNumber(tier, "maxContext", "contextTier.maxContext");
+						if (!Number.isSafeInteger(max) || max <= previous || index === tiers.length - 1) priceReject("contextTier.maxContext");
+						previous = max;
+						out.maxContext = max;
+					} else if (index !== tiers.length - 1) priceReject("contextTier.maxContext");
+					return out;
+				});
+			}
+			if (source.free !== void 0) price.free = priceBoolean(source, "free", "model.free");
+			return price;
+		}
+		/** Parse the wire result into a {@link CommandCodePriceTable}. */
+		function parsePriceTable(value) {
+			const source = priceRecord(value, "result");
+			const models = source.models;
+			if (!Array.isArray(models)) priceReject("models");
+			const peakHours = source.peakHours;
+			if (!Array.isArray(peakHours)) priceReject("peakHours");
+			return {
+				models: models.map(parseModelPrice),
+				peakHours: peakHours.map((window) => {
+					if (!Array.isArray(window) || window.length !== 2) priceReject("peakHours[]");
+					const [start, end] = window;
+					if (typeof start !== "number" || typeof end !== "number") priceReject("peakHours[]");
+					return [start, end];
+				})
+			};
+		}
+		/** The Client-face contribution for the price-table endpoint. */
+		const PRICES_REMOTE_CONTRIBUTION = {
+			package: USAGE_REMOTE_PACKAGE,
+			descriptors: [makeRemoteDescriptor(PRICES_ENDPOINT, "prices", `${USAGE_REMOTE_PACKAGE}#CommandCodePriceTable`, { parse: parsePriceTable })]
+		};
 		//#endregion
 		//#region src/login-wire.ts
 		/** The canonical endpoint paths of the three login Remotes. */
@@ -2554,7 +2794,8 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/** One window-limit row: label, used/cap, a fill bar, and the reset time. */
-		function UsageWindow({ label, limit: { used, cap, exceeded, resetAt }, t }) {
+		function UsageWindow({ label, limit, t }) {
+			const { used, cap, exceeded, resetAt } = limit;
 			const ratio = windowRatio(used, cap);
 			const reset = formatResetAt(resetAt);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -2717,29 +2958,29 @@ window.__ModuleLoader__.load({
 						children: [
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageStat, {
 								label: t("usageMonthly"),
-								value: formatMoney(credits.monthlyCredits)
+								value: credits.monthlyReported === false ? "—" : formatMoney(credits.monthlyCredits)
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageStat, {
 								label: t("usagePurchased"),
-								value: formatMoney(credits.purchasedCredits)
+								value: credits.purchasedReported === false ? "—" : formatMoney(credits.purchasedCredits)
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageStat, {
 								label: t("usageFree"),
-								value: formatMoney(credits.freeCredits)
+								value: credits.freeReported === false ? "—" : formatMoney(credits.freeCredits)
 							})
 						]
 					}) : null,
-					credits !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					credits?.fiveHour !== void 0 || credits?.weekly !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "cc-usageWindows",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageWindow, {
+						children: [credits.fiveHour !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageWindow, {
 							label: t("usageFiveHour"),
 							limit: credits.fiveHour,
 							t
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageWindow, {
+						}) : null, credits.weekly !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageWindow, {
 							label: t("usageWeekly"),
 							limit: credits.weekly,
 							t
-						})]
+						}) : null]
 					}) : null,
 					showPeriod || showPartial || fetchedAt !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "cc-usageMeta",
@@ -2800,15 +3041,11 @@ window.__ModuleLoader__.load({
 		* management card are hidden here immediately. Data arrives through the
 		* `commandcode/report` Remote; the API keys never leave the Host.
 		*/
-		function UsageCard({ t, usage, apiKeyConfigured, removingIds, removableIds, canManage, onRefresh, onRemoveAccount }) {
+		function UsageCard({ t, usage, removingIds, removableIds, canManage, onRefresh, onRemoveAccount }) {
+			const { loading, shouldRefresh, noKey } = usageCardState(usage);
 			(0, react.useEffect)(() => {
-				if (apiKeyConfigured && usage.status === "idle") onRefresh();
-			}, [
-				apiKeyConfigured,
-				usage.status,
-				onRefresh
-			]);
-			const loading = usage.status === "loading";
+				if (shouldRefresh) onRefresh();
+			}, [shouldRefresh, onRefresh]);
 			const report = usage.report;
 			const [locallyRemoved, setLocallyRemoved] = (0, react.useState)([]);
 			(0, react.useEffect)(() => {
@@ -2844,17 +3081,17 @@ window.__ModuleLoader__.load({
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
 								className: "cc-usageRefresh",
-								disabled: loading || !apiKeyConfigured,
+								disabled: loading,
 								onClick: onRefresh,
 								children: loading ? t("usageRefreshing") : t("usageRefresh")
 							})
 						]
 					}),
-					!apiKeyConfigured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					noKey ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: "cc-usageHint",
 						children: t("usageNoKey")
 					}) : null,
-					apiKeyConfigured && report === void 0 && loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					report === void 0 && loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: "cc-usageHint",
 						children: t("usageLoading")
 					}) : null,
@@ -3399,7 +3636,6 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UsageCard, {
 						t,
 						usage,
-						apiKeyConfigured: state.anyAccountConfigured,
 						removingIds: state.accountsRemoving,
 						removableIds: state.accounts.map((account) => account.id),
 						canManage: state.writable,
@@ -3535,7 +3771,7 @@ window.__ModuleLoader__.load({
 			return null;
 		}
 		/** The closed-panel style: the outlet stays mounted as the detection anchor. */
-		const HIDDEN_STYLE = { display: "none" };
+		const HIDDEN_STYLE$1 = { display: "none" };
 		/**
 		* Decide the card's posture from one settings snapshot. Pure: the component
 		* subscribes once and passes the snapshot in, so hook order never depends
@@ -3655,7 +3891,7 @@ window.__ModuleLoader__.load({
 				ref: rootRef,
 				className: "cc-providerCard",
 				"data-cc-models-card": "true",
-				style: editorOpen ? void 0 : HIDDEN_STYLE,
+				style: editorOpen ? void 0 : HIDDEN_STYLE$1,
 				children: [
 					editorOpen && mode.kind === "registration" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: "cc-hint",
@@ -3728,172 +3964,1976 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
-		//#region src/client/locales.ts
-		const zh = {
+		//#region src/client/panel-copy.ts
+		/** The panel's literal string table. */
+		const PANEL_COPY = {
 			nav: "Command Code",
-			title: "Command Code",
-			intro: "配置 Command Code Provider 连接。API 密钥仅保存在本机凭据服务中，不会回显；其他字段写入用户设置，下次请求即生效。",
-			apiKey: "API 密钥",
-			apiKeyHint: "在 commandcode.ai 控制台创建。留空保存不会覆盖已存储的密钥。",
-			apiKeySet: "已配置",
-			apiKeyUnset: "未配置",
-			apiKeyLocked: "密钥由只读来源提供",
-			apiBase: "API 地址",
-			apiBaseHint: "默认 https://api.commandcode.ai，一般无需修改。",
-			workingDir: "工作目录",
-			workingDirHint: "可选。留空时使用占位符显示的进程工作目录；仅在需要固定路径时填写。",
-			requestTimeoutMs: "请求超时（毫秒）",
-			requestTimeoutMsHint: "等待响应首个字节的超时；默认 60000。",
-			streamIdleTimeoutMs: "流空闲超时（毫秒）",
-			streamIdleTimeoutMsHint: "生成流停滞多久视为断连；默认 300000（长思考模型可静默数分钟，默认值刻意放宽）。",
-			advancedSettings: "高级设置",
-			advancedSettingsHint: "API 地址、工作目录、超时与模型过滤等不常修改的选项。",
-			advancedOverriddenOne: "已自定义 1 项",
-			advancedOverriddenMany: "已自定义 {count} 项",
-			advancedInvalid: "高级设置中有未填好的数字，请展开修正后再保存。",
-			filterModelsByPlan: "隐藏套餐外模型",
-			filterModelsByPlanHint: "开启后，模型选择器只列出当前套餐可用的模型；账户持有按需余额时会显示全部。",
-			webSearch: "用 Command Code 承载联网搜索",
-			webSearchHint: "开启后，dsh 的 web_search 工具由 Command Code 承担（复用同一个 API key 与地址），并优先于其他搜索后端；关闭则把选择权交还给之前的后端（如 modsearch），而不是强制回退到 DeepSeek 搜索。",
-			accountsTitle: "多账户轮换",
-			accountsHint: "当前账户达到用量限额（429）或密钥失效（401）时，请求自动切换到下一个账户；全部耗尽时会提示最早的重置时间。",
-			accountAdd: "添加账户",
-			accountRemove: "移除",
-			accountLabel: "账户备注名",
-			accountKey: "API 密钥",
-			accountKeyHint: "该账户的 API 密钥。留空保存不会覆盖已存储的密钥。",
-			accountDefault: "默认账户",
-			activeAccount: "当前使用账户",
-			activeAccountAuto: "自动（第一个可用账户）",
-			activeAccountHint: "手动指定优先使用的账户，保存后下次请求即生效；所选账户耗尽时仍会自动切换到其他可用账户。",
-			rulesTitle: "按模型切换账户",
-			rulesHint: "选择模型并路由到某个账户（可多选）。命中规则的模型且该账户可用时优先使用；账户耗尽或密钥失效时仍自动回落到其他账户。规则按列表顺序匹配，第一条命中生效。",
-			rulesEmpty: "尚未配置规则。",
-			rulesCatalogFailed: "模型目录获取失败，暂时无法选择模型；已保存的规则仍会生效。",
-			ruleAdd: "添加规则",
-			ruleRemove: "移除",
-			ruleModel: "模型",
-			ruleModelPick: "选择模型…",
-			ruleModelCount: "已选 {count} 个模型",
-			ruleAccount: "目标账户",
-			ruleHint: "从下拉列表勾选要路由的模型（可多选），再选择目标账户。",
-			modelSearchPlaceholder: "搜索模型…",
-			modelSearchEmpty: "没有匹配的模型。",
-			modelStale: "已下架",
-			visibleModelsTitle: "模型白名单",
-			visibleModelsHint: "勾选要保留的模型，模型选择器就只列出这些；一个都不勾选时则显示全部模型。保存后，下次打开模型选择器生效。",
-			visibleModelsPick: "选择要保留的模型…",
-			visibleModelsCount: "已选 {count} 个模型",
-			visibleModelsShowAll: "显示全部",
-			visibleModelsStaleHint: "有 {count} 个已选模型在目录中找不到了（可能已下架），不影响其他模型；可清理或保留。",
-			visibleModelsCleanStale: "清理失效（{count}）",
-			overridden: "已覆盖",
-			reset: "重置",
-			invalidNumber: "无效数字",
-			numberTooSmall: "不能小于 1（毫秒）",
-			numberTooLarge: "超出允许上限（2147483647 毫秒）",
-			readOnly: "当前配置为只读。",
-			unsaved: "未保存",
-			save: "保存",
-			saving: "保存中",
-			saved: "已保存 ✓",
-			saveFailed: "保存失败，请重试。",
-			discard: "放弃",
-			cancel: "取消",
-			show: "显示",
-			hide: "隐藏",
-			usageTitle: "账户用量",
-			usageRefresh: "刷新",
-			usageRefreshing: "刷新中…",
-			usageLoading: "正在获取账户用量…",
-			usageNoKey: "配置 API 密钥后，这里会显示账户的用量与额度状态。",
-			usageError: "用量获取失败",
-			usageRequests: "请求",
-			usageFailed: "失败",
-			usageSuccessRate: "成功率",
-			usageCost: "花费",
-			usageTokens: "Token",
-			usageTokensIn: "入",
-			usageTokensOut: "出",
-			usageMonthly: "月额度",
-			usagePurchased: "已购",
-			usageFree: "赠送",
-			usageFiveHour: "5 小时窗口",
-			usageWeekly: "每周窗口",
-			usageExceeded: "已超限",
-			usageReset: "重置于",
-			usagePartial: "部分端点数据不可用",
-			usageKeyClear: "清除已存密钥",
-			usageKeyClearStaged: "将清除（保存后生效）",
-			usageUndoKeyClear: "撤销清除",
-			usageKeyInvalid: "API 密钥无效或已过期",
-			usageKeyInvalidHint: "服务端拒绝了全部请求（401）。请检查该账户配置的密钥，或到 commandcode.ai 控制台重新生成。",
-			usageServiceUnavailable: "Command Code 服务暂时不可用",
-			usageServiceUnavailableHint: "服务端返回了错误（5xx），稍后点击刷新重试。",
-			usageNetworkError: "无法连接 Command Code 服务",
-			usageNetworkHint: "所有请求都没有到达服务端。请检查网络连接或 API 地址设置。",
-			usageUpdated: "更新于",
-			usagePeriodEnd: "账期截止",
-			usageActive: "当前使用",
-			usageCooldown: "限额冷却中",
-			usageInvalidKey: "密钥无效",
-			usageUnconfigured: "该账户尚未配置 API 密钥。",
-			updateAvailable: "可更新",
-			updateHint: "已发布新版本，点击查看发布说明；更新插件后刷新本页，提示会自动消失。",
-			loginTitle: "通过官方登录获取密钥",
-			loginHintIdle: "不想手动创建密钥？点击登录后浏览器会打开 commandcode.ai 授权页，完成后密钥自动写入本机凭据服务，下次请求即生效。",
-			loginButton: "登录 Command Code",
-			loginStarting: "正在启动本地回调服务…",
-			loginWaiting: "等待在浏览器中完成授权…",
-			loginOpenLink: "打开授权页面 ↗",
-			loginCancel: "取消登录",
-			loginSuccess: "已登录为",
-			loginUnavailable: "此环境暂不支持登录流程，请手动粘贴密钥。",
-			loginDenied: "授权被拒绝。可重试，或手动粘贴密钥。",
-			loginTimeout: "等待超时：未在窗口期内收到授权回调，请重试。",
-			loginInvalidKey: "获取到的密钥未通过校验（401），请重试或手动粘贴。",
-			loginNetwork: "无法连接 Command Code 服务校验密钥，请检查网络后重试。",
-			loginStoreFailed: "密钥无法写入本机凭据服务，请手动粘贴。",
-			loginCancelled: "登录已取消。",
-			loginFailedGeneric: "登录失败，请重试或手动粘贴密钥。",
-			cardTitle: "Command Code",
-			cardRouteActive: "已启用",
-			cardLoadingHint: "正在读取 Command Code 配置…",
-			cardRegistrationHint: "此卡片随 Command Code 插件注册，需要较新版本的 DeepSeek Harness 才会显示完整内容。"
+			subtitle: "Plans, credits and quota windows",
+			refresh: "Refresh",
+			refreshing: "Refreshing…",
+			loading: "Loading account usage…",
+			noKey: "No API key configured",
+			noKeyHint: "Paste a key — or sign in — under Settings → Command Code, then refresh.",
+			plan: "Plan",
+			credits: "Credits",
+			limits: "Quota windows",
+			usage: "Usage",
+			monthly: "Monthly",
+			monthlyLimit: "Monthly limit",
+			monthlyUsed: "Monthly used",
+			remaining: "Remaining",
+			purchased: "Purchased",
+			free: "Free",
+			fiveHour: "5-hour window",
+			weekly: "Weekly window",
+			fiveHourShort: "5-hour",
+			weeklyShort: "Weekly",
+			windowUnlimited: "unlimited",
+			exceeded: "Exceeded",
+			exhausted: "Used up",
+			resets: "Resets",
+			requests: "Requests",
+			failed: "failed",
+			successRate: "Success rate",
+			spend: "Spend",
+			tokens: "Tokens",
+			tokensIn: "in",
+			tokensOut: "out",
+			periodEnds: "Period ends",
+			updated: "Updated",
+			partial: "Some endpoint data unavailable",
+			active: "Active",
+			coolingDown: "Cooling down",
+			invalidKey: "Invalid key",
+			unconfigured: "Not configured",
+			unavailable: "No data",
+			errorInvalidKey: "API key invalid or expired",
+			errorInvalidKeyHint: "The server rejected every request (401). Check the key for this account, or generate a new one in the commandcode.ai console.",
+			errorServiceUnavailable: "The Command Code service is temporarily unavailable",
+			errorServiceUnavailableHint: "The server returned errors (5xx). Try Refresh again in a moment.",
+			errorNetwork: "Could not reach the Command Code service",
+			errorNetworkHint: "No request reached the server. Check your network connection or the API base setting.",
+			errorGeneric: "Could not fetch account usage"
 		};
-		const en = {
-			nav: "Command Code",
-			title: "Command Code",
-			intro: "Configure the Command Code Provider connection. The API key is stored only in the local credential service and never echoed; other fields are written to user settings and take effect on the next request.",
-			apiKey: "API key",
-			apiKeyHint: "Create one in the commandcode.ai console. Saving with this field blank keeps the stored key.",
-			apiKeySet: "Configured",
-			apiKeyUnset: "Not configured",
-			apiKeyLocked: "Key provided by a read-only source",
-			apiBase: "API base URL",
-			apiBaseHint: "Defaults to https://api.commandcode.ai; usually leave as-is.",
-			workingDir: "Working directory",
-			workingDirHint: "Optional. Leave blank to use the process cwd shown as the placeholder; fill in only to pin a specific path.",
-			requestTimeoutMs: "Request timeout (ms)",
-			requestTimeoutMsHint: "Time to wait for the first response byte; default 60000.",
-			streamIdleTimeoutMs: "Stream idle timeout (ms)",
-			streamIdleTimeoutMsHint: "How long a stalled stream is treated as dead; default 300000 (deliberately generous — long-thinking models can stay silent for minutes).",
-			advancedSettings: "Advanced",
-			advancedSettingsHint: "Rarely touched options: API base URL, working directory, timeouts, and model filtering.",
-			advancedOverriddenOne: "1 customized",
-			advancedOverriddenMany: "{count} customized",
-			advancedInvalid: "A number in Advanced settings is not ready to save; expand to fix it.",
-			filterModelsByPlan: "Hide out-of-plan models",
-			filterModelsByPlanHint: "When on, the model picker lists only models your subscription includes; any on-demand credit balance shows the full catalog.",
-			webSearch: "Serve dsh web search with Command Code",
-			webSearchHint: "When on, the model-facing web_search tool is backed by Command Code (same API key and base URL as chat), winning over other search backends. Off hands the selection back to the previous backend (e.g. modsearch) instead of forcing the shipped DeepSeek search.",
-			accountsTitle: "Account rotation",
-			accountsHint: "When the active account hits its usage limit (429) or its key fails (401), requests switch to the next account; when every account is exhausted the error names the earliest window reset.",
-			accountAdd: "Add account",
-			accountRemove: "Remove",
-			accountLabel: "Account label",
-			accountKey: "API key",
-			accountKeyHint: "This account’s API key. Saving with the field blank keeps the stored key.",
+		/** Look up one panel string. The fallback key keeps a bad call visible, never blank. */
+		function panelText(key) {
+			return PANEL_COPY[key] ?? key;
+		}
+		//#endregion
+		//#region src/client/panel.ts
+		/** `$1.23`, and `$0.0123` only when the amount is too small for cents to show it. */
+		function money(value) {
+			if (value === 0) return formatMoney(0);
+			return Math.abs(value) < .01 ? formatMoneyExact(value) : formatMoney(value);
+		}
+		/**
+		* What a figure shows when the endpoint that carries it did not report one.
+		* A dash, never a zero: the panel exists to state what the account has spent,
+		* so "we were not told" has to look different from "nothing".
+		*/
+		const UNREPORTED = "—";
+		/** Local reset time; empty when the endpoint reported none. */
+		function resetText(ms) {
+			if (ms <= 0) return "";
+			return new Date(ms).toLocaleString();
+		}
+		/** Local short date; empty when unset. */
+		function dateText(ms) {
+			if (ms <= 0) return "";
+			return new Date(ms).toLocaleDateString();
+		}
+		/** Local time-of-day; empty when unset. */
+		function timeText(ms) {
+			if (ms <= 0) return "";
+			return new Date(ms).toLocaleTimeString();
+		}
+		/**
+		* Consumption as a percentage, NOT clamped at 100 — an over-quota window
+		* reports its real overshoot (150%), which is what the printed figure should
+		* say. Bar widths clamp separately via {@link barPercent}.
+		*/
+		function rawPercent(used, cap) {
+			if (cap <= 0) return 0;
+			return Math.round(used / cap * 100);
+		}
+		/** A percentage usable as a CSS width, clamped into [0, 100]. */
+		function barPercent(percent) {
+			return Math.min(100, Math.max(0, percent));
+		}
+		/** Build one quota-window view. */
+		function windowView(label, limit) {
+			const percent = rawPercent(limit.used, limit.cap);
+			const capped = limit.cap > 0;
+			return {
+				label,
+				value: capped ? `${money(limit.used)} / ${money(limit.cap)}` : money(limit.used),
+				capped,
+				percent,
+				barPercent: barPercent(percent),
+				exceeded: limit.exceeded,
+				resetsAt: resetText(limit.resetAt)
+			};
+		}
+		/**
+		* Build the monthly credit view from the two endpoints that carry it.
+		*
+		* The limit is the PLAN's credit total, not the billing endpoint's
+		* `monthlyCredits` — that field is a remaining balance (see
+		* {@link PanelMonthlyView}). Unknown plans (no `monthlyCredits` on the plan
+		* record) therefore still show their balances, just without a ratio.
+		*
+		* The trap this guards: a MISSING balance is not a consumed one. The billing
+		* endpoint is one of four the report fetches in parallel, so it fails on its
+		* own while the plan still arrives — and reading the absent balance as 0 would
+		* turn that partial failure into `limit - 0 = limit`, i.e. a confident "100%
+		* used, quota exhausted" for an account that may have spent nothing. The
+		* official CLI draws no meter unless the credits payload is present at all
+		* (`hasCreditsInfo`), so "unreported" is the upstream-faithful reading here
+		* too. Every derived figure stays a placeholder until the balance reported.
+		*/
+		function monthlyView(report) {
+			const credits = report.credits;
+			const plan = report.plan;
+			if (credits === void 0 && plan === void 0) return void 0;
+			const limitValue = plan?.monthlyCredits ?? null;
+			const remainingReported = credits !== void 0 && credits.monthlyReported !== false;
+			const remaining = remainingReported ? Math.max(0, credits.monthlyCredits) : 0;
+			const known = limitValue !== null && limitValue > 0 && remainingReported;
+			const used = known ? Math.max(0, limitValue - remaining) : 0;
+			const percent = known ? rawPercent(used, limitValue) : 0;
+			return {
+				known,
+				limit: limitValue !== null ? money(limitValue) : UNREPORTED,
+				used: known ? money(used) : UNREPORTED,
+				remaining: remainingReported ? money(remaining) : UNREPORTED,
+				purchased: credits !== void 0 && credits.purchasedReported !== false ? money(Math.max(0, credits.purchasedCredits)) : UNREPORTED,
+				free: credits !== void 0 && credits.freeReported !== false ? money(Math.max(0, credits.freeCredits)) : UNREPORTED,
+				percent,
+				barPercent: barPercent(percent),
+				exhausted: known && remaining <= 0,
+				periodEnds: dateText(plan?.currentPeriodEnd ?? 0)
+			};
+		}
+		/** Build one account's view. */
+		function accountView(entry) {
+			const { report } = entry;
+			const account = report.account;
+			const plan = report.plan;
+			const credits = report.credits;
+			const usage = report.usage;
+			const stats = [];
+			if (usage !== void 0) {
+				stats.push({
+					label: "requests",
+					value: String(usage.completedCount),
+					sub: `${usage.failedCount} ${panelText("failed")}`
+				});
+				stats.push({
+					label: "successRate",
+					value: `${formatSuccessRate(usage.successRate)}%`,
+					sub: ""
+				});
+				stats.push({
+					label: "spend",
+					value: formatMoneyExact(usage.totalCost),
+					sub: `${formatMoney(usage.totalCredits)} credits`
+				});
+				stats.push({
+					label: "tokens",
+					value: formatTokensCompact(usage.totalTokensIn + usage.totalTokensOut),
+					sub: `${formatTokensCompact(usage.totalTokensIn)} ${panelText("tokensIn")} / ${formatTokensCompact(usage.totalTokensOut)} ${panelText("tokensOut")}`
+				});
+			}
+			const windows = [];
+			if (credits?.fiveHour !== void 0) windows.push(windowView("fiveHour", credits.fiveHour));
+			if (credits?.weekly !== void 0) windows.push(windowView("weekly", credits.weekly));
+			let mark;
+			if (entry.active) mark = "active";
+			else if (entry.mark === "invalid-credential") mark = "invalidKey";
+			else if (entry.cooldownUntil > 0 || entry.mark === "rate-limit") mark = "coolingDown";
+			return {
+				id: entry.id,
+				label: entry.label,
+				owner: account === void 0 ? "" : account.userName || account.name,
+				planName: plan?.name ?? "",
+				planStatus: plan !== void 0 && plan.status !== "" && plan.status !== "active" ? plan.status : "",
+				mark,
+				cooldownUntil: entry.cooldownUntil > 0 ? resetText(entry.cooldownUntil) : "",
+				unconfigured: !entry.configured,
+				periodEnds: dateText(plan?.currentPeriodEnd ?? 0),
+				active: entry.active,
+				monthly: monthlyView(report),
+				windows,
+				stats
+			};
+		}
+		/** The report-level failure box, or undefined when the report is usable. */
+		function failureView(state) {
+			const blocked = state.report?.accounts.find((entry) => entry.report.blocked !== void 0)?.report.blocked;
+			if (blocked === "invalid-key") return {
+				title: "errorInvalidKey",
+				hint: "errorInvalidKeyHint",
+				detail: ""
+			};
+			if (blocked === "service-unavailable") return {
+				title: "errorServiceUnavailable",
+				hint: "errorServiceUnavailableHint",
+				detail: ""
+			};
+			if (blocked === "network") return {
+				title: "errorNetwork",
+				hint: "errorNetworkHint",
+				detail: ""
+			};
+			if (state.status === "error" && state.report === void 0) return {
+				title: "errorGeneric",
+				hint: "errorGeneric",
+				detail: state.error ?? ""
+			};
+		}
+		/**
+		* Every panel string, resolved once per projection. One object with all keys
+		* (rather than per-field lookups in the components) keeps the copy table and
+		* the render sites in lockstep: a key cannot be read from `text` unless
+		* {@link PANEL_COPY} declares it.
+		*/
+		function panelStrings() {
+			const keys = Object.keys(PANEL_COPY);
+			const out = {};
+			for (const key of keys) out[key] = panelText(key);
+			return out;
+		}
+		/**
+		* Project the shared usage snapshot into the panel's render tree.
+		*
+		* Deduplication matches the settings card: hand-edited settings can name one
+		* credential twice, and removal staging hides an account before the post-save
+		* refresh lands.
+		*/
+		function buildPanelView(input) {
+			const { usage } = input;
+			const hidden = new Set(input.removingIds ?? []);
+			const seen = /* @__PURE__ */ new Set();
+			const entries = (usage.report?.accounts ?? []).filter((entry) => {
+				if (hidden.has(entry.id)) return false;
+				if (seen.has(entry.id)) return false;
+				seen.add(entry.id);
+				return true;
+			});
+			const accounts = entries.map(accountView);
+			const selectedEntry = entries.find((entry) => entry.active) ?? entries[0];
+			const selectedView = accounts.find((view) => view.id === selectedEntry?.id);
+			const footerBars = [];
+			const windowBars = [["fiveHourShort", selectedEntry?.report.credits?.fiveHour], ["weeklyShort", selectedEntry?.report.credits?.weekly]];
+			for (const [label, window] of windowBars) {
+				if (window === void 0 || window.cap <= 0) continue;
+				const percent = rawPercent(window.used, window.cap);
+				footerBars.push({
+					label,
+					percent: `${percent}%`,
+					barPercent: barPercent(percent),
+					warn: window.exceeded,
+					detail: `${money(window.used)} / ${money(window.cap)}`
+				});
+			}
+			const totalCost = selectedEntry?.report.usage?.totalCost;
+			const cost = totalCost === void 0 ? "" : money(totalCost);
+			let status = "";
+			if (entries.length > 0 && !entries.some((entry) => entry.configured)) status = panelText("unconfigured");
+			else if (selectedView?.mark !== void 0 && selectedView.mark !== "active") status = panelText(selectedView.mark);
+			else if (selectedEntry === void 0) status = panelText("unavailable");
+			const planName = selectedView !== void 0 && selectedView.planName !== "" ? selectedView.planName : panelText("nav");
+			const titleParts = planName === panelText("nav") ? [planName] : [panelText("nav"), planName];
+			for (const bar of footerBars) {
+				const figures = bar.detail === "" ? "" : ` ${bar.detail}`;
+				titleParts.push(`${panelText(bar.label)}${figures} (${bar.percent})`);
+			}
+			if (cost !== "") titleParts.push(`${panelText("spend")} ${cost}`);
+			return {
+				text: panelStrings(),
+				planName,
+				status,
+				footerBars,
+				cost,
+				footTitle: titleParts.join(" · "),
+				accounts,
+				selectedId: selectedEntry?.id,
+				selected: selectedView,
+				loading: usage.status === "loading" && usage.report === void 0,
+				noKey: entries.length > 0 && !entries.some((entry) => entry.configured),
+				failure: failureView(usage),
+				staleError: usage.status === "error" && usage.report !== void 0 ? usage.error ?? "" : void 0,
+				partial: usage.report?.accounts.some((entry) => entry.report.failures.length > 0 && entry.report.blocked === void 0) ?? false ? "partial" : void 0,
+				updatedAt: timeText(usage.fetchedAt ?? 0)
+			};
+		}
+		/**
+		* How often the panel re-reads the report while a surface is mounted. The
+		* quota windows move slowly and one report costs four upstream calls, so this
+		* is a background freshness tick, not a live meter.
+		*/
+		const PANEL_AUTO_REFRESH_MS = 12e4;
+		/** The default timer (the client bundle runs in a browser; node tests inject one). */
+		const REAL_TIMER = {
+			set: (callback, ms) => setTimeout(callback, ms),
+			clear: (handle) => clearTimeout(handle)
+		};
+		/** Live mount count of {@link startPanelAutoRefresh}. */
+		let references = 0;
+		/** Owner ticket of the running loop, if any. */
+		let activeTicket;
+		/** Ticket handed to the next starter. */
+		let ticketSeq = 0;
+		/** Pending timer handle of the running loop. */
+		let handle;
+		/**
+		* Start the shared auto refresh. One fetch when the surface appears (the
+		* sidebar row is the point of the panel — it must be current, not wait for a
+		* click), then a tick every {@link PANEL_AUTO_REFRESH_MS} while a surface
+		* stays mounted.
+		*
+		* Reference-counted: the sidebar entry and the dashboard can be mounted at
+		* once, so only the first start fetches and only the last stop halts the loop.
+		* Every tick goes through `usage.refresh()`, which already collapses a
+		* concurrent fetch onto the in-flight one — a tick never double-fetches
+		* against the settings page's own refresh.
+		*
+		* @param usage - the shared usage controller.
+		* @param isConfigured - whether a credential exists right now (re-read per tick).
+		* @param timer - timer seam for tests.
+		* @returns the disposer that drops this surface's reference.
+		*/
+		function startPanelAutoRefresh(usage, isConfigured, timer = REAL_TIMER) {
+			references += 1;
+			const ticket = ++ticketSeq;
+			const tick = () => {
+				if (activeTicket !== ticket) return;
+				if (isConfigured()) usage.refresh();
+				handle = timer.set(tick, PANEL_AUTO_REFRESH_MS);
+			};
+			if (activeTicket === void 0) {
+				activeTicket = ticket;
+				handle = timer.set(tick, PANEL_AUTO_REFRESH_MS);
+				if (isConfigured()) usage.refresh();
+			}
+			let stopped = false;
+			return () => {
+				if (stopped) return;
+				stopped = true;
+				references -= 1;
+				if (references > 0) return;
+				activeTicket = void 0;
+				if (handle !== void 0) {
+					timer.clear(handle);
+					handle = void 0;
+				}
+			};
+		}
+		//#endregion
+		//#region src/client/panel-view.tsx
+		/**
+		* React components for the Command Code plans & quota panel (browser half):
+		* the sidebar footer card and the dashboard it opens in the center column.
+		*
+		* Both render one {@link PanelView} projected by `./panel.ts` — no fact is
+		* derived here. Strings arrive as keys into `view.text`, and every one of them
+		* is English, because the view is built from `./panel-copy.ts` rather than the
+		* harness `ctx.locale` namespace (which follows the user's language and would
+		* render this panel in Chinese on a Chinese harness — the thing this surface
+		* exists to avoid).
+		*
+		* The footer card is the panel's home: the sidebar shell renders it in the foot
+		* area directly above the Settings seat, so each quota window's own spend and
+		* limit — the 5-hour and the weekly one — are on screen without opening
+		* anything. Clicking it selects the `main` panel this file also renders — and
+		* unlike a `sidebar.panellist` row, whose button chrome and label the SHELL
+		* owns, this entry owns its whole surface and therefore calls `open()` itself.
+		*
+		* Styles ride the stylesheet `./panel-styles.ts` returns, injected once by
+		* the client entry; classes are `ccp-` prefixed to stay clear of the settings
+		* page's `cc-` set.
+		*
+		* @module dsh-commandcode-provider/client/panel-view
+		*/
+		/** The panel's view, recomputed from both seats on every notification. */
+		function usePanelView(props) {
+			const usage = props.useCommandCodeUsage((state) => state);
+			const settings = props.useCommandCodeSettings((state) => state);
+			return buildPanelView({
+				usage,
+				apiKeyConfigured: settings.anyAccountConfigured,
+				removingIds: settings.accountsRemoving
+			});
+		}
+		/**
+		* The quota ring. One glyph serves the rail button, the footer card's top row
+		* and the dashboard header: a faint track plus an arc whose sweep is the
+		* consumption, drawn from 12 o'clock. Circumference 2πr = 45.55 at r = 7.25.
+		*/
+		function Ring({ percent, warn, size }) {
+			const clamped = Math.min(100, Math.max(0, percent));
+			const circumference = 45.55;
+			const dashoffset = Math.round(circumference * (1 - clamped / 100) * 1e3) / 1e3;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: "ccp-glyph",
+				"aria-hidden": "true",
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("svg", {
+					viewBox: "0 0 20 20",
+					width: size,
+					height: size,
+					focusable: "false",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("circle", {
+						cx: "10",
+						cy: "10",
+						r: "7.25",
+						fill: "none",
+						stroke: "currentColor",
+						strokeWidth: "1.5",
+						opacity: "0.4"
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("circle", {
+						cx: "10",
+						cy: "10",
+						r: "7.25",
+						fill: "none",
+						stroke: warn ? "var(--dsw-alias-state-error-primary)" : "currentColor",
+						strokeWidth: "2.5",
+						strokeLinecap: "round",
+						strokeDasharray: String(circumference),
+						strokeDashoffset: String(dashoffset),
+						transform: "rotate(-90 10 10)"
+					})]
+				})
+			});
+		}
+		/** One labelled bar. `compact` drops the reset line; the footer draws its own. */
+		function QuotaBar({ label, value, percent, barPercent, warn, resetsAt, resetsLabel }) {
+			const clamped = Math.min(100, Math.max(0, barPercent));
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "ccp-window",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ccp-windowHead",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-windowLabel",
+								children: label
+							}),
+							warn !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-warnTag",
+								children: warn
+							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "ccp-spacer" }),
+							value !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-windowValue",
+								children: value
+							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-windowPct",
+								children: percent
+							})
+						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "ccp-bar",
+						role: "progressbar",
+						"aria-label": label,
+						"aria-valuemin": 0,
+						"aria-valuemax": 100,
+						"aria-valuenow": clamped,
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: warn !== "" ? "ccp-barFill ccp-barFillWarn" : "ccp-barFill",
+							style: { width: `${clamped}%` }
+						})
+					}),
+					resetsAt !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+						className: "ccp-windowReset",
+						children: [
+							resetsLabel,
+							" ",
+							resetsAt
+						]
+					}) : null
+				]
+			});
+		}
+		/** A labelled figure. */
+		function Tile({ label, value, sub }) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "ccp-tile",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "ccp-tileLabel",
+						children: label
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "ccp-tileValue",
+						children: value
+					}),
+					sub !== void 0 && sub !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "ccp-tileSub",
+						children: sub
+					}) : null
+				]
+			});
+		}
+		/** One usage tile. */
+		function StatTile({ stat, label }) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Tile, {
+				label,
+				value: stat.value,
+				sub: stat.sub
+			});
+		}
+		/** The rotation/credential badge line for one account. */
+		function markText(account, text) {
+			if (account.mark === void 0) return "";
+			if (account.mark === "coolingDown" && account.cooldownUntil !== "") return `${text("coolingDown")} · ${account.cooldownUntil}`;
+			return text(account.mark);
+		}
+		/** `Default account` → `D`; used for the card's monogram chip. */
+		function initial(label) {
+			const trimmed = label.trim();
+			return trimmed === "" ? "?" : trimmed[0].toUpperCase();
+		}
+		/**
+		* One account's full report: the monthly limit/usage bar, the two quota
+		* windows, then the credit and usage totals.
+		*/
+		function AccountCard({ account, view }) {
+			const text = (key) => view.text[key] ?? key;
+			const mark = markText(account, text);
+			const monthly = account.monthly;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "ccp-card",
+				"aria-label": account.label,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("header", {
+						className: "ccp-cardHead",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-avatar",
+								"aria-hidden": "true",
+								children: initial(account.label)
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+								className: "ccp-cardIdentity",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "ccp-cardTitle",
+									children: account.label
+								}), account.owner !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "ccp-cardOwner",
+									children: account.owner
+								}) : null]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "ccp-spacer" }),
+							account.planName !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-badge",
+								children: account.planName
+							}) : null,
+							account.planStatus !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-badge ccp-badgeWarn",
+								children: account.planStatus
+							}) : null,
+							mark !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: account.mark === "invalidKey" ? "ccp-badge ccp-badgeError" : "ccp-badgeMuted",
+								children: mark
+							}) : null,
+							account.periodEnds !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+								className: "ccp-meta",
+								children: [
+									text("periodEnds"),
+									" ",
+									account.periodEnds
+								]
+							}) : null
+						]
+					}),
+					account.unconfigured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "ccp-hint",
+						children: text("unconfigured")
+					}) : null,
+					monthly !== void 0 && monthly.known ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(QuotaBar, {
+						label: text("monthly"),
+						value: `${monthly.used} / ${monthly.limit}`,
+						percent: `${monthly.percent}%`,
+						barPercent: monthly.barPercent,
+						warn: monthly.exhausted ? text("exhausted") : "",
+						resetsAt: "",
+						resetsLabel: ""
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ccp-planRow",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "ccp-fieldLabel",
+							children: text("plan")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "ccp-planName",
+							children: account.planName !== "" ? account.planName : text("unavailable")
+						})]
+					}),
+					monthly !== void 0 && monthly.remaining !== "—" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ccp-planRow",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "ccp-fieldLabel",
+							children: text("remaining")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "ccp-planName",
+							children: monthly.remaining
+						})]
+					}) : null,
+					account.windows.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "ccp-windows",
+						children: account.windows.map((window) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(QuotaBar, {
+							label: text(window.label),
+							value: window.value,
+							percent: window.capped ? `${window.percent}%` : text("windowUnlimited"),
+							barPercent: window.barPercent,
+							warn: window.exceeded ? text("exceeded") : "",
+							resetsAt: window.resetsAt,
+							resetsLabel: text("resets")
+						}, window.label))
+					}) : null,
+					monthly !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ccp-block",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
+							className: "ccp-blockTitle",
+							children: text("credits")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "ccp-tiles",
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Tile, {
+									label: text("monthlyLimit"),
+									value: monthly.limit
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Tile, {
+									label: text("monthlyUsed"),
+									value: monthly.used
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Tile, {
+									label: text("remaining"),
+									value: monthly.remaining
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Tile, {
+									label: text("purchased"),
+									value: monthly.purchased
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Tile, {
+									label: text("free"),
+									value: monthly.free
+								})
+							]
+						})]
+					}) : null,
+					account.stats.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "ccp-block",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
+							className: "ccp-blockTitle",
+							children: text("usage")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: "ccp-tiles",
+							children: account.stats.map((stat) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(StatTile, {
+								stat,
+								label: text(stat.label)
+							}, stat.label))
+						})]
+					}) : null
+				]
+			});
+		}
+		/**
+		* The center-column dashboard, registered into the layout's keyed `main` slot
+		* under the same id the footer card selects, so the two are one navigation
+		* entry: the card shows the plan, the monthly bar and the quota window; the
+		* panel shows everything, including the per-account breakdown.
+		*/
+		function CommandCodePanel(props) {
+			const view = usePanelView(props);
+			const text = (key) => view.text[key] ?? key;
+			const [selectedId, setSelectedId] = (0, react.useState)(void 0);
+			const startAutoRefresh = props.startAutoRefresh;
+			(0, react.useEffect)(() => startAutoRefresh(), [startAutoRefresh]);
+			const accounts = view.accounts;
+			const selected = accounts.find((account) => account.id === selectedId) ?? view.selected ?? accounts[0];
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: "ccp-main",
+				role: "region",
+				"aria-label": text("nav"),
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "ccp-mainInner",
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("header", {
+							className: "ccp-header",
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "ccp-headerText",
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
+										className: "ccp-title",
+										children: text("nav")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										className: "ccp-subtitle",
+										children: text("subtitle")
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "ccp-spacer" }),
+								view.updatedAt !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+									className: "ccp-meta",
+									children: [
+										text("updated"),
+										" ",
+										view.updatedAt
+									]
+								}) : null,
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+									variant: "ghost",
+									size: "sm",
+									disabled: view.loading,
+									onClick: () => props.refresh(),
+									children: view.loading ? text("refreshing") : text("refresh")
+								})
+							]
+						}),
+						view.noKey ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "ccp-notice",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "ccp-noticeTitle",
+								children: text("noKey")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "ccp-noticeHint",
+								children: text("noKeyHint")
+							})]
+						}) : null,
+						view.failure !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "ccp-notice ccp-noticeError",
+							role: "alert",
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "ccp-noticeTitle",
+									children: text(view.failure.title)
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "ccp-noticeHint",
+									children: text(view.failure.hint)
+								}),
+								view.failure.detail !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "ccp-noticeDetail",
+									children: view.failure.detail
+								}) : null
+							]
+						}) : null,
+						!view.noKey && view.failure === void 0 && accounts.length === 0 && view.loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "ccp-hint",
+							children: text("loading")
+						}) : null,
+						view.staleError !== void 0 && view.staleError !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+							className: "ccp-hint",
+							role: "status",
+							children: [
+								text("errorGeneric"),
+								" — ",
+								view.staleError
+							]
+						}) : null,
+						accounts.length > 1 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: "ccp-tabs",
+							role: "tablist",
+							"aria-label": text("nav"),
+							children: accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								role: "tab",
+								"aria-selected": selected?.id === account.id,
+								className: selected?.id === account.id ? "ccp-tab ccp-tabActive" : "ccp-tab",
+								onClick: () => setSelectedId(account.id),
+								children: account.label
+							}, account.id))
+						}) : null,
+						selected !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountCard, {
+							account: selected,
+							view
+						}) : null,
+						view.partial !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "ccp-hint",
+							children: text(view.partial)
+						}) : null
+					]
+				})
+			});
+		}
+		/**
+		* The sidebar footer card, registered into `sidebar.footer.action` — the list
+		* the shell renders in the sidebar's foot area directly ABOVE the Settings
+		* seat, so the panel reads as a bottom-pinned sibling of Settings rather than
+		* a global panel icon at the top of the column.
+		*
+		* The shell wraps nothing here, so this component owns the surface: the
+		* button, its chrome and its accessible name. In the expanded column it draws
+		* the title row, then one block per quota window (5-hour, then weekly) — the
+		* window's own spend and limit (`$1.32 / $6.00`), its percentage and its bar —
+		* and nothing else: the card's figures are the two windows the account runs
+		* into, so the period total stays in the tooltip rather than taking a third
+		* line. In the 56px rail it collapses to a 36px icon button carrying the ring,
+		* matching the shell's own rail geometry. `wide` comes from the shell as an
+		* owner prop — unlike the old `sidebar.panellist` row, this slot really does
+		* supply it.
+		*/
+		function CommandCodeFooterEntry(props) {
+			const view = usePanelView(props);
+			const startAutoRefresh = props.startAutoRefresh;
+			(0, react.useEffect)(() => startAutoRefresh(), [startAutoRefresh]);
+			const text = (key) => view.text[key] ?? key;
+			const headline = view.footerBars[0];
+			const title = view.footTitle;
+			if (!props.wide) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: "ccp-railButton",
+				"aria-label": title,
+				title,
+				onClick: () => props.open(),
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Ring, {
+					percent: headline?.barPercent ?? 0,
+					warn: headline?.warn ?? false,
+					size: 18
+				})
+			});
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+				type: "button",
+				className: "ccp-foot",
+				"aria-label": title,
+				title,
+				onClick: () => props.open(),
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					className: "ccp-footTop",
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Ring, {
+							percent: headline?.barPercent ?? 0,
+							warn: headline?.warn ?? false,
+							size: 16
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "ccp-footName",
+							children: text("nav")
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "ccp-spacer" }),
+						view.status !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "ccp-badgeMuted",
+							children: view.status
+						}) : view.planName !== text("nav") ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "ccp-badge",
+							children: view.planName
+						}) : null
+					]
+				}), view.footerBars.map((bar) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					className: "ccp-footRow",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						className: "ccp-footHead",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-footLabel",
+								children: text(bar.label)
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "ccp-spacer" }),
+							bar.detail !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-footAmount",
+								children: bar.detail
+							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "ccp-footPct",
+								children: bar.percent
+							})
+						]
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "ccp-footBar",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: bar.warn ? "ccp-footFill ccp-footFillWarn" : "ccp-footFill",
+							style: { width: `${bar.barPercent}%` }
+						})
+					})]
+				}, bar.label))]
+			});
+		}
+		//#endregion
+		//#region src/cost-facts.ts
+		const zeroCostTokens = () => ({
+			uncachedInputTokens: 0,
+			outputTokens: 0,
+			cacheReadTokens: 0,
+			cacheWriteTokens: 0
+		});
+		const COST_TOKEN_KEYS = [
+			"uncachedInputTokens",
+			"outputTokens",
+			"cacheReadTokens",
+			"cacheWriteTokens"
+		];
+		function peakHour(at, windows) {
+			const time = new Date(at);
+			return time.getUTCDay() !== 0 && time.getUTCDay() !== 6 && windows.some(([start, end]) => time.getUTCHours() >= start && time.getUTCHours() < end);
+		}
+		/**
+		* All prompt billing buckets determine a request's band, never cumulative session input.
+		*
+		* A tiered model returns the matching band and does NOT then apply `peak`: the
+		* page publishes those two dimensions independently, no row carries both today,
+		* and the generator would report a tiered row on every sync — so the combination
+		* becoming real is visible before it reaches a user. This ordering is a latent
+		* choice, not a verified upstream rule.
+		*/
+		function requestRates(price, at, contextTokens, table) {
+			const tier = price.contextTiers?.find((tier) => tier.maxContext === void 0 || contextTokens <= tier.maxContext);
+			if (tier !== void 0) return tier;
+			return price.peak !== void 0 && at !== null && peakHour(at, table.peakHours) ? price.peak : price;
+		}
+		/** Cache version and wire guard: changing bands/rates must refold historical groups. */
+		function pricingKey(table) {
+			const rates = (r) => [
+				r.inputCost,
+				r.outputCost,
+				r.cacheReadCost,
+				r.cacheWriteCost ?? null
+			];
+			const canonical = JSON.stringify([
+				"commandCodeCost-v1",
+				table.peakHours,
+				table.models.map((p) => [
+					p.id,
+					p.slug,
+					p.free === true,
+					rates(p),
+					p.peak ? rates(p.peak) : null,
+					p.contextTiers?.map((t) => [t.maxContext ?? null, rates(t)]) ?? null
+				])
+			]);
+			let hash = 2166136261;
+			for (const c of canonical) hash = Math.imul(hash ^ c.charCodeAt(0), 16777619) >>> 0;
+			return hash;
+		}
+		//#endregion
+		//#region src/client/session-cost.ts
+		/**
+		* Session-cost view model for the composer readout.
+		*
+		* Deliberately JSX-free and React-free, mirroring `./panel.ts`: it turns the
+		* session's token accounting plus the Host's price table into one presentation
+		* value AND the exact text the two surfaces of the harness's token-usage UI
+		* receive — the amount appended to the shipped pill, and the rows appended to
+		* the shipped usage dialog. Node tests therefore drive the whole calculation,
+		* and every user-visible string, without a DOM.
+		*
+		* The figures it prices are the session's DURABLE cumulative buckets, which is
+		* what the composer's own "N tokens" pill reads too (`tokenUsage`), so the two
+		* surfaces can never disagree about how much was used. Dollars are computed
+		* here because Command Code publishes per-token rates and bills against
+		* dollar-denominated windows; the account's own reported `totalCost` is a
+		* billing PERIOD figure, not this session's.
+		*
+		* Three rules are load-bearing:
+		*
+		* 1. **Only Command Code usage is priced.** A session served by another
+		*    provider must render nothing, never a Command Code estimate.
+		* 2. **A missing rate is never invented.** The pricing page publishes
+		*    input/output/cache-read rates for every model but a cache-WRITE rate for
+		*    only some, so unpriced cache-write tokens are surfaced as such rather than
+		*    charged at a guessed multiple of the input rate.
+		* 3. **Unpriceable means invisible.** No usage, no model, no table, an unknown
+		*    model, or all-zero buckets renders nothing at all — a confident `$0.00`
+		*    would be a lie, and this module never returns one.
+		*
+		* @module dsh-commandcode-provider/client/session-cost
+		*/
+		/** Tokens per published rate unit — the pricing page quotes USD per million. */
+		const TOKENS_PER_RATE_UNIT = 1e6;
+		/** The provider route whose usage this surface prices. */
+		const COMMANDCODE_PROVIDER = "commandcode";
+		/**
+		* The English copy for this surface.
+		*
+		* A plain constant, NOT the `settings.commandcode` locale namespace: like the
+		* plans & quota panel, the readout stays English on a Chinese harness. Do not
+		* route it through `ctx.locale`.
+		*/
+		const SESSION_COST_COPY = {
+			/** Shown instead of an amount when the model costs nothing on every plan. */
+			free: "Free",
+			/**
+			* The separator the readout prefixes itself with, so the cost reads as the
+			* last item of the token-usage pill's text run rather than a control beside
+			* it. Rendered with the same colour and margins the shipped pill uses
+			* between its own items.
+			*/
+			separator: "·",
+			/** The heading the tooltip leads with. */
+			panelTitle: "Session cost",
+			/** Marks an estimate from published rates rather than an invoice. */
+			approximate: "≈",
+			/** Tooltip line for the unpriced cache-write tokens. */
+			unpricedCacheWrite: "cache write tokens have no published rate",
+			/** Tooltip line naming the rate half in force. */
+			peakRates: "peak rates",
+			/** Tooltip line naming the rate half in force. */
+			offPeakRates: "off-peak rates",
+			/** Tooltip line explaining the approximate marker. */
+			approximateNote: "estimate from published rates, not the provider invoice",
+			/** Row/tooltip label for uncached prompt tokens. */
+			uncachedInput: "uncached input",
+			/** Row/tooltip label for completion tokens. */
+			output: "output",
+			/** Row/tooltip label for cache-served input tokens. */
+			cacheRead: "cache read",
+			/** Row/tooltip label for cache-written input tokens. */
+			cacheWrite: "cache write"
+		};
+		/** A finite, non-negative count — anything else reads as absent. */
+		function count(value) {
+			return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
+		}
+		/**
+		* Index a price table for lookup. Rows are keyed by catalog id and by pricing
+		* slug, both exact and lowercased, because a session reports a catalog id while
+		* a row no catalog model claims is served under the page's slug.
+		*/
+		function indexTable(table) {
+			const index = /* @__PURE__ */ new Map();
+			for (const price of table.models) for (const key of [price.id, price.slug]) {
+				if (typeof key !== "string" || key === "") continue;
+				if (!index.has(key)) index.set(key, price);
+				const lower = key.toLowerCase();
+				if (!index.has(lower)) index.set(lower, price);
+			}
+			return index;
+		}
+		function costOf(usage, rates, free) {
+			if (free) return {
+				uncachedInput: 0,
+				cacheRead: 0,
+				cacheWrite: 0,
+				output: 0,
+				total: 0,
+				unpricedCacheWriteTokens: 0
+			};
+			const perUnit = (tokens, rate) => tokens * rate / TOKENS_PER_RATE_UNIT;
+			const uncachedInput = perUnit(count(usage.uncachedInputTokens), rates.inputCost);
+			const output = perUnit(count(usage.outputTokens), rates.outputCost);
+			const cacheRead = perUnit(count(usage.cacheReadTokens), rates.cacheReadCost);
+			const cacheWriteTokens = count(usage.cacheWriteTokens);
+			const cacheWrite = rates.cacheWriteCost === void 0 ? void 0 : perUnit(cacheWriteTokens, rates.cacheWriteCost);
+			return {
+				uncachedInput,
+				cacheRead,
+				cacheWrite,
+				output,
+				total: uncachedInput + output + cacheRead + (cacheWrite ?? 0),
+				unpricedCacheWriteTokens: rates.cacheWriteCost === void 0 ? cacheWriteTokens : 0
+			};
+		}
+		/**
+		* Amount text for a session cost.
+		*
+		* The panel's `money()` convention (2 decimals, 4 below a cent) is right for
+		* billing windows, but a live session total starts far below a cent, where
+		* `toFixed(4)` would print a flat `$0.0000` — which reads as broken rather than
+		* as small. So a total under $0.0001 is stated as a bound instead.
+		*/
+		function sessionCostAmount(total) {
+			if (!Number.isFinite(total) || total <= 0) return formatMoney(0);
+			if (total < 1e-4) return `<$0.0001`;
+			return total < .01 ? formatMoneyExact(total) : formatMoney(total);
+		}
+		/** One `label value` clause of the tooltip. */
+		function clause(label, tokens) {
+			return tokens > 0 ? `${label} ${formatTokensCompact(tokens)}` : void 0;
+		}
+		/**
+		* Build the composer readout, or undefined when there is nothing honest to show.
+		*
+		* Undefined is the correct answer for a session with no usage yet, a session
+		* another provider served, a model the price table does not know, and a table
+		* that has not landed — the pill simply is not there.
+		*/
+		function buildSessionCostView(input) {
+			const { usage, table, facts } = input;
+			if (!usage || !table || !facts || facts.pricingKey !== pricingKey(table)) return void 0;
+			const totals = zeroCostTokens();
+			const index = indexTable(table);
+			const breakdown = {
+				uncachedInput: 0,
+				cacheRead: 0,
+				cacheWrite: 0,
+				output: 0,
+				total: 0,
+				unpricedCacheWriteTokens: 0
+			};
+			let free = true;
+			let peak = false;
+			let partial = false;
+			let priced = false;
+			const notes = [];
+			for (const group of facts.groups) {
+				for (const key of COST_TOKEN_KEYS) totals[key] += group.tokens[key];
+				if (group.provider !== COMMANDCODE_PROVIDER) {
+					partial = true;
+					continue;
+				}
+				const price = index.get(group.model);
+				if (!price) {
+					partial = true;
+					continue;
+				}
+				const isFree = price.free === true;
+				free &&= isFree;
+				if (price.peak && group.at === null) {
+					partial = true;
+					notes.push("request time unavailable; off-peak lower bound");
+				}
+				const rates = requestRates(price, group.at, group.contextTokens, table);
+				const part = costOf(group.tokens, rates, isFree);
+				priced ||= isFree || part.total > 0;
+				for (const key of [
+					"uncachedInput",
+					"cacheRead",
+					"output",
+					"total",
+					"unpricedCacheWriteTokens"
+				]) breakdown[key] += part[key];
+				breakdown.cacheWrite = (breakdown.cacheWrite ?? 0) + (part.cacheWrite ?? 0);
+				if (price.peak) {
+					const isPeak = group.at !== null && peakHour(group.at, table.peakHours);
+					peak ||= isPeak;
+					notes.push(isPeak ? SESSION_COST_COPY.peakRates : SESSION_COST_COPY.offPeakRates);
+				}
+			}
+			if (COST_TOKEN_KEYS.some((key) => totals[key] !== count(usage[key])) || !priced) return void 0;
+			const { total, unpricedCacheWriteTokens } = breakdown;
+			partial ||= unpricedCacheWriteTokens > 0;
+			free &&= !partial;
+			if (partial) notes.push("Command Code priced subtotal only; unpriced or other-provider usage excluded");
+			notes.push(SESSION_COST_COPY.approximateNote);
+			const uncachedInput = totals.uncachedInputTokens;
+			const output = totals.outputTokens;
+			const cacheRead = totals.cacheReadTokens;
+			const cacheWrite = totals.cacheWriteTokens;
+			if (uncachedInput === 0 && output === 0 && cacheRead === 0 && cacheWrite === 0) return void 0;
+			if (!free && total <= 0) return void 0;
+			const value = free ? SESSION_COST_COPY.free : `${partial ? "≥" : SESSION_COST_COPY.approximate}${sessionCostAmount(total)}`;
+			const money = (amount) => amount === void 0 ? void 0 : sessionCostAmount(amount);
+			const rows = [
+				{
+					key: "uncachedInput",
+					label: SESSION_COST_COPY.uncachedInput,
+					tokens: uncachedInput,
+					costText: money(breakdown.uncachedInput)
+				},
+				{
+					key: "cacheRead",
+					label: SESSION_COST_COPY.cacheRead,
+					tokens: cacheRead,
+					costText: money(breakdown.cacheRead)
+				},
+				{
+					key: "cacheWrite",
+					label: SESSION_COST_COPY.cacheWrite,
+					tokens: cacheWrite,
+					costText: unpricedCacheWriteTokens === cacheWrite && cacheWrite > 0 ? void 0 : money(breakdown.cacheWrite)
+				},
+				{
+					key: "output",
+					label: SESSION_COST_COPY.output,
+					tokens: output,
+					costText: money(breakdown.output)
+				}
+			];
+			if (unpricedCacheWriteTokens > 0) notes.push(SESSION_COST_COPY.unpricedCacheWrite);
+			return {
+				total,
+				value,
+				title: [
+					`${SESSION_COST_COPY.panelTitle} ${free ? SESSION_COST_COPY.free : sessionCostAmount(total)}`,
+					clause(SESSION_COST_COPY.uncachedInput, uncachedInput),
+					clause(SESSION_COST_COPY.output, output),
+					clause(SESSION_COST_COPY.cacheRead, cacheRead),
+					clause(SESSION_COST_COPY.cacheWrite, cacheWrite),
+					...notes
+				].filter((part) => part !== void 0).join(" · "),
+				rows,
+				notes: [...new Set(notes)],
+				free,
+				peak,
+				unpricedCacheWriteTokens,
+				approximate: !free
+			};
+		}
+		/** Split the appended run into the two nodes the display creates. */
+		function sessionCostPillRun(view) {
+			return {
+				separator: SESSION_COST_COPY.separator,
+				value: view.value
+			};
+		}
+		/**
+		* Decorate the harness's usage dialog, row by row.
+		*
+		* The row sequence mirrors the shipped component's conditions exactly — the
+		* cache-hit row exists while there is billed prompt input, the cache-write row
+		* while those tokens are non-zero — because the display layer matches what it
+		* finds positionally. A shape it cannot confirm is a shape it does not touch.
+		*
+		* A free model decorates nothing: every row's cost is zero by definition, the
+		* pill already says `Free`, and a column of `$0.00` would be noise. A bucket
+		* whose rate the page does not publish is likewise left unfilled rather than
+		* filled with an invented number.
+		*/
+		function sessionCostRowDecorations(view) {
+			const bucket = (key) => view.rows.find((row) => row.key === key)?.tokens ?? 0;
+			const price = (key) => {
+				if (view.free) return void 0;
+				return view.rows.find((row) => row.key === key)?.costText;
+			};
+			const uncachedInput = bucket("uncachedInput");
+			const cacheRead = bucket("cacheRead");
+			const cacheWrite = bucket("cacheWrite");
+			const output = bucket("output");
+			const plan = [];
+			if (uncachedInput + cacheRead + cacheWrite > 0) plan.push({
+				row: "cacheHit",
+				tokens: void 0,
+				amount: void 0,
+				hidden: false
+			});
+			plan.push({
+				row: "uncachedInput",
+				tokens: uncachedInput,
+				amount: price("uncachedInput"),
+				hidden: false
+			});
+			plan.push({
+				row: "cacheRead",
+				tokens: cacheRead,
+				amount: price("cacheRead"),
+				hidden: false
+			});
+			if (cacheWrite !== 0) {
+				const amount = price("cacheWrite");
+				plan.push({
+					row: "cacheWrite",
+					tokens: cacheWrite,
+					amount,
+					hidden: amount === void 0
+				});
+			}
+			plan.push({
+				row: "output",
+				tokens: output,
+				amount: price("output"),
+				hidden: false
+			});
+			return plan;
+		}
+		//#endregion
+		//#region src/client/session-cost-display.ts
+		/** The shipped composer stats row (dsh-client-ui-chat `StatsPills`). */
+		const STATS_ROOT = "[data-composer-stats]";
+		/**
+		* The shipped token-usage dialog's `<dl>`. Unique in the whole of
+		* `dsh-client-ui-chat`: the per-message turn-usage panel has its own dialog with
+		* different markup, so the composer's is unambiguous.
+		*/
+		const USAGE_DIALOG = "[data-session-stats-usage]";
+		/**
+		* The usage dialog's trigger. Both pills announce a dialog, but the token one is
+		* rendered LAST — and when no step carries timing the time pill is not a button
+		* at all, so "last" still selects the token pill in both cases.
+		*/
+		const DIALOG_TRIGGER = "button[aria-haspopup=\"dialog\"]";
+		/**
+		* Stable id for the hidden node the appended cost is described by. The pill's
+		* own `aria-label` is computed by the harness on every render and cannot be
+		* extended, so a description is how the cost reaches assistive technology.
+		*/
+		const A11Y_ID = "dsh-commandcode-session-cost";
+		/** How many consecutive misses before the missing anchor is worth a console line. */
+		const MISSES_BEFORE_WARNING = 3;
+		/**
+		* The default observer: `childList` on `body`, and deliberately NOT `subtree`, so
+		* streaming text inside the page never wakes it while the panel the harness
+		* portals straight onto `body` does.
+		*/
+		const observeBodyChildren = (target, listener) => {
+			if (typeof MutationObserver === "undefined") return void 0;
+			const observer = new MutationObserver(listener);
+			observer.observe(target, { childList: true });
+			return () => observer.disconnect();
+		};
+		/**
+		* Owns the nodes injected into the shipped token-usage UI.
+		*
+		* One instance per mounted entry. `sync()` is cheap and idempotent: it re-reads
+		* both targets on every call, which is what lets it self-heal when React
+		* remounts the row or replaces the dialog, and it rewrites a node only when its
+		* text actually changed.
+		*/
+		var SessionCostDisplay = class {
+			doc;
+			scope;
+			observe;
+			view = void 0;
+			/** Detaches the observer installed by `start()`. */
+			detach = void 0;
+			/** The button we appended into, while it is still connected. */
+			pillHost = void 0;
+			/** Our appended root, and the two nodes whose text changes. */
+			pillRoot = void 0;
+			pillValue = void 0;
+			pillA11y = void 0;
+			/** Whether WE set `aria-describedby` on the button (so only we take it back). */
+			described = false;
+			/** The dialog we decorated, the price nodes we own, and the cells we hid. */
+			dialogHost = void 0;
+			dialogPrices = /* @__PURE__ */ new Map();
+			dialogHidden = /* @__PURE__ */ new Set();
+			pillMisses = 0;
+			constructor(options) {
+				this.doc = options.doc;
+				this.scope = options.scope;
+				this.observe = options.observe ?? observeBodyChildren;
+			}
+			/** Begin watching for the shipped usage dialog opening and closing. */
+			start() {
+				if (this.detach !== void 0) return;
+				const body = this.doc.body;
+				if (body === null || body === void 0) return;
+				this.detach = this.observe(body, () => this.apply());
+			}
+			/**
+			* Hand the display the current figure.
+			*
+			* Undefined — nothing priceable about this session — removes everything this
+			* module injected, leaving both shipped surfaces exactly as they ship.
+			*/
+			sync(view) {
+				this.view = view;
+				this.apply();
+			}
+			/** Remove every injected node and stop observing. Safe to call twice. */
+			dispose() {
+				this.detach?.();
+				this.detach = void 0;
+				this.removePill();
+				this.clearDialog();
+				this.view = void 0;
+			}
+			/** Re-apply the last known view to whatever both targets are right now. */
+			apply() {
+				this.applyPill();
+				this.applyDialog();
+			}
+			applyPill() {
+				const view = this.view;
+				if (view === void 0) {
+					this.removePill();
+					return;
+				}
+				if (this.pillHost?.isConnected !== true) {
+					const button = this.resolvePillButton();
+					if (button === null) {
+						this.pillMisses += 1;
+						if (this.pillMisses === MISSES_BEFORE_WARNING) console.warn(`[dsh-commandcode-provider] no ${STATS_ROOT} row to append the session cost to; the figure stays in the usage dialog only`);
+						return;
+					}
+					this.pillMisses = 0;
+					this.removePill();
+					this.buildPill(button, sessionCostPillRun(view));
+				}
+				if (this.pillValue !== void 0) {
+					const amount = sessionCostPillRun(view).value;
+					if (this.pillValue.textContent !== amount) this.pillValue.textContent = amount;
+				}
+				if (this.pillRoot !== void 0) {
+					if (this.pillRoot.title !== view.title) this.pillRoot.title = view.title;
+					const approximate = view.approximate ? "true" : null;
+					if (this.pillRoot.getAttribute("data-approximate") !== approximate) {
+						if (approximate === null) this.pillRoot.removeAttribute("data-approximate");
+						else this.pillRoot.setAttribute("data-approximate", approximate);
+					}
+				}
+				if (this.pillA11y !== void 0) {
+					const described = `${SESSION_COST_COPY.panelTitle} ${view.value}`;
+					if (this.pillA11y.textContent !== described) this.pillA11y.textContent = described;
+				}
+			}
+			/** The shipped token pill, scoped to this entry's own composer. */
+			resolvePillButton() {
+				const root = (this.scope() ?? this.doc).querySelector(STATS_ROOT);
+				if (root === null) return null;
+				const triggers = root.querySelectorAll(DIALOG_TRIGGER);
+				return triggers.length === 0 ? null : triggers[triggers.length - 1] ?? null;
+			}
+			/**
+			* Create and append the cost run. The button's child list is static
+			* (`[svg, label]`), so appending once is enough for it to stay last.
+			*/
+			buildPill(button, run) {
+				const doc = this.doc;
+				const root = doc.createElement("span");
+				root.setAttribute("data-composer-session-cost", "");
+				const separator = doc.createElement("span");
+				separator.textContent = run.separator;
+				separator.setAttribute("aria-hidden", "true");
+				separator.style.color = "var(--dsw-alias-separator-primary)";
+				separator.style.margin = "0 6px 0 0";
+				const value = doc.createElement("span");
+				value.textContent = run.value;
+				value.style.fontWeight = "500";
+				const a11y = doc.createElement("span");
+				a11y.id = A11Y_ID;
+				a11y.style.display = "none";
+				root.appendChild(separator);
+				root.appendChild(value);
+				root.appendChild(a11y);
+				button.appendChild(root);
+				if (!button.hasAttribute("aria-describedby")) {
+					button.setAttribute("aria-describedby", A11Y_ID);
+					this.described = true;
+				}
+				this.pillHost = button;
+				this.pillRoot = root;
+				this.pillValue = value;
+				this.pillA11y = a11y;
+			}
+			removePill() {
+				if (this.pillRoot !== void 0 && this.pillRoot.parentNode !== null) this.pillRoot.parentNode.removeChild(this.pillRoot);
+				if (this.described) {
+					this.pillHost?.removeAttribute("aria-describedby");
+					this.described = false;
+				}
+				this.pillHost = void 0;
+				this.pillRoot = void 0;
+				this.pillValue = void 0;
+				this.pillA11y = void 0;
+			}
+			applyDialog() {
+				const view = this.view;
+				const host = view === void 0 ? null : this.resolveDialog();
+				if (host === null || view === void 0) {
+					this.clearDialog();
+					return;
+				}
+				this.pruneDialog(host);
+				const plan = sessionCostRowDecorations(view);
+				const pairs = dialogPairs(host);
+				if (!dialogShapeMatches(pairs, plan, this.dialogPrices)) {
+					this.clearDialog();
+					return;
+				}
+				const hidden = /* @__PURE__ */ new Set();
+				for (const [index, row] of plan.entries()) {
+					const pair = pairs[index];
+					if (pair === void 0) continue;
+					const span = this.dialogPrices.get(pair.dd);
+					if (row.hidden) {
+						if (pair.dt.style.display !== "none") pair.dt.style.display = "none";
+						if (pair.dd.style.display !== "none") pair.dd.style.display = "none";
+						hidden.add(pair.dt);
+						hidden.add(pair.dd);
+						this.removeDialogPrice(pair.dd, span);
+						continue;
+					}
+					if (pair.dt.style.display === "none") pair.dt.style.display = "";
+					if (pair.dd.style.display === "none") pair.dd.style.display = "";
+					if (row.amount === void 0) {
+						this.removeDialogPrice(pair.dd, span);
+						continue;
+					}
+					const price = span ?? this.createDialogPrice(pair.dd, row.row);
+					if (price.parentNode !== pair.dd) pair.dd.appendChild(price);
+					if (price.textContent !== row.amount) price.textContent = row.amount;
+				}
+				for (const cell of [...this.dialogHidden]) {
+					if (hidden.has(cell)) continue;
+					if (cell.style.display === "none") cell.style.display = "";
+					this.dialogHidden.delete(cell);
+				}
+				for (const cell of hidden) this.dialogHidden.add(cell);
+				this.dialogHost = host;
+			}
+			/** Forget the cells and prices a re-rendered dialog took with it. */
+			pruneDialog(host) {
+				for (const [dd, price] of [...this.dialogPrices]) {
+					if (dd.parentNode === host) continue;
+					if (price.parentNode !== null) price.parentNode.removeChild(price);
+					this.dialogPrices.delete(dd);
+				}
+				for (const cell of [...this.dialogHidden]) {
+					if (cell.parentNode === host) continue;
+					if (cell.style.display === "none") cell.style.display = "";
+					this.dialogHidden.delete(cell);
+				}
+			}
+			/** The price node for one shipped value cell, appended as its last child. */
+			createDialogPrice(dd, row) {
+				const price = this.doc.createElement("span");
+				price.setAttribute("data-session-cost-price", row);
+				price.style.marginLeft = "6px";
+				price.style.display = "inline-block";
+				price.style.minWidth = "56px";
+				price.style.textAlign = "right";
+				price.style.fontWeight = "500";
+				dd.appendChild(price);
+				this.dialogPrices.set(dd, price);
+				return price;
+			}
+			removeDialogPrice(dd, price) {
+				if (price === void 0) return;
+				if (price.parentNode !== null) price.parentNode.removeChild(price);
+				this.dialogPrices.delete(dd);
+			}
+			/**
+			* The shipped usage dialog, or null while it is closed.
+			*
+			* The dialog is portaled onto `body`, so unlike the pill it cannot be scoped
+			* from this entry; DSH renders one composer, and the attribute is unique in
+			* the chat client, so a document-level lookup is exact. Should a future build
+			* mount two composers at once, both dialogs would describe whichever session
+			* this entry belongs to — noted rather than defended against.
+			*/
+			resolveDialog() {
+				if (this.dialogHost?.isConnected === true) return this.dialogHost;
+				this.clearDialog();
+				return this.doc.querySelector(USAGE_DIALOG);
+			}
+			/** Give the dialog back: every price removed, every hidden row restored. */
+			clearDialog() {
+				for (const price of this.dialogPrices.values()) if (price.parentNode !== null) price.parentNode.removeChild(price);
+				this.dialogPrices.clear();
+				for (const cell of this.dialogHidden) if (cell.style.display === "none") cell.style.display = "";
+				this.dialogHidden.clear();
+				this.dialogHost = void 0;
+			}
+		};
+		/** The shipped dialog's `dt`/`dd` pairs, in document order. */
+		function dialogPairs(host) {
+			const pairs = [];
+			let label = null;
+			for (const node of Array.from(host.childNodes)) {
+				const tag = tagNameOf(node);
+				if (tag === "DT") label = node;
+				else if (tag === "DD" && label !== null) {
+					pairs.push({
+						dt: label,
+						dd: node
+					});
+					label = null;
+				}
+			}
+			return pairs;
+		}
+		/** `tagName` upper-cased, or an empty string for a non-element node. */
+		function tagNameOf(node) {
+			const tag = node.tagName;
+			return typeof tag === "string" ? tag.toUpperCase() : "";
+		}
+		/**
+		* Whether the dialog really holds the rows this session's buckets predict.
+		*
+		* The shipped labels belong to the `chat` locale — they are `Uncached input` in
+		* English and something else entirely in Chinese — so rows are matched by
+		* POSITION, and this is what makes that safe: the row count must agree, the
+		* cache-hit row must be the percentage it is, and every other value must carry
+		* exactly the token count of the bucket predicted for it. A mismatch means the
+		* dialog is not what this view describes, and nothing is decorated.
+		*/
+		function dialogShapeMatches(pairs, plan, prices) {
+			if (pairs.length !== plan.length) return false;
+			return plan.every((row, index) => {
+				const pair = pairs[index];
+				if (pair === void 0) return false;
+				const text = hostValueText(pair.dd, prices.get(pair.dd));
+				if (row.tokens === void 0) return text.includes("%");
+				return digitsOf(text) === String(row.tokens);
+			});
+		}
+		/**
+		* A value cell's own text, without the price this module appended to it — the
+		* digits of `3,206,544 tok` are the host's, the digits of `$0.07` are ours.
+		*/
+		function hostValueText(dd, price) {
+			let text = "";
+			for (const node of Array.from(dd.childNodes)) {
+				if (node === price) continue;
+				text += node.textContent ?? "";
+			}
+			return text;
+		}
+		/** Every digit of a display string, so locale grouping cannot break the match. */
+		function digitsOf(text) {
+			return text.replace(/\D/g, "");
+		}
+		//#endregion
+		//#region src/client/session-cost-view.tsx
+		/** The dock outlet this entry renders inside, i.e. what it can scope itself from. */
+		const DOCK_ANCHOR = "[data-slot=\"conversation.composer.dock\"]";
+		/** Module-level constant so the marker's `style` prop never diffs. */
+		const HIDDEN_STYLE = { display: "none" };
+		/** Log a missing seat once per page, so a silent no-op stays diagnosable. */
+		let warnedMissingSeat = false;
+		/**
+		* The composer's session-cost entry. Guards the two seats before rendering the
+		* mount: a dsh that does not supply the projection seat to dock occupants gets
+		* an absent cost and one console line, never a render crash — which the renderer
+		* would answer by abdicating the entry with no visible trace.
+		*/
+		function CommandCodeSessionCost(props) {
+			if (typeof props.useProjection !== "function" || typeof props.useCommandCodePrices !== "function") {
+				if (!warnedMissingSeat) {
+					warnedMissingSeat = true;
+					console.error("[dsh-commandcode-provider] the composer does not supply the projection/hook seats the session-cost readout needs; the readout stays hidden");
+				}
+				return null;
+			}
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SessionCostEntry, { ...props });
+		}
+		/** The mount: one injection lifetime, one hidden marker. Every hook lives here. */
+		function SessionCostEntry(props) {
+			const markerRef = (0, react.useRef)(null);
+			const displayRef = (0, react.useRef)(null);
+			const prices = props.useCommandCodePrices((state) => state);
+			const view = buildSessionCostView({
+				usage: props.useProjection("tokenUsage"),
+				selection: props.useProjection("modelSelection"),
+				facts: props.useProjection("commandCodeCost"),
+				table: prices.table,
+				now: Date.now()
+			});
+			(0, react.useEffect)(() => {
+				if (typeof document === "undefined") return;
+				const display = new SessionCostDisplay({
+					doc: document,
+					scope: () => markerRef.current?.closest(DOCK_ANCHOR)?.parentElement ?? null
+				});
+				displayRef.current = display;
+				display.start();
+				return () => {
+					displayRef.current = null;
+					display.dispose();
+				};
+			}, []);
+			(0, react.useEffect)(() => {
+				displayRef.current?.sync(view);
+			});
+			if (view === void 0) return null;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				ref: markerRef,
+				style: HIDDEN_STYLE,
+				"data-ccp-session-cost-anchor": ""
+			});
+		}
+		//#endregion
+		//#region src/client/panel-styles.ts
+		/**
+		* Stylesheet for the Command Code plans & quota panel (the sidebar footer card
+		* and the dashboard it opens).
+		*
+		* Returned as a string rather than injected here so the modules stay free of
+		* DOM side effects at import time — the client entry installs it once, keyed
+		* by the same `data-plugin-css` attribute the settings-page stylesheet uses,
+		* and removes it again when the plugin's fiber unwinds.
+		*
+		* Every colour comes from a harness theme alias with a neutral fallback, so
+		* the panel follows the active theme (light/dark and any brand pack) without
+		* hardcoded values. Classes are `ccp-` prefixed to stay clear of the settings
+		* page's `cc-` set.
+		*
+		* @module dsh-commandcode-provider/client/panel-styles
+		*/
+		/**
+		* Stylesheet id (the `data-plugin-css` value that makes injection idempotent).
+		*
+		* The package prefix must match the one the settings-page stylesheet uses
+		* (`injectPageCss` in `./index.ts`) and this package's real name: an id is the
+		* injection's identity, so a stale fork prefix would let a second copy of the
+		* plugin inject the same rules twice and would misreport the owner in the DOM.
+		*/
+		const PANEL_CSS_ID = "@mars-sea/dsh-commandcode-provider/CommandCodePanel.module.css";
+		/** The panel stylesheet. */
+		const PANEL_CSS = `
+/* ------------------------------------------------- sidebar footer card */
+/* The shell's foot area renders this list ABOVE the Settings seat, so the card
+   is the sidebar's bottom-most content. The shell supplies no chrome: the entry
+   is the button. It is deliberately quiet — a surface that sits beside Settings
+   should read as part of the column, not as a call to action — with one hover
+   step and a hairline border.
+
+   The shell's container is a flex ROW whose occupants (this card and ui-cordis's
+   footer chip) each declare a full-width line and shrink-proof flex, so as a row
+   it would overflow the column. Both were written for a full-width line, which
+   is exactly what a column gives them. Matched by the CSS-module class STEM —
+   never a hashed name — so a dsh that renames it degrades to the shell's own
+   row rather than breaking. */
+[class*="_footerActions"]{flex-direction:column}
+.ccp-foot{box-sizing:border-box;flex:0 0 auto;width:100%;min-width:0;font:inherit;color:var(--dsw-alias-label-secondary);text-align:left;cursor:pointer;background:0 0;border:1px solid transparent;border-radius:10px;flex-direction:column;gap:6px;margin:0 0 4px;padding:8px;display:flex}
+.ccp-foot:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover);border-color:var(--dsw-alias-border-l2)}
+.ccp-foot:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}
+.ccp-footTop{align-items:center;gap:8px;min-width:0;display:flex}
+.ccp-footName{white-space:nowrap;text-overflow:ellipsis;color:var(--dsw-alias-label-primary);min-width:0;overflow:hidden;font-size:13px;font-weight:500;line-height:20px}
+/* One block per quota window: a head line carrying the window's own spend and
+   limit, then the FULL-WIDTH bar under it. Stacking the two lets the card show
+   the dollar figures — the reason this surface exists — without squeezing the
+   bar into what is left beside them. Mirrors the dashboard's own window block. */
+.ccp-footRow{flex-direction:column;gap:4px;min-width:0;display:flex}
+.ccp-footHead{align-items:baseline;gap:8px;min-width:0;display:flex}
+.ccp-footLabel{flex:1;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px}
+.ccp-footAmount{flex:none;color:var(--dsw-alias-label-secondary);font-size:11px;line-height:16px;font-variant-numeric:tabular-nums;white-space:nowrap}
+/* The card's markup must stay PHRASING content — it renders inside the shell's
+   own button — so these bars are spans, not divs. That makes display:block
+   load-bearing on BOTH: an inline box ignores width and height outright, so
+   without it the 5px track still painted (a flex item is blockified by its
+   container) while the fill collapsed to 0x0 and the bar showed no usage. */
+.ccp-footBar{display:block;background:var(--dsw-alias-bg-layer-2);border-radius:999px;height:5px;overflow:hidden}
+.ccp-footFill{display:block;background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}
+.ccp-footFillWarn{background:var(--dsw-alias-state-error-primary)}
+.ccp-footPct{flex:none;width:34px;color:var(--dsw-alias-label-secondary);text-align:right;font-size:11px;line-height:16px;font-variant-numeric:tabular-nums}
+
+/* The 56px rail: one icon button on the shell's own rail geometry (36px cell),
+   so the collapsed column keeps a single 18px glyph like its siblings. */
+.ccp-railButton{box-sizing:border-box;width:36px;height:36px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:1px solid transparent;border-radius:8px;flex:none;justify-content:center;align-items:center;margin:0 0 4px;padding:0;display:inline-flex}
+.ccp-railButton:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover)}
+.ccp-railButton:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}
+
+/* The ring glyph. Sized entirely by its own width/height attribute, so the
+   footer row, the rail button and the dashboard can each ask for their own. */
+.ccp-glyph{flex:none;justify-content:center;align-items:center;display:inline-flex;color:var(--dsw-alias-brand-primary)}
+
+/* ------------------------------------------------------------ dashboard */
+/* The center column in the layout frame: fill it, scroll the content column,
+   and cap the reading width like the harness's own panels. */
+.ccp-main{background:var(--dsw-alias-bg-layer-1);width:100%;height:100%;overflow:auto;display:block}
+.ccp-mainInner{max-width:760px;margin:0 auto;padding:24px 20px 40px;flex-direction:column;gap:14px;display:flex;color:var(--dsw-alias-label-primary)}
+.ccp-header{align-items:center;gap:10px;display:flex;flex-wrap:wrap}
+.ccp-headerText{flex-direction:column;gap:2px;display:flex;min-width:0}
+.ccp-title{margin:0;font-size:18px;font-weight:600;line-height:1.4}
+.ccp-subtitle{margin:0;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}
+.ccp-spacer{flex:1}
+.ccp-meta{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;font-variant-numeric:tabular-nums}
+.ccp-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
+
+/* Notices: the no-key guidance, a blocked report, and a stale-data error. */
+.ccp-notice{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:12px 14px;flex-direction:column;gap:4px;display:flex}
+.ccp-noticeError{border-color:var(--dsw-alias-state-error-primary)}
+.ccp-noticeTitle{margin:0;font-size:13px;font-weight:600;line-height:1.5}
+.ccp-noticeError .ccp-noticeTitle{color:var(--dsw-alias-state-error-primary)}
+.ccp-noticeHint{margin:0;color:var(--dsw-alias-label-secondary);font-size:12px;line-height:1.55}
+.ccp-noticeDetail{margin:0;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;word-break:break-word}
+
+.ccp-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:14px;padding:16px 18px;flex-direction:column;gap:16px;display:flex}
+.ccp-cardHead{align-items:center;gap:10px;display:flex;flex-wrap:wrap}
+.ccp-avatar{flex:none;width:28px;height:28px;color:var(--dsw-alias-brand-primary);background:var(--dsw-alias-bg-module-platform);border-radius:50%;justify-content:center;align-items:center;font-size:12px;font-weight:600;line-height:1;display:inline-flex}
+.ccp-cardIdentity{flex-direction:column;gap:1px;min-width:0;display:flex}
+.ccp-cardTitle{font-size:13px;font-weight:600;line-height:1.4}
+.ccp-cardOwner{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.4;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:220px}
+.ccp-block{flex-direction:column;gap:8px;display:flex}
+.ccp-blockTitle{margin:0;color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:600;line-height:1.5;text-transform:uppercase;letter-spacing:.04em}
+.ccp-planRow{align-items:center;gap:8px;display:flex;flex-wrap:wrap}
+.ccp-fieldLabel{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}
+.ccp-planName{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:600;line-height:1.5}
+
+/* Stat tiles: the monthly credits and the usage totals share one grid. */
+.ccp-tiles{display:grid;grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:8px}
+.ccp-tile{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:8px;padding:8px 10px;flex-direction:column;gap:2px;display:flex;min-width:0}
+.ccp-tileLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}
+.ccp-tileValue{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4;font-variant-numeric:tabular-nums}
+.ccp-tileSub{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+
+/* Quota bars: the monthly bar and the two windows stack in one column, each a
+   label row plus the track. */
+.ccp-windows{flex-direction:column;gap:14px;display:flex}
+.ccp-window{flex-direction:column;gap:6px;display:flex}
+.ccp-windowHead{align-items:baseline;gap:8px;display:flex}
+.ccp-windowLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:500;line-height:1.5}
+.ccp-windowValue{color:var(--dsw-alias-label-secondary);font-size:12px;line-height:1.5;font-variant-numeric:tabular-nums;white-space:nowrap}
+.ccp-windowPct{color:var(--dsw-alias-label-primary);min-width:38px;text-align:right;font-size:12px;font-weight:600;line-height:1.5;font-variant-numeric:tabular-nums}
+.ccp-warnTag{white-space:nowrap;background:var(--dsw-alias-state-warn-tertiary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warn-primary,var(--dsw-alias-label-secondary));border-radius:999px;padding:0 8px;font-size:11px;font-weight:600;line-height:17px}
+.ccp-bar{overflow:hidden;background:var(--dsw-alias-bg-layer-1);border-radius:999px;height:8px}
+.ccp-barFill{background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}
+.ccp-barFillWarn{background:var(--dsw-alias-state-error-primary)}
+.ccp-windowReset{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}
+
+/* Badges. */
+.ccp-badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-brand-primary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:600;line-height:17px}
+.ccp-badgeError{background:transparent;color:var(--dsw-alias-state-error-primary)}
+.ccp-badgeWarn{background:var(--dsw-alias-state-warn-tertiary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warn-primary,var(--dsw-alias-label-secondary))}
+.ccp-badgeMuted{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px;max-width:220px;overflow:hidden;text-overflow:ellipsis}
+
+/* Account switch: plain buttons, like the settings page's usage carousel. */
+.ccp-tabs{flex-wrap:wrap;gap:6px;display:flex}
+.ccp-tab{align-items:center;font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex;gap:6px}
+.ccp-tab:hover:not(.ccp-tabActive){color:var(--dsw-alias-label-primary)}
+.ccp-tabActive{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-brand-primary)}
+
+@media (prefers-reduced-motion:reduce){.ccp-footFill,.ccp-barFill{transition:none}}
+`;
+		//#endregion
+		//#region src/client/locales.ts
+		const zh = {
+			nav: "Command Code",
+			title: "Command Code",
+			intro: "配置 Command Code Provider 连接。API 密钥仅保存在本机凭据服务中，不会回显；其他字段写入用户设置，下次请求即生效。",
+			apiKey: "API 密钥",
+			apiKeyHint: "在 commandcode.ai 控制台创建。留空保存不会覆盖已存储的密钥。",
+			apiKeySet: "已配置",
+			apiKeyUnset: "未配置",
+			apiKeyLocked: "密钥由只读来源提供",
+			apiBase: "API 地址",
+			apiBaseHint: "默认 https://api.commandcode.ai，一般无需修改。",
+			workingDir: "工作目录",
+			workingDirHint: "可选。留空时使用占位符显示的进程工作目录；仅在需要固定路径时填写。",
+			requestTimeoutMs: "请求超时（毫秒）",
+			requestTimeoutMsHint: "等待响应首个字节的超时；默认 60000。",
+			streamIdleTimeoutMs: "流空闲超时（毫秒）",
+			streamIdleTimeoutMsHint: "生成流停滞多久视为断连；默认 300000（长思考模型可静默数分钟，默认值刻意放宽）。",
+			advancedSettings: "高级设置",
+			advancedSettingsHint: "API 地址、工作目录、超时与模型过滤等不常修改的选项。",
+			advancedOverriddenOne: "已自定义 1 项",
+			advancedOverriddenMany: "已自定义 {count} 项",
+			advancedInvalid: "高级设置中有未填好的数字，请展开修正后再保存。",
+			filterModelsByPlan: "隐藏套餐外模型",
+			filterModelsByPlanHint: "开启后，模型选择器只列出当前套餐可用的模型；账户持有按需余额时会显示全部。",
+			webSearch: "用 Command Code 承载联网搜索",
+			webSearchHint: "开启后，dsh 的 web_search 工具由 Command Code 承担（复用同一个 API key 与地址），并优先于其他搜索后端；关闭则把选择权交还给之前的后端（如 modsearch），而不是强制回退到 DeepSeek 搜索。",
+			accountsTitle: "多账户轮换",
+			accountsHint: "当前账户达到用量限额（429）或密钥失效（401）时，请求自动切换到下一个账户；全部耗尽时会提示最早的重置时间。",
+			accountAdd: "添加账户",
+			accountRemove: "移除",
+			accountLabel: "账户备注名",
+			accountKey: "API 密钥",
+			accountKeyHint: "该账户的 API 密钥。留空保存不会覆盖已存储的密钥。",
+			accountDefault: "默认账户",
+			activeAccount: "当前使用账户",
+			activeAccountAuto: "自动（第一个可用账户）",
+			activeAccountHint: "手动指定优先使用的账户，保存后下次请求即生效；所选账户耗尽时仍会自动切换到其他可用账户。",
+			rulesTitle: "按模型切换账户",
+			rulesHint: "选择模型并路由到某个账户（可多选）。命中规则的模型且该账户可用时优先使用；账户耗尽或密钥失效时仍自动回落到其他账户。规则按列表顺序匹配，第一条命中生效。",
+			rulesEmpty: "尚未配置规则。",
+			rulesCatalogFailed: "模型目录获取失败，暂时无法选择模型；已保存的规则仍会生效。",
+			ruleAdd: "添加规则",
+			ruleRemove: "移除",
+			ruleModel: "模型",
+			ruleModelPick: "选择模型…",
+			ruleModelCount: "已选 {count} 个模型",
+			ruleAccount: "目标账户",
+			ruleHint: "从下拉列表勾选要路由的模型（可多选），再选择目标账户。",
+			modelSearchPlaceholder: "搜索模型…",
+			modelSearchEmpty: "没有匹配的模型。",
+			modelStale: "已下架",
+			visibleModelsTitle: "模型白名单",
+			visibleModelsHint: "勾选要保留的模型，模型选择器就只列出这些；一个都不勾选时则显示全部模型。保存后，下次打开模型选择器生效。",
+			visibleModelsPick: "选择要保留的模型…",
+			visibleModelsCount: "已选 {count} 个模型",
+			visibleModelsShowAll: "显示全部",
+			visibleModelsStaleHint: "有 {count} 个已选模型在目录中找不到了（可能已下架），不影响其他模型；可清理或保留。",
+			visibleModelsCleanStale: "清理失效（{count}）",
+			overridden: "已覆盖",
+			reset: "重置",
+			invalidNumber: "无效数字",
+			numberTooSmall: "不能小于 1（毫秒）",
+			numberTooLarge: "超出允许上限（2147483647 毫秒）",
+			readOnly: "当前配置为只读。",
+			unsaved: "未保存",
+			save: "保存",
+			saving: "保存中",
+			saved: "已保存 ✓",
+			saveFailed: "保存失败，请重试。",
+			discard: "放弃",
+			cancel: "取消",
+			show: "显示",
+			hide: "隐藏",
+			usageTitle: "账户用量",
+			usageRefresh: "刷新",
+			usageRefreshing: "刷新中…",
+			usageLoading: "正在获取账户用量…",
+			usageNoKey: "配置 API 密钥后，这里会显示账户的用量与额度状态。",
+			usageError: "用量获取失败",
+			usageRequests: "请求",
+			usageFailed: "失败",
+			usageSuccessRate: "成功率",
+			usageCost: "花费",
+			usageTokens: "Token",
+			usageTokensIn: "入",
+			usageTokensOut: "出",
+			usageMonthly: "月额度",
+			usagePurchased: "已购",
+			usageFree: "赠送",
+			usageFiveHour: "5 小时窗口",
+			usageWeekly: "每周窗口",
+			usageExceeded: "已超限",
+			usageReset: "重置于",
+			usagePartial: "部分端点数据不可用",
+			usageKeyClear: "清除已存密钥",
+			usageKeyClearStaged: "将清除（保存后生效）",
+			usageUndoKeyClear: "撤销清除",
+			usageKeyInvalid: "API 密钥无效或已过期",
+			usageKeyInvalidHint: "服务端拒绝了全部请求（401）。请检查该账户配置的密钥，或到 commandcode.ai 控制台重新生成。",
+			usageServiceUnavailable: "Command Code 服务暂时不可用",
+			usageServiceUnavailableHint: "服务端返回了错误（5xx），稍后点击刷新重试。",
+			usageNetworkError: "无法连接 Command Code 服务",
+			usageNetworkHint: "所有请求都没有到达服务端。请检查网络连接或 API 地址设置。",
+			usageUpdated: "更新于",
+			usagePeriodEnd: "账期截止",
+			usageActive: "当前使用",
+			usageCooldown: "限额冷却中",
+			usageInvalidKey: "密钥无效",
+			usageUnconfigured: "该账户尚未配置 API 密钥。",
+			updateAvailable: "可更新",
+			updateHint: "已发布新版本，点击查看发布说明；更新插件后刷新本页，提示会自动消失。",
+			loginTitle: "通过官方登录获取密钥",
+			loginHintIdle: "不想手动创建密钥？点击登录后浏览器会打开 commandcode.ai 授权页，完成后密钥自动写入本机凭据服务，下次请求即生效。",
+			loginButton: "登录 Command Code",
+			loginStarting: "正在启动本地回调服务…",
+			loginWaiting: "等待在浏览器中完成授权…",
+			loginOpenLink: "打开授权页面 ↗",
+			loginCancel: "取消登录",
+			loginSuccess: "已登录为",
+			loginUnavailable: "此环境暂不支持登录流程，请手动粘贴密钥。",
+			loginDenied: "授权被拒绝。可重试，或手动粘贴密钥。",
+			loginTimeout: "等待超时：未在窗口期内收到授权回调，请重试。",
+			loginInvalidKey: "获取到的密钥未通过校验（401），请重试或手动粘贴。",
+			loginNetwork: "无法连接 Command Code 服务校验密钥，请检查网络后重试。",
+			loginStoreFailed: "密钥无法写入本机凭据服务，请手动粘贴。",
+			loginCancelled: "登录已取消。",
+			loginFailedGeneric: "登录失败，请重试或手动粘贴密钥。",
+			cardTitle: "Command Code",
+			cardRouteActive: "已启用",
+			cardLoadingHint: "正在读取 Command Code 配置…",
+			cardRegistrationHint: "此卡片随 Command Code 插件注册，需要较新版本的 DeepSeek Harness 才会显示完整内容。"
+		};
+		const en = {
+			nav: "Command Code",
+			title: "Command Code",
+			intro: "Configure the Command Code Provider connection. The API key is stored only in the local credential service and never echoed; other fields are written to user settings and take effect on the next request.",
+			apiKey: "API key",
+			apiKeyHint: "Create one in the commandcode.ai console. Saving with this field blank keeps the stored key.",
+			apiKeySet: "Configured",
+			apiKeyUnset: "Not configured",
+			apiKeyLocked: "Key provided by a read-only source",
+			apiBase: "API base URL",
+			apiBaseHint: "Defaults to https://api.commandcode.ai; usually leave as-is.",
+			workingDir: "Working directory",
+			workingDirHint: "Optional. Leave blank to use the process cwd shown as the placeholder; fill in only to pin a specific path.",
+			requestTimeoutMs: "Request timeout (ms)",
+			requestTimeoutMsHint: "Time to wait for the first response byte; default 60000.",
+			streamIdleTimeoutMs: "Stream idle timeout (ms)",
+			streamIdleTimeoutMsHint: "How long a stalled stream is treated as dead; default 300000 (deliberately generous — long-thinking models can stay silent for minutes).",
+			advancedSettings: "Advanced",
+			advancedSettingsHint: "Rarely touched options: API base URL, working directory, timeouts, and model filtering.",
+			advancedOverriddenOne: "1 customized",
+			advancedOverriddenMany: "{count} customized",
+			advancedInvalid: "A number in Advanced settings is not ready to save; expand to fix it.",
+			filterModelsByPlan: "Hide out-of-plan models",
+			filterModelsByPlanHint: "When on, the model picker lists only models your subscription includes; any on-demand credit balance shows the full catalog.",
+			webSearch: "Serve dsh web search with Command Code",
+			webSearchHint: "When on, the model-facing web_search tool is backed by Command Code (same API key and base URL as chat), winning over other search backends. Off hands the selection back to the previous backend (e.g. modsearch) instead of forcing the shipped DeepSeek search.",
+			accountsTitle: "Account rotation",
+			accountsHint: "When the active account hits its usage limit (429) or its key fails (401), requests switch to the next account; when every account is exhausted the error names the earliest window reset.",
+			accountAdd: "Add account",
+			accountRemove: "Remove",
+			accountLabel: "Account label",
+			accountKey: "API key",
+			accountKeyHint: "This account’s API key. Saving with the field blank keeps the stored key.",
 			accountDefault: "Default account",
 			activeAccount: "Active account",
 			activeAccountAuto: "Auto (first usable account)",
@@ -4134,6 +6174,38 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			document.head.appendChild(tag);
 		}
 		/**
+		* Install the plans & quota panel's stylesheet and return its disposer, for
+		* `ctx.effect` to own. Keyed by its own `data-plugin-css` id, so the injection
+		* is idempotent even if a second surface asks for it later.
+		*/
+		function injectPanelCss() {
+			if (typeof document === "undefined") return () => {};
+			if (document.querySelector(`style[data-plugin-css="@mars-sea/dsh-commandcode-provider/CommandCodePanel.module.css"]`) !== null) return () => {};
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@mars-sea/dsh-commandcode-provider";
+			tag.dataset.pluginCss = PANEL_CSS_ID;
+			tag.textContent = PANEL_CSS;
+			document.head.appendChild(tag);
+			return () => {
+				tag.remove();
+			};
+		}
+		/**
+		* Plans & quota panel id. It is the layout's `MainPanelId`: one string shared
+		* by the `sidebar.footer.action` card and the `main` slot cell, so the card
+		* selects this panel and nothing else. `dsh-client-ui-layout` is not a
+		* dependency of this bundle (its type is only a brand over `string`), so the
+		* brand is applied at the call site instead of importing the package.
+		*/
+		const PANEL_ID = "commandcode-panel";
+		/**
+		* The composer figure's entry id in `conversation.composer.dock`. Its own id,
+		* not the shipped `stats` cell's: reusing `stats` would REPLACE the tokens /
+		* cache-hit / throughput readout rather than inject into it, and that readout
+		* is the harness's to format (see `./session-cost-display.ts`).
+		*/
+		const SESSION_COST_ID = "commandcode-session-cost";
+		/**
 		* Client plugin body. Gates on the services shared by both client generations
 		* (`slots`, `locale`, `connection`, `remote`, `settingsScope`). Current clients
 		* mount the page after `remote.credentials` appears; legacy clients mount it
@@ -4176,11 +6248,13 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			}), "dsh-commandcode-provider: credential invalidations");
 			let usageNamespace;
 			let usageMountError;
+			let pricesController;
 			const contribution = {
 				package: USAGE_REMOTE_CONTRIBUTION.package,
 				descriptors: [
 					...USAGE_REMOTE_CONTRIBUTION.descriptors,
 					...MODELS_REMOTE_CONTRIBUTION.descriptors,
+					...PRICES_REMOTE_CONTRIBUTION.descriptors,
 					...LOGIN_REMOTE_CONTRIBUTION.descriptors
 				]
 			};
@@ -4196,6 +6270,7 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 					ctx.inject(["remote.commandcode"], (namespaceCtx) => {
 						usageNamespace = namespaceCtx.remote.commandcode;
 						controller.refreshCatalog();
+						pricesController?.reload();
 						namespaceCtx.effect(() => () => {
 							usageNamespace = void 0;
 						}, "dsh-commandcode-provider: usage namespace");
@@ -4225,6 +6300,22 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 						error: { message: usageMountError ?? "commandcode/models remote is not mounted" }
 					};
 					return namespace.models();
+				},
+				prices: async () => {
+					const namespace = usageNamespace;
+					if (namespace === void 0) return {
+						ok: false,
+						error: { message: usageMountError ?? "commandcode/prices remote is not mounted" }
+					};
+					const call = namespace.prices;
+					if (typeof call !== "function") return {
+						ok: false,
+						error: {
+							message: "the Host serves no commandcode/prices endpoint",
+							permanent: true
+						}
+					};
+					return call.call(namespace);
 				}
 			};
 			modelsRemote = () => usageRemote.models();
@@ -4232,6 +6323,10 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 			ctx.effect(() => () => usageController.dispose(), "dsh-commandcode-provider: usage controller");
 			const usageStore = createSnapshotStore(usageController.state());
 			usageController.subscribe(() => usageStore.set(usageController.state()));
+			pricesController = new CommandCodePricesController(usageRemote);
+			ctx.effect(() => () => pricesController?.dispose(), "dsh-commandcode-provider: price table");
+			const pricesStore = createSnapshotStore(pricesController.state());
+			pricesController.subscribe(() => pricesStore.set(pricesController.state()));
 			const loginRemote = {
 				loginBegin: async () => {
 					if (usageNamespace === void 0) return {
@@ -4323,6 +6418,54 @@ select.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box
 					cancelLogin: () => void loginController.cancel()
 				})
 			}, CommandCodeProviderCard));
+			const panelFace = () => ({
+				hooks: {
+					commandCodeUsage: usageStore,
+					commandCodeSettings: store
+				},
+				refresh: () => {
+					pricesController?.ensure();
+					usageController.refresh();
+				},
+				startAutoRefresh: () => startPanelAutoRefresh(usageController, () => true),
+				open: () => {
+					const layout = ctx.get("layout");
+					if (typeof layout?.selectPanel === "function") layout.selectPanel(PANEL_ID);
+				}
+			});
+			ctx.effect(() => injectPanelCss(), "dsh-commandcode-provider: panel styles");
+			try {
+				ctx.slots.inject("main", () => ctx.slots.register({
+					name: "main",
+					key: PANEL_ID,
+					inject: panelFace
+				}, CommandCodePanel));
+			} catch (error) {
+				console.error("[dsh-commandcode-provider] could not register the plans & quota panel:", error);
+			}
+			ctx.inject(["layout"], (layoutCtx) => {
+				if (typeof layoutCtx.get("layout")?.selectPanel !== "function") return;
+				try {
+					layoutCtx.slots.inject("sidebar.footer.action", () => layoutCtx.slots.register({
+						name: "sidebar.footer.action",
+						id: PANEL_ID,
+						order: 1,
+						inject: panelFace
+					}, CommandCodeFooterEntry));
+				} catch (error) {
+					console.error("[dsh-commandcode-provider] could not register the sidebar footer card:", error);
+				}
+			});
+			const sessionCostFace = () => ({ hooks: { commandCodePrices: pricesStore } });
+			try {
+				ctx.slots.inject("conversation.composer.dock", () => ctx.slots.register({
+					name: "conversation.composer.dock",
+					id: SESSION_COST_ID,
+					inject: sessionCostFace
+				}, CommandCodeSessionCost));
+			} catch (error) {
+				console.error("[dsh-commandcode-provider] could not register the composer session-cost readout:", error);
+			}
 		}
 		const inject = [
 			"slots",
diff --git a/lib/client.js.map b/lib/client.js.map
index 2b10ed7..0660122 100644
--- a/lib/client.js.map
+++ b/lib/client.js.map
@@ -1 +1 @@
-{"version":3,"file":"client.js","names":["numberField","booleanField","record","stringField","reject","pkg.version","(pkg as { repository?: unknown }).repository","useState","useMemo","Menu","Button","useState","useRef"],"sources":["../src/client/snapshot-store.ts","../src/command-locales.ts","../src/client/sessions.ts","../src/client/settings.ts","../src/client/legacy-credentials.ts","../src/client/usage.ts","../src/client/login.ts","../src/wire-shared.ts","../src/usage-wire.ts","../src/login-wire.ts","../src/client/login-row.tsx","../src/client/model-select.ts","../package.json","../src/client/version.ts","../src/client/update.ts","../src/client/section.tsx","../src/client/card.tsx","../src/client/locales.ts","../src/client/index.ts"],"sourcesContent":["/**\n * A tiny observable snapshot store — the `getSnapshot` / `subscribe` / `set`\n * triple React's `useSyncExternalStore` consumes through the harness slot kit\n * (the host builds each slot's `useFoo(selector)` hook from one of these).\n *\n * Vendored on purpose. DSH 0.1.2 seeds `@deepseek-ai/dsh-client-store` as a\n * platform module, but older Web shells do not and the package is not yet\n * published independently on npm. Inlining the small subset used here avoids\n * a version-specific module request while preserving the slot-hook contract.\n */\n\n/** Mutable observable snapshot consumed by slot hooks. */\nexport interface SnapshotStore<T> {\n  getSnapshot(): T\n  subscribe(listener: () => void): () => void\n  set(value: T): void\n}\n\n/** Notify every subscriber without letting one faulty UI consumer suppress the rest. */\nfunction notifyListeners(listeners: ReadonlySet<() => void>): void {\n  for (const listener of listeners) {\n    try {\n      listener()\n    } catch (error: unknown) {\n      console.error('[dsh-commandcode-provider] snapshot subscriber failed:', error)\n    }\n  }\n}\n\n/** Create one observable snapshot store. */\nexport function createSnapshotStore<T>(initial: T): SnapshotStore<T> {\n  let snapshot = initial\n  const listeners = new Set<() => void>()\n  return {\n    getSnapshot: () => snapshot,\n    subscribe(listener: () => void) {\n      listeners.add(listener)\n      return () => {\n        listeners.delete(listener)\n      }\n    },\n    set(value: T) {\n      if (Object.is(value, snapshot)) return\n      snapshot = value\n      notifyListeners(listeners)\n    },\n  }\n}\n","/**\n * Locale copy for the `/commandcode` usage command and the friendly\n * image-gate error rewrite. Distinct from `./client/locales.ts` (the\n * settings-page namespace `settings.commandcode`): the command runs on the\n * Host and has no access to the client's `ctx.locale`, so the dictionaries\n * are exposed as plain constants for direct lookup; the resolver lives in\n * `pickCommandLocale()`. The image-gate wrapper also lives on the client\n * but is reached from a non-React path that has no `t` in scope, so the\n * same dictionaries serve both surfaces.\n *\n * zh is the source of truth for the key set; en must carry the exact same\n * keys — a mismatch is a compile error at the lookup site.\n */\n\n/** Active locale id recognized by the command and the image-gate wrapper. */\nexport type LocaleId = 'zh' | 'en'\n\n/** Dictionary keys used by the `/commandcode` command and the image-gate wrapper. */\nexport type CommandCodeCommandKey =\n  | 'title'                   // top heading of a single-account report\n  | 'accountTitle'            // per-account heading in the multi-account view\n  | 'accountSeparator'        // rule between accounts in the multi-account view\n  | 'activeBadge'             // \"currently serving\" badge\n  | 'invalidCredentialBadge'  // mark for an account whose key is invalid\n  | 'cooldownBadge'           // mark for an account in rate-limit cooldown\n  | 'rateLimitBadge'          // mark when the pool has marked a key rate-limited\n  | 'unconfigured'            // one-account row when the slot has no key\n  | 'blockedInvalidKey'       // top-of-report block when the whole account is 401\n  | 'blockedServiceUnavailable' // 5xx\n  | 'blockedNetwork'          // network unreachable\n  | 'planLine'                // \"  📦 套餐    {name}{status}{period}\"\n  | 'planPeriodSuffix'        // \" · 账期截止 {date}\" / \" · period ends {date}\"\n  | 'usageHeader'             // \"── 请求 ─────...\"\n  | 'requestsLine'            // \"  💬 请求    {n} 次 / 失败 {f}  成功率 {r}%\"\n  | 'costLine'                // \"  💰 花费    {money}  ({credits} credits)\"\n  | 'tokensLine'              // \"  🔤 Token   {in} 入 / {out} 出\"\n  | 'creditsHeader'           // \"── 信用 ─────...\"\n  | 'monthlyLine'             // \"  💳 月额度  {monthly}   (已购 {purchased} / 赠送 {free})\"\n  | 'barLine'                 // \"     └ {bar}  {pct}%\"\n  | 'windowsHeader'           // \"── 窗口用量 ─────...\"\n  | 'fiveHourLine'            // \"  ⏱ 5 小时  {used} / {cap}{warn}\"\n  | 'weeklyLine'              // \"  📅 每周    {used} / {cap}{warn}\"\n  | 'windowBarLine'           // \"     └ {bar}  重置 {when}\"\n  | 'exceededWarning'         // the trailing \"  ⚠️ 超限!\" / \"  ⚠️ exceeded!\"\n  | 'resetSuffix'             // \"重置 {when}\" (the suffix after the bar)\n  | 'partialFailures'         // \"⚠️  部分端点失败: {list}\"\n  | 'noData'                  // \"(no data — check your API key)\"\n  | 'errorText'               // \"Could not fetch Command Code usage: {message}\"\n  | 'imageGate'               // image-gate rejection rewrite (with {model})\n\nexport const commandcodeCommand: Record<LocaleId, Record<CommandCodeCommandKey, string>> = {\n  zh: {\n    title: '📊 Command Code 用量{account}',\n    accountTitle: '📊 {label}{badges}',\n    accountSeparator: '────────────────────',\n    activeBadge: '  ✅ 当前使用',\n    invalidCredentialBadge: '  ⛔ 密钥无效',\n    cooldownBadge: '  ⏳ 限额冷却中，重置 {when}',\n    rateLimitBadge: '  ⏳ 已达限额（等待窗口探测）',\n    unconfigured: '  (未配置 API 密钥)',\n    blockedInvalidKey:\n      '⛔ API 密钥无效或已过期 — 服务端拒绝了全部请求（401），请检查该账户的密钥配置',\n    blockedServiceUnavailable:\n      '⚠️ Command Code 服务暂时不可用（5xx），稍后重试',\n    blockedNetwork:\n      '⚠️ 无法连接 Command Code 服务 — 请检查网络或 API 地址',\n    planLine: '  📦 套餐    {name}{status}{period}',\n    planPeriodSuffix: ' · 账期截止 {date}',\n    usageHeader: '── 请求 ──────────────────────────────',\n    requestsLine: '  💬 请求    {n} 次 / 失败 {f}  成功率 {r}%',\n    costLine: '  💰 花费    {money}  ({credits} credits)',\n    tokensLine: '  🔤 Token   {in} 入 / {out} 出',\n    creditsHeader: '── 信用 ──────────────────────────────',\n    monthlyLine: '  💳 月额度  {monthly}   (已购 {purchased} / 赠送 {free})',\n    barLine: '     └ {bar}  {pct}%',\n    windowsHeader: '── 窗口用量 ──────────────────────────',\n    fiveHourLine: '  ⏱ 5 小时  {used} / {cap}{warn}',\n    weeklyLine: '  📅 每周    {used} / {cap}{warn}',\n    windowBarLine: '     └ {bar}  重置 {when}',\n    exceededWarning: '  ⚠️ 超限!',\n    resetSuffix: '重置 {when}',\n    partialFailures: '⚠️  部分端点失败: {list}',\n    noData: '（无数据 — 请检查 API 密钥）',\n    errorText: '获取 Command Code 用量失败：{message}',\n    imageGate:\n      '当前会话已包含图片，而模型 {model} 不支持图片输入；'\n      + '请选择支持图片的模型，或先移除会话中的图片。',\n  },\n  en: {\n    title: '📊 Command Code usage{account}',\n    accountTitle: '📊 {label}{badges}',\n    accountSeparator: '────────────────────',\n    activeBadge: '  ✅ active',\n    invalidCredentialBadge: '  ⛔ invalid key',\n    cooldownBadge: '  ⏳ cooling down, resets {when}',\n    rateLimitBadge: '  ⏳ rate-limited (waiting for window probe)',\n    unconfigured: '  (no API key configured)',\n    blockedInvalidKey:\n      '⛔ API key invalid or expired — the server rejected every request (401); check the key configured for this account',\n    blockedServiceUnavailable:\n      '⚠️ Command Code service temporarily unavailable (5xx); try again later',\n    blockedNetwork:\n      '⚠️ could not reach the Command Code service — check your network or the API base setting',\n    planLine: '  📦 Plan     {name}{status}{period}',\n    planPeriodSuffix: ' · period ends {date}',\n    usageHeader: '── Requests ──────────────────────────',\n    requestsLine: '  💬 Requests {n} / failed {f}  success rate {r}%',\n    costLine: '  💰 Spend    {money}  ({credits} credits)',\n    tokensLine: '  🔤 Tokens   {in} in / {out} out',\n    creditsHeader: '── Credits ───────────────────────────',\n    monthlyLine: '  💳 Monthly  {monthly}   (purchased {purchased} / free {free})',\n    barLine: '     └ {bar}  {pct}%',\n    windowsHeader: '── Window usage ──────────────────────',\n    fiveHourLine: '  ⏱ 5-hour   {used} / {cap}{warn}',\n    weeklyLine: '  📅 Weekly   {used} / {cap}{warn}',\n    windowBarLine: '     └ {bar}  resets {when}',\n    exceededWarning: '  ⚠️ exceeded!',\n    resetSuffix: 'resets {when}',\n    partialFailures: '⚠️  some endpoints failed: {list}',\n    noData: '(no data — check your API key)',\n    errorText: 'Could not fetch Command Code usage: {message}',\n    imageGate:\n      'This session already contains images, and model {model} does not accept'\n      + ' image input; please select an image-capable model, or remove the'\n      + ' images from the session first.',\n  },\n}\n\n/**\n * Resolve the active locale for a Host-side command run.\n *\n * Priority: explicit `override` (from `Config.lang`) → `LC_ALL` → `LANG` →\n * the conventional fallback (`'zh'`, matching the existing single-language\n * behavior so unconfigured deployments keep their current output).\n *\n * The values are matched on the leading tag only — `zh_CN.UTF-8`,\n * `zh-Hans`, `zh` all map to `'zh'`; everything starting with `en` maps to\n * `'en'`; anything else falls back to `'zh'` (a non-`en` shell that\n * already has Chinese in the terminal is the closest sensible default;\n * a Western shell that happens to be neither keeps the existing Chinese\n * output rather than swapping to half-translated English).\n */\nexport function pickCommandLocale(\n  override: string | undefined,\n  env: Readonly<Record<string, string | undefined>> = process.env as Record<string, string | undefined>,\n): LocaleId {\n  if (override === 'zh' || override === 'en') return override\n  const raw = env.LC_ALL ?? env.LANG ?? ''\n  const tag = raw.toLowerCase().split(/[._-]/)[0] ?? ''\n  if (tag === 'en') return 'en'\n  return 'zh'\n}\n\n/** Look up a key in the active locale, with an internal en fallback. */\nexport function commandCopy(locale: LocaleId, key: CommandCodeCommandKey): string {\n  return commandcodeCommand[locale][key] ?? commandcodeCommand.en[key] ?? key\n}\n","/**\n * Friendly-error wrapper for the harness's image-session gate.\n *\n * The host rejects switching to a text-only model while the session already\n * contains images with a `model-unavailable` error\n * (`dsh-host-apiproxy`'s `session.selectModel` handler). That rejection is\n * intentional and cannot be relaxed from the plugin side — the adapter's\n * `inputModalities` is exactly what makes the guard work. What we CAN do is\n * make the error message friendlier: wrap the shared\n * `connection.api.sessions.selectModel` face so a `model-unavailable`\n * rejection shows a clear, actionable hint (with the requested model name)\n * instead of the raw English harness message.\n *\n * The wrapper is deliberately narrow: only the `model-unavailable` code is\n * rewritten, only when the message matches the image-session gate, and only\n * the message text changes — the error code and details pass through\n * untouched so any caller that switches on `error.code` keeps working.\n *\n * The wire types are spelled structurally here (not imported from\n * `@deepseek-ai/dsh-host-apiproxy`) so this client bundle does not drag an\n * extra peer dependency into the package; the shapes are stable and the\n * client build inlines them anyway.\n *\n * The wrapper takes a `getLocale` thunk because it is reached from a\n * non-React path that has no `t` in scope; the supplied thunk reads the\n * active locale at call time (typically `() => ctx.locale.getLocale().active`\n * in the client entry), and the message template lives in the shared\n * `commandcodeCommand` dictionary used by the Host-side `/commandcode`\n * command — the same bilingual surface serves both.\n *\n * This module is deliberately free of React and other client-platform\n * imports so the node test runner can exercise it directly.\n */\n\nimport { commandcodeCommand, type LocaleId } from '../command-locales.ts'\n\n/** The `model-unavailable` error details: provider + model id. */\ninterface ModelUnavailableDetails {\n  provider: string\n  model: string\n}\n\n/** The narrow slice of the RPC error we need to inspect and rewrite. */\ninterface RpcErrorLike {\n  code: string\n  message: string\n  details?: ModelUnavailableDetails\n}\n\n/**\n * The narrow slice of a unary RPC result we need to inspect and rewrite.\n * The wire shape from `sessions.selectModel` (via `AbstractApiClient.callUnary`)\n * is the full envelope `{ rpcId, result: { ok, error? } }` — the error lives\n * under `result.result`, not at the top level. `RpcResultLike` models that.\n */\ninterface RpcResultLike {\n  rpcId: string\n  result:\n    | { ok: true; value?: unknown }\n    | { ok: false; error: RpcErrorLike }\n}\n\n/** One selectModel call: payload in, envelope out. */\ntype SelectModelCall = (\n  payload: { sessionId: string; provider: string; model: string; reasoningEffort?: string },\n  signal?: AbortSignal,\n) => Promise<RpcResultLike>\n\n/** The shared sessions wire face we wrap. */\ninterface SessionsLike {\n  selectModel: SelectModelCall\n}\n\n/** Whether a selectModel rejection is the harness's image-session gate. */\nexport function isImageSessionRejection(\n  result: RpcResultLike,\n): result is RpcResultLike & { result: { ok: false; error: RpcErrorLike } } {\n  return (\n    !result.result.ok &&\n    result.result.error.code === 'model-unavailable' &&\n    result.result.error.message.includes('does not accept image input')\n  )\n}\n\n/** Wrap the shared sessions API so selectModel failures read friendlier. */\nexport function withFriendlyImageError(\n  sessions: SessionsLike,\n  getLocale: () => LocaleId,\n): SessionsLike {\n  const selectModel = sessions.selectModel.bind(sessions)\n  return {\n    ...sessions,\n    selectModel: async (payload, signal) => {\n      const result = await selectModel(payload, signal)\n      if (!isImageSessionRejection(result)) return result\n      const model = result.result.error.details?.model ?? payload.model\n      const template = commandcodeCommand[getLocale()].imageGate\n        ?? commandcodeCommand.en.imageGate\n      return {\n        ...result,\n        result: {\n          ...result.result,\n          error: {\n            ...result.result.error,\n            message: template.replace('{model}', model),\n          },\n        },\n      }\n    },\n  }\n}\n\n/**\n * The pre-0.1.2 connection handle that exposed the shared session API under\n * `connection.api.sessions`. In 0.1.2 the connection service became a\n * transport/generation handle and model selection moved to `remote.session`,\n * so this legacy field is deliberately optional.\n */\nexport interface ConnectionLike {\n  api?: { sessions?: SessionsLike }\n}\n\n/**\n * Install the friendly-error wrapper when a legacy sessions face is present.\n *\n * @returns whether the wrapper was installed. The rewrite is only UX polish;\n * a 0.1.2 connection has no `api.sessions`, and its absence must never block\n * the plugin from mounting its settings, credential, or usage surfaces.\n */\nexport function installFriendlyImageError(\n  connection: ConnectionLike,\n  getLocale: () => LocaleId,\n): boolean {\n  const api = connection.api\n  const sessions = api?.sessions\n  if (api === undefined || sessions === undefined || typeof sessions.selectModel !== 'function') return false\n  api.sessions = withFriendlyImageError(sessions, getLocale)\n  return true\n}\n","/**\n * Browser controller for the \"Command Code\" settings page.\n *\n * The page lives at the same settings-nav level as General / Models / Plugins\n * (a `settings.section` entry, id `commandcode`). It exists because the\n * Models page renders an unknown-adapter-family card for the `commandcode`\n * provider and deliberately disables its submit — the API key cannot be\n * configured there. This page owns the connection facts the plugin resolves\n * per request:\n *\n *   - API key   -> written through the credentials domain under the reference\n *                  the plugin resolves (`apiKeyEnv`, default\n *                  `COMMANDCODE_API_KEY`). The literal never rides a response,\n *                  so the control only reports whether one is configured.\n *   - API base  -> the `llm-commandcode` settings namespace (`apiBase`), same\n *                  namespace the Models page card addresses.\n *   - Working dir, request/stream timeouts -> the same namespace.\n *\n * The controller mirrors the plugin-card pattern from the harness's own\n * settings UI: it binds the `llm-commandcode` namespace through the\n * `settingsScope` service, keeps a staged draft of edits, and writes them on\n * save through `scope.set` / the credentials domain. The Host stays the\n * single fact source; the snapshot is republished after each accepted write.\n *\n * This module is deliberately free of JSX — it only produces the state face\n * the React component renders.\n */\n\n/** The settings namespace the plugin registers (host half, src/index.ts). */\nexport const COMMANDCODE_NS = 'llm-commandcode'\n/** Default credential reference the plugin resolves when none is named. */\nexport const DEFAULT_API_KEY_REF = 'COMMANDCODE_API_KEY'\n\n/** The settings-scope snapshot fields consumed by this controller. */\nexport interface SettingsScopeSnapshot<T> {\n  status: 'loading' | 'ready' | 'unavailable'\n  value: T | undefined\n  base: unknown\n  user: unknown\n  revision: number | undefined\n  writable: boolean\n  mode: 'host' | 'memory'\n}\n\n/** Current settings-scope service face used without importing a browser plugin value. */\nexport interface SettingsScope<T> {\n  getSnapshot(): SettingsScopeSnapshot<T>\n  subscribe(listener: () => void): () => void\n  set(field: string, value: unknown): Promise<void>\n  unset(field: string): Promise<void>\n}\n\n/** Result envelope returned by one current Typert Remote call. */\ninterface RemoteResult<T> {\n  ok: boolean\n  value?: T\n  error?: { message: string }\n}\n\n/** Credential facts returned without exposing the credential value. */\ninterface CredentialInfo {\n  configured: boolean\n  writable: boolean\n}\n\n/** The narrow slice of the wire face this controller needs. */\nexport interface SettingsPageApi {\n  /** Credential methods exposed by the current Typert Remote namespace. */\n  credentials: {\n    describe(refs: string[]): Promise<RemoteResult<Record<string, CredentialInfo>>>\n    set(ref: string, value: string): Promise<RemoteResult<void>>\n    unset(ref: string): Promise<RemoteResult<void>>\n  }\n  /**\n   * The model catalog for the settings page's model editors (the\n   * routing-rule editor and the visible-models filter; Host-side). Absent\n   * on legacy transports without the Remote mount — the editors degrade to\n   * the empty-catalog state.\n   */\n  models?(): Promise<RemoteResult<{ models: CatalogModelOption[] }>>\n}\n\n/** The Host-description observable the page reads the process cwd from. */\nexport interface HostDescriptionSource {\n  getSnapshot(): { cwd?: string } | undefined\n  subscribe(fn: () => void): () => void\n}\n\n/** One editable text field's staged state (blank = keep stored value). */\nexport interface StagedField {\n  /** Live draft text the input shows. */\n  text: string\n  /** Whether the user explicitly cleared the field (reset to inherited). */\n  clear: boolean\n  /** Whether the user layer carries this field (marks it overridden). */\n  overridden: boolean\n  /** Whether the staged draft fails to parse (blocks save). */\n  invalid: boolean\n  /**\n   * Why the draft is invalid — a non-number (`format`) or an out-of-range\n   * number (`tooSmall`/`tooLarge`); undefined when valid.\n   */\n  invalidReason: InvalidReason | undefined\n}\n\n/** Why a staged draft fails validation (drives the per-field error copy). */\nexport type InvalidReason = 'format' | 'tooSmall' | 'tooLarge'\n\n/** One extra account row's staged state (the default account uses `apiKey`). */\nexport interface AccountItemState {\n  /** Stable id — the account's credential reference. */\n  id: string\n  /** Credential reference this account's key lives under. */\n  ref: string\n  /** Label draft text (the stored/generated label until edited). */\n  label: string\n  /** The API key draft (write-only; starts blank, never echoes the stored key). */\n  keyText: string\n  /** Whether a key is stored for this account (Host-reported). */\n  configured: boolean\n  /** Whether the credentials domain can store the key. */\n  writable: boolean\n  /** Staged for addition (not yet saved). */\n  added: boolean\n  /** Staged for key removal on the next save (the stored key is bad/unwanted). */\n  clearStaged: boolean\n}\n\n/** One model → account routing rule row's staged state. */\nexport interface RuleItemState {\n  /** Stable row id (`rule-N` for stored rows, `new-N` for staged adds). */\n  id: string\n  /** Model ids the rule routes to the account (multi-select). */\n  models: string[]\n  /** Account slot id the rule routes matching models to. */\n  account: string\n  /** Staged for addition (not yet saved). */\n  added: boolean\n}\n\n/** One selectable catalog model in the settings page's model editors. */\nexport interface CatalogModelOption {\n  id: string\n  name: string\n  /**\n   * Minimum plan-tier key (a Host `KNOWN_PLANS` value), or undefined for\n   * models outside the snapshot / older Hosts. Drives the tier headings in\n   * the editor dropdowns; absent tiers render unheaded.\n   */\n  tier?: string\n}\n\n/** The page's full state face, projected from the scope + drafts + credential. */\nexport interface SettingsPageState {\n  /** Whether the namespace snapshot is ready. */\n  available: boolean\n  /** Whether the Host document accepts writes. */\n  writable: boolean\n  /** Whether the API key is currently configured (Host-reported). */\n  apiKeyConfigured: boolean\n  /** Whether ANY account (default or extra) has a stored key — gates the usage card. */\n  anyAccountConfigured: boolean\n  /** Whether the credentials domain can store the key. */\n  apiKeyWritable: boolean\n  /** The API key draft (write-only; starts blank, never echoes the stored key). */\n  apiKey: StagedField\n  /** Whether the default account's stored key is staged for removal on the next save. */\n  apiKeyClearStaged: boolean\n  /** apiBase draft. */\n  apiBase: StagedField\n  /** workingDir draft. */\n  workingDir: StagedField\n  /**\n   * The working directory a blank `workingDir` resolves to: the Host\n   * process cwd (`host.describe().cwd`). Shown as the field's placeholder so\n   * the user sees what \"leave it empty\" means — no configuration needed.\n   */\n  defaultWorkingDir: string | undefined\n  /** requestTimeoutMs draft. */\n  requestTimeoutMs: StagedField\n  /** streamIdleTimeoutMs draft. */\n  streamIdleTimeoutMs: StagedField\n  /**\n   * filterModelsByPlan draft, staged as `'true'`/`'false'`/`''` (unset). The\n   * component renders it as a toggle; `''` means \"inherit the default\" (on).\n   */\n  filterModelsByPlan: StagedField\n  /**\n   * webSearch draft, staged as `'true'`/`'false'`/`''` (unset). The component\n   * renders it as a toggle; `''` means \"inherit the default\" (on — Command Code\n   * serves the dsh web_search tool).\n   */\n  webSearch: StagedField\n  /**\n   * The manually selected active account, staged as a slot id (`default`\n   * or an extra account's credential reference); `''` means \"auto — first\n   * usable account\". The component renders it as a select.\n   */\n  activeAccount: StagedField\n  /** Extra accounts (multi-account rotation), in rotation order. */\n  accounts: AccountItemState[]\n  /** Refs of stored accounts staged for removal (the usage card hides them). */\n  accountsRemoving: string[]\n  /** Model → account routing rules, in list order (first match wins). */\n  rules: RuleItemState[]\n  /** Effective visible-model allowlist: staged draft or stored value. Empty = show all. */\n  visibleModels: string[]\n  /** The catalog the model editors offer (Host-side, empty until loaded). */\n  catalogModels: CatalogModelOption[]\n  /** Whether the catalog fetch failed (editors fall back to typing). */\n  catalogFailed: boolean\n  /** Whether any staged edit differs from the stored section. */\n  dirty: boolean\n  /** Whether a staged numeric field fails to parse (save blocked). */\n  invalid: boolean\n  /** Whether a save is in flight. */\n  saving: boolean\n  /** Whether the last save failed (drafts retained for correction). */\n  failed: boolean\n  /**\n   * Monotonic counter bumped once per accepted save. The component watches it\n   * to flash the \"Saved ✓\" affordance (timing lives in the component; the\n   * controller stays a plain state machine with no timers).\n   */\n  savedCount: number\n}\n\n/** Parsed outcome of one field's draft. */\ntype Parsed =\n  | { kind: 'set'; value: string | number | boolean }\n  | { kind: 'clear' }\n  | { kind: 'invalid'; reason: InvalidReason }\n\n/** One field's staged draft (internal; the public face adds derived flags). */\ninterface Staged {\n  text: string\n  clear: boolean\n}\n\n/** A field conversion spec. */\ninterface FieldSpec {\n  field: string\n  format(value: unknown): string\n  parse(text: string): Parsed\n}\n\n/** A free-text field; an empty draft clears it. */\nfunction textField(field: string): FieldSpec {\n  return {\n    field,\n    format: (value) => (typeof value === 'string' ? value : ''),\n    parse: (text) => {\n      const trimmed = text.trim()\n      return trimmed === '' ? { kind: 'clear' } : { kind: 'set', value: trimmed }\n    },\n  }\n}\n\n/**\n * A numeric field; an empty draft clears it, anything non-numeric blocks\n * save, and an optional inclusive `bounds` range rejects out-of-range values\n * with a specific reason (the Host schema would reject them at save time with\n * only a generic failure — catching it here names the problem while typing).\n * Decimals pass: the Host schema is `z.number()` too, and a fractional\n * millisecond value is harmless even if pointless.\n */\nfunction numberField(field: string, bounds?: { min?: number; max?: number }): FieldSpec {\n  return {\n    field,\n    format: (value) => (typeof value === 'number' ? String(value) : ''),\n    parse: (text) => {\n      const trimmed = text.trim()\n      if (trimmed === '') return { kind: 'clear' }\n      const parsed = Number(trimmed)\n      if (!Number.isFinite(parsed)) return { kind: 'invalid', reason: 'format' }\n      if (bounds?.min !== undefined && parsed < bounds.min) return { kind: 'invalid', reason: 'tooSmall' }\n      if (bounds?.max !== undefined && parsed > bounds.max) return { kind: 'invalid', reason: 'tooLarge' }\n      return { kind: 'set', value: parsed }\n    },\n  }\n}\n\n/**\n * A boolean field, staged as the strings `'true'`/`'false'` (an empty draft\n * clears it). The component renders a toggle and only ever stages these two\n * strings; anything else blocks save.\n */\nfunction booleanField(field: string): FieldSpec {\n  return {\n    field,\n    format: (value) => (typeof value === 'boolean' ? String(value) : ''),\n    parse: (text) => {\n      const trimmed = text.trim()\n      if (trimmed === '') return { kind: 'clear' }\n      if (trimmed === 'true') return { kind: 'set', value: true }\n      if (trimmed === 'false') return { kind: 'set', value: false }\n      return { kind: 'invalid', reason: 'format' }\n    },\n  }\n}\n\n/**\n * Inclusive bounds for the millisecond timeout fields, mirroring the Host\n * Config schema (`z.number().min(1).max(MAX_TIMER_DELAY_MS)` in src/index.ts;\n * `MAX_TIMER_DELAY_MS` is dsh-timeout's 2^31-1 timer ceiling). The client\n * bundle cannot import the node-side package, so the bound is pinned here —\n * the host remains the final gate.\n */\nexport const MIN_TIMEOUT_MS = 1\nexport const MAX_TIMEOUT_MS = 2147483647\n\n/** The fields this page edits inside the `llm-commandcode` namespace. */\nconst SECTION_FIELDS: FieldSpec[] = [\n  textField('apiBase'),\n  textField('workingDir'),\n  numberField('requestTimeoutMs', { min: MIN_TIMEOUT_MS, max: MAX_TIMEOUT_MS }),\n  numberField('streamIdleTimeoutMs', { min: MIN_TIMEOUT_MS, max: MAX_TIMEOUT_MS }),\n  booleanField('filterModelsByPlan'),\n  booleanField('webSearch'),\n  textField('activeAccount'),\n]\n\n/** Whether two model-id lists are equal as sets (order-insensitive). */\nfunction sameModels(a: readonly string[], b: readonly string[]): boolean {\n  if (a.length !== b.length) return false\n  const set = new Set(a)\n  return b.every((id) => set.has(id))\n}\n\n/**\n * Order-sensitive content fingerprint of the stored routing rules. Stored rule\n * ids are positional (`rule-<index>`), so equality of this fingerprint across a\n * save is exactly the statement \"no rules write landed and no row shifted\".\n */\nfunction ruleFingerprint(rules: ReadonlyArray<{ models: readonly string[]; account: string }>): string {\n  return JSON.stringify(rules.map((rule) => [rule.models, rule.account]))\n}\n\n/**\n * Controller bridging the `llm-commandcode` scope and the credentials domain\n * onto the page. Public API mirrors the harness's CardForm actions, so the\n * component stays thin.\n */\nexport class CommandCodeSettingsController {\n  private readonly scope: SettingsScope<Record<string, unknown>>\n  private readonly api: SettingsPageApi\n  private readonly specs = new Map(SECTION_FIELDS.map((spec) => [spec.field, spec]))\n  private readonly staged = new Map<string, Staged>()\n  private readonly listeners = new Set<() => void>()\n  private readonly disposers: Array<() => void> = []\n  private disposed = false\n  private defaultWorkingDir: string | undefined\n  /** The credential reference the default account resolves. */\n  private credentialRef = DEFAULT_API_KEY_REF\n  /** Host-reported configured/writable state per credential reference. */\n  private readonly credentialStates = new Map<string, { configured: boolean; writable: boolean }>()\n  /** Staged account additions (not yet saved). */\n  private addedAccounts: Array<{ label: string; ref: string }> = []\n  /** Staged removals of stored extra accounts, by credential reference. */\n  private readonly removedRefs = new Set<string>()\n  /** Staged label drafts, by credential reference. */\n  private readonly labelDrafts = new Map<string, string>()\n  /** Staged key drafts, by credential reference (blank = keep stored key). */\n  private readonly keyDrafts = new Map<string, string>()\n  /** Credential references staged for removal on the next save. */\n  private readonly keyClears = new Set<string>()\n  /** Staged model→account routing rules (not yet saved). */\n  private addedRules: Array<{ models: string[]; account: string }> = []\n  /** Staged edits to stored routing rules, by stored row id. */\n  private readonly ruleDrafts = new Map<string, { models: string[]; account: string }>()\n  /**\n   * Stored routing rule rows staged for removal, by stored row id with a\n   * content snapshot. The snapshot makes reconcile content-based: stored\n   * row ids are positional (`rule-N`) and shift after any write, so an\n   * id-only check would misread a landed removal as pending (and a retry\n   * would delete the wrong row).\n   */\n  private readonly removedRuleIds = new Map<string, { models: string[]; account: string }>()\n  /**\n   * Fingerprint of the stored routing rules when the last `save()` started;\n   * `undefined` outside a save. Lets reconcile distinguish a landed rules\n   * write from a save that failed before reaching it.\n   */\n  private rulesBeforeSave: string | undefined = undefined\n  /** Staged visible-model allowlist (undefined = no draft). */\n  private visibleModelsDraft: string[] | undefined = undefined\n  /** The catalog the model editors offer (Host-side). */\n  private catalogModels: CatalogModelOption[] = []\n  private catalogFailed = false\n  private saving = false\n  private failed = false\n  private savedCount = 0\n\n  /**\n   * @param scope - bound scope for the `llm-commandcode` namespace.\n   * @param api - credentials wire face.\n   * @param hostDescription - the Host-description observable whose `cwd` is\n   *   shown as the placeholder a blank `workingDir` field resolves to.\n   */\n  constructor(\n    scope: SettingsScope<Record<string, unknown>>,\n    api: SettingsPageApi,\n    hostDescription?: HostDescriptionSource,\n  ) {\n    this.scope = scope\n    this.api = api\n    this.disposers.push(scope.subscribe(() => {\n      this.recomputeCredentialRef()\n      void this.describeAll()\n      this.publish()\n    }))\n    if (hostDescription !== undefined) {\n      this.defaultWorkingDir = hostDescription.getSnapshot()?.cwd\n      this.disposers.push(hostDescription.subscribe(() => {\n        if (this.disposed) return\n        const cwd = hostDescription.getSnapshot()?.cwd\n        if (cwd !== this.defaultWorkingDir) {\n          this.defaultWorkingDir = cwd\n          this.publish()\n        }\n      }))\n    }\n    this.recomputeCredentialRef()\n    void this.describeAll()\n    this.refreshCatalog()\n  }\n\n  /** Release every subscription held on external sources. Idempotent. */\n  dispose(): void {\n    if (this.disposed) return\n    this.disposed = true\n    for (const dispose of this.disposers) dispose()\n    this.disposers.length = 0\n    this.listeners.clear()\n  }\n\n  /**\n   * The credential reference the section names, or the provider default. A\n   * user who renamed `apiKeyEnv` in `settings.yaml` (or the composition\n   * config) gets a page that addresses the renamed ref instead of silently\n   * writing the default — mirroring the Models page's `refFor()`.\n   */\n  private recomputeCredentialRef(): void {\n    const snapshot = this.scope.getSnapshot()\n    const named = typeof snapshot.value?.apiKeyEnv === 'string' && snapshot.value.apiKeyEnv.length > 0\n      ? snapshot.value.apiKeyEnv\n      : DEFAULT_API_KEY_REF\n    if (named === this.credentialRef) return\n    // Prune the orphaned OLD ref's cached state (renames only move forward;\n    // the new ref re-describes on the next describeAll).\n    this.credentialStates.delete(this.credentialRef)\n    this.credentialRef = named\n  }\n\n  /** Subscribe to state projections. @returns the disposer. */\n  subscribe(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** Build the current page state face. */\n  state(): SettingsPageState {\n    const snapshot = this.scope.getSnapshot()\n    const plan = this.plan()\n    const credential = this.credentialStates.get(this.credentialRef)\n    const accounts = this.effectiveAccounts()\n    return {\n      available: snapshot.status === 'ready',\n      writable: snapshot.writable,\n      apiKeyConfigured: credential?.configured ?? false,\n      anyAccountConfigured: (credential?.configured ?? false) || accounts.some((account) => account.configured),\n      apiKeyWritable: credential?.writable ?? true,\n      apiKey: {\n        text: this.staged.get('apiKey')?.text ?? '',\n        clear: false,\n        overridden: false,\n        invalid: false,\n        invalidReason: undefined,\n      },\n      apiKeyClearStaged: this.keyClears.has(this.credentialRef),\n      apiBase: this.field('apiBase'),\n      workingDir: this.field('workingDir'),\n      defaultWorkingDir: this.defaultWorkingDir,\n      requestTimeoutMs: this.field('requestTimeoutMs'),\n      streamIdleTimeoutMs: this.field('streamIdleTimeoutMs'),\n      filterModelsByPlan: this.field('filterModelsByPlan'),\n      webSearch: this.field('webSearch'),\n      activeAccount: this.field('activeAccount'),\n      accounts,\n      accountsRemoving: [...this.removedRefs],\n      rules: this.effectiveRules(),\n      visibleModels: this.effectiveVisibleModels(),\n      catalogModels: this.catalogModels,\n      catalogFailed: this.catalogFailed,\n      dirty: plan.length > 0 || this.accountsDirty() || this.rulesDirty() || this.visibleModelsDirty(),\n      invalid: plan.some((item) => item.run === undefined),\n      saving: this.saving,\n      failed: this.failed,\n      savedCount: this.savedCount,\n    }\n  }\n\n  /** Stage a new extra account (saved on the next `save()`). */\n  addAccount(): void {\n    const used = new Set([\n      this.credentialRef,\n      ...this.storedExtras().map((extra) => extra.ref),\n      ...this.addedAccounts.map((extra) => extra.ref),\n    ])\n    // New refs derive from the current credential reference's prefix (the\n    // same one `this.credentialRef` names), so a renamed apiKeyEnv yields\n    // `MY_KEY_2`-style refs consistent with the default slot — never a stray\n    // COMMANDCODE_API_KEY_2 that no longer matches the page's reference.\n    let n = 2\n    while (used.has(`${this.credentialRef}_${n}`)) n += 1\n    const index = this.storedExtras().length + this.addedAccounts.length + 2\n    this.addedAccounts.push({ label: `Account ${index}`, ref: `${this.credentialRef}_${n}` })\n    this.failed = false\n    void this.describeAll()\n    this.publish()\n  }\n\n  /** Stage one extra account's removal (or drop an unsaved addition). */\n  removeAccount(id: string): void {\n    const addedIndex = this.addedAccounts.findIndex((extra) => extra.ref === id)\n    if (addedIndex >= 0) this.addedAccounts.splice(addedIndex, 1)\n    else this.removedRefs.add(id)\n    this.labelDrafts.delete(id)\n    this.keyDrafts.delete(id)\n    // A pinned active account that is going away must not linger as a ghost\n    // selection: stage its clear alongside the removal (the host would fall\n    // back to rotation order, but the stored value would be meaningless).\n    const stagedActive = this.staged.get('activeAccount')\n    const activeValue = stagedActive !== undefined\n      ? stagedActive.clear ? '' : stagedActive.text\n      : typeof this.sectionValue('activeAccount') === 'string' ? this.sectionValue('activeAccount') as string : ''\n    if (activeValue === id) {\n      this.staged.set('activeAccount', { text: '', clear: true })\n    }\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one extra account's label draft. */\n  editAccountLabel(id: string, text: string): void {\n    this.labelDrafts.set(id, text)\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one extra account's key draft (blank keeps the stored key). */\n  editAccountKey(id: string, text: string): void {\n    this.keyDrafts.set(id, text)\n    // Typing a replacement cancels a staged removal — the two intents are\n    // mutually exclusive (replace vs remove), and a staged clear would\n    // otherwise silently discard what is being typed.\n    this.keyClears.delete(id)\n    this.failed = false\n    this.publish()\n  }\n\n  /**\n   * Toggle the staged removal of one account's stored key: the next save\n   * unsets the credential so the account reports unconfigured and falls back\n   * to its other key sources. Only meaningful while a key is actually\n   * stored. `target` is `'default'` (the implicit first account) or an extra\n   * account's credential reference.\n   */\n  toggleKeyClear(target: string): void {\n    const ref = target === 'default' ? this.credentialRef : target\n    if (this.keyClears.has(ref)) {\n      this.keyClears.delete(ref)\n    } else {\n      if (this.credentialStates.get(ref)?.configured !== true) return\n      // A staged replacement and a staged removal are mutually exclusive.\n      this.keyDrafts.delete(ref)\n      if (ref === this.credentialRef) this.staged.delete('apiKey')\n      this.keyClears.add(ref)\n    }\n    this.failed = false\n    void this.describeAll()\n    this.publish()\n  }\n\n  /** Stage a new model → account routing rule (saved on the next `save()`). */\n  addRule(): void {\n    this.addedRules.push({ models: [], account: 'default' })\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one routing rule's removal (or drop an unsaved addition). */\n  removeRule(id: string): void {\n    const addedIndex = this.addedRules.findIndex((_, index) => `new-${index}` === id)\n    if (addedIndex >= 0) this.addedRules.splice(addedIndex, 1)\n    else {\n      // Snapshot the row content: stored ids are positional and shift after\n      // any write, so reconcile must compare content, not ids.\n      const stored = this.storedRules().find((rule) => rule.id === id)\n      this.removedRuleIds.set(id, stored === undefined\n        ? { models: [], account: '' }\n        : { models: [...stored.models], account: stored.account })\n    }\n    this.ruleDrafts.delete(id)\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one routing rule's selected model ids (multi-select). */\n  editRuleModels(id: string, models: string[]): void {\n    const addedIndex = this.addedRules.findIndex((_, index) => `new-${index}` === id)\n    if (addedIndex >= 0) {\n      this.addedRules[addedIndex] = { ...this.addedRules[addedIndex]!, models }\n    } else {\n      const current = this.ruleDrafts.get(id) ?? this.storedRules().find((rule) => rule.id === id) ?? { models: [], account: 'default' }\n      this.ruleDrafts.set(id, { ...current, models })\n    }\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one routing rule's target account draft. */\n  editRuleAccount(id: string, text: string): void {\n    const addedIndex = this.addedRules.findIndex((_, index) => `new-${index}` === id)\n    if (addedIndex >= 0) {\n      this.addedRules[addedIndex] = { ...this.addedRules[addedIndex]!, account: text }\n    } else {\n      const current = this.ruleDrafts.get(id) ?? this.storedRules().find((rule) => rule.id === id) ?? { models: [], account: 'default' }\n      this.ruleDrafts.set(id, { ...current, account: text })\n    }\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one field's draft text. */\n  edit(field: string, text: string): void {\n    this.staged.set(field, { text, clear: false })\n    // Typing a replacement for the default key cancels a staged removal.\n    if (field === 'apiKey') this.keyClears.delete(this.credentialRef)\n    this.failed = false\n    this.publish()\n  }\n\n  /** Reset one section field to its inherited (composition) value. */\n  resetField(field: string): void {\n    if (field === 'apiKey') {\n      this.staged.delete('apiKey')\n      this.failed = false\n      this.publish()\n      return\n    }\n    const spec = this.spec(field)\n    this.staged.set(field, { text: spec.format(this.baseValue(field)), clear: true })\n    this.failed = false\n    this.publish()\n  }\n\n  /** Discard every staged edit. */\n  discard(): void {\n    if (this.staged.size === 0 && !this.accountsStaged() && !this.rulesStaged() && !this.visibleModelsStaged() && !this.failed) return\n    this.staged.clear()\n    this.clearAccountStaging()\n    this.clearRuleStaging()\n    this.clearVisibleModelsStaging()\n    this.failed = false\n    this.publish()\n  }\n\n  /**\n   * Re-read the Host's credential facts without any staged edit. The browser\n   * login stores a key Host-side behind the page's back; the plugin entry\n   * calls this when a login lands so the configured/writable badges follow.\n   */\n  refreshCredentials(): void {\n    void this.describeAll()\n  }\n\n  /** Write every staged edit, then re-read the Host's accepted state. */\n  async save(): Promise<void> {\n    const plan = this.plan()\n    const accountRuns = this.accountPlan()\n    const ruleRuns = this.rulesPlan()\n    const visibleRuns = this.visibleModelsPlan()\n    if ((plan.length === 0 && accountRuns.length === 0 && ruleRuns.length === 0 && visibleRuns.length === 0) || this.saving) return\n    const runs: Array<() => Promise<boolean>> = []\n    for (const item of plan) {\n      if (item.run === undefined) return\n      runs.push(item.run)\n    }\n    this.saving = true\n    this.failed = false\n    // Snapshot the stored routing rules before any write: reconcile needs to\n    // tell \"the rules write landed (rows shifted)\" from \"the save failed\n    // earlier (rows untouched)\" — see reconcileRuleStaging.\n    this.rulesBeforeSave = ruleFingerprint(this.storedRules())\n    this.publish()\n    let landed = true\n    // Keys land first so a saved accounts list never names a ref whose key\n    // write failed silently; the accounts list itself writes last. Stop at\n    // the first failure: running later writes after a failed one would\n    // persist a partial state the staged drafts no longer describe. A\n    // throwing write counts as a failure too (the scope seam may reject)\n    // so the surviving staging is reconciled instead of dropped.\n    for (const run of [...runs, ...accountRuns, ...ruleRuns, ...visibleRuns]) {\n      let ok = false\n      try {\n        ok = await run()\n      } catch {\n        ok = false\n      }\n      if (!ok) {\n        landed = false\n        break\n      }\n    }\n    this.saving = false\n    this.failed = !landed\n    if (landed) {\n      this.savedCount += 1\n      this.staged.clear()\n      this.clearAccountStaging()\n      this.clearRuleStaging()\n      this.clearVisibleModelsStaging()\n    } else {\n      // A failed save may still have landed earlier writes (e.g. the accounts\n      // list made it while a key write did not). Reconcile the staging with\n      // the stored section so a landed account is not simultaneously stored\n      // AND staged-for-addition (which a retry would persist twice).\n      this.reconcileAccountStaging()\n      this.reconcileRuleStaging()\n      this.reconcileVisibleModelsStaging()\n    }\n    this.publish()\n  }\n\n  /**\n   * Drop account staging the stored section already reflects: additions whose\n   * ref is now stored, removals whose ref is gone, and label drafts that the\n   * stored label proves landed. Key drafts are kept — a landed key write is\n   * idempotent on retry, and the draft carries the user's intent when it was\n   * the accounts write that failed.\n   */\n  private reconcileAccountStaging(): void {\n    const stored = new Set(this.storedExtras().map((extra) => extra.ref))\n    this.addedAccounts = this.addedAccounts.filter((extra) => !stored.has(extra.ref))\n    for (const ref of [...this.removedRefs]) {\n      if (!stored.has(ref)) this.removedRefs.delete(ref)\n    }\n    for (const [ref, text] of [...this.labelDrafts]) {\n      const storedLabel = this.storedExtras().find((extra) => extra.ref === ref)?.label\n      // A label draft is dropped only when the stored section proves it\n      // landed. An ABSENT entry is not proof: keys land before the accounts\n      // list, so a failed save routinely leaves a staged addition stored\n      // nowhere — treating \"not stored\" as \"already applied\" silently threw\n      // away the label the user had typed and persisted the auto-generated\n      // name on the retry instead.\n      if (storedLabel !== undefined && storedLabel === text.trim()) this.labelDrafts.delete(ref)\n    }\n    // A landed clear already did its job (the Host reports unconfigured);\n    // keep only clears that failed so a retry re-attempts them.\n    for (const ref of [...this.keyClears]) {\n      if (this.credentialStates.get(ref)?.configured !== true) this.keyClears.delete(ref)\n    }\n  }\n\n  // -------------------------------------------------------------------------\n  // Internals\n  // -------------------------------------------------------------------------\n\n  private spec(field: string): FieldSpec {\n    const spec = this.specs.get(field)\n    if (spec === undefined) throw new Error(`commandcode settings page has no field ${field}`)\n    return spec\n  }\n\n  /** One field's rendered state: draft text, whether it is user-overridden, invalid. */\n  private field(field: string): StagedField {\n    const spec = this.spec(field)\n    const staged = this.staged.get(field)\n    if (staged === undefined) {\n      return {\n        text: spec.format(this.sectionValue(field)),\n        clear: false,\n        overridden: this.stored(field),\n        invalid: false,\n        invalidReason: undefined,\n      }\n    }\n    const parsed = staged.clear ? { kind: 'clear' as const } : spec.parse(staged.text)\n    return {\n      text: staged.text,\n      clear: staged.clear,\n      overridden: parsed.kind === 'set',\n      invalid: parsed.kind === 'invalid',\n      invalidReason: parsed.kind === 'invalid' ? parsed.reason : undefined,\n    }\n  }\n\n  private sectionValue(field: string): unknown {\n    return this.scope.getSnapshot().value?.[field]\n  }\n\n  private baseValue(field: string): unknown {\n    const base = this.scope.getSnapshot().base\n    return typeof base === 'object' && base !== null && !Array.isArray(base)\n      ? (base as Record<string, unknown>)[field]\n      : undefined\n  }\n\n  private userLayer(): Record<string, unknown> | undefined {\n    const user = this.scope.getSnapshot().user\n    return typeof user === 'object' && user !== null && !Array.isArray(user)\n      ? (user as Record<string, unknown>)\n      : undefined\n  }\n\n  private stored(field: string): boolean {\n    const user = this.userLayer()\n    return user !== undefined && Object.prototype.hasOwnProperty.call(user, field)\n  }\n\n  /**\n   * The writes a save would perform, in staged order. A field whose draft is\n   * not a value its spec accepts carries no write (the save refuses).\n   */\n  private plan(): Array<{ field: string; run: (() => Promise<boolean>) | undefined }> {\n    const plan: Array<{ field: string; run: (() => Promise<boolean>) | undefined }> = []\n    for (const [field, staged] of this.staged) {\n      if (field === 'apiKey') {\n        const value = staged.text.trim()\n        if (value !== '') {\n          plan.push({ field, run: () => this.writeKey(value) })\n        }\n        continue\n      }\n      const spec = this.spec(field)\n      if (staged.clear) {\n        if (this.stored(field)) plan.push({ field, run: () => this.clear(field) })\n        continue\n      }\n      if (staged.text === spec.format(this.sectionValue(field))) continue\n      const parsed = spec.parse(staged.text)\n      if (parsed.kind === 'invalid') plan.push({ field, run: undefined })\n      else if (parsed.kind === 'clear') plan.push({ field, run: () => this.clear(field) })\n      else plan.push({ field, run: () => this.store(field, parsed.value) })\n    }\n    return plan\n  }\n\n  private async clear(field: string): Promise<boolean> {\n    await this.scope.unset(field)\n    return !this.stored(field)\n  }\n\n  private async store(field: string, value: string | number | boolean): Promise<boolean> {\n    await this.scope.set(field, value)\n    return this.userLayer()?.[field] === value\n  }\n\n  /** Write the staged default key, then re-read whether the Host holds it. */\n  private async writeKey(value: string): Promise<boolean> {\n    return this.writeKeyTo(this.credentialRef, value)\n  }\n\n  /** Write one account's key, then re-read the Host's credential states. */\n  private async writeKeyTo(ref: string, value: string): Promise<boolean> {\n    try {\n      const response = await this.api.credentials.set(ref, value)\n      if (!response.ok) return false\n    } catch {\n      return false\n    }\n    await this.describeAll()\n    return this.credentialStates.get(ref)?.configured ?? false\n  }\n\n  /** Ask the credentials domain about every reference this page writes. */\n  private async describeAll(): Promise<void> {\n    const refs = [\n      this.credentialRef,\n      ...this.storedExtras().map((extra) => extra.ref),\n      ...this.addedAccounts.map((extra) => extra.ref),\n    ]\n    let response: Awaited<ReturnType<SettingsPageApi['credentials']['describe']>>\n    try {\n      response = await this.api.credentials.describe(refs)\n    } catch {\n      return\n    }\n    if (!response.ok) return\n    let changed = false\n    for (const ref of refs) {\n      const view = response.value?.[ref]\n      const next = {\n        configured: view?.configured ?? false,\n        writable: view?.writable ?? true,\n      }\n      const prev = this.credentialStates.get(ref)\n      if (prev === undefined || prev.configured !== next.configured || prev.writable !== next.writable) {\n        this.credentialStates.set(ref, next)\n        changed = true\n      }\n    }\n    if (changed) this.publish()\n  }\n\n  /**\n   * Fetch the model catalog for the settings page's model editors through\n   * the Host Remote. Runs once at construction; call again (e.g. from the\n   * client entry once the Remote mount lands) to (re)try — a later success\n   * clears a prior failure flag so the editors recover without a page reload.\n   */\n  refreshCatalog(): void {\n    const models = this.api.models\n    if (models === undefined) {\n      this.catalogFailed = true\n      this.publish()\n      return\n    }\n    void models().then((response) => {\n      if (response.ok && Array.isArray(response.value?.models)) {\n        // Defensive per-entry shaping: the Remote result is untrusted at the\n        // boundary, and an older Host predates the tier field.\n        const shaped: CatalogModelOption[] = []\n        for (const model of response.value.models) {\n          if (typeof model !== 'object' || model === null) continue\n          const entry = model as unknown as Record<string, unknown>\n          if (typeof entry.id !== 'string' || typeof entry.name !== 'string') continue\n          shaped.push({\n            id: entry.id,\n            name: entry.name,\n            ...(typeof entry.tier === 'string' ? { tier: entry.tier } : {}),\n          })\n        }\n        this.catalogModels = shaped\n        this.catalogFailed = false\n      } else {\n        this.catalogFailed = true\n      }\n    }, () => {\n      this.catalogFailed = true\n    }).then(() => this.publish())\n  }\n\n  // -----------------------------------------------------------------------\n  // Multi-account staging\n  // -----------------------------------------------------------------------\n\n  /** The raw `accounts` array of the stored section, verbatim. */\n  private rawStoredAccounts(): Array<Record<string, unknown>> {\n    const raw = this.scope.getSnapshot().value?.accounts\n    if (!Array.isArray(raw)) return []\n    return raw.filter(\n      (entry): entry is Record<string, unknown> =>\n        typeof entry === 'object' && entry !== null && !Array.isArray(entry),\n    )\n  }\n\n  /**\n   * The stored extra accounts from the settings section (`accounts`): the rows\n   * this page can address, i.e. the ones carrying a credential reference.\n   *\n   * Entries the page cannot name are deliberately NOT listed here but are also\n   * never dropped — `writeAccounts()` rebuilds the stored list from\n   * {@link rawStoredAccounts} and only rewrites the reference-carrying entries\n   * it manages (see the note there), so a literal-key entry stays in the\n   * document and simply has no row.\n   */\n  private storedExtras(): Array<{ label: string; ref: string }> {\n    const out: Array<{ label: string; ref: string }> = []\n    for (const record of this.rawStoredAccounts()) {\n      const ref = record.apiKeyEnv\n      if (typeof ref !== 'string' || ref === '') continue\n      const label = record.label\n      out.push({ label: typeof label === 'string' && label !== '' ? label : ref, ref })\n    }\n    return out\n  }\n\n  /** Every extra account row: stored (minus staged removals) + staged adds. */\n  private effectiveAccounts(): AccountItemState[] {\n    const stored = this.storedExtras()\n      .filter((extra) => !this.removedRefs.has(extra.ref))\n      .map((extra) => ({ ...extra, added: false }))\n    const added = this.addedAccounts.map((extra) => ({ ...extra, added: true }))\n    return [...stored, ...added].map((extra) => ({\n      id: extra.ref,\n      ref: extra.ref,\n      label: this.labelDrafts.get(extra.ref) ?? extra.label,\n      keyText: this.keyDrafts.get(extra.ref) ?? '',\n      configured: this.credentialStates.get(extra.ref)?.configured ?? false,\n      writable: this.credentialStates.get(extra.ref)?.writable ?? true,\n      added: extra.added,\n      clearStaged: this.keyClears.has(extra.ref),\n    }))\n  }\n\n  /** Whether any account-level staging (add/remove/label/key/clear) exists. */\n  private accountsStaged(): boolean {\n    return this.addedAccounts.length > 0\n      || this.removedRefs.size > 0\n      || this.labelDrafts.size > 0\n      || this.keyDrafts.size > 0\n      || this.keyClears.size > 0\n  }\n\n  /** Whether the staged account edits differ from the stored section. */\n  private accountsDirty(): boolean {\n    if (this.addedAccounts.length > 0 || this.removedRefs.size > 0) return true\n    for (const [ref, text] of this.labelDrafts) {\n      const base = this.storedExtras().find((extra) => extra.ref === ref)?.label\n      if (base !== undefined && text.trim() !== '' && text !== base) return true\n    }\n    for (const text of this.keyDrafts.values()) {\n      if (text.trim() !== '') return true\n    }\n    // A staged clear is only meaningful while the key is actually stored —\n    // staging one against an unconfigured ref is a no-op, not dirt.\n    for (const ref of this.keyClears) {\n      if (this.credentialStates.get(ref)?.configured === true) return true\n    }\n    return false\n  }\n\n  /** Reset every account-level staged edit. */\n  private clearAccountStaging(): void {\n    this.addedAccounts = []\n    this.removedRefs.clear()\n    this.labelDrafts.clear()\n    this.keyDrafts.clear()\n    this.keyClears.clear()\n  }\n\n  /** Unset one stored credential, then re-read the Host's credential states. */\n  private async unsetKey(ref: string): Promise<boolean> {\n    try {\n      const response = await this.api.credentials.unset(ref)\n      if (!response.ok) return false\n    } catch {\n      return false\n    }\n    await this.describeAll()\n    return this.credentialStates.get(ref)?.configured !== true\n  }\n\n  /** The account-level writes a save performs (empty when nothing staged). */\n  private accountPlan(): Array<() => Promise<boolean>> {\n    if (!this.accountsDirty()) return []\n    const runs: Array<() => Promise<boolean>> = []\n    // Staged removals land first: a cleared credential must be gone before\n    // the accounts list write, or a removed row would leave an orphaned\n    // secret behind. Removed rows keep their clear (clean removal).\n    for (const ref of this.keyClears) {\n      if (this.credentialStates.get(ref)?.configured === true) {\n        runs.push(() => this.unsetKey(ref))\n      }\n    }\n    for (const [ref, text] of this.keyDrafts) {\n      const value = text.trim()\n      if (value !== '' && !this.removedRefs.has(ref) && !this.keyClears.has(ref)) {\n        runs.push(() => this.writeKeyTo(ref, value))\n      }\n    }\n    runs.push(() => this.writeAccounts())\n    return runs\n  }\n\n  /**\n   * Persist the staged accounts list into the settings section.\n   *\n   * The stored list is the base — NOT a list rebuilt from this page's rows.\n   * A composition-config entry may carry a literal `apiKey` (or a shape this\n   * page does not know), and the settings layer replaces the whole array, so a\n   * rebuilt list would silently delete every entry the page cannot name along\n   * with the literal keys of the entries it can. Entries are therefore carried\n   * over verbatim and only the reference-carrying rows are rewritten (label\n   * draft applied, staged removals dropped, staged additions appended).\n   */\n  private async writeAccounts(): Promise<boolean> {\n    const removed = this.removedRefs\n    const written = new Set<string>()\n    const list: Array<Record<string, unknown>> = []\n    for (const entry of this.rawStoredAccounts()) {\n      const ref = entry.apiKeyEnv\n      // Not a row this page manages (literal-key or unknown entry): preserve\n      // it exactly as stored rather than dropping it with the rewrite.\n      if (typeof ref !== 'string' || ref === '') {\n        list.push({ ...entry })\n        continue\n      }\n      if (removed.has(ref) || written.has(ref)) continue\n      written.add(ref)\n      list.push(this.accountEntry(ref, entry))\n    }\n    // Defensive dedupe by ref: a partially landed earlier save can leave an\n    // account both stored and staged-for-addition; never persist duplicates.\n    // A staged addition whose ref is already stored is skipped too — the\n    // stored entry (with any literal key or unknown field) wins.\n    for (const extra of this.addedAccounts) {\n      if (written.has(extra.ref)) continue\n      written.add(extra.ref)\n      list.push(this.accountEntry(extra.ref, extra))\n    }\n    await this.scope.set('accounts', list)\n    // Verify against the same raw entries the write was built from: the\n    // page's row view ignores reference-less entries, so comparing it to\n    // `list` would report a false failure whenever one is present.\n    const after = this.rawStoredAccounts()\n    return after.length === list.length\n      && list.every((item, index) => after[index]?.apiKeyEnv === item.apiKeyEnv)\n  }\n\n  /**\n   * One written account entry: the stored/added facts plus the label draft.\n   * `fallback` contributes the non-managed fields (a stored entry's literal\n   * `apiKey`, or any future field) so a rewrite never strips them.\n   */\n  private accountEntry(\n    ref: string,\n    fallback: { label: string } | Record<string, unknown>,\n  ): Record<string, unknown> {\n    const draft = this.labelDrafts.get(ref)?.trim()\n    const base = 'ref' in fallback\n      ? { label: (fallback as { label: string }).label }\n      : { ...(fallback as Record<string, unknown>) }\n    const storedLabel = base.label\n    return {\n      ...base,\n      label: draft !== undefined && draft !== ''\n        ? draft\n        : typeof storedLabel === 'string' && storedLabel !== '' ? storedLabel : ref,\n      apiKeyEnv: ref,\n    }\n  }\n\n  // -----------------------------------------------------------------------\n  // Model → account routing-rule staging\n  // -----------------------------------------------------------------------\n\n  /** The stored routing rules from the settings section (`modelAccountRules`). */\n  private storedRules(): Array<{ id: string; models: string[]; account: string }> {\n    const raw = this.scope.getSnapshot().value?.modelAccountRules\n    if (!Array.isArray(raw)) return []\n    const out: Array<{ id: string; models: string[]; account: string }> = []\n    for (const [index, entry] of raw.entries()) {\n      if (typeof entry !== 'object' || entry === null || Array.isArray(entry)) continue\n      const record = entry as Record<string, unknown>\n      const models = record.models\n      const account = record.account\n      const modelsList = Array.isArray(models) && models.every((m) => typeof m === 'string')\n        ? (models as string[]).filter((m) => m !== '')\n        : []\n      if (modelsList.length === 0) continue\n      out.push({\n        id: `rule-${index}`,\n        models: modelsList,\n        account: typeof account === 'string' && account !== '' ? account : 'default',\n      })\n    }\n    return out\n  }\n\n  /** Every routing rule row: stored (minus staged removals, with drafts) + staged adds. */\n  private effectiveRules(): RuleItemState[] {\n    const stored = this.storedRules()\n      .filter((rule) => !this.removedRuleIds.has(rule.id))\n      .map((rule) => {\n        const draft = this.ruleDrafts.get(rule.id)\n        return {\n          id: rule.id,\n          models: draft?.models ?? rule.models,\n          account: draft?.account ?? rule.account,\n          added: false,\n        }\n      })\n    const added = this.addedRules.map((rule, index) => ({\n      id: `new-${index}`,\n      models: rule.models,\n      account: rule.account,\n      added: true,\n    }))\n    return [...stored, ...added]\n  }\n\n  /** Whether any routing-rule staging (add/remove/edit) exists. */\n  private rulesStaged(): boolean {\n    return this.addedRules.length > 0 || this.removedRuleIds.size > 0 || this.ruleDrafts.size > 0\n  }\n\n  /** Whether the staged routing rules differ from the stored section. */\n  private rulesDirty(): boolean {\n    if (this.addedRules.length > 0 || this.removedRuleIds.size > 0) return true\n    for (const [id, draft] of this.ruleDrafts) {\n      const base = this.storedRules().find((rule) => rule.id === id)\n      if (base === undefined) continue\n      if (draft.models.length > 0 && !sameModels(draft.models, base.models)) return true\n      if (draft.account !== base.account) return true\n    }\n    return false\n  }\n\n  /** Reset every routing-rule staged edit. */\n  private clearRuleStaging(): void {\n    this.addedRules = []\n    this.ruleDrafts.clear()\n    this.removedRuleIds.clear()\n  }\n\n  /**\n   * Drop rule staging the stored section already reflects (partial-save\n   * retry). Stored row ids are positional (`rule-N`) and shift after any\n   * write, so every check here is content-based, never id-based:\n   * - landed additions (in `addedRules`, already in stored) are dropped, or\n   *   a retry would persist them twice;\n   * - staged removals whose snapshot row is gone from stored have landed\n   *   (drop them); a removal whose snapshot still matches a stored row is\n   *   still pending (keep it).\n   */\n  private reconcileRuleStaging(): void {\n    const stored = this.storedRules()\n    this.addedRules = this.addedRules.filter((added) =>\n      !stored.some((rule) =>\n        sameModels(added.models, rule.models) && added.account === rule.account))\n    for (const [id, snapshot] of [...this.removedRuleIds]) {\n      const landed = !stored.some((rule) =>\n        sameModels(snapshot.models, rule.models) && snapshot.account === rule.account)\n      if (landed) this.removedRuleIds.delete(id)\n    }\n    // Drafts are keyed by positional stored ids, so they survive a failed save\n    // exactly as long as the stored list did not change: writes run in order\n    // and stop at the first failure, so a failure BEFORE the rules write leaves\n    // the stored rows (and their ids) untouched and the drafts still describe\n    // them — clearing here would silently revert the user's edit and leave\n    // `dirty` false, i.e. nothing to retry. Only a save that actually landed\n    // the rules write shifts every positional id, which makes a draft\n    // unattributable; matching shifted rows by content would misattribute\n    // edits, so those drafts are dropped and the user re-applies the edit.\n    if (this.rulesBeforeSave !== undefined && ruleFingerprint(stored) === this.rulesBeforeSave) return\n    this.ruleDrafts.clear()\n  }\n\n  /** The stored visible-model allowlist (`visibleModels`); empty = show all. */\n  private storedVisibleModels(): string[] {\n    const raw = this.scope.getSnapshot().value?.visibleModels\n    if (!Array.isArray(raw)) return []\n    return raw.filter((m): m is string => typeof m === 'string' && m !== '')\n  }\n\n  /** Effective visible-model allowlist: staged draft or stored value. */\n  private effectiveVisibleModels(): string[] {\n    return this.visibleModelsDraft ?? this.storedVisibleModels()\n  }\n\n  /** Whether the staged visible-model selection differs from stored. */\n  private visibleModelsDirty(): boolean {\n    return this.visibleModelsDraft !== undefined\n      && !sameModels(this.visibleModelsDraft, this.storedVisibleModels())\n  }\n\n  /** Whether any visible-model staging exists. */\n  private visibleModelsStaged(): boolean {\n    return this.visibleModelsDraft !== undefined\n  }\n\n  /** Reset the visible-model staged edit. */\n  private clearVisibleModelsStaging(): void {\n    this.visibleModelsDraft = undefined\n  }\n\n  /** Drop visible-model staging the stored section already reflects. */\n  private reconcileVisibleModelsStaging(): void {\n    if (this.visibleModelsDraft !== undefined\n      && sameModels(this.visibleModelsDraft, this.storedVisibleModels())) {\n      this.visibleModelsDraft = undefined\n    }\n  }\n\n  /** The visible-model writes a save performs (empty when nothing staged). */\n  private visibleModelsPlan(): Array<() => Promise<boolean>> {\n    if (!this.visibleModelsDirty()) return []\n    return [() => this.writeVisibleModels()]\n  }\n\n  /** Persist the staged visible-model allowlist into the settings section. */\n  private async writeVisibleModels(): Promise<boolean> {\n    const list = this.visibleModelsDraft ?? []\n    await this.scope.set('visibleModels', list)\n    return sameModels(this.storedVisibleModels(), list)\n  }\n\n  /** Stage the visible-model allowlist (multi-select). */\n  editVisibleModels(models: string[]): void {\n    this.visibleModelsDraft = [...models]\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage \"show all models\" (clears the allowlist). */\n  clearVisibleModels(): void {\n    this.visibleModelsDraft = []\n    this.failed = false\n    this.publish()\n  }\n\n  /** The routing-rule writes a save performs (empty when nothing staged). */\n  private rulesPlan(): Array<() => Promise<boolean>> {\n    if (!this.rulesDirty()) return []\n    return [() => this.writeRules()]\n  }\n\n  /** Persist the staged routing rules into the settings section. */\n  private async writeRules(): Promise<boolean> {\n    const base = this.storedRules().filter((rule) => {\n      const snapshot = this.removedRuleIds.get(rule.id)\n      // Content-based removal: positional ids shift after any write, so a\n      // staged removal only filters the row it snapshotted.\n      return snapshot === undefined\n        || !sameModels(snapshot.models, rule.models)\n        || snapshot.account !== rule.account\n    })\n    const list = [\n      ...base.map((rule) => {\n        const draft = this.ruleDrafts.get(rule.id)\n        return {\n          models: draft !== undefined && draft.models.length > 0 ? draft.models : rule.models,\n          account: draft?.account !== undefined && draft.account !== '' ? draft.account : rule.account,\n        }\n      }),\n      ...this.addedRules.map((rule) => ({\n        models: rule.models,\n        account: rule.account,\n      })),\n    ].filter((rule) => rule.models.length > 0)\n    // Defensive dedupe by content: a partially landed earlier save can leave\n    // a rule both stored and staged-for-addition; never persist duplicates.\n    const seen = new Set<string>()\n    const deduped = list.filter((rule) => {\n      const key = `${rule.account}\\u0001${[...rule.models].sort().join('\\u0001')}`\n      if (seen.has(key)) return false\n      seen.add(key)\n      return true\n    })\n    await this.scope.set('modelAccountRules', deduped)\n    const after = this.storedRules()\n    return after.length === deduped.length\n      && deduped.every((item, index) =>\n        after[index] !== undefined\n        && sameModels(after[index].models, item.models)\n        && after[index].account === item.account)\n  }\n\n  private publish(): void {\n    if (this.disposed) return\n    for (const listener of this.listeners) listener()\n  }\n}\n","/** Legacy ApiProxy credentials adapter for pre-0.1.2 DSH clients. */\n\nimport type { SettingsPageApi } from './settings.ts'\n\ninterface LegacyFailure {\n  message: string\n}\n\ninterface LegacyResponse<T> {\n  result:\n    | { ok: true; value: T }\n    | { ok: false; error: LegacyFailure }\n}\n\n/** The pre-0.1.2 `connection.api.credentials` face. */\nexport interface LegacyCredentialsApi {\n  describe(request: { refs: string[] }): Promise<LegacyResponse<{\n    credentials: Record<string, { configured: boolean; writable: boolean }>\n  }>>\n  set(request: { ref: string; value: string }): Promise<LegacyResponse<unknown>>\n  unset(request: { ref: string }): Promise<LegacyResponse<unknown>>\n}\n\n/** Convert a legacy credentials ApiProxy into the current settings-page face. */\nexport function adaptLegacyCredentials(\n  legacy: LegacyCredentialsApi | undefined,\n): SettingsPageApi | undefined {\n  if (legacy === undefined) return undefined\n  return {\n    credentials: {\n      describe: async (refs) => {\n        const response = await legacy.describe({ refs })\n        return response.result.ok\n          ? { ok: true, value: response.result.value.credentials }\n          : { ok: false, error: response.result.error }\n      },\n      set: async (ref, value) => {\n        const response = await legacy.set({ ref, value })\n        return response.result.ok\n          ? { ok: true, value: undefined }\n          : { ok: false, error: response.result.error }\n      },\n      unset: async (ref) => {\n        const response = await legacy.unset({ ref })\n        return response.result.ok\n          ? { ok: true, value: undefined }\n          : { ok: false, error: response.result.error }\n      },\n    },\n  }\n}\n","/**\n * Browser controller for the settings page's account-usage card.\n *\n * The card renders the same account/usage/credit facts the `/commandcode`\n * command prints, fetched Host-side through the `commandcode/report` Remote\n * (the browser never holds the API key). This controller owns the fetch\n * lifecycle — idle/loading/ready/error, one in-flight request at a time,\n * stale-response dropping — and the display formatting, so the React\n * component stays a thin renderer and node tests can drive everything.\n *\n * Deliberately JSX-free, mirroring `./settings.ts`.\n *\n * @module dsh-commandcode-provider/client/usage\n */\n\nimport type { CommandCodeAccountsReport, CommandCodeCatalog } from '../usage-wire.ts'\nimport type { CommandCodeLoginStatus } from '../login-wire.ts'\nimport type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol'\n\n/**\n * Merge the plugin's Remote endpoints into the harness's typed client Remote\n * surface (the same declaration pattern the harness's generated\n * typert.remote-client files use), so `ctx.remote.commandcode.*()` is typed\n * once each contribution is mounted. The `commandcode` namespace member is\n * declared exactly once (interface merging forbids duplicate members), so\n * this one declaration carries the usage report, the model catalog, AND the\n * login endpoints — the endpoint-level declarations live beside their\n * controllers.\n */\ndeclare module '@deepseek-ai/dsh-typert-protocol' {\n  interface TypertRemoteMap {\n    'commandcode/report': () => Promise<RemoteResult<CommandCodeAccountsReport>>\n    'commandcode/models': () => Promise<RemoteResult<CommandCodeCatalog>>\n  }\n  interface TypertRemoteNamespaceMap {\n    commandcode: {\n      report: () => Promise<RemoteResult<CommandCodeAccountsReport>>\n      models: () => Promise<RemoteResult<CommandCodeCatalog>>\n      loginBegin: () => Promise<RemoteResult<CommandCodeLoginStatus>>\n      loginStatus: () => Promise<RemoteResult<CommandCodeLoginStatus>>\n      loginCancel: () => Promise<RemoteResult<CommandCodeLoginStatus>>\n    }\n  }\n}\n\n/** The narrow slice of the mounted Remote this controller calls. */\nexport interface UsageRemote {\n  report(): Promise<\n    | { ok: true; value: CommandCodeAccountsReport }\n    | { ok: false; error: { message: string } }\n  >\n  models(): Promise<\n    | { ok: true; value: CommandCodeCatalog }\n    | { ok: false; error: { message: string } }\n  >\n}\n\n/** The card's fetch lifecycle. */\nexport type UsageStatus =\n  /** Never fetched (no API key configured yet, or not requested). */\n  | 'idle'\n  /** A fetch is in flight; `report` retains the last good data if any. */\n  | 'loading'\n  /** The last fetch succeeded. */\n  | 'ready'\n  /** The last fetch failed (no key, unreachable host, old plugin). */\n  | 'error'\n\n/** The card's full state face. */\nexport interface UsagePageState {\n  status: UsageStatus\n  /** The last successfully fetched report (retained across refetches). */\n  report: CommandCodeAccountsReport | undefined\n  /** The last failure's message (error status). */\n  error: string | undefined\n  /** Millis timestamp of the last successful fetch. */\n  fetchedAt: number | undefined\n}\n\nconst IDLE: UsagePageState = { status: 'idle', report: undefined, error: undefined, fetchedAt: undefined }\n\n/**\n * Controller bridging the `commandcode/report` Remote onto the card. Public\n * API mirrors {@link CommandCodeSettingsController}: `state()` projections,\n * `subscribe`, and one `refresh()` action.\n */\nexport class CommandCodeUsageController {\n  private readonly remote: UsageRemote\n  private readonly listeners = new Set<() => void>()\n  private current: UsagePageState = IDLE\n  private generation = 0\n  private inFlight = false\n  private disposed = false\n\n  constructor(remote: UsageRemote) {\n    this.remote = remote\n  }\n\n  /** Release every subscription. Idempotent; in-flight results are dropped. */\n  dispose(): void {\n    this.disposed = true\n    this.generation += 1\n    this.listeners.clear()\n  }\n\n  /** Subscribe to state projections. @returns the disposer. */\n  subscribe(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** The current card state face. */\n  state(): UsagePageState {\n    return this.current\n  }\n\n  /**\n   * Fetch (or refetch) the report. Concurrent refreshes collapse onto one\n   * request; a superseded fetch's late result is dropped, never published.\n   */\n  async refresh(): Promise<void> {\n    if (this.disposed || this.inFlight) return\n    const generation = ++this.generation\n    this.inFlight = true\n    this.current = { ...this.current, status: 'loading', error: undefined }\n    this.publish()\n    try {\n      const response = await this.remote.report()\n      if (this.disposed || generation !== this.generation) return\n      if (response.ok) {\n        this.current = { status: 'ready', report: response.value, error: undefined, fetchedAt: Date.now() }\n      } else {\n        this.current = { ...this.current, status: 'error', error: response.error.message }\n      }\n    } catch (error: unknown) {\n      if (this.disposed || generation !== this.generation) return\n      this.current = {\n        ...this.current,\n        status: 'error',\n        error: error instanceof Error ? error.message : String(error),\n      }\n    } finally {\n      if (generation === this.generation) this.inFlight = false\n    }\n    this.publish()\n  }\n\n  private publish(): void {\n    if (this.disposed) return\n    for (const listener of this.listeners) listener()\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Display formatting (shared by the component, covered by node tests)\n// ---------------------------------------------------------------------------\n\n/** Format a dollar amount compactly (2 decimals). */\nexport function formatMoney(value: number): string {\n  return `$${value.toFixed(2)}`\n}\n\n/** Format a dollar amount precisely (4 decimals) for small totals. */\nexport function formatMoneyExact(value: number): string {\n  return `$${value.toFixed(4)}`\n}\n\n/** Format a large token count compactly (1.9M style). */\nexport function formatTokensCompact(value: number): string {\n  if (value >= 1e9) return `${(value / 1e9).toFixed(1)}B`\n  if (value >= 1e6) return `${(value / 1e6).toFixed(1)}M`\n  if (value >= 1e3) return `${(value / 1e3).toFixed(1)}K`\n  return String(value)\n}\n\n/**\n * Format a success-rate percentage (already in percent units, e.g. 99.96):\n * at most two decimals, trailing zeros trimmed — `100` stays `100`, not\n * `100.00`, and the raw upstream float `99.965552876334` becomes `99.97`.\n * The `%` suffix is appended by the caller (the card and the dashboard line\n * both compose it).\n */\nexport function formatSuccessRate(value: number): string {\n  return String(Number(value.toFixed(2)))\n}\n\n/** One window's fill ratio in [0, 1]; 0 when uncapped. */\nexport function windowRatio(used: number, cap: number): number {\n  if (cap <= 0) return 0\n  return Math.max(0, Math.min(1, used / cap))\n}\n\n/** Format a millis timestamp as a local short date-time; empty when unset. */\nexport function formatResetAt(ms: number): string {\n  if (ms <= 0) return ''\n  return new Date(ms).toLocaleString()\n}\n","/**\n * Browser controller for the settings page's login panel.\n *\n * The panel drives the Host-half browser login (the official\n * `command-code login` loopback dance) through the Typert Gateway: `begin`\n * asks the Host to bind the callback server and returns the Studio URL, the\n * controller polls `loginStatus` once a second while the attempt is live, and\n * `cancel` tears it down. The key itself never crosses to the browser — the\n * Host validates and stores it through the credentials seam.\n *\n * Transport-level failures (no mounted Remote, an older Host without the\n * login endpoints) land in the dedicated `unavailable` phase so the page can\n * point back at manual paste. Deliberately JSX-free, mirroring\n * `./settings.ts` and `./usage.ts`.\n *\n * @module dsh-commandcode-provider/client/login\n */\n\nimport type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol'\nimport type { CommandCodeLoginFailureReason, CommandCodeLoginStatus } from '../login-wire.ts'\nimport type { Translate } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { SettingsCommandCodeKey } from './locales.ts'\n\n/** The endpoint-level Remote surface this controller calls. */\ndeclare module '@deepseek-ai/dsh-typert-protocol' {\n  interface TypertRemoteMap {\n    'commandcode/loginBegin': () => Promise<RemoteResult<CommandCodeLoginStatus>>\n    'commandcode/loginStatus': () => Promise<RemoteResult<CommandCodeLoginStatus>>\n    'commandcode/loginCancel': () => Promise<RemoteResult<CommandCodeLoginStatus>>\n  }\n}\n\n/** The narrow slice of the mounted Remote this controller calls. */\nexport interface LoginRemote {\n  loginBegin(): Promise<LoginCallResult>\n  loginStatus(): Promise<LoginCallResult>\n  loginCancel(): Promise<LoginCallResult>\n}\n\n/** One Remote call's outcome as the controller sees it. */\nexport type LoginCallResult =\n  | { ok: true; value: CommandCodeLoginStatus }\n  | { ok: false; error: { message: string } }\n\n/** The panel's full state face. */\nexport interface LoginPageState {\n  /**\n   * `idle` — nothing started; `starting` — begin() in flight; `waiting` —\n   * the Studio URL is live and polling; `success`/`failed` — terminal;\n   * `unavailable` — the Remote itself could not be reached (old Host, mount\n   * failure), manual paste is the way.\n   */\n  phase: 'idle' | 'starting' | 'waiting' | 'success' | 'failed' | 'unavailable'\n  /** The Studio authorization URL while `waiting`. */\n  authUrl: string | undefined\n  /** The account display name on `success`. */\n  userName: string | undefined\n  /** The key's Studio label on `success`. */\n  keyName: string | undefined\n  /** The stable failure reason when `failed`. */\n  reason: CommandCodeLoginFailureReason | undefined\n  /** Secondary failure detail when `failed`/`unavailable`. */\n  message: string | undefined\n}\n\n/** How often a live attempt is polled. */\nconst POLL_INTERVAL_MS = 1_000\n\n/**\n * The login panel's fetch/poll lifecycle. One poll loop at a time; a fresh\n * `begin()` supersedes any previous loop via a generation token.\n */\nexport class CommandCodeLoginController {\n  private readonly remote: () => LoginRemote | undefined\n  private readonly listeners = new Set<() => void>()\n  private readonly pollMs: number\n  /** Monotonic token; only the latest loop may publish polling results. */\n  private generation = 0\n  private disposed = false\n\n  private phase: LoginPageState['phase'] = 'idle'\n  private authUrl: string | undefined\n  private userName: string | undefined\n  private keyName: string | undefined\n  private reason: CommandCodeLoginFailureReason | undefined\n  private message: string | undefined\n\n  constructor(remote: () => LoginRemote | undefined, pollMs = POLL_INTERVAL_MS) {\n    this.remote = remote\n    this.pollMs = pollMs\n  }\n\n  /** Subscribe to state projections. @returns the disposer. */\n  subscribe(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** Build the current panel state face. */\n  state(): LoginPageState {\n    return {\n      phase: this.phase,\n      authUrl: this.authUrl,\n      userName: this.userName,\n      keyName: this.keyName,\n      reason: this.reason,\n      message: this.message,\n    }\n  }\n\n  /** Start (or rejoin) a login attempt and begin polling its status. */\n  async begin(): Promise<void> {\n    if (this.disposed || this.phase === 'starting' || this.phase === 'waiting') return\n    const generation = ++this.generation\n    this.set({ phase: 'starting', authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: undefined })\n    const remote = this.remote()\n    if (remote === undefined) {\n      this.set({ phase: 'unavailable', authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: 'login remote is not mounted' })\n      return\n    }\n    let result: LoginCallResult\n    try {\n      result = await remote.loginBegin()\n    } catch (error: unknown) {\n      // A transport throw (gateway hiccup) reads the same as a rejected call.\n      result = { ok: false, error: { message: error instanceof Error ? error.message : String(error) } }\n    }\n    if (this.superseded(generation)) return\n    if (!result.ok) {\n      this.set({ phase: 'unavailable', authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: result.error.message })\n      return\n    }\n    this.apply(result.value)\n    if (this.currentPhase === 'waiting') void this.poll(generation)\n  }\n\n  /** Cancel a waiting attempt. */\n  async cancel(): Promise<void> {\n    if (this.disposed || (this.phase !== 'starting' && this.phase !== 'waiting')) return\n    const generation = ++this.generation\n    const remote = this.remote()\n    if (remote === undefined) return\n    let result: LoginCallResult\n    try {\n      result = await remote.loginCancel()\n    } catch {\n      // The Host may be gone; reflect the local cancel regardless.\n      this.set({ phase: 'failed', authUrl: undefined, userName: undefined, keyName: undefined, reason: 'cancelled', message: undefined })\n      return\n    }\n    if (this.superseded(generation)) return\n    if (result.ok) this.apply(result.value)\n    else this.set({ phase: 'failed', authUrl: undefined, userName: undefined, keyName: undefined, reason: 'cancelled', message: undefined })\n  }\n\n  /** Stop polling and release listeners. Idempotent. */\n  dispose(): void {\n    if (this.disposed) return\n    this.disposed = true\n    this.generation += 1\n    this.listeners.clear()\n  }\n\n  // -----------------------------------------------------------------------\n  // Internals\n  // -----------------------------------------------------------------------\n\n  /** Poll until the attempt leaves `waiting` or a newer loop supersedes us. */\n  private async poll(generation: number): Promise<void> {\n    // A getter read (not the field) so control-flow narrowing across `await`\n    // cannot claim the phase is frozen.\n    while (!this.disposed && !this.superseded(generation) && this.currentPhase === 'waiting') {\n      await sleep(this.pollMs)\n      if (this.disposed || this.superseded(generation) || this.currentPhase !== 'waiting') return\n      const remote = this.remote()\n      if (remote === undefined) {\n        this.set({ phase: 'unavailable', authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: 'login remote is not mounted' })\n        return\n      }\n      let result: LoginCallResult\n      try {\n        result = await remote.loginStatus()\n      } catch {\n        continue // one missed poll is not an outage; the next tick retries\n      }\n      if (this.superseded(generation) || this.currentPhase !== 'waiting') return\n      if (result.ok) this.apply(result.value)\n    }\n  }\n\n  private get currentPhase(): LoginPageState['phase'] {\n    return this.phase\n  }\n\n  /** Project one Host status onto the panel face. */\n  private apply(status: CommandCodeLoginStatus): void {\n    const base = { authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: undefined }\n    if (status.state === 'waiting') {\n      this.set({ ...base, phase: 'waiting', authUrl: status.authUrl })\n      return\n    }\n    if (status.state === 'success') {\n      this.set({ ...base, phase: 'success', userName: status.userName, keyName: status.keyName })\n      return\n    }\n    if (status.state === 'failed') {\n      this.set({ ...base, phase: 'failed', reason: status.reason, message: status.message })\n      return\n    }\n    // `idle` mid-poll means the Host restarted; the attempt is gone.\n    this.set({ ...base, phase: 'failed', reason: 'cancelled', message: 'the login attempt is no longer active' })\n  }\n\n  /** Replace the whole state face and notify. Explicit over partial patches. */\n  private set(state: LoginPageState): void {\n    this.phase = state.phase\n    this.authUrl = state.authUrl\n    this.userName = state.userName\n    this.keyName = state.keyName\n    this.reason = state.reason\n    this.message = state.message\n    this.publish()\n  }\n\n  private superseded(generation: number): boolean {\n    return this.disposed || generation !== this.generation\n  }\n\n  private publish(): void {\n    if (this.disposed) return\n    for (const listener of [...this.listeners]) listener()\n  }\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\n// ---------------------------------------------------------------------------\n// Hint copy for the login panel / card row (JSX-free so node tests drive it)\n// ---------------------------------------------------------------------------\n\n/**\n * The per-reason copy for a failed login attempt. Shared by the settings\n * page's login panel and the Models-page card's login row — the same reasons\n * can surface from either surface.\n */\nexport function loginFailureCopy(\n  reason: CommandCodeLoginFailureReason | undefined,\n  t: Translate<SettingsCommandCodeKey>,\n): string {\n  if (reason === 'denied') return t('loginDenied')\n  if (reason === 'timeout') return t('loginTimeout')\n  if (reason === 'invalid-key') return t('loginInvalidKey')\n  if (reason === 'network') return t('loginNetwork')\n  if (reason === 'unavailable') return t('loginStoreFailed')\n  if (reason === 'cancelled') return t('loginCancelled')\n  return t('loginFailedGeneric')\n}\n\n/** One login panel row's computed hint: text, class stem, and optional title. */\nexport interface LoginHint {\n  text: string\n  className: string\n  /** Tooltip shown when the row carries secondary failure detail. */\n  title: string | undefined\n}\n\n/**\n * The hint text + class for one login panel state, shared by the settings\n * page's `LoginPanel` and the Models-page card's login row so both surfaces\n * can never drift apart. Pure: no timers, no state — the components render it.\n */\nexport function loginHint(\n  state: LoginPageState,\n  t: Translate<SettingsCommandCodeKey>,\n): LoginHint {\n  if (state.phase === 'starting' || state.phase === 'waiting') {\n    return {\n      text: t(state.phase === 'starting' ? 'loginStarting' : 'loginWaiting'),\n      className: 'cc-hint',\n      title: undefined,\n    }\n  }\n  if (state.phase === 'success') {\n    const keyName = state.keyName !== undefined && state.keyName !== '' ? ` · ${state.keyName}` : ''\n    return {\n      text: `${t('loginSuccess')} ${state.userName ?? ''}${keyName}`.trim(),\n      className: 'cc-loginDone',\n      title: undefined,\n    }\n  }\n  if (state.phase === 'failed') {\n    return {\n      text: loginFailureCopy(state.reason, t),\n      className: 'cc-loginError',\n      title: state.message,\n    }\n  }\n  if (state.phase === 'unavailable') {\n    return {\n      text: `${t('loginUnavailable')} ${state.message ?? ''}`.trim(),\n      className: 'cc-loginError',\n      title: undefined,\n    }\n  }\n  return { text: t('loginHintIdle'), className: 'cc-hint', title: undefined }\n}\n","/**\n * Shared boundary-validation and Remote-descriptor plumbing for the plugin's\n * hand-rolled Typert wire contracts (`commandcode/report`, `commandcode/models`,\n * `commandcode/login*`).\n *\n * Every Remote this plugin serves crosses the Typert Gateway with a strict\n * result schema: the Host half registers a descriptor against a Cordis service\n * (`src/usage-remote.ts`) and the browser half mounts the matching contribution\n * on `ctx.remote` (`src/client/index.ts`). The wire contract is deliberately\n * dependency-free so the client bundle can inline it — a pure-TS helper module\n * imported by the wire files keeps it that way while removing the schema\n * helpers and descriptor boilerplate they used to duplicate.\n *\n * @module dsh-commandcode-provider/wire-shared\n */\n\nimport type { InvocationDescriptor, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\n\n/** The npm package identity every contribution and descriptor claims. */\nexport const REMOTE_PACKAGE = '@mars-sea/dsh-commandcode-provider'\n\n/** The Cordis service key the Gateway resolves every Command Code Remote from. */\nexport const REMOTE_SERVICE = 'commandcodeUsage'\n\n/** The wire namespace all Command Code endpoints share. */\nexport const REMOTE_NAMESPACE = 'commandcode'\n\n/** The read/validate helpers one boundary codec needs. */\nexport interface BoundaryValidator {\n  /** Reject one boundary value with a field-naming error. */\n  reject(field: string): never\n  /** Narrow an unknown value to a plain record, or reject. */\n  record(value: unknown, field: string): Record<string, unknown>\n  /** Read one required string field (`field` is the dotted error label). */\n  stringField(source: Record<string, unknown>, key: string, field: string): string\n  /** Read one required finite number field (`field` is the dotted error label). */\n  numberField(source: Record<string, unknown>, key: string, field: string): number\n  /** Read one required boolean field (`field` is the dotted error label). */\n  booleanField(source: Record<string, unknown>, key: string, field: string): boolean\n}\n\n/**\n * Build the validator helpers one endpoint uses. `prefix` names the\n * endpoint in the rejection message (e.g. `commandcode/report result:`), so\n * each wire file keeps its own diagnostic phrasing while sharing the helper\n * bodies.\n *\n * The helpers return the reject call directly in the failure branch: since\n * `reject` is typed `never`, the ternary's union collapses to the success type\n * without relying on TypeScript's control-flow analysis of a never-returning\n * call (which only recognizes function declarations, not the destructured\n * arrow `reject` callers receive from this factory).\n */\nexport function makeBoundaryValidator(prefix: string): BoundaryValidator {\n  const reject = (field: string): never => {\n    throw new TypeError(`${prefix} invalid ${field}`)\n  }\n  const record = (value: unknown, field: string): Record<string, unknown> =>\n    typeof value === 'object' && value !== null && !Array.isArray(value)\n      ? value as Record<string, unknown>\n      : reject(field)\n  const stringField = (source: Record<string, unknown>, key: string, field: string): string =>\n    typeof source[key] === 'string' ? source[key] as string : reject(field)\n  const numberField = (source: Record<string, unknown>, key: string, field: string): number =>\n    typeof source[key] === 'number' && Number.isFinite(source[key] as number)\n      ? source[key] as number\n      : reject(field)\n  const booleanField = (source: Record<string, unknown>, key: string, field: string): boolean =>\n    typeof source[key] === 'boolean' ? source[key] as boolean : reject(field)\n  return { reject, record, stringField, numberField, booleanField }\n}\n\n/**\n * Build one strict invocation descriptor. Every Command Code Remote shares the\n * `commandcode` namespace, the `commandcodeUsage` service, and a strict\n * `mode: 'strict'` result — only the endpoint, method, result type symbol, and\n * schema differ — so the boilerplate lives here once and each endpoint supplies\n * only its own facts.\n */\nexport function makeRemoteDescriptor<Output>(\n  endpoint: string,\n  method: string,\n  typeSymbol: string,\n  schema: TypertSchema<Output>,\n): InvocationDescriptor {\n  return {\n    id: `${REMOTE_PACKAGE}#${endpoint}`,\n    service: REMOTE_SERVICE,\n    namespace: REMOTE_NAMESPACE,\n    method,\n    invocation: { kind: 'direct' },\n    parameters: [],\n    result: {\n      mode: 'strict',\n      typeSymbol,\n      schema,\n    },\n  }\n}","/**\n * Wire contract for the Command Code account-usage Remote\n * (`commandcode/report`).\n *\n * The settings page renders the same account/usage/credit facts the\n * `/commandcode` command prints, but the browser never holds the API key —\n * the report must be produced Host-side and cross the Connection RPC carrier.\n * The harness exposes plugin-defined Host methods through the Typert Gateway:\n * the Host half registers a strict invocation descriptor against a Cordis\n * service (`src/usage-remote.ts`), and the browser half mounts the matching\n * Remote contribution on `ctx.remote` (`src/client/index.ts`).\n *\n * This module is the single source both halves share: the result validator\n * (a hand-rolled {@link TypertSchema}, so neither half needs a schema library)\n * and the exact descriptor object, so the endpoint can never drift apart.\n * It is deliberately dependency-free — the client bundle inlines it, and only\n * `import type` edges leave it (erased at build). The boundary-validator\n * helpers and the descriptor boilerplate live in `./wire-shared.ts`, shared\n * with the login wire contract.\n *\n * @module dsh-commandcode-provider/usage-wire\n */\n\nimport type { CommandCodeUsageReport, UsageBlockReason } from './adapter.ts'\n\nexport type { CommandCodeUsageReport, UsageBlockReason }\nimport type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\nimport {\n  makeBoundaryValidator,\n  makeRemoteDescriptor,\n  REMOTE_PACKAGE,\n} from './wire-shared.ts'\n\n/** One account's usage entry in the multi-account report. */\nexport interface CommandCodeAccountUsage {\n  /** Stable slot id (`default`, `account-2`, …). */\n  id: string\n  /** Display label (user-provided or generated). */\n  label: string\n  /** Whether an API key resolved for this account. */\n  configured: boolean\n  /** Whether this account currently serves requests (first usable slot). */\n  active: boolean\n  /** Rotation mark: `''` (usable), `'rate-limit'`, or `'invalid-credential'`. */\n  mark: string\n  /** Known cooldown end in millis; 0 when unknown or not cooling down. */\n  cooldownUntil: number\n  /** The per-account report; `failures`-only when the fetch itself failed. */\n  report: CommandCodeUsageReport\n}\n\n/** The settings page's account card data: one entry per configured account. */\nexport interface CommandCodeAccountsReport {\n  accounts: CommandCodeAccountUsage[]\n}\n\n/** The npm package identity both contribution registrations claim. */\nexport const USAGE_REMOTE_PACKAGE = REMOTE_PACKAGE\n\n/** Canonical `<namespace>/<method>` endpoint of the usage report Remote. */\nexport const USAGE_REPORT_ENDPOINT = 'commandcode/report'\n\n/**\n * The shared read/validate helpers for the usage report endpoint, prefixed\n * so rejection messages name the offending boundary.\n */\nconst { reject, record, stringField, numberField, booleanField } =\n  makeBoundaryValidator('commandcode/report result:')\n\n/** Validate one window-limit block (`fiveHour` / `weekly`). */\nfunction windowLimit(value: unknown, field: string): { used: number; cap: number; exceeded: boolean; resetAt: number } {\n  const source = record(value, field)\n  return {\n    used: numberField(source, 'used', `${field}.used`),\n    cap: numberField(source, 'cap', `${field}.cap`),\n    exceeded: booleanField(source, 'exceeded', `${field}.exceeded`),\n    resetAt: numberField(source, 'resetAt', `${field}.resetAt`),\n  }\n}\n\n/**\n * Parse one untrusted boundary value into a {@link CommandCodeUsageReport}.\n * Optional sections stay optional; every present field is shape-checked so a\n * malformed frame fails the boundary instead of rendering garbage.\n */\nfunction parseUsageReport(value: unknown): CommandCodeUsageReport {\n  const source = record(value, 'report')\n  const failures = source.failures\n  if (!Array.isArray(failures) || failures.some((entry) => typeof entry !== 'string')) reject('failures')\n  const report: CommandCodeUsageReport = { failures: failures as string[] }\n\n  if (source.blocked !== undefined) {\n    const blocked = source.blocked\n    // Positive check: TS's never-return control-flow analysis only recognizes\n    // function declarations, not the factory's destructured-arrow `reject`, so\n    // narrow `blocked` in the positive branch instead.\n    if (blocked === 'invalid-key' || blocked === 'service-unavailable' || blocked === 'network') {\n      report.blocked = blocked\n    } else {\n      reject('blocked')\n    }\n  }\n\n  if (source.account !== undefined) {\n    const account = record(source.account, 'account')\n    report.account = {\n      id: stringField(account, 'id', 'account.id'),\n      name: stringField(account, 'name', 'account.name'),\n      userName: stringField(account, 'userName', 'account.userName'),\n    }\n  }\n\n  if (source.usage !== undefined) {\n    const usage = record(source.usage, 'usage')\n    report.usage = {\n      totalCount: numberField(usage, 'totalCount', 'usage.totalCount'),\n      totalCost: numberField(usage, 'totalCost', 'usage.totalCost'),\n      successRate: numberField(usage, 'successRate', 'usage.successRate'),\n      completedCount: numberField(usage, 'completedCount', 'usage.completedCount'),\n      failedCount: numberField(usage, 'failedCount', 'usage.failedCount'),\n      totalTokensIn: numberField(usage, 'totalTokensIn', 'usage.totalTokensIn'),\n      totalTokensOut: numberField(usage, 'totalTokensOut', 'usage.totalTokensOut'),\n      totalCredits: numberField(usage, 'totalCredits', 'usage.totalCredits'),\n      periodBasis: stringField(usage, 'periodBasis', 'usage.periodBasis'),\n    }\n  }\n\n  if (source.credits !== undefined) {\n    const credits = record(source.credits, 'credits')\n    report.credits = {\n      monthlyCredits: numberField(credits, 'monthlyCredits', 'credits.monthlyCredits'),\n      purchasedCredits: numberField(credits, 'purchasedCredits', 'credits.purchasedCredits'),\n      freeCredits: numberField(credits, 'freeCredits', 'credits.freeCredits'),\n      fiveHour: windowLimit(credits.fiveHour, 'credits.fiveHour'),\n      weekly: windowLimit(credits.weekly, 'credits.weekly'),\n    }\n  }\n\n  if (source.plan !== undefined) {\n    const plan = record(source.plan, 'plan')\n    const monthly = plan.monthlyCredits\n    if (monthly !== null && (typeof monthly !== 'number' || !Number.isFinite(monthly))) reject('plan.monthlyCredits')\n    report.plan = {\n      planId: stringField(plan, 'planId', 'plan.planId'),\n      name: stringField(plan, 'name', 'plan.name'),\n      status: stringField(plan, 'status', 'plan.status'),\n      monthlyCredits: monthly as number | null,\n      currentPeriodEnd: numberField(plan, 'currentPeriodEnd', 'plan.currentPeriodEnd'),\n    }\n  }\n\n  return report\n}\n\n/** Parse one untrusted boundary value into a {@link CommandCodeAccountUsage}. */\nfunction parseAccountUsage(value: unknown): CommandCodeAccountUsage {\n  const source = record(value, 'account')\n  return {\n    id: stringField(source, 'id', 'account.id'),\n    label: stringField(source, 'label', 'account.label'),\n    configured: booleanField(source, 'configured', 'account.configured'),\n    active: booleanField(source, 'active', 'account.active'),\n    mark: stringField(source, 'mark', 'account.mark'),\n    cooldownUntil: numberField(source, 'cooldownUntil', 'account.cooldownUntil'),\n    report: parseUsageReport(source.report),\n  }\n}\n\n/** Parse the wire result into a {@link CommandCodeAccountsReport}. */\nfunction parseAccountsReport(value: unknown): CommandCodeAccountsReport {\n  const source = record(value, 'result')\n  const accounts = source.accounts\n  if (Array.isArray(accounts)) {\n    return { accounts: accounts.map(parseAccountUsage) }\n  }\n  return reject('accounts')\n}\n\n/**\n * The strict result codec both halves attach to the descriptor. Hand-rolled:\n * the client bundle may not require a schema library, and `TypertSchema` is\n * deliberately minimal so one `parse` function satisfies it.\n */\nexport const usageReportSchema: TypertSchema<CommandCodeAccountsReport> = {\n  parse: parseAccountsReport,\n}\n\n/**\n * The one invocation descriptor, shared verbatim by the Host registration and\n * the Client mount. `service` names the Cordis key the Gateway resolves the\n * receiver from; `namespace`/`method` name the wire endpoint.\n */\nexport const USAGE_REPORT_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodeAccountsReport>(\n    USAGE_REPORT_ENDPOINT,\n    'report',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodeAccountsReport`,\n    usageReportSchema,\n  )\n\n/** The Host-face contribution registered on `ctx.typert`. */\nexport const USAGE_HOST_CONTRIBUTION = {\n  package: USAGE_REMOTE_PACKAGE,\n  face: 'host' as const,\n  schemas: [],\n  // 0.1.2's Typert registry requires every Host contribution to carry its\n  // reflection model. This hand-written Remote deliberately has no generated\n  // reflection exports, so use the official empty-model form rather than a\n  // cast that leaves registry inspection with `model: undefined`.\n  model: { services: [], events: [], objects: [] },\n  invocations: [USAGE_REPORT_DESCRIPTOR],\n}\n\n/** The Client-face contribution mounted on `ctx.remote`. */\nexport const USAGE_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [USAGE_REPORT_DESCRIPTOR],\n}\n\n// ---------------------------------------------------------------------------\n// Model catalog Remote (`commandcode/models`)\n// ---------------------------------------------------------------------------\n\n/** One catalog entry the settings page's model editors offer. */\nexport interface CommandCodeCatalogModel {\n  /** Catalog model id (e.g. `deepseek/deepseek-v4-pro`). */\n  id: string\n  /** Display name from the catalog. */\n  name: string\n  /**\n   * Minimum plan-tier key for this model (a `KNOWN_PLANS` value: `go`,\n   * `goat`, `pro`, `provider`, `max`), or undefined for models outside the\n   * snapshot. The settings page groups the model-editor dropdowns under\n   * tier headings from this — the browser cannot import the Host's\n   * capability snapshot, so the Host stamps it per entry.\n   */\n  tier?: string\n}\n\n/** The model-catalog Remote result: the full catalog, sorted for picking. */\nexport interface CommandCodeCatalog {\n  models: CommandCodeCatalogModel[]\n}\n\n/** Canonical `<namespace>/<method>` endpoint of the model-catalog Remote. */\nexport const MODELS_ENDPOINT = 'commandcode/models'\n\n/**\n * The shared read/validate helpers for the model-catalog endpoint — a\n * separate instance so catalog boundary errors name `commandcode/models`,\n * not the report endpoint.\n */\nconst {\n  record: catalogRecord,\n  stringField: catalogString,\n} = makeBoundaryValidator('commandcode/models result:')\n\n/** Parse one untrusted boundary value into a {@link CommandCodeCatalogModel}. */\nfunction parseCatalogModel(value: unknown): CommandCodeCatalogModel {\n  const source = catalogRecord(value, 'model')\n  const model: CommandCodeCatalogModel = {\n    id: catalogString(source, 'id', 'model.id'),\n    name: catalogString(source, 'name', 'model.name'),\n  }\n  // Tier is optional on the wire (older Hosts predate it); a present\n  // non-string is a contract violation, not a silent drop.\n  if (source.tier !== undefined) {\n    model.tier = catalogString(source, 'tier', 'model.tier')\n  }\n  return model\n}\n\n/** Parse the wire result into a {@link CommandCodeCatalog}. */\nfunction parseCatalog(value: unknown): CommandCodeCatalog {\n  const source = catalogRecord(value, 'result')\n  const models = source.models\n  if (Array.isArray(models)) {\n    return { models: models.map(parseCatalogModel) }\n  }\n  throw new TypeError('commandcode/models result: invalid models')\n}\n\n/** The strict result codec for the model-catalog Remote. */\nexport const modelsSchema: TypertSchema<CommandCodeCatalog> = {\n  parse: parseCatalog,\n}\n\n/**\n * The model-catalog invocation descriptor, sharing the same `commandcodeUsage`\n * service and `commandcode` namespace as the usage report.\n */\nexport const MODELS_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodeCatalog>(\n    MODELS_ENDPOINT,\n    'models',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodeCatalog`,\n    modelsSchema,\n  )\n\n/** The Client-face contribution for the model-catalog endpoint. */\nexport const MODELS_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [MODELS_DESCRIPTOR],\n}","/**\n * Wire contract for the Command Code login Remote endpoints\n * (`commandcode/loginBegin`, `commandcode/loginStatus`,\n * `commandcode/loginCancel`).\n *\n * The settings page can start a browser login against the official Command\n * Code Studio (the same loopback flow `command-code login` performs) instead\n * of pasting an API key. The loopback server must live in the Host half — it\n * binds a local port and receives the key — so the page drives it through the\n * Typert Gateway exactly like the usage report.\n *\n * This module is the single source both halves share, deliberately\n * dependency-free (`import type` edges only): the strict status validator the\n * client trusts, the three descriptors both halves register, and the two\n * contribution objects. The state shape mirrors the Host-only flow machine in\n * `src/login.ts` as plain JSON.\n *\n * @module dsh-commandcode-provider/login-wire\n */\n\nimport type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\nimport {\n  makeBoundaryValidator,\n  makeRemoteDescriptor,\n  REMOTE_PACKAGE,\n} from './wire-shared.ts'\n\n/** Why a login attempt ended in `failed` (stable across versions for copy). */\nexport type CommandCodeLoginFailureReason =\n  /** The Studio page reported the authorization was denied by the user. */\n  | 'denied'\n  /** No callback arrived within the flow's timeout window. */\n  | 'timeout'\n  /** The delivered key failed `/alpha/whoami` validation (401). */\n  | 'invalid-key'\n  /** The validation request could not reach the API. */\n  | 'network'\n  /** The key could not be stored (credentials seam unavailable). */\n  | 'unavailable'\n  /** The attempt was cancelled by the user or torn down with the plugin. */\n  | 'cancelled'\n  /** Anything else. */\n  | 'error'\n\n/** One login attempt's full state face, as carried over the wire. */\nexport interface CommandCodeLoginStatus {\n  /**\n   * `idle` — no attempt; `waiting` — the loopback server is up and the\n   * Studio URL is live; `success` — the key validated and was stored;\n   * `failed` — see `reason`/`message`.\n   */\n  state: 'idle' | 'waiting' | 'success' | 'failed'\n  /** The Studio authorization URL while `waiting`. */\n  authUrl?: string\n  /** The account display name reported by the Studio, on `success`. */\n  userName?: string\n  /** The key's label from the Studio, on `success`. */\n  keyName?: string\n  /** Why the attempt failed, when `failed`. */\n  reason?: CommandCodeLoginFailureReason\n  /** Human-readable failure detail, when `failed` (secondary to `reason`). */\n  message?: string\n}\n\n/** The canonical endpoint paths of the three login Remotes. */\nexport const LOGIN_BEGIN_ENDPOINT = 'commandcode/loginBegin'\nexport const LOGIN_STATUS_ENDPOINT = 'commandcode/loginStatus'\nexport const LOGIN_CANCEL_ENDPOINT = 'commandcode/loginCancel'\n\nconst REASONS: readonly CommandCodeLoginFailureReason[] = [\n  'denied', 'timeout', 'invalid-key', 'network', 'unavailable', 'cancelled', 'error',\n]\n\n/** The shared read/validate helpers, prefixed with the login endpoint so\n * rejection messages name the offending boundary. */\nconst { reject, record, stringField } =\n  makeBoundaryValidator('commandcode/login result:')\n\n/**\n * Parse one untrusted boundary value into a {@link CommandCodeLoginStatus}.\n * Every field is shape-checked so a malformed frame fails the boundary\n * instead of leaking into the page.\n */\nexport function parseLoginStatus(value: unknown): CommandCodeLoginStatus {\n  const source = record(value, 'status')\n  const state = source.state\n  // The factory's destructured-arrow `reject` is typed never-returning but\n  // TS narrows it only in the positive branch — assign inside the guard.\n  if (state === 'idle' || state === 'waiting' || state === 'success' || state === 'failed') {\n    const status: CommandCodeLoginStatus = { state }\n    if (source.authUrl !== undefined) {\n      status.authUrl = stringField(source, 'authUrl', 'authUrl')\n    }\n    if (source.userName !== undefined) {\n      status.userName = stringField(source, 'userName', 'userName')\n    }\n    if (source.keyName !== undefined) {\n      status.keyName = stringField(source, 'keyName', 'keyName')\n    }\n    if (source.reason !== undefined) {\n      const reason = source.reason\n      if (typeof reason === 'string' && REASONS.includes(reason as CommandCodeLoginFailureReason)) {\n        status.reason = reason as CommandCodeLoginFailureReason\n      } else {\n        reject('reason')\n      }\n    }\n    if (source.message !== undefined) {\n      status.message = stringField(source, 'message', 'message')\n    }\n    return status\n  }\n  return reject('state')\n}\n\n/** The strict result codec shared by all three login endpoints. */\nexport const loginStatusSchema: TypertSchema<CommandCodeLoginStatus> = {\n  parse: parseLoginStatus,\n}\n\n/** Build one login invocation descriptor (uniform result, no parameters). */\nfunction loginDescriptor(endpoint: string, method: string): InvocationDescriptor {\n  return makeRemoteDescriptor<CommandCodeLoginStatus>(\n    endpoint,\n    method,\n    `${REMOTE_PACKAGE}#CommandCodeLoginStatus`,\n    loginStatusSchema,\n  )\n}\n\n/** The three login descriptors, shared verbatim by Host registration and Client mount. */\nexport const LOGIN_DESCRIPTORS: readonly InvocationDescriptor[] = [\n  loginDescriptor(LOGIN_BEGIN_ENDPOINT, 'loginBegin'),\n  loginDescriptor(LOGIN_STATUS_ENDPOINT, 'loginStatus'),\n  loginDescriptor(LOGIN_CANCEL_ENDPOINT, 'loginCancel'),\n]\n\n/** The Host-face contribution fragment registered on `ctx.typert`. */\nexport const LOGIN_HOST_CONTRIBUTION = {\n  package: REMOTE_PACKAGE,\n  face: 'host' as const,\n  schemas: [],\n  invocations: LOGIN_DESCRIPTORS,\n}\n\n/** The Client-face contribution fragment mounted on `ctx.remote`. */\nexport const LOGIN_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: REMOTE_PACKAGE,\n  descriptors: LOGIN_DESCRIPTORS,\n}\n","/**\n * The shared login row: one field row that starts the Host-side browser\n * login, links to the Studio authorization page while the attempt is live,\n * and reports the outcome — rendered by BOTH the settings page (`section.tsx`)\n * and the Models-page provider card (`card.tsx`) so the two surfaces share\n * one component and one hint state machine.\n *\n * The hint copy/class logic lives in the JSX-free `./login.ts`\n * (`loginHint`/`loginFailureCopy`) so node tests can drive every phase; this\n * file only renders it.\n *\n * @module dsh-commandcode-provider/client/login-row\n */\n\nimport type { Translate } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { SettingsCommandCodeKey } from './locales.ts'\nimport { loginHint } from './login.ts'\nimport type { LoginPageState } from './login.ts'\n\n/** One login row's props (same face both surfaces supply). */\nexport interface LoginRowProps {\n  state: LoginPageState\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onBegin(): void\n  onCancel(): void\n}\n\n/** The sign-in alternative to pasting a key (settings page + Models card). */\nexport function LoginRow({ state, disabled, t, onBegin, onCancel }: LoginRowProps) {\n  const busy = state.phase === 'starting' || state.phase === 'waiting'\n  const hint = loginHint(state, t)\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <span className=\"cc-label\">{t('loginTitle')}</span>\n        <span className=\"cc-badges\">\n          {busy ? (\n            <button type=\"button\" className=\"cc-reset\" onClick={onCancel}>{t('loginCancel')}</button>\n          ) : (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onBegin}>{t('loginButton')}</button>\n          )}\n        </span>\n      </div>\n      {state.authUrl !== undefined ? (\n        <p className=\"cc-hint\">\n          <a className=\"cc-loginLink\" href={state.authUrl} target=\"_blank\" rel=\"noreferrer\">{t('loginOpenLink')}</a>\n        </p>\n      ) : null}\n      <p className={hint.className} title={hint.title}>{hint.text}</p>\n    </div>\n  )\n}","/**\n * Model-select helpers for the settings page's model editors (browser half).\n *\n * The routing-rule editor and the visible-models filter both pick catalog\n * models through the same checkbox multi-select dropdown (`ModelMultiSelect`\n * in section.tsx). The dropdown's data shaping — search filtering, stale-id\n * detection, tier grouping — lives here, React-free, so node tests can drive\n * it directly.\n *\n * Dependency-free by design: the client bundle may only import platform/seed\n * modules, so the plan snapshot below is a deliberately small vendored copy\n * (tier key → heading label) rather than an import of src/capabilities.ts.\n * When upstream adds a plan tier, extend BOTH tables.\n *\n * @module dsh-commandcode-provider/model-select\n */\n\n/**\n * Minimum plan tier → dropdown section heading. Mirrors the Host-side\n * `KNOWN_PLANS` values + `PLAN_LABELS` in src/capabilities.ts (kept as a\n * vendored copy because the client bundle cannot import host modules).\n * Covers every tier key `KNOWN_PLANS` uses today; an unknown tier key falls\n * back to the raw key rather than vanishing the row.\n */\nconst TIER_HEADINGS: Readonly<Record<string, string>> = {\n  go: 'Go',\n  goat: 'GOAT',\n  pro: 'Pro',\n  provider: 'Provider',\n  max: 'Max',\n}\n\n/**\n * The dropdown section heading for a catalog model id, or undefined for\n * models outside the known plan tiers (unmapped models and stale ids render\n * unheaded). `knownPlans` is the Host-side `KNOWN_PLANS` table, threaded in\n * by the caller so this module stays dependency-free.\n */\nexport function tierHeadingFor(\n  modelId: string,\n  knownPlans: Readonly<Record<string, string>>,\n): string | undefined {\n  const tier = knownPlans[modelId]\n  if (tier === undefined) return undefined\n  return TIER_HEADINGS[tier] ?? tier\n}\n\n/** One selectable catalog model (mirrors `CatalogModelOption` in settings.ts). */\nexport interface SelectableModel {\n  /** Catalog model id (e.g. `deepseek/deepseek-v4-pro`). */\n  id: string\n  /** Display name from the catalog. */\n  name: string\n}\n\n/** One dropdown row: a live catalog model or a stale selection. */\nexport interface ModelSelectOption {\n  /** Catalog model id (stale ids keep their raw id as the value). */\n  value: string\n  /** Display name (stale ids fall back to the raw id). */\n  label: string\n  /** True when the id is selected but the catalog no longer carries it. */\n  stale: boolean\n}\n\n/** One dropdown section: a plan-tier heading plus its rows. */\nexport interface ModelSelectGroup {\n  /** Section heading, or undefined for models outside the known plan tiers. */\n  heading: string | undefined\n  /** Rows in this section, in picker order. */\n  options: ModelSelectOption[]\n}\n\n/**\n * Whether `text` matches `query` as a case-insensitive substring over the\n * model id AND display name. An empty/blank query matches everything.\n */\nexport function matchesModelQuery(\n  model: SelectableModel,\n  query: string,\n): boolean {\n  const needle = query.trim().toLowerCase()\n  if (needle === '') return true\n  return model.id.toLowerCase().includes(needle)\n    || model.name.toLowerCase().includes(needle)\n}\n\n/**\n * Build the dropdown options: the catalog (already in picker order) plus\n * any selected ids the catalog no longer carries, flagged stale so the UI\n * can mark them — a saved selection never silently loses an entry, and the\n * user can see which ones went stale upstream.\n *\n * When `query` is non-blank, catalog rows are filtered by\n * {@link matchesModelQuery}; stale rows are kept only while they match too,\n * so a search for a live model does not surface unrelated stale ids.\n */\nexport function buildModelSelectOptions(\n  catalog: readonly SelectableModel[],\n  selected: readonly string[],\n  query = '',\n): ModelSelectOption[] {\n  const catalogIds = new Set(catalog.map((model) => model.id))\n  const options = catalog\n    .filter((model) => matchesModelQuery(model, query))\n    .map((model) => ({ value: model.id, label: model.name, stale: false }))\n  // Dedupe defensively (order-preserving): hand-edited settings can repeat\n  // or blank an id, and duplicate Menu ids would confuse selection state.\n  const seen = new Set(catalogIds)\n  for (const id of selected) {\n    if (id === '' || seen.has(id)) continue\n    seen.add(id)\n    if (catalogIds.has(id)) continue\n    if (!matchesModelQuery({ id, name: id }, query)) continue\n    options.push({ value: id, label: id, stale: true })\n  }\n  return options\n}\n\n/**\n * Group dropdown options under plan-tier headings (`tierOf` maps a model id\n * to its tier heading, or undefined for unmapped models — see\n * {@link tierHeadingFor}). Live rows keep their relative order; stale ids\n * and unmapped live rows share one trailing unheaded group. Groups merge\n * repeats, so a catalog interleaving two tiers still renders one section\n * per tier.\n */\nexport function groupModelSelectOptions(\n  options: readonly ModelSelectOption[],\n  tierOf: (modelId: string) => string | undefined,\n): ModelSelectGroup[] {\n  const groups: ModelSelectGroup[] = []\n  const byHeading = new Map<string | undefined, ModelSelectGroup>()\n  for (const option of options) {\n    // Stale ids always render unheaded (their tier is unknowable); unmapped\n    // live rows join the same trailing group so `heading: undefined`\n    // appears at most once.\n    const heading = option.stale ? undefined : tierOf(option.value)\n    let group = byHeading.get(heading)\n    if (group === undefined) {\n      group = { heading, options: [] }\n      byHeading.set(heading, group)\n      groups.push(group)\n    }\n    group.options.push(option)\n  }\n  return groups\n}\n\n/**\n * Toggle one model id in a selection: remove it when present, append it\n * when absent (append keeps catalog order irrelevant — the picker re-sorts\n * by plan tier on render).\n */\nexport function toggleModelSelection(\n  selected: readonly string[],\n  modelId: string,\n): string[] {\n  return selected.includes(modelId)\n    ? selected.filter((value) => value !== modelId)\n    : [...selected, modelId]\n}\n\n/** The catalog facts the visible-models card reads (mirrors `SettingsPageState`). */\nexport interface CatalogReadiness {\n  /** Catalog model ids the Host reported (`[]` before the first fetch lands). */\n  catalogIds: readonly string[]\n  /** Whether the catalog fetch failed (or the Remote is unavailable). */\n  catalogFailed: boolean\n}\n\n/**\n * Whether the catalog is trustworthy enough to call an unlisted selection\n * \"retired\". FALSE while the first fetch is still in flight and after a\n * failure, because the catalog is empty then and every selected id would look\n * stale — which turns the one-click stale cleanup into a button that silently\n * empties the allowlist. A successfully loaded but empty catalog is treated as\n * untrustworthy too: an empty list is far more likely a Host problem than every\n * model being retired at once, and the explicit \"show all\" entry covers the\n * user who really wants to clear the list.\n */\nexport function catalogIsReady(readiness: CatalogReadiness): boolean {\n  return readiness.catalogIds.length > 0 && !readiness.catalogFailed\n}\n\n/**\n * Selected ids the loaded catalog no longer carries, in selection order.\n * Callers gate user-visible \"stale\" affordances on {@link catalogIsReady} —\n * the list itself is informational.\n */\nexport function staleModelIds(\n  selected: readonly string[],\n  readiness: CatalogReadiness,\n): string[] {\n  const catalogIds = new Set(readiness.catalogIds)\n  return selected.filter((id) => !catalogIds.has(id))\n}\n","","/**\n * The plugin's own version, read from package.json at build time.\n *\n * The client bundle inlines the JSON import (rolldown resolves it during the\n * tsdown build; node tests read it through tsx), so the rendered value always\n * matches the published package version with no second constant to keep in\n * sync. Rendered as a muted footer line on the settings page so a user can\n * report the exact build they run.\n *\n * @module dsh-commandcode-provider/client/version\n */\n\nimport pkg from '../../package.json'\n\n/** The published package version (e.g. `'0.6.0'`). */\nexport const PLUGIN_VERSION: string = pkg.version\n\n/**\n * This package's GitHub releases page, derived from the repository field so\n * the update hint's link target can never drift from the published home.\n * Tolerates both repository shapes (`{ url }` and the plain string form).\n */\nexport const PLUGIN_RELEASES_URL: string = (() => {\n  const repo: unknown = (pkg as { repository?: unknown }).repository\n  const url = typeof repo === 'string' ? repo : (repo as { url?: unknown } | undefined)?.url\n  return `${typeof url === 'string' ? url.replace(/^git\\+/, '').replace(/\\.git$/, '') : 'https://github.com/Mars-Sea/dsh-commandcode-provider'}/releases`\n})()\n","/**\n * Plugin update hint (browser half).\n *\n * A deliberately small feature: when the \"Command Code\" settings page opens,\n * ask the npm registry for the package's published `latest` version and —\n * only when it is newer than the running build — let the page's footer show a\n * muted \"newer version available\" link to the GitHub releases. Everything\n * here is React-free and side-effect-seamed so node tests can drive it.\n *\n * Behaviour contract:\n *\n * - The registry is queried at most once per {@link UPDATE_CHECK_INTERVAL_MS}\n *   per browser profile; the learned version is cached in `localStorage`\n *   alongside the attempt time, so re-opening the settings page is free.\n * - A failed check records the attempt time too (an offline browser must not\n *   hammer the registry on every page open) but keeps any previously learned\n *   version, so the hint survives transient outages until it expires.\n * - Every failure mode (blocked network, non-OK status, malformed payload,\n *   unavailable storage) degrades to \"no hint\"; nothing ever throws out of\n *   {@link checkForUpdate}.\n *\n * The registry serves `access-control-allow-origin: *`, so the plain browser\n * fetch works from the GUI origin without any Host-side proxying.\n *\n * @module dsh-commandcode-provider/client/update\n */\n\n/** How often the page may hit the registry: once a day. */\nexport const UPDATE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000\n\n/** Abort a hung registry request rather than keep the footer waiting. */\nexport const FETCH_TIMEOUT_MS = 5000\n\n/**\n * The npm registry document for this package's `latest` dist-tag. The scoped\n * name is path-escaped (`%2F`) so no client normalizes the slash away.\n */\nexport const NPM_LATEST_URL =\n  'https://registry.npmjs.org/@mars-sea%2Fdsh-commandcode-provider/latest'\n\n/**\n * Compare two version strings (`major.minor.patch[-pre]`). Returns a negative\n * number when `a` sorts before `b`, positive when after, zero when equal.\n *\n * Tolerant by design: a leading `v` is stripped, unparsable numeric parts\n * count as `0`, and semver prerelease rules apply (release > prerelease;\n * numeric identifiers compare numerically, everything else lexically, a\n * shorter identifier list sorts first). Enough for release tags; not a full\n * semver validator.\n */\nexport function compareVersions(a: string, b: string): number {\n  const left = splitVersion(a)\n  const right = splitVersion(b)\n  const depth = Math.max(left.core.length, right.core.length)\n  for (let index = 0; index < depth; index += 1) {\n    const delta = (left.core[index] ?? 0) - (right.core[index] ?? 0)\n    if (delta !== 0) return Math.sign(delta)\n  }\n  // A release outranks any prerelease of the same core version.\n  if (left.pre.length === 0 && right.pre.length === 0) return 0\n  if (left.pre.length === 0) return 1\n  if (right.pre.length === 0) return -1\n  const width = Math.max(left.pre.length, right.pre.length)\n  for (let index = 0; index < width; index += 1) {\n    const l = left.pre[index]\n    const r = right.pre[index]\n    if (l === undefined) return -1\n    if (r === undefined) return 1\n    const lNumeric = /^\\d+$/.test(l)\n    const rNumeric = /^\\d+$/.test(r)\n    let delta: number\n    if (lNumeric && rNumeric) delta = Number(l) - Number(r)\n    else if (lNumeric) delta = -1 // numeric identifiers sort below alphanumeric\n    else if (rNumeric) delta = 1\n    else delta = l < r ? -1 : l > r ? 1 : 0\n    if (delta !== 0) return Math.sign(delta)\n  }\n  return 0\n}\n\n/** True when `candidate` is strictly newer than `current`. */\nexport function isNewerVersion(candidate: string, current: string): boolean {\n  return compareVersions(candidate, current) > 0\n}\n\n/** Split a tolerant version string into numeric core + prerelease ids. */\nfunction splitVersion(value: string): { core: number[]; pre: string[] } {\n  // Split on the FIRST dash only: `1.0.0-alpha-1` has prerelease `alpha-1`,\n  // not `alpha` (a split on every dash would drop the `-1`).\n  const cleaned = value.trim().replace(/^v/i, '')\n  const dash = cleaned.indexOf('-')\n  const coreText = dash < 0 ? cleaned : cleaned.slice(0, dash)\n  const preText = dash < 0 ? undefined : cleaned.slice(dash + 1)\n  const core = coreText === ''\n    ? [0]\n    : coreText.split('.').map((part) => {\n        const parsed = Number.parseInt(part, 10)\n        return Number.isFinite(parsed) ? parsed : 0\n      })\n  const pre = preText === undefined ? [] : preText.split('.')\n  return { core, pre }\n}\n\n/**\n * Extract the published version from the registry's `/latest` manifest\n * (`{ name, version, … }`). Throws on anything unexpected so callers treat a\n * shape change as a failed attempt, never as bogus data.\n */\nexport function parseLatestVersion(payload: unknown): string {\n  if (typeof payload !== 'object' || payload === null) {\n    throw new Error('npm latest payload is not an object')\n  }\n  const version = (payload as { version?: unknown }).version\n  if (typeof version !== 'string' || !/^\\d+\\.\\d+\\./.test(version)) {\n    throw new Error('npm latest payload has no usable version')\n  }\n  return version\n}\n\n/** Fetch and parse the published `latest` version. Rejects on any failure. */\nexport async function fetchLatestVersion(\n  fetchImpl: typeof fetch = fetch,\n): Promise<string> {\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS)\n  try {\n    const response = await fetchImpl(NPM_LATEST_URL, { signal: controller.signal })\n    if (!response.ok) {\n      throw new Error(`registry responded ${response.status}`)\n    }\n    return parseLatestVersion(await response.json())\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** What the cache remembers about the last check. */\nexport interface UpdateCheckRecord {\n  /** When the last attempt completed (success or failure), epoch ms. */\n  at: number\n  /** The last successfully learned upstream version, if any. */\n  version?: string | undefined\n}\n\n/** Storage seam so tests can stand in for `localStorage`. */\nexport interface UpdateCheckStore {\n  read(): UpdateCheckRecord | undefined\n  write(record: UpdateCheckRecord): void\n}\n\n/** The `localStorage` key holding {@link UpdateCheckRecord}. */\nexport const UPDATE_CHECK_CACHE_KEY = '@mars-sea/dsh-commandcode-provider/update-check'\n\n/**\n * A {@link UpdateCheckStore} backed by `localStorage`. Tolerates a missing or\n * throwing storage (SSR-ish contexts, private modes): reads yield `undefined`,\n * writes are dropped.\n */\nexport function localStorageUpdateStore(\n  storage: Storage | undefined = typeof localStorage === 'undefined' ? undefined : localStorage,\n): UpdateCheckStore {\n  return {\n    read(): UpdateCheckRecord | undefined {\n      if (storage === undefined) return undefined\n      try {\n        const raw = storage.getItem(UPDATE_CHECK_CACHE_KEY)\n        if (raw === null) return undefined\n        const parsed: unknown = JSON.parse(raw)\n        if (typeof parsed !== 'object' || parsed === null) return undefined\n        const at = (parsed as { at?: unknown }).at\n        if (typeof at !== 'number' || !Number.isFinite(at)) return undefined\n        const version = (parsed as { version?: unknown }).version\n        return {\n          at,\n          version: typeof version === 'string' && version !== '' ? version : undefined,\n        }\n      } catch {\n        return undefined\n      }\n    },\n    write(record: UpdateCheckRecord): void {\n      if (storage === undefined) return\n      try {\n        storage.setItem(UPDATE_CHECK_CACHE_KEY, JSON.stringify(record))\n      } catch {\n        // Quota/private-mode failures must never break the page.\n      }\n    },\n  }\n}\n\n/**\n * Run one throttled update check. Resolves with the newest published version\n * when it is newer than `currentVersion`, otherwise `undefined`.\n *\n * Within the throttle window (or on failure) the cached version answers, so\n * the hint keeps working offline; past the window the registry is consulted\n * again and the attempt time is refreshed either way.\n */\nexport async function checkForUpdate(options: {\n  currentVersion: string\n  now: number\n  store: UpdateCheckStore\n  fetchImpl?: typeof fetch\n}): Promise<string | undefined> {\n  const { currentVersion, now, store } = options\n  const hintOf = (version: string | undefined): string | undefined =>\n    version !== undefined && isNewerVersion(version, currentVersion) ? version : undefined\n\n  const cache = store.read()\n  if (cache !== undefined && now - cache.at < UPDATE_CHECK_INTERVAL_MS) {\n    return hintOf(cache.version)\n  }\n\n  let learned: string | undefined\n  try {\n    learned = await fetchLatestVersion(options.fetchImpl)\n  } catch {\n    // Degrade silently: record the attempt below and fall back to the cache.\n  }\n  const version = learned ?? cache?.version\n  store.write({ at: now, version })\n  return hintOf(version)\n}\n","/**\n * React component for the \"Command Code\" settings page (browser half).\n *\n * Renders as a `settings.section` entry — a page at the same settings-nav\n * level as General / Models / Plugins. The shell supplies the nav row and\n * renders this body inside the content column. All copy comes from the\n * `settings.commandcode` locale namespace; all state comes from the\n * `CommandCodeSettingsController` injected by the slot registration.\n *\n * The layout mirrors the harness's settings pages: a max-width content\n * column, labelled fields with hints, a reset affordance, and a\n * save/discard footer. Rarely touched connection facts (API base, working\n * directory, timeouts, plan filter) fold into a collapsed Advanced card\n * (`AdvancedSection`) so the page leads with the key and the usage facts.\n * Styles are injected once by the client entry\n * (see src/client/index.ts) and class-prefixed `cc-` to stay local.\n */\n\nimport { useEffect, useMemo, useState } from 'react'\nimport { Button, Menu } from '@deepseek-ai/dsh-client-ui-primitives'\nimport type { MenuEntry } from '@deepseek-ai/dsh-client-ui-primitives'\nimport type { Translate } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { CommandCodeCredits } from '../adapter.ts'\nimport type { CommandCodeAccountUsage, CommandCodeUsageReport } from '../usage-wire.ts'\nimport type { SettingsCommandCodeKey } from './locales.ts'\nimport type { AccountItemState, CatalogModelOption, RuleItemState, SettingsPageState, StagedField } from './settings.ts'\nimport type { LoginPageState } from './login.ts'\nimport { LoginRow } from './login-row.tsx'\nimport { buildModelSelectOptions, catalogIsReady, groupModelSelectOptions, staleModelIds, tierHeadingFor, toggleModelSelection } from './model-select.ts'\nimport type { UsagePageState } from './usage.ts'\nimport { formatMoney, formatMoneyExact, formatResetAt, formatSuccessRate, formatTokensCompact, windowRatio } from './usage.ts'\nimport { PLUGIN_RELEASES_URL, PLUGIN_VERSION } from './version.ts'\nimport { checkForUpdate, localStorageUpdateStore } from './update.ts'\n\n/** Props composed by the slot registration: locale seat + injected face. */\nexport interface CommandCodeSettingsProps {\n  t: Translate<SettingsCommandCodeKey>\n  useCommandCodeSettings<T>(selector: (state: SettingsPageState) => T): T\n  useCommandCodeUsage<T>(selector: (state: UsagePageState) => T): T\n  useCommandCodeLogin<T>(selector: (state: LoginPageState) => T): T\n  edit(field: string, text: string): void\n  resetField(field: string): void\n  save(): void\n  discard(): void\n  refreshUsage(): void\n  beginLogin(): void\n  cancelLogin(): void\n  addAccount(): void\n  removeAccount(id: string): void\n  editAccountLabel(id: string, text: string): void\n  editAccountKey(id: string, text: string): void\n  toggleKeyClear(id: string): void\n  addRule(): void\n  removeRule(id: string): void\n  editRuleModels(id: string, ids: string[]): void\n  editRuleAccount(id: string, text: string): void\n  editVisibleModels(ids: string[]): void\n  clearVisibleModels(): void\n}\n\n/** The section fields folded into the collapsible Advanced card. */\ntype AdvancedField = 'apiBase' | 'workingDir' | 'requestTimeoutMs' | 'streamIdleTimeoutMs' | 'filterModelsByPlan' | 'webSearch'\nconst ADVANCED_FIELDS: readonly AdvancedField[] = [\n  'apiBase',\n  'workingDir',\n  'requestTimeoutMs',\n  'streamIdleTimeoutMs',\n  'filterModelsByPlan',\n  'webSearch',\n]\n\n/** One labelled field row in the page body. */\nfunction Field({\n  id,\n  label,\n  hint,\n  state,\n  disabled,\n  numeric,\n  placeholder,\n  onEdit,\n  onReset,\n  t,\n}: {\n  id: string\n  label: string\n  hint: string\n  state: StagedField\n  disabled: boolean\n  numeric?: boolean\n  placeholder?: string | undefined\n  onEdit(text: string): void\n  onReset(): void\n  t: Translate<SettingsCommandCodeKey>\n}) {\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor={id}>{label}</label>\n        <span className=\"cc-badges\">\n          {state.overridden ? <span className=\"cc-badge\">{t('overridden')}</span> : null}\n          <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onReset} aria-label={`${label} — ${t('reset')}`}>{t('reset')}</button>\n        </span>\n      </div>\n      <input\n        id={id}\n        className={state.invalid ? 'cc-input cc-inputInvalid' : 'cc-input'}\n        type=\"text\"\n        inputMode={numeric ? 'numeric' : undefined}\n        value={state.text}\n        placeholder={placeholder}\n        disabled={disabled}\n        onChange={(event) => onEdit(event.target.value)}\n      />\n      <p className={state.invalid ? 'cc-invalid' : 'cc-hint'}>\n        {state.invalid ? invalidCopy(state.invalidReason, t) : hint}\n      </p>\n    </div>\n  )\n}\n\n/** The per-field error copy for a staged draft's failure reason. */\nfunction invalidCopy(reason: StagedField['invalidReason'], t: Translate<SettingsCommandCodeKey>): string {\n  if (reason === 'tooSmall') return t('numberTooSmall')\n  if (reason === 'tooLarge') return t('numberTooLarge')\n  return t('invalidNumber')\n}\n\n/**\n * The collapsed \"Advanced\" card: API base, working dir, both timeouts, and\n * the plan filter live here so the page leads with the facts a user actually\n * touches. Starts collapsed on every visit; expands on demand. While\n * collapsed, a badge names the customized count so a nonzero override stays\n * visible (a number field's error blocks save and must be reachable).\n */\nfunction AdvancedSection({\n  state,\n  disabled,\n  t,\n  onEdit,\n  onReset,\n}: {\n  state: SettingsPageState\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onEdit(field: string, text: string): void\n  onReset(field: string): void\n}) {\n  const [expanded, setExpanded] = useState(false)\n  const overridden = ADVANCED_FIELDS.filter((field) => state[field].overridden).length\n  const invalid = ADVANCED_FIELDS.some((field) => state[field].invalid)\n  return (\n    <div className=\"cc-card\">\n      <button\n        type=\"button\"\n        className=\"cc-advancedHead\"\n        aria-expanded={expanded}\n        aria-controls=\"cc-advanced-body\"\n        onClick={() => setExpanded((value) => !value)}\n      >\n        <span className=\"cc-advancedTitle\">{t('advancedSettings')}</span>\n        {overridden > 0 ? (\n          <span className=\"cc-badge\">\n            {overridden === 1 ? t('advancedOverriddenOne') : t('advancedOverriddenMany', { count: overridden })}\n          </span>\n        ) : null}\n        {/* An invalid number blocks save while collapsed with no visible cue\n            — surface it on the header so the blocker is reachable. */}\n        {!expanded && invalid ? (\n          <span className=\"cc-badge cc-badgeWarn\">{t('advancedInvalid')}</span>\n        ) : null}\n        <span className=\"cc-advancedSpacer\" />\n        <span className={expanded ? 'cc-chevron cc-chevronUp' : 'cc-chevron'} aria-hidden=\"true\" />\n      </button>\n      {expanded ? (\n        <div id=\"cc-advanced-body\" className=\"cc-advancedBody\">\n          <p className=\"cc-hint\">{t('advancedSettingsHint')}</p>\n          <Field\n            id=\"cc-api-base\"\n            label={t('apiBase')}\n            hint={t('apiBaseHint')}\n            state={state.apiBase}\n            disabled={disabled}\n            onEdit={(text) => onEdit('apiBase', text)}\n            onReset={() => onReset('apiBase')}\n            t={t}\n          />\n          <Field\n            id=\"cc-working-dir\"\n            label={t('workingDir')}\n            hint={t('workingDirHint')}\n            state={state.workingDir}\n            disabled={disabled}\n            placeholder={state.defaultWorkingDir}\n            onEdit={(text) => onEdit('workingDir', text)}\n            onReset={() => onReset('workingDir')}\n            t={t}\n          />\n          <Field\n            id=\"cc-request-timeout\"\n            label={t('requestTimeoutMs')}\n            hint={t('requestTimeoutMsHint')}\n            state={state.requestTimeoutMs}\n            disabled={disabled}\n            numeric\n            onEdit={(text) => onEdit('requestTimeoutMs', text)}\n            onReset={() => onReset('requestTimeoutMs')}\n            t={t}\n          />\n          <Field\n            id=\"cc-stream-idle-timeout\"\n            label={t('streamIdleTimeoutMs')}\n            hint={t('streamIdleTimeoutMsHint')}\n            state={state.streamIdleTimeoutMs}\n            disabled={disabled}\n            numeric\n            onEdit={(text) => onEdit('streamIdleTimeoutMs', text)}\n            onReset={() => onReset('streamIdleTimeoutMs')}\n            t={t}\n          />\n          <ToggleField\n            id=\"cc-filter-models-by-plan\"\n            label={t('filterModelsByPlan')}\n            hint={t('filterModelsByPlanHint')}\n            state={state.filterModelsByPlan}\n            disabled={disabled}\n            defaultChecked\n            onEdit={(text) => onEdit('filterModelsByPlan', text)}\n            onReset={() => onReset('filterModelsByPlan')}\n            t={t}\n          />\n          <ToggleField\n            id=\"cc-web-search\"\n            label={t('webSearch')}\n            hint={t('webSearchHint')}\n            state={state.webSearch}\n            disabled={disabled}\n            defaultChecked\n            onEdit={(text) => onEdit('webSearch', text)}\n            onReset={() => onReset('webSearch')}\n            t={t}\n          />\n        </div>\n      ) : null}\n      {expanded && invalid ? (\n        <p className=\"cc-invalid\" role=\"status\">{t('advancedInvalid')}</p>\n      ) : null}\n    </div>\n  )\n}\n\n/**\n * One boolean field row rendered as a toggle. The staged text is `'true'` /\n * `'false'` / `''` (unset → `defaultChecked`); toggling stages the string the\n * boolean field spec parses back into a real boolean on save.\n */\nfunction ToggleField({\n  id,\n  label,\n  hint,\n  state,\n  disabled,\n  defaultChecked,\n  onEdit,\n  onReset,\n  t,\n}: {\n  id: string\n  label: string\n  hint: string\n  state: StagedField\n  disabled: boolean\n  defaultChecked: boolean\n  onEdit(text: string): void\n  onReset(): void\n  t: Translate<SettingsCommandCodeKey>\n}) {\n  const checked = state.text === '' ? defaultChecked : state.text === 'true'\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        {/* Plain text (not a second label): the toggle input below already\n            has its accessible name from the wrapping label. */}\n        <span className=\"cc-label\" aria-hidden=\"true\">{label}</span>\n        <span className=\"cc-badges\">\n          {state.overridden ? <span className=\"cc-badge\">{t('overridden')}</span> : null}\n          <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onReset} aria-label={`${label} — ${t('reset')}`}>{t('reset')}</button>\n        </span>\n      </div>\n      <label className=\"cc-toggleRow\">\n        <input\n          id={id}\n          className=\"cc-toggle\"\n          type=\"checkbox\"\n          role=\"switch\"\n          checked={checked}\n          disabled={disabled}\n          onChange={(event) => onEdit(event.target.checked ? 'true' : 'false')}\n        />\n        <span className=\"cc-hint\">{hint}</span>\n      </label>\n    </div>\n  )\n}\n\n/**\n * The API-key control: write-only, reports configured state, never echoes the\n * key. The input is masked by default with a Show/Hide toggle so a pasted key\n * can be spot-checked without leaving the field, and a stored key can be\n * staged for removal (the next save unsets it) when it is bad or unwanted.\n */\nfunction SecretKeyField({\n  label,\n  hint,\n  state,\n  disabled,\n  configured,\n  configuredLabel,\n  unconfiguredLabel,\n  clearStaged,\n  showLabel,\n  hideLabel,\n  clearLabel,\n  clearStagedLabel,\n  undoClearLabel,\n  onEdit,\n  onToggleClear,\n}: {\n  label: string\n  hint: string\n  state: StagedField\n  disabled: boolean\n  configured: boolean\n  configuredLabel: string\n  unconfiguredLabel: string\n  clearStaged: boolean\n  showLabel: string\n  hideLabel: string\n  clearLabel: string\n  clearStagedLabel: string\n  undoClearLabel: string\n  onEdit(text: string): void\n  onToggleClear(): void\n}) {\n  const [visible, setVisible] = useState(false)\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor=\"cc-api-key\">{label}</label>\n        <span className=\"cc-badges\">\n          <span className={configured ? 'cc-badge' : 'cc-badgeMuted'}>\n            {configured ? configuredLabel : unconfiguredLabel}\n          </span>\n          {clearStaged ? <span className=\"cc-badge cc-badgeWarn\">{clearStagedLabel}</span> : null}\n          {configured ? (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onToggleClear}>\n              {clearStaged ? undoClearLabel : clearLabel}\n            </button>\n          ) : null}\n          <button\n            type=\"button\"\n            className=\"cc-reset\"\n            disabled={disabled}\n            onClick={() => setVisible((value) => !value)}\n          >\n            {visible ? hideLabel : showLabel}\n          </button>\n        </span>\n      </div>\n      <input\n        id=\"cc-api-key\"\n        className=\"cc-input\"\n        type={visible ? 'text' : 'password'}\n        autoComplete=\"off\"\n        spellCheck={false}\n        value={state.text}\n        disabled={disabled}\n        onChange={(event) => onEdit(event.target.value)}\n      />\n      <p className=\"cc-hint\">{hint}</p>\n    </div>\n  )\n}\n\n/** One stat tile in the account card's summary grid. */\nfunction UsageStat({ label, value, sub }: { label: string; value: string; sub?: string | undefined }) {\n  return (\n    <div className=\"cc-usageStat\">\n      <span className=\"cc-usageStatLabel\">{label}</span>\n      <span className=\"cc-usageStatValue\">{value}</span>\n      {sub !== undefined && sub !== '' ? <span className=\"cc-usageStatSub\">{sub}</span> : null}\n    </div>\n  )\n}\n\n/** One window-limit row: label, used/cap, a fill bar, and the reset time. */\nfunction UsageWindow({\n  label,\n  limit: { used, cap, exceeded, resetAt },\n  t,\n}: {\n  label: string\n  limit: CommandCodeCredits['fiveHour']\n  t: Translate<SettingsCommandCodeKey>\n}) {\n  const ratio = windowRatio(used, cap)\n  const reset = formatResetAt(resetAt)\n  return (\n    <div className=\"cc-usageWindow\">\n      <div className=\"cc-usageWindowHead\">\n        <span className=\"cc-usageWindowLabel\">{label}</span>\n        {exceeded ? <span className=\"cc-usageExceeded\">{t('usageExceeded')}</span> : null}\n        <span className=\"cc-usageWindowValue\">{cap > 0 ? `${formatMoney(used)} / ${formatMoney(cap)}` : formatMoney(used)}</span>\n      </div>\n      <div className=\"cc-usageBar\" role=\"progressbar\" aria-label={label} aria-valuemin={0} aria-valuemax={100} aria-valuenow={Math.round(ratio * 100)}>\n        <div className={exceeded ? 'cc-usageBarFill cc-usageBarFillWarn' : 'cc-usageBarFill'} style={{ width: `${ratio * 100}%` }} />\n      </div>\n      {reset !== '' ? <p className=\"cc-usageWindowReset\">{t('usageReset')} {reset}</p> : null}\n    </div>\n  )\n}\n\n/** One account's rotation state as a short badge next to its label. */\nfunction AccountMark({ entry, t }: { entry: CommandCodeAccountUsage; t: Translate<SettingsCommandCodeKey> }) {\n  if (entry.active) return <span className=\"cc-usagePlan\">{t('usageActive')}</span>\n  if (entry.mark === 'invalid-credential') return <span className=\"cc-usagePlanStatus\">{t('usageInvalidKey')}</span>\n  if (entry.cooldownUntil > 0) {\n    return <span className=\"cc-usagePlanStatus\">{t('usageCooldown')} {formatResetAt(entry.cooldownUntil)}</span>\n  }\n  if (entry.mark === 'rate-limit') return <span className=\"cc-usagePlanStatus\">{t('usageCooldown')}</span>\n  return null\n}\n\n/**\n * One pool account's facts (identity, totals, credits, window limits)\n * rendered inside the account-usage card.\n */\nfunction AccountReport({ entry, fetchedAt, t, onRemove }: {\n  entry: CommandCodeAccountUsage\n  /**\n   * When the shared usage snapshot was fetched — shares the account's bottom\n   * meta row with the billing period end so the two timestamps occupy one\n   * line (period/partial facts left, fetch freshness right).\n   */\n  fetchedAt?: number | undefined\n  t: Translate<SettingsCommandCodeKey>\n  /** Present only for removable (non-default) accounts on a writable page. */\n  onRemove?: (() => void) | undefined\n}) {\n  const report = entry.report\n  const account = report.account\n  const accountName = account === undefined ? '' : account.userName || account.name\n  const credits = report.credits\n  const plan = report.plan\n  const planName = plan?.name ?? ''\n  const planStatus = plan !== undefined && plan.status !== '' && plan.status !== 'active' ? plan.status : ''\n  const showPeriod = plan !== undefined && plan.currentPeriodEnd > 0\n  const showPartial = report.failures.length > 0 && report.blocked === undefined\n\n  return (\n    <div className=\"cc-accountReport\">\n      <div className=\"cc-usageHead\">\n        <h4 className=\"cc-usageTitle\">{entry.label}</h4>\n        <AccountMark entry={entry} t={t} />\n        {accountName !== '' ? <span className=\"cc-usageAccount\">{accountName}</span> : null}\n        {planName !== '' ? <span className=\"cc-usagePlan\">{planName}</span> : null}\n        {planStatus !== '' ? <span className=\"cc-usagePlanStatus\">{planStatus}</span> : null}\n        <span className=\"cc-usageMetaSpacer\" />\n        {onRemove !== undefined ? (\n          <button type=\"button\" className=\"cc-usageRefresh\" onClick={onRemove}>{t('accountRemove')}</button>\n        ) : null}\n      </div>\n\n      {!entry.configured ? <p className=\"cc-usageHint\">{t('usageUnconfigured')}</p> : null}\n\n      {report.blocked !== undefined ? (\n        <div className=\"cc-usageBlocked\" role=\"alert\">\n          <p className=\"cc-usageBlockedTitle\">{blockedTitle(report.blocked, t)}</p>\n          <p className=\"cc-usageBlockedHint\">{blockedHint(report.blocked, t)}</p>\n        </div>\n      ) : null}\n\n      {report.usage !== undefined ? (\n        <div className=\"cc-usageStats\">\n          <UsageStat\n            label={t('usageRequests')}\n            value={String(report.usage.completedCount)}\n            sub={`${t('usageFailed')} ${report.usage.failedCount}`}\n          />\n          <UsageStat label={t('usageSuccessRate')} value={`${formatSuccessRate(report.usage.successRate)}%`} />\n          <UsageStat\n            label={t('usageCost')}\n            value={formatMoneyExact(report.usage.totalCost)}\n            sub={`${formatMoney(report.usage.totalCredits)} credits`}\n          />\n          <UsageStat\n            label={t('usageTokens')}\n            value={formatTokensCompact(report.usage.totalTokensIn + report.usage.totalTokensOut)}\n            sub={`${formatTokensCompact(report.usage.totalTokensIn)} ${t('usageTokensIn')} / ${formatTokensCompact(report.usage.totalTokensOut)} ${t('usageTokensOut')}`}\n          />\n        </div>\n      ) : null}\n\n      {credits !== undefined ? (\n        <div className=\"cc-usageStats\">\n          <UsageStat label={t('usageMonthly')} value={formatMoney(credits.monthlyCredits)} />\n          <UsageStat label={t('usagePurchased')} value={formatMoney(credits.purchasedCredits)} />\n          <UsageStat label={t('usageFree')} value={formatMoney(credits.freeCredits)} />\n        </div>\n      ) : null}\n\n      {credits !== undefined ? (\n        <div className=\"cc-usageWindows\">\n          <UsageWindow label={t('usageFiveHour')} limit={credits.fiveHour} t={t} />\n          <UsageWindow label={t('usageWeekly')} limit={credits.weekly} t={t} />\n        </div>\n      ) : null}\n\n      {showPeriod || showPartial || fetchedAt !== undefined ? (\n        <div className=\"cc-usageMeta\">\n          {showPeriod ? (\n            <p className=\"cc-usageUpdated\">{t('usagePeriodEnd')} {new Date(plan.currentPeriodEnd).toLocaleDateString()}</p>\n          ) : null}\n          {showPartial ? (\n            <p className=\"cc-usagePartial\" title={report.failures.join('; ')}>{t('usagePartial')}</p>\n          ) : null}\n          <span className=\"cc-usageMetaSpacer\" />\n          {fetchedAt !== undefined ? (\n            <p className=\"cc-usageUpdated\">{t('usageUpdated')} {new Date(fetchedAt).toLocaleTimeString()}</p>\n          ) : null}\n        </div>\n      ) : null}\n    </div>\n  )\n}\n\n/** The headline copy for a report whose every endpoint failed the same way. */\nfunction blockedTitle(reason: CommandCodeUsageReport['blocked'], t: Translate<SettingsCommandCodeKey>): string {\n  if (reason === 'invalid-key') return t('usageKeyInvalid')\n  if (reason === 'service-unavailable') return t('usageServiceUnavailable')\n  return t('usageNetworkError')\n}\n\n/** The actionable hint under a blocked report's headline. */\nfunction blockedHint(reason: CommandCodeUsageReport['blocked'], t: Translate<SettingsCommandCodeKey>): string {\n  if (reason === 'invalid-key') return t('usageKeyInvalidHint')\n  if (reason === 'service-unavailable') return t('usageServiceUnavailableHint')\n  return t('usageNetworkHint')\n}\n\n/** The status dot on an account tab: cooling/invalid warn, everything else ok. */\nfunction AccountTabDot({ entry }: { entry: CommandCodeAccountUsage }) {\n  const cls = entry.mark === 'invalid-credential'\n    ? 'cc-tabDot cc-tabDotError'\n    : entry.mark !== '' || entry.cooldownUntil > 0\n      ? 'cc-tabDot cc-tabDotWarn'\n      : 'cc-tabDot cc-tabDotOk'\n  // Decorative: the tab's text label already carries the account identity.\n  return <span className={cls} aria-hidden=\"true\" />\n}\n\n/**\n * The account-usage card: the `/commandcode` dashboard's facts rendered as\n * a native settings card. With several accounts the card is a carousel — a\n * tab strip (label + status dot) switches between accounts so the page stays\n * short; each account's report carries its own remove affordance (the\n * default account is not removable). Accounts staged for removal in the\n * management card are hidden here immediately. Data arrives through the\n * `commandcode/report` Remote; the API keys never leave the Host.\n */\nfunction UsageCard({ t, usage, apiKeyConfigured, removingIds, removableIds, canManage, onRefresh, onRemoveAccount }: {\n  t: Translate<SettingsCommandCodeKey>\n  usage: UsagePageState\n  apiKeyConfigured: boolean\n  /** Ids of accounts staged for removal (hidden from the carousel). */\n  removingIds: string[]\n  /**\n   * Ids of accounts the settings document can actually remove (the stored\n   * extra accounts' refs). Composition-only accounts (literal-key slots with\n   * positional `account-N` ids) are NOT removable from the page — the\n   * settings document cannot name them — so they get no remove button.\n   */\n  removableIds: string[]\n  /** Whether the page accepts writes (the remove affordance follows it). */\n  canManage: boolean\n  onRefresh(): void\n  onRemoveAccount(id: string): void\n}) {\n  // First paint with a configured key fetches automatically; later fetches\n  // are explicit (refresh button) or follow a landed save.\n  useEffect(() => {\n    if (apiKeyConfigured && usage.status === 'idle') onRefresh()\n  }, [apiKeyConfigured, usage.status, onRefresh])\n\n  const loading = usage.status === 'loading'\n  const report = usage.report\n  // Locally remembered removals: the usage controller keeps the old report\n  // until the post-save refresh lands, and removedRefs clears at save-land —\n  // without this the just-removed account would pop back in for one refresh\n  // round-trip. Cleared when a fresh report arrives (fetchedAt changes).\n  const [locallyRemoved, setLocallyRemoved] = useState<readonly string[]>([])\n  useEffect(() => {\n    setLocallyRemoved([])\n  }, [usage.fetchedAt])\n  const hidden = new Set([...removingIds, ...locallyRemoved])\n  const seenIds = new Set<string>()\n  const entries = (report?.accounts ?? []).filter((entry) => {\n    if (hidden.has(entry.id)) return false\n    // Hand-edited settings can name the same credential ref twice; dedupe so\n    // the tab strip never carries duplicate keys/selections.\n    if (seenIds.has(entry.id)) return false\n    seenIds.add(entry.id)\n    return true\n  })\n  const [selectedId, setSelectedId] = useState<string | undefined>(undefined)\n  // The selected tab: the explicit choice while it still exists, else the\n  // serving (active) account, else the first entry.\n  const selected = entries.find((entry) => entry.id === selectedId)\n    ?? entries.find((entry) => entry.active)\n    ?? entries[0]\n  const removeSelected = canManage && selected !== undefined && removableIds.includes(selected.id)\n    ? () => {\n        const id = selected.id\n        setLocallyRemoved((prev) => [...prev, id])\n        onRemoveAccount(id)\n      }\n    : undefined\n\n  return (\n    <div className=\"cc-usageCard\" aria-label={t('usageTitle')}>\n      <div className=\"cc-usageHead\">\n        <h3 className=\"cc-usageTitle\">{t('usageTitle')}</h3>\n        <span className=\"cc-usageMetaSpacer\" />\n        <button type=\"button\" className=\"cc-usageRefresh\" disabled={loading || !apiKeyConfigured} onClick={onRefresh}>\n          {loading ? t('usageRefreshing') : t('usageRefresh')}\n        </button>\n      </div>\n\n      {!apiKeyConfigured ? <p className=\"cc-usageHint\">{t('usageNoKey')}</p> : null}\n      {apiKeyConfigured && report === undefined && loading ? <p className=\"cc-usageHint\">{t('usageLoading')}</p> : null}\n      {usage.status === 'error' ? (\n        <p className=\"cc-usageError\" role=\"status\">\n          <span>{t('usageError')}{usage.error !== undefined && usage.error !== '' ? ` — ${usage.error}` : ''}</span>\n        </p>\n      ) : null}\n\n      {/* Plain buttons, not tabs: each switches the visible account panel\n          without a tabpanel/keyboard-tab contract to uphold. */}\n      {entries.length > 1 ? (\n        <div className=\"cc-tabs\" aria-label={t('accountsTitle')}>\n          {entries.map((entry) => (\n            <button\n              key={entry.id}\n              type=\"button\"\n              aria-pressed={selected?.id === entry.id}\n              className={selected?.id === entry.id ? 'cc-tab cc-tabActive' : 'cc-tab'}\n              onClick={() => setSelectedId(entry.id)}\n            >\n              <AccountTabDot entry={entry} />\n              {entry.label}\n            </button>\n          ))}\n        </div>\n      ) : null}\n\n      {selected !== undefined ? (\n        <AccountReport\n          key={selected.id}\n          entry={selected}\n          fetchedAt={usage.fetchedAt}\n          t={t}\n          onRemove={removeSelected}\n        />\n      ) : null}\n    </div>\n  )\n}\n\n/**\n * One extra account row: label, key, configured badge. Saved accounts are\n * removed from the usage card above; a NOT-YET-SAVED addition never appears\n * there (the usage report is Host-side), so it keeps its own remove button —\n * otherwise the only way to undo a mistaken Add would be discarding every\n * other staged edit.\n */\nfunction AccountRow({ account, disabled, t, onLabel, onKey, onToggleClear, onRemove }: {\n  account: AccountItemState\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onLabel(text: string): void\n  onKey(text: string): void\n  onToggleClear(): void\n  onRemove(): void\n}) {\n  const locked = !account.writable\n  const [keyVisible, setKeyVisible] = useState(false)\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor={`cc-account-label-${account.id}`}>{t('accountLabel')}</label>\n        <span className=\"cc-badges\">\n          {account.added ? <span className=\"cc-badge\">{t('unsaved')}</span> : null}\n          <span className={account.configured ? 'cc-badge' : 'cc-badgeMuted'}>\n            {account.configured ? t('apiKeySet') : t('apiKeyUnset')}\n          </span>\n          {account.clearStaged ? <span className=\"cc-badge cc-badgeWarn\">{t('usageKeyClearStaged')}</span> : null}\n          {account.configured && !account.clearStaged ? (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onToggleClear}>\n              {t('usageKeyClear')}\n            </button>\n          ) : null}\n          {account.clearStaged ? (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onToggleClear}>\n              {t('usageUndoKeyClear')}\n            </button>\n          ) : null}\n          <button\n            type=\"button\"\n            className=\"cc-reset\"\n            disabled={disabled}\n            onClick={() => setKeyVisible((value) => !value)}\n          >\n            {keyVisible ? t('hide') : t('show')}\n          </button>\n          {account.added ? (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onRemove}>{t('accountRemove')}</button>\n          ) : null}\n        </span>\n      </div>\n      <input\n        id={`cc-account-label-${account.id}`}\n        className=\"cc-input\"\n        type=\"text\"\n        value={account.label}\n        disabled={disabled}\n        onChange={(event) => onLabel(event.target.value)}\n      />\n      <input\n        id={`cc-account-key-${account.id}`}\n        className=\"cc-input\"\n        type={keyVisible ? 'text' : 'password'}\n        autoComplete=\"off\"\n        spellCheck={false}\n        placeholder={t('accountKey')}\n        value={account.keyText}\n        disabled={disabled || locked}\n        onChange={(event) => onKey(event.target.value)}\n      />\n      <p className=\"cc-hint\">{locked ? t('apiKeyLocked') : t('accountKeyHint')}</p>\n    </div>\n  )\n}\n\n/** The multi-account card: the active-account selector + extra accounts in rotation order + add button. */\nfunction AccountsCard({ t, state, disabled, onAdd, onRemove, onLabel, onKey, onToggleClear, onActive, onActiveReset }: {\n  t: Translate<SettingsCommandCodeKey>\n  state: SettingsPageState\n  disabled: boolean\n  onAdd(): void\n  onRemove(id: string): void\n  onLabel(id: string, text: string): void\n  onKey(id: string, text: string): void\n  onToggleClear(id: string): void\n  onActive(text: string): void\n  onActiveReset(): void\n}) {\n  const active = state.activeAccount\n  return (\n    <div className=\"cc-card\" aria-label={t('accountsTitle')}>\n      <div className=\"cc-field\">\n        <div className=\"cc-fieldHead\">\n          <label className=\"cc-label\">{t('accountsTitle')}</label>\n          <span className=\"cc-badges\">\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onAdd}>{t('accountAdd')}</button>\n          </span>\n        </div>\n        <p className=\"cc-hint\">{t('accountsHint')}</p>\n      </div>\n      <div className=\"cc-field\">\n        <div className=\"cc-fieldHead\">\n          <label className=\"cc-label\" htmlFor=\"cc-active-account\">{t('activeAccount')}</label>\n          <span className=\"cc-badges\">\n            {active.overridden ? <span className=\"cc-badge\">{t('overridden')}</span> : null}\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onActiveReset}>{t('reset')}</button>\n          </span>\n        </div>\n        <select\n          id=\"cc-active-account\"\n          className=\"cc-input\"\n          value={active.text}\n          disabled={disabled}\n          onChange={(event) => onActive(event.target.value)}\n        >\n          <option value=\"\">{t('activeAccountAuto')}</option>\n          <option value=\"default\">{t('accountDefault')}</option>\n          {state.accounts.filter((account) => !account.added).map((account) => (\n            <option key={account.id} value={account.ref}>{account.label}</option>\n          ))}\n        </select>\n        <p className=\"cc-hint\">{t('activeAccountHint')}</p>\n      </div>\n      {state.accounts.map((account) => (\n        <AccountRow\n          key={account.id}\n          account={account}\n          disabled={disabled}\n          t={t}\n          onLabel={(text) => onLabel(account.id, text)}\n          onKey={(text) => onKey(account.id, text)}\n          onToggleClear={() => onToggleClear(account.id)}\n          onRemove={() => onRemove(account.id)}\n        />\n      ))}\n    </div>\n  )\n}\n\n/** One model → account routing rule row. */\nfunction RuleRow({ rule, accounts, catalog, disabled, t, onModels, onAccount, onRemove }: {\n  rule: RuleItemState\n  accounts: AccountItemState[]\n  catalog: CatalogModelOption[]\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onModels(ids: string[]): void\n  onAccount(text: string): void\n  onRemove(): void\n}) {\n  const targets = [\n    { value: 'default', label: t('accountDefault') },\n    ...accounts.filter((account) => !account.added).map((account) => ({ value: account.ref, label: account.label })),\n  ]\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor={`cc-rule-model-${rule.id}`}>{t('ruleModel')}</label>\n        <span className=\"cc-badges\">\n          {rule.added ? <span className=\"cc-badge\">{t('unsaved')}</span> : null}\n          <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onRemove}>{t('ruleRemove')}</button>\n        </span>\n      </div>\n      <ModelMultiSelect\n        id={`cc-rule-model-${rule.id}`}\n        selected={rule.models}\n        catalog={catalog}\n        disabled={disabled}\n        t={t}\n        onSelect={onModels}\n      />\n      <select\n        id={`cc-rule-account-${rule.id}`}\n        className=\"cc-input\"\n        value={rule.account}\n        disabled={disabled}\n        onChange={(event) => onAccount(event.target.value)}\n        aria-label={t('ruleAccount')}\n      >\n        {targets.map((target) => (\n          <option key={target.value} value={target.value}>{target.label}</option>\n        ))}\n      </select>\n      <p className=\"cc-hint\">{t('ruleHint')}</p>\n    </div>\n  )\n}\n\n/**\n * A checkbox multi-select dropdown for picking catalog models (the\n * routing-rule rows and the visible-models filter share it). The trigger\n * shows the selection count; the Menu lists every catalog model with a\n * checkbox, toggled by clicking the row. A search box under the trigger\n * (inside the Menu anchor, so focusing it never trips the outside-click\n * close) filters the list by id/display-name substring, and items group\n * under plan-tier headings in picker order. Selected ids the catalog no\n * longer carries still render — flagged stale — so a saved selection never\n * silently loses an entry, and the VisibleModelsCard offers a one-click\n * cleanup.\n */\nfunction ModelMultiSelect({ id, selected, catalog, disabled, t, onSelect }: {\n  id: string\n  selected: string[]\n  catalog: CatalogModelOption[]\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onSelect(ids: string[]): void\n}) {\n  const [open, setOpen] = useState(false)\n  const [query, setQuery] = useState('')\n  // The search box must not inherit a stale query from a previous open.\n  useEffect(() => {\n    if (open) setQuery('')\n  }, [open])\n  // Tier headings come from the catalog entries themselves (the Host stamps\n  // each entry's plan-tier key on the Remote); rebuild only when the catalog\n  // changes.\n  const tiers = useMemo(\n    () => Object.fromEntries(\n      catalog.flatMap((model) => model.tier === undefined ? [] : [[model.id, model.tier] as const]),\n    ),\n    [catalog],\n  )\n  // The catalog is sorted for picking; append any selected ids the catalog no\n  // longer carries (removed upstream) so the current selection stays visible.\n  const options = buildModelSelectOptions(catalog, selected, query)\n  const groups = groupModelSelectOptions(options, (modelId) => tierHeadingFor(modelId, tiers))\n  const items: MenuEntry[] = groups.flatMap((group) => [\n    ...(group.heading === undefined\n      ? []\n      : [{ type: 'label' as const, id: `cc-tier-${group.heading}`, text: group.heading }]),\n    ...group.options.map((option) => ({\n      id: option.value,\n      label: (\n        <span className=\"cc-checkRow\">\n          <input\n            type=\"checkbox\"\n            className=\"cc-check\"\n            checked={selected.includes(option.value)}\n            readOnly\n            tabIndex={-1}\n          />\n          <span className=\"cc-checkName\">{option.label}</span>\n          {option.stale ? <span className=\"cc-badge\">{t('modelStale')}</span> : null}\n        </span>\n      ),\n    })),\n  ])\n  // The search box lives INSIDE the Menu anchor (which renders in place\n  // inside the Menu's root span): a pointerdown there counts as \"inside\",\n  // so focusing/typing never trips the Menu's outside-click close. A box\n  // rendered as a sibling would close the Menu on the first click.\n  return (\n    <Menu\n      open={open}\n      onClose={() => setOpen(false)}\n      onSelect={(modelId) => {\n        onSelect(toggleModelSelection(selected, modelId))\n      }}\n      selectedIds={selected}\n      items={items}\n      footer={options.length === 0 ? [{\n        type: 'label' as const,\n        id: 'cc-model-search-empty',\n        text: t('modelSearchEmpty'),\n      }] : []}\n      portal\n      anchor={\n        <span className=\"cc-modelSelectAnchor\">\n          <button\n            id={id}\n            type=\"button\"\n            className=\"cc-input cc-ruleTrigger\"\n            disabled={disabled || catalog.length === 0}\n            onClick={() => setOpen((value) => !value)}\n          >\n            <span className=\"cc-ruleTriggerText\">\n              {selected.length === 0 ? t('ruleModelPick') : t('ruleModelCount', { count: selected.length })}\n            </span>\n            <span className=\"cc-ruleCaret\" aria-hidden=\"true\" />\n          </button>\n          {open ? (\n            <input\n              type=\"search\"\n              className=\"cc-input cc-modelSearch\"\n              placeholder={t('modelSearchPlaceholder')}\n              aria-label={t('modelSearchPlaceholder')}\n              value={query}\n              disabled={disabled}\n              autoFocus\n              onChange={(event) => setQuery(event.target.value)}\n            />\n          ) : null}\n        </span>\n      }\n    />\n  )\n}\n\n/** The model → account routing card: rules in list order (first match wins). */\nfunction RulesCard({ t, state, disabled, onAdd, onRemove, onModels, onAccount }: {\n  t: Translate<SettingsCommandCodeKey>\n  state: SettingsPageState\n  disabled: boolean\n  onAdd(): void\n  onRemove(id: string): void\n  onModels(id: string, ids: string[]): void\n  onAccount(id: string, text: string): void\n}) {\n  return (\n    <div className=\"cc-card\" aria-label={t('rulesTitle')}>\n      <div className=\"cc-field\">\n        <div className=\"cc-fieldHead\">\n          <label className=\"cc-label\">{t('rulesTitle')}</label>\n          <span className=\"cc-badges\">\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onAdd}>{t('ruleAdd')}</button>\n          </span>\n        </div>\n        <p className=\"cc-hint\">{t('rulesHint')}</p>\n        {state.catalogFailed ? <p className=\"cc-invalid\">{t('rulesCatalogFailed')}</p> : null}\n      </div>\n      {state.rules.map((rule) => (\n        <RuleRow\n          key={rule.id}\n          rule={rule}\n          accounts={state.accounts}\n          catalog={state.catalogModels}\n          disabled={disabled}\n          t={t}\n          onModels={(ids) => onModels(rule.id, ids)}\n          onAccount={(text) => onAccount(rule.id, text)}\n          onRemove={() => onRemove(rule.id)}\n        />\n      ))}\n      {state.rules.length === 0 ? <p className=\"cc-hint\">{t('rulesEmpty')}</p> : null}\n    </div>\n  )\n}\n\n/** The visible-model filter card: an allowlist over the catalog. Empty = show all. */\nfunction VisibleModelsCard({ t, state, disabled, onSelect, onClear }: {\n  t: Translate<SettingsCommandCodeKey>\n  state: SettingsPageState\n  disabled: boolean\n  onSelect(ids: string[]): void\n  onClear(): void\n}) {\n  const count = state.visibleModels.length\n  const pickT: Translate<SettingsCommandCodeKey> = (key, params) => {\n    if (key === 'ruleModelPick') return t('visibleModelsPick')\n    if (key === 'ruleModelCount') return t('visibleModelsCount', params)\n    return t(key, params)\n  }\n  // Selected ids the live catalog no longer carries (retired upstream):\n  // kept, flagged stale in the dropdown, removable in one click. Never\n  // auto-dropped — an empty catalog (fetch failure) must not wipe the list.\n  // \"Stale\" is only meaningful against a catalog we actually hold, so both the\n  // cleanup button and its hint are gated on catalogIsReady: before the first\n  // fetch lands (and after a failure) the empty catalog makes every selection\n  // look retired, turning the one-click cleanup into a button that silently\n  // empties the allowlist. The explicit \"show all\" entry stays available\n  // either way — clearing the list is then the user's stated intent rather\n  // than an inference from missing data.\n  const readiness = { catalogIds: state.catalogModels.map((model) => model.id), catalogFailed: state.catalogFailed }\n  const staleIds = staleModelIds(state.visibleModels, readiness)\n  const catalogReady = catalogIsReady(readiness)\n  return (\n    <div className=\"cc-card\" aria-label={t('visibleModelsTitle')}>\n      <div className=\"cc-field\">\n        <div className=\"cc-fieldHead\">\n          <label className=\"cc-label\">{t('visibleModelsTitle')}</label>\n          <span className=\"cc-badges\">\n            {catalogReady && staleIds.length > 0 ? (\n              <button\n                type=\"button\"\n                className=\"cc-reset\"\n                disabled={disabled}\n                onClick={() => onSelect(state.visibleModels.filter((id) => !staleIds.includes(id)))}\n              >\n                {t('visibleModelsCleanStale', { count: staleIds.length })}\n              </button>\n            ) : null}\n            {count > 0 ? (\n              <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onClear}>\n                {t('visibleModelsShowAll')}\n              </button>\n            ) : null}\n          </span>\n        </div>\n        <p className=\"cc-hint\">{t('visibleModelsHint')}</p>\n        {state.catalogFailed ? <p className=\"cc-invalid\">{t('rulesCatalogFailed')}</p> : null}\n        {staleIds.length > 0 && catalogReady ? (\n          <p className=\"cc-hint\">{t('visibleModelsStaleHint', { count: staleIds.length })}</p>\n        ) : null}\n        <ModelMultiSelect\n          id=\"cc-visible-models\"\n          selected={state.visibleModels}\n          catalog={state.catalogModels}\n          disabled={disabled}\n          t={pickT}\n          onSelect={onSelect}\n        />\n      </div>\n    </div>\n  )\n}\n\n/**\n * Show the \"Saved ✓\" affordance for a short window after each accepted save.\n * The controller only counts saves (`savedCount`); the flash timing lives\n * here so the state machine stays timer-free.\n */\nfunction useSavedFlash(tick: number): boolean {\n  const [visible, setVisible] = useState(false)\n  useEffect(() => {\n    if (tick === 0) return\n    setVisible(true)\n    const timer = setTimeout(() => setVisible(false), 2500)\n    return () => clearTimeout(timer)\n  }, [tick])\n  return visible\n}\n\n/**\n * The update hint: one throttled npm-registry check per page open (the\n * throttle and all failure handling live in ./update.ts). Resolves to the\n * newest published version when it is newer than this build, else undefined —\n * every failure mode degrades to no hint at all.\n */\nfunction usePluginUpdate(): string | undefined {\n  const [available, setAvailable] = useState<string | undefined>(undefined)\n  useEffect(() => {\n    let cancelled = false\n    void checkForUpdate({\n      currentVersion: PLUGIN_VERSION,\n      now: Date.now(),\n      store: localStorageUpdateStore(),\n    }).then((version) => {\n      if (!cancelled) setAvailable(version)\n      // A rejected checkForUpdate would be a bug (it catches internally);\n      // swallow it regardless — the footer must never break the page.\n    }, () => {})\n    return () => {\n      cancelled = true\n    }\n  }, [])\n  return available\n}\n\n/** The settings page body: connection facts for the Command Code provider. */\nexport function CommandCodeSettingsPage(props: CommandCodeSettingsProps) {\n  const { t } = props\n  const state = props.useCommandCodeSettings((snapshot) => snapshot)\n  const usage = props.useCommandCodeUsage((snapshot) => snapshot)\n  const login = props.useCommandCodeLogin((snapshot) => snapshot)\n  const disabled = !state.writable\n  const keyLocked = !state.apiKeyWritable\n  const savedVisible = useSavedFlash(state.savedCount)\n  const updateVersion = usePluginUpdate()\n  return (\n    <section className=\"cc-section\" aria-label={t('title')}>\n      <h2 className=\"cc-title\">{t('title')}</h2>\n      <p className=\"cc-intro\">{t('intro')}</p>\n      {!state.writable ? <p className=\"cc-readOnly\" role=\"status\">{t('readOnly')}</p> : null}\n      <UsageCard\n        t={t}\n        usage={usage}\n        apiKeyConfigured={state.anyAccountConfigured}\n        removingIds={state.accountsRemoving}\n        removableIds={state.accounts.map((account) => account.id)}\n        canManage={state.writable}\n        onRefresh={props.refreshUsage}\n        onRemoveAccount={props.removeAccount}\n      />\n      <AccountsCard\n        t={t}\n        state={state}\n        disabled={disabled}\n        onAdd={props.addAccount}\n        onRemove={props.removeAccount}\n        onLabel={props.editAccountLabel}\n        onKey={props.editAccountKey}\n        onToggleClear={(id) => props.toggleKeyClear(id)}\n        onActive={(text) => props.edit('activeAccount', text)}\n        onActiveReset={() => props.resetField('activeAccount')}\n      />\n      <RulesCard\n        t={t}\n        state={state}\n        disabled={disabled}\n        onAdd={props.addRule}\n        onRemove={props.removeRule}\n        onModels={props.editRuleModels}\n        onAccount={props.editRuleAccount}\n      />\n      <VisibleModelsCard\n        t={t}\n        state={state}\n        disabled={disabled}\n        onSelect={props.editVisibleModels}\n        onClear={props.clearVisibleModels}\n      />\n      <div className=\"cc-card\">\n        <SecretKeyField\n          label={t('apiKey')}\n          hint={keyLocked ? t('apiKeyLocked') : t('apiKeyHint')}\n          state={state.apiKey}\n          disabled={disabled || keyLocked}\n          configured={state.apiKeyConfigured}\n          configuredLabel={t('apiKeySet')}\n          unconfiguredLabel={t('apiKeyUnset')}\n          clearStaged={state.apiKeyClearStaged}\n          showLabel={t('show')}\n          hideLabel={t('hide')}\n          clearLabel={t('usageKeyClear')}\n          clearStagedLabel={t('usageKeyClearStaged')}\n          undoClearLabel={t('usageUndoKeyClear')}\n          onEdit={(text) => props.edit('apiKey', text)}\n          onToggleClear={() => props.toggleKeyClear('default')}\n        />\n        <LoginRow\n          state={login}\n          disabled={disabled || keyLocked}\n          t={t}\n          onBegin={props.beginLogin}\n          onCancel={props.cancelLogin}\n        />\n      </div>\n      <AdvancedSection\n        state={state}\n        disabled={disabled}\n        t={t}\n        onEdit={props.edit}\n        onReset={props.resetField}\n      />\n      <div className=\"cc-footer\">\n        {state.failed ? <p className=\"cc-failed\" role=\"status\">{t('saveFailed')}</p> : null}\n        {savedVisible ? <p className=\"cc-saved\" role=\"status\">{t('saved')}</p> : null}\n        <Button variant=\"ghost\" size=\"sm\" disabled={!state.dirty || state.saving} onClick={props.discard}>\n          {t('discard')}\n        </Button>\n        <Button\n          variant=\"primary\"\n          size=\"sm\"\n          disabled={!state.dirty || state.invalid || state.saving}\n          onClick={props.save}\n        >\n          {t(state.saving ? 'saving' : 'save')}\n        </Button>\n      </div>\n      <p className=\"cc-version\">\n        Command Code Provider v{PLUGIN_VERSION}\n        {updateVersion !== undefined ? (\n          <>\n            {' · '}\n            <a\n              className=\"cc-versionLink\"\n              href={PLUGIN_RELEASES_URL}\n              target=\"_blank\"\n              rel=\"noreferrer\"\n              title={t('updateHint')}\n            >\n              v{updateVersion} {t('updateAvailable')}\n            </a>\n          </>\n        ) : null}\n      </p>\n    </section>\n  )\n}\n","/**\n * The Command Code configuration panel inside the harness Models settings page\n * (browser half). Rendered through the `settings.models.provider-card` keyed\n * slot available in dsh 0.1.2 (rc.1), registered with\n * `entryKey = 'llm-commandcode'` (the plugin's settings namespace, the key the\n * Models page dispatches for every Command Code provider row).\n *\n * The official Models page opens one editor card per provider row through its\n * own 编辑 button. For a namespace the page does not curate a layout for\n * (`llm-commandcode`), that editor is a bare shell — a pointer to\n * `settings.yaml` above a permanently disabled apply button. This panel takes\n * its place: the slot outlet renders right beside the official editor inside\n * the same row card, so the component watches the outlet's siblings and, while\n * the official editor is open, hides the useless shell and shows the real\n * controls in its slot — the credential/route badges, the API-key field,\n * official sign-in, and the discard/save footer. Closed, it renders nothing\n * and the row looks exactly like any other provider row.\n *\n * The slot's owner props (`configured`, `keyConfigured`) mirror what the\n * Models page already knows; the authoritative credential facts still come\n * from this plugin's `CommandCodeSettingsController` shared with the dedicated\n * settings page, so the two surfaces can never disagree about whether a key\n * is stored.\n *\n * A controller-less render (panel mounted before the section registered its\n * inject face — the composition runs one apply) degrades to the stateless\n * registration notice inside the opened panel.\n *\n * Styles ride the page stylesheet the client entry injects once (`cc-`\n * prefixed classes); the card adds no CSS of its own.\n */\n\nimport { useEffect, useRef, useState } from 'react'\nimport type { Translate } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { SettingsCommandCodeKey } from './locales.ts'\nimport type { SettingsPageState, StagedField } from './settings.ts'\nimport type { LoginPageState } from './login.ts'\nimport { LoginRow } from './login-row.tsx'\n\n/**\n * The Models-page extension slots, merged into the SlotMap with the exact\n * declarations dsh 0.1.2 (rc.1)'s ui-settings-models ships. The merge must\n * stay structurally identical to upstream's (kind/scope/owner), or a future\n * dsh carrying its own declaration would fail the duplicate-merge check at\n * compile time.\n */\ndeclare module '@deepseek-ai/dsh-client-ui-slots' {\n  interface SlotMap {\n    /** One provider card's adapter extension area, keyed by the row's settingsNs. */\n    'settings.models.provider-card': { kind: 'keyed'; scope: 'root'; owner: ProviderCardExtrasOwnerProps }\n    /** Ordered extension area after the provider rows and the add controls. */\n    'settings.models.footer': { kind: 'list'; scope: 'root'; owner: ModelsFooterOwnerProps }\n  }\n}\n\n/** The provider directory row as the Models page dispatches it. */\nexport interface ProviderDirectoryRow {\n  /** The provider route id (`commandcode` for this plugin). */\n  readonly provider: string\n  /** The row's display name. */\n  readonly displayName: string\n  /** The settings namespace the row configures (the slot's dispatch key). */\n  readonly settingsNs: string\n  /** The settings path the row's profile lives at. */\n  readonly settingsPath: readonly string[]\n  /** Whether the provider route is live. */\n  readonly active: boolean\n  /** Whether the adapter declares the route as shipped. */\n  readonly declared?: boolean\n}\n\n/** Owner share of one provider-card extension occurrence (upstream's shape). */\nexport interface ProviderCardExtrasOwnerProps {\n  /** The card's directory row. */\n  readonly provider: ProviderDirectoryRow\n  /** Whether any layer configures this provider (its profile resolves). */\n  readonly configured: boolean\n  /** The row's referenced api-key credential, confirmed configured by the page's join. */\n  readonly keyConfigured: boolean\n}\n\n/** Owner share of the footer area (the section supplies nothing). */\nexport interface ModelsFooterOwnerProps {\n  /** Marker field: footer owner props are intentionally empty. */\n  children?: never\n}\n\n/** Owner props the Models page supplies at its dispatch sites. */\nexport type ProviderCardOwnerProps = ProviderCardExtrasOwnerProps\n\n/**\n * The slot whose outlet anchors this panel inside the Models row — the\n * renderer's own `data-slot` attribute value, stable across builds (unlike\n * CSS-module class hashes).\n */\nexport const CARD_SLOT_KEY = 'settings.models.provider-card'\n\n/** The DOM facts the sibling lookup reads (satisfied by real Elements). */\nexport interface SlotWrapperSiblings {\n  previousElementSibling: { className: string } | null\n  nextElementSibling: { className: string } | null\n}\n\n/**\n * Find the official editor card among the slot outlet's siblings, or null\n * while it is closed. The Models page renders the editor as an immediate\n * sibling of the outlet wrapper — after it in a provider row (the target of\n * the row's 编辑 toggle), before it in the first-run setup card and the\n * add-provider card, where it is always open. The editor is the only such\n * sibling whose CSS module class carries the `editor` stem\n * (`<hash>_editor`); the row header and the add card's provider select\n * never do, so the lookup needs no hash knowledge.\n */\nexport function adjacentEditorCard(wrapper: SlotWrapperSiblings | null): { className: string } | null {\n  if (wrapper === null) return null\n  for (const sibling of [wrapper.previousElementSibling, wrapper.nextElementSibling]) {\n    if (sibling !== null && typeof sibling.className === 'string' && sibling.className.includes('editor')) {\n      return sibling\n    }\n  }\n  return null\n}\n\n/** The closed-panel style: the outlet stays mounted as the detection anchor. */\nconst HIDDEN_STYLE = { display: 'none' } as const\n\n/** Injected face the card's slot registration supplies. */\nexport interface CommandCodeCardProps {\n  t: Translate<SettingsCommandCodeKey>\n  useCommandCodeSettings<T>(selector: (state: SettingsPageState) => T): T\n  useCommandCodeLogin<T>(selector: (state: LoginPageState) => T): T\n  edit(field: string, text: string): void\n  save(): void\n  discard(): void\n  beginLogin(): void\n  cancelLogin(): void\n}\n\n/** The card's two postures. */\ntype CardMode =\n  | { kind: 'registration' }\n  | { kind: 'live'; ready: boolean; controllerConfigured: boolean; writable: boolean; apiKeyWritable: boolean }\n\n/**\n * Decide the card's posture from one settings snapshot. Pure: the component\n * subscribes once and passes the snapshot in, so hook order never depends\n * on the registration→live transition. (The owner facts stay on the\n * component — only the snapshot decides the posture.)\n */\nexport function cardMode(\n  snapshot: SettingsPageState | undefined,\n): CardMode {\n  if (snapshot === undefined) return { kind: 'registration' }\n  return {\n    kind: 'live',\n    ready: snapshot.available,\n    controllerConfigured: snapshot.apiKeyConfigured,\n    writable: snapshot.writable,\n    apiKeyWritable: snapshot.apiKeyWritable,\n  }\n}\n\n/** Status badge for the credential state (green when configured). */\nfunction StatusBadge({ ok, okLabel, pendingLabel }: {\n  ok: boolean\n  okLabel: string\n  pendingLabel: string\n}) {\n  return <span className={ok ? 'cc-badge' : 'cc-badgeMuted'}>{ok ? okLabel : pendingLabel}</span>\n}\n\n/** Compact key field for the not-configured card. */\nfunction CardKeyField({ state, disabled, t, onEdit }: {\n  state: StagedField\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onEdit(text: string): void\n}) {\n  const [visible, setVisible] = useState(false)\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor=\"cc-card-api-key\">{t('apiKey')}</label>\n        <span className=\"cc-badges\">\n          <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={() => setVisible((value) => !value)}>\n            {visible ? t('hide') : t('show')}\n          </button>\n        </span>\n      </div>\n      <input\n        id=\"cc-card-api-key\"\n        className=\"cc-input\"\n        type={visible ? 'text' : 'password'}\n        autoComplete=\"off\"\n        spellCheck={false}\n        value={state.text}\n        disabled={disabled}\n        onChange={(event) => onEdit(event.target.value)}\n      />\n      <p className=\"cc-hint\">{t('apiKeyHint')}</p>\n    </div>\n  )\n}\n\n/**\n * The slot component body. Dispatched on every Command Code provider card of\n * the Models page (saved row, first-run setup posture, and add-provider\n * draft).\n *\n * Closed (the official 编辑 toggle off) the panel renders nothing: the row\n * head the Models page owns already names the provider and shows the\n * credential dot, so a page full of providers stays compact. Opening the\n * official editor mounts the editor shell as the outlet's sibling; the panel\n * watches for it, hides the shell (it carries only the settings.yaml hint and\n * a disabled apply for this namespace), and shows the real controls — badges,\n * API-key field, sign-in, discard/save.\n */\nexport function CommandCodeProviderCard(props: CommandCodeCardProps & ProviderCardOwnerProps) {\n  const { t } = props\n  // Single subscription: the whole snapshot drives posture + body together.\n  const state = props.useCommandCodeSettings !== undefined\n    ? props.useCommandCodeSettings((snapshot) => snapshot)\n    : undefined\n  const mode = cardMode(state)\n  const login = props.useCommandCodeLogin !== undefined\n    ? props.useCommandCodeLogin((snapshot) => snapshot)\n    : undefined\n  const dirty = state?.dirty ?? false\n  const saving = state?.saving ?? false\n  const invalid = state?.invalid ?? false\n  const failed = state?.failed ?? false\n  const savingBlocked = !dirty || invalid\n  const configured = mode.kind === 'live' && mode.ready ? mode.controllerConfigured : props.keyConfigured\n  const disabled = mode.kind === 'live' && (!mode.writable || (state !== undefined && !mode.apiKeyWritable))\n  const showBody = mode.kind === 'live' && mode.ready && state !== undefined\n  // The official editor's open state lives in the Models page's own component\n  // state and never reaches this slot's props; the outlet wrapper is the\n  // stable neighbor, so watch its siblings for the editor's mount/unmount.\n  // The outlet stays mounted either way — it is the observation anchor — so\n  // the closed panel hides its own root instead of unmounting.\n  const rootRef = useRef<HTMLDivElement | null>(null)\n  const [editorOpen, setEditorOpen] = useState(false)\n  useEffect(() => {\n    const root = rootRef.current\n    if (root === null || typeof MutationObserver === 'undefined') return\n    const wrapper = root.closest(`[data-slot=\"${CARD_SLOT_KEY}\"]`) ?? root.parentElement\n    if (wrapper === null) return\n    const row = wrapper.parentElement\n    if (row === null) return\n    let hiddenEditor: HTMLElement | null = null\n    const sync = () => {\n      const editor = adjacentEditorCard(wrapper) as HTMLElement | null\n      setEditorOpen(editor !== null)\n      if (editor !== null) {\n        // React pins no inline style on the editor shell, so this survives\n        // the shell's own re-renders; a shell that unmounts and remounts is\n        // re-hidden by the next observation.\n        editor.style.display = 'none'\n        hiddenEditor = editor\n      }\n    }\n    sync()\n    const observer = new MutationObserver(sync)\n    observer.observe(row, { childList: true })\n    return () => {\n      observer.disconnect()\n      // If the shell outlives the panel (plugin reload), give it back: the\n      // settings.yaml hint is the honest fallback face again.\n      if (hiddenEditor !== null) hiddenEditor.style.display = ''\n    }\n  }, [])\n  return (\n    <div\n      ref={rootRef}\n      className=\"cc-providerCard\"\n      data-cc-models-card=\"true\"\n      style={editorOpen ? undefined : HIDDEN_STYLE}\n    >\n      {editorOpen && mode.kind === 'registration' ? <p className=\"cc-hint\">{t('cardRegistrationHint')}</p> : null}\n      {editorOpen && mode.kind === 'live' && !mode.ready ? <p className=\"cc-hint\">{t('cardLoadingHint')}</p> : null}\n      {editorOpen && showBody ? (\n        <>\n          <div className=\"cc-field\">\n            <div className=\"cc-fieldHead\">\n              <span className=\"cc-label\">{t('cardTitle')}</span>\n              <span className=\"cc-badges\">\n                <StatusBadge ok={configured} okLabel={t('apiKeySet')} pendingLabel={t('apiKeyUnset')} />\n                {props.provider.active ? <span className=\"cc-badge\">{t('cardRouteActive')}</span> : null}\n              </span>\n            </div>\n          </div>\n          <CardKeyField\n            state={state.apiKey}\n            disabled={disabled}\n            t={t}\n            onEdit={(text) => props.edit('apiKey', text)}\n          />\n          {login !== undefined ? (\n            <LoginRow\n              state={login}\n              disabled={disabled}\n              t={t}\n              onBegin={props.beginLogin}\n              onCancel={props.cancelLogin}\n            />\n          ) : null}\n          <div className=\"cc-footer\">\n            {failed ? <p className=\"cc-failed\" role=\"status\">{t('saveFailed')}</p> : null}\n            <button\n              type=\"button\"\n              className=\"cc-reset\"\n              disabled={!dirty || saving}\n              onClick={props.discard}\n            >\n              {t('discard')}\n            </button>\n            <button\n              type=\"button\"\n              className=\"cc-reset\"\n              disabled={savingBlocked || saving}\n              onClick={props.save}\n            >\n              {t(saving ? 'saving' : 'save')}\n            </button>\n          </div>\n        </>\n      ) : null}\n    </div>\n  )\n}\n","/**\n * Locale copy for the \"Command Code\" settings page, and the declaration that\n * merges the page's namespace into the framework's `LocaleNamespaceMap` so\n * `ctx.locale.register` / `ctx.slots.register(..., { locale })` are typed.\n *\n * zh is the source of truth for the key set (repo convention); en must carry\n * the exact same keys — a mismatch is a compile error at the register site.\n */\ndeclare module '@deepseek-ai/dsh-client-ui-slots' {\n  interface LocaleNamespaceMap {\n    /** Copy of the Command Code settings page. */\n    'settings.commandcode': SettingsCommandCodeKey\n  }\n}\n\n/** Dictionary keys of the Command Code settings page. */\nexport type SettingsCommandCodeKey =\n  | 'nav'\n  | 'title'\n  | 'intro'\n  | 'apiKey'\n  | 'apiKeyHint'\n  | 'apiKeySet'\n  | 'apiKeyUnset'\n  | 'apiKeyLocked'\n  | 'apiBase'\n  | 'apiBaseHint'\n  | 'workingDir'\n  | 'workingDirHint'\n  | 'requestTimeoutMs'\n  | 'requestTimeoutMsHint'\n  | 'streamIdleTimeoutMs'\n  | 'streamIdleTimeoutMsHint'\n  | 'advancedSettings'\n  | 'advancedSettingsHint'\n  | 'advancedOverriddenOne'\n  | 'advancedOverriddenMany'\n  | 'advancedInvalid'\n  | 'filterModelsByPlan'\n  | 'filterModelsByPlanHint'\n  | 'webSearch'\n  | 'webSearchHint'\n  | 'accountsTitle'\n  | 'accountsHint'\n  | 'accountAdd'\n  | 'accountRemove'\n  | 'accountLabel'\n  | 'accountKey'\n  | 'accountKeyHint'\n  | 'accountDefault'\n  | 'activeAccount'\n  | 'activeAccountAuto'\n  | 'activeAccountHint'\n  | 'rulesTitle'\n  | 'rulesHint'\n  | 'rulesEmpty'\n  | 'rulesCatalogFailed'\n  | 'ruleAdd'\n  | 'ruleRemove'\n  | 'ruleModel'\n  | 'ruleModelPick'\n  | 'ruleModelCount'\n  | 'ruleAccount'\n  | 'ruleHint'\n  | 'modelSearchPlaceholder'\n  | 'modelSearchEmpty'\n  | 'modelStale'\n  | 'visibleModelsTitle'\n  | 'visibleModelsHint'\n  | 'visibleModelsPick'\n  | 'visibleModelsCount'\n  | 'visibleModelsShowAll'\n  | 'visibleModelsStaleHint'\n  | 'visibleModelsCleanStale'\n  | 'overridden'\n  | 'reset'\n  | 'invalidNumber'\n  | 'numberTooSmall'\n  | 'numberTooLarge'\n  | 'readOnly'\n  | 'unsaved'\n  | 'save'\n  | 'saving'\n  | 'saved'\n  | 'saveFailed'\n  | 'discard'\n  | 'cancel'\n  | 'show'\n  | 'hide'\n  | 'usageTitle'\n  | 'usageRefresh'\n  | 'usageRefreshing'\n  | 'usageLoading'\n  | 'usageNoKey'\n  | 'usageError'\n  | 'usageRequests'\n  | 'usageFailed'\n  | 'usageSuccessRate'\n  | 'usageCost'\n  | 'usageTokens'\n  | 'usageTokensIn'\n  | 'usageTokensOut'\n  | 'usageMonthly'\n  | 'usagePurchased'\n  | 'usageFree'\n  | 'usageFiveHour'\n  | 'usageWeekly'\n  | 'usageExceeded'\n  | 'usageReset'\n  | 'usagePartial'\n  | 'usageKeyClear'\n  | 'usageKeyClearStaged'\n  | 'usageUndoKeyClear'\n  | 'usageKeyInvalid'\n  | 'usageKeyInvalidHint'\n  | 'usageServiceUnavailable'\n  | 'usageServiceUnavailableHint'\n  | 'usageNetworkError'\n  | 'usageNetworkHint'\n  | 'usageUpdated'\n  | 'usagePeriodEnd'\n  | 'usageActive'\n  | 'usageCooldown'\n  | 'usageInvalidKey'\n  | 'usageUnconfigured'\n  | 'updateAvailable'\n  | 'updateHint'\n  | 'loginTitle'\n  | 'loginHintIdle'\n  | 'loginButton'\n  | 'loginStarting'\n  | 'loginWaiting'\n  | 'loginOpenLink'\n  | 'loginCancel'\n  | 'loginSuccess'\n  | 'loginUnavailable'\n  | 'loginDenied'\n  | 'loginTimeout'\n  | 'loginInvalidKey'\n  | 'loginNetwork'\n  | 'loginStoreFailed'\n  | 'loginCancelled'\n  | 'loginFailedGeneric'\n  | 'cardTitle'\n  | 'cardRouteActive'\n  | 'cardLoadingHint'\n  | 'cardRegistrationHint'\n\nexport const zh: Record<SettingsCommandCodeKey, string> = {\n  nav: 'Command Code',\n  title: 'Command Code',\n  intro:\n    '配置 Command Code Provider 连接。API 密钥仅保存在本机凭据服务中，不会回显；'\n    + '其他字段写入用户设置，下次请求即生效。',\n  apiKey: 'API 密钥',\n  apiKeyHint: '在 commandcode.ai 控制台创建。留空保存不会覆盖已存储的密钥。',\n  apiKeySet: '已配置',\n  apiKeyUnset: '未配置',\n  apiKeyLocked: '密钥由只读来源提供',\n  apiBase: 'API 地址',\n  apiBaseHint: '默认 https://api.commandcode.ai，一般无需修改。',\n  workingDir: '工作目录',\n  workingDirHint: '可选。留空时使用占位符显示的进程工作目录；仅在需要固定路径时填写。',\n  requestTimeoutMs: '请求超时（毫秒）',\n  requestTimeoutMsHint: '等待响应首个字节的超时；默认 60000。',\n  streamIdleTimeoutMs: '流空闲超时（毫秒）',\n  streamIdleTimeoutMsHint: '生成流停滞多久视为断连；默认 300000（长思考模型可静默数分钟，默认值刻意放宽）。',\n  advancedSettings: '高级设置',\n  advancedSettingsHint: 'API 地址、工作目录、超时与模型过滤等不常修改的选项。',\n  advancedOverriddenOne: '已自定义 1 项',\n  advancedOverriddenMany: '已自定义 {count} 项',\n  advancedInvalid: '高级设置中有未填好的数字，请展开修正后再保存。',\n  filterModelsByPlan: '隐藏套餐外模型',\n  filterModelsByPlanHint: '开启后，模型选择器只列出当前套餐可用的模型；账户持有按需余额时会显示全部。',\n  webSearch: '用 Command Code 承载联网搜索',\n  webSearchHint: '开启后，dsh 的 web_search 工具由 Command Code 承担（复用同一个 API key 与地址），并优先于其他搜索后端；关闭则把选择权交还给之前的后端（如 modsearch），而不是强制回退到 DeepSeek 搜索。',\n  accountsTitle: '多账户轮换',\n  accountsHint: '当前账户达到用量限额（429）或密钥失效（401）时，请求自动切换到下一个账户；全部耗尽时会提示最早的重置时间。',\n  accountAdd: '添加账户',\n  accountRemove: '移除',\n  accountLabel: '账户备注名',\n  accountKey: 'API 密钥',\n  accountKeyHint: '该账户的 API 密钥。留空保存不会覆盖已存储的密钥。',\n  accountDefault: '默认账户',\n  activeAccount: '当前使用账户',\n  activeAccountAuto: '自动（第一个可用账户）',\n  activeAccountHint: '手动指定优先使用的账户，保存后下次请求即生效；所选账户耗尽时仍会自动切换到其他可用账户。',\n  rulesTitle: '按模型切换账户',\n  rulesHint: '选择模型并路由到某个账户（可多选）。命中规则的模型且该账户可用时优先使用；账户耗尽或密钥失效时仍自动回落到其他账户。规则按列表顺序匹配，第一条命中生效。',\n  rulesEmpty: '尚未配置规则。',\n  rulesCatalogFailed: '模型目录获取失败，暂时无法选择模型；已保存的规则仍会生效。',\n  ruleAdd: '添加规则',\n  ruleRemove: '移除',\n  ruleModel: '模型',\n  ruleModelPick: '选择模型…',\n  ruleModelCount: '已选 {count} 个模型',\n  ruleAccount: '目标账户',\n  ruleHint: '从下拉列表勾选要路由的模型（可多选），再选择目标账户。',\n  modelSearchPlaceholder: '搜索模型…',\n  modelSearchEmpty: '没有匹配的模型。',\n  modelStale: '已下架',\n  visibleModelsTitle: '模型白名单',\n  visibleModelsHint:\n    '勾选要保留的模型，模型选择器就只列出这些；一个都不勾选时则显示全部模型。'\n    + '保存后，下次打开模型选择器生效。',\n  visibleModelsPick: '选择要保留的模型…',\n  visibleModelsCount: '已选 {count} 个模型',\n  visibleModelsShowAll: '显示全部',\n  visibleModelsStaleHint: '有 {count} 个已选模型在目录中找不到了（可能已下架），不影响其他模型；可清理或保留。',\n  visibleModelsCleanStale: '清理失效（{count}）',\n  overridden: '已覆盖',\n  reset: '重置',\n  invalidNumber: '无效数字',\n  numberTooSmall: '不能小于 1（毫秒）',\n  numberTooLarge: '超出允许上限（2147483647 毫秒）',\n  readOnly: '当前配置为只读。',\n  unsaved: '未保存',\n  save: '保存',\n  saving: '保存中',\n  saved: '已保存 ✓',\n  saveFailed: '保存失败，请重试。',\n  discard: '放弃',\n  cancel: '取消',\n  show: '显示',\n  hide: '隐藏',\n  usageTitle: '账户用量',\n  usageRefresh: '刷新',\n  usageRefreshing: '刷新中…',\n  usageLoading: '正在获取账户用量…',\n  usageNoKey: '配置 API 密钥后，这里会显示账户的用量与额度状态。',\n  usageError: '用量获取失败',\n  usageRequests: '请求',\n  usageFailed: '失败',\n  usageSuccessRate: '成功率',\n  usageCost: '花费',\n  usageTokens: 'Token',\n  usageTokensIn: '入',\n  usageTokensOut: '出',\n  usageMonthly: '月额度',\n  usagePurchased: '已购',\n  usageFree: '赠送',\n  usageFiveHour: '5 小时窗口',\n  usageWeekly: '每周窗口',\n  usageExceeded: '已超限',\n  usageReset: '重置于',\n  usagePartial: '部分端点数据不可用',\n  usageKeyClear: '清除已存密钥',\n  usageKeyClearStaged: '将清除（保存后生效）',\n  usageUndoKeyClear: '撤销清除',\n  usageKeyInvalid: 'API 密钥无效或已过期',\n  usageKeyInvalidHint: '服务端拒绝了全部请求（401）。请检查该账户配置的密钥，或到 commandcode.ai 控制台重新生成。',\n  usageServiceUnavailable: 'Command Code 服务暂时不可用',\n  usageServiceUnavailableHint: '服务端返回了错误（5xx），稍后点击刷新重试。',\n  usageNetworkError: '无法连接 Command Code 服务',\n  usageNetworkHint: '所有请求都没有到达服务端。请检查网络连接或 API 地址设置。',\n  usageUpdated: '更新于',\n  usagePeriodEnd: '账期截止',\n  usageActive: '当前使用',\n  usageCooldown: '限额冷却中',\n  usageInvalidKey: '密钥无效',\n  usageUnconfigured: '该账户尚未配置 API 密钥。',\n  updateAvailable: '可更新',\n  updateHint: '已发布新版本，点击查看发布说明；更新插件后刷新本页，提示会自动消失。',\n  loginTitle: '通过官方登录获取密钥',\n  loginHintIdle: '不想手动创建密钥？点击登录后浏览器会打开 commandcode.ai 授权页，完成后密钥自动写入本机凭据服务，下次请求即生效。',\n  loginButton: '登录 Command Code',\n  loginStarting: '正在启动本地回调服务…',\n  loginWaiting: '等待在浏览器中完成授权…',\n  loginOpenLink: '打开授权页面 ↗',\n  loginCancel: '取消登录',\n  loginSuccess: '已登录为',\n  loginUnavailable: '此环境暂不支持登录流程，请手动粘贴密钥。',\n  loginDenied: '授权被拒绝。可重试，或手动粘贴密钥。',\n  loginTimeout: '等待超时：未在窗口期内收到授权回调，请重试。',\n  loginInvalidKey: '获取到的密钥未通过校验（401），请重试或手动粘贴。',\n  loginNetwork: '无法连接 Command Code 服务校验密钥，请检查网络后重试。',\n  loginStoreFailed: '密钥无法写入本机凭据服务，请手动粘贴。',\n  loginCancelled: '登录已取消。',\n  loginFailedGeneric: '登录失败，请重试或手动粘贴密钥。',\n  cardTitle: 'Command Code',\n  cardRouteActive: '已启用',\n  cardLoadingHint: '正在读取 Command Code 配置…',\n  cardRegistrationHint: '此卡片随 Command Code 插件注册，需要较新版本的 DeepSeek Harness 才会显示完整内容。',\n}\n\nexport const en: Record<SettingsCommandCodeKey, string> = {\n  nav: 'Command Code',\n  title: 'Command Code',\n  intro:\n    'Configure the Command Code Provider connection. The API key is stored only'\n    + ' in the local credential service and never echoed; other fields are written'\n    + ' to user settings and take effect on the next request.',\n  apiKey: 'API key',\n  apiKeyHint: 'Create one in the commandcode.ai console. Saving with this field'\n    + ' blank keeps the stored key.',\n  apiKeySet: 'Configured',\n  apiKeyUnset: 'Not configured',\n  apiKeyLocked: 'Key provided by a read-only source',\n  apiBase: 'API base URL',\n  apiBaseHint: 'Defaults to https://api.commandcode.ai; usually leave as-is.',\n  workingDir: 'Working directory',\n  workingDirHint: 'Optional. Leave blank to use the process cwd shown as the'\n    + ' placeholder; fill in only to pin a specific path.',\n  requestTimeoutMs: 'Request timeout (ms)',\n  requestTimeoutMsHint: 'Time to wait for the first response byte; default 60000.',\n  streamIdleTimeoutMs: 'Stream idle timeout (ms)',\n  streamIdleTimeoutMsHint: 'How long a stalled stream is treated as dead; default 300000'\n    + ' (deliberately generous — long-thinking models can stay silent for minutes).',\n  advancedSettings: 'Advanced',\n  advancedSettingsHint: 'Rarely touched options: API base URL, working directory, timeouts, and model filtering.',\n  advancedOverriddenOne: '1 customized',\n  advancedOverriddenMany: '{count} customized',\n  advancedInvalid: 'A number in Advanced settings is not ready to save; expand to fix it.',\n  filterModelsByPlan: 'Hide out-of-plan models',\n  filterModelsByPlanHint: 'When on, the model picker lists only models your subscription'\n    + ' includes; any on-demand credit balance shows the full catalog.',\n  webSearch: 'Serve dsh web search with Command Code',\n  webSearchHint: 'When on, the model-facing web_search tool is backed by Command Code'\n    + ' (same API key and base URL as chat), winning over other search backends.'\n    + ' Off hands the selection back to the previous backend (e.g. modsearch)'\n    + ' instead of forcing the shipped DeepSeek search.',\n  accountsTitle: 'Account rotation',\n  accountsHint: 'When the active account hits its usage limit (429) or its key'\n    + ' fails (401), requests switch to the next account; when every account is'\n    + ' exhausted the error names the earliest window reset.',\n  accountAdd: 'Add account',\n  accountRemove: 'Remove',\n  accountLabel: 'Account label',\n  accountKey: 'API key',\n  accountKeyHint: 'This account’s API key. Saving with the field blank keeps the stored key.',\n  accountDefault: 'Default account',\n  activeAccount: 'Active account',\n  activeAccountAuto: 'Auto (first usable account)',\n  activeAccountHint: 'Pin the preferred account; applies to the next request after saving.'\n    + ' If the selected account is exhausted, requests still rotate to another usable account.',\n  rulesTitle: 'Route models to accounts',\n  rulesHint: 'Pick models (multi-select) and route them to an account. When the'\n    + ' request’s model is in a rule and that account is usable, it serves;'\n    + ' an exhausted or invalid routed account falls back to the normal rotation.'\n    + ' Rules match in list order — the first hit wins.',\n  rulesEmpty: 'No rules yet.',\n  rulesCatalogFailed: 'Could not load the model catalog — selecting models is unavailable; saved rules still apply.',\n  ruleAdd: 'Add rule',\n  ruleRemove: 'Remove',\n  ruleModel: 'Models',\n  ruleModelPick: 'Select models…',\n  ruleModelCount: '{count} model(s) selected',\n  ruleAccount: 'Target account',\n  ruleHint: 'Check the models to route from the dropdown (multi-select), then pick the target account.',\n  modelSearchPlaceholder: 'Search models…',\n  modelSearchEmpty: 'No matching models.',\n  modelStale: 'Retired',\n  visibleModelsTitle: 'Model allowlist',\n  visibleModelsHint:\n    'Check the models you want to keep, and model pickers will list only those. '\n    + 'If nothing is checked, every model is shown. After saving, the change '\n    + 'applies the next time you open a model picker.',\n  visibleModelsPick: 'Select models to keep…',\n  visibleModelsCount: '{count} model(s) selected',\n  visibleModelsShowAll: 'Show all',\n  visibleModelsStaleHint: '{count} selected model(s) are no longer in the catalog (possibly retired);'\n    + ' other models are unaffected. Clean them up or keep them.',\n  visibleModelsCleanStale: 'Clean stale ({count})',\n  overridden: 'Overridden',\n  reset: 'Reset',\n  invalidNumber: 'Invalid number',\n  numberTooSmall: 'Must be at least 1 (ms)',\n  numberTooLarge: 'Above the allowed maximum (2147483647 ms)',\n  readOnly: 'Settings are read-only.',\n  unsaved: 'Unsaved',\n  save: 'Save',\n  saving: 'Saving',\n  saved: 'Saved ✓',\n  saveFailed: 'Save failed, please retry.',\n  discard: 'Discard',\n  cancel: 'Cancel',\n  show: 'Show',\n  hide: 'Hide',\n  usageTitle: 'Account usage',\n  usageRefresh: 'Refresh',\n  usageRefreshing: 'Refreshing…',\n  usageLoading: 'Fetching account usage…',\n  usageNoKey: 'Configure an API key to see this account’s usage and credit state here.',\n  usageError: 'Could not fetch usage',\n  usageRequests: 'Requests',\n  usageFailed: 'failed',\n  usageSuccessRate: 'Success rate',\n  usageCost: 'Spend',\n  usageTokens: 'Tokens',\n  usageTokensIn: 'in',\n  usageTokensOut: 'out',\n  usageMonthly: 'Monthly',\n  usagePurchased: 'Purchased',\n  usageFree: 'Free',\n  usageFiveHour: '5-hour window',\n  usageWeekly: 'Weekly window',\n  usageExceeded: 'Exceeded',\n  usageReset: 'Resets',\n  usagePartial: 'Some endpoint data unavailable',\n  usageKeyClear: 'Clear stored key',\n  usageKeyClearStaged: 'Will be cleared on save',\n  usageUndoKeyClear: 'Undo clear',\n  usageKeyInvalid: 'API key invalid or expired',\n  usageKeyInvalidHint: 'The server rejects every request (401). Check the key configured for this account, or generate a new one in the commandcode.ai console.',\n  usageServiceUnavailable: 'The Command Code service is temporarily unavailable',\n  usageServiceUnavailableHint: 'The server returned errors (5xx); try Refresh again later.',\n  usageNetworkError: 'Could not reach the Command Code service',\n  usageNetworkHint: 'No request reached the server. Check your network connection or the API base setting.',\n  usageUpdated: 'Updated',\n  usagePeriodEnd: 'Period ends',\n  usageActive: 'Active',\n  usageCooldown: 'Cooling down',\n  usageInvalidKey: 'Invalid key',\n  usageUnconfigured: 'No API key configured for this account yet.',\n  updateAvailable: 'update available',\n  updateHint: 'A newer version has been published; click for release notes. The notice disappears once the plugin is updated.',\n  loginTitle: 'Sign in to fetch a key',\n  loginHintIdle: 'Rather not create a key by hand? Sign in and your browser opens the commandcode.ai authorization page; the approved key is stored in the local credential service and applies to the next request.',\n  loginButton: 'Sign in to Command Code',\n  loginStarting: 'Starting the local callback server…',\n  loginWaiting: 'Waiting for authorization in your browser…',\n  loginOpenLink: 'Open the authorization page ↗',\n  loginCancel: 'Cancel sign-in',\n  loginSuccess: 'Signed in as',\n  loginUnavailable: 'Sign-in is unavailable in this environment; paste the API key instead.',\n  loginDenied: 'Authorization was denied. Try again or paste the key manually.',\n  loginTimeout: 'Timed out waiting for the authorization callback; try again.',\n  loginInvalidKey: 'The delivered key failed validation (401). Try again or paste it manually.',\n  loginNetwork: 'Could not reach the Command Code service to validate the key; check your network and retry.',\n  loginStoreFailed: 'The key could not be stored in the local credential service; paste it manually.',\n  loginCancelled: 'Sign-in cancelled.',\n  loginFailedGeneric: 'Sign-in failed; try again or paste the key manually.',\n  cardTitle: 'Command Code',\n  cardRouteActive: 'Active',\n  cardLoadingHint: 'Loading the Command Code configuration…',\n  cardRegistrationHint: 'This card is contributed by the Command Code plugin; a newer DeepSeek Harness is needed to show the full controls.',\n}\n","/**\n * Browser half of the dsh-commandcode-provider bundle.\n *\n * Two responsibilities:\n *\n * 1. A \"Command Code\" settings page (a `settings.section` entry at the same\n *    nav level as General / Models / Plugins). The Models page renders an\n *    unknown-adapter-family card for the `commandcode` provider and disables\n *    its submit, so the API key cannot be configured there; this page is the\n *    dedicated surface. It writes the API key through the credentials domain\n *    (the `COMMANDCODE_API_KEY` reference the plugin resolves via\n *    `ctx.remote.credentials`) and the connection facts through the\n *    `llm-commandcode` settings namespace, so a saved key or endpoint reaches\n *    the very next request.\n *\n * 2. The Models-page provider card (settings.models.provider-card) and the\n *    friendly image-gate error wrapper — see `./card.tsx` / `./sessions.ts`.\n *    The wrapper is deliberately narrow: only the `model-unavailable` code is\n *    rewritten, only when the message matches the image-session gate, and only\n *    the message text changes.\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\nimport { createSnapshotStore } from './snapshot-store.ts'\n// Type-only imports that pull in the client-service augmentations\n// (`slots`/`remote`/`locale` on Context) and the `settings.section` SlotMap\n// entry (`settingsScope` arrives through dsh-client-ui-settings).\nimport type {} from '@deepseek-ai/dsh-api-remotes/client'\nimport type {} from '@deepseek-ai/dsh-client-locale/client'\nimport type {} from '@deepseek-ai/dsh-client-ui-renderer/client'\nimport type {} from '@deepseek-ai/dsh-client-ui-settings/client'\nimport { installFriendlyImageError } from './sessions.ts'\nimport type { ConnectionLike } from './sessions.ts'\nimport { CommandCodeSettingsController, COMMANDCODE_NS, type SettingsPageState } from './settings.ts'\nimport type { HostDescriptionSource, SettingsPageApi } from './settings.ts'\nimport { adaptLegacyCredentials, type LegacyCredentialsApi } from './legacy-credentials.ts'\nimport { CommandCodeUsageController, type UsagePageState, type UsageRemote } from './usage.ts'\nimport { CommandCodeLoginController, type LoginPageState, type LoginRemote } from './login.ts'\nimport { USAGE_REMOTE_CONTRIBUTION, MODELS_REMOTE_CONTRIBUTION } from '../usage-wire.ts'\nimport { LOGIN_REMOTE_CONTRIBUTION } from '../login-wire.ts'\nimport type { TypertRemoteContribution } from '@deepseek-ai/dsh-typert-protocol'\nimport { CommandCodeSettingsPage } from './section.tsx'\nimport { CommandCodeProviderCard } from './card.tsx'\nimport { zh, en } from './locales.ts'\n\nexport { isImageSessionRejection, withFriendlyImageError } from './sessions.ts'\n\n/** CSS for the settings page, injected once (harness bundle convention). */\nconst PAGE_CSS = `\n.cc-section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex}\n.cc-title{margin:0;font-size:18px;font-weight:600}\n.cc-intro{color:var(--dsw-alias-label-tertiary);margin:0;font-size:13px;line-height:1.5}\n.cc-readOnly{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}\n.cc-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:4px 16px}\n.cc-field{flex-direction:column;gap:6px;padding:12px 0;display:flex}\n.cc-field+.cc-field{border-top:1px solid var(--dsw-alias-border-l2)}\n.cc-fieldHead{align-items:center;gap:8px;display:flex}\n.cc-label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}\n.cc-badges{align-items:center;gap:8px;display:inline-flex}\n.cc-badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}\n.cc-badgeMuted{white-space:nowrap;color:var(--dsw-alias-label-tertiary);border-radius:999px;padding:1px 8px;font-size:11px;line-height:17px}\n.cc-reset{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}\n.cc-reset:hover:not(:disabled){color:var(--dsw-alias-label-primary)}\n.cc-reset:disabled{cursor:default;opacity:.5}\n.cc-input{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}\n.cc-input:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}\n.cc-input:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}\n/* The routing-rule model multi-select: a button trigger that opens an\n * anchored Menu of checkbox rows. The trigger mirrors .cc-input sizing so it\n * sits flush with the sibling account select. */\n.cc-ruleTrigger{align-items:center;gap:8px;display:flex;width:100%;text-align:left;cursor:pointer}\n.cc-ruleTrigger:disabled{cursor:default}\n.cc-ruleTriggerText{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.cc-ruleCaret{flex-shrink:0;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);width:6px;height:6px;margin-right:4px;margin-bottom:2px;transform:rotate(45deg)}\n.cc-checkRow{align-items:center;gap:8px;display:inline-flex;min-width:0}\n.cc-checkRow:hover{cursor:pointer}\n.cc-check{appearance:none;flex-shrink:0;width:15px;height:15px;margin:0;border:1px solid var(--dsw-alias-border-l2);border-radius:4px;background:var(--dsw-alias-bg-layer-1);position:relative}\n.cc-check:checked{background:var(--dsw-alias-brand-primary);border-color:var(--dsw-alias-brand-primary)}\n.cc-check:checked::after{content:'';position:absolute;top:2px;left:5px;width:3px;height:7px;border:solid #fff;border-width:0 1.5px 1.5px 0;transform:rotate(45deg)}\n.cc-checkName{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n/* The model multi-select search box: stacked under the trigger while the\n * dropdown is open, same input sizing so the pair reads as one control. The\n * box lives inside the Menu anchor (which renders inside the Menu's root\n * span), so focusing/typing it never trips the Menu's outside-click close. */\n.cc-modelSelectAnchor{flex-direction:column;gap:6px;display:flex;width:100%}\n.cc-modelSearch{width:100%}\n.cc-modelSearch::-webkit-search-cancel-button{cursor:pointer}\n/* Selects need their own treatment to sit flush with the text inputs:\n * the UA stylesheet renders <select> border-box (34px total vs the inputs'\n * 36px) and forces its own menulist text metrics, so drop the native\n * chrome entirely (appearance:none), restore content-box so the outer box\n * matches the inputs again, and draw the chevron ourselves. Longhand\n * background-* only — the shorthand would reset .cc-input's background. */\nselect.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box-sizing:content-box;padding-right:32px;background-image:url(\"data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='7' viewBox='0 0 12 7'%3E%3Cpath d='M1 1l5 5 5-5' fill='none' stroke='%23888f98' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E\");background-repeat:no-repeat;background-position:right 11px center}\n.cc-inputInvalid{border-color:var(--dsw-alias-label-error)}\n.cc-invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}\n/* The Advanced card: its header row is one full-width toggle button; the\n * chevron is two borders on a rotated square (no icon dependency). */\n.cc-advancedHead{align-items:center;gap:8px;display:flex;width:100%;padding:12px 0;background:0 0;border:none;cursor:pointer;font:inherit;text-align:left}\n.cc-advancedHead:hover .cc-advancedTitle{color:var(--dsw-alias-label-primary)}\n.cc-advancedTitle{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:500;line-height:1.5}\n.cc-advancedSpacer{flex:1}\n.cc-chevron{flex-shrink:0;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);width:8px;height:8px;margin-right:4px;margin-bottom:2px;transform:rotate(45deg);transition:transform .15s ease}\n.cc-chevronUp{transform:rotate(-135deg);margin-bottom:-3px}\n.cc-advancedBody{flex-direction:column;display:flex}\n.cc-advancedBody>.cc-field:first-of-type{border-top:1px solid var(--dsw-alias-border-l2)}\n.cc-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}\n.cc-footer{justify-content:flex-end;align-items:center;gap:8px;display:flex}\n.cc-toggleRow{align-items:center;gap:8px;cursor:pointer;display:flex}\n.cc-toggleRow:has(.cc-toggle:disabled){cursor:default}\n.cc-toggle{appearance:none;flex-shrink:0;background:var(--dsw-alias-border-l2);border-radius:999px;width:30px;height:18px;margin:0;cursor:pointer;position:relative;transition:background .15s ease}\n.cc-toggle:checked{background:var(--dsw-alias-brand-primary)}\n.cc-toggle::after{content:'';background:#fff;border-radius:50%;width:14px;height:14px;position:absolute;top:2px;left:2px;transition:left .15s ease}\n.cc-toggle:checked::after{left:14px}\n.cc-toggle:disabled{cursor:default;opacity:.5}\n.cc-failed{min-width:0;color:var(--dsw-alias-label-error);flex:1;margin:0;font-size:12px;line-height:1.5}\n.cc-usageCard{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:14px 16px;flex-direction:column;gap:12px;display:flex}\n.cc-usageHead{align-items:center;gap:8px;display:flex}\n.cc-usageTitle{color:var(--dsw-alias-label-primary);flex:1;margin:0;font-size:13px;font-weight:600;line-height:1.5}\n.cc-usageAccount{max-width:40%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}\n.cc-usagePlan{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-brand-primary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:600;line-height:17px}\n.cc-usagePlanStatus{white-space:nowrap;color:var(--dsw-alias-label-error);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}\n.cc-usageRefresh{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}\n.cc-usageRefresh:hover:not(:disabled){color:var(--dsw-alias-label-primary)}\n.cc-usageRefresh:disabled{cursor:default;opacity:.5}\n.cc-usageHint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}\n.cc-usageError{align-items:center;gap:8px;color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5;display:flex}\n.cc-usageStats{grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:8px;display:grid}\n.cc-usageStat{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:8px;padding:8px 10px;flex-direction:column;gap:2px;display:flex}\n.cc-usageStatLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}\n.cc-usageStatValue{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}\n.cc-usageStatSub{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}\n.cc-usageWindows{flex-direction:column;gap:16px;display:flex}\n.cc-usageWindow{flex-direction:column;gap:6px;display:flex}\n.cc-usageWindowHead{align-items:baseline;gap:8px;display:flex}\n.cc-usageWindowLabel{color:var(--dsw-alias-label-secondary);flex:1;font-size:12px;font-weight:500;line-height:1.5}\n.cc-usageWindowValue{color:var(--dsw-alias-label-primary);font-size:12px;font-weight:500;line-height:1.5}\n.cc-usageExceeded{color:var(--dsw-alias-label-error);font-size:11px;font-weight:500;line-height:1.5}\n.cc-usageBar{overflow:hidden;background:var(--dsw-alias-bg-layer-1);border-radius:999px;height:6px}\n.cc-usageBarFill{background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}\n.cc-usageBarFillWarn{background:var(--dsw-alias-label-error)}\n@media (prefers-reduced-motion:reduce){.cc-chevron,.cc-toggle,.cc-toggle::after,.cc-usageBarFill{transition:none}}.cc-usageWindowReset{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}\n.cc-usageMeta{align-items:center;gap:8px;display:flex}\n.cc-accountReport{flex-direction:column;gap:12px;display:flex}\n.cc-tabs{flex-wrap:wrap;gap:6px;display:flex}\n.cc-tab{align-items:center;font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex;gap:6px}\n.cc-tab:hover:not(.cc-tabActive){color:var(--dsw-alias-label-primary)}\n.cc-tabActive{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-brand-primary)}\n.cc-tabDotOk{background:var(--dsw-alias-brand-primary);border-radius:50%;width:6px;height:6px}\n.cc-tabDotWarn{background:#d97706;border-radius:50%;width:6px;height:6px}\n.cc-tabDotError{background:var(--dsw-alias-label-error);border-radius:50%;width:6px;height:6px}\n.cc-usageMetaSpacer{flex:1}\n.cc-usageUpdated{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}\n.cc-usagePartial{color:var(--dsw-alias-label-error);margin:0;font-size:11px;line-height:1.5}\n.cc-usageBlocked{border:1px solid var(--dsw-alias-label-error);border-radius:10px;padding:10px 12px;display:flex;flex-direction:column;gap:4px}\n.cc-usageBlockedTitle{color:var(--dsw-alias-label-error);margin:0;font-size:13px;font-weight:600;line-height:1.5}\n.cc-usageBlockedHint{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px;line-height:1.5}\n.cc-version{margin:4px 0 0;text-align:center;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}\n/* The Models-page provider panel root: unstyled by design — the row card the\n * Models page owns supplies the surface, the panel only stacks its controls. */\n.cc-providerCard{flex-direction:column;display:flex}\n/* The update hint rides the footer version line: warning-tinted (with a\n * muted fallback for themes without the alias), quiet until hovered. */\n.cc-versionLink{color:var(--dsw-alias-state-warning-primary,var(--dsw-alias-label-secondary));text-decoration:none}\n.cc-versionLink:hover{color:var(--dsw-alias-label-primary);text-decoration:underline;text-underline-position:under}\n/* The login panel rides the connection card as one more field row; the\n * authorization link is the only branded element on it. */\n.cc-loginLink{color:var(--dsw-alias-brand-primary);text-decoration:none;font-size:12px;line-height:1.5}\n.cc-loginLink:hover{text-decoration:underline;text-underline-position:under}\n.cc-loginDone{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary))}\n.cc-loginError{color:var(--dsw-alias-label-error)}\n.cc-saved{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary));margin:0;font-size:12px;font-weight:500;line-height:1.5}\n.cc-badgeWarn{background:var(--dsw-alias-state-warning-secondary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warning-primary,var(--dsw-alias-label-secondary))}\n`\n\n/** Inject the page stylesheet once (idempotent per tag). */\nfunction injectPageCss(): void {\n  if (typeof document === 'undefined') return\n  const id = '@mars-sea/dsh-commandcode-provider/CommandCodeSettingsPage.module.css'\n  if (document.querySelector(`style[data-plugin-css=\"${id}\"]`) !== null) return\n  const tag = document.createElement('style')\n  tag.dataset.plugin = '@mars-sea/dsh-commandcode-provider'\n  tag.dataset.pluginCss = id\n  tag.textContent = PAGE_CSS\n  document.head.appendChild(tag)\n}\n\n/** Connection fields retained by pre-0.1.2 clients and absent from the current transport handle. */\ninterface LegacyConnectionLike extends ConnectionLike {\n  api?: ConnectionLike['api'] & { credentials?: LegacyCredentialsApi }\n  hostDescription?: HostDescriptionSource\n}\n\n/**\n * Client plugin body. Gates on the services shared by both client generations\n * (`slots`, `locale`, `connection`, `remote`, `settingsScope`). Current clients\n * mount the page after `remote.credentials` appears; legacy clients mount it\n * from the connection ApiProxy credential face.\n */\nexport function apply(ctx: Context): void {\n  injectPageCss()\n\n  const connection = ctx.get('connection') as LegacyConnectionLike | undefined\n  if (connection !== undefined) {\n    // The wrapper is reached from a non-React path that has no `t` in scope;\n    // it reads the active client locale at call time, so a language switch\n    // immediately applies to the next selectModel failure. On legacy builds\n    // it wraps `connection.api.sessions`; 0.1.2 replaced that façade with\n    // `remote.session`, so the helper safely skips this UX-only rewrite there\n    // instead of preventing the whole plugin from activating.\n    installFriendlyImageError(connection, () => ctx.locale.getLocale().active === 'zh' ? 'zh' : 'en')\n  }\n\n  // The \"Command Code\" settings page: register the section once the\n  // `settings.section` declaration is on the ledger (ui-settings-general\n  // owns the shell; registration order relative to it is not constrained —\n  // `slots.inject` waits for the declaration).\n  ctx.effect(() => ctx.locale.register('settings.commandcode', { zh, en }), 'dsh-commandcode-provider: page copy')\n\n  const legacyApi = adaptLegacyCredentials(connection?.api?.credentials)\n  if (legacyApi !== undefined) {\n    applyClientSurfaces(ctx, legacyApi, connection?.hostDescription)\n    return\n  }\n\n  // DSH 0.1.2 exposes credentials through a Typert Remote namespace. Keep it\n  // optional at the root so a legacy client without `remote.credentials` can\n  // still activate through the ApiProxy branch above.\n  ctx.inject(['remote.credentials'], (remoteCtx) => {\n    const credentials = (remoteCtx.remote as unknown as {\n      credentials: SettingsPageApi['credentials']\n    }).credentials\n    applyClientSurfaces(remoteCtx, { credentials })\n  })\n}\n\n/** Mount the one shared UI implementation over either credential transport. */\nfunction applyClientSurfaces(\n  ctx: Context,\n  api: SettingsPageApi,\n  hostDescription?: HostDescriptionSource,\n): void {\n  const scope = ctx.settingsScope.bind<Record<string, unknown>>({ namespace: COMMANDCODE_NS })\n  // The model catalog for the settings page's model editors (the\n  // routing-rule editor and the visible-models filter) is served by the\n  // `commandcode/models` Remote below; the controller reads it through this\n  // mutable seam so the Remote mount (which happens after the controller is\n  // constructed) still reaches the catalog fetch. Unset until the mount\n  // lands — the controller degrades to the empty-catalog state meanwhile.\n  let modelsRemote: NonNullable<SettingsPageApi['models']> | undefined\n  const controller = new CommandCodeSettingsController(\n    scope,\n    { ...api, models: () => modelsRemote?.() ?? Promise.resolve({ ok: false, error: { message: 'commandcode/models remote is not mounted' } }) },\n    hostDescription,\n  )\n  ctx.effect(() => () => controller.dispose(), 'dsh-commandcode-provider: settings controller')\n  const store = createSnapshotStore<SettingsPageState>(controller.state())\n  controller.subscribe(() => store.set(controller.state()))\n  ctx.effect(\n    () => (ctx.remote as unknown as {\n      $on(event: 'credentials/reference-updated', listener: (ref: string) => void): () => void\n    }).$on('credentials/reference-updated', () => { controller.refreshCredentials() }),\n    'dsh-commandcode-provider: credential invalidations',\n  )\n\n  // The account-usage card + login panel: mount the shared Remote contribution\n  // (one mount carries every endpoint this plugin serves — report and login —\n  // so the Client's bookkeeping stays 1:1 with the Host's single registry\n  // registration), then resolve the `remote.commandcode` namespace through a\n  // scoped inject. Cordis only serves services a fiber declares in `inject`,\n  // and the namespace service exists only after the mount — a static inject\n  // would deadlock the plugin (the mounter would wait for its own mount), so\n  // the inject is registered dynamically once the mount lands. A Host half\n  // that predates the Remote fails the calls instead, and the surfaces render\n  // their error branches.\n  let usageNamespace: (typeof ctx.remote)['commandcode'] | undefined\n  let usageMountError: string | undefined\n  const contribution: TypertRemoteContribution = {\n    package: USAGE_REMOTE_CONTRIBUTION.package,\n    descriptors: [\n      ...USAGE_REMOTE_CONTRIBUTION.descriptors,\n      ...MODELS_REMOTE_CONTRIBUTION.descriptors,\n      ...LOGIN_REMOTE_CONTRIBUTION.descriptors,\n    ],\n  }\n  ctx.effect(() => {\n    let cancelled = false\n    let unmount: (() => Promise<void>) | undefined\n    void ctx.remote.$mount(contribution).then((dispose: () => Promise<void>) => {\n      if (cancelled) {\n        void dispose()\n        return\n      }\n      unmount = dispose\n      ctx.inject(['remote.commandcode'], (namespaceCtx) => {\n        usageNamespace = namespaceCtx.remote.commandcode\n        // The catalog Remote is live now; (re)fetch it for the model editors.\n        controller.refreshCatalog()\n        namespaceCtx.effect(() => () => {\n          usageNamespace = undefined\n        }, 'dsh-commandcode-provider: usage namespace')\n      })\n    }, (error: unknown) => {\n      // A mount failure (e.g. a harness without the Remote mount) leaves the\n      // namespace unset; keep the reason so the card can surface it.\n      usageMountError = error instanceof Error ? error.message : String(error)\n    })\n    return () => {\n      cancelled = true\n      usageNamespace = undefined\n      if (unmount !== undefined) void unmount()\n    }\n  }, 'dsh-commandcode-provider: usage remote')\n  const usageRemote: UsageRemote = {\n    report: async () => {\n      const namespace = usageNamespace\n      if (namespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode/report remote is not mounted' } }\n      }\n      return namespace.report()\n    },\n    models: async () => {\n      const namespace = usageNamespace\n      if (namespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode/models remote is not mounted' } }\n      }\n      return namespace.models()\n    },\n  }\n  // Wire the catalog Remote into the settings controller's models seam so the\n  // model editors can fetch the catalog once the mount lands.\n  modelsRemote = () => usageRemote.models()\n  const usageController = new CommandCodeUsageController(usageRemote)\n  ctx.effect(() => () => usageController.dispose(), 'dsh-commandcode-provider: usage controller')\n  const usageStore = createSnapshotStore<UsagePageState>(usageController.state())\n  usageController.subscribe(() => usageStore.set(usageController.state()))\n\n  // The login panel: same namespace, three endpoints; the key never crosses\n  // to the browser — the Host validates and stores it through the credentials\n  // seam, and a landed login re-reads the credential badges + usage card.\n  const loginRemote: LoginRemote = {\n    loginBegin: async () => {\n      if (usageNamespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode remote is not mounted' } }\n      }\n      return usageNamespace.loginBegin()\n    },\n    loginStatus: async () => {\n      if (usageNamespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode remote is not mounted' } }\n      }\n      return usageNamespace.loginStatus()\n    },\n    loginCancel: async () => {\n      if (usageNamespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode remote is not mounted' } }\n      }\n      return usageNamespace.loginCancel()\n    },\n  }\n  const loginController = new CommandCodeLoginController(() => loginRemote)\n  ctx.effect(() => () => loginController.dispose(), 'dsh-commandcode-provider: login controller')\n  const loginStore = createSnapshotStore<LoginPageState>(loginController.state())\n  let lastLoginPhase = loginController.state().phase\n  loginController.subscribe(() => {\n    const phase = loginController.state().phase\n    // A landed login stored the key Host-side behind the page's back; the\n    // badges must follow and the account card can finally fetch.\n    if (phase === 'success' && lastLoginPhase !== 'success') {\n      controller.refreshCredentials()\n      void usageController.refresh()\n    }\n    lastLoginPhase = phase\n    loginStore.set(loginController.state())\n  })\n\n  const injected = () => ({\n    hooks: { commandCodeSettings: store, commandCodeUsage: usageStore, commandCodeLogin: loginStore },\n    edit: (field: string, text: string) => controller.edit(field, text),\n    resetField: (field: string) => controller.resetField(field),\n    // A landed save can change the key or endpoint the usage endpoints read,\n    // so the account card refetches; a failed save keeps the old data.\n    save: () => void controller.save().then(() => {\n      const settled = controller.state()\n      if (!settled.failed && settled.anyAccountConfigured) void usageController.refresh()\n    }),\n    discard: () => controller.discard(),\n    refreshUsage: () => void usageController.refresh(),\n    beginLogin: () => void loginController.begin(),\n    cancelLogin: () => void loginController.cancel(),\n    addAccount: () => controller.addAccount(),\n    removeAccount: (id: string) => controller.removeAccount(id),\n    editAccountLabel: (id: string, text: string) => controller.editAccountLabel(id, text),\n    editAccountKey: (id: string, text: string) => controller.editAccountKey(id, text),\n    toggleKeyClear: (id: string) => controller.toggleKeyClear(id),\n    addRule: () => controller.addRule(),\n    removeRule: (id: string) => controller.removeRule(id),\n    editRuleModels: (id: string, ids: string[]) => controller.editRuleModels(id, ids),\n    editRuleAccount: (id: string, text: string) => controller.editRuleAccount(id, text),\n    editVisibleModels: (ids: string[]) => controller.editVisibleModels(ids),\n    clearVisibleModels: () => controller.clearVisibleModels(),\n  })\n\n  ctx.slots.inject('settings.section', () => ctx.slots.register({\n    name: 'settings.section',\n    id: 'commandcode',\n    order: 12,\n    label: () => ctx.locale.bind('settings.commandcode')('nav'),\n    locale: 'settings.commandcode',\n    inject: injected,\n  }, CommandCodeSettingsPage))\n\n  // The Models-page provider panel (dsh 0.1.2, rc.1): a keyed slot the\n  // Models section dispatches with `entryKey = settingsNs` on every provider\n  // card of an adapter family. Registering under `llm-commandcode` mounts the\n  // panel beside the official editor on every Command Code row — including\n  // the first-run setup posture, exactly where a user without a key lands.\n  // While the official 编辑 toggle is open, the panel hides the official\n  // editor shell (for this namespace it holds only the settings.yaml hint\n  // over a disabled apply) and shows the real controls; see card.tsx.\n  // The registration carries its own inject face (store hooks + actions)\n  // because the declaring entry is ui-settings-models', not ours; the `t`\n  // seat comes from the registration's own `locale` namespace.\n  //\n  // On dsh builds without this slot the declaration never exists and\n  // `slots.inject` never fires its callback — the registration silently\n  // does not happen, and nothing else about the plugin changes.\n  ctx.slots.inject('settings.models.provider-card', () => ctx.slots.register({\n    name: 'settings.models.provider-card',\n    key: 'llm-commandcode',\n    locale: 'settings.commandcode',\n    inject: () => ({\n      hooks: { commandCodeSettings: store, commandCodeLogin: loginStore },\n      edit: (field: string, text: string) => controller.edit(field, text),\n      save: () => void controller.save().then(() => {\n        const settled = controller.state()\n        if (!settled.failed && settled.anyAccountConfigured) void usageController.refresh()\n      }),\n      discard: () => controller.discard(),\n      beginLogin: () => void loginController.begin(),\n      cancelLogin: () => void loginController.cancel(),\n    }),\n  }, CommandCodeProviderCard))\n}\n\nexport const inject: readonly string[] = [\n  'slots',\n  'locale',\n  'connection',\n  'remote',\n  'settingsScope',\n]\n"],"mappings":";;;;;;;;;;;EAmBA,SAAS,gBAAgB,WAA0C;GACjE,KAAK,MAAM,YAAY,WACrB,IAAI;IACF,SAAS;GACX,SAAS,OAAgB;IACvB,QAAQ,MAAM,0DAA0D,KAAK;GAC/E;EAEJ;;EAGA,SAAgB,oBAAuB,SAA8B;GACnE,IAAI,WAAW;GACf,MAAM,4BAAY,IAAI,IAAgB;GACtC,OAAO;IACL,mBAAmB;IACnB,UAAU,UAAsB;KAC9B,UAAU,IAAI,QAAQ;KACtB,aAAa;MACX,UAAU,OAAO,QAAQ;KAC3B;IACF;IACA,IAAI,OAAU;KACZ,IAAI,OAAO,GAAG,OAAO,QAAQ,GAAG;KAChC,WAAW;KACX,gBAAgB,SAAS;IAC3B;GACF;EACF;;;ECGA,MAAa,qBAA8E;GACzF,IAAI;IACF,OAAO;IACP,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,wBAAwB;IACxB,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,mBACE;IACF,2BACE;IACF,gBACE;IACF,UAAU;IACV,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,UAAU;IACV,YAAY;IACZ,eAAe;IACf,aAAa;IACb,SAAS;IACT,eAAe;IACf,cAAc;IACd,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,WAAW;IACX,WACE;GAEJ;GACA,IAAI;IACF,OAAO;IACP,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,wBAAwB;IACxB,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,mBACE;IACF,2BACE;IACF,gBACE;IACF,UAAU;IACV,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,UAAU;IACV,YAAY;IACZ,eAAe;IACf,aAAa;IACb,SAAS;IACT,eAAe;IACf,cAAc;IACd,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,WAAW;IACX,WACE;GAGJ;EACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ECpDA,SAAgB,wBACd,QAC0E;GAC1E,OACE,CAAC,OAAO,OAAO,MACf,OAAO,OAAO,MAAM,SAAS,uBAC7B,OAAO,OAAO,MAAM,QAAQ,SAAS,6BAA6B;EAEtE;;EAGA,SAAgB,uBACd,UACA,WACc;GACd,MAAM,cAAc,SAAS,YAAY,KAAK,QAAQ;GACtD,OAAO;IACL,GAAG;IACH,aAAa,OAAO,SAAS,WAAW;KACtC,MAAM,SAAS,MAAM,YAAY,SAAS,MAAM;KAChD,IAAI,CAAC,wBAAwB,MAAM,GAAG,OAAO;KAC7C,MAAM,QAAQ,OAAO,OAAO,MAAM,SAAS,SAAS,QAAQ;KAC5D,MAAM,WAAW,mBAAmB,UAAU,EAAE,CAAC,aAC5C,mBAAmB,GAAG;KAC3B,OAAO;MACL,GAAG;MACH,QAAQ;OACN,GAAG,OAAO;OACV,OAAO;QACL,GAAG,OAAO,OAAO;QACjB,SAAS,SAAS,QAAQ,WAAW,KAAK;OAC5C;MACF;KACF;IACF;GACF;EACF;;;;;;;;EAmBA,SAAgB,0BACd,YACA,WACS;GACT,MAAM,MAAM,WAAW;GACvB,MAAM,WAAW,KAAK;GACtB,IAAI,QAAQ,KAAA,KAAa,aAAa,KAAA,KAAa,OAAO,SAAS,gBAAgB,YAAY,OAAO;GACtG,IAAI,WAAW,uBAAuB,UAAU,SAAS;GACzD,OAAO;EACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EC7GA,MAAa,iBAAiB;;EAE9B,MAAa,sBAAsB;;EAwNnC,SAAS,UAAU,OAA0B;GAC3C,OAAO;IACL;IACA,SAAS,UAAW,OAAO,UAAU,WAAW,QAAQ;IACxD,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,OAAO,YAAY,KAAK,EAAE,MAAM,QAAQ,IAAI;MAAE,MAAM;MAAO,OAAO;KAAQ;IAC5E;GACF;EACF;;;;;;;;;EAUA,SAASA,cAAY,OAAe,QAAoD;GACtF,OAAO;IACL;IACA,SAAS,UAAW,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI;IAChE,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,IAAI,YAAY,IAAI,OAAO,EAAE,MAAM,QAAQ;KAC3C,MAAM,SAAS,OAAO,OAAO;KAC7B,IAAI,CAAC,OAAO,SAAS,MAAM,GAAG,OAAO;MAAE,MAAM;MAAW,QAAQ;KAAS;KACzE,IAAI,QAAQ,QAAQ,KAAA,KAAa,SAAS,OAAO,KAAK,OAAO;MAAE,MAAM;MAAW,QAAQ;KAAW;KACnG,IAAI,QAAQ,QAAQ,KAAA,KAAa,SAAS,OAAO,KAAK,OAAO;MAAE,MAAM;MAAW,QAAQ;KAAW;KACnG,OAAO;MAAE,MAAM;MAAO,OAAO;KAAO;IACtC;GACF;EACF;;;;;;EAOA,SAASC,eAAa,OAA0B;GAC9C,OAAO;IACL;IACA,SAAS,UAAW,OAAO,UAAU,YAAY,OAAO,KAAK,IAAI;IACjE,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,IAAI,YAAY,IAAI,OAAO,EAAE,MAAM,QAAQ;KAC3C,IAAI,YAAY,QAAQ,OAAO;MAAE,MAAM;MAAO,OAAO;KAAK;KAC1D,IAAI,YAAY,SAAS,OAAO;MAAE,MAAM;MAAO,OAAO;KAAM;KAC5D,OAAO;MAAE,MAAM;MAAW,QAAQ;KAAS;IAC7C;GACF;EACF;EAUA,MAAa,iBAAiB;;EAG9B,MAAM,iBAA8B;GAClC,UAAU,SAAS;GACnB,UAAU,YAAY;GACtBD,cAAY,oBAAoB;IAAE,KAAA;IAAqB,KAAK;GAAe,CAAC;GAC5EA,cAAY,uBAAuB;IAAE,KAAA;IAAqB,KAAK;GAAe,CAAC;GAC/EC,eAAa,oBAAoB;GACjCA,eAAa,WAAW;GACxB,UAAU,eAAe;EAC3B;;EAGA,SAAS,WAAW,GAAsB,GAA+B;GACvE,IAAI,EAAE,WAAW,EAAE,QAAQ,OAAO;GAClC,MAAM,MAAM,IAAI,IAAI,CAAC;GACrB,OAAO,EAAE,OAAO,OAAO,IAAI,IAAI,EAAE,CAAC;EACpC;;;;;;EAOA,SAAS,gBAAgB,OAA8E;GACrG,OAAO,KAAK,UAAU,MAAM,KAAK,SAAS,CAAC,KAAK,QAAQ,KAAK,OAAO,CAAC,CAAC;EACxE;;;;;;EAOA,IAAa,gCAAb,MAA2C;GACzC;GACA;GACA,QAAyB,IAAI,IAAI,eAAe,KAAK,SAAS,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;GACjF,yBAA0B,IAAI,IAAoB;GAClD,4BAA6B,IAAI,IAAgB;GACjD,YAAgD,CAAC;GACjD,WAAmB;GACnB;;GAEA,gBAAwB;;GAExB,mCAAoC,IAAI,IAAwD;;GAEhG,gBAA+D,CAAC;;GAEhE,8BAA+B,IAAI,IAAY;;GAE/C,8BAA+B,IAAI,IAAoB;;GAEvD,4BAA6B,IAAI,IAAoB;;GAErD,4BAA6B,IAAI,IAAY;;GAE7C,aAAmE,CAAC;;GAEpE,6BAA8B,IAAI,IAAmD;;;;;;;;GAQrF,iCAAkC,IAAI,IAAmD;;;;;;GAMzF,kBAA8C,KAAA;;GAE9C,qBAAmD,KAAA;;GAEnD,gBAA8C,CAAC;GAC/C,gBAAwB;GACxB,SAAiB;GACjB,SAAiB;GACjB,aAAqB;;;;;;;GAQrB,YACE,OACA,KACA,iBACA;IACA,KAAK,QAAQ;IACb,KAAK,MAAM;IACX,KAAK,UAAU,KAAK,MAAM,gBAAgB;KACxC,KAAK,uBAAuB;KAC5B,KAAU,YAAY;KACtB,KAAK,QAAQ;IACf,CAAC,CAAC;IACF,IAAI,oBAAoB,KAAA,GAAW;KACjC,KAAK,oBAAoB,gBAAgB,YAAY,CAAC,EAAE;KACxD,KAAK,UAAU,KAAK,gBAAgB,gBAAgB;MAClD,IAAI,KAAK,UAAU;MACnB,MAAM,MAAM,gBAAgB,YAAY,CAAC,EAAE;MAC3C,IAAI,QAAQ,KAAK,mBAAmB;OAClC,KAAK,oBAAoB;OACzB,KAAK,QAAQ;MACf;KACF,CAAC,CAAC;IACJ;IACA,KAAK,uBAAuB;IAC5B,KAAU,YAAY;IACtB,KAAK,eAAe;GACtB;;GAGA,UAAgB;IACd,IAAI,KAAK,UAAU;IACnB,KAAK,WAAW;IAChB,KAAK,MAAM,WAAW,KAAK,WAAW,QAAQ;IAC9C,KAAK,UAAU,SAAS;IACxB,KAAK,UAAU,MAAM;GACvB;;;;;;;GAQA,yBAAuC;IACrC,MAAM,WAAW,KAAK,MAAM,YAAY;IACxC,MAAM,QAAQ,OAAO,SAAS,OAAO,cAAc,YAAY,SAAS,MAAM,UAAU,SAAS,IAC7F,SAAS,MAAM,YACf;IACJ,IAAI,UAAU,KAAK,eAAe;IAGlC,KAAK,iBAAiB,OAAO,KAAK,aAAa;IAC/C,KAAK,gBAAgB;GACvB;;GAGA,UAAU,UAAkC;IAC1C,KAAK,UAAU,IAAI,QAAQ;IAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;GAC7C;;GAGA,QAA2B;IACzB,MAAM,WAAW,KAAK,MAAM,YAAY;IACxC,MAAM,OAAO,KAAK,KAAK;IACvB,MAAM,aAAa,KAAK,iBAAiB,IAAI,KAAK,aAAa;IAC/D,MAAM,WAAW,KAAK,kBAAkB;IACxC,OAAO;KACL,WAAW,SAAS,WAAW;KAC/B,UAAU,SAAS;KACnB,kBAAkB,YAAY,cAAc;KAC5C,uBAAuB,YAAY,cAAc,UAAU,SAAS,MAAM,YAAY,QAAQ,UAAU;KACxG,gBAAgB,YAAY,YAAY;KACxC,QAAQ;MACN,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,QAAQ;MACzC,OAAO;MACP,YAAY;MACZ,SAAS;MACT,eAAe,KAAA;KACjB;KACA,mBAAmB,KAAK,UAAU,IAAI,KAAK,aAAa;KACxD,SAAS,KAAK,MAAM,SAAS;KAC7B,YAAY,KAAK,MAAM,YAAY;KACnC,mBAAmB,KAAK;KACxB,kBAAkB,KAAK,MAAM,kBAAkB;KAC/C,qBAAqB,KAAK,MAAM,qBAAqB;KACrD,oBAAoB,KAAK,MAAM,oBAAoB;KACnD,WAAW,KAAK,MAAM,WAAW;KACjC,eAAe,KAAK,MAAM,eAAe;KACzC;KACA,kBAAkB,CAAC,GAAG,KAAK,WAAW;KACtC,OAAO,KAAK,eAAe;KAC3B,eAAe,KAAK,uBAAuB;KAC3C,eAAe,KAAK;KACpB,eAAe,KAAK;KACpB,OAAO,KAAK,SAAS,KAAK,KAAK,cAAc,KAAK,KAAK,WAAW,KAAK,KAAK,mBAAmB;KAC/F,SAAS,KAAK,MAAM,SAAS,KAAK,QAAQ,KAAA,CAAS;KACnD,QAAQ,KAAK;KACb,QAAQ,KAAK;KACb,YAAY,KAAK;IACnB;GACF;;GAGA,aAAmB;IACjB,MAAM,uBAAO,IAAI,IAAI;KACnB,KAAK;KACL,GAAG,KAAK,aAAa,CAAC,CAAC,KAAK,UAAU,MAAM,GAAG;KAC/C,GAAG,KAAK,cAAc,KAAK,UAAU,MAAM,GAAG;IAChD,CAAC;IAKD,IAAI,IAAI;IACR,OAAO,KAAK,IAAI,GAAG,KAAK,cAAc,GAAG,GAAG,GAAG,KAAK;IACpD,MAAM,QAAQ,KAAK,aAAa,CAAC,CAAC,SAAS,KAAK,cAAc,SAAS;IACvE,KAAK,cAAc,KAAK;KAAE,OAAO,WAAW;KAAS,KAAK,GAAG,KAAK,cAAc,GAAG;IAAI,CAAC;IACxF,KAAK,SAAS;IACd,KAAU,YAAY;IACtB,KAAK,QAAQ;GACf;;GAGA,cAAc,IAAkB;IAC9B,MAAM,aAAa,KAAK,cAAc,WAAW,UAAU,MAAM,QAAQ,EAAE;IAC3E,IAAI,cAAc,GAAG,KAAK,cAAc,OAAO,YAAY,CAAC;SACvD,KAAK,YAAY,IAAI,EAAE;IAC5B,KAAK,YAAY,OAAO,EAAE;IAC1B,KAAK,UAAU,OAAO,EAAE;IAIxB,MAAM,eAAe,KAAK,OAAO,IAAI,eAAe;IAIpD,KAHoB,iBAAiB,KAAA,IACjC,aAAa,QAAQ,KAAK,aAAa,OACvC,OAAO,KAAK,aAAa,eAAe,MAAM,WAAW,KAAK,aAAa,eAAe,IAAc,QACxF,IAClB,KAAK,OAAO,IAAI,iBAAiB;KAAE,MAAM;KAAI,OAAO;IAAK,CAAC;IAE5D,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,iBAAiB,IAAY,MAAoB;IAC/C,KAAK,YAAY,IAAI,IAAI,IAAI;IAC7B,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,eAAe,IAAY,MAAoB;IAC7C,KAAK,UAAU,IAAI,IAAI,IAAI;IAI3B,KAAK,UAAU,OAAO,EAAE;IACxB,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;;;;;;;GASA,eAAe,QAAsB;IACnC,MAAM,MAAM,WAAW,YAAY,KAAK,gBAAgB;IACxD,IAAI,KAAK,UAAU,IAAI,GAAG,GACxB,KAAK,UAAU,OAAO,GAAG;SACpB;KACL,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe,MAAM;KAEzD,KAAK,UAAU,OAAO,GAAG;KACzB,IAAI,QAAQ,KAAK,eAAe,KAAK,OAAO,OAAO,QAAQ;KAC3D,KAAK,UAAU,IAAI,GAAG;IACxB;IACA,KAAK,SAAS;IACd,KAAU,YAAY;IACtB,KAAK,QAAQ;GACf;;GAGA,UAAgB;IACd,KAAK,WAAW,KAAK;KAAE,QAAQ,CAAC;KAAG,SAAS;IAAU,CAAC;IACvD,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,WAAW,IAAkB;IAC3B,MAAM,aAAa,KAAK,WAAW,WAAW,GAAG,UAAU,OAAO,YAAY,EAAE;IAChF,IAAI,cAAc,GAAG,KAAK,WAAW,OAAO,YAAY,CAAC;SACpD;KAGH,MAAM,SAAS,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS,KAAK,OAAO,EAAE;KAC/D,KAAK,eAAe,IAAI,IAAI,WAAW,KAAA,IACnC;MAAE,QAAQ,CAAC;MAAG,SAAS;KAAG,IAC1B;MAAE,QAAQ,CAAC,GAAG,OAAO,MAAM;MAAG,SAAS,OAAO;KAAQ,CAAC;IAC7D;IACA,KAAK,WAAW,OAAO,EAAE;IACzB,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,eAAe,IAAY,QAAwB;IACjD,MAAM,aAAa,KAAK,WAAW,WAAW,GAAG,UAAU,OAAO,YAAY,EAAE;IAChF,IAAI,cAAc,GAChB,KAAK,WAAW,cAAc;KAAE,GAAG,KAAK,WAAW;KAAc;IAAO;SACnE;KACL,MAAM,UAAU,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS,KAAK,OAAO,EAAE,KAAK;MAAE,QAAQ,CAAC;MAAG,SAAS;KAAU;KACjI,KAAK,WAAW,IAAI,IAAI;MAAE,GAAG;MAAS;KAAO,CAAC;IAChD;IACA,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,gBAAgB,IAAY,MAAoB;IAC9C,MAAM,aAAa,KAAK,WAAW,WAAW,GAAG,UAAU,OAAO,YAAY,EAAE;IAChF,IAAI,cAAc,GAChB,KAAK,WAAW,cAAc;KAAE,GAAG,KAAK,WAAW;KAAc,SAAS;IAAK;SAC1E;KACL,MAAM,UAAU,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS,KAAK,OAAO,EAAE,KAAK;MAAE,QAAQ,CAAC;MAAG,SAAS;KAAU;KACjI,KAAK,WAAW,IAAI,IAAI;MAAE,GAAG;MAAS,SAAS;KAAK,CAAC;IACvD;IACA,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,KAAK,OAAe,MAAoB;IACtC,KAAK,OAAO,IAAI,OAAO;KAAE;KAAM,OAAO;IAAM,CAAC;IAE7C,IAAI,UAAU,UAAU,KAAK,UAAU,OAAO,KAAK,aAAa;IAChE,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,WAAW,OAAqB;IAC9B,IAAI,UAAU,UAAU;KACtB,KAAK,OAAO,OAAO,QAAQ;KAC3B,KAAK,SAAS;KACd,KAAK,QAAQ;KACb;IACF;IACA,MAAM,OAAO,KAAK,KAAK,KAAK;IAC5B,KAAK,OAAO,IAAI,OAAO;KAAE,MAAM,KAAK,OAAO,KAAK,UAAU,KAAK,CAAC;KAAG,OAAO;IAAK,CAAC;IAChF,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,UAAgB;IACd,IAAI,KAAK,OAAO,SAAS,KAAK,CAAC,KAAK,eAAe,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,oBAAoB,KAAK,CAAC,KAAK,QAAQ;IAC5H,KAAK,OAAO,MAAM;IAClB,KAAK,oBAAoB;IACzB,KAAK,iBAAiB;IACtB,KAAK,0BAA0B;IAC/B,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;;;;;GAOA,qBAA2B;IACzB,KAAU,YAAY;GACxB;;GAGA,MAAM,OAAsB;IAC1B,MAAM,OAAO,KAAK,KAAK;IACvB,MAAM,cAAc,KAAK,YAAY;IACrC,MAAM,WAAW,KAAK,UAAU;IAChC,MAAM,cAAc,KAAK,kBAAkB;IAC3C,IAAK,KAAK,WAAW,KAAK,YAAY,WAAW,KAAK,SAAS,WAAW,KAAK,YAAY,WAAW,KAAM,KAAK,QAAQ;IACzH,MAAM,OAAsC,CAAC;IAC7C,KAAK,MAAM,QAAQ,MAAM;KACvB,IAAI,KAAK,QAAQ,KAAA,GAAW;KAC5B,KAAK,KAAK,KAAK,GAAG;IACpB;IACA,KAAK,SAAS;IACd,KAAK,SAAS;IAId,KAAK,kBAAkB,gBAAgB,KAAK,YAAY,CAAC;IACzD,KAAK,QAAQ;IACb,IAAI,SAAS;IAOb,KAAK,MAAM,OAAO;KAAC,GAAG;KAAM,GAAG;KAAa,GAAG;KAAU,GAAG;IAAW,GAAG;KACxE,IAAI,KAAK;KACT,IAAI;MACF,KAAK,MAAM,IAAI;KACjB,QAAQ;MACN,KAAK;KACP;KACA,IAAI,CAAC,IAAI;MACP,SAAS;MACT;KACF;IACF;IACA,KAAK,SAAS;IACd,KAAK,SAAS,CAAC;IACf,IAAI,QAAQ;KACV,KAAK,cAAc;KACnB,KAAK,OAAO,MAAM;KAClB,KAAK,oBAAoB;KACzB,KAAK,iBAAiB;KACtB,KAAK,0BAA0B;IACjC,OAAO;KAKL,KAAK,wBAAwB;KAC7B,KAAK,qBAAqB;KAC1B,KAAK,8BAA8B;IACrC;IACA,KAAK,QAAQ;GACf;;;;;;;;GASA,0BAAwC;IACtC,MAAM,SAAS,IAAI,IAAI,KAAK,aAAa,CAAC,CAAC,KAAK,UAAU,MAAM,GAAG,CAAC;IACpE,KAAK,gBAAgB,KAAK,cAAc,QAAQ,UAAU,CAAC,OAAO,IAAI,MAAM,GAAG,CAAC;IAChF,KAAK,MAAM,OAAO,CAAC,GAAG,KAAK,WAAW,GACpC,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,YAAY,OAAO,GAAG;IAEnD,KAAK,MAAM,CAAC,KAAK,SAAS,CAAC,GAAG,KAAK,WAAW,GAAG;KAC/C,MAAM,cAAc,KAAK,aAAa,CAAC,CAAC,MAAM,UAAU,MAAM,QAAQ,GAAG,CAAC,EAAE;KAO5E,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,KAAK,KAAK,GAAG,KAAK,YAAY,OAAO,GAAG;IAC3F;IAGA,KAAK,MAAM,OAAO,CAAC,GAAG,KAAK,SAAS,GAClC,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe,MAAM,KAAK,UAAU,OAAO,GAAG;GAEtF;GAMA,KAAa,OAA0B;IACrC,MAAM,OAAO,KAAK,MAAM,IAAI,KAAK;IACjC,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,0CAA0C,OAAO;IACzF,OAAO;GACT;;GAGA,MAAc,OAA4B;IACxC,MAAM,OAAO,KAAK,KAAK,KAAK;IAC5B,MAAM,SAAS,KAAK,OAAO,IAAI,KAAK;IACpC,IAAI,WAAW,KAAA,GACb,OAAO;KACL,MAAM,KAAK,OAAO,KAAK,aAAa,KAAK,CAAC;KAC1C,OAAO;KACP,YAAY,KAAK,OAAO,KAAK;KAC7B,SAAS;KACT,eAAe,KAAA;IACjB;IAEF,MAAM,SAAS,OAAO,QAAQ,EAAE,MAAM,QAAiB,IAAI,KAAK,MAAM,OAAO,IAAI;IACjF,OAAO;KACL,MAAM,OAAO;KACb,OAAO,OAAO;KACd,YAAY,OAAO,SAAS;KAC5B,SAAS,OAAO,SAAS;KACzB,eAAe,OAAO,SAAS,YAAY,OAAO,SAAS,KAAA;IAC7D;GACF;GAEA,aAAqB,OAAwB;IAC3C,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC,QAAQ;GAC1C;GAEA,UAAkB,OAAwB;IACxC,MAAM,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC;IACtC,OAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,MAAM,QAAQ,IAAI,IAClE,KAAiC,SAClC,KAAA;GACN;GAEA,YAAyD;IACvD,MAAM,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC;IACtC,OAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,MAAM,QAAQ,IAAI,IAClE,OACD,KAAA;GACN;GAEA,OAAe,OAAwB;IACrC,MAAM,OAAO,KAAK,UAAU;IAC5B,OAAO,SAAS,KAAA,KAAa,OAAO,UAAU,eAAe,KAAK,MAAM,KAAK;GAC/E;;;;;GAMA,OAAoF;IAClF,MAAM,OAA4E,CAAC;IACnF,KAAK,MAAM,CAAC,OAAO,WAAW,KAAK,QAAQ;KACzC,IAAI,UAAU,UAAU;MACtB,MAAM,QAAQ,OAAO,KAAK,KAAK;MAC/B,IAAI,UAAU,IACZ,KAAK,KAAK;OAAE;OAAO,WAAW,KAAK,SAAS,KAAK;MAAE,CAAC;MAEtD;KACF;KACA,MAAM,OAAO,KAAK,KAAK,KAAK;KAC5B,IAAI,OAAO,OAAO;MAChB,IAAI,KAAK,OAAO,KAAK,GAAG,KAAK,KAAK;OAAE;OAAO,WAAW,KAAK,MAAM,KAAK;MAAE,CAAC;MACzE;KACF;KACA,IAAI,OAAO,SAAS,KAAK,OAAO,KAAK,aAAa,KAAK,CAAC,GAAG;KAC3D,MAAM,SAAS,KAAK,MAAM,OAAO,IAAI;KACrC,IAAI,OAAO,SAAS,WAAW,KAAK,KAAK;MAAE;MAAO,KAAK,KAAA;KAAU,CAAC;UAC7D,IAAI,OAAO,SAAS,SAAS,KAAK,KAAK;MAAE;MAAO,WAAW,KAAK,MAAM,KAAK;KAAE,CAAC;UAC9E,KAAK,KAAK;MAAE;MAAO,WAAW,KAAK,MAAM,OAAO,OAAO,KAAK;KAAE,CAAC;IACtE;IACA,OAAO;GACT;GAEA,MAAc,MAAM,OAAiC;IACnD,MAAM,KAAK,MAAM,MAAM,KAAK;IAC5B,OAAO,CAAC,KAAK,OAAO,KAAK;GAC3B;GAEA,MAAc,MAAM,OAAe,OAAoD;IACrF,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK;IACjC,OAAO,KAAK,UAAU,CAAC,GAAG,WAAW;GACvC;;GAGA,MAAc,SAAS,OAAiC;IACtD,OAAO,KAAK,WAAW,KAAK,eAAe,KAAK;GAClD;;GAGA,MAAc,WAAW,KAAa,OAAiC;IACrE,IAAI;KAEF,IAAI,EAAC,MADkB,KAAK,IAAI,YAAY,IAAI,KAAK,KAAK,EAAA,CAC5C,IAAI,OAAO;IAC3B,QAAQ;KACN,OAAO;IACT;IACA,MAAM,KAAK,YAAY;IACvB,OAAO,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,cAAc;GACvD;;GAGA,MAAc,cAA6B;IACzC,MAAM,OAAO;KACX,KAAK;KACL,GAAG,KAAK,aAAa,CAAC,CAAC,KAAK,UAAU,MAAM,GAAG;KAC/C,GAAG,KAAK,cAAc,KAAK,UAAU,MAAM,GAAG;IAChD;IACA,IAAI;IACJ,IAAI;KACF,WAAW,MAAM,KAAK,IAAI,YAAY,SAAS,IAAI;IACrD,QAAQ;KACN;IACF;IACA,IAAI,CAAC,SAAS,IAAI;IAClB,IAAI,UAAU;IACd,KAAK,MAAM,OAAO,MAAM;KACtB,MAAM,OAAO,SAAS,QAAQ;KAC9B,MAAM,OAAO;MACX,YAAY,MAAM,cAAc;MAChC,UAAU,MAAM,YAAY;KAC9B;KACA,MAAM,OAAO,KAAK,iBAAiB,IAAI,GAAG;KAC1C,IAAI,SAAS,KAAA,KAAa,KAAK,eAAe,KAAK,cAAc,KAAK,aAAa,KAAK,UAAU;MAChG,KAAK,iBAAiB,IAAI,KAAK,IAAI;MACnC,UAAU;KACZ;IACF;IACA,IAAI,SAAS,KAAK,QAAQ;GAC5B;;;;;;;GAQA,iBAAuB;IACrB,MAAM,SAAS,KAAK,IAAI;IACxB,IAAI,WAAW,KAAA,GAAW;KACxB,KAAK,gBAAgB;KACrB,KAAK,QAAQ;KACb;IACF;IACA,OAAY,CAAC,CAAC,MAAM,aAAa;KAC/B,IAAI,SAAS,MAAM,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG;MAGxD,MAAM,SAA+B,CAAC;MACtC,KAAK,MAAM,SAAS,SAAS,MAAM,QAAQ;OACzC,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;OACjD,MAAM,QAAQ;OACd,IAAI,OAAO,MAAM,OAAO,YAAY,OAAO,MAAM,SAAS,UAAU;OACpE,OAAO,KAAK;QACV,IAAI,MAAM;QACV,MAAM,MAAM;QACZ,GAAI,OAAO,MAAM,SAAS,WAAW,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;OAC/D,CAAC;MACH;MACA,KAAK,gBAAgB;MACrB,KAAK,gBAAgB;KACvB,OACE,KAAK,gBAAgB;IAEzB,SAAS;KACP,KAAK,gBAAgB;IACvB,CAAC,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC;GAC9B;;GAOA,oBAA4D;IAC1D,MAAM,MAAM,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO;IAC5C,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC;IACjC,OAAO,IAAI,QACR,UACC,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,CACvE;GACF;;;;;;;;;;;GAYA,eAA8D;IAC5D,MAAM,MAA6C,CAAC;IACpD,KAAK,MAAM,UAAU,KAAK,kBAAkB,GAAG;KAC7C,MAAM,MAAM,OAAO;KACnB,IAAI,OAAO,QAAQ,YAAY,QAAQ,IAAI;KAC3C,MAAM,QAAQ,OAAO;KACrB,IAAI,KAAK;MAAE,OAAO,OAAO,UAAU,YAAY,UAAU,KAAK,QAAQ;MAAK;KAAI,CAAC;IAClF;IACA,OAAO;GACT;;GAGA,oBAAgD;IAC9C,MAAM,SAAS,KAAK,aAAa,CAAC,CAC/B,QAAQ,UAAU,CAAC,KAAK,YAAY,IAAI,MAAM,GAAG,CAAC,CAAC,CACnD,KAAK,WAAW;KAAE,GAAG;KAAO,OAAO;IAAM,EAAE;IAC9C,MAAM,QAAQ,KAAK,cAAc,KAAK,WAAW;KAAE,GAAG;KAAO,OAAO;IAAK,EAAE;IAC3E,OAAO,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,WAAW;KAC3C,IAAI,MAAM;KACV,KAAK,MAAM;KACX,OAAO,KAAK,YAAY,IAAI,MAAM,GAAG,KAAK,MAAM;KAChD,SAAS,KAAK,UAAU,IAAI,MAAM,GAAG,KAAK;KAC1C,YAAY,KAAK,iBAAiB,IAAI,MAAM,GAAG,CAAC,EAAE,cAAc;KAChE,UAAU,KAAK,iBAAiB,IAAI,MAAM,GAAG,CAAC,EAAE,YAAY;KAC5D,OAAO,MAAM;KACb,aAAa,KAAK,UAAU,IAAI,MAAM,GAAG;IAC3C,EAAE;GACJ;;GAGA,iBAAkC;IAChC,OAAO,KAAK,cAAc,SAAS,KAC9B,KAAK,YAAY,OAAO,KACxB,KAAK,YAAY,OAAO,KACxB,KAAK,UAAU,OAAO,KACtB,KAAK,UAAU,OAAO;GAC7B;;GAGA,gBAAiC;IAC/B,IAAI,KAAK,cAAc,SAAS,KAAK,KAAK,YAAY,OAAO,GAAG,OAAO;IACvE,KAAK,MAAM,CAAC,KAAK,SAAS,KAAK,aAAa;KAC1C,MAAM,OAAO,KAAK,aAAa,CAAC,CAAC,MAAM,UAAU,MAAM,QAAQ,GAAG,CAAC,EAAE;KACrE,IAAI,SAAS,KAAA,KAAa,KAAK,KAAK,MAAM,MAAM,SAAS,MAAM,OAAO;IACxE;IACA,KAAK,MAAM,QAAQ,KAAK,UAAU,OAAO,GACvC,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO;IAIjC,KAAK,MAAM,OAAO,KAAK,WACrB,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe,MAAM,OAAO;IAElE,OAAO;GACT;;GAGA,sBAAoC;IAClC,KAAK,gBAAgB,CAAC;IACtB,KAAK,YAAY,MAAM;IACvB,KAAK,YAAY,MAAM;IACvB,KAAK,UAAU,MAAM;IACrB,KAAK,UAAU,MAAM;GACvB;;GAGA,MAAc,SAAS,KAA+B;IACpD,IAAI;KAEF,IAAI,EAAC,MADkB,KAAK,IAAI,YAAY,MAAM,GAAG,EAAA,CACvC,IAAI,OAAO;IAC3B,QAAQ;KACN,OAAO;IACT;IACA,MAAM,KAAK,YAAY;IACvB,OAAO,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe;GACxD;;GAGA,cAAqD;IACnD,IAAI,CAAC,KAAK,cAAc,GAAG,OAAO,CAAC;IACnC,MAAM,OAAsC,CAAC;IAI7C,KAAK,MAAM,OAAO,KAAK,WACrB,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe,MACjD,KAAK,WAAW,KAAK,SAAS,GAAG,CAAC;IAGtC,KAAK,MAAM,CAAC,KAAK,SAAS,KAAK,WAAW;KACxC,MAAM,QAAQ,KAAK,KAAK;KACxB,IAAI,UAAU,MAAM,CAAC,KAAK,YAAY,IAAI,GAAG,KAAK,CAAC,KAAK,UAAU,IAAI,GAAG,GACvE,KAAK,WAAW,KAAK,WAAW,KAAK,KAAK,CAAC;IAE/C;IACA,KAAK,WAAW,KAAK,cAAc,CAAC;IACpC,OAAO;GACT;;;;;;;;;;;;GAaA,MAAc,gBAAkC;IAC9C,MAAM,UAAU,KAAK;IACrB,MAAM,0BAAU,IAAI,IAAY;IAChC,MAAM,OAAuC,CAAC;IAC9C,KAAK,MAAM,SAAS,KAAK,kBAAkB,GAAG;KAC5C,MAAM,MAAM,MAAM;KAGlB,IAAI,OAAO,QAAQ,YAAY,QAAQ,IAAI;MACzC,KAAK,KAAK,EAAE,GAAG,MAAM,CAAC;MACtB;KACF;KACA,IAAI,QAAQ,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG;KAC1C,QAAQ,IAAI,GAAG;KACf,KAAK,KAAK,KAAK,aAAa,KAAK,KAAK,CAAC;IACzC;IAKA,KAAK,MAAM,SAAS,KAAK,eAAe;KACtC,IAAI,QAAQ,IAAI,MAAM,GAAG,GAAG;KAC5B,QAAQ,IAAI,MAAM,GAAG;KACrB,KAAK,KAAK,KAAK,aAAa,MAAM,KAAK,KAAK,CAAC;IAC/C;IACA,MAAM,KAAK,MAAM,IAAI,YAAY,IAAI;IAIrC,MAAM,QAAQ,KAAK,kBAAkB;IACrC,OAAO,MAAM,WAAW,KAAK,UACxB,KAAK,OAAO,MAAM,UAAU,MAAM,MAAM,EAAE,cAAc,KAAK,SAAS;GAC7E;;;;;;GAOA,aACE,KACA,UACyB;IACzB,MAAM,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,EAAE,KAAK;IAC9C,MAAM,OAAO,SAAS,WAClB,EAAE,OAAQ,SAA+B,MAAM,IAC/C,EAAE,GAAI,SAAqC;IAC/C,MAAM,cAAc,KAAK;IACzB,OAAO;KACL,GAAG;KACH,OAAO,UAAU,KAAA,KAAa,UAAU,KACpC,QACA,OAAO,gBAAgB,YAAY,gBAAgB,KAAK,cAAc;KAC1E,WAAW;IACb;GACF;;GAOA,cAAgF;IAC9E,MAAM,MAAM,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO;IAC5C,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC;IACjC,MAAM,MAAgE,CAAC;IACvE,KAAK,MAAM,CAAC,OAAO,UAAU,IAAI,QAAQ,GAAG;KAC1C,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;KACzE,MAAM,SAAS;KACf,MAAM,SAAS,OAAO;KACtB,MAAM,UAAU,OAAO;KACvB,MAAM,aAAa,MAAM,QAAQ,MAAM,KAAK,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,IAChF,OAAoB,QAAQ,MAAM,MAAM,EAAE,IAC3C,CAAC;KACL,IAAI,WAAW,WAAW,GAAG;KAC7B,IAAI,KAAK;MACP,IAAI,QAAQ;MACZ,QAAQ;MACR,SAAS,OAAO,YAAY,YAAY,YAAY,KAAK,UAAU;KACrE,CAAC;IACH;IACA,OAAO;GACT;;GAGA,iBAA0C;IACxC,MAAM,SAAS,KAAK,YAAY,CAAC,CAC9B,QAAQ,SAAS,CAAC,KAAK,eAAe,IAAI,KAAK,EAAE,CAAC,CAAC,CACnD,KAAK,SAAS;KACb,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,EAAE;KACzC,OAAO;MACL,IAAI,KAAK;MACT,QAAQ,OAAO,UAAU,KAAK;MAC9B,SAAS,OAAO,WAAW,KAAK;MAChC,OAAO;KACT;IACF,CAAC;IACH,MAAM,QAAQ,KAAK,WAAW,KAAK,MAAM,WAAW;KAClD,IAAI,OAAO;KACX,QAAQ,KAAK;KACb,SAAS,KAAK;KACd,OAAO;IACT,EAAE;IACF,OAAO,CAAC,GAAG,QAAQ,GAAG,KAAK;GAC7B;;GAGA,cAA+B;IAC7B,OAAO,KAAK,WAAW,SAAS,KAAK,KAAK,eAAe,OAAO,KAAK,KAAK,WAAW,OAAO;GAC9F;;GAGA,aAA8B;IAC5B,IAAI,KAAK,WAAW,SAAS,KAAK,KAAK,eAAe,OAAO,GAAG,OAAO;IACvE,KAAK,MAAM,CAAC,IAAI,UAAU,KAAK,YAAY;KACzC,MAAM,OAAO,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS,KAAK,OAAO,EAAE;KAC7D,IAAI,SAAS,KAAA,GAAW;KACxB,IAAI,MAAM,OAAO,SAAS,KAAK,CAAC,WAAW,MAAM,QAAQ,KAAK,MAAM,GAAG,OAAO;KAC9E,IAAI,MAAM,YAAY,KAAK,SAAS,OAAO;IAC7C;IACA,OAAO;GACT;;GAGA,mBAAiC;IAC/B,KAAK,aAAa,CAAC;IACnB,KAAK,WAAW,MAAM;IACtB,KAAK,eAAe,MAAM;GAC5B;;;;;;;;;;;GAYA,uBAAqC;IACnC,MAAM,SAAS,KAAK,YAAY;IAChC,KAAK,aAAa,KAAK,WAAW,QAAQ,UACxC,CAAC,OAAO,MAAM,SACZ,WAAW,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,YAAY,KAAK,OAAO,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,GAAG,KAAK,cAAc,GAGlD,IAAI,CAFY,OAAO,MAAM,SAC3B,WAAW,SAAS,QAAQ,KAAK,MAAM,KAAK,SAAS,YAAY,KAAK,OAAO,GACnE,KAAK,eAAe,OAAO,EAAE;IAW3C,IAAI,KAAK,oBAAoB,KAAA,KAAa,gBAAgB,MAAM,MAAM,KAAK,iBAAiB;IAC5F,KAAK,WAAW,MAAM;GACxB;;GAGA,sBAAwC;IACtC,MAAM,MAAM,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO;IAC5C,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC;IACjC,OAAO,IAAI,QAAQ,MAAmB,OAAO,MAAM,YAAY,MAAM,EAAE;GACzE;;GAGA,yBAA2C;IACzC,OAAO,KAAK,sBAAsB,KAAK,oBAAoB;GAC7D;;GAGA,qBAAsC;IACpC,OAAO,KAAK,uBAAuB,KAAA,KAC9B,CAAC,WAAW,KAAK,oBAAoB,KAAK,oBAAoB,CAAC;GACtE;;GAGA,sBAAuC;IACrC,OAAO,KAAK,uBAAuB,KAAA;GACrC;;GAGA,4BAA0C;IACxC,KAAK,qBAAqB,KAAA;GAC5B;;GAGA,gCAA8C;IAC5C,IAAI,KAAK,uBAAuB,KAAA,KAC3B,WAAW,KAAK,oBAAoB,KAAK,oBAAoB,CAAC,GACjE,KAAK,qBAAqB,KAAA;GAE9B;;GAGA,oBAA2D;IACzD,IAAI,CAAC,KAAK,mBAAmB,GAAG,OAAO,CAAC;IACxC,OAAO,OAAO,KAAK,mBAAmB,CAAC;GACzC;;GAGA,MAAc,qBAAuC;IACnD,MAAM,OAAO,KAAK,sBAAsB,CAAC;IACzC,MAAM,KAAK,MAAM,IAAI,iBAAiB,IAAI;IAC1C,OAAO,WAAW,KAAK,oBAAoB,GAAG,IAAI;GACpD;;GAGA,kBAAkB,QAAwB;IACxC,KAAK,qBAAqB,CAAC,GAAG,MAAM;IACpC,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,qBAA2B;IACzB,KAAK,qBAAqB,CAAC;IAC3B,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,YAAmD;IACjD,IAAI,CAAC,KAAK,WAAW,GAAG,OAAO,CAAC;IAChC,OAAO,OAAO,KAAK,WAAW,CAAC;GACjC;;GAGA,MAAc,aAA+B;IAS3C,MAAM,OAAO,CACX,GATW,KAAK,YAAY,CAAC,CAAC,QAAQ,SAAS;KAC/C,MAAM,WAAW,KAAK,eAAe,IAAI,KAAK,EAAE;KAGhD,OAAO,aAAa,KAAA,KACf,CAAC,WAAW,SAAS,QAAQ,KAAK,MAAM,KACxC,SAAS,YAAY,KAAK;IACjC,CAEQ,CAAC,CAAC,KAAK,SAAS;KACpB,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,EAAE;KACzC,OAAO;MACL,QAAQ,UAAU,KAAA,KAAa,MAAM,OAAO,SAAS,IAAI,MAAM,SAAS,KAAK;MAC7E,SAAS,OAAO,YAAY,KAAA,KAAa,MAAM,YAAY,KAAK,MAAM,UAAU,KAAK;KACvF;IACF,CAAC,GACD,GAAG,KAAK,WAAW,KAAK,UAAU;KAChC,QAAQ,KAAK;KACb,SAAS,KAAK;IAChB,EAAE,CACJ,CAAC,CAAC,QAAQ,SAAS,KAAK,OAAO,SAAS,CAAC;IAGzC,MAAM,uBAAO,IAAI,IAAY;IAC7B,MAAM,UAAU,KAAK,QAAQ,SAAS;KACpC,MAAM,MAAM,GAAG,KAAK,QAAQ,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAQ;KACzE,IAAI,KAAK,IAAI,GAAG,GAAG,OAAO;KAC1B,KAAK,IAAI,GAAG;KACZ,OAAO;IACT,CAAC;IACD,MAAM,KAAK,MAAM,IAAI,qBAAqB,OAAO;IACjD,MAAM,QAAQ,KAAK,YAAY;IAC/B,OAAO,MAAM,WAAW,QAAQ,UAC3B,QAAQ,OAAO,MAAM,UACtB,MAAM,WAAW,KAAA,KACd,WAAW,MAAM,MAAM,CAAC,QAAQ,KAAK,MAAM,KAC3C,MAAM,MAAM,CAAC,YAAY,KAAK,OAAO;GAC9C;GAEA,UAAwB;IACtB,IAAI,KAAK,UAAU;IACnB,KAAK,MAAM,YAAY,KAAK,WAAW,SAAS;GAClD;EACF;;;;ECnzCA,SAAgB,uBACd,QAC6B;GAC7B,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;GACjC,OAAO,EACL,aAAa;IACX,UAAU,OAAO,SAAS;KACxB,MAAM,WAAW,MAAM,OAAO,SAAS,EAAE,KAAK,CAAC;KAC/C,OAAO,SAAS,OAAO,KACnB;MAAE,IAAI;MAAM,OAAO,SAAS,OAAO,MAAM;KAAY,IACrD;MAAE,IAAI;MAAO,OAAO,SAAS,OAAO;KAAM;IAChD;IACA,KAAK,OAAO,KAAK,UAAU;KACzB,MAAM,WAAW,MAAM,OAAO,IAAI;MAAE;MAAK;KAAM,CAAC;KAChD,OAAO,SAAS,OAAO,KACnB;MAAE,IAAI;MAAM,OAAO,KAAA;KAAU,IAC7B;MAAE,IAAI;MAAO,OAAO,SAAS,OAAO;KAAM;IAChD;IACA,OAAO,OAAO,QAAQ;KACpB,MAAM,WAAW,MAAM,OAAO,MAAM,EAAE,IAAI,CAAC;KAC3C,OAAO,SAAS,OAAO,KACnB;MAAE,IAAI;MAAM,OAAO,KAAA;KAAU,IAC7B;MAAE,IAAI;MAAO,OAAO,SAAS,OAAO;KAAM;IAChD;GACF,EACF;EACF;;;EC6BA,MAAM,OAAuB;GAAE,QAAQ;GAAQ,QAAQ,KAAA;GAAW,OAAO,KAAA;GAAW,WAAW,KAAA;EAAU;;;;;;EAOzG,IAAa,6BAAb,MAAwC;GACtC;GACA,4BAA6B,IAAI,IAAgB;GACjD,UAAkC;GAClC,aAAqB;GACrB,WAAmB;GACnB,WAAmB;GAEnB,YAAY,QAAqB;IAC/B,KAAK,SAAS;GAChB;;GAGA,UAAgB;IACd,KAAK,WAAW;IAChB,KAAK,cAAc;IACnB,KAAK,UAAU,MAAM;GACvB;;GAGA,UAAU,UAAkC;IAC1C,KAAK,UAAU,IAAI,QAAQ;IAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;GAC7C;;GAGA,QAAwB;IACtB,OAAO,KAAK;GACd;;;;;GAMA,MAAM,UAAyB;IAC7B,IAAI,KAAK,YAAY,KAAK,UAAU;IACpC,MAAM,aAAa,EAAE,KAAK;IAC1B,KAAK,WAAW;IAChB,KAAK,UAAU;KAAE,GAAG,KAAK;KAAS,QAAQ;KAAW,OAAO,KAAA;IAAU;IACtE,KAAK,QAAQ;IACb,IAAI;KACF,MAAM,WAAW,MAAM,KAAK,OAAO,OAAO;KAC1C,IAAI,KAAK,YAAY,eAAe,KAAK,YAAY;KACrD,IAAI,SAAS,IACX,KAAK,UAAU;MAAE,QAAQ;MAAS,QAAQ,SAAS;MAAO,OAAO,KAAA;MAAW,WAAW,KAAK,IAAI;KAAE;UAElG,KAAK,UAAU;MAAE,GAAG,KAAK;MAAS,QAAQ;MAAS,OAAO,SAAS,MAAM;KAAQ;IAErF,SAAS,OAAgB;KACvB,IAAI,KAAK,YAAY,eAAe,KAAK,YAAY;KACrD,KAAK,UAAU;MACb,GAAG,KAAK;MACR,QAAQ;MACR,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;KAC9D;IACF,UAAU;KACR,IAAI,eAAe,KAAK,YAAY,KAAK,WAAW;IACtD;IACA,KAAK,QAAQ;GACf;GAEA,UAAwB;IACtB,IAAI,KAAK,UAAU;IACnB,KAAK,MAAM,YAAY,KAAK,WAAW,SAAS;GAClD;EACF;;EAOA,SAAgB,YAAY,OAAuB;GACjD,OAAO,IAAI,MAAM,QAAQ,CAAC;EAC5B;;EAGA,SAAgB,iBAAiB,OAAuB;GACtD,OAAO,IAAI,MAAM,QAAQ,CAAC;EAC5B;;EAGA,SAAgB,oBAAoB,OAAuB;GACzD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;GACrD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;GACrD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;GACrD,OAAO,OAAO,KAAK;EACrB;;;;;;;;EASA,SAAgB,kBAAkB,OAAuB;GACvD,OAAO,OAAO,OAAO,MAAM,QAAQ,CAAC,CAAC,CAAC;EACxC;;EAGA,SAAgB,YAAY,MAAc,KAAqB;GAC7D,IAAI,OAAO,GAAG,OAAO;GACrB,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,OAAO,GAAG,CAAC;EAC5C;;EAGA,SAAgB,cAAc,IAAoB;GAChD,IAAI,MAAM,GAAG,OAAO;GACpB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,eAAe;EACrC;;;;EClIA,MAAM,mBAAmB;;;;;EAMzB,IAAa,6BAAb,MAAwC;GACtC;GACA,4BAA6B,IAAI,IAAgB;GACjD;;GAEA,aAAqB;GACrB,WAAmB;GAEnB,QAAyC;GACzC;GACA;GACA;GACA;GACA;GAEA,YAAY,QAAuC,SAAS,kBAAkB;IAC5E,KAAK,SAAS;IACd,KAAK,SAAS;GAChB;;GAGA,UAAU,UAAkC;IAC1C,KAAK,UAAU,IAAI,QAAQ;IAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;GAC7C;;GAGA,QAAwB;IACtB,OAAO;KACL,OAAO,KAAK;KACZ,SAAS,KAAK;KACd,UAAU,KAAK;KACf,SAAS,KAAK;KACd,QAAQ,KAAK;KACb,SAAS,KAAK;IAChB;GACF;;GAGA,MAAM,QAAuB;IAC3B,IAAI,KAAK,YAAY,KAAK,UAAU,cAAc,KAAK,UAAU,WAAW;IAC5E,MAAM,aAAa,EAAE,KAAK;IAC1B,KAAK,IAAI;KAAE,OAAO;KAAY,SAAS,KAAA;KAAW,UAAU,KAAA;KAAW,SAAS,KAAA;KAAW,QAAQ,KAAA;KAAW,SAAS,KAAA;IAAU,CAAC;IAClI,MAAM,SAAS,KAAK,OAAO;IAC3B,IAAI,WAAW,KAAA,GAAW;KACxB,KAAK,IAAI;MAAE,OAAO;MAAe,SAAS,KAAA;MAAW,UAAU,KAAA;MAAW,SAAS,KAAA;MAAW,QAAQ,KAAA;MAAW,SAAS;KAA8B,CAAC;KACzJ;IACF;IACA,IAAI;IACJ,IAAI;KACF,SAAS,MAAM,OAAO,WAAW;IACnC,SAAS,OAAgB;KAEvB,SAAS;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;KAAE;IACnG;IACA,IAAI,KAAK,WAAW,UAAU,GAAG;IACjC,IAAI,CAAC,OAAO,IAAI;KACd,KAAK,IAAI;MAAE,OAAO;MAAe,SAAS,KAAA;MAAW,UAAU,KAAA;MAAW,SAAS,KAAA;MAAW,QAAQ,KAAA;MAAW,SAAS,OAAO,MAAM;KAAQ,CAAC;KAChJ;IACF;IACA,KAAK,MAAM,OAAO,KAAK;IACvB,IAAI,KAAK,iBAAiB,WAAW,KAAU,KAAK,UAAU;GAChE;;GAGA,MAAM,SAAwB;IAC5B,IAAI,KAAK,YAAa,KAAK,UAAU,cAAc,KAAK,UAAU,WAAY;IAC9E,MAAM,aAAa,EAAE,KAAK;IAC1B,MAAM,SAAS,KAAK,OAAO;IAC3B,IAAI,WAAW,KAAA,GAAW;IAC1B,IAAI;IACJ,IAAI;KACF,SAAS,MAAM,OAAO,YAAY;IACpC,QAAQ;KAEN,KAAK,IAAI;MAAE,OAAO;MAAU,SAAS,KAAA;MAAW,UAAU,KAAA;MAAW,SAAS,KAAA;MAAW,QAAQ;MAAa,SAAS,KAAA;KAAU,CAAC;KAClI;IACF;IACA,IAAI,KAAK,WAAW,UAAU,GAAG;IACjC,IAAI,OAAO,IAAI,KAAK,MAAM,OAAO,KAAK;SACjC,KAAK,IAAI;KAAE,OAAO;KAAU,SAAS,KAAA;KAAW,UAAU,KAAA;KAAW,SAAS,KAAA;KAAW,QAAQ;KAAa,SAAS,KAAA;IAAU,CAAC;GACzI;;GAGA,UAAgB;IACd,IAAI,KAAK,UAAU;IACnB,KAAK,WAAW;IAChB,KAAK,cAAc;IACnB,KAAK,UAAU,MAAM;GACvB;;GAOA,MAAc,KAAK,YAAmC;IAGpD,OAAO,CAAC,KAAK,YAAY,CAAC,KAAK,WAAW,UAAU,KAAK,KAAK,iBAAiB,WAAW;KACxF,MAAM,MAAM,KAAK,MAAM;KACvB,IAAI,KAAK,YAAY,KAAK,WAAW,UAAU,KAAK,KAAK,iBAAiB,WAAW;KACrF,MAAM,SAAS,KAAK,OAAO;KAC3B,IAAI,WAAW,KAAA,GAAW;MACxB,KAAK,IAAI;OAAE,OAAO;OAAe,SAAS,KAAA;OAAW,UAAU,KAAA;OAAW,SAAS,KAAA;OAAW,QAAQ,KAAA;OAAW,SAAS;MAA8B,CAAC;MACzJ;KACF;KACA,IAAI;KACJ,IAAI;MACF,SAAS,MAAM,OAAO,YAAY;KACpC,QAAQ;MACN;KACF;KACA,IAAI,KAAK,WAAW,UAAU,KAAK,KAAK,iBAAiB,WAAW;KACpE,IAAI,OAAO,IAAI,KAAK,MAAM,OAAO,KAAK;IACxC;GACF;GAEA,IAAY,eAAwC;IAClD,OAAO,KAAK;GACd;;GAGA,MAAc,QAAsC;IAClD,MAAM,OAAO;KAAE,SAAS,KAAA;KAAW,UAAU,KAAA;KAAW,SAAS,KAAA;KAAW,QAAQ,KAAA;KAAW,SAAS,KAAA;IAAU;IAClH,IAAI,OAAO,UAAU,WAAW;KAC9B,KAAK,IAAI;MAAE,GAAG;MAAM,OAAO;MAAW,SAAS,OAAO;KAAQ,CAAC;KAC/D;IACF;IACA,IAAI,OAAO,UAAU,WAAW;KAC9B,KAAK,IAAI;MAAE,GAAG;MAAM,OAAO;MAAW,UAAU,OAAO;MAAU,SAAS,OAAO;KAAQ,CAAC;KAC1F;IACF;IACA,IAAI,OAAO,UAAU,UAAU;KAC7B,KAAK,IAAI;MAAE,GAAG;MAAM,OAAO;MAAU,QAAQ,OAAO;MAAQ,SAAS,OAAO;KAAQ,CAAC;KACrF;IACF;IAEA,KAAK,IAAI;KAAE,GAAG;KAAM,OAAO;KAAU,QAAQ;KAAa,SAAS;IAAwC,CAAC;GAC9G;;GAGA,IAAY,OAA6B;IACvC,KAAK,QAAQ,MAAM;IACnB,KAAK,UAAU,MAAM;IACrB,KAAK,WAAW,MAAM;IACtB,KAAK,UAAU,MAAM;IACrB,KAAK,SAAS,MAAM;IACpB,KAAK,UAAU,MAAM;IACrB,KAAK,QAAQ;GACf;GAEA,WAAmB,YAA6B;IAC9C,OAAO,KAAK,YAAY,eAAe,KAAK;GAC9C;GAEA,UAAwB;IACtB,IAAI,KAAK,UAAU;IACnB,KAAK,MAAM,YAAY,CAAC,GAAG,KAAK,SAAS,GAAG,SAAS;GACvD;EACF;EAEA,SAAS,MAAM,IAA2B;GACxC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;EACzD;;;;;;EAWA,SAAgB,iBACd,QACA,GACQ;GACR,IAAI,WAAW,UAAU,OAAO,EAAE,aAAa;GAC/C,IAAI,WAAW,WAAW,OAAO,EAAE,cAAc;GACjD,IAAI,WAAW,eAAe,OAAO,EAAE,iBAAiB;GACxD,IAAI,WAAW,WAAW,OAAO,EAAE,cAAc;GACjD,IAAI,WAAW,eAAe,OAAO,EAAE,kBAAkB;GACzD,IAAI,WAAW,aAAa,OAAO,EAAE,gBAAgB;GACrD,OAAO,EAAE,oBAAoB;EAC/B;;;;;;EAeA,SAAgB,UACd,OACA,GACW;GACX,IAAI,MAAM,UAAU,cAAc,MAAM,UAAU,WAChD,OAAO;IACL,MAAM,EAAE,MAAM,UAAU,aAAa,kBAAkB,cAAc;IACrE,WAAW;IACX,OAAO,KAAA;GACT;GAEF,IAAI,MAAM,UAAU,WAAW;IAC7B,MAAM,UAAU,MAAM,YAAY,KAAA,KAAa,MAAM,YAAY,KAAK,MAAM,MAAM,YAAY;IAC9F,OAAO;KACL,MAAM,GAAG,EAAE,cAAc,EAAE,GAAG,MAAM,YAAY,KAAK,UAAU,KAAK;KACpE,WAAW;KACX,OAAO,KAAA;IACT;GACF;GACA,IAAI,MAAM,UAAU,UAClB,OAAO;IACL,MAAM,iBAAiB,MAAM,QAAQ,CAAC;IACtC,WAAW;IACX,OAAO,MAAM;GACf;GAEF,IAAI,MAAM,UAAU,eAClB,OAAO;IACL,MAAM,GAAG,EAAE,kBAAkB,EAAE,GAAG,MAAM,WAAW,KAAK,KAAK;IAC7D,WAAW;IACX,OAAO,KAAA;GACT;GAEF,OAAO;IAAE,MAAM,EAAE,eAAe;IAAG,WAAW;IAAW,OAAO,KAAA;GAAU;EAC5E;;;;EChSA,MAAa,iBAAiB;;EAG9B,MAAa,iBAAiB;;EAG9B,MAAa,mBAAmB;;;;;;;;;;;;;EA4BhC,SAAgB,sBAAsB,QAAmC;GACvE,MAAM,UAAU,UAAyB;IACvC,MAAM,IAAI,UAAU,GAAG,OAAO,WAAW,OAAO;GAClD;GACA,MAAM,UAAU,OAAgB,UAC9B,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAC/D,QACA,OAAO,KAAK;GAClB,MAAM,eAAe,QAAiC,KAAa,UACjE,OAAO,OAAO,SAAS,WAAW,OAAO,OAAiB,OAAO,KAAK;GACxE,MAAM,eAAe,QAAiC,KAAa,UACjE,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,OAAO,IAAc,IACpE,OAAO,OACP,OAAO,KAAK;GAClB,MAAM,gBAAgB,QAAiC,KAAa,UAClE,OAAO,OAAO,SAAS,YAAY,OAAO,OAAkB,OAAO,KAAK;GAC1E,OAAO;IAAE;IAAQ;IAAQ;IAAa;IAAa;GAAa;EAClE;;;;;;;;EASA,SAAgB,qBACd,UACA,QACA,YACA,QACsB;GACtB,OAAO;IACL,IAAI,GAAG,eAAe,GAAG;IACzB,SAAS;IACT,WAAW;IACX;IACA,YAAY,EAAE,MAAM,SAAS;IAC7B,YAAY,CAAC;IACb,QAAQ;KACN,MAAM;KACN;KACA;IACF;GACF;EACF;;;;ECzCA,MAAa,uBAAuB;;EAGpC,MAAa,wBAAwB;;;;;EAMrC,MAAM,EAAE,QAAA,UAAQ,QAAA,UAAQ,aAAA,eAAa,aAAa,iBAChD,sBAAsB,4BAA4B;;EAGpD,SAAS,YAAY,OAAgB,OAAkF;GACrH,MAAM,SAASC,SAAO,OAAO,KAAK;GAClC,OAAO;IACL,MAAM,YAAY,QAAQ,QAAQ,GAAG,MAAM,MAAM;IACjD,KAAK,YAAY,QAAQ,OAAO,GAAG,MAAM,KAAK;IAC9C,UAAU,aAAa,QAAQ,YAAY,GAAG,MAAM,UAAU;IAC9D,SAAS,YAAY,QAAQ,WAAW,GAAG,MAAM,SAAS;GAC5D;EACF;;;;;;EAOA,SAAS,iBAAiB,OAAwC;GAChE,MAAM,SAASA,SAAO,OAAO,QAAQ;GACrC,MAAM,WAAW,OAAO;GACxB,IAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,MAAM,UAAU,OAAO,UAAU,QAAQ,GAAG,SAAO,UAAU;GACtG,MAAM,SAAiC,EAAY,SAAqB;GAExE,IAAI,OAAO,YAAY,KAAA,GAAW;IAChC,MAAM,UAAU,OAAO;IAIvB,IAAI,YAAY,iBAAiB,YAAY,yBAAyB,YAAY,WAChF,OAAO,UAAU;SAEjB,SAAO,SAAS;GAEpB;GAEA,IAAI,OAAO,YAAY,KAAA,GAAW;IAChC,MAAM,UAAUA,SAAO,OAAO,SAAS,SAAS;IAChD,OAAO,UAAU;KACf,IAAIC,cAAY,SAAS,MAAM,YAAY;KAC3C,MAAMA,cAAY,SAAS,QAAQ,cAAc;KACjD,UAAUA,cAAY,SAAS,YAAY,kBAAkB;IAC/D;GACF;GAEA,IAAI,OAAO,UAAU,KAAA,GAAW;IAC9B,MAAM,QAAQD,SAAO,OAAO,OAAO,OAAO;IAC1C,OAAO,QAAQ;KACb,YAAY,YAAY,OAAO,cAAc,kBAAkB;KAC/D,WAAW,YAAY,OAAO,aAAa,iBAAiB;KAC5D,aAAa,YAAY,OAAO,eAAe,mBAAmB;KAClE,gBAAgB,YAAY,OAAO,kBAAkB,sBAAsB;KAC3E,aAAa,YAAY,OAAO,eAAe,mBAAmB;KAClE,eAAe,YAAY,OAAO,iBAAiB,qBAAqB;KACxE,gBAAgB,YAAY,OAAO,kBAAkB,sBAAsB;KAC3E,cAAc,YAAY,OAAO,gBAAgB,oBAAoB;KACrE,aAAaC,cAAY,OAAO,eAAe,mBAAmB;IACpE;GACF;GAEA,IAAI,OAAO,YAAY,KAAA,GAAW;IAChC,MAAM,UAAUD,SAAO,OAAO,SAAS,SAAS;IAChD,OAAO,UAAU;KACf,gBAAgB,YAAY,SAAS,kBAAkB,wBAAwB;KAC/E,kBAAkB,YAAY,SAAS,oBAAoB,0BAA0B;KACrF,aAAa,YAAY,SAAS,eAAe,qBAAqB;KACtE,UAAU,YAAY,QAAQ,UAAU,kBAAkB;KAC1D,QAAQ,YAAY,QAAQ,QAAQ,gBAAgB;IACtD;GACF;GAEA,IAAI,OAAO,SAAS,KAAA,GAAW;IAC7B,MAAM,OAAOA,SAAO,OAAO,MAAM,MAAM;IACvC,MAAM,UAAU,KAAK;IACrB,IAAI,YAAY,SAAS,OAAO,YAAY,YAAY,CAAC,OAAO,SAAS,OAAO,IAAI,SAAO,qBAAqB;IAChH,OAAO,OAAO;KACZ,QAAQC,cAAY,MAAM,UAAU,aAAa;KACjD,MAAMA,cAAY,MAAM,QAAQ,WAAW;KAC3C,QAAQA,cAAY,MAAM,UAAU,aAAa;KACjD,gBAAgB;KAChB,kBAAkB,YAAY,MAAM,oBAAoB,uBAAuB;IACjF;GACF;GAEA,OAAO;EACT;;EAGA,SAAS,kBAAkB,OAAyC;GAClE,MAAM,SAASD,SAAO,OAAO,SAAS;GACtC,OAAO;IACL,IAAIC,cAAY,QAAQ,MAAM,YAAY;IAC1C,OAAOA,cAAY,QAAQ,SAAS,eAAe;IACnD,YAAY,aAAa,QAAQ,cAAc,oBAAoB;IACnE,QAAQ,aAAa,QAAQ,UAAU,gBAAgB;IACvD,MAAMA,cAAY,QAAQ,QAAQ,cAAc;IAChD,eAAe,YAAY,QAAQ,iBAAiB,uBAAuB;IAC3E,QAAQ,iBAAiB,OAAO,MAAM;GACxC;EACF;;EAGA,SAAS,oBAAoB,OAA2C;GAEtE,MAAM,WADSD,SAAO,OAAO,QACP,CAAC,CAAC;GACxB,IAAI,MAAM,QAAQ,QAAQ,GACxB,OAAO,EAAE,UAAU,SAAS,IAAI,iBAAiB,EAAE;GAErD,OAAOE,SAAO,UAAU;EAC1B;;EAsCA,MAAa,4BAAsD;GACjE,SAAS;GACT,aAAa,CAvBb,qBACE,uBACA,UACA,GAAG,qBAAqB,6BACxB,EAbF,OAAO,oBAaL,CAmBY,CAAuB;EACvC;;EA4BA,MAAa,kBAAkB;;;;;;EAO/B,MAAM,EACJ,QAAQ,eACR,aAAa,kBACX,sBAAsB,4BAA4B;;EAGtD,SAAS,kBAAkB,OAAyC;GAClE,MAAM,SAAS,cAAc,OAAO,OAAO;GAC3C,MAAM,QAAiC;IACrC,IAAI,cAAc,QAAQ,MAAM,UAAU;IAC1C,MAAM,cAAc,QAAQ,QAAQ,YAAY;GAClD;GAGA,IAAI,OAAO,SAAS,KAAA,GAClB,MAAM,OAAO,cAAc,QAAQ,QAAQ,YAAY;GAEzD,OAAO;EACT;;EAGA,SAAS,aAAa,OAAoC;GAExD,MAAM,SADS,cAAc,OAAO,QAChB,CAAC,CAAC;GACtB,IAAI,MAAM,QAAQ,MAAM,GACtB,OAAO,EAAE,QAAQ,OAAO,IAAI,iBAAiB,EAAE;GAEjD,MAAM,IAAI,UAAU,2CAA2C;EACjE;;EAoBA,MAAa,6BAAuD;GAClE,SAAS;GACT,aAAa,CAVb,qBACE,iBACA,UACA,GAAG,qBAAqB,sBACxB,EAZF,OAAO,aAYL,CAMY,CAAiB;EACjC;;;;EC9OA,MAAa,uBAAuB;EACpC,MAAa,wBAAwB;EACrC,MAAa,wBAAwB;EAErC,MAAM,UAAoD;GACxD;GAAU;GAAW;GAAe;GAAW;GAAe;GAAa;EAC7E;;;EAIA,MAAM,EAAE,QAAQ,QAAQ,gBACtB,sBAAsB,2BAA2B;;;;;;EAOnD,SAAgB,iBAAiB,OAAwC;GACvE,MAAM,SAAS,OAAO,OAAO,QAAQ;GACrC,MAAM,QAAQ,OAAO;GAGrB,IAAI,UAAU,UAAU,UAAU,aAAa,UAAU,aAAa,UAAU,UAAU;IACxF,MAAM,SAAiC,EAAE,MAAM;IAC/C,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;IAE3D,IAAI,OAAO,aAAa,KAAA,GACtB,OAAO,WAAW,YAAY,QAAQ,YAAY,UAAU;IAE9D,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;IAE3D,IAAI,OAAO,WAAW,KAAA,GAAW;KAC/B,MAAM,SAAS,OAAO;KACtB,IAAI,OAAO,WAAW,YAAY,QAAQ,SAAS,MAAuC,GACxF,OAAO,SAAS;UAEhB,OAAO,QAAQ;IAEnB;IACA,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;IAE3D,OAAO;GACT;GACA,OAAO,OAAO,OAAO;EACvB;;EAGA,MAAa,oBAA0D,EACrE,OAAO,iBACT;;EAGA,SAAS,gBAAgB,UAAkB,QAAsC;GAC/E,OAAO,qBACL,UACA,QACA,GAAG,eAAe,0BAClB,iBACF;EACF;;EAkBA,MAAa,4BAAsD;GACjE,SAAS;GACT,aAAa;IAhBb,gBAAgB,sBAAsB,YAAY;IAClD,gBAAgB,uBAAuB,aAAa;IACpD,gBAAgB,uBAAuB,aAAa;GAcvC;EACf;;;;ECxHA,SAAgB,SAAS,EAAE,OAAO,UAAU,GAAG,SAAS,YAA2B;GACjF,MAAM,OAAO,MAAM,UAAU,cAAc,MAAM,UAAU;GAC3D,MAAM,OAAO,UAAU,OAAO,CAAC;GAC/B,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAY,UAAA,EAAE,YAAY;MAAQ,CAAA,GAClD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OACb,UAAA,OACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAW,SAAS;QAAW,UAAA,EAAE,aAAa;OAAU,CAAA,IAExF,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAqB;QAAU,SAAS;QAAU,UAAA,EAAE,aAAa;OAAU,CAAA;MAEzG,CAAA,CACH;;KACJ,MAAM,YAAY,KAAA,IACjB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MACX,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAe,MAAM,MAAM;OAAS,QAAO;OAAS,KAAI;OAAc,UAAA,EAAE,eAAe;MAAK,CAAA;KACxG,CAAA,IACD;KACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAW,KAAK;MAAW,OAAO,KAAK;MAAQ,UAAA,KAAK;KAAQ,CAAA;IAC5D;;EAET;;;;;;;;;;;;;;;;;;;;;;;;;;EC5BA,MAAM,gBAAkD;GACtD,IAAI;GACJ,MAAM;GACN,KAAK;GACL,UAAU;GACV,KAAK;EACP;;;;;;;EAQA,SAAgB,eACd,SACA,YACoB;GACpB,MAAM,OAAO,WAAW;GACxB,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;GAC/B,OAAO,cAAc,SAAS;EAChC;;;;;EAgCA,SAAgB,kBACd,OACA,OACS;GACT,MAAM,SAAS,MAAM,KAAK,CAAC,CAAC,YAAY;GACxC,IAAI,WAAW,IAAI,OAAO;GAC1B,OAAO,MAAM,GAAG,YAAY,CAAC,CAAC,SAAS,MAAM,KACxC,MAAM,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM;EAC/C;;;;;;;;;;;EAYA,SAAgB,wBACd,SACA,UACA,QAAQ,IACa;GACrB,MAAM,aAAa,IAAI,IAAI,QAAQ,KAAK,UAAU,MAAM,EAAE,CAAC;GAC3D,MAAM,UAAU,QACb,QAAQ,UAAU,kBAAkB,OAAO,KAAK,CAAC,CAAC,CAClD,KAAK,WAAW;IAAE,OAAO,MAAM;IAAI,OAAO,MAAM;IAAM,OAAO;GAAM,EAAE;GAGxE,MAAM,OAAO,IAAI,IAAI,UAAU;GAC/B,KAAK,MAAM,MAAM,UAAU;IACzB,IAAI,OAAO,MAAM,KAAK,IAAI,EAAE,GAAG;IAC/B,KAAK,IAAI,EAAE;IACX,IAAI,WAAW,IAAI,EAAE,GAAG;IACxB,IAAI,CAAC,kBAAkB;KAAE;KAAI,MAAM;IAAG,GAAG,KAAK,GAAG;IACjD,QAAQ,KAAK;KAAE,OAAO;KAAI,OAAO;KAAI,OAAO;IAAK,CAAC;GACpD;GACA,OAAO;EACT;;;;;;;;;EAUA,SAAgB,wBACd,SACA,QACoB;GACpB,MAAM,SAA6B,CAAC;GACpC,MAAM,4BAAY,IAAI,IAA0C;GAChE,KAAK,MAAM,UAAU,SAAS;IAI5B,MAAM,UAAU,OAAO,QAAQ,KAAA,IAAY,OAAO,OAAO,KAAK;IAC9D,IAAI,QAAQ,UAAU,IAAI,OAAO;IACjC,IAAI,UAAU,KAAA,GAAW;KACvB,QAAQ;MAAE;MAAS,SAAS,CAAC;KAAE;KAC/B,UAAU,IAAI,SAAS,KAAK;KAC5B,OAAO,KAAK,KAAK;IACnB;IACA,MAAM,QAAQ,KAAK,MAAM;GAC3B;GACA,OAAO;EACT;;;;;;EAOA,SAAgB,qBACd,UACA,SACU;GACV,OAAO,SAAS,SAAS,OAAO,IAC5B,SAAS,QAAQ,UAAU,UAAU,OAAO,IAC5C,CAAC,GAAG,UAAU,OAAO;EAC3B;;;;;;;;;;;EAoBA,SAAgB,eAAe,WAAsC;GACnE,OAAO,UAAU,WAAW,SAAS,KAAK,CAAC,UAAU;EACvD;;;;;;EAOA,SAAgB,cACd,UACA,WACU;GACV,MAAM,aAAa,IAAI,IAAI,UAAU,UAAU;GAC/C,OAAO,SAAS,QAAQ,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;EACpD;;;;;;;;;;;;;;;;;;;;;;EErLA,MAAa,iBAAyBC;;;;;;EAOtC,MAAa,6BAAqC;GAChD,MAAM,OAAgBC;GACtB,MAAM,MAAM,OAAO,SAAS,WAAW,OAAQ,MAAwC;GACvF,OAAO,GAAG,OAAO,QAAQ,WAAW,IAAI,QAAQ,UAAU,EAAE,CAAC,CAAC,QAAQ,UAAU,EAAE,IAAI,uDAAuD;EAC/I,EAAA,CAAG;;ECKH,MAAa,mBAAmB;;;;;EAMhC,MAAa,iBACX;;;;;;;;;;;EAYF,SAAgB,gBAAgB,GAAW,GAAmB;GAC5D,MAAM,OAAO,aAAa,CAAC;GAC3B,MAAM,QAAQ,aAAa,CAAC;GAC5B,MAAM,QAAQ,KAAK,IAAI,KAAK,KAAK,QAAQ,MAAM,KAAK,MAAM;GAC1D,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,SAAS,GAAG;IAC7C,MAAM,SAAS,KAAK,KAAK,UAAU,MAAM,MAAM,KAAK,UAAU;IAC9D,IAAI,UAAU,GAAG,OAAO,KAAK,KAAK,KAAK;GACzC;GAEA,IAAI,KAAK,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,GAAG,OAAO;GAC5D,IAAI,KAAK,IAAI,WAAW,GAAG,OAAO;GAClC,IAAI,MAAM,IAAI,WAAW,GAAG,OAAO;GACnC,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,QAAQ,MAAM,IAAI,MAAM;GACxD,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,SAAS,GAAG;IAC7C,MAAM,IAAI,KAAK,IAAI;IACnB,MAAM,IAAI,MAAM,IAAI;IACpB,IAAI,MAAM,KAAA,GAAW,OAAO;IAC5B,IAAI,MAAM,KAAA,GAAW,OAAO;IAC5B,MAAM,WAAW,QAAQ,KAAK,CAAC;IAC/B,MAAM,WAAW,QAAQ,KAAK,CAAC;IAC/B,IAAI;IACJ,IAAI,YAAY,UAAU,QAAQ,OAAO,CAAC,IAAI,OAAO,CAAC;SACjD,IAAI,UAAU,QAAQ;SACtB,IAAI,UAAU,QAAQ;SACtB,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI;IACtC,IAAI,UAAU,GAAG,OAAO,KAAK,KAAK,KAAK;GACzC;GACA,OAAO;EACT;;EAGA,SAAgB,eAAe,WAAmB,SAA0B;GAC1E,OAAO,gBAAgB,WAAW,OAAO,IAAI;EAC/C;;EAGA,SAAS,aAAa,OAAkD;GAGtE,MAAM,UAAU,MAAM,KAAK,CAAC,CAAC,QAAQ,OAAO,EAAE;GAC9C,MAAM,OAAO,QAAQ,QAAQ,GAAG;GAChC,MAAM,WAAW,OAAO,IAAI,UAAU,QAAQ,MAAM,GAAG,IAAI;GAC3D,MAAM,UAAU,OAAO,IAAI,KAAA,IAAY,QAAQ,MAAM,OAAO,CAAC;GAQ7D,OAAO;IAAE,MAPI,aAAa,KACtB,CAAC,CAAC,IACF,SAAS,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS;KAChC,MAAM,SAAS,OAAO,SAAS,MAAM,EAAE;KACvC,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS;IAC5C,CAAC;IAEU,KADH,YAAY,KAAA,IAAY,CAAC,IAAI,QAAQ,MAAM,GAAG;GACvC;EACrB;;;;;;EAOA,SAAgB,mBAAmB,SAA0B;GAC3D,IAAI,OAAO,YAAY,YAAY,YAAY,MAC7C,MAAM,IAAI,MAAM,qCAAqC;GAEvD,MAAM,UAAW,QAAkC;GACnD,IAAI,OAAO,YAAY,YAAY,CAAC,cAAc,KAAK,OAAO,GAC5D,MAAM,IAAI,MAAM,0CAA0C;GAE5D,OAAO;EACT;;EAGA,eAAsB,mBACpB,YAA0B,OACT;GACjB,MAAM,aAAa,IAAI,gBAAgB;GACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,gBAAgB;GACnE,IAAI;IACF,MAAM,WAAW,MAAM,UAAU,gBAAgB,EAAE,QAAQ,WAAW,OAAO,CAAC;IAC9E,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,sBAAsB,SAAS,QAAQ;IAEzD,OAAO,mBAAmB,MAAM,SAAS,KAAK,CAAC;GACjD,UAAU;IACR,aAAa,KAAK;GACpB;EACF;;EAiBA,MAAa,yBAAyB;;;;;;EAOtC,SAAgB,wBACd,UAA+B,OAAO,iBAAiB,cAAc,KAAA,IAAY,cAC/D;GAClB,OAAO;IACL,OAAsC;KACpC,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;KAClC,IAAI;MACF,MAAM,MAAM,QAAQ,QAAQ,sBAAsB;MAClD,IAAI,QAAQ,MAAM,OAAO,KAAA;MACzB,MAAM,SAAkB,KAAK,MAAM,GAAG;MACtC,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO,KAAA;MAC1D,MAAM,KAAM,OAA4B;MACxC,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,SAAS,EAAE,GAAG,OAAO,KAAA;MAC3D,MAAM,UAAW,OAAiC;MAClD,OAAO;OACL;OACA,SAAS,OAAO,YAAY,YAAY,YAAY,KAAK,UAAU,KAAA;MACrE;KACF,QAAQ;MACN;KACF;IACF;IACA,MAAM,QAAiC;KACrC,IAAI,YAAY,KAAA,GAAW;KAC3B,IAAI;MACF,QAAQ,QAAQ,wBAAwB,KAAK,UAAU,MAAM,CAAC;KAChE,QAAQ,CAER;IACF;GACF;EACF;;;;;;;;;EAUA,eAAsB,eAAe,SAKL;GAC9B,MAAM,EAAE,gBAAgB,KAAK,UAAU;GACvC,MAAM,UAAU,YACd,YAAY,KAAA,KAAa,eAAe,SAAS,cAAc,IAAI,UAAU,KAAA;GAE/E,MAAM,QAAQ,MAAM,KAAK;GACzB,IAAI,UAAU,KAAA,KAAa,MAAM,MAAM,KAAA,OACrC,OAAO,OAAO,MAAM,OAAO;GAG7B,IAAI;GACJ,IAAI;IACF,UAAU,MAAM,mBAAmB,QAAQ,SAAS;GACtD,QAAQ,CAER;GACA,MAAM,UAAU,WAAW,OAAO;GAClC,MAAM,MAAM;IAAE,IAAI;IAAK;GAAQ,CAAC;GAChC,OAAO,OAAO,OAAO;EACvB;;;;;;;;;;;;;;;;;;;;ECjKA,MAAM,kBAA4C;GAChD;GACA;GACA;GACA;GACA;GACA;EACF;;EAGA,SAAS,MAAM,EACb,IACA,OACA,MACA,OACA,UACA,SACA,aACA,QACA,SACA,KAYC;GACD,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAS;OAAK,UAAA;MAAa,CAAA,GACvD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;OAAM,WAAU;OAAhB,UAAA,CACG,MAAM,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAY,UAAA,EAAE,YAAY;OAAQ,CAAA,IAAI,MAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAqB;QAAU,SAAS;QAAS,cAAY,GAAG,MAAM,KAAK,EAAE,OAAO;QAAM,UAAA,EAAE,OAAO;OAAU,CAAA,CACzI;MACH,CAAA,CAAA;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACM;MACJ,WAAW,MAAM,UAAU,6BAA6B;MACxD,MAAK;MACL,WAAW,UAAU,YAAY,KAAA;MACjC,OAAO,MAAM;MACA;MACH;MACV,WAAW,UAAU,OAAO,MAAM,OAAO,KAAK;KAC/C,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAW,MAAM,UAAU,eAAe;MAC1C,UAAA,MAAM,UAAU,YAAY,MAAM,eAAe,CAAC,IAAI;KACtD,CAAA;IACA;;EAET;;EAGA,SAAS,YAAY,QAAsC,GAA8C;GACvG,IAAI,WAAW,YAAY,OAAO,EAAE,gBAAgB;GACpD,IAAI,WAAW,YAAY,OAAO,EAAE,gBAAgB;GACpD,OAAO,EAAE,eAAe;EAC1B;;;;;;;;EASA,SAAS,gBAAgB,EACvB,OACA,UACA,GACA,QACA,WAOC;GACD,MAAM,CAAC,UAAU,gBAAA,GAAeC,MAAAA,SAAAA,CAAS,KAAK;GAC9C,MAAM,aAAa,gBAAgB,QAAQ,UAAU,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;GAC9E,MAAM,UAAU,gBAAgB,MAAM,UAAU,MAAM,MAAM,CAAC,OAAO;GACpE,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;MACE,MAAK;MACL,WAAU;MACV,iBAAe;MACf,iBAAc;MACd,eAAe,aAAa,UAAU,CAAC,KAAK;MAL9C,UAAA;OAOE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAoB,UAAA,EAAE,kBAAkB;OAAQ,CAAA;OAC/D,aAAa,IACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QACb,UAAA,eAAe,IAAI,EAAE,uBAAuB,IAAI,EAAE,0BAA0B,EAAE,OAAO,WAAW,CAAC;OAC9F,CAAA,IACJ;OAGH,CAAC,YAAY,UACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAyB,UAAA,EAAE,iBAAiB;OAAQ,CAAA,IAClE;OACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,oBAAqB,CAAA;OACrC,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAW,WAAW,4BAA4B;QAAc,eAAY;OAAQ,CAAA;MACpF;;KACP,WACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,IAAG;MAAmB,WAAU;MAArC,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAW,UAAA,EAAE,sBAAsB;OAAK,CAAA;OACrD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QACE,IAAG;QACH,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,aAAa;QACrB,OAAO,MAAM;QACH;QACV,SAAS,SAAS,OAAO,WAAW,IAAI;QACxC,eAAe,QAAQ,SAAS;QAC7B;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QACE,IAAG;QACH,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,gBAAgB;QACxB,OAAO,MAAM;QACH;QACV,aAAa,MAAM;QACnB,SAAS,SAAS,OAAO,cAAc,IAAI;QAC3C,eAAe,QAAQ,YAAY;QAChC;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QACE,IAAG;QACH,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,sBAAsB;QAC9B,OAAO,MAAM;QACH;QACV,SAAA;QACA,SAAS,SAAS,OAAO,oBAAoB,IAAI;QACjD,eAAe,QAAQ,kBAAkB;QACtC;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QACE,IAAG;QACH,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,yBAAyB;QACjC,OAAO,MAAM;QACH;QACV,SAAA;QACA,SAAS,SAAS,OAAO,uBAAuB,IAAI;QACpD,eAAe,QAAQ,qBAAqB;QACzC;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;QACE,IAAG;QACH,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,wBAAwB;QAChC,OAAO,MAAM;QACH;QACV,gBAAA;QACA,SAAS,SAAS,OAAO,sBAAsB,IAAI;QACnD,eAAe,QAAQ,oBAAoB;QACxC;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;QACE,IAAG;QACH,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,eAAe;QACvB,OAAO,MAAM;QACH;QACV,gBAAA;QACA,SAAS,SAAS,OAAO,aAAa,IAAI;QAC1C,eAAe,QAAQ,WAAW;QAC/B;OACJ,CAAA;MACE;KACH,CAAA,IAAA;KACH,YAAY,UACX,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAa,MAAK;MAAU,UAAA,EAAE,iBAAiB;KAAK,CAAA,IAC/D;IACD;;EAET;;;;;;EAOA,SAAS,YAAY,EACnB,IACA,OACA,MACA,OACA,UACA,gBACA,QACA,SACA,KAWC;GACD,MAAM,UAAU,MAAM,SAAS,KAAK,iBAAiB,MAAM,SAAS;GACpE,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;KAAK,WAAU;KAAf,UAAA,CAGE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAW,eAAY;MAAQ,UAAA;KAAY,CAAA,GAC3D,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;MAAM,WAAU;MAAhB,UAAA,CACG,MAAM,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAY,UAAA,EAAE,YAAY;MAAQ,CAAA,IAAI,MAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OAAQ,MAAK;OAAS,WAAU;OAAqB;OAAU,SAAS;OAAS,cAAY,GAAG,MAAM,KAAK,EAAE,OAAO;OAAM,UAAA,EAAE,OAAO;MAAU,CAAA,CACzI;KACH,CAAA,CAAA;IACL,CAAA,GAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;KAAO,WAAU;KAAjB,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACM;MACJ,WAAU;MACV,MAAK;MACL,MAAK;MACI;MACC;MACV,WAAW,UAAU,OAAO,MAAM,OAAO,UAAU,SAAS,OAAO;KACpE,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAW,UAAA;KAAW,CAAA,CACjC;IACJ,CAAA,CAAA;;EAET;;;;;;;EAQA,SAAS,eAAe,EACtB,OACA,MACA,OACA,UACA,YACA,iBACA,mBACA,aACA,WACA,WACA,YACA,kBACA,gBACA,QACA,iBAiBC;GACD,MAAM,CAAC,SAAS,eAAA,GAAcA,MAAAA,SAAAA,CAAS,KAAK;GAC5C,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAQ;OAAc,UAAA;MAAa,CAAA,GAC/D,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;OAAM,WAAU;OAAhB,UAAA;QACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAW,aAAa,aAAa;SACxC,UAAA,aAAa,kBAAkB;QAC5B,CAAA;QACL,cAAc,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAyB,UAAA;QAAuB,CAAA,IAAI;QAClF,aACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SACrE,UAAA,cAAc,iBAAiB;QAC1B,CAAA,IACN;QACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACA;SACV,eAAe,YAAY,UAAU,CAAC,KAAK;SAE1C,UAAA,UAAU,YAAY;QACjB,CAAA;OACJ;MACH,CAAA,CAAA;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,IAAG;MACH,WAAU;MACV,MAAM,UAAU,SAAS;MACzB,cAAa;MACb,YAAY;MACZ,OAAO,MAAM;MACH;MACV,WAAW,UAAU,OAAO,MAAM,OAAO,KAAK;KAC/C,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA;KAAQ,CAAA;IAC7B;;EAET;;EAGA,SAAS,UAAU,EAAE,OAAO,OAAO,OAAmE;GACpG,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAqB,UAAA;KAAY,CAAA;KACjD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAqB,UAAA;KAAY,CAAA;KAChD,QAAQ,KAAA,KAAa,QAAQ,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAmB,UAAA;KAAU,CAAA,IAAI;IACjF;;EAET;;EAGA,SAAS,YAAY,EACnB,OACA,OAAO,EAAE,MAAM,KAAK,UAAU,WAC9B,KAKC;GACD,MAAM,QAAQ,YAAY,MAAM,GAAG;GACnC,MAAM,QAAQ,cAAc,OAAO;GACnC,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAuB,UAAA;OAAY,CAAA;OAClD,WAAW,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAoB,UAAA,EAAE,eAAe;OAAQ,CAAA,IAAI;OAC7E,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAuB,UAAA,MAAM,IAAI,GAAG,YAAY,IAAI,EAAE,KAAK,YAAY,GAAG,MAAM,YAAY,IAAI;OAAQ,CAAA;MACrH;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;MAAK,WAAU;MAAc,MAAK;MAAc,cAAY;MAAO,iBAAe;MAAG,iBAAe;MAAK,iBAAe,KAAK,MAAM,QAAQ,GAAG;MAC5I,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,WAAW,WAAW,wCAAwC;OAAmB,OAAO,EAAE,OAAO,GAAG,QAAQ,IAAI,GAAG;MAAI,CAAA;KACzH,CAAA;KACJ,UAAU,KAAK,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,WAAU;MAAb,UAAA;OAAoC,EAAE,YAAY;OAAE;OAAE;MAAS;KAAI,CAAA,IAAA;IAChF;;EAET;;EAGA,SAAS,YAAY,EAAE,OAAO,KAA+E;GAC3G,IAAI,MAAM,QAAQ,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAU;IAAgB,UAAA,EAAE,aAAa;GAAQ,CAAA;GAChF,IAAI,MAAM,SAAS,sBAAsB,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAU;IAAsB,UAAA,EAAE,iBAAiB;GAAQ,CAAA;GACjH,IAAI,MAAM,gBAAgB,GACxB,OAAO,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;IAAM,WAAU;IAAhB,UAAA;KAAsC,EAAE,eAAe;KAAE;KAAE,cAAc,MAAM,aAAa;IAAQ;;GAE7G,IAAI,MAAM,SAAS,cAAc,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAU;IAAsB,UAAA,EAAE,eAAe;GAAQ,CAAA;GACvG,OAAO;EACT;;;;;EAMA,SAAS,cAAc,EAAE,OAAO,WAAW,GAAG,YAW3C;GACD,MAAM,SAAS,MAAM;GACrB,MAAM,UAAU,OAAO;GACvB,MAAM,cAAc,YAAY,KAAA,IAAY,KAAK,QAAQ,YAAY,QAAQ;GAC7E,MAAM,UAAU,OAAO;GACvB,MAAM,OAAO,OAAO;GACpB,MAAM,WAAW,MAAM,QAAQ;GAC/B,MAAM,aAAa,SAAS,KAAA,KAAa,KAAK,WAAW,MAAM,KAAK,WAAW,WAAW,KAAK,SAAS;GACxG,MAAM,aAAa,SAAS,KAAA,KAAa,KAAK,mBAAmB;GACjE,MAAM,cAAc,OAAO,SAAS,SAAS,KAAK,OAAO,YAAY,KAAA;GAErE,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;QAAI,WAAU;QAAiB,UAAA,MAAM;OAAU,CAAA;OAC/C,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;QAAoB;QAAU;OAAI,CAAA;OACjC,gBAAgB,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAmB,UAAA;OAAkB,CAAA,IAAI;OAC9E,aAAa,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAgB,UAAA;OAAe,CAAA,IAAI;OACrE,eAAe,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAsB,UAAA;OAAiB,CAAA,IAAI;OAChF,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,qBAAsB,CAAA;OACrC,aAAa,KAAA,IACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAkB,SAAS;QAAW,UAAA,EAAE,eAAe;OAAU,CAAA,IAC/F;MACD;;KAEJ,CAAC,MAAM,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAgB,UAAA,EAAE,mBAAmB;KAAK,CAAA,IAAI;KAE/E,OAAO,YAAY,KAAA,IAClB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAkB,MAAK;MAAtC,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAwB,UAAA,aAAa,OAAO,SAAS,CAAC;MAAK,CAAA,GACxE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAuB,UAAA,YAAY,OAAO,SAAS,CAAC;MAAK,CAAA,CACnE;KACH,CAAA,IAAA;KAEH,OAAO,UAAU,KAAA,IAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QACE,OAAO,EAAE,eAAe;QACxB,OAAO,OAAO,OAAO,MAAM,cAAc;QACzC,KAAK,GAAG,EAAE,aAAa,EAAE,GAAG,OAAO,MAAM;OAC1C,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QAAW,OAAO,EAAE,kBAAkB;QAAG,OAAO,GAAG,kBAAkB,OAAO,MAAM,WAAW,EAAE;OAAK,CAAA;OACpG,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QACE,OAAO,EAAE,WAAW;QACpB,OAAO,iBAAiB,OAAO,MAAM,SAAS;QAC9C,KAAK,GAAG,YAAY,OAAO,MAAM,YAAY,EAAE;OAChD,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QACE,OAAO,EAAE,aAAa;QACtB,OAAO,oBAAoB,OAAO,MAAM,gBAAgB,OAAO,MAAM,cAAc;QACnF,KAAK,GAAG,oBAAoB,OAAO,MAAM,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,oBAAoB,OAAO,MAAM,cAAc,EAAE,GAAG,EAAE,gBAAgB;OAC1J,CAAA;MACE;KACH,CAAA,IAAA;KAEH,YAAY,KAAA,IACX,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QAAW,OAAO,EAAE,cAAc;QAAG,OAAO,YAAY,QAAQ,cAAc;OAAI,CAAA;OAClF,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QAAW,OAAO,EAAE,gBAAgB;QAAG,OAAO,YAAY,QAAQ,gBAAgB;OAAI,CAAA;OACtF,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QAAW,OAAO,EAAE,WAAW;QAAG,OAAO,YAAY,QAAQ,WAAW;OAAI,CAAA;MACzE;KACH,CAAA,IAAA;KAEH,YAAY,KAAA,IACX,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;OAAa,OAAO,EAAE,eAAe;OAAG,OAAO,QAAQ;OAAa;MAAI,CAAA,GACxE,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;OAAa,OAAO,EAAE,aAAa;OAAG,OAAO,QAAQ;OAAW;MAAI,CAAA,CACjE;KACH,CAAA,IAAA;KAEH,cAAc,eAAe,cAAc,KAAA,IAC1C,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACG,aACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAU;QAAb,UAAA;SAAgC,EAAE,gBAAgB;SAAE;SAAE,IAAI,KAAK,KAAK,gBAAgB,CAAC,CAAC,mBAAmB;QAAK;OAC5G,CAAA,IAAA;OACH,cACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAkB,OAAO,OAAO,SAAS,KAAK,IAAI;QAAI,UAAA,EAAE,cAAc;OAAK,CAAA,IACtF;OACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,qBAAsB,CAAA;OACrC,cAAc,KAAA,IACb,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAU;QAAb,UAAA;SAAgC,EAAE,cAAc;SAAE;SAAE,IAAI,KAAK,SAAS,CAAC,CAAC,mBAAmB;QAAK;OAC9F,CAAA,IAAA;MACD;KACH,CAAA,IAAA;IACD;;EAET;;EAGA,SAAS,aAAa,QAA2C,GAA8C;GAC7G,IAAI,WAAW,eAAe,OAAO,EAAE,iBAAiB;GACxD,IAAI,WAAW,uBAAuB,OAAO,EAAE,yBAAyB;GACxE,OAAO,EAAE,mBAAmB;EAC9B;;EAGA,SAAS,YAAY,QAA2C,GAA8C;GAC5G,IAAI,WAAW,eAAe,OAAO,EAAE,qBAAqB;GAC5D,IAAI,WAAW,uBAAuB,OAAO,EAAE,6BAA6B;GAC5E,OAAO,EAAE,kBAAkB;EAC7B;;EAGA,SAAS,cAAc,EAAE,SAA6C;GACpE,MAAM,MAAM,MAAM,SAAS,uBACvB,6BACA,MAAM,SAAS,MAAM,MAAM,gBAAgB,IACzC,4BACA;GAEN,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAW;IAAK,eAAY;GAAQ,CAAA;EACnD;;;;;;;;;;EAWA,SAAS,UAAU,EAAE,GAAG,OAAO,kBAAkB,aAAa,cAAc,WAAW,WAAW,mBAiB/F;GAGD,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,oBAAoB,MAAM,WAAW,QAAQ,UAAU;GAC7D,GAAG;IAAC;IAAkB,MAAM;IAAQ;GAAS,CAAC;GAE9C,MAAM,UAAU,MAAM,WAAW;GACjC,MAAM,SAAS,MAAM;GAKrB,MAAM,CAAC,gBAAgB,sBAAA,GAAqBA,MAAAA,SAAAA,CAA4B,CAAC,CAAC;GAC1E,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,kBAAkB,CAAC,CAAC;GACtB,GAAG,CAAC,MAAM,SAAS,CAAC;GACpB,MAAM,yBAAS,IAAI,IAAI,CAAC,GAAG,aAAa,GAAG,cAAc,CAAC;GAC1D,MAAM,0BAAU,IAAI,IAAY;GAChC,MAAM,WAAW,QAAQ,YAAY,CAAC,EAAA,CAAG,QAAQ,UAAU;IACzD,IAAI,OAAO,IAAI,MAAM,EAAE,GAAG,OAAO;IAGjC,IAAI,QAAQ,IAAI,MAAM,EAAE,GAAG,OAAO;IAClC,QAAQ,IAAI,MAAM,EAAE;IACpB,OAAO;GACT,CAAC;GACD,MAAM,CAAC,YAAY,kBAAA,GAAiBA,MAAAA,SAAAA,CAA6B,KAAA,CAAS;GAG1E,MAAM,WAAW,QAAQ,MAAM,UAAU,MAAM,OAAO,UAAU,KAC3D,QAAQ,MAAM,UAAU,MAAM,MAAM,KACpC,QAAQ;GACb,MAAM,iBAAiB,aAAa,aAAa,KAAA,KAAa,aAAa,SAAS,SAAS,EAAE,UACrF;IACJ,MAAM,KAAK,SAAS;IACpB,mBAAmB,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC;IACzC,gBAAgB,EAAE;GACpB,IACA,KAAA;GAEJ,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAe,cAAY,EAAE,YAAY;IAAxD,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;QAAI,WAAU;QAAiB,UAAA,EAAE,YAAY;OAAM,CAAA;OACnD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,qBAAsB,CAAA;OACtC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAkB,UAAU,WAAW,CAAC;QAAkB,SAAS;QAChG,UAAA,UAAU,EAAE,iBAAiB,IAAI,EAAE,cAAc;OAC5C,CAAA;MACL;;KAEJ,CAAC,mBAAmB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAgB,UAAA,EAAE,YAAY;KAAK,CAAA,IAAI;KACxE,oBAAoB,WAAW,KAAA,KAAa,UAAU,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAgB,UAAA,EAAE,cAAc;KAAK,CAAA,IAAI;KAC5G,MAAM,WAAW,UAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAgB,MAAK;MAChC,UAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD,EAAA,UAAA,CAAO,EAAE,YAAY,GAAG,MAAM,UAAU,KAAA,KAAa,MAAM,UAAU,KAAK,MAAM,MAAM,UAAU,EAAS,EAAA,CAAA;KACxG,CAAA,IACD;KAIH,QAAQ,SAAS,IAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;MAAK,WAAU;MAAU,cAAY,EAAE,eAAe;MACnD,UAAA,QAAQ,KAAK,UACZ,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;OAEE,MAAK;OACL,gBAAc,UAAU,OAAO,MAAM;OACrC,WAAW,UAAU,OAAO,MAAM,KAAK,wBAAwB;OAC/D,eAAe,cAAc,MAAM,EAAE;OALvC,UAAA,CAOE,iBAAA,GAAA,kBAAA,IAAA,CAAC,eAAD,EAAsB,MAAQ,CAAA,GAC7B,MAAM,KACD;MARD,GAAA,MAAM,EAQL,CACT;KACE,CAAA,IACH;KAEH,aAAa,KAAA,IACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,eAAD;MAEE,OAAO;MACP,WAAW,MAAM;MACd;MACH,UAAU;KACX,GALM,SAAS,EAKf,IACC;IACD;;EAET;;;;;;;;EASA,SAAS,WAAW,EAAE,SAAS,UAAU,GAAG,SAAS,OAAO,eAAe,YAQxE;GACD,MAAM,SAAS,CAAC,QAAQ;GACxB,MAAM,CAAC,YAAY,kBAAA,GAAiBA,MAAAA,SAAAA,CAAS,KAAK;GAClD,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAS,oBAAoB,QAAQ;OAAO,UAAA,EAAE,cAAc;MAAS,CAAA,GACjG,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;OAAM,WAAU;OAAhB,UAAA;QACG,QAAQ,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAY,UAAA,EAAE,SAAS;QAAQ,CAAA,IAAI;QACpE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAW,QAAQ,aAAa,aAAa;SAChD,UAAA,QAAQ,aAAa,EAAE,WAAW,IAAI,EAAE,aAAa;QAClD,CAAA;QACL,QAAQ,cAAc,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAyB,UAAA,EAAE,qBAAqB;QAAQ,CAAA,IAAI;QAClG,QAAQ,cAAc,CAAC,QAAQ,cAC9B,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SACrE,UAAA,EAAE,eAAe;QACZ,CAAA,IACN;QACH,QAAQ,cACP,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SACrE,UAAA,EAAE,mBAAmB;QAChB,CAAA,IACN;QACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACA;SACV,eAAe,eAAe,UAAU,CAAC,KAAK;SAE7C,UAAA,aAAa,EAAE,MAAM,IAAI,EAAE,MAAM;QAC5B,CAAA;QACP,QAAQ,QACP,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SAAW,UAAA,EAAE,eAAe;QAAU,CAAA,IAC5G;OACA;MACH,CAAA,CAAA;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,IAAI,oBAAoB,QAAQ;MAChC,WAAU;MACV,MAAK;MACL,OAAO,QAAQ;MACL;MACV,WAAW,UAAU,QAAQ,MAAM,OAAO,KAAK;KAChD,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,IAAI,kBAAkB,QAAQ;MAC9B,WAAU;MACV,MAAM,aAAa,SAAS;MAC5B,cAAa;MACb,YAAY;MACZ,aAAa,EAAE,YAAY;MAC3B,OAAO,QAAQ;MACf,UAAU,YAAY;MACtB,WAAW,UAAU,MAAM,MAAM,OAAO,KAAK;KAC9C,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,SAAS,EAAE,cAAc,IAAI,EAAE,gBAAgB;KAAK,CAAA;IACzE;;EAET;;EAGA,SAAS,aAAa,EAAE,GAAG,OAAO,UAAU,OAAO,UAAU,SAAS,OAAO,eAAe,UAAU,iBAWnG;GACD,MAAM,SAAS,MAAM;GACrB,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAU,cAAY,EAAE,eAAe;IAAtD,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;QAAO,WAAU;QAAY,UAAA,EAAE,eAAe;OAAS,CAAA,GACvD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QACd,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SAAQ,UAAA,EAAE,YAAY;QAAU,CAAA;OACpG,CAAA,CACH;MACL,CAAA,GAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAW,UAAA,EAAE,cAAc;MAAK,CAAA,CAC1C;;KACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,WAAU;QAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;SAAO,WAAU;SAAW,SAAQ;SAAqB,UAAA,EAAE,eAAe;QAAS,CAAA,GACnF,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;SAAM,WAAU;SAAhB,UAAA,CACG,OAAO,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;UAAM,WAAU;UAAY,UAAA,EAAE,YAAY;SAAQ,CAAA,IAAI,MAC3E,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,MAAK;UAAS,WAAU;UAAqB;UAAU,SAAS;UAAgB,UAAA,EAAE,OAAO;SAAU,CAAA,CACvG;QACH,CAAA,CAAA;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;QACE,IAAG;QACH,WAAU;QACV,OAAO,OAAO;QACJ;QACV,WAAW,UAAU,SAAS,MAAM,OAAO,KAAK;QALlD,UAAA;SAOE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,OAAM;UAAI,UAAA,EAAE,mBAAmB;SAAU,CAAA;SACjD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,OAAM;UAAW,UAAA,EAAE,gBAAgB;SAAU,CAAA;SACpD,MAAM,SAAS,QAAQ,YAAY,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,YACvD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAyB,OAAO,QAAQ;UAAM,UAAA,QAAQ;SAAc,GAAvD,QAAQ,EAA+C,CACrE;QACK;;OACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAW,UAAA,EAAE,mBAAmB;OAAK,CAAA;MAC/C;;KACJ,MAAM,SAAS,KAAK,YACnB,iBAAA,GAAA,kBAAA,IAAA,CAAC,YAAD;MAEW;MACC;MACP;MACH,UAAU,SAAS,QAAQ,QAAQ,IAAI,IAAI;MAC3C,QAAQ,SAAS,MAAM,QAAQ,IAAI,IAAI;MACvC,qBAAqB,cAAc,QAAQ,EAAE;MAC7C,gBAAgB,SAAS,QAAQ,EAAE;KACpC,GARM,QAAQ,EAQd,CACF;IACE;;EAET;;EAGA,SAAS,QAAQ,EAAE,MAAM,UAAU,SAAS,UAAU,GAAG,UAAU,WAAW,YAS3E;GACD,MAAM,UAAU,CACd;IAAE,OAAO;IAAW,OAAO,EAAE,gBAAgB;GAAE,GAC/C,GAAG,SAAS,QAAQ,YAAY,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,aAAa;IAAE,OAAO,QAAQ;IAAK,OAAO,QAAQ;GAAM,EAAE,CACjH;GACA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAS,iBAAiB,KAAK;OAAO,UAAA,EAAE,WAAW;MAAS,CAAA,GACxF,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;OAAM,WAAU;OAAhB,UAAA,CACG,KAAK,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAY,UAAA,EAAE,SAAS;OAAQ,CAAA,IAAI,MACjE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAqB;QAAU,SAAS;QAAW,UAAA,EAAE,YAAY;OAAU,CAAA,CACvG;MACH,CAAA,CAAA;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,kBAAD;MACE,IAAI,iBAAiB,KAAK;MAC1B,UAAU,KAAK;MACN;MACC;MACP;MACH,UAAU;KACX,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MACE,IAAI,mBAAmB,KAAK;MAC5B,WAAU;MACV,OAAO,KAAK;MACF;MACV,WAAW,UAAU,UAAU,MAAM,OAAO,KAAK;MACjD,cAAY,EAAE,aAAa;MAE1B,UAAA,QAAQ,KAAK,WACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OAA2B,OAAO,OAAO;OAAQ,UAAA,OAAO;MAAc,GAAzD,OAAO,KAAkD,CACvE;KACK,CAAA;KACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,UAAU;KAAK,CAAA;IACtC;;EAET;;;;;;;;;;;;;EAcA,SAAS,iBAAiB,EAAE,IAAI,UAAU,SAAS,UAAU,GAAG,YAO7D;GACD,MAAM,CAAC,MAAM,YAAA,GAAWA,MAAAA,SAAAA,CAAS,KAAK;GACtC,MAAM,CAAC,OAAO,aAAA,GAAYA,MAAAA,SAAAA,CAAS,EAAE;GAErC,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,MAAM,SAAS,EAAE;GACvB,GAAG,CAAC,IAAI,CAAC;GAIT,MAAM,SAAA,GAAQC,MAAAA,QAAAA,OACN,OAAO,YACX,QAAQ,SAAS,UAAU,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,IAAI,CAAU,CAAC,CAC9F,GACA,CAAC,OAAO,CACV;GAGA,MAAM,UAAU,wBAAwB,SAAS,UAAU,KAAK;GAEhE,MAAM,QADS,wBAAwB,UAAU,YAAY,eAAe,SAAS,KAAK,CAC1D,CAAC,CAAC,SAAS,UAAU,CACnD,GAAI,MAAM,YAAY,KAAA,IAClB,CAAC,IACD,CAAC;IAAE,MAAM;IAAkB,IAAI,WAAW,MAAM;IAAW,MAAM,MAAM;GAAQ,CAAC,GACpF,GAAG,MAAM,QAAQ,KAAK,YAAY;IAChC,IAAI,OAAO;IACX,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;KAAM,WAAU;KAAhB,UAAA;MACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OACE,MAAK;OACL,WAAU;OACV,SAAS,SAAS,SAAS,OAAO,KAAK;OACvC,UAAA;OACA,UAAU;MACX,CAAA;MACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAgB,UAAA,OAAO;MAAY,CAAA;MAClD,OAAO,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAY,UAAA,EAAE,YAAY;MAAQ,CAAA,IAAI;KAClE;;GAEV,EAAE,CACJ,CAAC;GAKD,OACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,sCAAAA,MAAD;IACQ;IACN,eAAe,QAAQ,KAAK;IAC5B,WAAW,YAAY;KACrB,SAAS,qBAAqB,UAAU,OAAO,CAAC;IAClD;IACA,aAAa;IACN;IACP,QAAQ,QAAQ,WAAW,IAAI,CAAC;KAC9B,MAAM;KACN,IAAI;KACJ,MAAM,EAAE,kBAAkB;IAC5B,CAAC,IAAI,CAAC;IACN,QAAA;IACA,QACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;KAAM,WAAU;KAAhB,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;MACM;MACJ,MAAK;MACL,WAAU;MACV,UAAU,YAAY,QAAQ,WAAW;MACzC,eAAe,SAAS,UAAU,CAAC,KAAK;MAL1C,UAAA,CAOE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OACb,UAAA,SAAS,WAAW,IAAI,EAAE,eAAe,IAAI,EAAE,kBAAkB,EAAE,OAAO,SAAS,OAAO,CAAC;MACxF,CAAA,GACN,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAe,eAAY;MAAQ,CAAA,CAC7C;KACP,CAAA,GAAA,OACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,MAAK;MACL,WAAU;MACV,aAAa,EAAE,wBAAwB;MACvC,cAAY,EAAE,wBAAwB;MACtC,OAAO;MACG;MACV,WAAA;MACA,WAAW,UAAU,SAAS,MAAM,OAAO,KAAK;KACjD,CAAA,IACC,IACA;;GAET,CAAA;EAEL;;EAGA,SAAS,UAAU,EAAE,GAAG,OAAO,UAAU,OAAO,UAAU,UAAU,aAQjE;GACD,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAU,cAAY,EAAE,YAAY;IAAnD,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,WAAU;QAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;SAAO,WAAU;SAAY,UAAA,EAAE,YAAY;QAAS,CAAA,GACpD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SACd,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,MAAK;UAAS,WAAU;UAAqB;UAAU,SAAS;UAAQ,UAAA,EAAE,SAAS;SAAU,CAAA;QACjG,CAAA,CACH;;OACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAW,UAAA,EAAE,WAAW;OAAK,CAAA;OACzC,MAAM,gBAAgB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAc,UAAA,EAAE,oBAAoB;OAAK,CAAA,IAAI;MAC9E;;KACJ,MAAM,MAAM,KAAK,SAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MAEQ;MACN,UAAU,MAAM;MAChB,SAAS,MAAM;MACL;MACP;MACH,WAAW,QAAQ,SAAS,KAAK,IAAI,GAAG;MACxC,YAAY,SAAS,UAAU,KAAK,IAAI,IAAI;MAC5C,gBAAgB,SAAS,KAAK,EAAE;KACjC,GATM,KAAK,EASX,CACF;KACA,MAAM,MAAM,WAAW,IAAI,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,YAAY;KAAK,CAAA,IAAI;IACxE;;EAET;;EAGA,SAAS,kBAAkB,EAAE,GAAG,OAAO,UAAU,UAAU,WAMxD;GACD,MAAM,QAAQ,MAAM,cAAc;GAClC,MAAM,SAA4C,KAAK,WAAW;IAChE,IAAI,QAAQ,iBAAiB,OAAO,EAAE,mBAAmB;IACzD,IAAI,QAAQ,kBAAkB,OAAO,EAAE,sBAAsB,MAAM;IACnE,OAAO,EAAE,KAAK,MAAM;GACtB;GAWA,MAAM,YAAY;IAAE,YAAY,MAAM,cAAc,KAAK,UAAU,MAAM,EAAE;IAAG,eAAe,MAAM;GAAc;GACjH,MAAM,WAAW,cAAc,MAAM,eAAe,SAAS;GAC7D,MAAM,eAAe,eAAe,SAAS;GAC7C,OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;IAAK,WAAU;IAAU,cAAY,EAAE,oBAAoB;IACzD,UAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;KAAK,WAAU;KAAf,UAAA;MACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;QAAO,WAAU;QAAY,UAAA,EAAE,oBAAoB;OAAS,CAAA,GAC5D,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAU;QAAhB,UAAA,CACG,gBAAgB,SAAS,SAAS,IACjC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACA;SACV,eAAe,SAAS,MAAM,cAAc,QAAQ,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAAC;SAEjF,UAAA,EAAE,2BAA2B,EAAE,OAAO,SAAS,OAAO,CAAC;QAClD,CAAA,IACN,MACH,QAAQ,IACP,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SACrE,UAAA,EAAE,sBAAsB;QACnB,CAAA,IACN,IACA;OACH,CAAA,CAAA;;MACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAW,UAAA,EAAE,mBAAmB;MAAK,CAAA;MACjD,MAAM,gBAAgB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAc,UAAA,EAAE,oBAAoB;MAAK,CAAA,IAAI;MAChF,SAAS,SAAS,KAAK,eACtB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAW,UAAA,EAAE,0BAA0B,EAAE,OAAO,SAAS,OAAO,CAAC;MAAK,CAAA,IACjF;MACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,kBAAD;OACE,IAAG;OACH,UAAU,MAAM;OAChB,SAAS,MAAM;OACL;OACV,GAAG;OACO;MACX,CAAA;KACE;;GACF,CAAA;EAET;;;;;;EAOA,SAAS,cAAc,MAAuB;GAC5C,MAAM,CAAC,SAAS,eAAA,GAAcF,MAAAA,SAAAA,CAAS,KAAK;GAC5C,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,SAAS,GAAG;IAChB,WAAW,IAAI;IACf,MAAM,QAAQ,iBAAiB,WAAW,KAAK,GAAG,IAAI;IACtD,aAAa,aAAa,KAAK;GACjC,GAAG,CAAC,IAAI,CAAC;GACT,OAAO;EACT;;;;;;;EAQA,SAAS,kBAAsC;GAC7C,MAAM,CAAC,WAAW,iBAAA,GAAgBA,MAAAA,SAAAA,CAA6B,KAAA,CAAS;GACxE,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,YAAY;IAChB,eAAoB;KAClB,gBAAgB;KAChB,KAAK,KAAK,IAAI;KACd,OAAO,wBAAwB;IACjC,CAAC,CAAC,CAAC,MAAM,YAAY;KACnB,IAAI,CAAC,WAAW,aAAa,OAAO;IAGtC,SAAS,CAAC,CAAC;IACX,aAAa;KACX,YAAY;IACd;GACF,GAAG,CAAC,CAAC;GACL,OAAO;EACT;;EAGA,SAAgB,wBAAwB,OAAiC;GACvE,MAAM,EAAE,MAAM;GACd,MAAM,QAAQ,MAAM,wBAAwB,aAAa,QAAQ;GACjE,MAAM,QAAQ,MAAM,qBAAqB,aAAa,QAAQ;GAC9D,MAAM,QAAQ,MAAM,qBAAqB,aAAa,QAAQ;GAC9D,MAAM,WAAW,CAAC,MAAM;GACxB,MAAM,YAAY,CAAC,MAAM;GACzB,MAAM,eAAe,cAAc,MAAM,UAAU;GACnD,MAAM,gBAAgB,gBAAgB;GACtC,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,WAAD;IAAS,WAAU;IAAa,cAAY,EAAE,OAAO;IAArD,UAAA;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;MAAI,WAAU;MAAY,UAAA,EAAE,OAAO;KAAM,CAAA;KACzC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAY,UAAA,EAAE,OAAO;KAAK,CAAA;KACtC,CAAC,MAAM,WAAW,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAc,MAAK;MAAU,UAAA,EAAE,UAAU;KAAK,CAAA,IAAI;KAClF,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;MACK;MACI;MACP,kBAAkB,MAAM;MACxB,aAAa,MAAM;MACnB,cAAc,MAAM,SAAS,KAAK,YAAY,QAAQ,EAAE;MACxD,WAAW,MAAM;MACjB,WAAW,MAAM;MACjB,iBAAiB,MAAM;KACxB,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;MACK;MACI;MACG;MACV,OAAO,MAAM;MACb,UAAU,MAAM;MAChB,SAAS,MAAM;MACf,OAAO,MAAM;MACb,gBAAgB,OAAO,MAAM,eAAe,EAAE;MAC9C,WAAW,SAAS,MAAM,KAAK,iBAAiB,IAAI;MACpD,qBAAqB,MAAM,WAAW,eAAe;KACtD,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;MACK;MACI;MACG;MACV,OAAO,MAAM;MACb,UAAU,MAAM;MAChB,UAAU,MAAM;MAChB,WAAW,MAAM;KAClB,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,mBAAD;MACK;MACI;MACG;MACV,UAAU,MAAM;MAChB,SAAS,MAAM;KAChB,CAAA;KACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,gBAAD;OACE,OAAO,EAAE,QAAQ;OACjB,MAAM,YAAY,EAAE,cAAc,IAAI,EAAE,YAAY;OACpD,OAAO,MAAM;OACb,UAAU,YAAY;OACtB,YAAY,MAAM;OAClB,iBAAiB,EAAE,WAAW;OAC9B,mBAAmB,EAAE,aAAa;OAClC,aAAa,MAAM;OACnB,WAAW,EAAE,MAAM;OACnB,WAAW,EAAE,MAAM;OACnB,YAAY,EAAE,eAAe;OAC7B,kBAAkB,EAAE,qBAAqB;OACzC,gBAAgB,EAAE,mBAAmB;OACrC,SAAS,SAAS,MAAM,KAAK,UAAU,IAAI;OAC3C,qBAAqB,MAAM,eAAe,SAAS;MACpD,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OACE,OAAO;OACP,UAAU,YAAY;OACnB;OACH,SAAS,MAAM;OACf,UAAU,MAAM;MACjB,CAAA,CACE;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,iBAAD;MACS;MACG;MACP;MACH,QAAQ,MAAM;MACd,SAAS,MAAM;KAChB,CAAA;KACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACG,MAAM,SAAS,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAY,MAAK;QAAU,UAAA,EAAE,YAAY;OAAK,CAAA,IAAI;OAC9E,eAAe,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAW,MAAK;QAAU,UAAA,EAAE,OAAO;OAAK,CAAA,IAAI;OACzE,iBAAA,GAAA,kBAAA,IAAA,CAACG,sCAAAA,QAAD;QAAQ,SAAQ;QAAQ,MAAK;QAAK,UAAU,CAAC,MAAM,SAAS,MAAM;QAAQ,SAAS,MAAM;QACtF,UAAA,EAAE,SAAS;OACN,CAAA;OACR,iBAAA,GAAA,kBAAA,IAAA,CAACA,sCAAAA,QAAD;QACE,SAAQ;QACR,MAAK;QACL,UAAU,CAAC,MAAM,SAAS,MAAM,WAAW,MAAM;QACjD,SAAS,MAAM;QAEd,UAAA,EAAE,MAAM,SAAS,WAAW,MAAM;OAC7B,CAAA;MACL;;KACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,WAAU;MAAb,UAAA;OAA0B;OACA;OACvB,kBAAkB,KAAA,IACjB,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACG,OACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QACE,WAAU;QACV,MAAM;QACN,QAAO;QACP,KAAI;QACJ,OAAO,EAAE,YAAY;QALvB,UAAA;SAMC;SACG;SAAc;SAAE,EAAE,iBAAiB;QACpC;OACH,CAAA,CAAA,EAAA,CAAA,IACA;MACH;;IACI;;EAEb;;;;;;;;;;;EC9mCA,SAAgB,mBAAmB,SAAmE;GACpG,IAAI,YAAY,MAAM,OAAO;GAC7B,KAAK,MAAM,WAAW,CAAC,QAAQ,wBAAwB,QAAQ,kBAAkB,GAC/E,IAAI,YAAY,QAAQ,OAAO,QAAQ,cAAc,YAAY,QAAQ,UAAU,SAAS,QAAQ,GAClG,OAAO;GAGX,OAAO;EACT;;EAGA,MAAM,eAAe,EAAE,SAAS,OAAO;;;;;;;EAyBvC,SAAgB,SACd,UACU;GACV,IAAI,aAAa,KAAA,GAAW,OAAO,EAAE,MAAM,eAAe;GAC1D,OAAO;IACL,MAAM;IACN,OAAO,SAAS;IAChB,sBAAsB,SAAS;IAC/B,UAAU,SAAS;IACnB,gBAAgB,SAAS;GAC3B;EACF;;EAGA,SAAS,YAAY,EAAE,IAAI,SAAS,gBAIjC;GACD,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAW,KAAK,aAAa;IAAkB,UAAA,KAAK,UAAU;GAAmB,CAAA;EAChG;;EAGA,SAAS,aAAa,EAAE,OAAO,UAAU,GAAG,UAKzC;GACD,MAAM,CAAC,SAAS,eAAA,GAAcC,MAAAA,SAAAA,CAAS,KAAK;GAC5C,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAQ;OAAmB,UAAA,EAAE,QAAQ;MAAS,CAAA,GAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OACd,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAqB;QAAU,eAAe,YAAY,UAAU,CAAC,KAAK;QACvG,UAAA,UAAU,EAAE,MAAM,IAAI,EAAE,MAAM;OACzB,CAAA;MACJ,CAAA,CACH;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,IAAG;MACH,WAAU;MACV,MAAM,UAAU,SAAS;MACzB,cAAa;MACb,YAAY;MACZ,OAAO,MAAM;MACH;MACV,WAAW,UAAU,OAAO,MAAM,OAAO,KAAK;KAC/C,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,YAAY;KAAK,CAAA;IACxC;;EAET;;;;;;;;;;;;;;EAeA,SAAgB,wBAAwB,OAAsD;GAC5F,MAAM,EAAE,MAAM;GAEd,MAAM,QAAQ,MAAM,2BAA2B,KAAA,IAC3C,MAAM,wBAAwB,aAAa,QAAQ,IACnD,KAAA;GACJ,MAAM,OAAO,SAAS,KAAK;GAC3B,MAAM,QAAQ,MAAM,wBAAwB,KAAA,IACxC,MAAM,qBAAqB,aAAa,QAAQ,IAChD,KAAA;GACJ,MAAM,QAAQ,OAAO,SAAS;GAC9B,MAAM,SAAS,OAAO,UAAU;GAChC,MAAM,UAAU,OAAO,WAAW;GAClC,MAAM,SAAS,OAAO,UAAU;GAChC,MAAM,gBAAgB,CAAC,SAAS;GAChC,MAAM,aAAa,KAAK,SAAS,UAAU,KAAK,QAAQ,KAAK,uBAAuB,MAAM;GAC1F,MAAM,WAAW,KAAK,SAAS,WAAW,CAAC,KAAK,YAAa,UAAU,KAAA,KAAa,CAAC,KAAK;GAC1F,MAAM,WAAW,KAAK,SAAS,UAAU,KAAK,SAAS,UAAU,KAAA;GAMjE,MAAM,WAAA,GAAUC,MAAAA,OAAAA,CAA8B,IAAI;GAClD,MAAM,CAAC,YAAY,kBAAA,GAAiBD,MAAAA,SAAAA,CAAS,KAAK;GAClD,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,MAAM,OAAO,QAAQ;IACrB,IAAI,SAAS,QAAQ,OAAO,qBAAqB,aAAa;IAC9D,MAAM,UAAU,KAAK,QAAQ,6CAAgC,KAAK,KAAK;IACvE,IAAI,YAAY,MAAM;IACtB,MAAM,MAAM,QAAQ;IACpB,IAAI,QAAQ,MAAM;IAClB,IAAI,eAAmC;IACvC,MAAM,aAAa;KACjB,MAAM,SAAS,mBAAmB,OAAO;KACzC,cAAc,WAAW,IAAI;KAC7B,IAAI,WAAW,MAAM;MAInB,OAAO,MAAM,UAAU;MACvB,eAAe;KACjB;IACF;IACA,KAAK;IACL,MAAM,WAAW,IAAI,iBAAiB,IAAI;IAC1C,SAAS,QAAQ,KAAK,EAAE,WAAW,KAAK,CAAC;IACzC,aAAa;KACX,SAAS,WAAW;KAGpB,IAAI,iBAAiB,MAAM,aAAa,MAAM,UAAU;IAC1D;GACF,GAAG,CAAC,CAAC;GACL,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IACE,KAAK;IACL,WAAU;IACV,uBAAoB;IACpB,OAAO,aAAa,KAAA,IAAY;IAJlC,UAAA;KAMG,cAAc,KAAK,SAAS,iBAAiB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,sBAAsB;KAAK,CAAA,IAAI;KACtG,cAAc,KAAK,SAAS,UAAU,CAAC,KAAK,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,iBAAiB;KAAK,CAAA,IAAI;KACxG,cAAc,WACb,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA;MACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,WAAU;OACb,UAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,WAAU;QAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAY,UAAA,EAAE,WAAW;QAAQ,CAAA,GACjD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;SAAM,WAAU;SAAhB,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;UAAa,IAAI;UAAY,SAAS,EAAE,WAAW;UAAG,cAAc,EAAE,aAAa;SAAI,CAAA,GACtF,MAAM,SAAS,SAAS,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;UAAM,WAAU;UAAY,UAAA,EAAE,iBAAiB;SAAQ,CAAA,IAAI,IAChF;QACH,CAAA,CAAA;;MACF,CAAA;MACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;OACE,OAAO,MAAM;OACH;OACP;OACH,SAAS,SAAS,MAAM,KAAK,UAAU,IAAI;MAC5C,CAAA;MACA,UAAU,KAAA,IACT,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OACE,OAAO;OACG;OACP;OACH,SAAS,MAAM;OACf,UAAU,MAAM;MACjB,CAAA,IACC;MACJ,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAAf,UAAA;QACG,SAAS,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAG,WAAU;SAAY,MAAK;SAAU,UAAA,EAAE,YAAY;QAAK,CAAA,IAAI;QACzE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACV,UAAU,CAAC,SAAS;SACpB,SAAS,MAAM;SAEd,UAAA,EAAE,SAAS;QACN,CAAA;QACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACV,UAAU,iBAAiB;SAC3B,SAAS,MAAM;SAEd,UAAA,EAAE,SAAS,WAAW,MAAM;QACvB,CAAA;OACL;;KACL,EAAA,CAAA,IACA;IACD;;EAET;;;ECrLA,MAAa,KAA6C;GACxD,KAAK;GACL,OAAO;GACP,OACE;GAEF,QAAQ;GACR,YAAY;GACZ,WAAW;GACX,aAAa;GACb,cAAc;GACd,SAAS;GACT,aAAa;GACb,YAAY;GACZ,gBAAgB;GAChB,kBAAkB;GAClB,sBAAsB;GACtB,qBAAqB;GACrB,yBAAyB;GACzB,kBAAkB;GAClB,sBAAsB;GACtB,uBAAuB;GACvB,wBAAwB;GACxB,iBAAiB;GACjB,oBAAoB;GACpB,wBAAwB;GACxB,WAAW;GACX,eAAe;GACf,eAAe;GACf,cAAc;GACd,YAAY;GACZ,eAAe;GACf,cAAc;GACd,YAAY;GACZ,gBAAgB;GAChB,gBAAgB;GAChB,eAAe;GACf,mBAAmB;GACnB,mBAAmB;GACnB,YAAY;GACZ,WAAW;GACX,YAAY;GACZ,oBAAoB;GACpB,SAAS;GACT,YAAY;GACZ,WAAW;GACX,eAAe;GACf,gBAAgB;GAChB,aAAa;GACb,UAAU;GACV,wBAAwB;GACxB,kBAAkB;GAClB,YAAY;GACZ,oBAAoB;GACpB,mBACE;GAEF,mBAAmB;GACnB,oBAAoB;GACpB,sBAAsB;GACtB,wBAAwB;GACxB,yBAAyB;GACzB,YAAY;GACZ,OAAO;GACP,eAAe;GACf,gBAAgB;GAChB,gBAAgB;GAChB,UAAU;GACV,SAAS;GACT,MAAM;GACN,QAAQ;GACR,OAAO;GACP,YAAY;GACZ,SAAS;GACT,QAAQ;GACR,MAAM;GACN,MAAM;GACN,YAAY;GACZ,cAAc;GACd,iBAAiB;GACjB,cAAc;GACd,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,aAAa;GACb,kBAAkB;GAClB,WAAW;GACX,aAAa;GACb,eAAe;GACf,gBAAgB;GAChB,cAAc;GACd,gBAAgB;GAChB,WAAW;GACX,eAAe;GACf,aAAa;GACb,eAAe;GACf,YAAY;GACZ,cAAc;GACd,eAAe;GACf,qBAAqB;GACrB,mBAAmB;GACnB,iBAAiB;GACjB,qBAAqB;GACrB,yBAAyB;GACzB,6BAA6B;GAC7B,mBAAmB;GACnB,kBAAkB;GAClB,cAAc;GACd,gBAAgB;GAChB,aAAa;GACb,eAAe;GACf,iBAAiB;GACjB,mBAAmB;GACnB,iBAAiB;GACjB,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,aAAa;GACb,eAAe;GACf,cAAc;GACd,eAAe;GACf,aAAa;GACb,cAAc;GACd,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,iBAAiB;GACjB,cAAc;GACd,kBAAkB;GAClB,gBAAgB;GAChB,oBAAoB;GACpB,WAAW;GACX,iBAAiB;GACjB,iBAAiB;GACjB,sBAAsB;EACxB;EAEA,MAAa,KAA6C;GACxD,KAAK;GACL,OAAO;GACP,OACE;GAGF,QAAQ;GACR,YAAY;GAEZ,WAAW;GACX,aAAa;GACb,cAAc;GACd,SAAS;GACT,aAAa;GACb,YAAY;GACZ,gBAAgB;GAEhB,kBAAkB;GAClB,sBAAsB;GACtB,qBAAqB;GACrB,yBAAyB;GAEzB,kBAAkB;GAClB,sBAAsB;GACtB,uBAAuB;GACvB,wBAAwB;GACxB,iBAAiB;GACjB,oBAAoB;GACpB,wBAAwB;GAExB,WAAW;GACX,eAAe;GAIf,eAAe;GACf,cAAc;GAGd,YAAY;GACZ,eAAe;GACf,cAAc;GACd,YAAY;GACZ,gBAAgB;GAChB,gBAAgB;GAChB,eAAe;GACf,mBAAmB;GACnB,mBAAmB;GAEnB,YAAY;GACZ,WAAW;GAIX,YAAY;GACZ,oBAAoB;GACpB,SAAS;GACT,YAAY;GACZ,WAAW;GACX,eAAe;GACf,gBAAgB;GAChB,aAAa;GACb,UAAU;GACV,wBAAwB;GACxB,kBAAkB;GAClB,YAAY;GACZ,oBAAoB;GACpB,mBACE;GAGF,mBAAmB;GACnB,oBAAoB;GACpB,sBAAsB;GACtB,wBAAwB;GAExB,yBAAyB;GACzB,YAAY;GACZ,OAAO;GACP,eAAe;GACf,gBAAgB;GAChB,gBAAgB;GAChB,UAAU;GACV,SAAS;GACT,MAAM;GACN,QAAQ;GACR,OAAO;GACP,YAAY;GACZ,SAAS;GACT,QAAQ;GACR,MAAM;GACN,MAAM;GACN,YAAY;GACZ,cAAc;GACd,iBAAiB;GACjB,cAAc;GACd,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,aAAa;GACb,kBAAkB;GAClB,WAAW;GACX,aAAa;GACb,eAAe;GACf,gBAAgB;GAChB,cAAc;GACd,gBAAgB;GAChB,WAAW;GACX,eAAe;GACf,aAAa;GACb,eAAe;GACf,YAAY;GACZ,cAAc;GACd,eAAe;GACf,qBAAqB;GACrB,mBAAmB;GACnB,iBAAiB;GACjB,qBAAqB;GACrB,yBAAyB;GACzB,6BAA6B;GAC7B,mBAAmB;GACnB,kBAAkB;GAClB,cAAc;GACd,gBAAgB;GAChB,aAAa;GACb,eAAe;GACf,iBAAiB;GACjB,mBAAmB;GACnB,iBAAiB;GACjB,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,aAAa;GACb,eAAe;GACf,cAAc;GACd,eAAe;GACf,aAAa;GACb,cAAc;GACd,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,iBAAiB;GACjB,cAAc;GACd,kBAAkB;GAClB,gBAAgB;GAChB,oBAAoB;GACpB,WAAW;GACX,iBAAiB;GACjB,iBAAiB;GACjB,sBAAsB;EACxB;;;;ECpYA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgIjB,SAAS,gBAAsB;GAC7B,IAAI,OAAO,aAAa,aAAa;GACrC,MAAM,KAAK;GACX,IAAI,SAAS,cAAc,0BAA0B,GAAG,GAAG,MAAM,MAAM;GACvE,MAAM,MAAM,SAAS,cAAc,OAAO;GAC1C,IAAI,QAAQ,SAAS;GACrB,IAAI,QAAQ,YAAY;GACxB,IAAI,cAAc;GAClB,SAAS,KAAK,YAAY,GAAG;EAC/B;;;;;;;EAcA,SAAgB,MAAM,KAAoB;GACxC,cAAc;GAEd,MAAM,aAAa,IAAI,IAAI,YAAY;GACvC,IAAI,eAAe,KAAA,GAOjB,0BAA0B,kBAAkB,IAAI,OAAO,UAAU,CAAC,CAAC,WAAW,OAAO,OAAO,IAAI;GAOlG,IAAI,aAAa,IAAI,OAAO,SAAS,wBAAwB;IAAE;IAAI;GAAG,CAAC,GAAG,qCAAqC;GAE/G,MAAM,YAAY,uBAAuB,YAAY,KAAK,WAAW;GACrE,IAAI,cAAc,KAAA,GAAW;IAC3B,oBAAoB,KAAK,WAAW,YAAY,eAAe;IAC/D;GACF;GAKA,IAAI,OAAO,CAAC,oBAAoB,IAAI,cAAc;IAChD,MAAM,cAAe,UAAU,OAE5B;IACH,oBAAoB,WAAW,EAAE,YAAY,CAAC;GAChD,CAAC;EACH;;EAGA,SAAS,oBACP,KACA,KACA,iBACM;GACN,MAAM,QAAQ,IAAI,cAAc,KAA8B,EAAE,WAAW,eAAe,CAAC;GAO3F,IAAI;GACJ,MAAM,aAAa,IAAI,8BACrB,OACA;IAAE,GAAG;IAAK,cAAc,eAAe,KAAK,QAAQ,QAAQ;KAAE,IAAI;KAAO,OAAO,EAAE,SAAS,2CAA2C;IAAE,CAAC;GAAE,GAC3I,eACF;GACA,IAAI,mBAAmB,WAAW,QAAQ,GAAG,+CAA+C;GAC5F,MAAM,QAAQ,oBAAuC,WAAW,MAAM,CAAC;GACvE,WAAW,gBAAgB,MAAM,IAAI,WAAW,MAAM,CAAC,CAAC;GACxD,IAAI,aACK,IAAI,OAER,IAAI,uCAAuC;IAAE,WAAW,mBAAmB;GAAE,CAAC,GACjF,oDACF;GAYA,IAAI;GACJ,IAAI;GACJ,MAAM,eAAyC;IAC7C,SAAS,0BAA0B;IACnC,aAAa;KACX,GAAG,0BAA0B;KAC7B,GAAG,2BAA2B;KAC9B,GAAG,0BAA0B;IAC/B;GACF;GACA,IAAI,aAAa;IACf,IAAI,YAAY;IAChB,IAAI;IACJ,IAAS,OAAO,OAAO,YAAY,CAAC,CAAC,MAAM,YAAiC;KAC1E,IAAI,WAAW;MACb,QAAa;MACb;KACF;KACA,UAAU;KACV,IAAI,OAAO,CAAC,oBAAoB,IAAI,iBAAiB;MACnD,iBAAiB,aAAa,OAAO;MAErC,WAAW,eAAe;MAC1B,aAAa,mBAAmB;OAC9B,iBAAiB,KAAA;MACnB,GAAG,2CAA2C;KAChD,CAAC;IACH,IAAI,UAAmB;KAGrB,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IACzE,CAAC;IACD,aAAa;KACX,YAAY;KACZ,iBAAiB,KAAA;KACjB,IAAI,YAAY,KAAA,GAAW,QAAa;IAC1C;GACF,GAAG,wCAAwC;GAC3C,MAAM,cAA2B;IAC/B,QAAQ,YAAY;KAClB,MAAM,YAAY;KAClB,IAAI,cAAc,KAAA,GAChB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,2CAA2C;KAAE;KAExG,OAAO,UAAU,OAAO;IAC1B;IACA,QAAQ,YAAY;KAClB,MAAM,YAAY;KAClB,IAAI,cAAc,KAAA,GAChB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,2CAA2C;KAAE;KAExG,OAAO,UAAU,OAAO;IAC1B;GACF;GAGA,qBAAqB,YAAY,OAAO;GACxC,MAAM,kBAAkB,IAAI,2BAA2B,WAAW;GAClE,IAAI,mBAAmB,gBAAgB,QAAQ,GAAG,4CAA4C;GAC9F,MAAM,aAAa,oBAAoC,gBAAgB,MAAM,CAAC;GAC9E,gBAAgB,gBAAgB,WAAW,IAAI,gBAAgB,MAAM,CAAC,CAAC;GAKvE,MAAM,cAA2B;IAC/B,YAAY,YAAY;KACtB,IAAI,mBAAmB,KAAA,GACrB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,oCAAoC;KAAE;KAEjG,OAAO,eAAe,WAAW;IACnC;IACA,aAAa,YAAY;KACvB,IAAI,mBAAmB,KAAA,GACrB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,oCAAoC;KAAE;KAEjG,OAAO,eAAe,YAAY;IACpC;IACA,aAAa,YAAY;KACvB,IAAI,mBAAmB,KAAA,GACrB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,oCAAoC;KAAE;KAEjG,OAAO,eAAe,YAAY;IACpC;GACF;GACA,MAAM,kBAAkB,IAAI,iCAAiC,WAAW;GACxE,IAAI,mBAAmB,gBAAgB,QAAQ,GAAG,4CAA4C;GAC9F,MAAM,aAAa,oBAAoC,gBAAgB,MAAM,CAAC;GAC9E,IAAI,iBAAiB,gBAAgB,MAAM,CAAC,CAAC;GAC7C,gBAAgB,gBAAgB;IAC9B,MAAM,QAAQ,gBAAgB,MAAM,CAAC,CAAC;IAGtC,IAAI,UAAU,aAAa,mBAAmB,WAAW;KACvD,WAAW,mBAAmB;KAC9B,gBAAqB,QAAQ;IAC/B;IACA,iBAAiB;IACjB,WAAW,IAAI,gBAAgB,MAAM,CAAC;GACxC,CAAC;GAED,MAAM,kBAAkB;IACtB,OAAO;KAAE,qBAAqB;KAAO,kBAAkB;KAAY,kBAAkB;IAAW;IAChG,OAAO,OAAe,SAAiB,WAAW,KAAK,OAAO,IAAI;IAClE,aAAa,UAAkB,WAAW,WAAW,KAAK;IAG1D,YAAY,KAAK,WAAW,KAAK,CAAC,CAAC,WAAW;KAC5C,MAAM,UAAU,WAAW,MAAM;KACjC,IAAI,CAAC,QAAQ,UAAU,QAAQ,sBAAsB,gBAAqB,QAAQ;IACpF,CAAC;IACD,eAAe,WAAW,QAAQ;IAClC,oBAAoB,KAAK,gBAAgB,QAAQ;IACjD,kBAAkB,KAAK,gBAAgB,MAAM;IAC7C,mBAAmB,KAAK,gBAAgB,OAAO;IAC/C,kBAAkB,WAAW,WAAW;IACxC,gBAAgB,OAAe,WAAW,cAAc,EAAE;IAC1D,mBAAmB,IAAY,SAAiB,WAAW,iBAAiB,IAAI,IAAI;IACpF,iBAAiB,IAAY,SAAiB,WAAW,eAAe,IAAI,IAAI;IAChF,iBAAiB,OAAe,WAAW,eAAe,EAAE;IAC5D,eAAe,WAAW,QAAQ;IAClC,aAAa,OAAe,WAAW,WAAW,EAAE;IACpD,iBAAiB,IAAY,QAAkB,WAAW,eAAe,IAAI,GAAG;IAChF,kBAAkB,IAAY,SAAiB,WAAW,gBAAgB,IAAI,IAAI;IAClF,oBAAoB,QAAkB,WAAW,kBAAkB,GAAG;IACtE,0BAA0B,WAAW,mBAAmB;GAC1D;GAEA,IAAI,MAAM,OAAO,0BAA0B,IAAI,MAAM,SAAS;IAC5D,MAAM;IACN,IAAI;IACJ,OAAO;IACP,aAAa,IAAI,OAAO,KAAK,sBAAsB,CAAC,CAAC,KAAK;IAC1D,QAAQ;IACR,QAAQ;GACV,GAAG,uBAAuB,CAAC;GAiB3B,IAAI,MAAM,OAAO,uCAAuC,IAAI,MAAM,SAAS;IACzE,MAAM;IACN,KAAK;IACL,QAAQ;IACR,eAAe;KACb,OAAO;MAAE,qBAAqB;MAAO,kBAAkB;KAAW;KAClE,OAAO,OAAe,SAAiB,WAAW,KAAK,OAAO,IAAI;KAClE,YAAY,KAAK,WAAW,KAAK,CAAC,CAAC,WAAW;MAC5C,MAAM,UAAU,WAAW,MAAM;MACjC,IAAI,CAAC,QAAQ,UAAU,QAAQ,sBAAsB,gBAAqB,QAAQ;KACpF,CAAC;KACD,eAAe,WAAW,QAAQ;KAClC,kBAAkB,KAAK,gBAAgB,MAAM;KAC7C,mBAAmB,KAAK,gBAAgB,OAAO;IACjD;GACF,GAAG,uBAAuB,CAAC;EAC7B;EAEA,MAAa,SAA4B;GACvC;GACA;GACA;GACA;GACA;EACF"}
\ No newline at end of file
+{"version":3,"file":"client.js","names":["numberField","booleanField","IDLE","record","stringField","reject","pkg.version","(pkg as { repository?: unknown }).repository","useState","useMemo","Menu","Button","HIDDEN_STYLE","useState","useRef","useState","Button","useRef"],"sources":["../src/client/snapshot-store.ts","../src/command-locales.ts","../src/client/sessions.ts","../src/client/settings.ts","../src/client/legacy-credentials.ts","../src/client/usage.ts","../src/client/prices.ts","../src/client/login.ts","../src/wire-shared.ts","../src/usage-wire.ts","../src/login-wire.ts","../src/client/login-row.tsx","../src/client/model-select.ts","../package.json","../src/client/version.ts","../src/client/update.ts","../src/client/section.tsx","../src/client/card.tsx","../src/client/panel-copy.ts","../src/client/panel.ts","../src/client/panel-view.tsx","../src/cost-facts.ts","../src/client/session-cost.ts","../src/client/session-cost-display.ts","../src/client/session-cost-view.tsx","../src/client/panel-styles.ts","../src/client/locales.ts","../src/client/index.ts"],"sourcesContent":["/**\n * A tiny observable snapshot store — the `getSnapshot` / `subscribe` / `set`\n * triple React's `useSyncExternalStore` consumes through the harness slot kit\n * (the host builds each slot's `useFoo(selector)` hook from one of these).\n *\n * Vendored on purpose. DSH 0.1.2 seeds `@deepseek-ai/dsh-client-store` as a\n * platform module, but older Web shells do not and the package is not yet\n * published independently on npm. Inlining the small subset used here avoids\n * a version-specific module request while preserving the slot-hook contract.\n */\n\n/** Mutable observable snapshot consumed by slot hooks. */\nexport interface SnapshotStore<T> {\n  getSnapshot(): T\n  subscribe(listener: () => void): () => void\n  set(value: T): void\n}\n\n/** Notify every subscriber without letting one faulty UI consumer suppress the rest. */\nfunction notifyListeners(listeners: ReadonlySet<() => void>): void {\n  for (const listener of listeners) {\n    try {\n      listener()\n    } catch (error: unknown) {\n      console.error('[dsh-commandcode-provider] snapshot subscriber failed:', error)\n    }\n  }\n}\n\n/** Create one observable snapshot store. */\nexport function createSnapshotStore<T>(initial: T): SnapshotStore<T> {\n  let snapshot = initial\n  const listeners = new Set<() => void>()\n  return {\n    getSnapshot: () => snapshot,\n    subscribe(listener: () => void) {\n      listeners.add(listener)\n      return () => {\n        listeners.delete(listener)\n      }\n    },\n    set(value: T) {\n      if (Object.is(value, snapshot)) return\n      snapshot = value\n      notifyListeners(listeners)\n    },\n  }\n}\n","/**\n * Locale copy for the `/commandcode` usage command and the friendly\n * image-gate error rewrite. Distinct from `./client/locales.ts` (the\n * settings-page namespace `settings.commandcode`): the command runs on the\n * Host and has no access to the client's `ctx.locale`, so the dictionaries\n * are exposed as plain constants for direct lookup; the resolver lives in\n * `pickCommandLocale()`. The image-gate wrapper also lives on the client\n * but is reached from a non-React path that has no `t` in scope, so the\n * same dictionaries serve both surfaces.\n *\n * zh is the source of truth for the key set; en must carry the exact same\n * keys — a mismatch is a compile error at the lookup site.\n */\n\n/** Active locale id recognized by the command and the image-gate wrapper. */\nexport type LocaleId = 'zh' | 'en'\n\n/** Dictionary keys used by the `/commandcode` command and the image-gate wrapper. */\nexport type CommandCodeCommandKey =\n  | 'title'                   // top heading of a single-account report\n  | 'accountTitle'            // per-account heading in the multi-account view\n  | 'accountSeparator'        // rule between accounts in the multi-account view\n  | 'activeBadge'             // \"currently serving\" badge\n  | 'invalidCredentialBadge'  // mark for an account whose key is invalid\n  | 'cooldownBadge'           // mark for an account in rate-limit cooldown\n  | 'rateLimitBadge'          // mark when the pool has marked a key rate-limited\n  | 'unconfigured'            // one-account row when the slot has no key\n  | 'blockedInvalidKey'       // top-of-report block when the whole account is 401\n  | 'blockedServiceUnavailable' // 5xx\n  | 'blockedNetwork'          // network unreachable\n  | 'planLine'                // \"  📦 套餐    {name}{status}{period}\"\n  | 'planPeriodSuffix'        // \" · 账期截止 {date}\" / \" · period ends {date}\"\n  | 'usageHeader'             // \"── 请求 ─────...\"\n  | 'requestsLine'            // \"  💬 请求    {n} 次 / 失败 {f}  成功率 {r}%\"\n  | 'costLine'                // \"  💰 花费    {money}  ({credits} credits)\"\n  | 'tokensLine'              // \"  🔤 Token   {in} 入 / {out} 出\"\n  | 'creditsHeader'           // \"── 信用 ─────...\"\n  | 'monthlyLine'             // \"  💳 月额度  {monthly}   (已购 {purchased} / 赠送 {free})\"\n  | 'barLine'                 // \"     └ {bar}  {pct}%\"\n  | 'windowsHeader'           // \"── 窗口用量 ─────...\"\n  | 'fiveHourLine'            // \"  ⏱ 5 小时  {used} / {cap}{warn}\"\n  | 'weeklyLine'              // \"  📅 每周    {used} / {cap}{warn}\"\n  | 'windowBarLine'           // \"     └ {bar}  重置 {when}\"\n  | 'exceededWarning'         // the trailing \"  ⚠️ 超限!\" / \"  ⚠️ exceeded!\"\n  | 'resetSuffix'             // \"重置 {when}\" (the suffix after the bar)\n  | 'partialFailures'         // \"⚠️  部分端点失败: {list}\"\n  | 'noData'                  // \"(no data — check your API key)\"\n  | 'errorText'               // \"Could not fetch Command Code usage: {message}\"\n  | 'imageGate'               // image-gate rejection rewrite (with {model})\n\nexport const commandcodeCommand: Record<LocaleId, Record<CommandCodeCommandKey, string>> = {\n  zh: {\n    title: '📊 Command Code 用量{account}',\n    accountTitle: '📊 {label}{badges}',\n    accountSeparator: '────────────────────',\n    activeBadge: '  ✅ 当前使用',\n    invalidCredentialBadge: '  ⛔ 密钥无效',\n    cooldownBadge: '  ⏳ 限额冷却中，重置 {when}',\n    rateLimitBadge: '  ⏳ 已达限额（等待窗口探测）',\n    unconfigured: '  (未配置 API 密钥)',\n    blockedInvalidKey:\n      '⛔ API 密钥无效或已过期 — 服务端拒绝了全部请求（401），请检查该账户的密钥配置',\n    blockedServiceUnavailable:\n      '⚠️ Command Code 服务暂时不可用（5xx），稍后重试',\n    blockedNetwork:\n      '⚠️ 无法连接 Command Code 服务 — 请检查网络或 API 地址',\n    planLine: '  📦 套餐    {name}{status}{period}',\n    planPeriodSuffix: ' · 账期截止 {date}',\n    usageHeader: '── 请求 ──────────────────────────────',\n    requestsLine: '  💬 请求    {n} 次 / 失败 {f}  成功率 {r}%',\n    costLine: '  💰 花费    {money}  ({credits} credits)',\n    tokensLine: '  🔤 Token   {in} 入 / {out} 出',\n    creditsHeader: '── 信用 ──────────────────────────────',\n    monthlyLine: '  💳 月额度  {monthly}   (已购 {purchased} / 赠送 {free})',\n    barLine: '     └ {bar}  {pct}%',\n    windowsHeader: '── 窗口用量 ──────────────────────────',\n    fiveHourLine: '  ⏱ 5 小时  {used} / {cap}{warn}',\n    weeklyLine: '  📅 每周    {used} / {cap}{warn}',\n    windowBarLine: '     └ {bar}  重置 {when}',\n    exceededWarning: '  ⚠️ 超限!',\n    resetSuffix: '重置 {when}',\n    partialFailures: '⚠️  部分端点失败: {list}',\n    noData: '（无数据 — 请检查 API 密钥）',\n    errorText: '获取 Command Code 用量失败：{message}',\n    imageGate:\n      '当前会话已包含图片，而模型 {model} 不支持图片输入；'\n      + '请选择支持图片的模型，或先移除会话中的图片。',\n  },\n  en: {\n    title: '📊 Command Code usage{account}',\n    accountTitle: '📊 {label}{badges}',\n    accountSeparator: '────────────────────',\n    activeBadge: '  ✅ active',\n    invalidCredentialBadge: '  ⛔ invalid key',\n    cooldownBadge: '  ⏳ cooling down, resets {when}',\n    rateLimitBadge: '  ⏳ rate-limited (waiting for window probe)',\n    unconfigured: '  (no API key configured)',\n    blockedInvalidKey:\n      '⛔ API key invalid or expired — the server rejected every request (401); check the key configured for this account',\n    blockedServiceUnavailable:\n      '⚠️ Command Code service temporarily unavailable (5xx); try again later',\n    blockedNetwork:\n      '⚠️ could not reach the Command Code service — check your network or the API base setting',\n    planLine: '  📦 Plan     {name}{status}{period}',\n    planPeriodSuffix: ' · period ends {date}',\n    usageHeader: '── Requests ──────────────────────────',\n    requestsLine: '  💬 Requests {n} / failed {f}  success rate {r}%',\n    costLine: '  💰 Spend    {money}  ({credits} credits)',\n    tokensLine: '  🔤 Tokens   {in} in / {out} out',\n    creditsHeader: '── Credits ───────────────────────────',\n    monthlyLine: '  💳 Monthly  {monthly}   (purchased {purchased} / free {free})',\n    barLine: '     └ {bar}  {pct}%',\n    windowsHeader: '── Window usage ──────────────────────',\n    fiveHourLine: '  ⏱ 5-hour   {used} / {cap}{warn}',\n    weeklyLine: '  📅 Weekly   {used} / {cap}{warn}',\n    windowBarLine: '     └ {bar}  resets {when}',\n    exceededWarning: '  ⚠️ exceeded!',\n    resetSuffix: 'resets {when}',\n    partialFailures: '⚠️  some endpoints failed: {list}',\n    noData: '(no data — check your API key)',\n    errorText: 'Could not fetch Command Code usage: {message}',\n    imageGate:\n      'This session already contains images, and model {model} does not accept'\n      + ' image input; please select an image-capable model, or remove the'\n      + ' images from the session first.',\n  },\n}\n\n/**\n * Resolve the active locale for a Host-side command run.\n *\n * Priority: explicit `override` (from `Config.lang`) → `LC_ALL` → `LANG` →\n * the conventional fallback (`'zh'`, matching the existing single-language\n * behavior so unconfigured deployments keep their current output).\n *\n * The values are matched on the leading tag only — `zh_CN.UTF-8`,\n * `zh-Hans`, `zh` all map to `'zh'`; everything starting with `en` maps to\n * `'en'`; anything else falls back to `'zh'` (a non-`en` shell that\n * already has Chinese in the terminal is the closest sensible default;\n * a Western shell that happens to be neither keeps the existing Chinese\n * output rather than swapping to half-translated English).\n */\nexport function pickCommandLocale(\n  override: string | undefined,\n  env: Readonly<Record<string, string | undefined>> = process.env as Record<string, string | undefined>,\n): LocaleId {\n  if (override === 'zh' || override === 'en') return override\n  const raw = env.LC_ALL ?? env.LANG ?? ''\n  const tag = raw.toLowerCase().split(/[._-]/)[0] ?? ''\n  if (tag === 'en') return 'en'\n  return 'zh'\n}\n\n/** Look up a key in the active locale, with an internal en fallback. */\nexport function commandCopy(locale: LocaleId, key: CommandCodeCommandKey): string {\n  return commandcodeCommand[locale][key] ?? commandcodeCommand.en[key] ?? key\n}\n","/**\n * Friendly-error wrapper for the harness's image-session gate.\n *\n * The host rejects switching to a text-only model while the session already\n * contains images with a `model-unavailable` error\n * (`dsh-host-apiproxy`'s `session.selectModel` handler). That rejection is\n * intentional and cannot be relaxed from the plugin side — the adapter's\n * `inputModalities` is exactly what makes the guard work. What we CAN do is\n * make the error message friendlier: wrap the shared\n * `connection.api.sessions.selectModel` face so a `model-unavailable`\n * rejection shows a clear, actionable hint (with the requested model name)\n * instead of the raw English harness message.\n *\n * The wrapper is deliberately narrow: only the `model-unavailable` code is\n * rewritten, only when the message matches the image-session gate, and only\n * the message text changes — the error code and details pass through\n * untouched so any caller that switches on `error.code` keeps working.\n *\n * The wire types are spelled structurally here (not imported from\n * `@deepseek-ai/dsh-host-apiproxy`) so this client bundle does not drag an\n * extra peer dependency into the package; the shapes are stable and the\n * client build inlines them anyway.\n *\n * The wrapper takes a `getLocale` thunk because it is reached from a\n * non-React path that has no `t` in scope; the supplied thunk reads the\n * active locale at call time (typically `() => ctx.locale.getLocale().active`\n * in the client entry), and the message template lives in the shared\n * `commandcodeCommand` dictionary used by the Host-side `/commandcode`\n * command — the same bilingual surface serves both.\n *\n * This module is deliberately free of React and other client-platform\n * imports so the node test runner can exercise it directly.\n */\n\nimport { commandcodeCommand, type LocaleId } from '../command-locales.ts'\n\n/** The `model-unavailable` error details: provider + model id. */\ninterface ModelUnavailableDetails {\n  provider: string\n  model: string\n}\n\n/** The narrow slice of the RPC error we need to inspect and rewrite. */\ninterface RpcErrorLike {\n  code: string\n  message: string\n  details?: ModelUnavailableDetails\n}\n\n/**\n * The narrow slice of a unary RPC result we need to inspect and rewrite.\n * The wire shape from `sessions.selectModel` (via `AbstractApiClient.callUnary`)\n * is the full envelope `{ rpcId, result: { ok, error? } }` — the error lives\n * under `result.result`, not at the top level. `RpcResultLike` models that.\n */\ninterface RpcResultLike {\n  rpcId: string\n  result:\n    | { ok: true; value?: unknown }\n    | { ok: false; error: RpcErrorLike }\n}\n\n/** One selectModel call: payload in, envelope out. */\ntype SelectModelCall = (\n  payload: { sessionId: string; provider: string; model: string; reasoningEffort?: string },\n  signal?: AbortSignal,\n) => Promise<RpcResultLike>\n\n/** The shared sessions wire face we wrap. */\ninterface SessionsLike {\n  selectModel: SelectModelCall\n}\n\n/** Whether a selectModel rejection is the harness's image-session gate. */\nexport function isImageSessionRejection(\n  result: RpcResultLike,\n): result is RpcResultLike & { result: { ok: false; error: RpcErrorLike } } {\n  return (\n    !result.result.ok &&\n    result.result.error.code === 'model-unavailable' &&\n    result.result.error.message.includes('does not accept image input')\n  )\n}\n\n/** Wrap the shared sessions API so selectModel failures read friendlier. */\nexport function withFriendlyImageError(\n  sessions: SessionsLike,\n  getLocale: () => LocaleId,\n): SessionsLike {\n  const selectModel = sessions.selectModel.bind(sessions)\n  return {\n    ...sessions,\n    selectModel: async (payload, signal) => {\n      const result = await selectModel(payload, signal)\n      if (!isImageSessionRejection(result)) return result\n      const model = result.result.error.details?.model ?? payload.model\n      const template = commandcodeCommand[getLocale()].imageGate\n        ?? commandcodeCommand.en.imageGate\n      return {\n        ...result,\n        result: {\n          ...result.result,\n          error: {\n            ...result.result.error,\n            message: template.replace('{model}', model),\n          },\n        },\n      }\n    },\n  }\n}\n\n/**\n * The pre-0.1.2 connection handle that exposed the shared session API under\n * `connection.api.sessions`. In 0.1.2 the connection service became a\n * transport/generation handle and model selection moved to `remote.session`,\n * so this legacy field is deliberately optional.\n */\nexport interface ConnectionLike {\n  api?: { sessions?: SessionsLike }\n}\n\n/**\n * Install the friendly-error wrapper when a legacy sessions face is present.\n *\n * @returns whether the wrapper was installed. The rewrite is only UX polish;\n * a 0.1.2 connection has no `api.sessions`, and its absence must never block\n * the plugin from mounting its settings, credential, or usage surfaces.\n */\nexport function installFriendlyImageError(\n  connection: ConnectionLike,\n  getLocale: () => LocaleId,\n): boolean {\n  const api = connection.api\n  const sessions = api?.sessions\n  if (api === undefined || sessions === undefined || typeof sessions.selectModel !== 'function') return false\n  api.sessions = withFriendlyImageError(sessions, getLocale)\n  return true\n}\n","/**\n * Browser controller for the \"Command Code\" settings page.\n *\n * The page lives at the same settings-nav level as General / Models / Plugins\n * (a `settings.section` entry, id `commandcode`). It exists because the\n * Models page renders an unknown-adapter-family card for the `commandcode`\n * provider and deliberately disables its submit — the API key cannot be\n * configured there. This page owns the connection facts the plugin resolves\n * per request:\n *\n *   - API key   -> written through the credentials domain under the reference\n *                  the plugin resolves (`apiKeyEnv`, default\n *                  `COMMANDCODE_API_KEY`). The literal never rides a response,\n *                  so the control only reports whether one is configured.\n *   - API base  -> the `llm-commandcode` settings namespace (`apiBase`), same\n *                  namespace the Models page card addresses.\n *   - Working dir, request/stream timeouts -> the same namespace.\n *\n * The controller mirrors the plugin-card pattern from the harness's own\n * settings UI: it binds the `llm-commandcode` namespace through the\n * `settingsScope` service, keeps a staged draft of edits, and writes them on\n * save through `scope.set` / the credentials domain. The Host stays the\n * single fact source; the snapshot is republished after each accepted write.\n *\n * This module is deliberately free of JSX — it only produces the state face\n * the React component renders.\n */\n\n/** The settings namespace the plugin registers (host half, src/index.ts). */\nexport const COMMANDCODE_NS = 'llm-commandcode'\n/** Default credential reference the plugin resolves when none is named. */\nexport const DEFAULT_API_KEY_REF = 'COMMANDCODE_API_KEY'\n\n/** The settings-scope snapshot fields consumed by this controller. */\nexport interface SettingsScopeSnapshot<T> {\n  status: 'loading' | 'ready' | 'unavailable'\n  value: T | undefined\n  base: unknown\n  user: unknown\n  revision: number | undefined\n  writable: boolean\n  mode: 'host' | 'memory'\n}\n\n/** Current settings-scope service face used without importing a browser plugin value. */\nexport interface SettingsScope<T> {\n  getSnapshot(): SettingsScopeSnapshot<T>\n  subscribe(listener: () => void): () => void\n  set(field: string, value: unknown): Promise<void>\n  unset(field: string): Promise<void>\n}\n\n/** Result envelope returned by one current Typert Remote call. */\ninterface RemoteResult<T> {\n  ok: boolean\n  value?: T\n  error?: { message: string }\n}\n\n/** Credential facts returned without exposing the credential value. */\ninterface CredentialInfo {\n  configured: boolean\n  writable: boolean\n}\n\n/** The narrow slice of the wire face this controller needs. */\nexport interface SettingsPageApi {\n  /** Credential methods exposed by the current Typert Remote namespace. */\n  credentials: {\n    describe(refs: string[]): Promise<RemoteResult<Record<string, CredentialInfo>>>\n    set(ref: string, value: string): Promise<RemoteResult<void>>\n    unset(ref: string): Promise<RemoteResult<void>>\n  }\n  /**\n   * The model catalog for the settings page's model editors (the\n   * routing-rule editor and the visible-models filter; Host-side). Absent\n   * on legacy transports without the Remote mount — the editors degrade to\n   * the empty-catalog state.\n   */\n  models?(): Promise<RemoteResult<{ models: CatalogModelOption[] }>>\n}\n\n/** The Host-description observable the page reads the process cwd from. */\nexport interface HostDescriptionSource {\n  getSnapshot(): { cwd?: string } | undefined\n  subscribe(fn: () => void): () => void\n}\n\n/** One editable text field's staged state (blank = keep stored value). */\nexport interface StagedField {\n  /** Live draft text the input shows. */\n  text: string\n  /** Whether the user explicitly cleared the field (reset to inherited). */\n  clear: boolean\n  /** Whether the user layer carries this field (marks it overridden). */\n  overridden: boolean\n  /** Whether the staged draft fails to parse (blocks save). */\n  invalid: boolean\n  /**\n   * Why the draft is invalid — a non-number (`format`) or an out-of-range\n   * number (`tooSmall`/`tooLarge`); undefined when valid.\n   */\n  invalidReason: InvalidReason | undefined\n}\n\n/** Why a staged draft fails validation (drives the per-field error copy). */\nexport type InvalidReason = 'format' | 'tooSmall' | 'tooLarge'\n\n/** One extra account row's staged state (the default account uses `apiKey`). */\nexport interface AccountItemState {\n  /** Stable id — the account's credential reference. */\n  id: string\n  /** Credential reference this account's key lives under. */\n  ref: string\n  /** Label draft text (the stored/generated label until edited). */\n  label: string\n  /** The API key draft (write-only; starts blank, never echoes the stored key). */\n  keyText: string\n  /** Whether a key is stored for this account (Host-reported). */\n  configured: boolean\n  /** Whether the credentials domain can store the key. */\n  writable: boolean\n  /** Staged for addition (not yet saved). */\n  added: boolean\n  /** Staged for key removal on the next save (the stored key is bad/unwanted). */\n  clearStaged: boolean\n}\n\n/** One model → account routing rule row's staged state. */\nexport interface RuleItemState {\n  /** Stable row id (`rule-N` for stored rows, `new-N` for staged adds). */\n  id: string\n  /** Model ids the rule routes to the account (multi-select). */\n  models: string[]\n  /** Account slot id the rule routes matching models to. */\n  account: string\n  /** Staged for addition (not yet saved). */\n  added: boolean\n}\n\n/** One selectable catalog model in the settings page's model editors. */\nexport interface CatalogModelOption {\n  id: string\n  name: string\n  /**\n   * Minimum plan-tier key (a Host `KNOWN_PLANS` value), or undefined for\n   * models outside the snapshot / older Hosts. Drives the tier headings in\n   * the editor dropdowns; absent tiers render unheaded.\n   */\n  tier?: string\n}\n\n/** The page's full state face, projected from the scope + drafts + credential. */\nexport interface SettingsPageState {\n  /** Whether the namespace snapshot is ready. */\n  available: boolean\n  /** Whether the Host document accepts writes. */\n  writable: boolean\n  /** Whether the API key is currently configured (Host-reported). */\n  apiKeyConfigured: boolean\n  /** Whether ANY account (default or extra) has a stored key — gates the usage card. */\n  anyAccountConfigured: boolean\n  /** Whether the credentials domain can store the key. */\n  apiKeyWritable: boolean\n  /** The API key draft (write-only; starts blank, never echoes the stored key). */\n  apiKey: StagedField\n  /** Whether the default account's stored key is staged for removal on the next save. */\n  apiKeyClearStaged: boolean\n  /** apiBase draft. */\n  apiBase: StagedField\n  /** workingDir draft. */\n  workingDir: StagedField\n  /**\n   * The working directory a blank `workingDir` resolves to: the Host\n   * process cwd (`host.describe().cwd`). Shown as the field's placeholder so\n   * the user sees what \"leave it empty\" means — no configuration needed.\n   */\n  defaultWorkingDir: string | undefined\n  /** requestTimeoutMs draft. */\n  requestTimeoutMs: StagedField\n  /** streamIdleTimeoutMs draft. */\n  streamIdleTimeoutMs: StagedField\n  /**\n   * filterModelsByPlan draft, staged as `'true'`/`'false'`/`''` (unset). The\n   * component renders it as a toggle; `''` means \"inherit the default\" (on).\n   */\n  filterModelsByPlan: StagedField\n  /**\n   * webSearch draft, staged as `'true'`/`'false'`/`''` (unset). The component\n   * renders it as a toggle; `''` means \"inherit the default\" (on — Command Code\n   * serves the dsh web_search tool).\n   */\n  webSearch: StagedField\n  /**\n   * The manually selected active account, staged as a slot id (`default`\n   * or an extra account's credential reference); `''` means \"auto — first\n   * usable account\". The component renders it as a select.\n   */\n  activeAccount: StagedField\n  /** Extra accounts (multi-account rotation), in rotation order. */\n  accounts: AccountItemState[]\n  /** Refs of stored accounts staged for removal (the usage card hides them). */\n  accountsRemoving: string[]\n  /** Model → account routing rules, in list order (first match wins). */\n  rules: RuleItemState[]\n  /** Effective visible-model allowlist: staged draft or stored value. Empty = show all. */\n  visibleModels: string[]\n  /** The catalog the model editors offer (Host-side, empty until loaded). */\n  catalogModels: CatalogModelOption[]\n  /** Whether the catalog fetch failed (editors fall back to typing). */\n  catalogFailed: boolean\n  /** Whether any staged edit differs from the stored section. */\n  dirty: boolean\n  /** Whether a staged numeric field fails to parse (save blocked). */\n  invalid: boolean\n  /** Whether a save is in flight. */\n  saving: boolean\n  /** Whether the last save failed (drafts retained for correction). */\n  failed: boolean\n  /**\n   * Monotonic counter bumped once per accepted save. The component watches it\n   * to flash the \"Saved ✓\" affordance (timing lives in the component; the\n   * controller stays a plain state machine with no timers).\n   */\n  savedCount: number\n}\n\n/** Parsed outcome of one field's draft. */\ntype Parsed =\n  | { kind: 'set'; value: string | number | boolean }\n  | { kind: 'clear' }\n  | { kind: 'invalid'; reason: InvalidReason }\n\n/** One field's staged draft (internal; the public face adds derived flags). */\ninterface Staged {\n  text: string\n  clear: boolean\n}\n\n/** A field conversion spec. */\ninterface FieldSpec {\n  field: string\n  format(value: unknown): string\n  parse(text: string): Parsed\n}\n\n/** A free-text field; an empty draft clears it. */\nfunction textField(field: string): FieldSpec {\n  return {\n    field,\n    format: (value) => (typeof value === 'string' ? value : ''),\n    parse: (text) => {\n      const trimmed = text.trim()\n      return trimmed === '' ? { kind: 'clear' } : { kind: 'set', value: trimmed }\n    },\n  }\n}\n\n/**\n * A numeric field; an empty draft clears it, anything non-numeric blocks\n * save, and an optional inclusive `bounds` range rejects out-of-range values\n * with a specific reason (the Host schema would reject them at save time with\n * only a generic failure — catching it here names the problem while typing).\n * Decimals pass: the Host schema is `z.number()` too, and a fractional\n * millisecond value is harmless even if pointless.\n */\nfunction numberField(field: string, bounds?: { min?: number; max?: number }): FieldSpec {\n  return {\n    field,\n    format: (value) => (typeof value === 'number' ? String(value) : ''),\n    parse: (text) => {\n      const trimmed = text.trim()\n      if (trimmed === '') return { kind: 'clear' }\n      const parsed = Number(trimmed)\n      if (!Number.isFinite(parsed)) return { kind: 'invalid', reason: 'format' }\n      if (bounds?.min !== undefined && parsed < bounds.min) return { kind: 'invalid', reason: 'tooSmall' }\n      if (bounds?.max !== undefined && parsed > bounds.max) return { kind: 'invalid', reason: 'tooLarge' }\n      return { kind: 'set', value: parsed }\n    },\n  }\n}\n\n/**\n * A boolean field, staged as the strings `'true'`/`'false'` (an empty draft\n * clears it). The component renders a toggle and only ever stages these two\n * strings; anything else blocks save.\n */\nfunction booleanField(field: string): FieldSpec {\n  return {\n    field,\n    format: (value) => (typeof value === 'boolean' ? String(value) : ''),\n    parse: (text) => {\n      const trimmed = text.trim()\n      if (trimmed === '') return { kind: 'clear' }\n      if (trimmed === 'true') return { kind: 'set', value: true }\n      if (trimmed === 'false') return { kind: 'set', value: false }\n      return { kind: 'invalid', reason: 'format' }\n    },\n  }\n}\n\n/**\n * Inclusive bounds for the millisecond timeout fields, mirroring the Host\n * Config schema (`z.number().min(1).max(MAX_TIMER_DELAY_MS)` in src/index.ts;\n * `MAX_TIMER_DELAY_MS` is dsh-timeout's 2^31-1 timer ceiling). The client\n * bundle cannot import the node-side package, so the bound is pinned here —\n * the host remains the final gate.\n */\nexport const MIN_TIMEOUT_MS = 1\nexport const MAX_TIMEOUT_MS = 2147483647\n\n/** The fields this page edits inside the `llm-commandcode` namespace. */\nconst SECTION_FIELDS: FieldSpec[] = [\n  textField('apiBase'),\n  textField('workingDir'),\n  numberField('requestTimeoutMs', { min: MIN_TIMEOUT_MS, max: MAX_TIMEOUT_MS }),\n  numberField('streamIdleTimeoutMs', { min: MIN_TIMEOUT_MS, max: MAX_TIMEOUT_MS }),\n  booleanField('filterModelsByPlan'),\n  booleanField('webSearch'),\n  textField('activeAccount'),\n]\n\n/** Whether two model-id lists are equal as sets (order-insensitive). */\nfunction sameModels(a: readonly string[], b: readonly string[]): boolean {\n  if (a.length !== b.length) return false\n  const set = new Set(a)\n  return b.every((id) => set.has(id))\n}\n\n/**\n * Order-sensitive content fingerprint of the stored routing rules. Stored rule\n * ids are positional (`rule-<index>`), so equality of this fingerprint across a\n * save is exactly the statement \"no rules write landed and no row shifted\".\n */\nfunction ruleFingerprint(rules: ReadonlyArray<{ models: readonly string[]; account: string }>): string {\n  return JSON.stringify(rules.map((rule) => [rule.models, rule.account]))\n}\n\n/**\n * Controller bridging the `llm-commandcode` scope and the credentials domain\n * onto the page. Public API mirrors the harness's CardForm actions, so the\n * component stays thin.\n */\nexport class CommandCodeSettingsController {\n  private readonly scope: SettingsScope<Record<string, unknown>>\n  private readonly api: SettingsPageApi\n  private readonly specs = new Map(SECTION_FIELDS.map((spec) => [spec.field, spec]))\n  private readonly staged = new Map<string, Staged>()\n  private readonly listeners = new Set<() => void>()\n  private readonly disposers: Array<() => void> = []\n  private disposed = false\n  private defaultWorkingDir: string | undefined\n  /** The credential reference the default account resolves. */\n  private credentialRef = DEFAULT_API_KEY_REF\n  /** Host-reported configured/writable state per credential reference. */\n  private readonly credentialStates = new Map<string, { configured: boolean; writable: boolean }>()\n  /** Staged account additions (not yet saved). */\n  private addedAccounts: Array<{ label: string; ref: string }> = []\n  /** Staged removals of stored extra accounts, by credential reference. */\n  private readonly removedRefs = new Set<string>()\n  /** Staged label drafts, by credential reference. */\n  private readonly labelDrafts = new Map<string, string>()\n  /** Staged key drafts, by credential reference (blank = keep stored key). */\n  private readonly keyDrafts = new Map<string, string>()\n  /** Credential references staged for removal on the next save. */\n  private readonly keyClears = new Set<string>()\n  /** Staged model→account routing rules (not yet saved). */\n  private addedRules: Array<{ models: string[]; account: string }> = []\n  /** Staged edits to stored routing rules, by stored row id. */\n  private readonly ruleDrafts = new Map<string, { models: string[]; account: string }>()\n  /**\n   * Stored routing rule rows staged for removal, by stored row id with a\n   * content snapshot. The snapshot makes reconcile content-based: stored\n   * row ids are positional (`rule-N`) and shift after any write, so an\n   * id-only check would misread a landed removal as pending (and a retry\n   * would delete the wrong row).\n   */\n  private readonly removedRuleIds = new Map<string, { models: string[]; account: string }>()\n  /**\n   * Fingerprint of the stored routing rules when the last `save()` started;\n   * `undefined` outside a save. Lets reconcile distinguish a landed rules\n   * write from a save that failed before reaching it.\n   */\n  private rulesBeforeSave: string | undefined = undefined\n  /** Staged visible-model allowlist (undefined = no draft). */\n  private visibleModelsDraft: string[] | undefined = undefined\n  /** The catalog the model editors offer (Host-side). */\n  private catalogModels: CatalogModelOption[] = []\n  private catalogFailed = false\n  private saving = false\n  private failed = false\n  private savedCount = 0\n\n  /**\n   * @param scope - bound scope for the `llm-commandcode` namespace.\n   * @param api - credentials wire face.\n   * @param hostDescription - the Host-description observable whose `cwd` is\n   *   shown as the placeholder a blank `workingDir` field resolves to.\n   */\n  constructor(\n    scope: SettingsScope<Record<string, unknown>>,\n    api: SettingsPageApi,\n    hostDescription?: HostDescriptionSource,\n  ) {\n    this.scope = scope\n    this.api = api\n    this.disposers.push(scope.subscribe(() => {\n      this.recomputeCredentialRef()\n      void this.describeAll()\n      this.publish()\n    }))\n    if (hostDescription !== undefined) {\n      this.defaultWorkingDir = hostDescription.getSnapshot()?.cwd\n      this.disposers.push(hostDescription.subscribe(() => {\n        if (this.disposed) return\n        const cwd = hostDescription.getSnapshot()?.cwd\n        if (cwd !== this.defaultWorkingDir) {\n          this.defaultWorkingDir = cwd\n          this.publish()\n        }\n      }))\n    }\n    this.recomputeCredentialRef()\n    void this.describeAll()\n    this.refreshCatalog()\n  }\n\n  /** Release every subscription held on external sources. Idempotent. */\n  dispose(): void {\n    if (this.disposed) return\n    this.disposed = true\n    for (const dispose of this.disposers) dispose()\n    this.disposers.length = 0\n    this.listeners.clear()\n  }\n\n  /**\n   * The credential reference the section names, or the provider default. A\n   * user who renamed `apiKeyEnv` in `settings.yaml` (or the composition\n   * config) gets a page that addresses the renamed ref instead of silently\n   * writing the default — mirroring the Models page's `refFor()`.\n   */\n  private recomputeCredentialRef(): void {\n    const snapshot = this.scope.getSnapshot()\n    const named = typeof snapshot.value?.apiKeyEnv === 'string' && snapshot.value.apiKeyEnv.length > 0\n      ? snapshot.value.apiKeyEnv\n      : DEFAULT_API_KEY_REF\n    if (named === this.credentialRef) return\n    // Prune the orphaned OLD ref's cached state (renames only move forward;\n    // the new ref re-describes on the next describeAll).\n    this.credentialStates.delete(this.credentialRef)\n    this.credentialRef = named\n  }\n\n  /** Subscribe to state projections. @returns the disposer. */\n  subscribe(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** Build the current page state face. */\n  state(): SettingsPageState {\n    const snapshot = this.scope.getSnapshot()\n    const plan = this.plan()\n    const credential = this.credentialStates.get(this.credentialRef)\n    const accounts = this.effectiveAccounts()\n    return {\n      available: snapshot.status === 'ready',\n      writable: snapshot.writable,\n      apiKeyConfigured: credential?.configured ?? false,\n      anyAccountConfigured: (credential?.configured ?? false) || accounts.some((account) => account.configured),\n      apiKeyWritable: credential?.writable ?? true,\n      apiKey: {\n        text: this.staged.get('apiKey')?.text ?? '',\n        clear: false,\n        overridden: false,\n        invalid: false,\n        invalidReason: undefined,\n      },\n      apiKeyClearStaged: this.keyClears.has(this.credentialRef),\n      apiBase: this.field('apiBase'),\n      workingDir: this.field('workingDir'),\n      defaultWorkingDir: this.defaultWorkingDir,\n      requestTimeoutMs: this.field('requestTimeoutMs'),\n      streamIdleTimeoutMs: this.field('streamIdleTimeoutMs'),\n      filterModelsByPlan: this.field('filterModelsByPlan'),\n      webSearch: this.field('webSearch'),\n      activeAccount: this.field('activeAccount'),\n      accounts,\n      accountsRemoving: [...this.removedRefs],\n      rules: this.effectiveRules(),\n      visibleModels: this.effectiveVisibleModels(),\n      catalogModels: this.catalogModels,\n      catalogFailed: this.catalogFailed,\n      dirty: plan.length > 0 || this.accountsDirty() || this.rulesDirty() || this.visibleModelsDirty(),\n      invalid: plan.some((item) => item.run === undefined),\n      saving: this.saving,\n      failed: this.failed,\n      savedCount: this.savedCount,\n    }\n  }\n\n  /** Stage a new extra account (saved on the next `save()`). */\n  addAccount(): void {\n    const used = new Set([\n      this.credentialRef,\n      ...this.storedExtras().map((extra) => extra.ref),\n      ...this.addedAccounts.map((extra) => extra.ref),\n    ])\n    // New refs derive from the current credential reference's prefix (the\n    // same one `this.credentialRef` names), so a renamed apiKeyEnv yields\n    // `MY_KEY_2`-style refs consistent with the default slot — never a stray\n    // COMMANDCODE_API_KEY_2 that no longer matches the page's reference.\n    let n = 2\n    while (used.has(`${this.credentialRef}_${n}`)) n += 1\n    const index = this.storedExtras().length + this.addedAccounts.length + 2\n    this.addedAccounts.push({ label: `Account ${index}`, ref: `${this.credentialRef}_${n}` })\n    this.failed = false\n    void this.describeAll()\n    this.publish()\n  }\n\n  /** Stage one extra account's removal (or drop an unsaved addition). */\n  removeAccount(id: string): void {\n    const addedIndex = this.addedAccounts.findIndex((extra) => extra.ref === id)\n    if (addedIndex >= 0) this.addedAccounts.splice(addedIndex, 1)\n    else this.removedRefs.add(id)\n    this.labelDrafts.delete(id)\n    this.keyDrafts.delete(id)\n    // A pinned active account that is going away must not linger as a ghost\n    // selection: stage its clear alongside the removal (the host would fall\n    // back to rotation order, but the stored value would be meaningless).\n    const stagedActive = this.staged.get('activeAccount')\n    const activeValue = stagedActive !== undefined\n      ? stagedActive.clear ? '' : stagedActive.text\n      : typeof this.sectionValue('activeAccount') === 'string' ? this.sectionValue('activeAccount') as string : ''\n    if (activeValue === id) {\n      this.staged.set('activeAccount', { text: '', clear: true })\n    }\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one extra account's label draft. */\n  editAccountLabel(id: string, text: string): void {\n    this.labelDrafts.set(id, text)\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one extra account's key draft (blank keeps the stored key). */\n  editAccountKey(id: string, text: string): void {\n    this.keyDrafts.set(id, text)\n    // Typing a replacement cancels a staged removal — the two intents are\n    // mutually exclusive (replace vs remove), and a staged clear would\n    // otherwise silently discard what is being typed.\n    this.keyClears.delete(id)\n    this.failed = false\n    this.publish()\n  }\n\n  /**\n   * Toggle the staged removal of one account's stored key: the next save\n   * unsets the credential so the account reports unconfigured and falls back\n   * to its other key sources. Only meaningful while a key is actually\n   * stored. `target` is `'default'` (the implicit first account) or an extra\n   * account's credential reference.\n   */\n  toggleKeyClear(target: string): void {\n    const ref = target === 'default' ? this.credentialRef : target\n    if (this.keyClears.has(ref)) {\n      this.keyClears.delete(ref)\n    } else {\n      if (this.credentialStates.get(ref)?.configured !== true) return\n      // A staged replacement and a staged removal are mutually exclusive.\n      this.keyDrafts.delete(ref)\n      if (ref === this.credentialRef) this.staged.delete('apiKey')\n      this.keyClears.add(ref)\n    }\n    this.failed = false\n    void this.describeAll()\n    this.publish()\n  }\n\n  /** Stage a new model → account routing rule (saved on the next `save()`). */\n  addRule(): void {\n    this.addedRules.push({ models: [], account: 'default' })\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one routing rule's removal (or drop an unsaved addition). */\n  removeRule(id: string): void {\n    const addedIndex = this.addedRules.findIndex((_, index) => `new-${index}` === id)\n    if (addedIndex >= 0) this.addedRules.splice(addedIndex, 1)\n    else {\n      // Snapshot the row content: stored ids are positional and shift after\n      // any write, so reconcile must compare content, not ids.\n      const stored = this.storedRules().find((rule) => rule.id === id)\n      this.removedRuleIds.set(id, stored === undefined\n        ? { models: [], account: '' }\n        : { models: [...stored.models], account: stored.account })\n    }\n    this.ruleDrafts.delete(id)\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one routing rule's selected model ids (multi-select). */\n  editRuleModels(id: string, models: string[]): void {\n    const addedIndex = this.addedRules.findIndex((_, index) => `new-${index}` === id)\n    if (addedIndex >= 0) {\n      this.addedRules[addedIndex] = { ...this.addedRules[addedIndex]!, models }\n    } else {\n      const current = this.ruleDrafts.get(id) ?? this.storedRules().find((rule) => rule.id === id) ?? { models: [], account: 'default' }\n      this.ruleDrafts.set(id, { ...current, models })\n    }\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one routing rule's target account draft. */\n  editRuleAccount(id: string, text: string): void {\n    const addedIndex = this.addedRules.findIndex((_, index) => `new-${index}` === id)\n    if (addedIndex >= 0) {\n      this.addedRules[addedIndex] = { ...this.addedRules[addedIndex]!, account: text }\n    } else {\n      const current = this.ruleDrafts.get(id) ?? this.storedRules().find((rule) => rule.id === id) ?? { models: [], account: 'default' }\n      this.ruleDrafts.set(id, { ...current, account: text })\n    }\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage one field's draft text. */\n  edit(field: string, text: string): void {\n    this.staged.set(field, { text, clear: false })\n    // Typing a replacement for the default key cancels a staged removal.\n    if (field === 'apiKey') this.keyClears.delete(this.credentialRef)\n    this.failed = false\n    this.publish()\n  }\n\n  /** Reset one section field to its inherited (composition) value. */\n  resetField(field: string): void {\n    if (field === 'apiKey') {\n      this.staged.delete('apiKey')\n      this.failed = false\n      this.publish()\n      return\n    }\n    const spec = this.spec(field)\n    this.staged.set(field, { text: spec.format(this.baseValue(field)), clear: true })\n    this.failed = false\n    this.publish()\n  }\n\n  /** Discard every staged edit. */\n  discard(): void {\n    if (this.staged.size === 0 && !this.accountsStaged() && !this.rulesStaged() && !this.visibleModelsStaged() && !this.failed) return\n    this.staged.clear()\n    this.clearAccountStaging()\n    this.clearRuleStaging()\n    this.clearVisibleModelsStaging()\n    this.failed = false\n    this.publish()\n  }\n\n  /**\n   * Re-read the Host's credential facts without any staged edit. The browser\n   * login stores a key Host-side behind the page's back; the plugin entry\n   * calls this when a login lands so the configured/writable badges follow.\n   */\n  refreshCredentials(): void {\n    void this.describeAll()\n  }\n\n  /** Write every staged edit, then re-read the Host's accepted state. */\n  async save(): Promise<void> {\n    const plan = this.plan()\n    const accountRuns = this.accountPlan()\n    const ruleRuns = this.rulesPlan()\n    const visibleRuns = this.visibleModelsPlan()\n    if ((plan.length === 0 && accountRuns.length === 0 && ruleRuns.length === 0 && visibleRuns.length === 0) || this.saving) return\n    const runs: Array<() => Promise<boolean>> = []\n    for (const item of plan) {\n      if (item.run === undefined) return\n      runs.push(item.run)\n    }\n    this.saving = true\n    this.failed = false\n    // Snapshot the stored routing rules before any write: reconcile needs to\n    // tell \"the rules write landed (rows shifted)\" from \"the save failed\n    // earlier (rows untouched)\" — see reconcileRuleStaging.\n    this.rulesBeforeSave = ruleFingerprint(this.storedRules())\n    this.publish()\n    let landed = true\n    // Keys land first so a saved accounts list never names a ref whose key\n    // write failed silently; the accounts list itself writes last. Stop at\n    // the first failure: running later writes after a failed one would\n    // persist a partial state the staged drafts no longer describe. A\n    // throwing write counts as a failure too (the scope seam may reject)\n    // so the surviving staging is reconciled instead of dropped.\n    for (const run of [...runs, ...accountRuns, ...ruleRuns, ...visibleRuns]) {\n      let ok = false\n      try {\n        ok = await run()\n      } catch {\n        ok = false\n      }\n      if (!ok) {\n        landed = false\n        break\n      }\n    }\n    this.saving = false\n    this.failed = !landed\n    if (landed) {\n      this.savedCount += 1\n      this.staged.clear()\n      this.clearAccountStaging()\n      this.clearRuleStaging()\n      this.clearVisibleModelsStaging()\n    } else {\n      // A failed save may still have landed earlier writes (e.g. the accounts\n      // list made it while a key write did not). Reconcile the staging with\n      // the stored section so a landed account is not simultaneously stored\n      // AND staged-for-addition (which a retry would persist twice).\n      this.reconcileAccountStaging()\n      this.reconcileRuleStaging()\n      this.reconcileVisibleModelsStaging()\n    }\n    this.publish()\n  }\n\n  /**\n   * Drop account staging the stored section already reflects: additions whose\n   * ref is now stored, removals whose ref is gone, and label drafts that the\n   * stored label proves landed. Key drafts are kept — a landed key write is\n   * idempotent on retry, and the draft carries the user's intent when it was\n   * the accounts write that failed.\n   */\n  private reconcileAccountStaging(): void {\n    const stored = new Set(this.storedExtras().map((extra) => extra.ref))\n    this.addedAccounts = this.addedAccounts.filter((extra) => !stored.has(extra.ref))\n    for (const ref of [...this.removedRefs]) {\n      if (!stored.has(ref)) this.removedRefs.delete(ref)\n    }\n    for (const [ref, text] of [...this.labelDrafts]) {\n      const storedLabel = this.storedExtras().find((extra) => extra.ref === ref)?.label\n      // A label draft is dropped only when the stored section proves it\n      // landed. An ABSENT entry is not proof: keys land before the accounts\n      // list, so a failed save routinely leaves a staged addition stored\n      // nowhere — treating \"not stored\" as \"already applied\" silently threw\n      // away the label the user had typed and persisted the auto-generated\n      // name on the retry instead.\n      if (storedLabel !== undefined && storedLabel === text.trim()) this.labelDrafts.delete(ref)\n    }\n    // A landed clear already did its job (the Host reports unconfigured);\n    // keep only clears that failed so a retry re-attempts them.\n    for (const ref of [...this.keyClears]) {\n      if (this.credentialStates.get(ref)?.configured !== true) this.keyClears.delete(ref)\n    }\n  }\n\n  // -------------------------------------------------------------------------\n  // Internals\n  // -------------------------------------------------------------------------\n\n  private spec(field: string): FieldSpec {\n    const spec = this.specs.get(field)\n    if (spec === undefined) throw new Error(`commandcode settings page has no field ${field}`)\n    return spec\n  }\n\n  /** One field's rendered state: draft text, whether it is user-overridden, invalid. */\n  private field(field: string): StagedField {\n    const spec = this.spec(field)\n    const staged = this.staged.get(field)\n    if (staged === undefined) {\n      return {\n        text: spec.format(this.sectionValue(field)),\n        clear: false,\n        overridden: this.stored(field),\n        invalid: false,\n        invalidReason: undefined,\n      }\n    }\n    const parsed = staged.clear ? { kind: 'clear' as const } : spec.parse(staged.text)\n    return {\n      text: staged.text,\n      clear: staged.clear,\n      overridden: parsed.kind === 'set',\n      invalid: parsed.kind === 'invalid',\n      invalidReason: parsed.kind === 'invalid' ? parsed.reason : undefined,\n    }\n  }\n\n  private sectionValue(field: string): unknown {\n    return this.scope.getSnapshot().value?.[field]\n  }\n\n  private baseValue(field: string): unknown {\n    const base = this.scope.getSnapshot().base\n    return typeof base === 'object' && base !== null && !Array.isArray(base)\n      ? (base as Record<string, unknown>)[field]\n      : undefined\n  }\n\n  private userLayer(): Record<string, unknown> | undefined {\n    const user = this.scope.getSnapshot().user\n    return typeof user === 'object' && user !== null && !Array.isArray(user)\n      ? (user as Record<string, unknown>)\n      : undefined\n  }\n\n  private stored(field: string): boolean {\n    const user = this.userLayer()\n    return user !== undefined && Object.prototype.hasOwnProperty.call(user, field)\n  }\n\n  /**\n   * The writes a save would perform, in staged order. A field whose draft is\n   * not a value its spec accepts carries no write (the save refuses).\n   */\n  private plan(): Array<{ field: string; run: (() => Promise<boolean>) | undefined }> {\n    const plan: Array<{ field: string; run: (() => Promise<boolean>) | undefined }> = []\n    for (const [field, staged] of this.staged) {\n      if (field === 'apiKey') {\n        const value = staged.text.trim()\n        if (value !== '') {\n          plan.push({ field, run: () => this.writeKey(value) })\n        }\n        continue\n      }\n      const spec = this.spec(field)\n      if (staged.clear) {\n        if (this.stored(field)) plan.push({ field, run: () => this.clear(field) })\n        continue\n      }\n      if (staged.text === spec.format(this.sectionValue(field))) continue\n      const parsed = spec.parse(staged.text)\n      if (parsed.kind === 'invalid') plan.push({ field, run: undefined })\n      else if (parsed.kind === 'clear') plan.push({ field, run: () => this.clear(field) })\n      else plan.push({ field, run: () => this.store(field, parsed.value) })\n    }\n    return plan\n  }\n\n  private async clear(field: string): Promise<boolean> {\n    await this.scope.unset(field)\n    return !this.stored(field)\n  }\n\n  private async store(field: string, value: string | number | boolean): Promise<boolean> {\n    await this.scope.set(field, value)\n    return this.userLayer()?.[field] === value\n  }\n\n  /** Write the staged default key, then re-read whether the Host holds it. */\n  private async writeKey(value: string): Promise<boolean> {\n    return this.writeKeyTo(this.credentialRef, value)\n  }\n\n  /** Write one account's key, then re-read the Host's credential states. */\n  private async writeKeyTo(ref: string, value: string): Promise<boolean> {\n    try {\n      const response = await this.api.credentials.set(ref, value)\n      if (!response.ok) return false\n    } catch {\n      return false\n    }\n    await this.describeAll()\n    return this.credentialStates.get(ref)?.configured ?? false\n  }\n\n  /** Ask the credentials domain about every reference this page writes. */\n  private async describeAll(): Promise<void> {\n    const refs = [\n      this.credentialRef,\n      ...this.storedExtras().map((extra) => extra.ref),\n      ...this.addedAccounts.map((extra) => extra.ref),\n    ]\n    let response: Awaited<ReturnType<SettingsPageApi['credentials']['describe']>>\n    try {\n      response = await this.api.credentials.describe(refs)\n    } catch {\n      return\n    }\n    if (!response.ok) return\n    let changed = false\n    for (const ref of refs) {\n      const view = response.value?.[ref]\n      const next = {\n        configured: view?.configured ?? false,\n        writable: view?.writable ?? true,\n      }\n      const prev = this.credentialStates.get(ref)\n      if (prev === undefined || prev.configured !== next.configured || prev.writable !== next.writable) {\n        this.credentialStates.set(ref, next)\n        changed = true\n      }\n    }\n    if (changed) this.publish()\n  }\n\n  /**\n   * Fetch the model catalog for the settings page's model editors through\n   * the Host Remote. Runs once at construction; call again (e.g. from the\n   * client entry once the Remote mount lands) to (re)try — a later success\n   * clears a prior failure flag so the editors recover without a page reload.\n   */\n  refreshCatalog(): void {\n    const models = this.api.models\n    if (models === undefined) {\n      this.catalogFailed = true\n      this.publish()\n      return\n    }\n    void models().then((response) => {\n      if (response.ok && Array.isArray(response.value?.models)) {\n        // Defensive per-entry shaping: the Remote result is untrusted at the\n        // boundary, and an older Host predates the tier field.\n        const shaped: CatalogModelOption[] = []\n        for (const model of response.value.models) {\n          if (typeof model !== 'object' || model === null) continue\n          const entry = model as unknown as Record<string, unknown>\n          if (typeof entry.id !== 'string' || typeof entry.name !== 'string') continue\n          shaped.push({\n            id: entry.id,\n            name: entry.name,\n            ...(typeof entry.tier === 'string' ? { tier: entry.tier } : {}),\n          })\n        }\n        this.catalogModels = shaped\n        this.catalogFailed = false\n      } else {\n        this.catalogFailed = true\n      }\n    }, () => {\n      this.catalogFailed = true\n    }).then(() => this.publish())\n  }\n\n  // -----------------------------------------------------------------------\n  // Multi-account staging\n  // -----------------------------------------------------------------------\n\n  /** The raw `accounts` array of the stored section, verbatim. */\n  private rawStoredAccounts(): Array<Record<string, unknown>> {\n    const raw = this.scope.getSnapshot().value?.accounts\n    if (!Array.isArray(raw)) return []\n    return raw.filter(\n      (entry): entry is Record<string, unknown> =>\n        typeof entry === 'object' && entry !== null && !Array.isArray(entry),\n    )\n  }\n\n  /**\n   * The stored extra accounts from the settings section (`accounts`): the rows\n   * this page can address, i.e. the ones carrying a credential reference.\n   *\n   * Entries the page cannot name are deliberately NOT listed here but are also\n   * never dropped — `writeAccounts()` rebuilds the stored list from\n   * {@link rawStoredAccounts} and only rewrites the reference-carrying entries\n   * it manages (see the note there), so a literal-key entry stays in the\n   * document and simply has no row.\n   */\n  private storedExtras(): Array<{ label: string; ref: string }> {\n    const out: Array<{ label: string; ref: string }> = []\n    for (const record of this.rawStoredAccounts()) {\n      const ref = record.apiKeyEnv\n      if (typeof ref !== 'string' || ref === '') continue\n      const label = record.label\n      out.push({ label: typeof label === 'string' && label !== '' ? label : ref, ref })\n    }\n    return out\n  }\n\n  /** Every extra account row: stored (minus staged removals) + staged adds. */\n  private effectiveAccounts(): AccountItemState[] {\n    const stored = this.storedExtras()\n      .filter((extra) => !this.removedRefs.has(extra.ref))\n      .map((extra) => ({ ...extra, added: false }))\n    const added = this.addedAccounts.map((extra) => ({ ...extra, added: true }))\n    return [...stored, ...added].map((extra) => ({\n      id: extra.ref,\n      ref: extra.ref,\n      label: this.labelDrafts.get(extra.ref) ?? extra.label,\n      keyText: this.keyDrafts.get(extra.ref) ?? '',\n      configured: this.credentialStates.get(extra.ref)?.configured ?? false,\n      writable: this.credentialStates.get(extra.ref)?.writable ?? true,\n      added: extra.added,\n      clearStaged: this.keyClears.has(extra.ref),\n    }))\n  }\n\n  /** Whether any account-level staging (add/remove/label/key/clear) exists. */\n  private accountsStaged(): boolean {\n    return this.addedAccounts.length > 0\n      || this.removedRefs.size > 0\n      || this.labelDrafts.size > 0\n      || this.keyDrafts.size > 0\n      || this.keyClears.size > 0\n  }\n\n  /** Whether the staged account edits differ from the stored section. */\n  private accountsDirty(): boolean {\n    if (this.addedAccounts.length > 0 || this.removedRefs.size > 0) return true\n    for (const [ref, text] of this.labelDrafts) {\n      const base = this.storedExtras().find((extra) => extra.ref === ref)?.label\n      if (base !== undefined && text.trim() !== '' && text !== base) return true\n    }\n    for (const text of this.keyDrafts.values()) {\n      if (text.trim() !== '') return true\n    }\n    // A staged clear is only meaningful while the key is actually stored —\n    // staging one against an unconfigured ref is a no-op, not dirt.\n    for (const ref of this.keyClears) {\n      if (this.credentialStates.get(ref)?.configured === true) return true\n    }\n    return false\n  }\n\n  /** Reset every account-level staged edit. */\n  private clearAccountStaging(): void {\n    this.addedAccounts = []\n    this.removedRefs.clear()\n    this.labelDrafts.clear()\n    this.keyDrafts.clear()\n    this.keyClears.clear()\n  }\n\n  /** Unset one stored credential, then re-read the Host's credential states. */\n  private async unsetKey(ref: string): Promise<boolean> {\n    try {\n      const response = await this.api.credentials.unset(ref)\n      if (!response.ok) return false\n    } catch {\n      return false\n    }\n    await this.describeAll()\n    return this.credentialStates.get(ref)?.configured !== true\n  }\n\n  /** The account-level writes a save performs (empty when nothing staged). */\n  private accountPlan(): Array<() => Promise<boolean>> {\n    if (!this.accountsDirty()) return []\n    const runs: Array<() => Promise<boolean>> = []\n    // Staged removals land first: a cleared credential must be gone before\n    // the accounts list write, or a removed row would leave an orphaned\n    // secret behind. Removed rows keep their clear (clean removal).\n    for (const ref of this.keyClears) {\n      if (this.credentialStates.get(ref)?.configured === true) {\n        runs.push(() => this.unsetKey(ref))\n      }\n    }\n    for (const [ref, text] of this.keyDrafts) {\n      const value = text.trim()\n      if (value !== '' && !this.removedRefs.has(ref) && !this.keyClears.has(ref)) {\n        runs.push(() => this.writeKeyTo(ref, value))\n      }\n    }\n    runs.push(() => this.writeAccounts())\n    return runs\n  }\n\n  /**\n   * Persist the staged accounts list into the settings section.\n   *\n   * The stored list is the base — NOT a list rebuilt from this page's rows.\n   * A composition-config entry may carry a literal `apiKey` (or a shape this\n   * page does not know), and the settings layer replaces the whole array, so a\n   * rebuilt list would silently delete every entry the page cannot name along\n   * with the literal keys of the entries it can. Entries are therefore carried\n   * over verbatim and only the reference-carrying rows are rewritten (label\n   * draft applied, staged removals dropped, staged additions appended).\n   */\n  private async writeAccounts(): Promise<boolean> {\n    const removed = this.removedRefs\n    const written = new Set<string>()\n    const list: Array<Record<string, unknown>> = []\n    for (const entry of this.rawStoredAccounts()) {\n      const ref = entry.apiKeyEnv\n      // Not a row this page manages (literal-key or unknown entry): preserve\n      // it exactly as stored rather than dropping it with the rewrite.\n      if (typeof ref !== 'string' || ref === '') {\n        list.push({ ...entry })\n        continue\n      }\n      if (removed.has(ref) || written.has(ref)) continue\n      written.add(ref)\n      list.push(this.accountEntry(ref, entry))\n    }\n    // Defensive dedupe by ref: a partially landed earlier save can leave an\n    // account both stored and staged-for-addition; never persist duplicates.\n    // A staged addition whose ref is already stored is skipped too — the\n    // stored entry (with any literal key or unknown field) wins.\n    for (const extra of this.addedAccounts) {\n      if (written.has(extra.ref)) continue\n      written.add(extra.ref)\n      list.push(this.accountEntry(extra.ref, extra))\n    }\n    await this.scope.set('accounts', list)\n    // Verify against the same raw entries the write was built from: the\n    // page's row view ignores reference-less entries, so comparing it to\n    // `list` would report a false failure whenever one is present.\n    const after = this.rawStoredAccounts()\n    return after.length === list.length\n      && list.every((item, index) => after[index]?.apiKeyEnv === item.apiKeyEnv)\n  }\n\n  /**\n   * One written account entry: the stored/added facts plus the label draft.\n   * `fallback` contributes the non-managed fields (a stored entry's literal\n   * `apiKey`, or any future field) so a rewrite never strips them.\n   */\n  private accountEntry(\n    ref: string,\n    fallback: { label: string } | Record<string, unknown>,\n  ): Record<string, unknown> {\n    const draft = this.labelDrafts.get(ref)?.trim()\n    const base = 'ref' in fallback\n      ? { label: (fallback as { label: string }).label }\n      : { ...(fallback as Record<string, unknown>) }\n    const storedLabel = base.label\n    return {\n      ...base,\n      label: draft !== undefined && draft !== ''\n        ? draft\n        : typeof storedLabel === 'string' && storedLabel !== '' ? storedLabel : ref,\n      apiKeyEnv: ref,\n    }\n  }\n\n  // -----------------------------------------------------------------------\n  // Model → account routing-rule staging\n  // -----------------------------------------------------------------------\n\n  /** The stored routing rules from the settings section (`modelAccountRules`). */\n  private storedRules(): Array<{ id: string; models: string[]; account: string }> {\n    const raw = this.scope.getSnapshot().value?.modelAccountRules\n    if (!Array.isArray(raw)) return []\n    const out: Array<{ id: string; models: string[]; account: string }> = []\n    for (const [index, entry] of raw.entries()) {\n      if (typeof entry !== 'object' || entry === null || Array.isArray(entry)) continue\n      const record = entry as Record<string, unknown>\n      const models = record.models\n      const account = record.account\n      const modelsList = Array.isArray(models) && models.every((m) => typeof m === 'string')\n        ? (models as string[]).filter((m) => m !== '')\n        : []\n      if (modelsList.length === 0) continue\n      out.push({\n        id: `rule-${index}`,\n        models: modelsList,\n        account: typeof account === 'string' && account !== '' ? account : 'default',\n      })\n    }\n    return out\n  }\n\n  /** Every routing rule row: stored (minus staged removals, with drafts) + staged adds. */\n  private effectiveRules(): RuleItemState[] {\n    const stored = this.storedRules()\n      .filter((rule) => !this.removedRuleIds.has(rule.id))\n      .map((rule) => {\n        const draft = this.ruleDrafts.get(rule.id)\n        return {\n          id: rule.id,\n          models: draft?.models ?? rule.models,\n          account: draft?.account ?? rule.account,\n          added: false,\n        }\n      })\n    const added = this.addedRules.map((rule, index) => ({\n      id: `new-${index}`,\n      models: rule.models,\n      account: rule.account,\n      added: true,\n    }))\n    return [...stored, ...added]\n  }\n\n  /** Whether any routing-rule staging (add/remove/edit) exists. */\n  private rulesStaged(): boolean {\n    return this.addedRules.length > 0 || this.removedRuleIds.size > 0 || this.ruleDrafts.size > 0\n  }\n\n  /** Whether the staged routing rules differ from the stored section. */\n  private rulesDirty(): boolean {\n    if (this.addedRules.length > 0 || this.removedRuleIds.size > 0) return true\n    for (const [id, draft] of this.ruleDrafts) {\n      const base = this.storedRules().find((rule) => rule.id === id)\n      if (base === undefined) continue\n      if (draft.models.length > 0 && !sameModels(draft.models, base.models)) return true\n      if (draft.account !== base.account) return true\n    }\n    return false\n  }\n\n  /** Reset every routing-rule staged edit. */\n  private clearRuleStaging(): void {\n    this.addedRules = []\n    this.ruleDrafts.clear()\n    this.removedRuleIds.clear()\n  }\n\n  /**\n   * Drop rule staging the stored section already reflects (partial-save\n   * retry). Stored row ids are positional (`rule-N`) and shift after any\n   * write, so every check here is content-based, never id-based:\n   * - landed additions (in `addedRules`, already in stored) are dropped, or\n   *   a retry would persist them twice;\n   * - staged removals whose snapshot row is gone from stored have landed\n   *   (drop them); a removal whose snapshot still matches a stored row is\n   *   still pending (keep it).\n   */\n  private reconcileRuleStaging(): void {\n    const stored = this.storedRules()\n    this.addedRules = this.addedRules.filter((added) =>\n      !stored.some((rule) =>\n        sameModels(added.models, rule.models) && added.account === rule.account))\n    for (const [id, snapshot] of [...this.removedRuleIds]) {\n      const landed = !stored.some((rule) =>\n        sameModels(snapshot.models, rule.models) && snapshot.account === rule.account)\n      if (landed) this.removedRuleIds.delete(id)\n    }\n    // Drafts are keyed by positional stored ids, so they survive a failed save\n    // exactly as long as the stored list did not change: writes run in order\n    // and stop at the first failure, so a failure BEFORE the rules write leaves\n    // the stored rows (and their ids) untouched and the drafts still describe\n    // them — clearing here would silently revert the user's edit and leave\n    // `dirty` false, i.e. nothing to retry. Only a save that actually landed\n    // the rules write shifts every positional id, which makes a draft\n    // unattributable; matching shifted rows by content would misattribute\n    // edits, so those drafts are dropped and the user re-applies the edit.\n    if (this.rulesBeforeSave !== undefined && ruleFingerprint(stored) === this.rulesBeforeSave) return\n    this.ruleDrafts.clear()\n  }\n\n  /** The stored visible-model allowlist (`visibleModels`); empty = show all. */\n  private storedVisibleModels(): string[] {\n    const raw = this.scope.getSnapshot().value?.visibleModels\n    if (!Array.isArray(raw)) return []\n    return raw.filter((m): m is string => typeof m === 'string' && m !== '')\n  }\n\n  /** Effective visible-model allowlist: staged draft or stored value. */\n  private effectiveVisibleModels(): string[] {\n    return this.visibleModelsDraft ?? this.storedVisibleModels()\n  }\n\n  /** Whether the staged visible-model selection differs from stored. */\n  private visibleModelsDirty(): boolean {\n    return this.visibleModelsDraft !== undefined\n      && !sameModels(this.visibleModelsDraft, this.storedVisibleModels())\n  }\n\n  /** Whether any visible-model staging exists. */\n  private visibleModelsStaged(): boolean {\n    return this.visibleModelsDraft !== undefined\n  }\n\n  /** Reset the visible-model staged edit. */\n  private clearVisibleModelsStaging(): void {\n    this.visibleModelsDraft = undefined\n  }\n\n  /** Drop visible-model staging the stored section already reflects. */\n  private reconcileVisibleModelsStaging(): void {\n    if (this.visibleModelsDraft !== undefined\n      && sameModels(this.visibleModelsDraft, this.storedVisibleModels())) {\n      this.visibleModelsDraft = undefined\n    }\n  }\n\n  /** The visible-model writes a save performs (empty when nothing staged). */\n  private visibleModelsPlan(): Array<() => Promise<boolean>> {\n    if (!this.visibleModelsDirty()) return []\n    return [() => this.writeVisibleModels()]\n  }\n\n  /** Persist the staged visible-model allowlist into the settings section. */\n  private async writeVisibleModels(): Promise<boolean> {\n    const list = this.visibleModelsDraft ?? []\n    await this.scope.set('visibleModels', list)\n    return sameModels(this.storedVisibleModels(), list)\n  }\n\n  /** Stage the visible-model allowlist (multi-select). */\n  editVisibleModels(models: string[]): void {\n    this.visibleModelsDraft = [...models]\n    this.failed = false\n    this.publish()\n  }\n\n  /** Stage \"show all models\" (clears the allowlist). */\n  clearVisibleModels(): void {\n    this.visibleModelsDraft = []\n    this.failed = false\n    this.publish()\n  }\n\n  /** The routing-rule writes a save performs (empty when nothing staged). */\n  private rulesPlan(): Array<() => Promise<boolean>> {\n    if (!this.rulesDirty()) return []\n    return [() => this.writeRules()]\n  }\n\n  /** Persist the staged routing rules into the settings section. */\n  private async writeRules(): Promise<boolean> {\n    const base = this.storedRules().filter((rule) => {\n      const snapshot = this.removedRuleIds.get(rule.id)\n      // Content-based removal: positional ids shift after any write, so a\n      // staged removal only filters the row it snapshotted.\n      return snapshot === undefined\n        || !sameModels(snapshot.models, rule.models)\n        || snapshot.account !== rule.account\n    })\n    const list = [\n      ...base.map((rule) => {\n        const draft = this.ruleDrafts.get(rule.id)\n        return {\n          models: draft !== undefined && draft.models.length > 0 ? draft.models : rule.models,\n          account: draft?.account !== undefined && draft.account !== '' ? draft.account : rule.account,\n        }\n      }),\n      ...this.addedRules.map((rule) => ({\n        models: rule.models,\n        account: rule.account,\n      })),\n    ].filter((rule) => rule.models.length > 0)\n    // Defensive dedupe by content: a partially landed earlier save can leave\n    // a rule both stored and staged-for-addition; never persist duplicates.\n    const seen = new Set<string>()\n    const deduped = list.filter((rule) => {\n      const key = `${rule.account}\\u0001${[...rule.models].sort().join('\\u0001')}`\n      if (seen.has(key)) return false\n      seen.add(key)\n      return true\n    })\n    await this.scope.set('modelAccountRules', deduped)\n    const after = this.storedRules()\n    return after.length === deduped.length\n      && deduped.every((item, index) =>\n        after[index] !== undefined\n        && sameModels(after[index].models, item.models)\n        && after[index].account === item.account)\n  }\n\n  private publish(): void {\n    if (this.disposed) return\n    for (const listener of this.listeners) listener()\n  }\n}\n","/** Legacy ApiProxy credentials adapter for pre-0.1.2 DSH clients. */\n\nimport type { SettingsPageApi } from './settings.ts'\n\ninterface LegacyFailure {\n  message: string\n}\n\ninterface LegacyResponse<T> {\n  result:\n    | { ok: true; value: T }\n    | { ok: false; error: LegacyFailure }\n}\n\n/** The pre-0.1.2 `connection.api.credentials` face. */\nexport interface LegacyCredentialsApi {\n  describe(request: { refs: string[] }): Promise<LegacyResponse<{\n    credentials: Record<string, { configured: boolean; writable: boolean }>\n  }>>\n  set(request: { ref: string; value: string }): Promise<LegacyResponse<unknown>>\n  unset(request: { ref: string }): Promise<LegacyResponse<unknown>>\n}\n\n/** Convert a legacy credentials ApiProxy into the current settings-page face. */\nexport function adaptLegacyCredentials(\n  legacy: LegacyCredentialsApi | undefined,\n): SettingsPageApi | undefined {\n  if (legacy === undefined) return undefined\n  return {\n    credentials: {\n      describe: async (refs) => {\n        const response = await legacy.describe({ refs })\n        return response.result.ok\n          ? { ok: true, value: response.result.value.credentials }\n          : { ok: false, error: response.result.error }\n      },\n      set: async (ref, value) => {\n        const response = await legacy.set({ ref, value })\n        return response.result.ok\n          ? { ok: true, value: undefined }\n          : { ok: false, error: response.result.error }\n      },\n      unset: async (ref) => {\n        const response = await legacy.unset({ ref })\n        return response.result.ok\n          ? { ok: true, value: undefined }\n          : { ok: false, error: response.result.error }\n      },\n    },\n  }\n}\n","/**\n * Browser controller for the settings page's account-usage card.\n *\n * The card renders the same account/usage/credit facts the `/commandcode`\n * command prints, fetched Host-side through the `commandcode/report` Remote\n * (the browser never holds the API key). This controller owns the fetch\n * lifecycle — idle/loading/ready/error, one in-flight request at a time,\n * stale-response dropping — and the display formatting, so the React\n * component stays a thin renderer and node tests can drive everything.\n *\n * Deliberately JSX-free, mirroring `./settings.ts`.\n *\n * @module dsh-commandcode-provider/client/usage\n */\n\nimport type { CommandCodeAccountsReport, CommandCodeCatalog, CommandCodePriceTable } from '../usage-wire.ts'\nimport type { CommandCodeLoginStatus } from '../login-wire.ts'\nimport type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol'\n\n/**\n * Merge the plugin's Remote endpoints into the harness's typed client Remote\n * surface (the same declaration pattern the harness's generated\n * typert.remote-client files use), so `ctx.remote.commandcode.*()` is typed\n * once each contribution is mounted. The `commandcode` namespace member is\n * declared exactly once (interface merging forbids duplicate members), so\n * this one declaration carries the usage report, the model catalog, the price\n * table, AND the login endpoints — the endpoint-level declarations live beside\n * their controllers.\n */\ndeclare module '@deepseek-ai/dsh-typert-protocol' {\n  interface TypertRemoteMap {\n    'commandcode/report': () => Promise<RemoteResult<CommandCodeAccountsReport>>\n    'commandcode/models': () => Promise<RemoteResult<CommandCodeCatalog>>\n    'commandcode/prices': () => Promise<RemoteResult<CommandCodePriceTable>>\n  }\n  interface TypertRemoteNamespaceMap {\n    commandcode: {\n      report: () => Promise<RemoteResult<CommandCodeAccountsReport>>\n      models: () => Promise<RemoteResult<CommandCodeCatalog>>\n      /**\n       * Optional because the Host half and this browser bundle can be a\n       * cross-version pair: a Host older than the price table mounts no\n       * `commandcode/prices` descriptor, so the member is genuinely absent at\n       * runtime. The price controller reads a missing method as \"no table\"\n       * (see `./prices.ts`) instead of throwing.\n       */\n      prices?: () => Promise<RemoteResult<CommandCodePriceTable>>\n      loginBegin: () => Promise<RemoteResult<CommandCodeLoginStatus>>\n      loginStatus: () => Promise<RemoteResult<CommandCodeLoginStatus>>\n      loginCancel: () => Promise<RemoteResult<CommandCodeLoginStatus>>\n    }\n  }\n}\n\n/** The narrow slice of the mounted Remote this controller calls. */\nexport interface UsageRemote {\n  report(): Promise<\n    | { ok: true; value: CommandCodeAccountsReport }\n    | { ok: false; error: { message: string } }\n  >\n  models(): Promise<\n    | { ok: true; value: CommandCodeCatalog }\n    | { ok: false; error: { message: string } }\n  >\n  /**\n   * Optional for the same cross-version reason as the namespace member above:\n   * an older Host serves no price table. `CommandCodePricesController` reads\n   * the absence as a permanent \"no prices\" state.\n   */\n  prices?(): Promise<\n    | { ok: true; value: CommandCodePriceTable }\n    | { ok: false; error: { message: string } }\n  >\n}\n\n/** The card's fetch lifecycle. */\nexport type UsageStatus =\n  /** Never fetched (no API key configured yet, or not requested). */\n  | 'idle'\n  /** A fetch is in flight; `report` retains the last good data if any. */\n  | 'loading'\n  /** The last fetch succeeded. */\n  | 'ready'\n  /** The last fetch failed (no key, unreachable host, old plugin). */\n  | 'error'\n\n/** The card's full state face. */\nexport interface UsagePageState {\n  status: UsageStatus\n  /** The last successfully fetched report (retained across refetches). */\n  report: CommandCodeAccountsReport | undefined\n  /** The last failure's message (error status). */\n  error: string | undefined\n  /** Millis timestamp of the last successful fetch. */\n  fetchedAt: number | undefined\n}\n\nconst IDLE: UsagePageState = { status: 'idle', report: undefined, error: undefined, fetchedAt: undefined }\n\n/**\n * Controller bridging the `commandcode/report` Remote onto the card. Public\n * API mirrors {@link CommandCodeSettingsController}: `state()` projections,\n * `subscribe`, and one `refresh()` action.\n */\nexport class CommandCodeUsageController {\n  private readonly remote: UsageRemote\n  private readonly listeners = new Set<() => void>()\n  private current: UsagePageState = IDLE\n  private generation = 0\n  private inFlight = false\n  private disposed = false\n\n  constructor(remote: UsageRemote) {\n    this.remote = remote\n  }\n\n  /** Release every subscription. Idempotent; in-flight results are dropped. */\n  dispose(): void {\n    this.disposed = true\n    this.generation += 1\n    this.listeners.clear()\n  }\n\n  /** Subscribe to state projections. @returns the disposer. */\n  subscribe(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** The current card state face. */\n  state(): UsagePageState {\n    return this.current\n  }\n\n  /**\n   * Fetch (or refetch) the report. Concurrent refreshes collapse onto one\n   * request; a superseded fetch's late result is dropped, never published.\n   */\n  async refresh(): Promise<void> {\n    if (this.disposed || this.inFlight) return\n    const generation = ++this.generation\n    this.inFlight = true\n    this.current = { ...this.current, status: 'loading', error: undefined }\n    this.publish()\n    try {\n      const response = await this.remote.report()\n      if (this.disposed || generation !== this.generation) return\n      if (response.ok) {\n        this.current = { status: 'ready', report: response.value, error: undefined, fetchedAt: Date.now() }\n      } else {\n        this.current = { ...this.current, status: 'error', error: response.error.message }\n      }\n    } catch (error: unknown) {\n      if (this.disposed || generation !== this.generation) return\n      this.current = {\n        ...this.current,\n        status: 'error',\n        error: error instanceof Error ? error.message : String(error),\n      }\n    } finally {\n      if (generation === this.generation) this.inFlight = false\n    }\n    this.publish()\n  }\n\n  private publish(): void {\n    if (this.disposed) return\n    for (const listener of this.listeners) listener()\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Display formatting (shared by the component, covered by node tests)\n// ---------------------------------------------------------------------------\n\n/** Format a dollar amount compactly (2 decimals). */\nexport function formatMoney(value: number): string {\n  return `$${value.toFixed(2)}`\n}\n\n/** Format a dollar amount precisely (4 decimals) for small totals. */\nexport function formatMoneyExact(value: number): string {\n  return `$${value.toFixed(4)}`\n}\n\n/** Format a large token count compactly (1.9M style). */\nexport function formatTokensCompact(value: number): string {\n  if (value >= 1e9) return `${(value / 1e9).toFixed(1)}B`\n  if (value >= 1e6) return `${(value / 1e6).toFixed(1)}M`\n  if (value >= 1e3) return `${(value / 1e3).toFixed(1)}K`\n  return String(value)\n}\n\n/**\n * Format a success-rate percentage (already in percent units, e.g. 99.96):\n * at most two decimals, trailing zeros trimmed — `100` stays `100`, not\n * `100.00`, and the raw upstream float `99.965552876334` becomes `99.97`.\n * The `%` suffix is appended by the caller (the card and the dashboard line\n * both compose it).\n */\nexport function formatSuccessRate(value: number): string {\n  return String(Number(value.toFixed(2)))\n}\n\n/** One window's fill ratio in [0, 1]; 0 when uncapped. */\nexport function windowRatio(used: number, cap: number): number {\n  if (cap <= 0) return 0\n  return Math.max(0, Math.min(1, used / cap))\n}\n\n/** Format a millis timestamp as a local short date-time; empty when unset. */\nexport function formatResetAt(ms: number): string {\n  if (ms <= 0) return ''\n  return new Date(ms).toLocaleString()\n}\n\n/** Host facts drive the usage card, including keys invisible to browser credentials. */\nexport function usageCardState(usage: UsagePageState) {\n  const accounts = usage.report?.accounts ?? []\n  return {\n    loading: usage.status === 'loading',\n    shouldRefresh: usage.status === 'idle',\n    noKey: accounts.length > 0 && !accounts.some(account => account.configured),\n  }\n}\n","/**\n * Browser controller for the model price table the composer's session-cost\n * figure depends on.\n *\n * The rates are vendored Host-side (`src/model-prices.ts`) and cross the\n * `commandcode/prices` Remote, so the browser never carries its own copy that\n * could drift from the snapshot, and a price update reaches an open page\n * without rebuilding the client bundle.\n *\n * Successful reads are cached until the Host namespace rebinds. Transient\n * failures retry three times with bounded backoff; manual refresh can retry\n * after that. Rebinding drops stale in-flight results and resets the budget.\n * Missing endpoints are permanent until the namespace changes.\n *\n * Deliberately JSX-free, mirroring `./usage.ts`.\n *\n * @module dsh-commandcode-provider/client/prices\n */\n\nimport type { CommandCodePriceTable } from '../usage-wire.ts'\n\n/** The narrow slice of the mounted Remote this controller calls. */\nexport interface PricesRemote {\n  /**\n   * Optional because the Host and the browser bundle can be a cross-version\n   * pair: a Host half older than this feature serves no `commandcode/prices`\n   * endpoint, and the controller must read that as \"no price table\" instead of\n   * calling an undefined method.\n   */\n  prices?(): Promise<\n    | { ok: true; value: CommandCodePriceTable }\n    | { ok: false; error: { message: string; permanent?: boolean } }\n  >\n}\n\n/** The price table's fetch lifecycle. */\nexport type PricesStatus =\n  /** Never requested. */\n  | 'idle'\n  /** A fetch is in flight. */\n  | 'loading'\n  /** The table is loaded and cached for the page's lifetime. */\n  | 'ready'\n  /** The last fetch failed; `ensure()` may try again. */\n  | 'error'\n\n/** The readout's price-table state face. */\nexport interface SessionCostPricesState {\n  status: PricesStatus\n  /** The cached table (only ever set once). */\n  table: CommandCodePriceTable | undefined\n  /** The last failure's message. */\n  error: string | undefined\n}\n\nconst IDLE: SessionCostPricesState = { status: 'idle', table: undefined, error: undefined }\n\n/**\n * Timer seam for the bounded retry backoff, so a node test can drive the\n * schedule without waiting on it.\n */\nexport interface PriceRetryTimer {\n  set(callback: () => void, ms: number): unknown\n  clear(handle: unknown): void\n}\nconst RETRY_TIMER: PriceRetryTimer = {\n  set(callback, ms) { const handle = setTimeout(callback, ms); handle.unref?.(); return handle },\n  clear(handle) { clearTimeout(handle as ReturnType<typeof setTimeout>) },\n}\n\n/**\n * Cache over the `commandcode/prices` Remote, with a bounded transient-retry\n * budget. Public API mirrors {@link CommandCodeUsageController}: `state()`,\n * `subscribe`, and `ensure()`; `reload()` additionally drops the cache and\n * restarts the budget when the Host namespace rebinds.\n *\n * Not a one-shot: the last fetch is cached until `reload()`, a transient\n * failure is retried three times at 1/2/4 s (the delays are bounded, not a\n * poll), and a MANUAL `ensure()` still fetches after that budget is spent. A\n * PERMANENT failure — the Host serving no such endpoint — is terminal for the\n * binding and is only cleared by `reload()`.\n */\nexport class CommandCodePricesController {\n  private readonly remote: PricesRemote\n  private readonly listeners = new Set<() => void>()\n  private current: SessionCostPricesState = IDLE\n  private generation = 0\n  private inFlight = false\n  private disposed = false\n\n  private retryHandle: unknown\n  private attempts = 0\n  private permanent = false\n  private readonly timer: PriceRetryTimer\n\n  constructor(remote: PricesRemote, timer: PriceRetryTimer = RETRY_TIMER) {\n    this.timer = timer\n    this.remote = remote\n  }\n\n  /** Release every subscription. Idempotent; in-flight results are dropped. */\n  dispose(): void {\n    this.disposed = true\n    this.clearRetry()\n    this.listeners.clear()\n  }\n\n  /** Subscribe to state projections. @returns the disposer. */\n  subscribe(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** The current state face. */\n  state(): SessionCostPricesState {\n    return this.current\n  }\n\n  /**\n   * Fetch the table unless it is already loaded, permanent, or in flight — and\n   * unless a bounded retry already owns the next attempt.\n   *\n   * The only callers are the client entry: `reload()` when the Remote namespace\n   * lands or rebinds, and a manual refresh. Nothing in the composer calls it, so\n   * a mounted readout does not trigger a fetch of its own — it renders whatever\n   * the table's state currently is.\n   */\n  ensure(): void {\n    if (this.disposed || this.permanent || this.inFlight || this.current.status === 'ready') return\n    this.clearRetry()\n    const call = this.remote.prices\n    // An older Host half serves no price endpoint. That is a permanent\n    // condition for this page, so it lands in the error state (the readout\n    // stays hidden) rather than retrying on every mount.\n    if (typeof call !== 'function') {\n      this.permanent = true\n      this.publish({ status: 'error', table: undefined, error: 'the Host serves no commandcode/prices endpoint' })\n      return\n    }\n    const generation = this.generation\n    this.inFlight = true\n    this.attempts += 1\n    this.publish({ status: 'loading', table: this.current.table, error: undefined })\n    let request: ReturnType<NonNullable<PricesRemote['prices']>>\n    try { request = call.call(this.remote) } catch (error) { request = Promise.reject(error) }\n    void request.then((result) => {\n      if (this.disposed || generation !== this.generation) return\n      this.inFlight = false\n      if (result.ok) {\n        this.publish({ status: 'ready', table: result.value, error: undefined })\n        return\n      }\n      this.permanent = result.error.permanent === true\n      this.publish({ status: 'error', table: undefined, error: result.error.message })\n      this.scheduleRetry()\n    }, (error: unknown) => {\n      if (this.disposed || generation !== this.generation) return\n      this.inFlight = false\n      this.publish({\n        status: 'error',\n        table: undefined,\n        error: error instanceof Error ? error.message : String(error),\n      })\n      this.scheduleRetry()\n    })\n  }\n\n  /** Rebinding a Host invalidates cached prices and restarts the bounded retry budget. */\n  reload(): void {\n    if (this.disposed) return\n    this.generation += 1\n    this.inFlight = false\n    this.clearRetry()\n    this.permanent = false\n    this.attempts = 0\n    this.current = IDLE\n    this.ensure()\n  }\n\n  private clearRetry(): void {\n    if (this.retryHandle !== undefined) this.timer.clear(this.retryHandle)\n    this.retryHandle = undefined\n  }\n\n  private scheduleRetry(): void {\n    if (this.disposed || this.permanent || this.attempts >= 4) return\n    this.retryHandle = this.timer.set(() => { this.retryHandle = undefined; this.ensure() }, 1000 * 2 ** (this.attempts - 1))\n  }\n\n  private publish(next: SessionCostPricesState): void {\n    this.current = next\n    for (const listener of this.listeners) listener()\n  }\n}\n","/**\n * Browser controller for the settings page's login panel.\n *\n * The panel drives the Host-half browser login (the official\n * `command-code login` loopback dance) through the Typert Gateway: `begin`\n * asks the Host to bind the callback server and returns the Studio URL, the\n * controller polls `loginStatus` once a second while the attempt is live, and\n * `cancel` tears it down. The key itself never crosses to the browser — the\n * Host validates and stores it through the credentials seam.\n *\n * Transport-level failures (no mounted Remote, an older Host without the\n * login endpoints) land in the dedicated `unavailable` phase so the page can\n * point back at manual paste. Deliberately JSX-free, mirroring\n * `./settings.ts` and `./usage.ts`.\n *\n * @module dsh-commandcode-provider/client/login\n */\n\nimport type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol'\nimport type { CommandCodeLoginFailureReason, CommandCodeLoginStatus } from '../login-wire.ts'\nimport type { Translate } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { SettingsCommandCodeKey } from './locales.ts'\n\n/** The endpoint-level Remote surface this controller calls. */\ndeclare module '@deepseek-ai/dsh-typert-protocol' {\n  interface TypertRemoteMap {\n    'commandcode/loginBegin': () => Promise<RemoteResult<CommandCodeLoginStatus>>\n    'commandcode/loginStatus': () => Promise<RemoteResult<CommandCodeLoginStatus>>\n    'commandcode/loginCancel': () => Promise<RemoteResult<CommandCodeLoginStatus>>\n  }\n}\n\n/** The narrow slice of the mounted Remote this controller calls. */\nexport interface LoginRemote {\n  loginBegin(): Promise<LoginCallResult>\n  loginStatus(): Promise<LoginCallResult>\n  loginCancel(): Promise<LoginCallResult>\n}\n\n/** One Remote call's outcome as the controller sees it. */\nexport type LoginCallResult =\n  | { ok: true; value: CommandCodeLoginStatus }\n  | { ok: false; error: { message: string } }\n\n/** The panel's full state face. */\nexport interface LoginPageState {\n  /**\n   * `idle` — nothing started; `starting` — begin() in flight; `waiting` —\n   * the Studio URL is live and polling; `success`/`failed` — terminal;\n   * `unavailable` — the Remote itself could not be reached (old Host, mount\n   * failure), manual paste is the way.\n   */\n  phase: 'idle' | 'starting' | 'waiting' | 'success' | 'failed' | 'unavailable'\n  /** The Studio authorization URL while `waiting`. */\n  authUrl: string | undefined\n  /** The account display name on `success`. */\n  userName: string | undefined\n  /** The key's Studio label on `success`. */\n  keyName: string | undefined\n  /** The stable failure reason when `failed`. */\n  reason: CommandCodeLoginFailureReason | undefined\n  /** Secondary failure detail when `failed`/`unavailable`. */\n  message: string | undefined\n}\n\n/** How often a live attempt is polled. */\nconst POLL_INTERVAL_MS = 1_000\n\n/**\n * The login panel's fetch/poll lifecycle. One poll loop at a time; a fresh\n * `begin()` supersedes any previous loop via a generation token.\n */\nexport class CommandCodeLoginController {\n  private readonly remote: () => LoginRemote | undefined\n  private readonly listeners = new Set<() => void>()\n  private readonly pollMs: number\n  /** Monotonic token; only the latest loop may publish polling results. */\n  private generation = 0\n  private disposed = false\n\n  private phase: LoginPageState['phase'] = 'idle'\n  private authUrl: string | undefined\n  private userName: string | undefined\n  private keyName: string | undefined\n  private reason: CommandCodeLoginFailureReason | undefined\n  private message: string | undefined\n\n  constructor(remote: () => LoginRemote | undefined, pollMs = POLL_INTERVAL_MS) {\n    this.remote = remote\n    this.pollMs = pollMs\n  }\n\n  /** Subscribe to state projections. @returns the disposer. */\n  subscribe(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** Build the current panel state face. */\n  state(): LoginPageState {\n    return {\n      phase: this.phase,\n      authUrl: this.authUrl,\n      userName: this.userName,\n      keyName: this.keyName,\n      reason: this.reason,\n      message: this.message,\n    }\n  }\n\n  /** Start (or rejoin) a login attempt and begin polling its status. */\n  async begin(): Promise<void> {\n    if (this.disposed || this.phase === 'starting' || this.phase === 'waiting') return\n    const generation = ++this.generation\n    this.set({ phase: 'starting', authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: undefined })\n    const remote = this.remote()\n    if (remote === undefined) {\n      this.set({ phase: 'unavailable', authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: 'login remote is not mounted' })\n      return\n    }\n    let result: LoginCallResult\n    try {\n      result = await remote.loginBegin()\n    } catch (error: unknown) {\n      // A transport throw (gateway hiccup) reads the same as a rejected call.\n      result = { ok: false, error: { message: error instanceof Error ? error.message : String(error) } }\n    }\n    if (this.superseded(generation)) return\n    if (!result.ok) {\n      this.set({ phase: 'unavailable', authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: result.error.message })\n      return\n    }\n    this.apply(result.value)\n    if (this.currentPhase === 'waiting') void this.poll(generation)\n  }\n\n  /** Cancel a waiting attempt. */\n  async cancel(): Promise<void> {\n    if (this.disposed || (this.phase !== 'starting' && this.phase !== 'waiting')) return\n    const generation = ++this.generation\n    const remote = this.remote()\n    if (remote === undefined) return\n    let result: LoginCallResult\n    try {\n      result = await remote.loginCancel()\n    } catch {\n      // The Host may be gone; reflect the local cancel regardless.\n      this.set({ phase: 'failed', authUrl: undefined, userName: undefined, keyName: undefined, reason: 'cancelled', message: undefined })\n      return\n    }\n    if (this.superseded(generation)) return\n    if (result.ok) this.apply(result.value)\n    else this.set({ phase: 'failed', authUrl: undefined, userName: undefined, keyName: undefined, reason: 'cancelled', message: undefined })\n  }\n\n  /** Stop polling and release listeners. Idempotent. */\n  dispose(): void {\n    if (this.disposed) return\n    this.disposed = true\n    this.generation += 1\n    this.listeners.clear()\n  }\n\n  // -----------------------------------------------------------------------\n  // Internals\n  // -----------------------------------------------------------------------\n\n  /** Poll until the attempt leaves `waiting` or a newer loop supersedes us. */\n  private async poll(generation: number): Promise<void> {\n    // A getter read (not the field) so control-flow narrowing across `await`\n    // cannot claim the phase is frozen.\n    while (!this.disposed && !this.superseded(generation) && this.currentPhase === 'waiting') {\n      await sleep(this.pollMs)\n      if (this.disposed || this.superseded(generation) || this.currentPhase !== 'waiting') return\n      const remote = this.remote()\n      if (remote === undefined) {\n        this.set({ phase: 'unavailable', authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: 'login remote is not mounted' })\n        return\n      }\n      let result: LoginCallResult\n      try {\n        result = await remote.loginStatus()\n      } catch {\n        continue // one missed poll is not an outage; the next tick retries\n      }\n      if (this.superseded(generation) || this.currentPhase !== 'waiting') return\n      if (result.ok) this.apply(result.value)\n    }\n  }\n\n  private get currentPhase(): LoginPageState['phase'] {\n    return this.phase\n  }\n\n  /** Project one Host status onto the panel face. */\n  private apply(status: CommandCodeLoginStatus): void {\n    const base = { authUrl: undefined, userName: undefined, keyName: undefined, reason: undefined, message: undefined }\n    if (status.state === 'waiting') {\n      this.set({ ...base, phase: 'waiting', authUrl: status.authUrl })\n      return\n    }\n    if (status.state === 'success') {\n      this.set({ ...base, phase: 'success', userName: status.userName, keyName: status.keyName })\n      return\n    }\n    if (status.state === 'failed') {\n      this.set({ ...base, phase: 'failed', reason: status.reason, message: status.message })\n      return\n    }\n    // `idle` mid-poll means the Host restarted; the attempt is gone.\n    this.set({ ...base, phase: 'failed', reason: 'cancelled', message: 'the login attempt is no longer active' })\n  }\n\n  /** Replace the whole state face and notify. Explicit over partial patches. */\n  private set(state: LoginPageState): void {\n    this.phase = state.phase\n    this.authUrl = state.authUrl\n    this.userName = state.userName\n    this.keyName = state.keyName\n    this.reason = state.reason\n    this.message = state.message\n    this.publish()\n  }\n\n  private superseded(generation: number): boolean {\n    return this.disposed || generation !== this.generation\n  }\n\n  private publish(): void {\n    if (this.disposed) return\n    for (const listener of [...this.listeners]) listener()\n  }\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\n// ---------------------------------------------------------------------------\n// Hint copy for the login panel / card row (JSX-free so node tests drive it)\n// ---------------------------------------------------------------------------\n\n/**\n * The per-reason copy for a failed login attempt. Shared by the settings\n * page's login panel and the Models-page card's login row — the same reasons\n * can surface from either surface.\n */\nexport function loginFailureCopy(\n  reason: CommandCodeLoginFailureReason | undefined,\n  t: Translate<SettingsCommandCodeKey>,\n): string {\n  if (reason === 'denied') return t('loginDenied')\n  if (reason === 'timeout') return t('loginTimeout')\n  if (reason === 'invalid-key') return t('loginInvalidKey')\n  if (reason === 'network') return t('loginNetwork')\n  if (reason === 'unavailable') return t('loginStoreFailed')\n  if (reason === 'cancelled') return t('loginCancelled')\n  return t('loginFailedGeneric')\n}\n\n/** One login panel row's computed hint: text, class stem, and optional title. */\nexport interface LoginHint {\n  text: string\n  className: string\n  /** Tooltip shown when the row carries secondary failure detail. */\n  title: string | undefined\n}\n\n/**\n * The hint text + class for one login panel state, shared by the settings\n * page's `LoginPanel` and the Models-page card's login row so both surfaces\n * can never drift apart. Pure: no timers, no state — the components render it.\n */\nexport function loginHint(\n  state: LoginPageState,\n  t: Translate<SettingsCommandCodeKey>,\n): LoginHint {\n  if (state.phase === 'starting' || state.phase === 'waiting') {\n    return {\n      text: t(state.phase === 'starting' ? 'loginStarting' : 'loginWaiting'),\n      className: 'cc-hint',\n      title: undefined,\n    }\n  }\n  if (state.phase === 'success') {\n    const keyName = state.keyName !== undefined && state.keyName !== '' ? ` · ${state.keyName}` : ''\n    return {\n      text: `${t('loginSuccess')} ${state.userName ?? ''}${keyName}`.trim(),\n      className: 'cc-loginDone',\n      title: undefined,\n    }\n  }\n  if (state.phase === 'failed') {\n    return {\n      text: loginFailureCopy(state.reason, t),\n      className: 'cc-loginError',\n      title: state.message,\n    }\n  }\n  if (state.phase === 'unavailable') {\n    return {\n      text: `${t('loginUnavailable')} ${state.message ?? ''}`.trim(),\n      className: 'cc-loginError',\n      title: undefined,\n    }\n  }\n  return { text: t('loginHintIdle'), className: 'cc-hint', title: undefined }\n}\n","/**\n * Shared boundary-validation and Remote-descriptor plumbing for the plugin's\n * hand-rolled Typert wire contracts (`commandcode/report`, `commandcode/models`,\n * `commandcode/login*`).\n *\n * Every Remote this plugin serves crosses the Typert Gateway with a strict\n * result schema: the Host half registers a descriptor against a Cordis service\n * (`src/usage-remote.ts`) and the browser half mounts the matching contribution\n * on `ctx.remote` (`src/client/index.ts`). The wire contract is deliberately\n * dependency-free so the client bundle can inline it — a pure-TS helper module\n * imported by the wire files keeps it that way while removing the schema\n * helpers and descriptor boilerplate they used to duplicate.\n *\n * @module dsh-commandcode-provider/wire-shared\n */\n\nimport type { InvocationDescriptor, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\n\n/** The npm package identity every contribution and descriptor claims. */\nexport const REMOTE_PACKAGE = '@mars-sea/dsh-commandcode-provider'\n\n/** The Cordis service key the Gateway resolves every Command Code Remote from. */\nexport const REMOTE_SERVICE = 'commandcodeUsage'\n\n/** The wire namespace all Command Code endpoints share. */\nexport const REMOTE_NAMESPACE = 'commandcode'\n\n/** The read/validate helpers one boundary codec needs. */\nexport interface BoundaryValidator {\n  /** Reject one boundary value with a field-naming error. */\n  reject(field: string): never\n  /** Narrow an unknown value to a plain record, or reject. */\n  record(value: unknown, field: string): Record<string, unknown>\n  /** Read one required string field (`field` is the dotted error label). */\n  stringField(source: Record<string, unknown>, key: string, field: string): string\n  /** Read one required finite number field (`field` is the dotted error label). */\n  numberField(source: Record<string, unknown>, key: string, field: string): number\n  /** Read one required boolean field (`field` is the dotted error label). */\n  booleanField(source: Record<string, unknown>, key: string, field: string): boolean\n}\n\n/**\n * Build the validator helpers one endpoint uses. `prefix` names the\n * endpoint in the rejection message (e.g. `commandcode/report result:`), so\n * each wire file keeps its own diagnostic phrasing while sharing the helper\n * bodies.\n *\n * The helpers return the reject call directly in the failure branch: since\n * `reject` is typed `never`, the ternary's union collapses to the success type\n * without relying on TypeScript's control-flow analysis of a never-returning\n * call (which only recognizes function declarations, not the destructured\n * arrow `reject` callers receive from this factory).\n */\nexport function makeBoundaryValidator(prefix: string): BoundaryValidator {\n  const reject = (field: string): never => {\n    throw new TypeError(`${prefix} invalid ${field}`)\n  }\n  const record = (value: unknown, field: string): Record<string, unknown> =>\n    typeof value === 'object' && value !== null && !Array.isArray(value)\n      ? value as Record<string, unknown>\n      : reject(field)\n  const stringField = (source: Record<string, unknown>, key: string, field: string): string =>\n    typeof source[key] === 'string' ? source[key] as string : reject(field)\n  const numberField = (source: Record<string, unknown>, key: string, field: string): number =>\n    typeof source[key] === 'number' && Number.isFinite(source[key] as number)\n      ? source[key] as number\n      : reject(field)\n  const booleanField = (source: Record<string, unknown>, key: string, field: string): boolean =>\n    typeof source[key] === 'boolean' ? source[key] as boolean : reject(field)\n  return { reject, record, stringField, numberField, booleanField }\n}\n\n/**\n * Build one strict invocation descriptor. Every Command Code Remote shares the\n * `commandcode` namespace, the `commandcodeUsage` service, and a strict\n * `mode: 'strict'` result — only the endpoint, method, result type symbol, and\n * schema differ — so the boilerplate lives here once and each endpoint supplies\n * only its own facts.\n */\nexport function makeRemoteDescriptor<Output>(\n  endpoint: string,\n  method: string,\n  typeSymbol: string,\n  schema: TypertSchema<Output>,\n): InvocationDescriptor {\n  return {\n    id: `${REMOTE_PACKAGE}#${endpoint}`,\n    service: REMOTE_SERVICE,\n    namespace: REMOTE_NAMESPACE,\n    method,\n    invocation: { kind: 'direct' },\n    parameters: [],\n    result: {\n      mode: 'strict',\n      typeSymbol,\n      schema,\n    },\n  }\n}","/**\n * Wire contract for the Command Code account-usage Remote\n * (`commandcode/report`).\n *\n * The settings page renders the same account/usage/credit facts the\n * `/commandcode` command prints, but the browser never holds the API key —\n * the report must be produced Host-side and cross the Connection RPC carrier.\n * The harness exposes plugin-defined Host methods through the Typert Gateway:\n * the Host half registers a strict invocation descriptor against a Cordis\n * service (`src/usage-remote.ts`), and the browser half mounts the matching\n * Remote contribution on `ctx.remote` (`src/client/index.ts`).\n *\n * This module is the single source both halves share: the result validator\n * (a hand-rolled {@link TypertSchema}, so neither half needs a schema library)\n * and the exact descriptor object, so the endpoint can never drift apart.\n * It is deliberately dependency-free — the client bundle inlines it, and only\n * `import type` edges leave it (erased at build). The boundary-validator\n * helpers and the descriptor boilerplate live in `./wire-shared.ts`, shared\n * with the login wire contract.\n *\n * @module dsh-commandcode-provider/usage-wire\n */\n\nimport type { CommandCodeCredits, CommandCodeUsageReport, UsageBlockReason } from './adapter.ts'\n\nexport type { CommandCodeUsageReport, UsageBlockReason }\nimport type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\nimport {\n  makeBoundaryValidator,\n  makeRemoteDescriptor,\n  REMOTE_PACKAGE,\n} from './wire-shared.ts'\n\n/** One account's usage entry in the multi-account report. */\nexport interface CommandCodeAccountUsage {\n  /** Stable slot id (`default`, `account-2`, …). */\n  id: string\n  /** Display label (user-provided or generated). */\n  label: string\n  /** Whether an API key resolved for this account. */\n  configured: boolean\n  /** Whether this account currently serves requests (first usable slot). */\n  active: boolean\n  /** Rotation mark: `''` (usable), `'rate-limit'`, or `'invalid-credential'`. */\n  mark: string\n  /** Known cooldown end in millis; 0 when unknown or not cooling down. */\n  cooldownUntil: number\n  /** The per-account report; `failures`-only when the fetch itself failed. */\n  report: CommandCodeUsageReport\n}\n\n/** The settings page's account card data: one entry per configured account. */\nexport interface CommandCodeAccountsReport {\n  accounts: CommandCodeAccountUsage[]\n}\n\n/** The npm package identity both contribution registrations claim. */\nexport const USAGE_REMOTE_PACKAGE = REMOTE_PACKAGE\n\n/** Canonical `<namespace>/<method>` endpoint of the usage report Remote. */\nexport const USAGE_REPORT_ENDPOINT = 'commandcode/report'\n\n/**\n * The shared read/validate helpers for the usage report endpoint, prefixed\n * so rejection messages name the offending boundary.\n */\nconst { reject, record, stringField, numberField, booleanField } =\n  makeBoundaryValidator('commandcode/report result:')\n\n/** Validate one window-limit block (`fiveHour` / `weekly`). */\n/**\n * Parse one quota window, or undefined when the frame carries no such window.\n *\n * The distinction is load-bearing at this boundary: an ABSENT window means the\n * billing endpoint reported none (an unlimited plan), while a present block with\n * `cap: 0` means uncapped spend that was really reported. Collapsing the two\n * would draw a zeroed quota row for an account that has no such limit.\n */\nfunction windowLimit(\n  value: unknown,\n  field: string,\n): { used: number; cap: number; exceeded: boolean; resetAt: number } | undefined {\n  if (value === undefined) return undefined\n  const source = record(value, field)\n  return {\n    used: numberField(source, 'used', `${field}.used`),\n    cap: numberField(source, 'cap', `${field}.cap`),\n    exceeded: booleanField(source, 'exceeded', `${field}.exceeded`),\n    resetAt: numberField(source, 'resetAt', `${field}.resetAt`),\n  }\n}\n\n/**\n * Parse one untrusted boundary value into a {@link CommandCodeUsageReport}.\n * Optional sections stay optional; every present field is shape-checked so a\n * malformed frame fails the boundary instead of rendering garbage.\n */\nfunction parseUsageReport(value: unknown): CommandCodeUsageReport {\n  const source = record(value, 'report')\n  const failures = source.failures\n  if (!Array.isArray(failures) || failures.some((entry) => typeof entry !== 'string')) reject('failures')\n  const report: CommandCodeUsageReport = { failures: failures as string[] }\n\n  if (source.blocked !== undefined) {\n    const blocked = source.blocked\n    // Positive check: TS's never-return control-flow analysis only recognizes\n    // function declarations, not the factory's destructured-arrow `reject`, so\n    // narrow `blocked` in the positive branch instead.\n    if (blocked === 'invalid-key' || blocked === 'service-unavailable' || blocked === 'network') {\n      report.blocked = blocked\n    } else {\n      reject('blocked')\n    }\n  }\n\n  if (source.account !== undefined) {\n    const account = record(source.account, 'account')\n    report.account = {\n      id: stringField(account, 'id', 'account.id'),\n      name: stringField(account, 'name', 'account.name'),\n      userName: stringField(account, 'userName', 'account.userName'),\n    }\n  }\n\n  if (source.usage !== undefined) {\n    const usage = record(source.usage, 'usage')\n    report.usage = {\n      totalCount: numberField(usage, 'totalCount', 'usage.totalCount'),\n      totalCost: numberField(usage, 'totalCost', 'usage.totalCost'),\n      successRate: numberField(usage, 'successRate', 'usage.successRate'),\n      completedCount: numberField(usage, 'completedCount', 'usage.completedCount'),\n      failedCount: numberField(usage, 'failedCount', 'usage.failedCount'),\n      totalTokensIn: numberField(usage, 'totalTokensIn', 'usage.totalTokensIn'),\n      totalTokensOut: numberField(usage, 'totalTokensOut', 'usage.totalTokensOut'),\n      totalCredits: numberField(usage, 'totalCredits', 'usage.totalCredits'),\n      periodBasis: stringField(usage, 'periodBasis', 'usage.periodBasis'),\n    }\n  }\n\n  if (source.credits !== undefined) {\n    const credits = record(source.credits, 'credits')\n    const parsed: CommandCodeCredits = {\n      monthlyCredits: numberField(credits, 'monthlyCredits', 'credits.monthlyCredits'),\n      purchasedCredits: numberField(credits, 'purchasedCredits', 'credits.purchasedCredits'),\n      freeCredits: numberField(credits, 'freeCredits', 'credits.freeCredits'),\n    }\n    // OPTIONAL on the wire: a Host half that predates this field serves the\n    // scalar 0 for an omitted balance, which cannot be told from a real zero.\n    // An explicit `false` therefore means \"not reported\" and the panel keeps the\n    // figure off the dashboard; an absent flag (an older Host) stays unset and\n    // is read as \"assume reported\", so a real balance is not lost cross-version.\n    // A PRESENT value must still be a boolean, so a malformed frame is rejected\n    // here rather than coerced.\n    if (credits.monthlyReported !== undefined) {\n      parsed.monthlyReported = booleanField(credits, 'monthlyReported', 'credits.monthlyReported')\n    }\n    for (const flag of ['purchasedReported', 'freeReported'] as const) {\n      if (credits[flag] !== undefined) parsed[flag] = booleanField(credits, flag, `credits.${flag}`)\n    }\n    // Absent means the endpoint reported no such window. The window parsers\n    // return undefined for an absent block, and an optional member is only set\n    // when it was really there.\n    const fiveHour = windowLimit(credits.fiveHour, 'credits.fiveHour')\n    const weekly = windowLimit(credits.weekly, 'credits.weekly')\n    if (fiveHour !== undefined) parsed.fiveHour = fiveHour\n    if (weekly !== undefined) parsed.weekly = weekly\n    report.credits = parsed\n  }\n\n  if (source.plan !== undefined) {\n    const plan = record(source.plan, 'plan')\n    const monthly = plan.monthlyCredits\n    if (monthly !== null && (typeof monthly !== 'number' || !Number.isFinite(monthly))) reject('plan.monthlyCredits')\n    report.plan = {\n      planId: stringField(plan, 'planId', 'plan.planId'),\n      name: stringField(plan, 'name', 'plan.name'),\n      status: stringField(plan, 'status', 'plan.status'),\n      monthlyCredits: monthly as number | null,\n      currentPeriodEnd: numberField(plan, 'currentPeriodEnd', 'plan.currentPeriodEnd'),\n    }\n  }\n\n  return report\n}\n\n/** Parse one untrusted boundary value into a {@link CommandCodeAccountUsage}. */\nfunction parseAccountUsage(value: unknown): CommandCodeAccountUsage {\n  const source = record(value, 'account')\n  return {\n    id: stringField(source, 'id', 'account.id'),\n    label: stringField(source, 'label', 'account.label'),\n    configured: booleanField(source, 'configured', 'account.configured'),\n    active: booleanField(source, 'active', 'account.active'),\n    mark: stringField(source, 'mark', 'account.mark'),\n    cooldownUntil: numberField(source, 'cooldownUntil', 'account.cooldownUntil'),\n    report: parseUsageReport(source.report),\n  }\n}\n\n/** Parse the wire result into a {@link CommandCodeAccountsReport}. */\nfunction parseAccountsReport(value: unknown): CommandCodeAccountsReport {\n  const source = record(value, 'result')\n  const accounts = source.accounts\n  if (Array.isArray(accounts)) {\n    return { accounts: accounts.map(parseAccountUsage) }\n  }\n  return reject('accounts')\n}\n\n/**\n * The strict result codec both halves attach to the descriptor. Hand-rolled:\n * the client bundle may not require a schema library, and `TypertSchema` is\n * deliberately minimal so one `parse` function satisfies it.\n */\nexport const usageReportSchema: TypertSchema<CommandCodeAccountsReport> = {\n  parse: parseAccountsReport,\n}\n\n/**\n * The one invocation descriptor, shared verbatim by the Host registration and\n * the Client mount. `service` names the Cordis key the Gateway resolves the\n * receiver from; `namespace`/`method` name the wire endpoint.\n */\nexport const USAGE_REPORT_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodeAccountsReport>(\n    USAGE_REPORT_ENDPOINT,\n    'report',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodeAccountsReport`,\n    usageReportSchema,\n  )\n\n/** The Host-face contribution registered on `ctx.typert`. */\nexport const USAGE_HOST_CONTRIBUTION = {\n  package: USAGE_REMOTE_PACKAGE,\n  face: 'host' as const,\n  schemas: [],\n  // 0.1.2's Typert registry requires every Host contribution to carry its\n  // reflection model. This hand-written Remote deliberately has no generated\n  // reflection exports, so use the official empty-model form rather than a\n  // cast that leaves registry inspection with `model: undefined`.\n  model: { services: [], events: [], objects: [] },\n  invocations: [USAGE_REPORT_DESCRIPTOR],\n}\n\n/** The Client-face contribution mounted on `ctx.remote`. */\nexport const USAGE_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [USAGE_REPORT_DESCRIPTOR],\n}\n\n// ---------------------------------------------------------------------------\n// Model catalog Remote (`commandcode/models`)\n// ---------------------------------------------------------------------------\n\n/** One catalog entry the settings page's model editors offer. */\nexport interface CommandCodeCatalogModel {\n  /** Catalog model id (e.g. `deepseek/deepseek-v4-pro`). */\n  id: string\n  /** Display name from the catalog. */\n  name: string\n  /**\n   * Minimum plan-tier key for this model (a `KNOWN_PLANS` value: `go`,\n   * `goat`, `pro`, `provider`, `max`), or undefined for models outside the\n   * snapshot. The settings page groups the model-editor dropdowns under\n   * tier headings from this — the browser cannot import the Host's\n   * capability snapshot, so the Host stamps it per entry.\n   */\n  tier?: string\n}\n\n/** The model-catalog Remote result: the full catalog, sorted for picking. */\nexport interface CommandCodeCatalog {\n  models: CommandCodeCatalogModel[]\n}\n\n/** Canonical `<namespace>/<method>` endpoint of the model-catalog Remote. */\nexport const MODELS_ENDPOINT = 'commandcode/models'\n\n/**\n * The shared read/validate helpers for the model-catalog endpoint — a\n * separate instance so catalog boundary errors name `commandcode/models`,\n * not the report endpoint.\n */\nconst {\n  record: catalogRecord,\n  stringField: catalogString,\n} = makeBoundaryValidator('commandcode/models result:')\n\n/** Parse one untrusted boundary value into a {@link CommandCodeCatalogModel}. */\nfunction parseCatalogModel(value: unknown): CommandCodeCatalogModel {\n  const source = catalogRecord(value, 'model')\n  const model: CommandCodeCatalogModel = {\n    id: catalogString(source, 'id', 'model.id'),\n    name: catalogString(source, 'name', 'model.name'),\n  }\n  // Tier is optional on the wire (older Hosts predate it); a present\n  // non-string is a contract violation, not a silent drop.\n  if (source.tier !== undefined) {\n    model.tier = catalogString(source, 'tier', 'model.tier')\n  }\n  return model\n}\n\n/** Parse the wire result into a {@link CommandCodeCatalog}. */\nfunction parseCatalog(value: unknown): CommandCodeCatalog {\n  const source = catalogRecord(value, 'result')\n  const models = source.models\n  if (Array.isArray(models)) {\n    return { models: models.map(parseCatalogModel) }\n  }\n  throw new TypeError('commandcode/models result: invalid models')\n}\n\n/** The strict result codec for the model-catalog Remote. */\nexport const modelsSchema: TypertSchema<CommandCodeCatalog> = {\n  parse: parseCatalog,\n}\n\n/**\n * The model-catalog invocation descriptor, sharing the same `commandcodeUsage`\n * service and `commandcode` namespace as the usage report.\n */\nexport const MODELS_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodeCatalog>(\n    MODELS_ENDPOINT,\n    'models',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodeCatalog`,\n    modelsSchema,\n  )\n\n/** The Client-face contribution for the model-catalog endpoint. */\nexport const MODELS_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [MODELS_DESCRIPTOR],\n}\n\n// ---------------------------------------------------------------------------\n// Model price table Remote (`commandcode/prices`)\n// ---------------------------------------------------------------------------\n\n/**\n * One model's per-token rates, in USD per 1,000,000 tokens — the unit the\n * official pricing page publishes in.\n */\nexport interface CommandCodeModelRates {\n  /** Uncached (billed) input tokens. */\n  inputCost: number\n  /** Completion tokens. */\n  outputCost: number\n  /** Input tokens served from the provider's cache. */\n  cacheReadCost: number\n  /**\n   * Input tokens written into the provider's cache. Present for a minority of\n   * models — the page publishes no cache-write rate for the rest, whose\n   * cache-write tokens are therefore UNPRICED. Do not substitute a multiple of\n   * the input rate for a missing value.\n   */\n  cacheWriteCost?: number\n}\n\n/** One whole-request context band; maxContext is inclusive, absent on the last band. */\nexport interface CommandCodeContextTier extends CommandCodeModelRates {\n  maxContext?: number\n}\n\n/** One model's rates plus the peak-hour override for time-of-day models. */\nexport interface CommandCodeModelPrice extends CommandCodeModelRates {\n  /**\n   * Lookup key: the catalog model id when a catalog model maps to this row,\n   * otherwise the pricing page's own slug. A session reports catalog ids, so\n   * this is the primary key the browser looks up by.\n   */\n  id: string\n  /** The pricing page's slug for this row — the secondary lookup key. */\n  slug: string\n  /**\n   * Rates charged inside the peak windows. The row's own top-level rates are\n   * the off-peak rates, so a row WITH this block is time-of-day priced and a\n   * row without it is flat-priced.\n   */\n  peak?: CommandCodeModelRates\n  contextTiers?: CommandCodeContextTier[]\n  /**\n   * Whether the model costs nothing on every plan right now (a free deal or a\n   * `:free` catalog variant). Served explicitly at zero rates so a surface can\n   * say \"free\" rather than showing nothing.\n   */\n  free?: boolean\n}\n\n/** The price-table Remote result: every known model's rates. */\nexport interface CommandCodePriceTable {\n  /**\n   * Every priced model, keyed by {@link CommandCodeModelPrice.id} (catalog id\n   * first, pricing slug as the fallback) and carrying its slug as a second\n   * lookup key. A model absent from this list has no known price and must\n   * render no cost at all rather than a guess.\n   */\n  models: CommandCodeModelPrice[]\n  /**\n   * Peak-pricing windows as `[startHour, endHour)` in UTC, end-exclusive,\n   * applying Monday–Friday only. Shipped with the table so the browser prices\n   * against the Host snapshot's schedule instead of restating it.\n   */\n  peakHours: Array<[number, number]>\n}\n\n/** Canonical `<namespace>/<method>` endpoint of the price-table Remote. */\nexport const PRICES_ENDPOINT = 'commandcode/prices'\n\n/**\n * The shared read/validate helpers for the price-table endpoint — its own\n * instance so price boundary errors name `commandcode/prices`.\n */\nconst {\n  reject: priceReject,\n  record: priceRecord,\n  stringField: priceString,\n  numberField: priceNumber,\n  booleanField: priceBoolean,\n} = makeBoundaryValidator('commandcode/prices result:')\n\n/** Parse one rate block (`rates`, or a model's `peak` override). */\nfunction parseRates(source: Record<string, unknown>, field: string): CommandCodeModelRates {\n  const rates: CommandCodeModelRates = {\n    inputCost: priceNumber(source, 'inputCost', `${field}.inputCost`),\n    outputCost: priceNumber(source, 'outputCost', `${field}.outputCost`),\n    cacheReadCost: priceNumber(source, 'cacheReadCost', `${field}.cacheReadCost`),\n  }\n  // Optional on the wire: only a minority of models publish a cache-write\n  // rate, and a present non-number is a contract violation rather than a\n  // silent zero.\n  if (source.cacheWriteCost !== undefined) {\n    rates.cacheWriteCost = priceNumber(source, 'cacheWriteCost', `${field}.cacheWriteCost`)\n  }\n  return rates\n}\n\n/** Parse one untrusted boundary value into a {@link CommandCodeModelPrice}. */\nfunction parseModelPrice(value: unknown): CommandCodeModelPrice {\n  const source = priceRecord(value, 'model')\n  const price: CommandCodeModelPrice = {\n    id: priceString(source, 'id', 'model.id'),\n    slug: priceString(source, 'slug', 'model.slug'),\n    ...parseRates(source, 'model'),\n  }\n  if (source.peak !== undefined) price.peak = parseRates(priceRecord(source.peak, 'model.peak'), 'model.peak')\n  if (source.contextTiers !== undefined) {\n    if (!Array.isArray(source.contextTiers) || source.contextTiers.length === 0) priceReject('contextTiers')\n    let previous = 0\n    price.contextTiers = (source.contextTiers as unknown[]).map((value, index, tiers) => {\n      const tier = priceRecord(value, 'contextTier')\n      const out: CommandCodeContextTier = parseRates(tier, 'contextTier')\n      if (tier.maxContext !== undefined) {\n        const max = priceNumber(tier, 'maxContext', 'contextTier.maxContext')\n        if (!Number.isSafeInteger(max) || max <= previous || index === tiers.length - 1) priceReject('contextTier.maxContext')\n        previous = max\n        out.maxContext = max\n      } else if (index !== tiers.length - 1) priceReject('contextTier.maxContext')\n      return out\n    })\n  }\n  if (source.free !== undefined) price.free = priceBoolean(source, 'free', 'model.free')\n  return price\n}\n\n/** Parse the wire result into a {@link CommandCodePriceTable}. */\nfunction parsePriceTable(value: unknown): CommandCodePriceTable {\n  const source = priceRecord(value, 'result')\n  const models = source.models\n  if (!Array.isArray(models)) priceReject('models')\n  const peakHours = source.peakHours\n  if (!Array.isArray(peakHours)) priceReject('peakHours')\n  return {\n    models: (models as unknown[]).map(parseModelPrice),\n    peakHours: (peakHours as unknown[]).map((window) => {\n      if (!Array.isArray(window) || window.length !== 2) priceReject('peakHours[]')\n      const [start, end] = window as [unknown, unknown]\n      if (typeof start !== 'number' || typeof end !== 'number') priceReject('peakHours[]')\n      return [start, end] as [number, number]\n    }),\n  }\n}\n\n/** The strict result codec for the price-table Remote. */\nexport const pricesSchema: TypertSchema<CommandCodePriceTable> = {\n  parse: parsePriceTable,\n}\n\n/**\n * The price-table invocation descriptor, sharing the same `commandcodeUsage`\n * service and `commandcode` namespace as the report and catalog endpoints.\n */\nexport const PRICES_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodePriceTable>(\n    PRICES_ENDPOINT,\n    'prices',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodePriceTable`,\n    pricesSchema,\n  )\n\n/** The Client-face contribution for the price-table endpoint. */\nexport const PRICES_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [PRICES_DESCRIPTOR],\n}","/**\n * Wire contract for the Command Code login Remote endpoints\n * (`commandcode/loginBegin`, `commandcode/loginStatus`,\n * `commandcode/loginCancel`).\n *\n * The settings page can start a browser login against the official Command\n * Code Studio (the same loopback flow `command-code login` performs) instead\n * of pasting an API key. The loopback server must live in the Host half — it\n * binds a local port and receives the key — so the page drives it through the\n * Typert Gateway exactly like the usage report.\n *\n * This module is the single source both halves share, deliberately\n * dependency-free (`import type` edges only): the strict status validator the\n * client trusts, the three descriptors both halves register, and the two\n * contribution objects. The state shape mirrors the Host-only flow machine in\n * `src/login.ts` as plain JSON.\n *\n * @module dsh-commandcode-provider/login-wire\n */\n\nimport type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\nimport {\n  makeBoundaryValidator,\n  makeRemoteDescriptor,\n  REMOTE_PACKAGE,\n} from './wire-shared.ts'\n\n/** Why a login attempt ended in `failed` (stable across versions for copy). */\nexport type CommandCodeLoginFailureReason =\n  /** The Studio page reported the authorization was denied by the user. */\n  | 'denied'\n  /** No callback arrived within the flow's timeout window. */\n  | 'timeout'\n  /** The delivered key failed `/alpha/whoami` validation (401). */\n  | 'invalid-key'\n  /** The validation request could not reach the API. */\n  | 'network'\n  /** The key could not be stored (credentials seam unavailable). */\n  | 'unavailable'\n  /** The attempt was cancelled by the user or torn down with the plugin. */\n  | 'cancelled'\n  /** Anything else. */\n  | 'error'\n\n/** One login attempt's full state face, as carried over the wire. */\nexport interface CommandCodeLoginStatus {\n  /**\n   * `idle` — no attempt; `waiting` — the loopback server is up and the\n   * Studio URL is live; `success` — the key validated and was stored;\n   * `failed` — see `reason`/`message`.\n   */\n  state: 'idle' | 'waiting' | 'success' | 'failed'\n  /** The Studio authorization URL while `waiting`. */\n  authUrl?: string\n  /** The account display name reported by the Studio, on `success`. */\n  userName?: string\n  /** The key's label from the Studio, on `success`. */\n  keyName?: string\n  /** Why the attempt failed, when `failed`. */\n  reason?: CommandCodeLoginFailureReason\n  /** Human-readable failure detail, when `failed` (secondary to `reason`). */\n  message?: string\n}\n\n/** The canonical endpoint paths of the three login Remotes. */\nexport const LOGIN_BEGIN_ENDPOINT = 'commandcode/loginBegin'\nexport const LOGIN_STATUS_ENDPOINT = 'commandcode/loginStatus'\nexport const LOGIN_CANCEL_ENDPOINT = 'commandcode/loginCancel'\n\nconst REASONS: readonly CommandCodeLoginFailureReason[] = [\n  'denied', 'timeout', 'invalid-key', 'network', 'unavailable', 'cancelled', 'error',\n]\n\n/** The shared read/validate helpers, prefixed with the login endpoint so\n * rejection messages name the offending boundary. */\nconst { reject, record, stringField } =\n  makeBoundaryValidator('commandcode/login result:')\n\n/**\n * Parse one untrusted boundary value into a {@link CommandCodeLoginStatus}.\n * Every field is shape-checked so a malformed frame fails the boundary\n * instead of leaking into the page.\n */\nexport function parseLoginStatus(value: unknown): CommandCodeLoginStatus {\n  const source = record(value, 'status')\n  const state = source.state\n  // The factory's destructured-arrow `reject` is typed never-returning but\n  // TS narrows it only in the positive branch — assign inside the guard.\n  if (state === 'idle' || state === 'waiting' || state === 'success' || state === 'failed') {\n    const status: CommandCodeLoginStatus = { state }\n    if (source.authUrl !== undefined) {\n      status.authUrl = stringField(source, 'authUrl', 'authUrl')\n    }\n    if (source.userName !== undefined) {\n      status.userName = stringField(source, 'userName', 'userName')\n    }\n    if (source.keyName !== undefined) {\n      status.keyName = stringField(source, 'keyName', 'keyName')\n    }\n    if (source.reason !== undefined) {\n      const reason = source.reason\n      if (typeof reason === 'string' && REASONS.includes(reason as CommandCodeLoginFailureReason)) {\n        status.reason = reason as CommandCodeLoginFailureReason\n      } else {\n        reject('reason')\n      }\n    }\n    if (source.message !== undefined) {\n      status.message = stringField(source, 'message', 'message')\n    }\n    return status\n  }\n  return reject('state')\n}\n\n/** The strict result codec shared by all three login endpoints. */\nexport const loginStatusSchema: TypertSchema<CommandCodeLoginStatus> = {\n  parse: parseLoginStatus,\n}\n\n/** Build one login invocation descriptor (uniform result, no parameters). */\nfunction loginDescriptor(endpoint: string, method: string): InvocationDescriptor {\n  return makeRemoteDescriptor<CommandCodeLoginStatus>(\n    endpoint,\n    method,\n    `${REMOTE_PACKAGE}#CommandCodeLoginStatus`,\n    loginStatusSchema,\n  )\n}\n\n/** The three login descriptors, shared verbatim by Host registration and Client mount. */\nexport const LOGIN_DESCRIPTORS: readonly InvocationDescriptor[] = [\n  loginDescriptor(LOGIN_BEGIN_ENDPOINT, 'loginBegin'),\n  loginDescriptor(LOGIN_STATUS_ENDPOINT, 'loginStatus'),\n  loginDescriptor(LOGIN_CANCEL_ENDPOINT, 'loginCancel'),\n]\n\n/** The Host-face contribution fragment registered on `ctx.typert`. */\nexport const LOGIN_HOST_CONTRIBUTION = {\n  package: REMOTE_PACKAGE,\n  face: 'host' as const,\n  schemas: [],\n  invocations: LOGIN_DESCRIPTORS,\n}\n\n/** The Client-face contribution fragment mounted on `ctx.remote`. */\nexport const LOGIN_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: REMOTE_PACKAGE,\n  descriptors: LOGIN_DESCRIPTORS,\n}\n","/**\n * The shared login row: one field row that starts the Host-side browser\n * login, links to the Studio authorization page while the attempt is live,\n * and reports the outcome — rendered by BOTH the settings page (`section.tsx`)\n * and the Models-page provider card (`card.tsx`) so the two surfaces share\n * one component and one hint state machine.\n *\n * The hint copy/class logic lives in the JSX-free `./login.ts`\n * (`loginHint`/`loginFailureCopy`) so node tests can drive every phase; this\n * file only renders it.\n *\n * @module dsh-commandcode-provider/client/login-row\n */\n\nimport type { Translate } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { SettingsCommandCodeKey } from './locales.ts'\nimport { loginHint } from './login.ts'\nimport type { LoginPageState } from './login.ts'\n\n/** One login row's props (same face both surfaces supply). */\nexport interface LoginRowProps {\n  state: LoginPageState\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onBegin(): void\n  onCancel(): void\n}\n\n/** The sign-in alternative to pasting a key (settings page + Models card). */\nexport function LoginRow({ state, disabled, t, onBegin, onCancel }: LoginRowProps) {\n  const busy = state.phase === 'starting' || state.phase === 'waiting'\n  const hint = loginHint(state, t)\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <span className=\"cc-label\">{t('loginTitle')}</span>\n        <span className=\"cc-badges\">\n          {busy ? (\n            <button type=\"button\" className=\"cc-reset\" onClick={onCancel}>{t('loginCancel')}</button>\n          ) : (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onBegin}>{t('loginButton')}</button>\n          )}\n        </span>\n      </div>\n      {state.authUrl !== undefined ? (\n        <p className=\"cc-hint\">\n          <a className=\"cc-loginLink\" href={state.authUrl} target=\"_blank\" rel=\"noreferrer\">{t('loginOpenLink')}</a>\n        </p>\n      ) : null}\n      <p className={hint.className} title={hint.title}>{hint.text}</p>\n    </div>\n  )\n}","/**\n * Model-select helpers for the settings page's model editors (browser half).\n *\n * The routing-rule editor and the visible-models filter both pick catalog\n * models through the same checkbox multi-select dropdown (`ModelMultiSelect`\n * in section.tsx). The dropdown's data shaping — search filtering, stale-id\n * detection, tier grouping — lives here, React-free, so node tests can drive\n * it directly.\n *\n * Dependency-free by design: the client bundle may only import platform/seed\n * modules, so the plan snapshot below is a deliberately small vendored copy\n * (tier key → heading label) rather than an import of src/capabilities.ts.\n * When upstream adds a plan tier, extend BOTH tables.\n *\n * @module dsh-commandcode-provider/model-select\n */\n\n/**\n * Minimum plan tier → dropdown section heading. Mirrors the Host-side\n * `KNOWN_PLANS` values + `PLAN_LABELS` in src/capabilities.ts (kept as a\n * vendored copy because the client bundle cannot import host modules).\n * Covers every tier key `KNOWN_PLANS` uses today; an unknown tier key falls\n * back to the raw key rather than vanishing the row.\n */\nconst TIER_HEADINGS: Readonly<Record<string, string>> = {\n  go: 'Go',\n  goat: 'GOAT',\n  pro: 'Pro',\n  provider: 'Provider',\n  max: 'Max',\n}\n\n/**\n * The dropdown section heading for a catalog model id, or undefined for\n * models outside the known plan tiers (unmapped models and stale ids render\n * unheaded). `knownPlans` is the Host-side `KNOWN_PLANS` table, threaded in\n * by the caller so this module stays dependency-free.\n */\nexport function tierHeadingFor(\n  modelId: string,\n  knownPlans: Readonly<Record<string, string>>,\n): string | undefined {\n  const tier = knownPlans[modelId]\n  if (tier === undefined) return undefined\n  return TIER_HEADINGS[tier] ?? tier\n}\n\n/** One selectable catalog model (mirrors `CatalogModelOption` in settings.ts). */\nexport interface SelectableModel {\n  /** Catalog model id (e.g. `deepseek/deepseek-v4-pro`). */\n  id: string\n  /** Display name from the catalog. */\n  name: string\n}\n\n/** One dropdown row: a live catalog model or a stale selection. */\nexport interface ModelSelectOption {\n  /** Catalog model id (stale ids keep their raw id as the value). */\n  value: string\n  /** Display name (stale ids fall back to the raw id). */\n  label: string\n  /** True when the id is selected but the catalog no longer carries it. */\n  stale: boolean\n}\n\n/** One dropdown section: a plan-tier heading plus its rows. */\nexport interface ModelSelectGroup {\n  /** Section heading, or undefined for models outside the known plan tiers. */\n  heading: string | undefined\n  /** Rows in this section, in picker order. */\n  options: ModelSelectOption[]\n}\n\n/**\n * Whether `text` matches `query` as a case-insensitive substring over the\n * model id AND display name. An empty/blank query matches everything.\n */\nexport function matchesModelQuery(\n  model: SelectableModel,\n  query: string,\n): boolean {\n  const needle = query.trim().toLowerCase()\n  if (needle === '') return true\n  return model.id.toLowerCase().includes(needle)\n    || model.name.toLowerCase().includes(needle)\n}\n\n/**\n * Build the dropdown options: the catalog (already in picker order) plus\n * any selected ids the catalog no longer carries, flagged stale so the UI\n * can mark them — a saved selection never silently loses an entry, and the\n * user can see which ones went stale upstream.\n *\n * When `query` is non-blank, catalog rows are filtered by\n * {@link matchesModelQuery}; stale rows are kept only while they match too,\n * so a search for a live model does not surface unrelated stale ids.\n */\nexport function buildModelSelectOptions(\n  catalog: readonly SelectableModel[],\n  selected: readonly string[],\n  query = '',\n): ModelSelectOption[] {\n  const catalogIds = new Set(catalog.map((model) => model.id))\n  const options = catalog\n    .filter((model) => matchesModelQuery(model, query))\n    .map((model) => ({ value: model.id, label: model.name, stale: false }))\n  // Dedupe defensively (order-preserving): hand-edited settings can repeat\n  // or blank an id, and duplicate Menu ids would confuse selection state.\n  const seen = new Set(catalogIds)\n  for (const id of selected) {\n    if (id === '' || seen.has(id)) continue\n    seen.add(id)\n    if (catalogIds.has(id)) continue\n    if (!matchesModelQuery({ id, name: id }, query)) continue\n    options.push({ value: id, label: id, stale: true })\n  }\n  return options\n}\n\n/**\n * Group dropdown options under plan-tier headings (`tierOf` maps a model id\n * to its tier heading, or undefined for unmapped models — see\n * {@link tierHeadingFor}). Live rows keep their relative order; stale ids\n * and unmapped live rows share one trailing unheaded group. Groups merge\n * repeats, so a catalog interleaving two tiers still renders one section\n * per tier.\n */\nexport function groupModelSelectOptions(\n  options: readonly ModelSelectOption[],\n  tierOf: (modelId: string) => string | undefined,\n): ModelSelectGroup[] {\n  const groups: ModelSelectGroup[] = []\n  const byHeading = new Map<string | undefined, ModelSelectGroup>()\n  for (const option of options) {\n    // Stale ids always render unheaded (their tier is unknowable); unmapped\n    // live rows join the same trailing group so `heading: undefined`\n    // appears at most once.\n    const heading = option.stale ? undefined : tierOf(option.value)\n    let group = byHeading.get(heading)\n    if (group === undefined) {\n      group = { heading, options: [] }\n      byHeading.set(heading, group)\n      groups.push(group)\n    }\n    group.options.push(option)\n  }\n  return groups\n}\n\n/**\n * Toggle one model id in a selection: remove it when present, append it\n * when absent (append keeps catalog order irrelevant — the picker re-sorts\n * by plan tier on render).\n */\nexport function toggleModelSelection(\n  selected: readonly string[],\n  modelId: string,\n): string[] {\n  return selected.includes(modelId)\n    ? selected.filter((value) => value !== modelId)\n    : [...selected, modelId]\n}\n\n/** The catalog facts the visible-models card reads (mirrors `SettingsPageState`). */\nexport interface CatalogReadiness {\n  /** Catalog model ids the Host reported (`[]` before the first fetch lands). */\n  catalogIds: readonly string[]\n  /** Whether the catalog fetch failed (or the Remote is unavailable). */\n  catalogFailed: boolean\n}\n\n/**\n * Whether the catalog is trustworthy enough to call an unlisted selection\n * \"retired\". FALSE while the first fetch is still in flight and after a\n * failure, because the catalog is empty then and every selected id would look\n * stale — which turns the one-click stale cleanup into a button that silently\n * empties the allowlist. A successfully loaded but empty catalog is treated as\n * untrustworthy too: an empty list is far more likely a Host problem than every\n * model being retired at once, and the explicit \"show all\" entry covers the\n * user who really wants to clear the list.\n */\nexport function catalogIsReady(readiness: CatalogReadiness): boolean {\n  return readiness.catalogIds.length > 0 && !readiness.catalogFailed\n}\n\n/**\n * Selected ids the loaded catalog no longer carries, in selection order.\n * Callers gate user-visible \"stale\" affordances on {@link catalogIsReady} —\n * the list itself is informational.\n */\nexport function staleModelIds(\n  selected: readonly string[],\n  readiness: CatalogReadiness,\n): string[] {\n  const catalogIds = new Set(readiness.catalogIds)\n  return selected.filter((id) => !catalogIds.has(id))\n}\n","","/**\n * The plugin's own version, read from package.json at build time.\n *\n * The client bundle inlines the JSON import (rolldown resolves it during the\n * tsdown build; node tests read it through tsx), so the rendered value always\n * matches the published package version with no second constant to keep in\n * sync. Rendered as a muted footer line on the settings page so a user can\n * report the exact build they run.\n *\n * @module dsh-commandcode-provider/client/version\n */\n\nimport pkg from '../../package.json'\n\n/** The published package version (e.g. `'0.6.0'`). */\nexport const PLUGIN_VERSION: string = pkg.version\n\n/**\n * This package's GitHub releases page, derived from the repository field so\n * the update hint's link target can never drift from the published home.\n * Tolerates both repository shapes (`{ url }` and the plain string form).\n */\nexport const PLUGIN_RELEASES_URL: string = (() => {\n  const repo: unknown = (pkg as { repository?: unknown }).repository\n  const url = typeof repo === 'string' ? repo : (repo as { url?: unknown } | undefined)?.url\n  return `${typeof url === 'string' ? url.replace(/^git\\+/, '').replace(/\\.git$/, '') : 'https://github.com/Mars-Sea/dsh-commandcode-provider'}/releases`\n})()\n","/**\n * Plugin update hint (browser half).\n *\n * A deliberately small feature: when the \"Command Code\" settings page opens,\n * ask the npm registry for the package's published `latest` version and —\n * only when it is newer than the running build — let the page's footer show a\n * muted \"newer version available\" link to the GitHub releases. Everything\n * here is React-free and side-effect-seamed so node tests can drive it.\n *\n * Behaviour contract:\n *\n * - The registry is queried at most once per {@link UPDATE_CHECK_INTERVAL_MS}\n *   per browser profile; the learned version is cached in `localStorage`\n *   alongside the attempt time, so re-opening the settings page is free.\n * - A failed check records the attempt time too (an offline browser must not\n *   hammer the registry on every page open) but keeps any previously learned\n *   version, so the hint survives transient outages until it expires.\n * - Every failure mode (blocked network, non-OK status, malformed payload,\n *   unavailable storage) degrades to \"no hint\"; nothing ever throws out of\n *   {@link checkForUpdate}.\n *\n * The registry serves `access-control-allow-origin: *`, so the plain browser\n * fetch works from the GUI origin without any Host-side proxying.\n *\n * @module dsh-commandcode-provider/client/update\n */\n\n/** How often the page may hit the registry: once a day. */\nexport const UPDATE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000\n\n/** Abort a hung registry request rather than keep the footer waiting. */\nexport const FETCH_TIMEOUT_MS = 5000\n\n/**\n * The npm registry document for this package's `latest` dist-tag. The scoped\n * name is path-escaped (`%2F`) so no client normalizes the slash away.\n */\nexport const NPM_LATEST_URL =\n  'https://registry.npmjs.org/@mars-sea%2Fdsh-commandcode-provider/latest'\n\n/**\n * Compare two version strings (`major.minor.patch[-pre]`). Returns a negative\n * number when `a` sorts before `b`, positive when after, zero when equal.\n *\n * Tolerant by design: a leading `v` is stripped, unparsable numeric parts\n * count as `0`, and semver prerelease rules apply (release > prerelease;\n * numeric identifiers compare numerically, everything else lexically, a\n * shorter identifier list sorts first). Enough for release tags; not a full\n * semver validator.\n */\nexport function compareVersions(a: string, b: string): number {\n  const left = splitVersion(a)\n  const right = splitVersion(b)\n  const depth = Math.max(left.core.length, right.core.length)\n  for (let index = 0; index < depth; index += 1) {\n    const delta = (left.core[index] ?? 0) - (right.core[index] ?? 0)\n    if (delta !== 0) return Math.sign(delta)\n  }\n  // A release outranks any prerelease of the same core version.\n  if (left.pre.length === 0 && right.pre.length === 0) return 0\n  if (left.pre.length === 0) return 1\n  if (right.pre.length === 0) return -1\n  const width = Math.max(left.pre.length, right.pre.length)\n  for (let index = 0; index < width; index += 1) {\n    const l = left.pre[index]\n    const r = right.pre[index]\n    if (l === undefined) return -1\n    if (r === undefined) return 1\n    const lNumeric = /^\\d+$/.test(l)\n    const rNumeric = /^\\d+$/.test(r)\n    let delta: number\n    if (lNumeric && rNumeric) delta = Number(l) - Number(r)\n    else if (lNumeric) delta = -1 // numeric identifiers sort below alphanumeric\n    else if (rNumeric) delta = 1\n    else delta = l < r ? -1 : l > r ? 1 : 0\n    if (delta !== 0) return Math.sign(delta)\n  }\n  return 0\n}\n\n/** True when `candidate` is strictly newer than `current`. */\nexport function isNewerVersion(candidate: string, current: string): boolean {\n  return compareVersions(candidate, current) > 0\n}\n\n/** Split a tolerant version string into numeric core + prerelease ids. */\nfunction splitVersion(value: string): { core: number[]; pre: string[] } {\n  // Split on the FIRST dash only: `1.0.0-alpha-1` has prerelease `alpha-1`,\n  // not `alpha` (a split on every dash would drop the `-1`).\n  const cleaned = value.trim().replace(/^v/i, '')\n  const dash = cleaned.indexOf('-')\n  const coreText = dash < 0 ? cleaned : cleaned.slice(0, dash)\n  const preText = dash < 0 ? undefined : cleaned.slice(dash + 1)\n  const core = coreText === ''\n    ? [0]\n    : coreText.split('.').map((part) => {\n        const parsed = Number.parseInt(part, 10)\n        return Number.isFinite(parsed) ? parsed : 0\n      })\n  const pre = preText === undefined ? [] : preText.split('.')\n  return { core, pre }\n}\n\n/**\n * Extract the published version from the registry's `/latest` manifest\n * (`{ name, version, … }`). Throws on anything unexpected so callers treat a\n * shape change as a failed attempt, never as bogus data.\n */\nexport function parseLatestVersion(payload: unknown): string {\n  if (typeof payload !== 'object' || payload === null) {\n    throw new Error('npm latest payload is not an object')\n  }\n  const version = (payload as { version?: unknown }).version\n  if (typeof version !== 'string' || !/^\\d+\\.\\d+\\./.test(version)) {\n    throw new Error('npm latest payload has no usable version')\n  }\n  return version\n}\n\n/** Fetch and parse the published `latest` version. Rejects on any failure. */\nexport async function fetchLatestVersion(\n  fetchImpl: typeof fetch = fetch,\n): Promise<string> {\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS)\n  try {\n    const response = await fetchImpl(NPM_LATEST_URL, { signal: controller.signal })\n    if (!response.ok) {\n      throw new Error(`registry responded ${response.status}`)\n    }\n    return parseLatestVersion(await response.json())\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** What the cache remembers about the last check. */\nexport interface UpdateCheckRecord {\n  /** When the last attempt completed (success or failure), epoch ms. */\n  at: number\n  /** The last successfully learned upstream version, if any. */\n  version?: string | undefined\n}\n\n/** Storage seam so tests can stand in for `localStorage`. */\nexport interface UpdateCheckStore {\n  read(): UpdateCheckRecord | undefined\n  write(record: UpdateCheckRecord): void\n}\n\n/** The `localStorage` key holding {@link UpdateCheckRecord}. */\nexport const UPDATE_CHECK_CACHE_KEY = '@mars-sea/dsh-commandcode-provider/update-check'\n\n/**\n * A {@link UpdateCheckStore} backed by `localStorage`. Tolerates a missing or\n * throwing storage (SSR-ish contexts, private modes): reads yield `undefined`,\n * writes are dropped.\n */\nexport function localStorageUpdateStore(\n  storage: Storage | undefined = typeof localStorage === 'undefined' ? undefined : localStorage,\n): UpdateCheckStore {\n  return {\n    read(): UpdateCheckRecord | undefined {\n      if (storage === undefined) return undefined\n      try {\n        const raw = storage.getItem(UPDATE_CHECK_CACHE_KEY)\n        if (raw === null) return undefined\n        const parsed: unknown = JSON.parse(raw)\n        if (typeof parsed !== 'object' || parsed === null) return undefined\n        const at = (parsed as { at?: unknown }).at\n        if (typeof at !== 'number' || !Number.isFinite(at)) return undefined\n        const version = (parsed as { version?: unknown }).version\n        return {\n          at,\n          version: typeof version === 'string' && version !== '' ? version : undefined,\n        }\n      } catch {\n        return undefined\n      }\n    },\n    write(record: UpdateCheckRecord): void {\n      if (storage === undefined) return\n      try {\n        storage.setItem(UPDATE_CHECK_CACHE_KEY, JSON.stringify(record))\n      } catch {\n        // Quota/private-mode failures must never break the page.\n      }\n    },\n  }\n}\n\n/**\n * Run one throttled update check. Resolves with the newest published version\n * when it is newer than `currentVersion`, otherwise `undefined`.\n *\n * Within the throttle window (or on failure) the cached version answers, so\n * the hint keeps working offline; past the window the registry is consulted\n * again and the attempt time is refreshed either way.\n */\nexport async function checkForUpdate(options: {\n  currentVersion: string\n  now: number\n  store: UpdateCheckStore\n  fetchImpl?: typeof fetch\n}): Promise<string | undefined> {\n  const { currentVersion, now, store } = options\n  const hintOf = (version: string | undefined): string | undefined =>\n    version !== undefined && isNewerVersion(version, currentVersion) ? version : undefined\n\n  const cache = store.read()\n  if (cache !== undefined && now - cache.at < UPDATE_CHECK_INTERVAL_MS) {\n    return hintOf(cache.version)\n  }\n\n  let learned: string | undefined\n  try {\n    learned = await fetchLatestVersion(options.fetchImpl)\n  } catch {\n    // Degrade silently: record the attempt below and fall back to the cache.\n  }\n  const version = learned ?? cache?.version\n  store.write({ at: now, version })\n  return hintOf(version)\n}\n","/**\n * React component for the \"Command Code\" settings page (browser half).\n *\n * Renders as a `settings.section` entry — a page at the same settings-nav\n * level as General / Models / Plugins. The shell supplies the nav row and\n * renders this body inside the content column. All copy comes from the\n * `settings.commandcode` locale namespace; all state comes from the\n * `CommandCodeSettingsController` injected by the slot registration.\n *\n * The layout mirrors the harness's settings pages: a max-width content\n * column, labelled fields with hints, a reset affordance, and a\n * save/discard footer. Rarely touched connection facts (API base, working\n * directory, timeouts, plan filter) fold into a collapsed Advanced card\n * (`AdvancedSection`) so the page leads with the key and the usage facts.\n * Styles are injected once by the client entry\n * (see src/client/index.ts) and class-prefixed `cc-` to stay local.\n */\n\nimport { useEffect, useMemo, useState } from 'react'\nimport { Button, Menu } from '@deepseek-ai/dsh-client-ui-primitives'\nimport type { MenuEntry } from '@deepseek-ai/dsh-client-ui-primitives'\nimport type { Translate } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { CommandCodeCredits } from '../adapter.ts'\nimport type { CommandCodeAccountUsage, CommandCodeUsageReport } from '../usage-wire.ts'\nimport type { SettingsCommandCodeKey } from './locales.ts'\nimport type { AccountItemState, CatalogModelOption, RuleItemState, SettingsPageState, StagedField } from './settings.ts'\nimport type { LoginPageState } from './login.ts'\nimport { LoginRow } from './login-row.tsx'\nimport { buildModelSelectOptions, catalogIsReady, groupModelSelectOptions, staleModelIds, tierHeadingFor, toggleModelSelection } from './model-select.ts'\nimport type { UsagePageState } from './usage.ts'\nimport { usageCardState, formatMoney, formatMoneyExact, formatResetAt, formatSuccessRate, formatTokensCompact, windowRatio } from './usage.ts'\nimport { PLUGIN_RELEASES_URL, PLUGIN_VERSION } from './version.ts'\nimport { checkForUpdate, localStorageUpdateStore } from './update.ts'\n\n/** Props composed by the slot registration: locale seat + injected face. */\nexport interface CommandCodeSettingsProps {\n  t: Translate<SettingsCommandCodeKey>\n  useCommandCodeSettings<T>(selector: (state: SettingsPageState) => T): T\n  useCommandCodeUsage<T>(selector: (state: UsagePageState) => T): T\n  useCommandCodeLogin<T>(selector: (state: LoginPageState) => T): T\n  edit(field: string, text: string): void\n  resetField(field: string): void\n  save(): void\n  discard(): void\n  refreshUsage(): void\n  beginLogin(): void\n  cancelLogin(): void\n  addAccount(): void\n  removeAccount(id: string): void\n  editAccountLabel(id: string, text: string): void\n  editAccountKey(id: string, text: string): void\n  toggleKeyClear(id: string): void\n  addRule(): void\n  removeRule(id: string): void\n  editRuleModels(id: string, ids: string[]): void\n  editRuleAccount(id: string, text: string): void\n  editVisibleModels(ids: string[]): void\n  clearVisibleModels(): void\n}\n\n/** The section fields folded into the collapsible Advanced card. */\ntype AdvancedField = 'apiBase' | 'workingDir' | 'requestTimeoutMs' | 'streamIdleTimeoutMs' | 'filterModelsByPlan' | 'webSearch'\nconst ADVANCED_FIELDS: readonly AdvancedField[] = [\n  'apiBase',\n  'workingDir',\n  'requestTimeoutMs',\n  'streamIdleTimeoutMs',\n  'filterModelsByPlan',\n  'webSearch',\n]\n\n/** One labelled field row in the page body. */\nfunction Field({\n  id,\n  label,\n  hint,\n  state,\n  disabled,\n  numeric,\n  placeholder,\n  onEdit,\n  onReset,\n  t,\n}: {\n  id: string\n  label: string\n  hint: string\n  state: StagedField\n  disabled: boolean\n  numeric?: boolean\n  placeholder?: string | undefined\n  onEdit(text: string): void\n  onReset(): void\n  t: Translate<SettingsCommandCodeKey>\n}) {\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor={id}>{label}</label>\n        <span className=\"cc-badges\">\n          {state.overridden ? <span className=\"cc-badge\">{t('overridden')}</span> : null}\n          <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onReset} aria-label={`${label} — ${t('reset')}`}>{t('reset')}</button>\n        </span>\n      </div>\n      <input\n        id={id}\n        className={state.invalid ? 'cc-input cc-inputInvalid' : 'cc-input'}\n        type=\"text\"\n        inputMode={numeric ? 'numeric' : undefined}\n        value={state.text}\n        placeholder={placeholder}\n        disabled={disabled}\n        onChange={(event) => onEdit(event.target.value)}\n      />\n      <p className={state.invalid ? 'cc-invalid' : 'cc-hint'}>\n        {state.invalid ? invalidCopy(state.invalidReason, t) : hint}\n      </p>\n    </div>\n  )\n}\n\n/** The per-field error copy for a staged draft's failure reason. */\nfunction invalidCopy(reason: StagedField['invalidReason'], t: Translate<SettingsCommandCodeKey>): string {\n  if (reason === 'tooSmall') return t('numberTooSmall')\n  if (reason === 'tooLarge') return t('numberTooLarge')\n  return t('invalidNumber')\n}\n\n/**\n * The collapsed \"Advanced\" card: API base, working dir, both timeouts, and\n * the plan filter live here so the page leads with the facts a user actually\n * touches. Starts collapsed on every visit; expands on demand. While\n * collapsed, a badge names the customized count so a nonzero override stays\n * visible (a number field's error blocks save and must be reachable).\n */\nfunction AdvancedSection({\n  state,\n  disabled,\n  t,\n  onEdit,\n  onReset,\n}: {\n  state: SettingsPageState\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onEdit(field: string, text: string): void\n  onReset(field: string): void\n}) {\n  const [expanded, setExpanded] = useState(false)\n  const overridden = ADVANCED_FIELDS.filter((field) => state[field].overridden).length\n  const invalid = ADVANCED_FIELDS.some((field) => state[field].invalid)\n  return (\n    <div className=\"cc-card\">\n      <button\n        type=\"button\"\n        className=\"cc-advancedHead\"\n        aria-expanded={expanded}\n        aria-controls=\"cc-advanced-body\"\n        onClick={() => setExpanded((value) => !value)}\n      >\n        <span className=\"cc-advancedTitle\">{t('advancedSettings')}</span>\n        {overridden > 0 ? (\n          <span className=\"cc-badge\">\n            {overridden === 1 ? t('advancedOverriddenOne') : t('advancedOverriddenMany', { count: overridden })}\n          </span>\n        ) : null}\n        {/* An invalid number blocks save while collapsed with no visible cue\n            — surface it on the header so the blocker is reachable. */}\n        {!expanded && invalid ? (\n          <span className=\"cc-badge cc-badgeWarn\">{t('advancedInvalid')}</span>\n        ) : null}\n        <span className=\"cc-advancedSpacer\" />\n        <span className={expanded ? 'cc-chevron cc-chevronUp' : 'cc-chevron'} aria-hidden=\"true\" />\n      </button>\n      {expanded ? (\n        <div id=\"cc-advanced-body\" className=\"cc-advancedBody\">\n          <p className=\"cc-hint\">{t('advancedSettingsHint')}</p>\n          <Field\n            id=\"cc-api-base\"\n            label={t('apiBase')}\n            hint={t('apiBaseHint')}\n            state={state.apiBase}\n            disabled={disabled}\n            onEdit={(text) => onEdit('apiBase', text)}\n            onReset={() => onReset('apiBase')}\n            t={t}\n          />\n          <Field\n            id=\"cc-working-dir\"\n            label={t('workingDir')}\n            hint={t('workingDirHint')}\n            state={state.workingDir}\n            disabled={disabled}\n            placeholder={state.defaultWorkingDir}\n            onEdit={(text) => onEdit('workingDir', text)}\n            onReset={() => onReset('workingDir')}\n            t={t}\n          />\n          <Field\n            id=\"cc-request-timeout\"\n            label={t('requestTimeoutMs')}\n            hint={t('requestTimeoutMsHint')}\n            state={state.requestTimeoutMs}\n            disabled={disabled}\n            numeric\n            onEdit={(text) => onEdit('requestTimeoutMs', text)}\n            onReset={() => onReset('requestTimeoutMs')}\n            t={t}\n          />\n          <Field\n            id=\"cc-stream-idle-timeout\"\n            label={t('streamIdleTimeoutMs')}\n            hint={t('streamIdleTimeoutMsHint')}\n            state={state.streamIdleTimeoutMs}\n            disabled={disabled}\n            numeric\n            onEdit={(text) => onEdit('streamIdleTimeoutMs', text)}\n            onReset={() => onReset('streamIdleTimeoutMs')}\n            t={t}\n          />\n          <ToggleField\n            id=\"cc-filter-models-by-plan\"\n            label={t('filterModelsByPlan')}\n            hint={t('filterModelsByPlanHint')}\n            state={state.filterModelsByPlan}\n            disabled={disabled}\n            defaultChecked\n            onEdit={(text) => onEdit('filterModelsByPlan', text)}\n            onReset={() => onReset('filterModelsByPlan')}\n            t={t}\n          />\n          <ToggleField\n            id=\"cc-web-search\"\n            label={t('webSearch')}\n            hint={t('webSearchHint')}\n            state={state.webSearch}\n            disabled={disabled}\n            defaultChecked\n            onEdit={(text) => onEdit('webSearch', text)}\n            onReset={() => onReset('webSearch')}\n            t={t}\n          />\n        </div>\n      ) : null}\n      {expanded && invalid ? (\n        <p className=\"cc-invalid\" role=\"status\">{t('advancedInvalid')}</p>\n      ) : null}\n    </div>\n  )\n}\n\n/**\n * One boolean field row rendered as a toggle. The staged text is `'true'` /\n * `'false'` / `''` (unset → `defaultChecked`); toggling stages the string the\n * boolean field spec parses back into a real boolean on save.\n */\nfunction ToggleField({\n  id,\n  label,\n  hint,\n  state,\n  disabled,\n  defaultChecked,\n  onEdit,\n  onReset,\n  t,\n}: {\n  id: string\n  label: string\n  hint: string\n  state: StagedField\n  disabled: boolean\n  defaultChecked: boolean\n  onEdit(text: string): void\n  onReset(): void\n  t: Translate<SettingsCommandCodeKey>\n}) {\n  const checked = state.text === '' ? defaultChecked : state.text === 'true'\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        {/* Plain text (not a second label): the toggle input below already\n            has its accessible name from the wrapping label. */}\n        <span className=\"cc-label\" aria-hidden=\"true\">{label}</span>\n        <span className=\"cc-badges\">\n          {state.overridden ? <span className=\"cc-badge\">{t('overridden')}</span> : null}\n          <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onReset} aria-label={`${label} — ${t('reset')}`}>{t('reset')}</button>\n        </span>\n      </div>\n      <label className=\"cc-toggleRow\">\n        <input\n          id={id}\n          className=\"cc-toggle\"\n          type=\"checkbox\"\n          role=\"switch\"\n          checked={checked}\n          disabled={disabled}\n          onChange={(event) => onEdit(event.target.checked ? 'true' : 'false')}\n        />\n        <span className=\"cc-hint\">{hint}</span>\n      </label>\n    </div>\n  )\n}\n\n/**\n * The API-key control: write-only, reports configured state, never echoes the\n * key. The input is masked by default with a Show/Hide toggle so a pasted key\n * can be spot-checked without leaving the field, and a stored key can be\n * staged for removal (the next save unsets it) when it is bad or unwanted.\n */\nfunction SecretKeyField({\n  label,\n  hint,\n  state,\n  disabled,\n  configured,\n  configuredLabel,\n  unconfiguredLabel,\n  clearStaged,\n  showLabel,\n  hideLabel,\n  clearLabel,\n  clearStagedLabel,\n  undoClearLabel,\n  onEdit,\n  onToggleClear,\n}: {\n  label: string\n  hint: string\n  state: StagedField\n  disabled: boolean\n  configured: boolean\n  configuredLabel: string\n  unconfiguredLabel: string\n  clearStaged: boolean\n  showLabel: string\n  hideLabel: string\n  clearLabel: string\n  clearStagedLabel: string\n  undoClearLabel: string\n  onEdit(text: string): void\n  onToggleClear(): void\n}) {\n  const [visible, setVisible] = useState(false)\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor=\"cc-api-key\">{label}</label>\n        <span className=\"cc-badges\">\n          <span className={configured ? 'cc-badge' : 'cc-badgeMuted'}>\n            {configured ? configuredLabel : unconfiguredLabel}\n          </span>\n          {clearStaged ? <span className=\"cc-badge cc-badgeWarn\">{clearStagedLabel}</span> : null}\n          {configured ? (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onToggleClear}>\n              {clearStaged ? undoClearLabel : clearLabel}\n            </button>\n          ) : null}\n          <button\n            type=\"button\"\n            className=\"cc-reset\"\n            disabled={disabled}\n            onClick={() => setVisible((value) => !value)}\n          >\n            {visible ? hideLabel : showLabel}\n          </button>\n        </span>\n      </div>\n      <input\n        id=\"cc-api-key\"\n        className=\"cc-input\"\n        type={visible ? 'text' : 'password'}\n        autoComplete=\"off\"\n        spellCheck={false}\n        value={state.text}\n        disabled={disabled}\n        onChange={(event) => onEdit(event.target.value)}\n      />\n      <p className=\"cc-hint\">{hint}</p>\n    </div>\n  )\n}\n\n/** One stat tile in the account card's summary grid. */\nfunction UsageStat({ label, value, sub }: { label: string; value: string; sub?: string | undefined }) {\n  return (\n    <div className=\"cc-usageStat\">\n      <span className=\"cc-usageStatLabel\">{label}</span>\n      <span className=\"cc-usageStatValue\">{value}</span>\n      {sub !== undefined && sub !== '' ? <span className=\"cc-usageStatSub\">{sub}</span> : null}\n    </div>\n  )\n}\n\n/** One window-limit row: label, used/cap, a fill bar, and the reset time. */\nfunction UsageWindow({\n  label,\n  limit,\n  t,\n}: {\n  label: string\n  limit: NonNullable<CommandCodeCredits['fiveHour']>\n  t: Translate<SettingsCommandCodeKey>\n}) {\n  const { used, cap, exceeded, resetAt } = limit\n  const ratio = windowRatio(used, cap)\n  const reset = formatResetAt(resetAt)\n  return (\n    <div className=\"cc-usageWindow\">\n      <div className=\"cc-usageWindowHead\">\n        <span className=\"cc-usageWindowLabel\">{label}</span>\n        {exceeded ? <span className=\"cc-usageExceeded\">{t('usageExceeded')}</span> : null}\n        <span className=\"cc-usageWindowValue\">{cap > 0 ? `${formatMoney(used)} / ${formatMoney(cap)}` : formatMoney(used)}</span>\n      </div>\n      <div className=\"cc-usageBar\" role=\"progressbar\" aria-label={label} aria-valuemin={0} aria-valuemax={100} aria-valuenow={Math.round(ratio * 100)}>\n        <div className={exceeded ? 'cc-usageBarFill cc-usageBarFillWarn' : 'cc-usageBarFill'} style={{ width: `${ratio * 100}%` }} />\n      </div>\n      {reset !== '' ? <p className=\"cc-usageWindowReset\">{t('usageReset')} {reset}</p> : null}\n    </div>\n  )\n}\n\n/** One account's rotation state as a short badge next to its label. */\nfunction AccountMark({ entry, t }: { entry: CommandCodeAccountUsage; t: Translate<SettingsCommandCodeKey> }) {\n  if (entry.active) return <span className=\"cc-usagePlan\">{t('usageActive')}</span>\n  if (entry.mark === 'invalid-credential') return <span className=\"cc-usagePlanStatus\">{t('usageInvalidKey')}</span>\n  if (entry.cooldownUntil > 0) {\n    return <span className=\"cc-usagePlanStatus\">{t('usageCooldown')} {formatResetAt(entry.cooldownUntil)}</span>\n  }\n  if (entry.mark === 'rate-limit') return <span className=\"cc-usagePlanStatus\">{t('usageCooldown')}</span>\n  return null\n}\n\n/**\n * One pool account's facts (identity, totals, credits, window limits)\n * rendered inside the account-usage card.\n */\nfunction AccountReport({ entry, fetchedAt, t, onRemove }: {\n  entry: CommandCodeAccountUsage\n  /**\n   * When the shared usage snapshot was fetched — shares the account's bottom\n   * meta row with the billing period end so the two timestamps occupy one\n   * line (period/partial facts left, fetch freshness right).\n   */\n  fetchedAt?: number | undefined\n  t: Translate<SettingsCommandCodeKey>\n  /** Present only for removable (non-default) accounts on a writable page. */\n  onRemove?: (() => void) | undefined\n}) {\n  const report = entry.report\n  const account = report.account\n  const accountName = account === undefined ? '' : account.userName || account.name\n  const credits = report.credits\n  const plan = report.plan\n  const planName = plan?.name ?? ''\n  const planStatus = plan !== undefined && plan.status !== '' && plan.status !== 'active' ? plan.status : ''\n  const showPeriod = plan !== undefined && plan.currentPeriodEnd > 0\n  const showPartial = report.failures.length > 0 && report.blocked === undefined\n\n  return (\n    <div className=\"cc-accountReport\">\n      <div className=\"cc-usageHead\">\n        <h4 className=\"cc-usageTitle\">{entry.label}</h4>\n        <AccountMark entry={entry} t={t} />\n        {accountName !== '' ? <span className=\"cc-usageAccount\">{accountName}</span> : null}\n        {planName !== '' ? <span className=\"cc-usagePlan\">{planName}</span> : null}\n        {planStatus !== '' ? <span className=\"cc-usagePlanStatus\">{planStatus}</span> : null}\n        <span className=\"cc-usageMetaSpacer\" />\n        {onRemove !== undefined ? (\n          <button type=\"button\" className=\"cc-usageRefresh\" onClick={onRemove}>{t('accountRemove')}</button>\n        ) : null}\n      </div>\n\n      {!entry.configured ? <p className=\"cc-usageHint\">{t('usageUnconfigured')}</p> : null}\n\n      {report.blocked !== undefined ? (\n        <div className=\"cc-usageBlocked\" role=\"alert\">\n          <p className=\"cc-usageBlockedTitle\">{blockedTitle(report.blocked, t)}</p>\n          <p className=\"cc-usageBlockedHint\">{blockedHint(report.blocked, t)}</p>\n        </div>\n      ) : null}\n\n      {report.usage !== undefined ? (\n        <div className=\"cc-usageStats\">\n          <UsageStat\n            label={t('usageRequests')}\n            value={String(report.usage.completedCount)}\n            sub={`${t('usageFailed')} ${report.usage.failedCount}`}\n          />\n          <UsageStat label={t('usageSuccessRate')} value={`${formatSuccessRate(report.usage.successRate)}%`} />\n          <UsageStat\n            label={t('usageCost')}\n            value={formatMoneyExact(report.usage.totalCost)}\n            sub={`${formatMoney(report.usage.totalCredits)} credits`}\n          />\n          <UsageStat\n            label={t('usageTokens')}\n            value={formatTokensCompact(report.usage.totalTokensIn + report.usage.totalTokensOut)}\n            sub={`${formatTokensCompact(report.usage.totalTokensIn)} ${t('usageTokensIn')} / ${formatTokensCompact(report.usage.totalTokensOut)} ${t('usageTokensOut')}`}\n          />\n        </div>\n      ) : null}\n\n      {credits !== undefined ? (\n        <div className=\"cc-usageStats\">\n          <UsageStat label={t('usageMonthly')} value={credits.monthlyReported === false ? '—' : formatMoney(credits.monthlyCredits)} />\n          <UsageStat label={t('usagePurchased')} value={credits.purchasedReported === false ? '—' : formatMoney(credits.purchasedCredits)} />\n          <UsageStat label={t('usageFree')} value={credits.freeReported === false ? '—' : formatMoney(credits.freeCredits)} />\n        </div>\n      ) : null}\n\n      {credits?.fiveHour !== undefined || credits?.weekly !== undefined ? (\n        <div className=\"cc-usageWindows\">\n          {credits.fiveHour !== undefined ? (\n            <UsageWindow label={t('usageFiveHour')} limit={credits.fiveHour} t={t} />\n          ) : null}\n          {credits.weekly !== undefined ? (\n            <UsageWindow label={t('usageWeekly')} limit={credits.weekly} t={t} />\n          ) : null}\n        </div>\n      ) : null}\n\n      {showPeriod || showPartial || fetchedAt !== undefined ? (\n        <div className=\"cc-usageMeta\">\n          {showPeriod ? (\n            <p className=\"cc-usageUpdated\">{t('usagePeriodEnd')} {new Date(plan.currentPeriodEnd).toLocaleDateString()}</p>\n          ) : null}\n          {showPartial ? (\n            <p className=\"cc-usagePartial\" title={report.failures.join('; ')}>{t('usagePartial')}</p>\n          ) : null}\n          <span className=\"cc-usageMetaSpacer\" />\n          {fetchedAt !== undefined ? (\n            <p className=\"cc-usageUpdated\">{t('usageUpdated')} {new Date(fetchedAt).toLocaleTimeString()}</p>\n          ) : null}\n        </div>\n      ) : null}\n    </div>\n  )\n}\n\n/** The headline copy for a report whose every endpoint failed the same way. */\nfunction blockedTitle(reason: CommandCodeUsageReport['blocked'], t: Translate<SettingsCommandCodeKey>): string {\n  if (reason === 'invalid-key') return t('usageKeyInvalid')\n  if (reason === 'service-unavailable') return t('usageServiceUnavailable')\n  return t('usageNetworkError')\n}\n\n/** The actionable hint under a blocked report's headline. */\nfunction blockedHint(reason: CommandCodeUsageReport['blocked'], t: Translate<SettingsCommandCodeKey>): string {\n  if (reason === 'invalid-key') return t('usageKeyInvalidHint')\n  if (reason === 'service-unavailable') return t('usageServiceUnavailableHint')\n  return t('usageNetworkHint')\n}\n\n/** The status dot on an account tab: cooling/invalid warn, everything else ok. */\nfunction AccountTabDot({ entry }: { entry: CommandCodeAccountUsage }) {\n  const cls = entry.mark === 'invalid-credential'\n    ? 'cc-tabDot cc-tabDotError'\n    : entry.mark !== '' || entry.cooldownUntil > 0\n      ? 'cc-tabDot cc-tabDotWarn'\n      : 'cc-tabDot cc-tabDotOk'\n  // Decorative: the tab's text label already carries the account identity.\n  return <span className={cls} aria-hidden=\"true\" />\n}\n\n/**\n * The account-usage card: the `/commandcode` dashboard's facts rendered as\n * a native settings card. With several accounts the card is a carousel — a\n * tab strip (label + status dot) switches between accounts so the page stays\n * short; each account's report carries its own remove affordance (the\n * default account is not removable). Accounts staged for removal in the\n * management card are hidden here immediately. Data arrives through the\n * `commandcode/report` Remote; the API keys never leave the Host.\n */\nfunction UsageCard({ t, usage, removingIds, removableIds, canManage, onRefresh, onRemoveAccount }: {\n  t: Translate<SettingsCommandCodeKey>\n  usage: UsagePageState\n  /** Ids of accounts staged for removal (hidden from the carousel). */\n  removingIds: string[]\n  /**\n   * Ids of accounts the settings document can actually remove (the stored\n   * extra accounts' refs). Composition-only accounts (literal-key slots with\n   * positional `account-N` ids) are NOT removable from the page — the\n   * settings document cannot name them — so they get no remove button.\n   */\n  removableIds: string[]\n  /** Whether the page accepts writes (the remove affordance follows it). */\n  canManage: boolean\n  onRefresh(): void\n  onRemoveAccount(id: string): void\n}) {\n  const { loading, shouldRefresh, noKey } = usageCardState(usage)\n  // Ask the Host on first paint: CLI auth and composition keys are not\n  // represented by browser credential references. Later failures retry manually.\n  useEffect(() => {\n    if (shouldRefresh) onRefresh()\n  }, [shouldRefresh, onRefresh])\n\n  const report = usage.report\n  // Locally remembered removals: the usage controller keeps the old report\n  // until the post-save refresh lands, and removedRefs clears at save-land —\n  // without this the just-removed account would pop back in for one refresh\n  // round-trip. Cleared when a fresh report arrives (fetchedAt changes).\n  const [locallyRemoved, setLocallyRemoved] = useState<readonly string[]>([])\n  useEffect(() => {\n    setLocallyRemoved([])\n  }, [usage.fetchedAt])\n  const hidden = new Set([...removingIds, ...locallyRemoved])\n  const seenIds = new Set<string>()\n  const entries = (report?.accounts ?? []).filter((entry) => {\n    if (hidden.has(entry.id)) return false\n    // Hand-edited settings can name the same credential ref twice; dedupe so\n    // the tab strip never carries duplicate keys/selections.\n    if (seenIds.has(entry.id)) return false\n    seenIds.add(entry.id)\n    return true\n  })\n  const [selectedId, setSelectedId] = useState<string | undefined>(undefined)\n  // The selected tab: the explicit choice while it still exists, else the\n  // serving (active) account, else the first entry.\n  const selected = entries.find((entry) => entry.id === selectedId)\n    ?? entries.find((entry) => entry.active)\n    ?? entries[0]\n  const removeSelected = canManage && selected !== undefined && removableIds.includes(selected.id)\n    ? () => {\n        const id = selected.id\n        setLocallyRemoved((prev) => [...prev, id])\n        onRemoveAccount(id)\n      }\n    : undefined\n\n  return (\n    <div className=\"cc-usageCard\" aria-label={t('usageTitle')}>\n      <div className=\"cc-usageHead\">\n        <h3 className=\"cc-usageTitle\">{t('usageTitle')}</h3>\n        <span className=\"cc-usageMetaSpacer\" />\n        <button type=\"button\" className=\"cc-usageRefresh\" disabled={loading} onClick={onRefresh}>\n          {loading ? t('usageRefreshing') : t('usageRefresh')}\n        </button>\n      </div>\n\n      {noKey ? <p className=\"cc-usageHint\">{t('usageNoKey')}</p> : null}\n      {report === undefined && loading ? <p className=\"cc-usageHint\">{t('usageLoading')}</p> : null}\n      {usage.status === 'error' ? (\n        <p className=\"cc-usageError\" role=\"status\">\n          <span>{t('usageError')}{usage.error !== undefined && usage.error !== '' ? ` — ${usage.error}` : ''}</span>\n        </p>\n      ) : null}\n\n      {/* Plain buttons, not tabs: each switches the visible account panel\n          without a tabpanel/keyboard-tab contract to uphold. */}\n      {entries.length > 1 ? (\n        <div className=\"cc-tabs\" aria-label={t('accountsTitle')}>\n          {entries.map((entry) => (\n            <button\n              key={entry.id}\n              type=\"button\"\n              aria-pressed={selected?.id === entry.id}\n              className={selected?.id === entry.id ? 'cc-tab cc-tabActive' : 'cc-tab'}\n              onClick={() => setSelectedId(entry.id)}\n            >\n              <AccountTabDot entry={entry} />\n              {entry.label}\n            </button>\n          ))}\n        </div>\n      ) : null}\n\n      {selected !== undefined ? (\n        <AccountReport\n          key={selected.id}\n          entry={selected}\n          fetchedAt={usage.fetchedAt}\n          t={t}\n          onRemove={removeSelected}\n        />\n      ) : null}\n    </div>\n  )\n}\n\n/**\n * One extra account row: label, key, configured badge. Saved accounts are\n * removed from the usage card above; a NOT-YET-SAVED addition never appears\n * there (the usage report is Host-side), so it keeps its own remove button —\n * otherwise the only way to undo a mistaken Add would be discarding every\n * other staged edit.\n */\nfunction AccountRow({ account, disabled, t, onLabel, onKey, onToggleClear, onRemove }: {\n  account: AccountItemState\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onLabel(text: string): void\n  onKey(text: string): void\n  onToggleClear(): void\n  onRemove(): void\n}) {\n  const locked = !account.writable\n  const [keyVisible, setKeyVisible] = useState(false)\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor={`cc-account-label-${account.id}`}>{t('accountLabel')}</label>\n        <span className=\"cc-badges\">\n          {account.added ? <span className=\"cc-badge\">{t('unsaved')}</span> : null}\n          <span className={account.configured ? 'cc-badge' : 'cc-badgeMuted'}>\n            {account.configured ? t('apiKeySet') : t('apiKeyUnset')}\n          </span>\n          {account.clearStaged ? <span className=\"cc-badge cc-badgeWarn\">{t('usageKeyClearStaged')}</span> : null}\n          {account.configured && !account.clearStaged ? (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onToggleClear}>\n              {t('usageKeyClear')}\n            </button>\n          ) : null}\n          {account.clearStaged ? (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onToggleClear}>\n              {t('usageUndoKeyClear')}\n            </button>\n          ) : null}\n          <button\n            type=\"button\"\n            className=\"cc-reset\"\n            disabled={disabled}\n            onClick={() => setKeyVisible((value) => !value)}\n          >\n            {keyVisible ? t('hide') : t('show')}\n          </button>\n          {account.added ? (\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onRemove}>{t('accountRemove')}</button>\n          ) : null}\n        </span>\n      </div>\n      <input\n        id={`cc-account-label-${account.id}`}\n        className=\"cc-input\"\n        type=\"text\"\n        value={account.label}\n        disabled={disabled}\n        onChange={(event) => onLabel(event.target.value)}\n      />\n      <input\n        id={`cc-account-key-${account.id}`}\n        className=\"cc-input\"\n        type={keyVisible ? 'text' : 'password'}\n        autoComplete=\"off\"\n        spellCheck={false}\n        placeholder={t('accountKey')}\n        value={account.keyText}\n        disabled={disabled || locked}\n        onChange={(event) => onKey(event.target.value)}\n      />\n      <p className=\"cc-hint\">{locked ? t('apiKeyLocked') : t('accountKeyHint')}</p>\n    </div>\n  )\n}\n\n/** The multi-account card: the active-account selector + extra accounts in rotation order + add button. */\nfunction AccountsCard({ t, state, disabled, onAdd, onRemove, onLabel, onKey, onToggleClear, onActive, onActiveReset }: {\n  t: Translate<SettingsCommandCodeKey>\n  state: SettingsPageState\n  disabled: boolean\n  onAdd(): void\n  onRemove(id: string): void\n  onLabel(id: string, text: string): void\n  onKey(id: string, text: string): void\n  onToggleClear(id: string): void\n  onActive(text: string): void\n  onActiveReset(): void\n}) {\n  const active = state.activeAccount\n  return (\n    <div className=\"cc-card\" aria-label={t('accountsTitle')}>\n      <div className=\"cc-field\">\n        <div className=\"cc-fieldHead\">\n          <label className=\"cc-label\">{t('accountsTitle')}</label>\n          <span className=\"cc-badges\">\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onAdd}>{t('accountAdd')}</button>\n          </span>\n        </div>\n        <p className=\"cc-hint\">{t('accountsHint')}</p>\n      </div>\n      <div className=\"cc-field\">\n        <div className=\"cc-fieldHead\">\n          <label className=\"cc-label\" htmlFor=\"cc-active-account\">{t('activeAccount')}</label>\n          <span className=\"cc-badges\">\n            {active.overridden ? <span className=\"cc-badge\">{t('overridden')}</span> : null}\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onActiveReset}>{t('reset')}</button>\n          </span>\n        </div>\n        <select\n          id=\"cc-active-account\"\n          className=\"cc-input\"\n          value={active.text}\n          disabled={disabled}\n          onChange={(event) => onActive(event.target.value)}\n        >\n          <option value=\"\">{t('activeAccountAuto')}</option>\n          <option value=\"default\">{t('accountDefault')}</option>\n          {state.accounts.filter((account) => !account.added).map((account) => (\n            <option key={account.id} value={account.ref}>{account.label}</option>\n          ))}\n        </select>\n        <p className=\"cc-hint\">{t('activeAccountHint')}</p>\n      </div>\n      {state.accounts.map((account) => (\n        <AccountRow\n          key={account.id}\n          account={account}\n          disabled={disabled}\n          t={t}\n          onLabel={(text) => onLabel(account.id, text)}\n          onKey={(text) => onKey(account.id, text)}\n          onToggleClear={() => onToggleClear(account.id)}\n          onRemove={() => onRemove(account.id)}\n        />\n      ))}\n    </div>\n  )\n}\n\n/** One model → account routing rule row. */\nfunction RuleRow({ rule, accounts, catalog, disabled, t, onModels, onAccount, onRemove }: {\n  rule: RuleItemState\n  accounts: AccountItemState[]\n  catalog: CatalogModelOption[]\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onModels(ids: string[]): void\n  onAccount(text: string): void\n  onRemove(): void\n}) {\n  const targets = [\n    { value: 'default', label: t('accountDefault') },\n    ...accounts.filter((account) => !account.added).map((account) => ({ value: account.ref, label: account.label })),\n  ]\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor={`cc-rule-model-${rule.id}`}>{t('ruleModel')}</label>\n        <span className=\"cc-badges\">\n          {rule.added ? <span className=\"cc-badge\">{t('unsaved')}</span> : null}\n          <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onRemove}>{t('ruleRemove')}</button>\n        </span>\n      </div>\n      <ModelMultiSelect\n        id={`cc-rule-model-${rule.id}`}\n        selected={rule.models}\n        catalog={catalog}\n        disabled={disabled}\n        t={t}\n        onSelect={onModels}\n      />\n      <select\n        id={`cc-rule-account-${rule.id}`}\n        className=\"cc-input\"\n        value={rule.account}\n        disabled={disabled}\n        onChange={(event) => onAccount(event.target.value)}\n        aria-label={t('ruleAccount')}\n      >\n        {targets.map((target) => (\n          <option key={target.value} value={target.value}>{target.label}</option>\n        ))}\n      </select>\n      <p className=\"cc-hint\">{t('ruleHint')}</p>\n    </div>\n  )\n}\n\n/**\n * A checkbox multi-select dropdown for picking catalog models (the\n * routing-rule rows and the visible-models filter share it). The trigger\n * shows the selection count; the Menu lists every catalog model with a\n * checkbox, toggled by clicking the row. A search box under the trigger\n * (inside the Menu anchor, so focusing it never trips the outside-click\n * close) filters the list by id/display-name substring, and items group\n * under plan-tier headings in picker order. Selected ids the catalog no\n * longer carries still render — flagged stale — so a saved selection never\n * silently loses an entry, and the VisibleModelsCard offers a one-click\n * cleanup.\n */\nfunction ModelMultiSelect({ id, selected, catalog, disabled, t, onSelect }: {\n  id: string\n  selected: string[]\n  catalog: CatalogModelOption[]\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onSelect(ids: string[]): void\n}) {\n  const [open, setOpen] = useState(false)\n  const [query, setQuery] = useState('')\n  // The search box must not inherit a stale query from a previous open.\n  useEffect(() => {\n    if (open) setQuery('')\n  }, [open])\n  // Tier headings come from the catalog entries themselves (the Host stamps\n  // each entry's plan-tier key on the Remote); rebuild only when the catalog\n  // changes.\n  const tiers = useMemo(\n    () => Object.fromEntries(\n      catalog.flatMap((model) => model.tier === undefined ? [] : [[model.id, model.tier] as const]),\n    ),\n    [catalog],\n  )\n  // The catalog is sorted for picking; append any selected ids the catalog no\n  // longer carries (removed upstream) so the current selection stays visible.\n  const options = buildModelSelectOptions(catalog, selected, query)\n  const groups = groupModelSelectOptions(options, (modelId) => tierHeadingFor(modelId, tiers))\n  const items: MenuEntry[] = groups.flatMap((group) => [\n    ...(group.heading === undefined\n      ? []\n      : [{ type: 'label' as const, id: `cc-tier-${group.heading}`, text: group.heading }]),\n    ...group.options.map((option) => ({\n      id: option.value,\n      label: (\n        <span className=\"cc-checkRow\">\n          <input\n            type=\"checkbox\"\n            className=\"cc-check\"\n            checked={selected.includes(option.value)}\n            readOnly\n            tabIndex={-1}\n          />\n          <span className=\"cc-checkName\">{option.label}</span>\n          {option.stale ? <span className=\"cc-badge\">{t('modelStale')}</span> : null}\n        </span>\n      ),\n    })),\n  ])\n  // The search box lives INSIDE the Menu anchor (which renders in place\n  // inside the Menu's root span): a pointerdown there counts as \"inside\",\n  // so focusing/typing never trips the Menu's outside-click close. A box\n  // rendered as a sibling would close the Menu on the first click.\n  return (\n    <Menu\n      open={open}\n      onClose={() => setOpen(false)}\n      onSelect={(modelId) => {\n        onSelect(toggleModelSelection(selected, modelId))\n      }}\n      selectedIds={selected}\n      items={items}\n      footer={options.length === 0 ? [{\n        type: 'label' as const,\n        id: 'cc-model-search-empty',\n        text: t('modelSearchEmpty'),\n      }] : []}\n      portal\n      anchor={\n        <span className=\"cc-modelSelectAnchor\">\n          <button\n            id={id}\n            type=\"button\"\n            className=\"cc-input cc-ruleTrigger\"\n            disabled={disabled || catalog.length === 0}\n            onClick={() => setOpen((value) => !value)}\n          >\n            <span className=\"cc-ruleTriggerText\">\n              {selected.length === 0 ? t('ruleModelPick') : t('ruleModelCount', { count: selected.length })}\n            </span>\n            <span className=\"cc-ruleCaret\" aria-hidden=\"true\" />\n          </button>\n          {open ? (\n            <input\n              type=\"search\"\n              className=\"cc-input cc-modelSearch\"\n              placeholder={t('modelSearchPlaceholder')}\n              aria-label={t('modelSearchPlaceholder')}\n              value={query}\n              disabled={disabled}\n              autoFocus\n              onChange={(event) => setQuery(event.target.value)}\n            />\n          ) : null}\n        </span>\n      }\n    />\n  )\n}\n\n/** The model → account routing card: rules in list order (first match wins). */\nfunction RulesCard({ t, state, disabled, onAdd, onRemove, onModels, onAccount }: {\n  t: Translate<SettingsCommandCodeKey>\n  state: SettingsPageState\n  disabled: boolean\n  onAdd(): void\n  onRemove(id: string): void\n  onModels(id: string, ids: string[]): void\n  onAccount(id: string, text: string): void\n}) {\n  return (\n    <div className=\"cc-card\" aria-label={t('rulesTitle')}>\n      <div className=\"cc-field\">\n        <div className=\"cc-fieldHead\">\n          <label className=\"cc-label\">{t('rulesTitle')}</label>\n          <span className=\"cc-badges\">\n            <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onAdd}>{t('ruleAdd')}</button>\n          </span>\n        </div>\n        <p className=\"cc-hint\">{t('rulesHint')}</p>\n        {state.catalogFailed ? <p className=\"cc-invalid\">{t('rulesCatalogFailed')}</p> : null}\n      </div>\n      {state.rules.map((rule) => (\n        <RuleRow\n          key={rule.id}\n          rule={rule}\n          accounts={state.accounts}\n          catalog={state.catalogModels}\n          disabled={disabled}\n          t={t}\n          onModels={(ids) => onModels(rule.id, ids)}\n          onAccount={(text) => onAccount(rule.id, text)}\n          onRemove={() => onRemove(rule.id)}\n        />\n      ))}\n      {state.rules.length === 0 ? <p className=\"cc-hint\">{t('rulesEmpty')}</p> : null}\n    </div>\n  )\n}\n\n/** The visible-model filter card: an allowlist over the catalog. Empty = show all. */\nfunction VisibleModelsCard({ t, state, disabled, onSelect, onClear }: {\n  t: Translate<SettingsCommandCodeKey>\n  state: SettingsPageState\n  disabled: boolean\n  onSelect(ids: string[]): void\n  onClear(): void\n}) {\n  const count = state.visibleModels.length\n  const pickT: Translate<SettingsCommandCodeKey> = (key, params) => {\n    if (key === 'ruleModelPick') return t('visibleModelsPick')\n    if (key === 'ruleModelCount') return t('visibleModelsCount', params)\n    return t(key, params)\n  }\n  // Selected ids the live catalog no longer carries (retired upstream):\n  // kept, flagged stale in the dropdown, removable in one click. Never\n  // auto-dropped — an empty catalog (fetch failure) must not wipe the list.\n  // \"Stale\" is only meaningful against a catalog we actually hold, so both the\n  // cleanup button and its hint are gated on catalogIsReady: before the first\n  // fetch lands (and after a failure) the empty catalog makes every selection\n  // look retired, turning the one-click cleanup into a button that silently\n  // empties the allowlist. The explicit \"show all\" entry stays available\n  // either way — clearing the list is then the user's stated intent rather\n  // than an inference from missing data.\n  const readiness = { catalogIds: state.catalogModels.map((model) => model.id), catalogFailed: state.catalogFailed }\n  const staleIds = staleModelIds(state.visibleModels, readiness)\n  const catalogReady = catalogIsReady(readiness)\n  return (\n    <div className=\"cc-card\" aria-label={t('visibleModelsTitle')}>\n      <div className=\"cc-field\">\n        <div className=\"cc-fieldHead\">\n          <label className=\"cc-label\">{t('visibleModelsTitle')}</label>\n          <span className=\"cc-badges\">\n            {catalogReady && staleIds.length > 0 ? (\n              <button\n                type=\"button\"\n                className=\"cc-reset\"\n                disabled={disabled}\n                onClick={() => onSelect(state.visibleModels.filter((id) => !staleIds.includes(id)))}\n              >\n                {t('visibleModelsCleanStale', { count: staleIds.length })}\n              </button>\n            ) : null}\n            {count > 0 ? (\n              <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={onClear}>\n                {t('visibleModelsShowAll')}\n              </button>\n            ) : null}\n          </span>\n        </div>\n        <p className=\"cc-hint\">{t('visibleModelsHint')}</p>\n        {state.catalogFailed ? <p className=\"cc-invalid\">{t('rulesCatalogFailed')}</p> : null}\n        {staleIds.length > 0 && catalogReady ? (\n          <p className=\"cc-hint\">{t('visibleModelsStaleHint', { count: staleIds.length })}</p>\n        ) : null}\n        <ModelMultiSelect\n          id=\"cc-visible-models\"\n          selected={state.visibleModels}\n          catalog={state.catalogModels}\n          disabled={disabled}\n          t={pickT}\n          onSelect={onSelect}\n        />\n      </div>\n    </div>\n  )\n}\n\n/**\n * Show the \"Saved ✓\" affordance for a short window after each accepted save.\n * The controller only counts saves (`savedCount`); the flash timing lives\n * here so the state machine stays timer-free.\n */\nfunction useSavedFlash(tick: number): boolean {\n  const [visible, setVisible] = useState(false)\n  useEffect(() => {\n    if (tick === 0) return\n    setVisible(true)\n    const timer = setTimeout(() => setVisible(false), 2500)\n    return () => clearTimeout(timer)\n  }, [tick])\n  return visible\n}\n\n/**\n * The update hint: one throttled npm-registry check per page open (the\n * throttle and all failure handling live in ./update.ts). Resolves to the\n * newest published version when it is newer than this build, else undefined —\n * every failure mode degrades to no hint at all.\n */\nfunction usePluginUpdate(): string | undefined {\n  const [available, setAvailable] = useState<string | undefined>(undefined)\n  useEffect(() => {\n    let cancelled = false\n    void checkForUpdate({\n      currentVersion: PLUGIN_VERSION,\n      now: Date.now(),\n      store: localStorageUpdateStore(),\n    }).then((version) => {\n      if (!cancelled) setAvailable(version)\n      // A rejected checkForUpdate would be a bug (it catches internally);\n      // swallow it regardless — the footer must never break the page.\n    }, () => {})\n    return () => {\n      cancelled = true\n    }\n  }, [])\n  return available\n}\n\n/** The settings page body: connection facts for the Command Code provider. */\nexport function CommandCodeSettingsPage(props: CommandCodeSettingsProps) {\n  const { t } = props\n  const state = props.useCommandCodeSettings((snapshot) => snapshot)\n  const usage = props.useCommandCodeUsage((snapshot) => snapshot)\n  const login = props.useCommandCodeLogin((snapshot) => snapshot)\n  const disabled = !state.writable\n  const keyLocked = !state.apiKeyWritable\n  const savedVisible = useSavedFlash(state.savedCount)\n  const updateVersion = usePluginUpdate()\n  return (\n    <section className=\"cc-section\" aria-label={t('title')}>\n      <h2 className=\"cc-title\">{t('title')}</h2>\n      <p className=\"cc-intro\">{t('intro')}</p>\n      {!state.writable ? <p className=\"cc-readOnly\" role=\"status\">{t('readOnly')}</p> : null}\n      <UsageCard\n        t={t}\n        usage={usage}\n        removingIds={state.accountsRemoving}\n        removableIds={state.accounts.map((account) => account.id)}\n        canManage={state.writable}\n        onRefresh={props.refreshUsage}\n        onRemoveAccount={props.removeAccount}\n      />\n      <AccountsCard\n        t={t}\n        state={state}\n        disabled={disabled}\n        onAdd={props.addAccount}\n        onRemove={props.removeAccount}\n        onLabel={props.editAccountLabel}\n        onKey={props.editAccountKey}\n        onToggleClear={(id) => props.toggleKeyClear(id)}\n        onActive={(text) => props.edit('activeAccount', text)}\n        onActiveReset={() => props.resetField('activeAccount')}\n      />\n      <RulesCard\n        t={t}\n        state={state}\n        disabled={disabled}\n        onAdd={props.addRule}\n        onRemove={props.removeRule}\n        onModels={props.editRuleModels}\n        onAccount={props.editRuleAccount}\n      />\n      <VisibleModelsCard\n        t={t}\n        state={state}\n        disabled={disabled}\n        onSelect={props.editVisibleModels}\n        onClear={props.clearVisibleModels}\n      />\n      <div className=\"cc-card\">\n        <SecretKeyField\n          label={t('apiKey')}\n          hint={keyLocked ? t('apiKeyLocked') : t('apiKeyHint')}\n          state={state.apiKey}\n          disabled={disabled || keyLocked}\n          configured={state.apiKeyConfigured}\n          configuredLabel={t('apiKeySet')}\n          unconfiguredLabel={t('apiKeyUnset')}\n          clearStaged={state.apiKeyClearStaged}\n          showLabel={t('show')}\n          hideLabel={t('hide')}\n          clearLabel={t('usageKeyClear')}\n          clearStagedLabel={t('usageKeyClearStaged')}\n          undoClearLabel={t('usageUndoKeyClear')}\n          onEdit={(text) => props.edit('apiKey', text)}\n          onToggleClear={() => props.toggleKeyClear('default')}\n        />\n        <LoginRow\n          state={login}\n          disabled={disabled || keyLocked}\n          t={t}\n          onBegin={props.beginLogin}\n          onCancel={props.cancelLogin}\n        />\n      </div>\n      <AdvancedSection\n        state={state}\n        disabled={disabled}\n        t={t}\n        onEdit={props.edit}\n        onReset={props.resetField}\n      />\n      <div className=\"cc-footer\">\n        {state.failed ? <p className=\"cc-failed\" role=\"status\">{t('saveFailed')}</p> : null}\n        {savedVisible ? <p className=\"cc-saved\" role=\"status\">{t('saved')}</p> : null}\n        <Button variant=\"ghost\" size=\"sm\" disabled={!state.dirty || state.saving} onClick={props.discard}>\n          {t('discard')}\n        </Button>\n        <Button\n          variant=\"primary\"\n          size=\"sm\"\n          disabled={!state.dirty || state.invalid || state.saving}\n          onClick={props.save}\n        >\n          {t(state.saving ? 'saving' : 'save')}\n        </Button>\n      </div>\n      <p className=\"cc-version\">\n        Command Code Provider v{PLUGIN_VERSION}\n        {updateVersion !== undefined ? (\n          <>\n            {' · '}\n            <a\n              className=\"cc-versionLink\"\n              href={PLUGIN_RELEASES_URL}\n              target=\"_blank\"\n              rel=\"noreferrer\"\n              title={t('updateHint')}\n            >\n              v{updateVersion} {t('updateAvailable')}\n            </a>\n          </>\n        ) : null}\n      </p>\n    </section>\n  )\n}\n","/**\n * The Command Code configuration panel inside the harness Models settings page\n * (browser half). Rendered through the `settings.models.provider-card` keyed\n * slot available in dsh 0.1.2 (rc.1), registered with\n * `entryKey = 'llm-commandcode'` (the plugin's settings namespace, the key the\n * Models page dispatches for every Command Code provider row).\n *\n * The official Models page opens one editor card per provider row through its\n * own 编辑 button. For a namespace the page does not curate a layout for\n * (`llm-commandcode`), that editor is a bare shell — a pointer to\n * `settings.yaml` above a permanently disabled apply button. This panel takes\n * its place: the slot outlet renders right beside the official editor inside\n * the same row card, so the component watches the outlet's siblings and, while\n * the official editor is open, hides the useless shell and shows the real\n * controls in its slot — the credential/route badges, the API-key field,\n * official sign-in, and the discard/save footer. Closed, it renders nothing\n * and the row looks exactly like any other provider row.\n *\n * The slot's owner props (`configured`, `keyConfigured`) mirror what the\n * Models page already knows; the authoritative credential facts still come\n * from this plugin's `CommandCodeSettingsController` shared with the dedicated\n * settings page, so the two surfaces can never disagree about whether a key\n * is stored.\n *\n * A controller-less render (panel mounted before the section registered its\n * inject face — the composition runs one apply) degrades to the stateless\n * registration notice inside the opened panel.\n *\n * Styles ride the page stylesheet the client entry injects once (`cc-`\n * prefixed classes); the card adds no CSS of its own.\n */\n\nimport { useEffect, useRef, useState } from 'react'\nimport type { Translate } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { SettingsCommandCodeKey } from './locales.ts'\nimport type { SettingsPageState, StagedField } from './settings.ts'\nimport type { LoginPageState } from './login.ts'\nimport { LoginRow } from './login-row.tsx'\n\n/**\n * The Models-page extension slots, merged into the SlotMap with the exact\n * declarations dsh 0.1.2 (rc.1)'s ui-settings-models ships. The merge must\n * stay structurally identical to upstream's (kind/scope/owner), or a future\n * dsh carrying its own declaration would fail the duplicate-merge check at\n * compile time.\n */\ndeclare module '@deepseek-ai/dsh-client-ui-slots' {\n  interface SlotMap {\n    /** One provider card's adapter extension area, keyed by the row's settingsNs. */\n    'settings.models.provider-card': { kind: 'keyed'; scope: 'root'; owner: ProviderCardExtrasOwnerProps }\n    /** Ordered extension area after the provider rows and the add controls. */\n    'settings.models.footer': { kind: 'list'; scope: 'root'; owner: ModelsFooterOwnerProps }\n  }\n}\n\n/** The provider directory row as the Models page dispatches it. */\nexport interface ProviderDirectoryRow {\n  /** The provider route id (`commandcode` for this plugin). */\n  readonly provider: string\n  /** The row's display name. */\n  readonly displayName: string\n  /** The settings namespace the row configures (the slot's dispatch key). */\n  readonly settingsNs: string\n  /** The settings path the row's profile lives at. */\n  readonly settingsPath: readonly string[]\n  /** Whether the provider route is live. */\n  readonly active: boolean\n  /** Whether the adapter declares the route as shipped. */\n  readonly declared?: boolean\n}\n\n/** Owner share of one provider-card extension occurrence (upstream's shape). */\nexport interface ProviderCardExtrasOwnerProps {\n  /** The card's directory row. */\n  readonly provider: ProviderDirectoryRow\n  /** Whether any layer configures this provider (its profile resolves). */\n  readonly configured: boolean\n  /** The row's referenced api-key credential, confirmed configured by the page's join. */\n  readonly keyConfigured: boolean\n}\n\n/** Owner share of the footer area (the section supplies nothing). */\nexport interface ModelsFooterOwnerProps {\n  /** Marker field: footer owner props are intentionally empty. */\n  children?: never\n}\n\n/** Owner props the Models page supplies at its dispatch sites. */\nexport type ProviderCardOwnerProps = ProviderCardExtrasOwnerProps\n\n/**\n * The slot whose outlet anchors this panel inside the Models row — the\n * renderer's own `data-slot` attribute value, stable across builds (unlike\n * CSS-module class hashes).\n */\nexport const CARD_SLOT_KEY = 'settings.models.provider-card'\n\n/** The DOM facts the sibling lookup reads (satisfied by real Elements). */\nexport interface SlotWrapperSiblings {\n  previousElementSibling: { className: string } | null\n  nextElementSibling: { className: string } | null\n}\n\n/**\n * Find the official editor card among the slot outlet's siblings, or null\n * while it is closed. The Models page renders the editor as an immediate\n * sibling of the outlet wrapper — after it in a provider row (the target of\n * the row's 编辑 toggle), before it in the first-run setup card and the\n * add-provider card, where it is always open. The editor is the only such\n * sibling whose CSS module class carries the `editor` stem\n * (`<hash>_editor`); the row header and the add card's provider select\n * never do, so the lookup needs no hash knowledge.\n */\nexport function adjacentEditorCard(wrapper: SlotWrapperSiblings | null): { className: string } | null {\n  if (wrapper === null) return null\n  for (const sibling of [wrapper.previousElementSibling, wrapper.nextElementSibling]) {\n    if (sibling !== null && typeof sibling.className === 'string' && sibling.className.includes('editor')) {\n      return sibling\n    }\n  }\n  return null\n}\n\n/** The closed-panel style: the outlet stays mounted as the detection anchor. */\nconst HIDDEN_STYLE = { display: 'none' } as const\n\n/** Injected face the card's slot registration supplies. */\nexport interface CommandCodeCardProps {\n  t: Translate<SettingsCommandCodeKey>\n  useCommandCodeSettings<T>(selector: (state: SettingsPageState) => T): T\n  useCommandCodeLogin<T>(selector: (state: LoginPageState) => T): T\n  edit(field: string, text: string): void\n  save(): void\n  discard(): void\n  beginLogin(): void\n  cancelLogin(): void\n}\n\n/** The card's two postures. */\ntype CardMode =\n  | { kind: 'registration' }\n  | { kind: 'live'; ready: boolean; controllerConfigured: boolean; writable: boolean; apiKeyWritable: boolean }\n\n/**\n * Decide the card's posture from one settings snapshot. Pure: the component\n * subscribes once and passes the snapshot in, so hook order never depends\n * on the registration→live transition. (The owner facts stay on the\n * component — only the snapshot decides the posture.)\n */\nexport function cardMode(\n  snapshot: SettingsPageState | undefined,\n): CardMode {\n  if (snapshot === undefined) return { kind: 'registration' }\n  return {\n    kind: 'live',\n    ready: snapshot.available,\n    controllerConfigured: snapshot.apiKeyConfigured,\n    writable: snapshot.writable,\n    apiKeyWritable: snapshot.apiKeyWritable,\n  }\n}\n\n/** Status badge for the credential state (green when configured). */\nfunction StatusBadge({ ok, okLabel, pendingLabel }: {\n  ok: boolean\n  okLabel: string\n  pendingLabel: string\n}) {\n  return <span className={ok ? 'cc-badge' : 'cc-badgeMuted'}>{ok ? okLabel : pendingLabel}</span>\n}\n\n/** Compact key field for the not-configured card. */\nfunction CardKeyField({ state, disabled, t, onEdit }: {\n  state: StagedField\n  disabled: boolean\n  t: Translate<SettingsCommandCodeKey>\n  onEdit(text: string): void\n}) {\n  const [visible, setVisible] = useState(false)\n  return (\n    <div className=\"cc-field\">\n      <div className=\"cc-fieldHead\">\n        <label className=\"cc-label\" htmlFor=\"cc-card-api-key\">{t('apiKey')}</label>\n        <span className=\"cc-badges\">\n          <button type=\"button\" className=\"cc-reset\" disabled={disabled} onClick={() => setVisible((value) => !value)}>\n            {visible ? t('hide') : t('show')}\n          </button>\n        </span>\n      </div>\n      <input\n        id=\"cc-card-api-key\"\n        className=\"cc-input\"\n        type={visible ? 'text' : 'password'}\n        autoComplete=\"off\"\n        spellCheck={false}\n        value={state.text}\n        disabled={disabled}\n        onChange={(event) => onEdit(event.target.value)}\n      />\n      <p className=\"cc-hint\">{t('apiKeyHint')}</p>\n    </div>\n  )\n}\n\n/**\n * The slot component body. Dispatched on every Command Code provider card of\n * the Models page (saved row, first-run setup posture, and add-provider\n * draft).\n *\n * Closed (the official 编辑 toggle off) the panel renders nothing: the row\n * head the Models page owns already names the provider and shows the\n * credential dot, so a page full of providers stays compact. Opening the\n * official editor mounts the editor shell as the outlet's sibling; the panel\n * watches for it, hides the shell (it carries only the settings.yaml hint and\n * a disabled apply for this namespace), and shows the real controls — badges,\n * API-key field, sign-in, discard/save.\n */\nexport function CommandCodeProviderCard(props: CommandCodeCardProps & ProviderCardOwnerProps) {\n  const { t } = props\n  // Single subscription: the whole snapshot drives posture + body together.\n  const state = props.useCommandCodeSettings !== undefined\n    ? props.useCommandCodeSettings((snapshot) => snapshot)\n    : undefined\n  const mode = cardMode(state)\n  const login = props.useCommandCodeLogin !== undefined\n    ? props.useCommandCodeLogin((snapshot) => snapshot)\n    : undefined\n  const dirty = state?.dirty ?? false\n  const saving = state?.saving ?? false\n  const invalid = state?.invalid ?? false\n  const failed = state?.failed ?? false\n  const savingBlocked = !dirty || invalid\n  const configured = mode.kind === 'live' && mode.ready ? mode.controllerConfigured : props.keyConfigured\n  const disabled = mode.kind === 'live' && (!mode.writable || (state !== undefined && !mode.apiKeyWritable))\n  const showBody = mode.kind === 'live' && mode.ready && state !== undefined\n  // The official editor's open state lives in the Models page's own component\n  // state and never reaches this slot's props; the outlet wrapper is the\n  // stable neighbor, so watch its siblings for the editor's mount/unmount.\n  // The outlet stays mounted either way — it is the observation anchor — so\n  // the closed panel hides its own root instead of unmounting.\n  const rootRef = useRef<HTMLDivElement | null>(null)\n  const [editorOpen, setEditorOpen] = useState(false)\n  useEffect(() => {\n    const root = rootRef.current\n    if (root === null || typeof MutationObserver === 'undefined') return\n    const wrapper = root.closest(`[data-slot=\"${CARD_SLOT_KEY}\"]`) ?? root.parentElement\n    if (wrapper === null) return\n    const row = wrapper.parentElement\n    if (row === null) return\n    let hiddenEditor: HTMLElement | null = null\n    const sync = () => {\n      const editor = adjacentEditorCard(wrapper) as HTMLElement | null\n      setEditorOpen(editor !== null)\n      if (editor !== null) {\n        // React pins no inline style on the editor shell, so this survives\n        // the shell's own re-renders; a shell that unmounts and remounts is\n        // re-hidden by the next observation.\n        editor.style.display = 'none'\n        hiddenEditor = editor\n      }\n    }\n    sync()\n    const observer = new MutationObserver(sync)\n    observer.observe(row, { childList: true })\n    return () => {\n      observer.disconnect()\n      // If the shell outlives the panel (plugin reload), give it back: the\n      // settings.yaml hint is the honest fallback face again.\n      if (hiddenEditor !== null) hiddenEditor.style.display = ''\n    }\n  }, [])\n  return (\n    <div\n      ref={rootRef}\n      className=\"cc-providerCard\"\n      data-cc-models-card=\"true\"\n      style={editorOpen ? undefined : HIDDEN_STYLE}\n    >\n      {editorOpen && mode.kind === 'registration' ? <p className=\"cc-hint\">{t('cardRegistrationHint')}</p> : null}\n      {editorOpen && mode.kind === 'live' && !mode.ready ? <p className=\"cc-hint\">{t('cardLoadingHint')}</p> : null}\n      {editorOpen && showBody ? (\n        <>\n          <div className=\"cc-field\">\n            <div className=\"cc-fieldHead\">\n              <span className=\"cc-label\">{t('cardTitle')}</span>\n              <span className=\"cc-badges\">\n                <StatusBadge ok={configured} okLabel={t('apiKeySet')} pendingLabel={t('apiKeyUnset')} />\n                {props.provider.active ? <span className=\"cc-badge\">{t('cardRouteActive')}</span> : null}\n              </span>\n            </div>\n          </div>\n          <CardKeyField\n            state={state.apiKey}\n            disabled={disabled}\n            t={t}\n            onEdit={(text) => props.edit('apiKey', text)}\n          />\n          {login !== undefined ? (\n            <LoginRow\n              state={login}\n              disabled={disabled}\n              t={t}\n              onBegin={props.beginLogin}\n              onCancel={props.cancelLogin}\n            />\n          ) : null}\n          <div className=\"cc-footer\">\n            {failed ? <p className=\"cc-failed\" role=\"status\">{t('saveFailed')}</p> : null}\n            <button\n              type=\"button\"\n              className=\"cc-reset\"\n              disabled={!dirty || saving}\n              onClick={props.discard}\n            >\n              {t('discard')}\n            </button>\n            <button\n              type=\"button\"\n              className=\"cc-reset\"\n              disabled={savingBlocked || saving}\n              onClick={props.save}\n            >\n              {t(saving ? 'saving' : 'save')}\n            </button>\n          </div>\n        </>\n      ) : null}\n    </div>\n  )\n}\n","/**\n * English copy for the Command Code **plans & quota panel** (the sidebar\n * footer card and the center-column dashboard it opens).\n *\n * Deliberately NOT part of the `settings.commandcode` locale namespace: that\n * namespace follows the harness's active language, and this surface is\n * specified to read in English regardless of it. Keeping the strings out of\n * the locale registry is what makes that a fact rather than a preference —\n * there is no dictionary lookup that could resolve to Chinese.\n *\n * The settings page keeps its own bilingual `settings.commandcode` namespace\n * (see `./locales.ts`); the two never mix.\n *\n * @module dsh-commandcode-provider/client/panel-copy\n */\n\n/**\n * The plans & quota panel key set. `zh` in the settings namespace is the\n * source of truth there; here English is the only locale, so this union is\n * the key set.\n */\nexport type PanelKey =\n  /** Footer card title and panel heading. */\n  | 'nav'\n  /** Panel sub-heading under the title. */\n  | 'subtitle'\n  /** Refresh button / in-flight label. */\n  | 'refresh'\n  | 'refreshing'\n  /** First-paint fetch. */\n  | 'loading'\n  /** No credential at all: how to get one. */\n  | 'noKey'\n  | 'noKeyHint'\n  /** Report section headings. */\n  | 'plan'\n  | 'credits'\n  | 'limits'\n  | 'usage'\n  /** Monthly credit state and its tiles. */\n  | 'monthly'\n  | 'monthlyLimit'\n  | 'monthlyUsed'\n  | 'remaining'\n  | 'purchased'\n  | 'free'\n  /** Usage-window rows (long labels in the dashboard, short in the footer). */\n  | 'fiveHour'\n  | 'weekly'\n  | 'fiveHourShort'\n  | 'weeklyShort'\n  | 'windowUnlimited'\n  | 'exceeded'\n  | 'exhausted'\n  | 'resets'\n  /** Usage tiles. */\n  | 'requests'\n  | 'failed'\n  | 'successRate'\n  | 'spend'\n  | 'tokens'\n  | 'tokensIn'\n  | 'tokensOut'\n  /** Meta line. */\n  | 'periodEnds'\n  | 'updated'\n  | 'partial'\n  /** Rotation state on an account. */\n  | 'active'\n  | 'coolingDown'\n  | 'invalidKey'\n  /** Footer-card plan fallbacks. */\n  | 'unconfigured'\n  | 'unavailable'\n  /** Whole-report failures (mirrors the settings card's blocked taxonomy). */\n  | 'errorInvalidKey'\n  | 'errorInvalidKeyHint'\n  | 'errorServiceUnavailable'\n  | 'errorServiceUnavailableHint'\n  | 'errorNetwork'\n  | 'errorNetworkHint'\n  /** A fetch that failed for any other reason. */\n  | 'errorGeneric'\n\n/** The panel's literal string table. */\nexport const PANEL_COPY: Record<PanelKey, string> = {\n  nav: 'Command Code',\n  subtitle: 'Plans, credits and quota windows',\n  refresh: 'Refresh',\n  refreshing: 'Refreshing…',\n  loading: 'Loading account usage…',\n  noKey: 'No API key configured',\n  noKeyHint: 'Paste a key — or sign in — under Settings → Command Code, then refresh.',\n  plan: 'Plan',\n  credits: 'Credits',\n  limits: 'Quota windows',\n  usage: 'Usage',\n  monthly: 'Monthly',\n  monthlyLimit: 'Monthly limit',\n  monthlyUsed: 'Monthly used',\n  remaining: 'Remaining',\n  purchased: 'Purchased',\n  free: 'Free',\n  fiveHour: '5-hour window',\n  weekly: 'Weekly window',\n  fiveHourShort: '5-hour',\n  weeklyShort: 'Weekly',\n  windowUnlimited: 'unlimited',\n  exceeded: 'Exceeded',\n  exhausted: 'Used up',\n  resets: 'Resets',\n  requests: 'Requests',\n  failed: 'failed',\n  successRate: 'Success rate',\n  spend: 'Spend',\n  tokens: 'Tokens',\n  tokensIn: 'in',\n  tokensOut: 'out',\n  periodEnds: 'Period ends',\n  updated: 'Updated',\n  partial: 'Some endpoint data unavailable',\n  active: 'Active',\n  coolingDown: 'Cooling down',\n  invalidKey: 'Invalid key',\n  unconfigured: 'Not configured',\n  unavailable: 'No data',\n  errorInvalidKey: 'API key invalid or expired',\n  errorInvalidKeyHint: 'The server rejected every request (401). Check the key for this account, or generate a new one in the commandcode.ai console.',\n  errorServiceUnavailable: 'The Command Code service is temporarily unavailable',\n  errorServiceUnavailableHint: 'The server returned errors (5xx). Try Refresh again in a moment.',\n  errorNetwork: 'Could not reach the Command Code service',\n  errorNetworkHint: 'No request reached the server. Check your network connection or the API base setting.',\n  errorGeneric: 'Could not fetch account usage',\n}\n\n/** Look up one panel string. The fallback key keeps a bad call visible, never blank. */\nexport function panelText(key: PanelKey): string {\n  return PANEL_COPY[key] ?? key\n}\n","/**\n * View layer for the Command Code plans & quota panel (the sidebar footer card\n * and the dashboard it opens in the center column).\n *\n * Deliberately JSX-free and React-free, mirroring `./settings.ts` and\n * `./usage.ts`: it turns the shared usage snapshot into one presentation\n * tree that both React components render, and it owns the one shared side\n * effect (the throttled background refresh that keeps the sidebar card\n * current). Node tests drive everything here without a DOM.\n *\n * Every displayed string is decided here, as a `PanelKey` plus a `text`\n * record resolved from `./panel-copy.ts` — so the components carry no\n * formatting, pluralization, or copy of their own, and the panel cannot\n * regress into the harness locale (see that module for why it is English-only).\n *\n * @module dsh-commandcode-provider/client/panel\n */\n\nimport type { CommandCodeUsageReport } from '../adapter.ts'\nimport type { CommandCodeAccountUsage } from '../usage-wire.ts'\nimport type { UsagePageState } from './usage.ts'\nimport {\n  formatMoney,\n  formatMoneyExact,\n  formatSuccessRate,\n  formatTokensCompact,\n} from './usage.ts'\nimport { panelText, PANEL_COPY } from './panel-copy.ts'\nimport type { PanelKey } from './panel-copy.ts'\n\n/** One quota window (5-hour or weekly) in display form. */\nexport interface PanelWindowView {\n  /** Row-label key into the view's `text` record. */\n  label: PanelKey\n  /** `used / cap`, or just `used` when the window is uncapped. */\n  value: string\n  /** The window reports a cap, so `percent` is meaningful. */\n  capped: boolean\n  /** Percentage actually consumed (may exceed 100 when over the cap). */\n  percent: number\n  /** Fill width for the bar, clamped to [0, 100]. */\n  barPercent: number\n  /** Window is over its cap. */\n  exceeded: boolean\n  /** Local reset time, empty when the endpoint reported none. */\n  resetsAt: string\n}\n\n/**\n * Monthly credit state, derived exactly the way the official CLI derives it\n * (`getCreditDepletionPct` in `command-code/dist/cli.mjs`): the plan's credit\n * total is the LIMIT, and the billing endpoint's `credits.monthlyCredits` is\n * the REMAINING balance, so consumption is `limit - remaining`. The CLI's own\n * wording for the same two numbers is `Plan: N% used, X credits left`.\n *\n * Purchased and free credits are separate balances that extend what an account\n * can spend, so they are reported as their own tiles rather than folded into\n * the limit.\n */\nexport interface PanelMonthlyView {\n  /**\n   * A ratio is meaningful — the plan published a credit total AND the billing\n   * endpoint published the balance left of it. When false the view draws no\n   * bar: a percentage needs both halves, and inventing either one is how a\n   * failed billing call turns into a confident \"100% used\".\n   */\n  known: boolean\n  /** Plan credit total for the period (the limit); a dash when unreported. */\n  limit: string\n  /** Consumed this period (`limit - remaining`); a dash until both are known. */\n  used: string\n  /** Credits still available; a dash when the balance was not reported. */\n  remaining: string\n  /** Purchased top-up balance. */\n  purchased: string\n  /** Promotional balance. */\n  free: string\n  /** Consumption as a percentage of the limit; 0 when there is no ratio. */\n  percent: number\n  /** Fill width for the bar, clamped to [0, 100]. */\n  barPercent: number\n  /** The plan's credits are used up. */\n  exhausted: boolean\n  /** Billing period end, local date; empty when unreported. */\n  periodEnds: string\n}\n\n/** One compact bar in the sidebar footer card. */\nexport interface PanelFooterBar {\n  /** Row label key (short forms: `Monthly`, `5-hour`, `Weekly`). */\n  label: PanelKey\n  /** Printed right-hand percentage, e.g. `32%`; empty when there is no ratio. */\n  percent: string\n  /** Fill width, clamped to [0, 100]. */\n  barPercent: number\n  /** Render in the warning colour. */\n  warn: boolean\n  /**\n   * This window's own spend against its limit, e.g. `$1.32 / $6.00`. RENDERED,\n   * not just a tooltip: the card exists to show these figures, and the\n   * magnitudes are small dollar amounts (the endpoint reports a Pro account's\n   * five-hour cap as `3` and its weekly cap as `6`).\n   */\n  detail: string\n}\n\n/** One usage tile. */\nexport interface PanelStatView {\n  label: PanelKey\n  value: string\n  /** Secondary line, empty when there is none. */\n  sub: string\n}\n\n/** One pool account's report, ready to render. */\nexport interface PanelAccountView {\n  id: string\n  label: string\n  /** The account's display name (user name, else account name); empty when unreported. */\n  owner: string\n  /** Subscription display name; empty when unreported. */\n  planName: string\n  /** Subscription status when it is not a plain `active`; empty otherwise. */\n  planStatus: string\n  /** Rotation/credential state ('invalidKey' / 'coolingDown'); undefined when plain. */\n  mark: PanelKey | undefined\n  /** Known cooldown end, appended to the cooling-down badge; empty otherwise. */\n  cooldownUntil: string\n  /** No credential resolved for this slot. */\n  unconfigured: boolean\n  /** Billing period end, empty when unreported. */\n  periodEnds: string\n  /** Whether the account currently serves requests. */\n  active: boolean\n  /** Monthly credit state; undefined when neither endpoint reported it. */\n  monthly: PanelMonthlyView | undefined\n  windows: PanelWindowView[]\n  stats: PanelStatView[]\n}\n\n/** What actually went wrong, once — for the alert box. */\nexport interface PanelFailureView {\n  title: PanelKey\n  /** The actionable line under the title. */\n  hint: PanelKey\n  /** The underlying transport message, shown small; empty when there is none. */\n  detail: string\n}\n\n/** The whole panel, in render order. */\nexport interface PanelView {\n  /** Every English string this view references, by key. */\n  text: Partial<Record<PanelKey, string>>\n  /** Footer-card plan text (`Go`, `Pro`, …), or a state word. */\n  planName: string\n  /** Footer-card rotation/credential state line; empty when nothing to say. */\n  status: string\n  /**\n   * The compact bars the sidebar footer card stacks: the two quota windows an\n   * account actually runs into, 5-hour first then weekly. The monthly\n   * limit/usage bar belongs to the DASHBOARD alone — it moves once a billing\n   * period, whereas these two are what stop a session — so it is deliberately\n   * absent here. A window with no cap is left out: there is no ratio to draw.\n   */\n  footerBars: PanelFooterBar[]\n  /**\n   * This period's spend in dollars, formatted; empty when the usage endpoint\n   * reported nothing. NOT drawn as its own row — the card's visible figures are\n   * the two windows' own spend (see {@link PanelFooterBar.detail}), and a\n   * separate period total would sit next to the weekly window's near-identical\n   * figure — so it rides the tooltip and the accessible name instead.\n   */\n  cost: string\n  /**\n   * The footer card's accessible name and tooltip: `Command Code · Pro ·\n   * 5-hour $0.04 / $3.00 (1%) · Weekly $1.32 / $6.00 (22%) · Spend $1.32`.\n   * Always starts with the visible title, so the accessible name contains the\n   * visible label.\n   */\n  footTitle: string\n  /** Every account, in rotation order (empty when there is nothing to show). */\n  accounts: PanelAccountView[]\n  /** Id of the account the panel opens on (the serving one), if any. */\n  selectedId: string | undefined\n  /** That account's view, for the footer card; undefined with no accounts. */\n  selected: PanelAccountView | undefined\n  /** A fetch is in flight and no data has landed for this paint. */\n  loading: boolean\n  /** No credential is configured at all. */\n  noKey: boolean\n  /** Report-level failure box; undefined when the report is usable. */\n  failure: PanelFailureView | undefined\n  /** A fetch failed while data is still on screen. */\n  staleError: string | undefined\n  /** Endpoint-level partial failure note; undefined when every endpoint answered. */\n  partial: PanelKey | undefined\n  /** Freshness line, empty when nothing has been fetched. */\n  updatedAt: string\n}\n\n/** Inputs {@link buildPanelView} needs beyond the usage snapshot. */\nexport interface PanelViewInput {\n  usage: UsagePageState\n  /** Whether any account holds a credential (the settings controller's fact). */\n  apiKeyConfigured: boolean\n  /** Account ids staged for removal; hidden here immediately, like the settings card. */\n  removingIds?: readonly string[]\n}\n\n/** A quota window's state as the wire carries it. */\ninterface WindowInput {\n  used: number\n  cap: number\n  exceeded: boolean\n  resetAt: number\n}\n\n/** `$1.23`, and `$0.0123` only when the amount is too small for cents to show it. */\nfunction money(value: number): string {\n  if (value === 0) return formatMoney(0)\n  return Math.abs(value) < 0.01 ? formatMoneyExact(value) : formatMoney(value)\n}\n\n/**\n * What a figure shows when the endpoint that carries it did not report one.\n * A dash, never a zero: the panel exists to state what the account has spent,\n * so \"we were not told\" has to look different from \"nothing\".\n */\nconst UNREPORTED = '—'\n\n/** Local reset time; empty when the endpoint reported none. */\nfunction resetText(ms: number): string {\n  if (ms <= 0) return ''\n  return new Date(ms).toLocaleString()\n}\n\n/** Local short date; empty when unset. */\nfunction dateText(ms: number): string {\n  if (ms <= 0) return ''\n  return new Date(ms).toLocaleDateString()\n}\n\n/** Local time-of-day; empty when unset. */\nfunction timeText(ms: number): string {\n  if (ms <= 0) return ''\n  return new Date(ms).toLocaleTimeString()\n}\n\n/**\n * Consumption as a percentage, NOT clamped at 100 — an over-quota window\n * reports its real overshoot (150%), which is what the printed figure should\n * say. Bar widths clamp separately via {@link barPercent}.\n */\nfunction rawPercent(used: number, cap: number): number {\n  if (cap <= 0) return 0\n  return Math.round((used / cap) * 100)\n}\n\n/** A percentage usable as a CSS width, clamped into [0, 100]. */\nfunction barPercent(percent: number): number {\n  return Math.min(100, Math.max(0, percent))\n}\n\n/** Build one quota-window view. */\nfunction windowView(label: PanelKey, limit: WindowInput): PanelWindowView {\n  const percent = rawPercent(limit.used, limit.cap)\n  const capped = limit.cap > 0\n  return {\n    label,\n    // Spend only: an uncapped window has no denominator, so its row pairs this\n    // figure with the \"unlimited\" label instead of a `used / cap` it lacks.\n    value: capped ? `${money(limit.used)} / ${money(limit.cap)}` : money(limit.used),\n    capped,\n    percent,\n    barPercent: barPercent(percent),\n    exceeded: limit.exceeded,\n    resetsAt: resetText(limit.resetAt),\n  }\n}\n\n/**\n * Build the monthly credit view from the two endpoints that carry it.\n *\n * The limit is the PLAN's credit total, not the billing endpoint's\n * `monthlyCredits` — that field is a remaining balance (see\n * {@link PanelMonthlyView}). Unknown plans (no `monthlyCredits` on the plan\n * record) therefore still show their balances, just without a ratio.\n *\n * The trap this guards: a MISSING balance is not a consumed one. The billing\n * endpoint is one of four the report fetches in parallel, so it fails on its\n * own while the plan still arrives — and reading the absent balance as 0 would\n * turn that partial failure into `limit - 0 = limit`, i.e. a confident \"100%\n * used, quota exhausted\" for an account that may have spent nothing. The\n * official CLI draws no meter unless the credits payload is present at all\n * (`hasCreditsInfo`), so \"unreported\" is the upstream-faithful reading here\n * too. Every derived figure stays a placeholder until the balance reported.\n */\nfunction monthlyView(report: CommandCodeUsageReport): PanelMonthlyView | undefined {\n  const credits = report.credits\n  const plan = report.plan\n  if (credits === undefined && plan === undefined) return undefined\n\n  const limitValue = plan?.monthlyCredits ?? null\n  // Only an EXPLICIT `false` means the balance was omitted. An unset flag comes\n  // from a Host half older than the field, which always sent a real number, so\n  // it must keep rendering instead of turning into a dash everywhere.\n  const remainingReported = credits !== undefined && credits.monthlyReported !== false\n  const remaining = remainingReported ? Math.max(0, credits.monthlyCredits) : 0\n  // A ratio needs BOTH halves: the plan's total and the balance left of it.\n  const known = limitValue !== null && limitValue > 0 && remainingReported\n  const used = known ? Math.max(0, limitValue - remaining) : 0\n  const percent = known ? rawPercent(used, limitValue) : 0\n\n  return {\n    known,\n    limit: limitValue !== null ? money(limitValue) : UNREPORTED,\n    used: known ? money(used) : UNREPORTED,\n    remaining: remainingReported ? money(remaining) : UNREPORTED,\n    purchased: credits !== undefined && credits.purchasedReported !== false ? money(Math.max(0, credits.purchasedCredits)) : UNREPORTED,\n    free: credits !== undefined && credits.freeReported !== false ? money(Math.max(0, credits.freeCredits)) : UNREPORTED,\n    percent,\n    barPercent: barPercent(percent),\n    exhausted: known && remaining <= 0,\n    periodEnds: dateText(plan?.currentPeriodEnd ?? 0),\n  }\n}\n\n/** Build one account's view. */\nfunction accountView(entry: CommandCodeAccountUsage): PanelAccountView {\n  const { report } = entry\n  const account = report.account\n  const plan = report.plan\n  const credits = report.credits\n  const usage = report.usage\n\n  const stats: PanelStatView[] = []\n  if (usage !== undefined) {\n    stats.push({\n      label: 'requests',\n      value: String(usage.completedCount),\n      sub: `${usage.failedCount} ${panelText('failed')}`,\n    })\n    stats.push({ label: 'successRate', value: `${formatSuccessRate(usage.successRate)}%`, sub: '' })\n    stats.push({\n      label: 'spend',\n      value: formatMoneyExact(usage.totalCost),\n      sub: `${formatMoney(usage.totalCredits)} credits`,\n    })\n    stats.push({\n      label: 'tokens',\n      value: formatTokensCompact(usage.totalTokensIn + usage.totalTokensOut),\n      sub: `${formatTokensCompact(usage.totalTokensIn)} ${panelText('tokensIn')} / ${formatTokensCompact(usage.totalTokensOut)} ${panelText('tokensOut')}`,\n    })\n  }\n\n  const windows: PanelWindowView[] = []\n  // One row per window the endpoint actually REPORTED. An account on an\n  // unlimited plan reports none, and drawing two zero-cap rows for it would\n  // invent a limit the account does not have; a window that reported\n  // `cap === 0` is uncapped spend and does get a row, labelled as such.\n  if (credits?.fiveHour !== undefined) windows.push(windowView('fiveHour', credits.fiveHour))\n  if (credits?.weekly !== undefined) windows.push(windowView('weekly', credits.weekly))\n\n  // Rotation/credential state: the serving account first, then the two marks\n  // the pool can carry, then a cooldown whose end time is known.\n  let mark: PanelKey | undefined\n  if (entry.active) mark = 'active'\n  else if (entry.mark === 'invalid-credential') mark = 'invalidKey'\n  else if (entry.cooldownUntil > 0 || entry.mark === 'rate-limit') mark = 'coolingDown'\n\n  return {\n    id: entry.id,\n    label: entry.label,\n    owner: account === undefined ? '' : account.userName || account.name,\n    planName: plan?.name ?? '',\n    planStatus: plan !== undefined && plan.status !== '' && plan.status !== 'active' ? plan.status : '',\n    mark,\n    cooldownUntil: entry.cooldownUntil > 0 ? resetText(entry.cooldownUntil) : '',\n    unconfigured: !entry.configured,\n    periodEnds: dateText(plan?.currentPeriodEnd ?? 0),\n    active: entry.active,\n    monthly: monthlyView(report),\n    windows,\n    stats,\n  }\n}\n\n/** The report-level failure box, or undefined when the report is usable. */\nfunction failureView(state: UsagePageState): PanelFailureView | undefined {\n  const blocked = state.report?.accounts.find((entry) => entry.report.blocked !== undefined)?.report.blocked\n  if (blocked === 'invalid-key') {\n    return { title: 'errorInvalidKey', hint: 'errorInvalidKeyHint', detail: '' }\n  }\n  if (blocked === 'service-unavailable') {\n    return { title: 'errorServiceUnavailable', hint: 'errorServiceUnavailableHint', detail: '' }\n  }\n  if (blocked === 'network') {\n    return { title: 'errorNetwork', hint: 'errorNetworkHint', detail: '' }\n  }\n  // A transport-level failure (unmounted Remote, offline browser) arrives as\n  // the controller's own error rather than as a blocked report.\n  if (state.status === 'error' && state.report === undefined) {\n    return { title: 'errorGeneric', hint: 'errorGeneric', detail: state.error ?? '' }\n  }\n  return undefined\n}\n\n/**\n * Every panel string, resolved once per projection. One object with all keys\n * (rather than per-field lookups in the components) keeps the copy table and\n * the render sites in lockstep: a key cannot be read from `text` unless\n * {@link PANEL_COPY} declares it.\n */\nfunction panelStrings(): Record<PanelKey, string> {\n  const keys = Object.keys(PANEL_COPY) as PanelKey[]\n  const out = {} as Record<PanelKey, string>\n  for (const key of keys) out[key] = panelText(key)\n  return out\n}\n\n/**\n * Project the shared usage snapshot into the panel's render tree.\n *\n * Deduplication matches the settings card: hand-edited settings can name one\n * credential twice, and removal staging hides an account before the post-save\n * refresh lands.\n */\nexport function buildPanelView(input: PanelViewInput): PanelView {\n  const { usage } = input\n  const hidden = new Set(input.removingIds ?? [])\n  const seen = new Set<string>()\n  const entries = (usage.report?.accounts ?? []).filter((entry) => {\n    if (hidden.has(entry.id)) return false\n    if (seen.has(entry.id)) return false\n    seen.add(entry.id)\n    return true\n  })\n  const accounts = entries.map(accountView)\n  const selectedEntry = entries.find((entry) => entry.active) ?? entries[0]\n  const selectedView = accounts.find((view) => view.id === selectedEntry?.id)\n\n  // The footer card stacks BOTH quota windows — the two limits an account\n  // actually runs into — 5-hour first (the tighter and nearer one), then\n  // weekly. `barPercent` clamps the fill; the printed percentage keeps the true\n  // consumption, so an over-cap window still reads 150%.\n  const footerBars: PanelFooterBar[] = []\n  const windowBars: Array<[PanelKey, WindowInput | undefined]> = [\n    ['fiveHourShort', selectedEntry?.report.credits?.fiveHour],\n    ['weeklyShort', selectedEntry?.report.credits?.weekly],\n  ]\n  for (const [label, window] of windowBars) {\n    if (window === undefined || window.cap <= 0) continue\n    const percent = rawPercent(window.used, window.cap)\n    footerBars.push({\n      label,\n      percent: `${percent}%`,\n      barPercent: barPercent(percent),\n      warn: window.exceeded,\n      detail: `${money(window.used)} / ${money(window.cap)}`,\n    })\n  }\n\n  // The card's one non-ratio figure: what this period has cost in dollars.\n  const totalCost = selectedEntry?.report.usage?.totalCost\n  const cost = totalCost === undefined ? '' : money(totalCost)\n\n  let status = ''\n  if (entries.length > 0 && !entries.some(entry => entry.configured)) status = panelText('unconfigured')\n  else if (selectedView?.mark !== undefined && selectedView.mark !== 'active') status = panelText(selectedView.mark)\n  else if (selectedEntry === undefined) status = panelText('unavailable')\n\n  const planName = selectedView !== undefined && selectedView.planName !== '' ? selectedView.planName : panelText('nav')\n  // `planName` falls back to the panel name, so it is only a second part when it\n  // actually names a plan — otherwise the title would read `Command Code ·\n  // Command Code`.\n  const titleParts = planName === panelText('nav') ? [planName] : [panelText('nav'), planName]\n  for (const bar of footerBars) {\n    const figures = bar.detail === '' ? '' : ` ${bar.detail}`\n    titleParts.push(`${panelText(bar.label)}${figures} (${bar.percent})`)\n  }\n  if (cost !== '') titleParts.push(`${panelText('spend')} ${cost}`)\n\n  return {\n    text: panelStrings(),\n    planName,\n    status,\n    footerBars,\n    cost,\n    footTitle: titleParts.join(' · '),\n    accounts,\n    selectedId: selectedEntry?.id,\n    selected: selectedView,\n    loading: usage.status === 'loading' && usage.report === undefined,\n    noKey: entries.length > 0 && !entries.some(entry => entry.configured),\n    failure: failureView(usage),\n    staleError: usage.status === 'error' && usage.report !== undefined ? usage.error ?? '' : undefined,\n    partial: (usage.report?.accounts.some((entry) => entry.report.failures.length > 0 && entry.report.blocked === undefined) ?? false)\n      ? 'partial'\n      : undefined,\n    updatedAt: timeText(usage.fetchedAt ?? 0),\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Auto refresh (one shared loop, started by whichever surface mounts first)\n// ---------------------------------------------------------------------------\n\n/**\n * How often the panel re-reads the report while a surface is mounted. The\n * quota windows move slowly and one report costs four upstream calls, so this\n * is a background freshness tick, not a live meter.\n */\nexport const PANEL_AUTO_REFRESH_MS = 120_000\n\n/** The narrow face of `CommandCodeUsageController` this module drives. */\nexport interface RefreshSource {\n  state(): UsagePageState\n  refresh(): Promise<void>\n}\n\n/** Timer seam: injectable so tests never wait on real time. */\nexport interface AutoRefreshTimer {\n  set(callback: () => void, ms: number): unknown\n  clear(handle: unknown): void\n}\n\n/** The default timer (the client bundle runs in a browser; node tests inject one). */\nconst REAL_TIMER: AutoRefreshTimer = {\n  set: (callback, ms) => setTimeout(callback, ms),\n  clear: (handle) => clearTimeout(handle as ReturnType<typeof setTimeout>),\n}\n\n/** Live mount count of {@link startPanelAutoRefresh}. */\nlet references = 0\n/** Owner ticket of the running loop, if any. */\nlet activeTicket: number | undefined\n/** Ticket handed to the next starter. */\nlet ticketSeq = 0\n/** Pending timer handle of the running loop. */\nlet handle: unknown\n\n/**\n * Start the shared auto refresh. One fetch when the surface appears (the\n * sidebar row is the point of the panel — it must be current, not wait for a\n * click), then a tick every {@link PANEL_AUTO_REFRESH_MS} while a surface\n * stays mounted.\n *\n * Reference-counted: the sidebar entry and the dashboard can be mounted at\n * once, so only the first start fetches and only the last stop halts the loop.\n * Every tick goes through `usage.refresh()`, which already collapses a\n * concurrent fetch onto the in-flight one — a tick never double-fetches\n * against the settings page's own refresh.\n *\n * @param usage - the shared usage controller.\n * @param isConfigured - whether a credential exists right now (re-read per tick).\n * @param timer - timer seam for tests.\n * @returns the disposer that drops this surface's reference.\n */\nexport function startPanelAutoRefresh(\n  usage: RefreshSource,\n  isConfigured: () => boolean,\n  timer: AutoRefreshTimer = REAL_TIMER,\n): () => void {\n  references += 1\n  const ticket = ++ticketSeq\n  const tick = (): void => {\n    if (activeTicket !== ticket) return\n    if (isConfigured()) void usage.refresh()\n    handle = timer.set(tick, PANEL_AUTO_REFRESH_MS)\n  }\n\n  if (activeTicket === undefined) {\n    activeTicket = ticket\n    handle = timer.set(tick, PANEL_AUTO_REFRESH_MS)\n    // First paint: refresh immediately so the row is never blank on arrival.\n    if (isConfigured()) void usage.refresh()\n  }\n\n  let stopped = false\n  return () => {\n    if (stopped) return\n    stopped = true\n    references -= 1\n    // Still mounted elsewhere: drop this reference only. Note the check is the\n    // REFCOUNT, not this surface's ticket — the surface that started the loop\n    // is not necessarily the last one to unmount, and a first-unmounted owner\n    // must not be the reason a tick keeps firing.\n    if (references > 0) return\n    activeTicket = undefined\n    if (handle !== undefined) {\n      timer.clear(handle)\n      handle = undefined\n    }\n  }\n}\n\n/**\n * Drop every live reference and halt the loop without a timer.\n *\n * Exported for tests only: the loop's state is module-level on purpose (two\n * surfaces, one upstream poll), so a test that mounts a surface must be able\n * to start from a clean slate. Production code releases through the disposer\n * {@link startPanelAutoRefresh} returns — the plugin's fiber unwinds it.\n */\nexport function resetPanelAutoRefresh(): void {\n  references = 0\n  activeTicket = undefined\n  handle = undefined\n}\n","/**\n * React components for the Command Code plans & quota panel (browser half):\n * the sidebar footer card and the dashboard it opens in the center column.\n *\n * Both render one {@link PanelView} projected by `./panel.ts` — no fact is\n * derived here. Strings arrive as keys into `view.text`, and every one of them\n * is English, because the view is built from `./panel-copy.ts` rather than the\n * harness `ctx.locale` namespace (which follows the user's language and would\n * render this panel in Chinese on a Chinese harness — the thing this surface\n * exists to avoid).\n *\n * The footer card is the panel's home: the sidebar shell renders it in the foot\n * area directly above the Settings seat, so each quota window's own spend and\n * limit — the 5-hour and the weekly one — are on screen without opening\n * anything. Clicking it selects the `main` panel this file also renders — and\n * unlike a `sidebar.panellist` row, whose button chrome and label the SHELL\n * owns, this entry owns its whole surface and therefore calls `open()` itself.\n *\n * Styles ride the stylesheet `./panel-styles.ts` returns, injected once by\n * the client entry; classes are `ccp-` prefixed to stay clear of the settings\n * page's `cc-` set.\n *\n * @module dsh-commandcode-provider/client/panel-view\n */\n\nimport { useEffect, useState } from 'react'\nimport { Button } from '@deepseek-ai/dsh-client-ui-primitives'\nimport type { SnapshotStore } from './snapshot-store.ts'\nimport type { UsagePageState } from './usage.ts'\nimport type { SettingsPageState } from './settings.ts'\nimport { buildPanelView } from './panel.ts'\nimport type { PanelAccountView, PanelStatView, PanelView, PanelWindowView } from './panel.ts'\nimport type { PanelKey } from './panel-copy.ts'\n// SlotMap merge for `main` / `sidebar.footer.action` (load-bearing: the slots\n// this file's components register into are typed only by that augmentation).\nimport './panel-slots.ts'\n\n/**\n * Owner share of the sidebar-foot action hole: the shell renders the foot area\n * and hands each action only the column fold state. There is no button chrome\n * and no `label` seat — the entry is the whole surface.\n */\nexport interface SidebarFooterActionOwnerProps {\n  /** Whether the sidebar renders wide content (false = 56px rail). */\n  wide: boolean\n}\n\n/**\n * The injected face both panel slots carry. Bound by the client entry so the\n * components stay unaware of the settings controller, the login controller,\n * the layout service and the module-level auto-refresh loop.\n *\n * NOTE the split from {@link PanelComponentProps}: this is the face the\n * registration's `inject` factory RETURNS, and the renderer does not hand it to\n * the component verbatim. `bindInjectSources` destructures the `hooks`\n * compartment OUT of the face and re-exposes each member as a `use<Name>` prop\n * (`commandCodeUsage` → `useCommandCodeUsage`). A component that reads\n * `props.hooks.*` therefore finds `undefined` at runtime and crashes on render\n * — which the slot renderer contains by ABDICATING the entry, so the surface\n * vanishes with no visible error. Read the `useX` seats instead.\n */\nexport interface PanelInjected {\n  hooks: {\n    commandCodeUsage: SnapshotStore<UsagePageState>\n    commandCodeSettings: SnapshotStore<SettingsPageState>\n  }\n  /** Fetch the report now (the dashboard's Refresh action). */\n  refresh(): void\n  /** Start the shared background poll for this mount; returns its disposer. */\n  startAutoRefresh(): () => void\n  /** Select this panel in the center column (`ctx.layout.selectPanel`). */\n  open(): void\n}\n\n/**\n * The props a panel component actually receives: the bound `useX` seats (what\n * {@link PanelInjected}'s `hooks` compartment becomes), the pass-through\n * actions, and no raw `hooks` key.\n *\n * `buildPanelView` is cheap (one pass over the account list) and recomputing it\n * per notification is what keeps a store update from ever rendering a stale\n * quota, so the selector is deliberately the whole snapshot.\n */\nexport interface PanelComponentProps {\n  useCommandCodeUsage<T>(selector: (state: UsagePageState) => T): T\n  useCommandCodeSettings<T>(selector: (state: SettingsPageState) => T): T\n  refresh(): void\n  startAutoRefresh(): () => void\n  open(): void\n}\n\n/** Props of the sidebar footer card: the panel face plus the shell's fold state. */\nexport interface CommandCodeFooterEntryProps extends PanelComponentProps, SidebarFooterActionOwnerProps {}\n\n/** The panel's view, recomputed from both seats on every notification. */\nfunction usePanelView(props: PanelComponentProps): PanelView {\n  const usage = props.useCommandCodeUsage((state) => state)\n  const settings = props.useCommandCodeSettings((state) => state)\n  return buildPanelView({\n    usage,\n    apiKeyConfigured: settings.anyAccountConfigured,\n    removingIds: settings.accountsRemoving,\n  })\n}\n\n/**\n * The quota ring. One glyph serves the rail button, the footer card's top row\n * and the dashboard header: a faint track plus an arc whose sweep is the\n * consumption, drawn from 12 o'clock. Circumference 2πr = 45.55 at r = 7.25.\n */\nfunction Ring({ percent, warn, size }: { percent: number; warn: boolean; size: number }) {\n  const clamped = Math.min(100, Math.max(0, percent))\n  const circumference = 45.55\n  // Rounded to three decimals: the raw product lands on floats like\n  // 34.162499999999994, which is a needless DOM diff churn.\n  const dashoffset = Math.round(circumference * (1 - clamped / 100) * 1000) / 1000\n  return (\n    <span className=\"ccp-glyph\" aria-hidden=\"true\">\n      <svg viewBox=\"0 0 20 20\" width={size} height={size} focusable=\"false\">\n        <circle cx=\"10\" cy=\"10\" r=\"7.25\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" opacity=\"0.4\" />\n        <circle\n          cx=\"10\"\n          cy=\"10\"\n          r=\"7.25\"\n          fill=\"none\"\n          stroke={warn ? 'var(--dsw-alias-state-error-primary)' : 'currentColor'}\n          strokeWidth=\"2.5\"\n          strokeLinecap=\"round\"\n          strokeDasharray={String(circumference)}\n          strokeDashoffset={String(dashoffset)}\n          transform=\"rotate(-90 10 10)\"\n        />\n      </svg>\n    </span>\n  )\n}\n\n/** One labelled bar. `compact` drops the reset line; the footer draws its own. */\nfunction QuotaBar({ label, value, percent, barPercent, warn, resetsAt, resetsLabel }: {\n  label: string\n  value: string\n  percent: string\n  barPercent: number\n  warn: string\n  resetsAt: string\n  resetsLabel: string\n}) {\n  const clamped = Math.min(100, Math.max(0, barPercent))\n  return (\n    <div className=\"ccp-window\">\n      <div className=\"ccp-windowHead\">\n        <span className=\"ccp-windowLabel\">{label}</span>\n        {warn !== '' ? <span className=\"ccp-warnTag\">{warn}</span> : null}\n        <span className=\"ccp-spacer\" />\n        {value !== '' ? <span className=\"ccp-windowValue\">{value}</span> : null}\n        <span className=\"ccp-windowPct\">{percent}</span>\n      </div>\n      <div className=\"ccp-bar\" role=\"progressbar\" aria-label={label} aria-valuemin={0} aria-valuemax={100} aria-valuenow={clamped}>\n        <div className={warn !== '' ? 'ccp-barFill ccp-barFillWarn' : 'ccp-barFill'} style={{ width: `${clamped}%` }} />\n      </div>\n      {resetsAt !== '' ? <p className=\"ccp-windowReset\">{resetsLabel} {resetsAt}</p> : null}\n    </div>\n  )\n}\n\n/** A labelled figure. */\nfunction Tile({ label, value, sub }: { label: string; value: string; sub?: string }) {\n  return (\n    <div className=\"ccp-tile\">\n      <span className=\"ccp-tileLabel\">{label}</span>\n      <span className=\"ccp-tileValue\">{value}</span>\n      {sub !== undefined && sub !== '' ? <span className=\"ccp-tileSub\">{sub}</span> : null}\n    </div>\n  )\n}\n\n/** One usage tile. */\nfunction StatTile({ stat, label }: { stat: PanelStatView; label: string }) {\n  return <Tile label={label} value={stat.value} sub={stat.sub} />\n}\n\n/** The rotation/credential badge line for one account. */\nfunction markText(account: PanelAccountView, text: (key: PanelKey) => string): string {\n  if (account.mark === undefined) return ''\n  if (account.mark === 'coolingDown' && account.cooldownUntil !== '') {\n    return `${text('coolingDown')} · ${account.cooldownUntil}`\n  }\n  return text(account.mark)\n}\n\n/** `Default account` → `D`; used for the card's monogram chip. */\nfunction initial(label: string): string {\n  const trimmed = label.trim()\n  return trimmed === '' ? '?' : trimmed[0]!.toUpperCase()\n}\n\n/**\n * One account's full report: the monthly limit/usage bar, the two quota\n * windows, then the credit and usage totals.\n */\nfunction AccountCard({ account, view }: { account: PanelAccountView; view: PanelView }) {\n  const text = (key: PanelKey): string => view.text[key] ?? key\n  const mark = markText(account, text)\n  const monthly = account.monthly\n\n  return (\n    <section className=\"ccp-card\" aria-label={account.label}>\n      <header className=\"ccp-cardHead\">\n        <span className=\"ccp-avatar\" aria-hidden=\"true\">{initial(account.label)}</span>\n        <span className=\"ccp-cardIdentity\">\n          <span className=\"ccp-cardTitle\">{account.label}</span>\n          {account.owner !== '' ? <span className=\"ccp-cardOwner\">{account.owner}</span> : null}\n        </span>\n        <span className=\"ccp-spacer\" />\n        {account.planName !== '' ? <span className=\"ccp-badge\">{account.planName}</span> : null}\n        {account.planStatus !== '' ? <span className=\"ccp-badge ccp-badgeWarn\">{account.planStatus}</span> : null}\n        {mark !== '' ? (\n          <span className={account.mark === 'invalidKey' ? 'ccp-badge ccp-badgeError' : 'ccp-badgeMuted'}>{mark}</span>\n        ) : null}\n        {account.periodEnds !== '' ? (\n          <span className=\"ccp-meta\">{text('periodEnds')} {account.periodEnds}</span>\n        ) : null}\n      </header>\n\n      {account.unconfigured ? <p className=\"ccp-hint\">{text('unconfigured')}</p> : null}\n\n      {monthly !== undefined && monthly.known ? (\n        <QuotaBar\n          label={text('monthly')}\n          value={`${monthly.used} / ${monthly.limit}`}\n          percent={`${monthly.percent}%`}\n          barPercent={monthly.barPercent}\n          warn={monthly.exhausted ? text('exhausted') : ''}\n          resetsAt=\"\"\n          resetsLabel=\"\"\n        />\n      ) : (\n        <div className=\"ccp-planRow\">\n          {/* The plan is a fact the card already shows in its header badge; what\n              is missing here is the RATIO, so the row names the plan whenever\n              the report carries one and falls back to a placeholder only when\n              the report itself is silent. */}\n          <span className=\"ccp-fieldLabel\">{text('plan')}</span>\n          <span className=\"ccp-planName\">{account.planName !== '' ? account.planName : text('unavailable')}</span>\n        </div>\n      )}\n\n      {/* A balance the billing endpoint DID report, so a card without a ratio\n          still states something true instead of nothing. */}\n      {monthly !== undefined && monthly.remaining !== '—' ? (\n        <div className=\"ccp-planRow\">\n          <span className=\"ccp-fieldLabel\">{text('remaining')}</span>\n          <span className=\"ccp-planName\">{monthly.remaining}</span>\n        </div>\n      ) : null}\n\n      {account.windows.length > 0 ? (\n        <div className=\"ccp-windows\">\n          {account.windows.map((window: PanelWindowView) => (\n            <QuotaBar\n              key={window.label}\n              label={text(window.label)}\n              value={window.value}\n              percent={window.capped ? `${window.percent}%` : text('windowUnlimited')}\n              barPercent={window.barPercent}\n              warn={window.exceeded ? text('exceeded') : ''}\n              resetsAt={window.resetsAt}\n              resetsLabel={text('resets')}\n            />\n          ))}\n        </div>\n      ) : null}\n\n      {monthly !== undefined ? (\n        <div className=\"ccp-block\">\n          <h4 className=\"ccp-blockTitle\">{text('credits')}</h4>\n          <div className=\"ccp-tiles\">\n            <Tile label={text('monthlyLimit')} value={monthly.limit} />\n            <Tile label={text('monthlyUsed')} value={monthly.used} />\n            <Tile label={text('remaining')} value={monthly.remaining} />\n            <Tile label={text('purchased')} value={monthly.purchased} />\n            <Tile label={text('free')} value={monthly.free} />\n          </div>\n        </div>\n      ) : null}\n\n      {account.stats.length > 0 ? (\n        <div className=\"ccp-block\">\n          <h4 className=\"ccp-blockTitle\">{text('usage')}</h4>\n          <div className=\"ccp-tiles\">\n            {account.stats.map((stat) => (\n              <StatTile key={stat.label} stat={stat} label={text(stat.label)} />\n            ))}\n          </div>\n        </div>\n      ) : null}\n    </section>\n  )\n}\n\n/**\n * The center-column dashboard, registered into the layout's keyed `main` slot\n * under the same id the footer card selects, so the two are one navigation\n * entry: the card shows the plan, the monthly bar and the quota window; the\n * panel shows everything, including the per-account breakdown.\n */\nexport function CommandCodePanel(props: PanelComponentProps) {\n  const view = usePanelView(props)\n  const text = (key: PanelKey): string => view.text[key] ?? key\n  const [selectedId, setSelectedId] = useState<string | undefined>(undefined)\n\n  const startAutoRefresh = props.startAutoRefresh\n  useEffect(() => startAutoRefresh(), [startAutoRefresh])\n\n  const accounts = view.accounts\n  const selected = accounts.find((account) => account.id === selectedId)\n    ?? view.selected\n    ?? accounts[0]\n\n  return (\n    <div className=\"ccp-main\" role=\"region\" aria-label={text('nav')}>\n      <div className=\"ccp-mainInner\">\n        <header className=\"ccp-header\">\n          <div className=\"ccp-headerText\">\n            <h2 className=\"ccp-title\">{text('nav')}</h2>\n            <p className=\"ccp-subtitle\">{text('subtitle')}</p>\n          </div>\n          <span className=\"ccp-spacer\" />\n          {view.updatedAt !== '' ? <span className=\"ccp-meta\">{text('updated')} {view.updatedAt}</span> : null}\n          <Button\n            variant=\"ghost\"\n            size=\"sm\"\n            disabled={view.loading}\n            onClick={() => props.refresh()}\n          >\n            {view.loading ? text('refreshing') : text('refresh')}\n          </Button>\n        </header>\n\n        {view.noKey ? (\n          <div className=\"ccp-notice\">\n            <p className=\"ccp-noticeTitle\">{text('noKey')}</p>\n            <p className=\"ccp-noticeHint\">{text('noKeyHint')}</p>\n          </div>\n        ) : null}\n\n        {view.failure !== undefined ? (\n          <div className=\"ccp-notice ccp-noticeError\" role=\"alert\">\n            <p className=\"ccp-noticeTitle\">{text(view.failure.title)}</p>\n            <p className=\"ccp-noticeHint\">{text(view.failure.hint)}</p>\n            {view.failure.detail !== '' ? <p className=\"ccp-noticeDetail\">{view.failure.detail}</p> : null}\n          </div>\n        ) : null}\n\n        {!view.noKey && view.failure === undefined && accounts.length === 0 && view.loading ? (\n          <p className=\"ccp-hint\">{text('loading')}</p>\n        ) : null}\n\n        {view.staleError !== undefined && view.staleError !== '' ? (\n          <p className=\"ccp-hint\" role=\"status\">{text('errorGeneric')} — {view.staleError}</p>\n        ) : null}\n\n        {accounts.length > 1 ? (\n          <div className=\"ccp-tabs\" role=\"tablist\" aria-label={text('nav')}>\n            {accounts.map((account) => (\n              <button\n                key={account.id}\n                type=\"button\"\n                role=\"tab\"\n                aria-selected={selected?.id === account.id}\n                className={selected?.id === account.id ? 'ccp-tab ccp-tabActive' : 'ccp-tab'}\n                onClick={() => setSelectedId(account.id)}\n              >\n                {account.label}\n              </button>\n            ))}\n          </div>\n        ) : null}\n\n        {selected !== undefined ? <AccountCard account={selected} view={view} /> : null}\n\n        {view.partial !== undefined ? <p className=\"ccp-hint\">{text(view.partial)}</p> : null}\n      </div>\n    </div>\n  )\n}\n\n/**\n * The sidebar footer card, registered into `sidebar.footer.action` — the list\n * the shell renders in the sidebar's foot area directly ABOVE the Settings\n * seat, so the panel reads as a bottom-pinned sibling of Settings rather than\n * a global panel icon at the top of the column.\n *\n * The shell wraps nothing here, so this component owns the surface: the\n * button, its chrome and its accessible name. In the expanded column it draws\n * the title row, then one block per quota window (5-hour, then weekly) — the\n * window's own spend and limit (`$1.32 / $6.00`), its percentage and its bar —\n * and nothing else: the card's figures are the two windows the account runs\n * into, so the period total stays in the tooltip rather than taking a third\n * line. In the 56px rail it collapses to a 36px icon button carrying the ring,\n * matching the shell's own rail geometry. `wide` comes from the shell as an\n * owner prop — unlike the old `sidebar.panellist` row, this slot really does\n * supply it.\n */\nexport function CommandCodeFooterEntry(props: CommandCodeFooterEntryProps) {\n  const view = usePanelView(props)\n\n  const startAutoRefresh = props.startAutoRefresh\n  useEffect(() => startAutoRefresh(), [startAutoRefresh])\n\n  const text = (key: PanelKey): string => view.text[key] ?? key\n  // The ring tracks the tightest window — the 5-hour one whenever it is capped,\n  // which is the limit an account actually runs into first. `footerBars` is\n  // ordered that way, so the leading bar is the headline.\n  const headline = view.footerBars[0]\n  // The tooltip doubles as the accessible name; it always begins with the\n  // visible title, so the label the user reads is contained in the name.\n  const title = view.footTitle\n\n  if (!props.wide) {\n    return (\n      <button\n        type=\"button\"\n        className=\"ccp-railButton\"\n        aria-label={title}\n        title={title}\n        onClick={() => props.open()}\n      >\n        <Ring percent={headline?.barPercent ?? 0} warn={headline?.warn ?? false} size={18} />\n      </button>\n    )\n  }\n\n  return (\n    <button\n      type=\"button\"\n      className=\"ccp-foot\"\n      aria-label={title}\n      title={title}\n      onClick={() => props.open()}\n    >\n      <span className=\"ccp-footTop\">\n        <Ring percent={headline?.barPercent ?? 0} warn={headline?.warn ?? false} size={16} />\n        <span className=\"ccp-footName\">{text('nav')}</span>\n        <span className=\"ccp-spacer\" />\n        {view.status !== '' ? (\n          <span className=\"ccp-badgeMuted\">{view.status}</span>\n        ) : view.planName !== text('nav') ? (\n          <span className=\"ccp-badge\">{view.planName}</span>\n        ) : null}\n      </span>\n\n      {view.footerBars.map((bar) => (\n        <span className=\"ccp-footRow\" key={bar.label}>\n          <span className=\"ccp-footHead\">\n            <span className=\"ccp-footLabel\">{text(bar.label)}</span>\n            <span className=\"ccp-spacer\" />\n            {bar.detail !== '' ? <span className=\"ccp-footAmount\">{bar.detail}</span> : null}\n            <span className=\"ccp-footPct\">{bar.percent}</span>\n          </span>\n          <span className=\"ccp-footBar\">\n            <span\n              className={bar.warn ? 'ccp-footFill ccp-footFillWarn' : 'ccp-footFill'}\n              style={{ width: `${bar.barPercent}%` }}\n            />\n          </span>\n        </span>\n      ))}\n    </button>\n  )\n}\n","/** Shared, JSON-only billing facts. No Host or browser runtime imports. */\nimport type { CommandCodeModelPrice, CommandCodeModelRates, CommandCodePriceTable } from './usage-wire.ts'\n\nexport interface CostTokens {\n  uncachedInputTokens: number\n  outputTokens: number\n  cacheReadTokens: number\n  cacheWriteTokens: number\n}\n\n/** Requests with identical model/rates are folded into one group. */\nexport interface CostUsageGroup {\n  provider: string\n  model: string\n  at: number | null\n  contextTokens: number\n  tokens: CostTokens\n}\n\nexport interface SessionCostFacts {\n  pricingKey: number\n  groups: CostUsageGroup[]\n}\n\nexport const zeroCostTokens = (): CostTokens => ({ uncachedInputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 })\nexport const COST_TOKEN_KEYS = ['uncachedInputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens'] as const\n\nexport function peakHour(at: number, windows: ReadonlyArray<readonly [number, number]>): boolean {\n  const time = new Date(at)\n  return time.getUTCDay() !== 0 && time.getUTCDay() !== 6\n    && windows.some(([start, end]) => time.getUTCHours() >= start && time.getUTCHours() < end)\n}\n\n/**\n * All prompt billing buckets determine a request's band, never cumulative session input.\n *\n * A tiered model returns the matching band and does NOT then apply `peak`: the\n * page publishes those two dimensions independently, no row carries both today,\n * and the generator would report a tiered row on every sync — so the combination\n * becoming real is visible before it reaches a user. This ordering is a latent\n * choice, not a verified upstream rule.\n */\nexport function requestRates(price: CommandCodeModelPrice, at: number | null, contextTokens: number, table: CommandCodePriceTable): CommandCodeModelRates {\n  // The first band whose bound accepts the prompt. ORDER IS LOAD-BEARING, and\n  // both producers enforce it: the generator refuses non-ascending bounds or a\n  // bounded last band, and the wire parser rejects the same shapes — so a\n  // conforming table cannot present bands out of order, and this `find` cannot\n  // select a band a later one should have won.\n  const tier = price.contextTiers?.find(tier => tier.maxContext === undefined || contextTokens <= tier.maxContext)\n  if (tier !== undefined) return tier\n  return price.peak !== undefined && at !== null && peakHour(at, table.peakHours) ? price.peak : price\n}\n\n/** Cache version and wire guard: changing bands/rates must refold historical groups. */\nexport function pricingKey(table: CommandCodePriceTable): number {\n  const rates = (r: CommandCodeModelRates) => [r.inputCost, r.outputCost, r.cacheReadCost, r.cacheWriteCost ?? null]\n  const canonical = JSON.stringify(['commandCodeCost-v1', table.peakHours, table.models.map(p => [p.id, p.slug, p.free === true, rates(p), p.peak ? rates(p.peak) : null, p.contextTiers?.map(t => [t.maxContext ?? null, rates(t)]) ?? null])])\n  let hash = 2166136261\n  for (const c of canonical) hash = Math.imul(hash ^ c.charCodeAt(0), 16777619) >>> 0\n  return hash\n}\n\n/** Only safe to merge requests whose billing classification is identical. */\nexport function costGroupKey(group: CostUsageGroup, table: CommandCodePriceTable): string {\n  const price = table.models.find(p => p.id === group.model || p.slug === group.model)\n  return JSON.stringify([group.provider, group.model, price === undefined ? null : requestRates(price, group.at, group.contextTokens, table), group.at === null])\n}\n","/**\n * Session-cost view model for the composer readout.\n *\n * Deliberately JSX-free and React-free, mirroring `./panel.ts`: it turns the\n * session's token accounting plus the Host's price table into one presentation\n * value AND the exact text the two surfaces of the harness's token-usage UI\n * receive — the amount appended to the shipped pill, and the rows appended to\n * the shipped usage dialog. Node tests therefore drive the whole calculation,\n * and every user-visible string, without a DOM.\n *\n * The figures it prices are the session's DURABLE cumulative buckets, which is\n * what the composer's own \"N tokens\" pill reads too (`tokenUsage`), so the two\n * surfaces can never disagree about how much was used. Dollars are computed\n * here because Command Code publishes per-token rates and bills against\n * dollar-denominated windows; the account's own reported `totalCost` is a\n * billing PERIOD figure, not this session's.\n *\n * Three rules are load-bearing:\n *\n * 1. **Only Command Code usage is priced.** A session served by another\n *    provider must render nothing, never a Command Code estimate.\n * 2. **A missing rate is never invented.** The pricing page publishes\n *    input/output/cache-read rates for every model but a cache-WRITE rate for\n *    only some, so unpriced cache-write tokens are surfaced as such rather than\n *    charged at a guessed multiple of the input rate.\n * 3. **Unpriceable means invisible.** No usage, no model, no table, an unknown\n *    model, or all-zero buckets renders nothing at all — a confident `$0.00`\n *    would be a lie, and this module never returns one.\n *\n * @module dsh-commandcode-provider/client/session-cost\n */\n\nimport { COST_TOKEN_KEYS, pricingKey, requestRates, peakHour, zeroCostTokens, type SessionCostFacts } from '../cost-facts.ts'\nimport type { CommandCodeModelPrice, CommandCodeModelRates, CommandCodePriceTable } from '../usage-wire.ts'\nimport { formatMoney, formatMoneyExact, formatTokensCompact } from './usage.ts'\n\n/** Tokens per published rate unit — the pricing page quotes USD per million. */\nconst TOKENS_PER_RATE_UNIT = 1_000_000\n\n/** The provider route whose usage this surface prices. */\nconst COMMANDCODE_PROVIDER = 'commandcode'\n\n/**\n * The English copy for this surface.\n *\n * A plain constant, NOT the `settings.commandcode` locale namespace: like the\n * plans & quota panel, the readout stays English on a Chinese harness. Do not\n * route it through `ctx.locale`.\n */\nexport const SESSION_COST_COPY = {\n  /** Shown instead of an amount when the model costs nothing on every plan. */\n  free: 'Free',\n  /**\n   * The separator the readout prefixes itself with, so the cost reads as the\n   * last item of the token-usage pill's text run rather than a control beside\n   * it. Rendered with the same colour and margins the shipped pill uses\n   * between its own items.\n   */\n  separator: '·',\n  /** The heading the tooltip leads with. */\n  panelTitle: 'Session cost',\n  /** Marks an estimate from published rates rather than an invoice. */\n  approximate: '≈',\n  /** Tooltip line for the unpriced cache-write tokens. */\n  unpricedCacheWrite: 'cache write tokens have no published rate',\n  /** Tooltip line naming the rate half in force. */\n  peakRates: 'peak rates',\n  /** Tooltip line naming the rate half in force. */\n  offPeakRates: 'off-peak rates',\n  /** Tooltip line explaining the approximate marker. */\n  approximateNote: 'estimate from published rates, not the provider invoice',\n  /** Row/tooltip label for uncached prompt tokens. */\n  uncachedInput: 'uncached input',\n  /** Row/tooltip label for completion tokens. */\n  output: 'output',\n  /** Row/tooltip label for cache-served input tokens. */\n  cacheRead: 'cache read',\n  /** Row/tooltip label for cache-written input tokens. */\n  cacheWrite: 'cache write',\n} as const\n\n/**\n * The session's cumulative token buckets, as the `tokenUsage` projection\n * carries them. Declared structurally and defensively: this bundle does not\n * depend on the session-controller package, and a bucket the provider never\n * reported is absent rather than zero.\n */\nexport interface SessionUsageBuckets {\n  readonly uncachedInputTokens?: number\n  readonly outputTokens?: number\n  readonly cacheReadTokens?: number\n  readonly cacheWriteTokens?: number\n}\n\n/** One entry of the `modelSelection` projection. */\nexport interface SessionModelSelection {\n  readonly provider: string\n  readonly model: string\n}\n\n/**\n * The `modelSelection` projection: the selection the latest request consumed,\n * and the one the next request will use (falling back to the former).\n */\nexport interface SessionModelSelectionProjection {\n  readonly lastUsed: SessionModelSelection | null\n  readonly next: SessionModelSelection | null\n}\n\n/** Everything the view needs, already read off the seats by the component. */\nexport interface SessionCostInput {\n  /** Durable billing groups; absent on older Hosts means no trustworthy estimate. */\n  facts?: SessionCostFacts | undefined\n  /** The durable cumulative token buckets, or undefined before any request. */\n  usage: SessionUsageBuckets | undefined\n  /** The session's model selection fold, or undefined on an older Host. */\n  selection: SessionModelSelectionProjection | undefined\n  /** The Host's price table, or undefined until it lands. */\n  table: CommandCodePriceTable | undefined\n  /** Legacy caller field; historical request timestamps alone determine rates. */\n  now: number\n}\n\n/** One bucket's line in the usage dialog. */\nexport interface SessionCostBucketRow {\n  /** Stable key. */\n  key: 'uncachedInput' | 'cacheRead' | 'cacheWrite' | 'output'\n  /** Row label. */\n  label: string\n  /** Tokens charged in this bucket; a bucket that charged nothing withholds its\n   *  row rather than printing a meaningless zero. */\n  tokens: number\n  /** What this bucket cost, or undefined when the table has no rate for it. */\n  costText: string | undefined\n}\n\n/** The composer readout's presentation value. */\nexport interface SessionCostView {\n  /** Priced total in dollars. */\n  total: number\n  /** Visible amount text, e.g. `$0.0123` (or the free word, when free). */\n  value: string\n  /** Full tooltip/accessible text, including the bucket breakdown. */\n  title: string\n  /** Per-bucket lines for the usage dialog, in reading order. */\n  rows: SessionCostBucketRow[]\n  /** Caveat lines for the pill's tooltip (rate half, approximation, unpriced). */\n  notes: string[]\n  /** The model costs nothing on every plan right now. */\n  free: boolean\n  /** The model's `peak` rates are in force. */\n  peak: boolean\n  /** Cache-write tokens the table has no rate for (never guessed, so the\n   *  total is a floor rather than an estimate). */\n  unpricedCacheWriteTokens: number\n  /** Published-rate totals are estimates rather than provider invoices. */\n  approximate: boolean\n}\n\n/** A finite, non-negative count — anything else reads as absent. */\nfunction count(value: number | undefined): number {\n  return typeof value === 'number' && Number.isFinite(value) && value > 0 ? value : 0\n}\n\n/**\n * Whether `now` falls inside a peak-pricing window, per the windows that travel\n * with the price table. Monday–Friday (UTC) only, and each window is\n * end-exclusive — the same rule the Host snapshot applies when it labels the\n * model picker. The schedule is read from the wire rather than restated so\n * there is one definition of the windows, on the Host.\n */\nexport function isPeakHour(now: number, peakHours: ReadonlyArray<readonly [number, number]>): boolean {\n  const at = new Date(now)\n  const day = at.getUTCDay()\n  if (day === 0 || day === 6) return false\n  const hour = at.getUTCHours()\n  return peakHours.some(([start, end]) => hour >= start && hour < end)\n}\n\n/**\n * Index a price table for lookup. Rows are keyed by catalog id and by pricing\n * slug, both exact and lowercased, because a session reports a catalog id while\n * a row no catalog model claims is served under the page's slug.\n */\nfunction indexTable(table: CommandCodePriceTable): Map<string, CommandCodeModelPrice> {\n  const index = new Map<string, CommandCodeModelPrice>()\n  for (const price of table.models) {\n    for (const key of [price.id, price.slug]) {\n      if (typeof key !== 'string' || key === '') continue\n      if (!index.has(key)) index.set(key, price)\n      const lower = key.toLowerCase()\n      if (!index.has(lower)) index.set(lower, price)\n    }\n  }\n  return index\n}\n\n/**\n * The dollar cost of each bucket, plus the total and the unpriced remainder.\n *\n * Every bucket is charged at its own published rate; the cache-write bucket\n * contributes only when the model publishes a rate for it, otherwise its tokens\n * are returned as {@link SessionCostView.unpricedCacheWriteTokens} and its own\n * cost stays undefined so the panel can say so instead of printing a zero.\n */\ninterface SessionCostBreakdown {\n  uncachedInput: number\n  cacheRead: number\n  cacheWrite: number | undefined\n  output: number\n  total: number\n  unpricedCacheWriteTokens: number\n}\n\nfunction costOf(\n  usage: SessionUsageBuckets,\n  rates: CommandCodeModelRates,\n  free: boolean,\n): SessionCostBreakdown {\n  if (free) {\n    return { uncachedInput: 0, cacheRead: 0, cacheWrite: 0, output: 0, total: 0, unpricedCacheWriteTokens: 0 }\n  }\n  const perUnit = (tokens: number, rate: number): number => (tokens * rate) / TOKENS_PER_RATE_UNIT\n  const uncachedInput = perUnit(count(usage.uncachedInputTokens), rates.inputCost)\n  const output = perUnit(count(usage.outputTokens), rates.outputCost)\n  const cacheRead = perUnit(count(usage.cacheReadTokens), rates.cacheReadCost)\n  const cacheWriteTokens = count(usage.cacheWriteTokens)\n  const cacheWrite = rates.cacheWriteCost === undefined\n    ? undefined\n    : perUnit(cacheWriteTokens, rates.cacheWriteCost)\n  return {\n    uncachedInput,\n    cacheRead,\n    cacheWrite,\n    output,\n    total: uncachedInput + output + cacheRead + (cacheWrite ?? 0),\n    unpricedCacheWriteTokens: rates.cacheWriteCost === undefined ? cacheWriteTokens : 0,\n  }\n}\n\n/**\n * Amount text for a session cost.\n *\n * The panel's `money()` convention (2 decimals, 4 below a cent) is right for\n * billing windows, but a live session total starts far below a cent, where\n * `toFixed(4)` would print a flat `$0.0000` — which reads as broken rather than\n * as small. So a total under $0.0001 is stated as a bound instead.\n */\nexport function sessionCostAmount(total: number): string {\n  if (!Number.isFinite(total) || total <= 0) return formatMoney(0)\n  if (total < 0.0001) return `<$0.0001`\n  return total < 0.01 ? formatMoneyExact(total) : formatMoney(total)\n}\n\n/** One `label value` clause of the tooltip. */\nfunction clause(label: string, tokens: number): string | undefined {\n  return tokens > 0 ? `${label} ${formatTokensCompact(tokens)}` : undefined\n}\n\n/**\n * Build the composer readout, or undefined when there is nothing honest to show.\n *\n * Undefined is the correct answer for a session with no usage yet, a session\n * another provider served, a model the price table does not know, and a table\n * that has not landed — the pill simply is not there.\n */\nexport function buildSessionCostView(input: SessionCostInput): SessionCostView | undefined {\n  const { usage, table, facts } = input\n  if (!usage || !table || !facts || facts.pricingKey !== pricingKey(table)) return undefined\n  const totals = zeroCostTokens()\n  const index = indexTable(table)\n  const breakdown: SessionCostBreakdown = { uncachedInput: 0, cacheRead: 0, cacheWrite: 0, output: 0, total: 0, unpricedCacheWriteTokens: 0 }\n  let free = true\n  let peak = false\n  let partial = false\n  let priced = false\n  const notes: string[] = []\n  for (const group of facts.groups) {\n    for (const key of COST_TOKEN_KEYS) totals[key] += group.tokens[key]\n    if (group.provider !== COMMANDCODE_PROVIDER) { partial = true; continue }\n    const price = index.get(group.model)\n    if (!price) { partial = true; continue }\n    const isFree = price.free === true\n    free &&= isFree\n    if (price.peak && group.at === null) {\n      partial = true\n      notes.push('request time unavailable; off-peak lower bound')\n    }\n    const rates = requestRates(price, group.at, group.contextTokens, table)\n    const part = costOf(group.tokens, rates, isFree)\n    priced ||= isFree || part.total > 0\n    for (const key of ['uncachedInput', 'cacheRead', 'output', 'total', 'unpricedCacheWriteTokens'] as const) breakdown[key] += part[key]\n    breakdown.cacheWrite = (breakdown.cacheWrite ?? 0) + (part.cacheWrite ?? 0)\n    if (price.peak) {\n      const isPeak = group.at !== null && peakHour(group.at, table.peakHours)\n      peak ||= isPeak\n      notes.push(isPeak ? SESSION_COST_COPY.peakRates : SESSION_COST_COPY.offPeakRates)\n    }\n  }\n  // Both projections must describe the same durable cut. Never decorate token\n  // rows from a newer/older fold, and never price an old Host's cumulative usage.\n  if (COST_TOKEN_KEYS.some(key => totals[key] !== count(usage[key])) || !priced) return undefined\n  const { total, unpricedCacheWriteTokens } = breakdown\n  partial ||= unpricedCacheWriteTokens > 0\n  free &&= !partial\n  if (partial) notes.push('Command Code priced subtotal only; unpriced or other-provider usage excluded')\n  notes.push(SESSION_COST_COPY.approximateNote)\n  const uncachedInput = totals.uncachedInputTokens\n  const output = totals.outputTokens\n  const cacheRead = totals.cacheReadTokens\n  const cacheWrite = totals.cacheWriteTokens\n  // No billed token of any kind means there is nothing to report yet: a `$0.00`\n  // pill on a session that has not made a request would be noise, not\n  // information, and on a free model it would be redundant.\n  if (uncachedInput === 0 && output === 0 && cacheRead === 0 && cacheWrite === 0) return undefined\n\n  // Free priced groups do not establish zero spending for unpriced groups.\n  // Keep the pure-Free label and real sub-cent amounts, but never a zero subtotal.\n  if (!free && total <= 0) return undefined\n\n  const value = free\n    ? SESSION_COST_COPY.free\n    : `${partial ? '≥' : SESSION_COST_COPY.approximate}${sessionCostAmount(total)}`\n  const money = (amount: number | undefined): string | undefined =>\n    amount === undefined ? undefined : sessionCostAmount(amount)\n  // Reading order mirrors the prompt's own order: what was charged at the input\n  // rate, then the two cache buckets, then what the model produced.\n  const rows: SessionCostBucketRow[] = [\n    { key: 'uncachedInput', label: SESSION_COST_COPY.uncachedInput, tokens: uncachedInput, costText: money(breakdown.uncachedInput) },\n    { key: 'cacheRead', label: SESSION_COST_COPY.cacheRead, tokens: cacheRead, costText: money(breakdown.cacheRead) },\n    { key: 'cacheWrite', label: SESSION_COST_COPY.cacheWrite, tokens: cacheWrite, costText: unpricedCacheWriteTokens === cacheWrite && cacheWrite > 0 ? undefined : money(breakdown.cacheWrite) },\n    { key: 'output', label: SESSION_COST_COPY.output, tokens: output, costText: money(breakdown.output) },\n  ]\n  if (unpricedCacheWriteTokens > 0) notes.push(SESSION_COST_COPY.unpricedCacheWrite)\n  // Empty clauses are dropped BEFORE joining: `clause()` returns undefined for a\n  // bucket with no tokens, and joining the raw list would leave a `·  ·` gap for\n  // every absent bucket — a tooltip that reads as a rendering bug.\n  const title = ([\n    `${SESSION_COST_COPY.panelTitle} ${free ? SESSION_COST_COPY.free : sessionCostAmount(total)}`,\n    clause(SESSION_COST_COPY.uncachedInput, uncachedInput),\n    clause(SESSION_COST_COPY.output, output),\n    clause(SESSION_COST_COPY.cacheRead, cacheRead),\n    clause(SESSION_COST_COPY.cacheWrite, cacheWrite),\n    ...notes,\n  ] as Array<string | undefined>).filter((part): part is string => part !== undefined).join(' · ')\n\n  return {\n    total,\n    value,\n    title,\n    rows,\n    notes: [...new Set(notes)],\n    free,\n    peak,\n    unpricedCacheWriteTokens,\n    approximate: !free,\n  }\n}\n\n/**\n * The two nodes the text appended to the harness's token-usage pill is made of.\n *\n * The separator is a node of its own because it carries the shipped pill's\n * SEPARATOR colour rather than its label colour; the pill is a flex row whose\n * `gap` already spaces the appended item, so the separator is what makes the\n * result read as one continuous run (`1.2M tokens · Cache hit 87% · $0.0123`)\n * rather than as a value parked at the end of it.\n */\nexport interface SessionCostPillRun {\n  /** The shipped pill's own separator glyph. */\n  separator: string\n  /** The amount, `≈` marker and free word included. */\n  value: string\n}\n\n/** Split the appended run into the two nodes the display creates. */\nexport function sessionCostPillRun(view: SessionCostView): SessionCostPillRun {\n  return { separator: SESSION_COST_COPY.separator, value: view.value }\n}\n\n/**\n * How the harness's own usage dialog is decorated: one entry per row the\n * shipped component renders, IN ITS OWN ORDER.\n *\n * The price goes on the right of the row it belongs to (`3,206,544 tok  $0.07`)\n * rather than in a block of our own rows beneath them, so the dialog keeps the\n * harness's layout and gains nothing to read past.\n *\n * Two rows are special. `cacheHit` carries a percentage, not a count, so it is\n * never priced. `cacheWrite` is HIDDEN and never priced: the pricing page\n * publishes a cache-write rate for a minority of models, so its cell read\n * `unpriced` far more often than a number; its tokens still count toward the\n * total the pill shows.\n */\nexport type SessionCostShippedRow = 'cacheHit' | 'uncachedInput' | 'cacheRead' | 'cacheWrite' | 'output'\n\n/** One shipped dialog row and what to do with it. */\nexport interface SessionCostRowDecoration {\n  /** Which shipped row this is. */\n  row: SessionCostShippedRow\n  /**\n   * The exact token count that row must be showing, or undefined for a row that\n   * carries no count. The display layer verifies it before decorating anything:\n   * the shipped labels are the `chat` locale's own strings (never English), so\n   * rows are matched POSITIONALLY and this is what proves the position is right.\n   */\n  tokens: number | undefined\n  /** The price to append to the row's value, or undefined to leave it alone. */\n  amount: string | undefined\n  /** Whether the row is dropped from the dialog entirely. */\n  hidden: boolean\n}\n\n/**\n * Decorate the harness's usage dialog, row by row.\n *\n * The row sequence mirrors the shipped component's conditions exactly — the\n * cache-hit row exists while there is billed prompt input, the cache-write row\n * while those tokens are non-zero — because the display layer matches what it\n * finds positionally. A shape it cannot confirm is a shape it does not touch.\n *\n * A free model decorates nothing: every row's cost is zero by definition, the\n * pill already says `Free`, and a column of `$0.00` would be noise. A bucket\n * whose rate the page does not publish is likewise left unfilled rather than\n * filled with an invented number.\n */\nexport function sessionCostRowDecorations(view: SessionCostView): SessionCostRowDecoration[] {\n  const bucket = (key: SessionCostBucketRow['key']): number =>\n    view.rows.find((row) => row.key === key)?.tokens ?? 0\n  const price = (key: SessionCostBucketRow['key']): string | undefined => {\n    if (view.free) return undefined\n    return view.rows.find((row) => row.key === key)?.costText\n  }\n  const uncachedInput = bucket('uncachedInput')\n  const cacheRead = bucket('cacheRead')\n  const cacheWrite = bucket('cacheWrite')\n  const output = bucket('output')\n  const plan: SessionCostRowDecoration[] = []\n  if (uncachedInput + cacheRead + cacheWrite > 0) {\n    plan.push({ row: 'cacheHit', tokens: undefined, amount: undefined, hidden: false })\n  }\n  plan.push({ row: 'uncachedInput', tokens: uncachedInput, amount: price('uncachedInput'), hidden: false })\n  plan.push({ row: 'cacheRead', tokens: cacheRead, amount: price('cacheRead'), hidden: false })\n  if (cacheWrite !== 0) {\n    // Hidden only when the page publishes NO cache-write rate: those tokens are\n    // genuinely unpriced, the note says so, and the row would otherwise show a\n    // blank cell. When the rate IS known its price is part of the total, so the\n    // row must stay — hiding a row whose cost the pill already counts leaves the\n    // visible rows unable to explain the figure above them.\n    const amount = price('cacheWrite')\n    plan.push({ row: 'cacheWrite', tokens: cacheWrite, amount, hidden: amount === undefined })\n  }\n  plan.push({ row: 'output', tokens: output, amount: price('output'), hidden: false })\n  return plan\n}\n","/**\n * The DOM half of the composer's session-cost figure (browser only).\n *\n * The cost is not a surface of its own any more: it is injected INTO the two\n * surfaces the harness already draws under the composer — the token-usage pill\n * (`1.2M tokens · Cache hit 87%`) and the usage dialog that pill opens. This\n * module owns that injection; `./session-cost.ts` owns every number and every\n * string, and `./session-cost-view.tsx` owns the two seats the figures come\n * from.\n *\n * Why inject rather than take the pill's cell over (registering a `stats` entry\n * REPLACES the shipped readout, it does not extend it): the shipped row is one\n * component owning its tokens / cache-hit / duration figures through the `chat`\n * locale namespace, and its cache-hit percentage obeys an exact-integer rule\n * this plugin must not re-derive. Owning that cell would mean reproducing all of\n * it in English, and every upstream change to it would stop reaching users. So\n * the shipped markup stays the harness's, and this module adds exactly two\n * things to it.\n *\n * Four properties make that safe, all verified against the shipped build:\n *\n * 1. **The dialog's rows are styled by ELEMENT.** `dsh-client-ui-chat`'s\n *    `stat-dialog` module styles its `dl` as a two-column grid and then\n *    `.details dt` / `.details dd` — not by class. A price node appended INSIDE a\n *    shipped value cell therefore inherits that cell's tabular numerals and right\n *    alignment for free, and this plugin ships no CSS at all.\n * 2. **The dialog's rows are matched by POSITION and confirmed by value.** Their\n *    labels are the `chat` locale's own strings (`Uncached input` in English,\n *    `未缓存输入` in Chinese), so no label is ever read. Instead the shape is\n *    predicted from the session's buckets — the cache-hit row exists while there\n *    is billed prompt input, the cache-write row while those tokens are non-zero\n *    — and each value cell must then carry exactly the token count predicted for\n *    it. A dialog that does not confirm is left alone.\n * 3. **The pill keeps the cost visible when space runs out.** The button is an\n *    inline flex row with `gap`, and its label carries `min-width:0` plus\n *    ellipsis; our appended span keeps the default `min-width:auto`, so the\n *    LABEL is what truncates. The cost also inherits the button's `font:inherit`\n *    and `tabular-nums` typography and its hover/expanded tint.\n * 4. **React owns those value cells' text, so a price is re-attached, never\n *    assumed.** The shipped component renders each count as a single string, and\n *    React rewrites such a cell through `textContent` when the count changes —\n *    which drops every child with it, our price included. Every sync therefore\n *    re-checks that the node is still where it was put; the cost of that is a\n *    read, and the alternative is a price that silently disappears mid-session.\n *\n * A `MutationObserver` on `document.body` with `childList` (deliberately NOT\n * `subtree`, so streaming text never wakes it) is the only way to learn that the\n * dialog — which is portaled straight onto `body`, with no slot of ours inside\n * it — has opened or closed. That observer is also what decorates a newly opened\n * dialog from the last view this module was handed.\n *\n * @module dsh-commandcode-provider/client/session-cost-display\n */\n\nimport type { SessionCostPillRun, SessionCostRowDecoration, SessionCostShippedRow, SessionCostView } from './session-cost.ts'\nimport {\n  SESSION_COST_COPY,\n  sessionCostPillRun,\n  sessionCostRowDecorations,\n} from './session-cost.ts'\n\n/** The shipped composer stats row (dsh-client-ui-chat `StatsPills`). */\nconst STATS_ROOT = '[data-composer-stats]'\n\n/**\n * The shipped token-usage dialog's `<dl>`. Unique in the whole of\n * `dsh-client-ui-chat`: the per-message turn-usage panel has its own dialog with\n * different markup, so the composer's is unambiguous.\n */\nconst USAGE_DIALOG = '[data-session-stats-usage]'\n\n/**\n * The usage dialog's trigger. Both pills announce a dialog, but the token one is\n * rendered LAST — and when no step carries timing the time pill is not a button\n * at all, so \"last\" still selects the token pill in both cases.\n */\nconst DIALOG_TRIGGER = 'button[aria-haspopup=\"dialog\"]'\n\n/**\n * Stable id for the hidden node the appended cost is described by. The pill's\n * own `aria-label` is computed by the harness on every render and cannot be\n * extended, so a description is how the cost reaches assistive technology.\n */\nconst A11Y_ID = 'dsh-commandcode-session-cost'\n\n/** How many consecutive misses before the missing anchor is worth a console line. */\nconst MISSES_BEFORE_WARNING = 3\n\n/**\n * How the display learns that the shipped usage dialog opened or closed.\n *\n * `target` is `document.body`, and the returned function detaches. The default\n * is a `MutationObserver`; the seam exists so tests can announce the dialog\n * without a global observer (the repository's usual injected-seam shape).\n */\nexport type SessionCostObserverFactory = (target: Node, listener: () => void) => (() => void) | undefined\n\n/**\n * The default observer: `childList` on `body`, and deliberately NOT `subtree`, so\n * streaming text inside the page never wakes it while the panel the harness\n * portals straight onto `body` does.\n */\nconst observeBodyChildren: SessionCostObserverFactory = (target, listener) => {\n  if (typeof MutationObserver === 'undefined') return undefined\n  const observer = new MutationObserver(listener)\n  observer.observe(target, { childList: true })\n  return () => observer.disconnect()\n}\n\n/** What the display layer reads: the injected document and where to look in it. */\nexport interface SessionCostDisplayOptions {\n  /** The document to inject into (injected so node tests can drive a double). */\n  doc: Document\n  /**\n   * The composer that owns this entry — our own outlet wrapper's parent, so a\n   * session-scoped composer looks in its OWN card rather than at whichever\n   * `[data-composer-stats]` happens to come first in the document.\n   */\n  scope: () => ParentNode | null\n  /** Observer seam; defaults to a `childList` `MutationObserver` on `body`. */\n  observe?: SessionCostObserverFactory\n}\n\n/**\n * Owns the nodes injected into the shipped token-usage UI.\n *\n * One instance per mounted entry. `sync()` is cheap and idempotent: it re-reads\n * both targets on every call, which is what lets it self-heal when React\n * remounts the row or replaces the dialog, and it rewrites a node only when its\n * text actually changed.\n */\nexport class SessionCostDisplay {\n  private readonly doc: Document\n  private readonly scope: () => ParentNode | null\n  private readonly observe: SessionCostObserverFactory\n  private view: SessionCostView | undefined = undefined\n  /** Detaches the observer installed by `start()`. */\n  private detach: (() => void) | undefined = undefined\n  /** The button we appended into, while it is still connected. */\n  private pillHost: Element | undefined = undefined\n  /** Our appended root, and the two nodes whose text changes. */\n  private pillRoot: HTMLElement | undefined = undefined\n  private pillValue: HTMLElement | undefined = undefined\n  private pillA11y: HTMLElement | undefined = undefined\n  /** Whether WE set `aria-describedby` on the button (so only we take it back). */\n  private described = false\n  /** The dialog we decorated, the price nodes we own, and the cells we hid. */\n  private dialogHost: Element | undefined = undefined\n  private dialogPrices = new Map<HTMLElement, HTMLElement>()\n  private dialogHidden = new Set<HTMLElement>()\n  private pillMisses = 0\n\n  constructor(options: SessionCostDisplayOptions) {\n    this.doc = options.doc\n    this.scope = options.scope\n    this.observe = options.observe ?? observeBodyChildren\n  }\n\n  /** Begin watching for the shipped usage dialog opening and closing. */\n  start(): void {\n    if (this.detach !== undefined) return\n    const body = this.doc.body\n    if (body === null || body === undefined) return\n    this.detach = this.observe(body, () => this.apply())\n  }\n\n  /**\n   * Hand the display the current figure.\n   *\n   * Undefined — nothing priceable about this session — removes everything this\n   * module injected, leaving both shipped surfaces exactly as they ship.\n   */\n  sync(view: SessionCostView | undefined): void {\n    this.view = view\n    this.apply()\n  }\n\n  /** Remove every injected node and stop observing. Safe to call twice. */\n  dispose(): void {\n    this.detach?.()\n    this.detach = undefined\n    this.removePill()\n    this.clearDialog()\n    this.view = undefined\n  }\n\n  /** Re-apply the last known view to whatever both targets are right now. */\n  private apply(): void {\n    this.applyPill()\n    this.applyDialog()\n  }\n\n  // -------------------------------------------------------------------------\n  // The pill: the cost as the last item of the shipped token pill's text run\n  // -------------------------------------------------------------------------\n\n  private applyPill(): void {\n    const view = this.view\n    if (view === undefined) {\n      this.removePill()\n      return\n    }\n    if (this.pillHost?.isConnected !== true) {\n      const button = this.resolvePillButton()\n      if (button === null) {\n        this.pillMisses += 1\n        if (this.pillMisses === MISSES_BEFORE_WARNING) {\n          console.warn(\n            `[dsh-commandcode-provider] no ${STATS_ROOT} row to append the session cost to; the figure stays in the usage dialog only`,\n          )\n        }\n        return\n      }\n      this.pillMisses = 0\n      this.removePill()\n      this.buildPill(button, sessionCostPillRun(view))\n    }\n    if (this.pillValue !== undefined) {\n      const amount = sessionCostPillRun(view).value\n      if (this.pillValue.textContent !== amount) this.pillValue.textContent = amount\n    }\n    if (this.pillRoot !== undefined) {\n      if (this.pillRoot.title !== view.title) this.pillRoot.title = view.title\n      const approximate = view.approximate ? 'true' : null\n      if (this.pillRoot.getAttribute('data-approximate') !== approximate) {\n        if (approximate === null) this.pillRoot.removeAttribute('data-approximate')\n        else this.pillRoot.setAttribute('data-approximate', approximate)\n      }\n    }\n    if (this.pillA11y !== undefined) {\n      const described = `${SESSION_COST_COPY.panelTitle} ${view.value}`\n      if (this.pillA11y.textContent !== described) this.pillA11y.textContent = described\n    }\n  }\n\n  /** The shipped token pill, scoped to this entry's own composer. */\n  private resolvePillButton(): Element | null {\n    const scope = this.scope() ?? this.doc\n    const root = scope.querySelector(STATS_ROOT)\n    if (root === null) return null\n    const triggers = root.querySelectorAll(DIALOG_TRIGGER)\n    return triggers.length === 0 ? null : (triggers[triggers.length - 1] ?? null)\n  }\n\n  /**\n   * Create and append the cost run. The button's child list is static\n   * (`[svg, label]`), so appending once is enough for it to stay last.\n   */\n  private buildPill(button: Element, run: SessionCostPillRun): void {\n    const doc = this.doc\n    const root = doc.createElement('span')\n    root.setAttribute('data-composer-session-cost', '')\n    // The separator is its own node so it can carry the shipped pill's separator\n    // colour. Its LEFT spacing comes from the button's flex gap; the right margin\n    // reproduces the shipped separator's `margin:0 6px` rhythm, so the run reads\n    // `tokens · Cache hit 87% · $0.0123` at one consistent rhythm.\n    const separator = doc.createElement('span')\n    separator.textContent = run.separator\n    separator.setAttribute('aria-hidden', 'true')\n    separator.style.color = 'var(--dsw-alias-separator-primary)'\n    separator.style.margin = '0 6px 0 0'\n    const value = doc.createElement('span')\n    value.textContent = run.value\n    value.style.fontWeight = '500'\n    // Referenced by the button's `aria-describedby`: a hidden node named by id is\n    // still read out, which is how the cost survives the aria-label override.\n    const a11y = doc.createElement('span')\n    a11y.id = A11Y_ID\n    a11y.style.display = 'none'\n    root.appendChild(separator)\n    root.appendChild(value)\n    root.appendChild(a11y)\n    button.appendChild(root)\n    // Only ever claim the attribute when the button has none of its own: a\n    // shipped `aria-describedby` is the harness's, and overwriting it would\n    // delete a description we cannot restore.\n    if (!button.hasAttribute('aria-describedby')) {\n      button.setAttribute('aria-describedby', A11Y_ID)\n      this.described = true\n    }\n    this.pillHost = button\n    this.pillRoot = root\n    this.pillValue = value\n    this.pillA11y = a11y\n  }\n\n  private removePill(): void {\n    if (this.pillRoot !== undefined && this.pillRoot.parentNode !== null) {\n      this.pillRoot.parentNode.removeChild(this.pillRoot)\n    }\n    if (this.described) {\n      this.pillHost?.removeAttribute('aria-describedby')\n      this.described = false\n    }\n    this.pillHost = undefined\n    this.pillRoot = undefined\n    this.pillValue = undefined\n    this.pillA11y = undefined\n  }\n\n  // -------------------------------------------------------------------------\n  // The dialog: a price on the right of each token row the harness already draws\n  // -------------------------------------------------------------------------\n\n  private applyDialog(): void {\n    const view = this.view\n    const host = view === undefined ? null : this.resolveDialog()\n    if (host === null || view === undefined) {\n      this.clearDialog()\n      return\n    }\n    this.pruneDialog(host)\n    const plan = sessionCostRowDecorations(view)\n    const pairs = dialogPairs(host)\n    if (!dialogShapeMatches(pairs, plan, this.dialogPrices)) {\n      // The dialog is not the shape this session's buckets predict — a different\n      // build, or a projection carrying values the counts cannot explain. Leave\n      // it exactly as the harness drew it rather than pricing the wrong row.\n      this.clearDialog()\n      return\n    }\n    const hidden = new Set<HTMLElement>()\n    for (const [index, row] of plan.entries()) {\n      const pair = pairs[index]\n      if (pair === undefined) continue\n      const span = this.dialogPrices.get(pair.dd)\n      if (row.hidden) {\n        // The row is dropped: both cells, or the grid leaves an empty label\n        // behind. An inline `display` survives the harness's own re-renders\n        // (React pins no style on these nodes) and is given back on disposal.\n        if (pair.dt.style.display !== 'none') pair.dt.style.display = 'none'\n        if (pair.dd.style.display !== 'none') pair.dd.style.display = 'none'\n        hidden.add(pair.dt)\n        hidden.add(pair.dd)\n        this.removeDialogPrice(pair.dd, span)\n        continue\n      }\n      if (pair.dt.style.display === 'none') pair.dt.style.display = ''\n      if (pair.dd.style.display === 'none') pair.dd.style.display = ''\n      if (row.amount === undefined) {\n        this.removeDialogPrice(pair.dd, span)\n        continue\n      }\n      const price = span ?? this.createDialogPrice(pair.dd, row.row)\n      // React owns this cell's text and rewrites it through `textContent` when\n      // the count changes, which drops every child with it — so the price is\n      // re-attached on a miss rather than assumed to still be there.\n      if (price.parentNode !== pair.dd) pair.dd.appendChild(price)\n      if (price.textContent !== row.amount) price.textContent = row.amount\n    }\n    // Cells hidden by an earlier shape (a cache-write row React then rewrote) go\n    // back to the harness.\n    for (const cell of [...this.dialogHidden]) {\n      if (hidden.has(cell)) continue\n      if (cell.style.display === 'none') cell.style.display = ''\n      this.dialogHidden.delete(cell)\n    }\n    for (const cell of hidden) this.dialogHidden.add(cell)\n    this.dialogHost = host\n  }\n\n  /** Forget the cells and prices a re-rendered dialog took with it. */\n  private pruneDialog(host: Element): void {\n    for (const [dd, price] of [...this.dialogPrices]) {\n      if (dd.parentNode === host) continue\n      if (price.parentNode !== null) price.parentNode.removeChild(price)\n      this.dialogPrices.delete(dd)\n    }\n    for (const cell of [...this.dialogHidden]) {\n      if (cell.parentNode === host) continue\n      // The dialog was re-rendered and this cell went with the old tree. Give\n      // the style back BEFORE dropping the reference: a detached node can be\n      // recycled by the next render (React reuses DOM nodes across a remount of\n      // the same shape), and a surviving `display: none` would hide a row of a\n      // dialog we are no longer decorating — with nothing left tracking it to\n      // restore it later.\n      if (cell.style.display === 'none') cell.style.display = ''\n      this.dialogHidden.delete(cell)\n    }\n  }\n\n  /** The price node for one shipped value cell, appended as its last child. */\n  private createDialogPrice(dd: HTMLElement, row: SessionCostShippedRow): HTMLElement {\n    const price = this.doc.createElement('span')\n    price.setAttribute('data-session-cost-price', row)\n    // The cell is right-aligned over tabular numerals, so a fixed-width\n    // inline-block lines the prices up as a column of their own to the right of\n    // the counts instead of trailing each count raggedly.\n    price.style.marginLeft = '6px'\n    price.style.display = 'inline-block'\n    price.style.minWidth = '56px'\n    price.style.textAlign = 'right'\n    price.style.fontWeight = '500'\n    dd.appendChild(price)\n    this.dialogPrices.set(dd, price)\n    return price\n  }\n\n  private removeDialogPrice(dd: HTMLElement, price: HTMLElement | undefined): void {\n    if (price === undefined) return\n    if (price.parentNode !== null) price.parentNode.removeChild(price)\n    this.dialogPrices.delete(dd)\n  }\n\n  /**\n   * The shipped usage dialog, or null while it is closed.\n   *\n   * The dialog is portaled onto `body`, so unlike the pill it cannot be scoped\n   * from this entry; DSH renders one composer, and the attribute is unique in\n   * the chat client, so a document-level lookup is exact. Should a future build\n   * mount two composers at once, both dialogs would describe whichever session\n   * this entry belongs to — noted rather than defended against.\n   */\n  private resolveDialog(): Element | null {\n    if (this.dialogHost?.isConnected === true) return this.dialogHost\n    // The dialog we injected into is gone: our nodes went with it, so only the\n    // bookkeeping is left to drop.\n    this.clearDialog()\n    return this.doc.querySelector(USAGE_DIALOG)\n  }\n\n  /** Give the dialog back: every price removed, every hidden row restored. */\n  private clearDialog(): void {\n    for (const price of this.dialogPrices.values()) {\n      if (price.parentNode !== null) price.parentNode.removeChild(price)\n    }\n    this.dialogPrices.clear()\n    for (const cell of this.dialogHidden) {\n      if (cell.style.display === 'none') cell.style.display = ''\n    }\n    this.dialogHidden.clear()\n    this.dialogHost = undefined\n  }\n}\n\n/** The shipped dialog's `dt`/`dd` pairs, in document order. */\nfunction dialogPairs(host: Element): Array<{ dt: HTMLElement; dd: HTMLElement }> {\n  const pairs: Array<{ dt: HTMLElement; dd: HTMLElement }> = []\n  let label: HTMLElement | null = null\n  for (const node of Array.from(host.childNodes)) {\n    const tag = tagNameOf(node)\n    if (tag === 'DT') label = node as HTMLElement\n    else if (tag === 'DD' && label !== null) {\n      pairs.push({ dt: label, dd: node as HTMLElement })\n      label = null\n    }\n  }\n  return pairs\n}\n\n/** `tagName` upper-cased, or an empty string for a non-element node. */\nfunction tagNameOf(node: Node): string {\n  const tag = (node as Element).tagName\n  return typeof tag === 'string' ? tag.toUpperCase() : ''\n}\n\n/**\n * Whether the dialog really holds the rows this session's buckets predict.\n *\n * The shipped labels belong to the `chat` locale — they are `Uncached input` in\n * English and something else entirely in Chinese — so rows are matched by\n * POSITION, and this is what makes that safe: the row count must agree, the\n * cache-hit row must be the percentage it is, and every other value must carry\n * exactly the token count of the bucket predicted for it. A mismatch means the\n * dialog is not what this view describes, and nothing is decorated.\n */\nfunction dialogShapeMatches(\n  pairs: ReadonlyArray<{ dt: HTMLElement; dd: HTMLElement }>,\n  plan: readonly SessionCostRowDecoration[],\n  prices: ReadonlyMap<HTMLElement, HTMLElement>,\n): boolean {\n  if (pairs.length !== plan.length) return false\n  return plan.every((row, index) => {\n    const pair = pairs[index]\n    if (pair === undefined) return false\n    const text = hostValueText(pair.dd, prices.get(pair.dd))\n    if (row.tokens === undefined) return text.includes('%')\n    return digitsOf(text) === String(row.tokens)\n  })\n}\n\n/**\n * A value cell's own text, without the price this module appended to it — the\n * digits of `3,206,544 tok` are the host's, the digits of `$0.07` are ours.\n */\nfunction hostValueText(dd: HTMLElement, price: HTMLElement | undefined): string {\n  let text = ''\n  for (const node of Array.from(dd.childNodes)) {\n    if (node === price) continue\n    text += node.textContent ?? ''\n  }\n  return text\n}\n\n/** Every digit of a display string, so locale grouping cannot break the match. */\nfunction digitsOf(text: string): string {\n  return text.replace(/\\D/g, '')\n}\n","/**\n * The composer's live session-cost figure (browser half).\n *\n * This component renders NO surface of its own. The cost lives inside the\n * harness's own token-usage UI: the amount becomes the last item of the shipped\n * pill's text run (`1.2M tokens · Cache hit 87% · $0.0123`) and the per-bucket\n * breakdown becomes extra rows in the usage dialog that pill opens.\n * `./session-cost-display.ts` owns that injection and `./session-cost.ts` owns\n * every number and every string; this file owns nothing but the two seats the\n * figures come from and the lifetime of the injection.\n *\n * It is still registered as an entry in `conversation.composer.dock`, because\n * that registration is what delivers the seats: `useProjection` is a standard\n * prop the composer hands every dock occupant, so there is no other way to read\n * the session's token accounting. Registering under the shipped `stats` cell's\n * id instead would REPLACE the harness's readout rather than extend it;\n * `./session-cost-display.ts` records why that trade is refused.\n *\n * The rendered node is a hidden marker — `display:none`, so it can add neither a\n * box nor a flex gap to the composer card. It exists to locate THIS composer\n * from the entry (`closest()` on the dock's outlet anchor), so a session-scoped\n * composer reads its own card rather than whichever row comes first in the\n * document. It is rendered only while there is something to show, so a session\n * with nothing priceable contributes no markup at all.\n *\n * Two seats are read, from two different owners: `useProjection` comes from the\n * composer (a standard prop of the dock, not part of this registration), and\n * `useCommandCodePrices` comes from our own registration's `inject` face, which\n * `bindInjectSources` re-exposes from the `hooks` compartment. Reading\n * `props.hooks.*` instead finds `undefined` at runtime and crashes the render,\n * which the slot renderer contains by ABDICATING the entry — a surface that\n * vanishes with no visible error.\n *\n * Both effects are `useEffect`, never `useLayoutEffect`: there is nothing on\n * screen to align with (the injection is a text run and a hidden marker), and a\n * layout effect would log a warning from the server render the tests use.\n *\n * @module dsh-commandcode-provider/client/session-cost-view\n */\n\nimport type { SessionCostFacts } from '../cost-facts.ts'\nimport { useEffect, useRef } from 'react'\nimport type { SnapshotStore } from './snapshot-store.ts'\nimport type { SessionCostPricesState } from './prices.ts'\nimport { SessionCostDisplay } from './session-cost-display.ts'\nimport {\n  buildSessionCostView,\n  type SessionModelSelectionProjection,\n  type SessionUsageBuckets,\n} from './session-cost.ts'\n\n/** The dock outlet this entry renders inside, i.e. what it can scope itself from. */\nconst DOCK_ANCHOR = '[data-slot=\"conversation.composer.dock\"]'\n\n/** Module-level constant so the marker's `style` prop never diffs. */\nconst HIDDEN_STYLE = { display: 'none' } as const\n\n/**\n * The injected face this registration carries. Bound by the client entry so the\n * component stays unaware of the Remote, the controller, and its caching.\n *\n * NOTE the split from {@link SessionCostComponentProps}: the renderer\n * destructures this face's `hooks` compartment and re-exposes each member as a\n * `use<Name>` prop (`commandCodePrices` → `useCommandCodePrices`); it does not\n * hand the component this object verbatim.\n */\nexport interface SessionCostInjected {\n  hooks: {\n    commandCodePrices: SnapshotStore<SessionCostPricesState>\n  }\n}\n\n/**\n * The projection keys this readout reads, declared structurally because the\n * plugin bundle does not depend on the session-controller package (whose\n * `UseProjection` this mirrors).\n */\ninterface ProjectionSeats {\n  commandCodeCost: SessionCostFacts\n  tokenUsage: SessionUsageBuckets\n  modelSelection: SessionModelSelectionProjection\n}\n\n/** The projection reader the composer supplies to every dock occupant. */\nexport interface UseProjectionLike {\n  <K extends keyof ProjectionSeats>(key: K): ProjectionSeats[K] | undefined\n  <K extends keyof ProjectionSeats, S>(\n    key: K,\n    selector: (value: ProjectionSeats[K] | undefined) => S,\n    eq?: (a: S, b: S) => boolean,\n  ): S\n}\n\n/** The props this component actually receives. */\nexport interface SessionCostComponentProps {\n  useCommandCodePrices<T>(selector: (state: SessionCostPricesState) => T): T\n  useProjection: UseProjectionLike\n}\n\n/** Log a missing seat once per page, so a silent no-op stays diagnosable. */\nlet warnedMissingSeat = false\n\n/**\n * The composer's session-cost entry. Guards the two seats before rendering the\n * mount: a dsh that does not supply the projection seat to dock occupants gets\n * an absent cost and one console line, never a render crash — which the renderer\n * would answer by abdicating the entry with no visible trace.\n */\nexport function CommandCodeSessionCost(props: SessionCostComponentProps) {\n  if (typeof props.useProjection !== 'function' || typeof props.useCommandCodePrices !== 'function') {\n    if (!warnedMissingSeat) {\n      warnedMissingSeat = true\n      console.error(\n        '[dsh-commandcode-provider] the composer does not supply the projection/hook seats the session-cost readout needs; the readout stays hidden',\n      )\n    }\n    return null\n  }\n  return <SessionCostEntry {...props} />\n}\n\n/** The mount: one injection lifetime, one hidden marker. Every hook lives here. */\nfunction SessionCostEntry(props: SessionCostComponentProps) {\n  const markerRef = useRef<HTMLSpanElement | null>(null)\n  const displayRef = useRef<SessionCostDisplay | null>(null)\n  const prices = props.useCommandCodePrices((state) => state)\n  const usage = props.useProjection('tokenUsage')\n  const selection = props.useProjection('modelSelection')\n  const facts = props.useProjection('commandCodeCost')\n  const view = buildSessionCostView({ usage, selection, facts, table: prices.table, now: Date.now() })\n\n  useEffect(() => {\n    // No DOM outside a browser: the server render used by the tests, and a\n    // node-hosted assembly, must both stay no-ops.\n    if (typeof document === 'undefined') return\n    const display = new SessionCostDisplay({\n      doc: document,\n      scope: () => markerRef.current?.closest(DOCK_ANCHOR)?.parentElement ?? null,\n    })\n    displayRef.current = display\n    display.start()\n    return () => {\n      displayRef.current = null\n      display.dispose()\n    }\n  }, [])\n\n  // Every render: the projection is a fresh fold, so there is nothing cheaper to\n  // compare than the plan the display derives from it — and the display rewrites\n  // a node only when that node's own text actually moved.\n  useEffect(() => {\n    displayRef.current?.sync(view)\n  })\n\n  if (view === undefined) return null\n  return <span ref={markerRef} style={HIDDEN_STYLE} data-ccp-session-cost-anchor=\"\" />\n}\n","/**\n * Stylesheet for the Command Code plans & quota panel (the sidebar footer card\n * and the dashboard it opens).\n *\n * Returned as a string rather than injected here so the modules stay free of\n * DOM side effects at import time — the client entry installs it once, keyed\n * by the same `data-plugin-css` attribute the settings-page stylesheet uses,\n * and removes it again when the plugin's fiber unwinds.\n *\n * Every colour comes from a harness theme alias with a neutral fallback, so\n * the panel follows the active theme (light/dark and any brand pack) without\n * hardcoded values. Classes are `ccp-` prefixed to stay clear of the settings\n * page's `cc-` set.\n *\n * @module dsh-commandcode-provider/client/panel-styles\n */\n\n/**\n * Stylesheet id (the `data-plugin-css` value that makes injection idempotent).\n *\n * The package prefix must match the one the settings-page stylesheet uses\n * (`injectPageCss` in `./index.ts`) and this package's real name: an id is the\n * injection's identity, so a stale fork prefix would let a second copy of the\n * plugin inject the same rules twice and would misreport the owner in the DOM.\n */\nexport const PANEL_CSS_ID = '@mars-sea/dsh-commandcode-provider/CommandCodePanel.module.css'\n\n/** The panel stylesheet. */\nexport const PANEL_CSS = `\n/* ------------------------------------------------- sidebar footer card */\n/* The shell's foot area renders this list ABOVE the Settings seat, so the card\n   is the sidebar's bottom-most content. The shell supplies no chrome: the entry\n   is the button. It is deliberately quiet — a surface that sits beside Settings\n   should read as part of the column, not as a call to action — with one hover\n   step and a hairline border.\n\n   The shell's container is a flex ROW whose occupants (this card and ui-cordis's\n   footer chip) each declare a full-width line and shrink-proof flex, so as a row\n   it would overflow the column. Both were written for a full-width line, which\n   is exactly what a column gives them. Matched by the CSS-module class STEM —\n   never a hashed name — so a dsh that renames it degrades to the shell's own\n   row rather than breaking. */\n[class*=\"_footerActions\"]{flex-direction:column}\n.ccp-foot{box-sizing:border-box;flex:0 0 auto;width:100%;min-width:0;font:inherit;color:var(--dsw-alias-label-secondary);text-align:left;cursor:pointer;background:0 0;border:1px solid transparent;border-radius:10px;flex-direction:column;gap:6px;margin:0 0 4px;padding:8px;display:flex}\n.ccp-foot:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover);border-color:var(--dsw-alias-border-l2)}\n.ccp-foot:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}\n.ccp-footTop{align-items:center;gap:8px;min-width:0;display:flex}\n.ccp-footName{white-space:nowrap;text-overflow:ellipsis;color:var(--dsw-alias-label-primary);min-width:0;overflow:hidden;font-size:13px;font-weight:500;line-height:20px}\n/* One block per quota window: a head line carrying the window's own spend and\n   limit, then the FULL-WIDTH bar under it. Stacking the two lets the card show\n   the dollar figures — the reason this surface exists — without squeezing the\n   bar into what is left beside them. Mirrors the dashboard's own window block. */\n.ccp-footRow{flex-direction:column;gap:4px;min-width:0;display:flex}\n.ccp-footHead{align-items:baseline;gap:8px;min-width:0;display:flex}\n.ccp-footLabel{flex:1;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px}\n.ccp-footAmount{flex:none;color:var(--dsw-alias-label-secondary);font-size:11px;line-height:16px;font-variant-numeric:tabular-nums;white-space:nowrap}\n/* The card's markup must stay PHRASING content — it renders inside the shell's\n   own button — so these bars are spans, not divs. That makes display:block\n   load-bearing on BOTH: an inline box ignores width and height outright, so\n   without it the 5px track still painted (a flex item is blockified by its\n   container) while the fill collapsed to 0x0 and the bar showed no usage. */\n.ccp-footBar{display:block;background:var(--dsw-alias-bg-layer-2);border-radius:999px;height:5px;overflow:hidden}\n.ccp-footFill{display:block;background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}\n.ccp-footFillWarn{background:var(--dsw-alias-state-error-primary)}\n.ccp-footPct{flex:none;width:34px;color:var(--dsw-alias-label-secondary);text-align:right;font-size:11px;line-height:16px;font-variant-numeric:tabular-nums}\n\n/* The 56px rail: one icon button on the shell's own rail geometry (36px cell),\n   so the collapsed column keeps a single 18px glyph like its siblings. */\n.ccp-railButton{box-sizing:border-box;width:36px;height:36px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:1px solid transparent;border-radius:8px;flex:none;justify-content:center;align-items:center;margin:0 0 4px;padding:0;display:inline-flex}\n.ccp-railButton:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover)}\n.ccp-railButton:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}\n\n/* The ring glyph. Sized entirely by its own width/height attribute, so the\n   footer row, the rail button and the dashboard can each ask for their own. */\n.ccp-glyph{flex:none;justify-content:center;align-items:center;display:inline-flex;color:var(--dsw-alias-brand-primary)}\n\n/* ------------------------------------------------------------ dashboard */\n/* The center column in the layout frame: fill it, scroll the content column,\n   and cap the reading width like the harness's own panels. */\n.ccp-main{background:var(--dsw-alias-bg-layer-1);width:100%;height:100%;overflow:auto;display:block}\n.ccp-mainInner{max-width:760px;margin:0 auto;padding:24px 20px 40px;flex-direction:column;gap:14px;display:flex;color:var(--dsw-alias-label-primary)}\n.ccp-header{align-items:center;gap:10px;display:flex;flex-wrap:wrap}\n.ccp-headerText{flex-direction:column;gap:2px;display:flex;min-width:0}\n.ccp-title{margin:0;font-size:18px;font-weight:600;line-height:1.4}\n.ccp-subtitle{margin:0;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}\n.ccp-spacer{flex:1}\n.ccp-meta{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;font-variant-numeric:tabular-nums}\n.ccp-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}\n\n/* Notices: the no-key guidance, a blocked report, and a stale-data error. */\n.ccp-notice{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:12px 14px;flex-direction:column;gap:4px;display:flex}\n.ccp-noticeError{border-color:var(--dsw-alias-state-error-primary)}\n.ccp-noticeTitle{margin:0;font-size:13px;font-weight:600;line-height:1.5}\n.ccp-noticeError .ccp-noticeTitle{color:var(--dsw-alias-state-error-primary)}\n.ccp-noticeHint{margin:0;color:var(--dsw-alias-label-secondary);font-size:12px;line-height:1.55}\n.ccp-noticeDetail{margin:0;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;word-break:break-word}\n\n.ccp-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:14px;padding:16px 18px;flex-direction:column;gap:16px;display:flex}\n.ccp-cardHead{align-items:center;gap:10px;display:flex;flex-wrap:wrap}\n.ccp-avatar{flex:none;width:28px;height:28px;color:var(--dsw-alias-brand-primary);background:var(--dsw-alias-bg-module-platform);border-radius:50%;justify-content:center;align-items:center;font-size:12px;font-weight:600;line-height:1;display:inline-flex}\n.ccp-cardIdentity{flex-direction:column;gap:1px;min-width:0;display:flex}\n.ccp-cardTitle{font-size:13px;font-weight:600;line-height:1.4}\n.ccp-cardOwner{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.4;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:220px}\n.ccp-block{flex-direction:column;gap:8px;display:flex}\n.ccp-blockTitle{margin:0;color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:600;line-height:1.5;text-transform:uppercase;letter-spacing:.04em}\n.ccp-planRow{align-items:center;gap:8px;display:flex;flex-wrap:wrap}\n.ccp-fieldLabel{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}\n.ccp-planName{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:600;line-height:1.5}\n\n/* Stat tiles: the monthly credits and the usage totals share one grid. */\n.ccp-tiles{display:grid;grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:8px}\n.ccp-tile{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:8px;padding:8px 10px;flex-direction:column;gap:2px;display:flex;min-width:0}\n.ccp-tileLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}\n.ccp-tileValue{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4;font-variant-numeric:tabular-nums}\n.ccp-tileSub{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n\n/* Quota bars: the monthly bar and the two windows stack in one column, each a\n   label row plus the track. */\n.ccp-windows{flex-direction:column;gap:14px;display:flex}\n.ccp-window{flex-direction:column;gap:6px;display:flex}\n.ccp-windowHead{align-items:baseline;gap:8px;display:flex}\n.ccp-windowLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:500;line-height:1.5}\n.ccp-windowValue{color:var(--dsw-alias-label-secondary);font-size:12px;line-height:1.5;font-variant-numeric:tabular-nums;white-space:nowrap}\n.ccp-windowPct{color:var(--dsw-alias-label-primary);min-width:38px;text-align:right;font-size:12px;font-weight:600;line-height:1.5;font-variant-numeric:tabular-nums}\n.ccp-warnTag{white-space:nowrap;background:var(--dsw-alias-state-warn-tertiary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warn-primary,var(--dsw-alias-label-secondary));border-radius:999px;padding:0 8px;font-size:11px;font-weight:600;line-height:17px}\n.ccp-bar{overflow:hidden;background:var(--dsw-alias-bg-layer-1);border-radius:999px;height:8px}\n.ccp-barFill{background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}\n.ccp-barFillWarn{background:var(--dsw-alias-state-error-primary)}\n.ccp-windowReset{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}\n\n/* Badges. */\n.ccp-badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-brand-primary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:600;line-height:17px}\n.ccp-badgeError{background:transparent;color:var(--dsw-alias-state-error-primary)}\n.ccp-badgeWarn{background:var(--dsw-alias-state-warn-tertiary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warn-primary,var(--dsw-alias-label-secondary))}\n.ccp-badgeMuted{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px;max-width:220px;overflow:hidden;text-overflow:ellipsis}\n\n/* Account switch: plain buttons, like the settings page's usage carousel. */\n.ccp-tabs{flex-wrap:wrap;gap:6px;display:flex}\n.ccp-tab{align-items:center;font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex;gap:6px}\n.ccp-tab:hover:not(.ccp-tabActive){color:var(--dsw-alias-label-primary)}\n.ccp-tabActive{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-brand-primary)}\n\n@media (prefers-reduced-motion:reduce){.ccp-footFill,.ccp-barFill{transition:none}}\n`\n","/**\n * Locale copy for the \"Command Code\" settings page, and the declaration that\n * merges the page's namespace into the framework's `LocaleNamespaceMap` so\n * `ctx.locale.register` / `ctx.slots.register(..., { locale })` are typed.\n *\n * zh is the source of truth for the key set (repo convention); en must carry\n * the exact same keys — a mismatch is a compile error at the register site.\n */\ndeclare module '@deepseek-ai/dsh-client-ui-slots' {\n  interface LocaleNamespaceMap {\n    /** Copy of the Command Code settings page. */\n    'settings.commandcode': SettingsCommandCodeKey\n  }\n}\n\n/** Dictionary keys of the Command Code settings page. */\nexport type SettingsCommandCodeKey =\n  | 'nav'\n  | 'title'\n  | 'intro'\n  | 'apiKey'\n  | 'apiKeyHint'\n  | 'apiKeySet'\n  | 'apiKeyUnset'\n  | 'apiKeyLocked'\n  | 'apiBase'\n  | 'apiBaseHint'\n  | 'workingDir'\n  | 'workingDirHint'\n  | 'requestTimeoutMs'\n  | 'requestTimeoutMsHint'\n  | 'streamIdleTimeoutMs'\n  | 'streamIdleTimeoutMsHint'\n  | 'advancedSettings'\n  | 'advancedSettingsHint'\n  | 'advancedOverriddenOne'\n  | 'advancedOverriddenMany'\n  | 'advancedInvalid'\n  | 'filterModelsByPlan'\n  | 'filterModelsByPlanHint'\n  | 'webSearch'\n  | 'webSearchHint'\n  | 'accountsTitle'\n  | 'accountsHint'\n  | 'accountAdd'\n  | 'accountRemove'\n  | 'accountLabel'\n  | 'accountKey'\n  | 'accountKeyHint'\n  | 'accountDefault'\n  | 'activeAccount'\n  | 'activeAccountAuto'\n  | 'activeAccountHint'\n  | 'rulesTitle'\n  | 'rulesHint'\n  | 'rulesEmpty'\n  | 'rulesCatalogFailed'\n  | 'ruleAdd'\n  | 'ruleRemove'\n  | 'ruleModel'\n  | 'ruleModelPick'\n  | 'ruleModelCount'\n  | 'ruleAccount'\n  | 'ruleHint'\n  | 'modelSearchPlaceholder'\n  | 'modelSearchEmpty'\n  | 'modelStale'\n  | 'visibleModelsTitle'\n  | 'visibleModelsHint'\n  | 'visibleModelsPick'\n  | 'visibleModelsCount'\n  | 'visibleModelsShowAll'\n  | 'visibleModelsStaleHint'\n  | 'visibleModelsCleanStale'\n  | 'overridden'\n  | 'reset'\n  | 'invalidNumber'\n  | 'numberTooSmall'\n  | 'numberTooLarge'\n  | 'readOnly'\n  | 'unsaved'\n  | 'save'\n  | 'saving'\n  | 'saved'\n  | 'saveFailed'\n  | 'discard'\n  | 'cancel'\n  | 'show'\n  | 'hide'\n  | 'usageTitle'\n  | 'usageRefresh'\n  | 'usageRefreshing'\n  | 'usageLoading'\n  | 'usageNoKey'\n  | 'usageError'\n  | 'usageRequests'\n  | 'usageFailed'\n  | 'usageSuccessRate'\n  | 'usageCost'\n  | 'usageTokens'\n  | 'usageTokensIn'\n  | 'usageTokensOut'\n  | 'usageMonthly'\n  | 'usagePurchased'\n  | 'usageFree'\n  | 'usageFiveHour'\n  | 'usageWeekly'\n  | 'usageExceeded'\n  | 'usageReset'\n  | 'usagePartial'\n  | 'usageKeyClear'\n  | 'usageKeyClearStaged'\n  | 'usageUndoKeyClear'\n  | 'usageKeyInvalid'\n  | 'usageKeyInvalidHint'\n  | 'usageServiceUnavailable'\n  | 'usageServiceUnavailableHint'\n  | 'usageNetworkError'\n  | 'usageNetworkHint'\n  | 'usageUpdated'\n  | 'usagePeriodEnd'\n  | 'usageActive'\n  | 'usageCooldown'\n  | 'usageInvalidKey'\n  | 'usageUnconfigured'\n  | 'updateAvailable'\n  | 'updateHint'\n  | 'loginTitle'\n  | 'loginHintIdle'\n  | 'loginButton'\n  | 'loginStarting'\n  | 'loginWaiting'\n  | 'loginOpenLink'\n  | 'loginCancel'\n  | 'loginSuccess'\n  | 'loginUnavailable'\n  | 'loginDenied'\n  | 'loginTimeout'\n  | 'loginInvalidKey'\n  | 'loginNetwork'\n  | 'loginStoreFailed'\n  | 'loginCancelled'\n  | 'loginFailedGeneric'\n  | 'cardTitle'\n  | 'cardRouteActive'\n  | 'cardLoadingHint'\n  | 'cardRegistrationHint'\n\nexport const zh: Record<SettingsCommandCodeKey, string> = {\n  nav: 'Command Code',\n  title: 'Command Code',\n  intro:\n    '配置 Command Code Provider 连接。API 密钥仅保存在本机凭据服务中，不会回显；'\n    + '其他字段写入用户设置，下次请求即生效。',\n  apiKey: 'API 密钥',\n  apiKeyHint: '在 commandcode.ai 控制台创建。留空保存不会覆盖已存储的密钥。',\n  apiKeySet: '已配置',\n  apiKeyUnset: '未配置',\n  apiKeyLocked: '密钥由只读来源提供',\n  apiBase: 'API 地址',\n  apiBaseHint: '默认 https://api.commandcode.ai，一般无需修改。',\n  workingDir: '工作目录',\n  workingDirHint: '可选。留空时使用占位符显示的进程工作目录；仅在需要固定路径时填写。',\n  requestTimeoutMs: '请求超时（毫秒）',\n  requestTimeoutMsHint: '等待响应首个字节的超时；默认 60000。',\n  streamIdleTimeoutMs: '流空闲超时（毫秒）',\n  streamIdleTimeoutMsHint: '生成流停滞多久视为断连；默认 300000（长思考模型可静默数分钟，默认值刻意放宽）。',\n  advancedSettings: '高级设置',\n  advancedSettingsHint: 'API 地址、工作目录、超时与模型过滤等不常修改的选项。',\n  advancedOverriddenOne: '已自定义 1 项',\n  advancedOverriddenMany: '已自定义 {count} 项',\n  advancedInvalid: '高级设置中有未填好的数字，请展开修正后再保存。',\n  filterModelsByPlan: '隐藏套餐外模型',\n  filterModelsByPlanHint: '开启后，模型选择器只列出当前套餐可用的模型；账户持有按需余额时会显示全部。',\n  webSearch: '用 Command Code 承载联网搜索',\n  webSearchHint: '开启后，dsh 的 web_search 工具由 Command Code 承担（复用同一个 API key 与地址），并优先于其他搜索后端；关闭则把选择权交还给之前的后端（如 modsearch），而不是强制回退到 DeepSeek 搜索。',\n  accountsTitle: '多账户轮换',\n  accountsHint: '当前账户达到用量限额（429）或密钥失效（401）时，请求自动切换到下一个账户；全部耗尽时会提示最早的重置时间。',\n  accountAdd: '添加账户',\n  accountRemove: '移除',\n  accountLabel: '账户备注名',\n  accountKey: 'API 密钥',\n  accountKeyHint: '该账户的 API 密钥。留空保存不会覆盖已存储的密钥。',\n  accountDefault: '默认账户',\n  activeAccount: '当前使用账户',\n  activeAccountAuto: '自动（第一个可用账户）',\n  activeAccountHint: '手动指定优先使用的账户，保存后下次请求即生效；所选账户耗尽时仍会自动切换到其他可用账户。',\n  rulesTitle: '按模型切换账户',\n  rulesHint: '选择模型并路由到某个账户（可多选）。命中规则的模型且该账户可用时优先使用；账户耗尽或密钥失效时仍自动回落到其他账户。规则按列表顺序匹配，第一条命中生效。',\n  rulesEmpty: '尚未配置规则。',\n  rulesCatalogFailed: '模型目录获取失败，暂时无法选择模型；已保存的规则仍会生效。',\n  ruleAdd: '添加规则',\n  ruleRemove: '移除',\n  ruleModel: '模型',\n  ruleModelPick: '选择模型…',\n  ruleModelCount: '已选 {count} 个模型',\n  ruleAccount: '目标账户',\n  ruleHint: '从下拉列表勾选要路由的模型（可多选），再选择目标账户。',\n  modelSearchPlaceholder: '搜索模型…',\n  modelSearchEmpty: '没有匹配的模型。',\n  modelStale: '已下架',\n  visibleModelsTitle: '模型白名单',\n  visibleModelsHint:\n    '勾选要保留的模型，模型选择器就只列出这些；一个都不勾选时则显示全部模型。'\n    + '保存后，下次打开模型选择器生效。',\n  visibleModelsPick: '选择要保留的模型…',\n  visibleModelsCount: '已选 {count} 个模型',\n  visibleModelsShowAll: '显示全部',\n  visibleModelsStaleHint: '有 {count} 个已选模型在目录中找不到了（可能已下架），不影响其他模型；可清理或保留。',\n  visibleModelsCleanStale: '清理失效（{count}）',\n  overridden: '已覆盖',\n  reset: '重置',\n  invalidNumber: '无效数字',\n  numberTooSmall: '不能小于 1（毫秒）',\n  numberTooLarge: '超出允许上限（2147483647 毫秒）',\n  readOnly: '当前配置为只读。',\n  unsaved: '未保存',\n  save: '保存',\n  saving: '保存中',\n  saved: '已保存 ✓',\n  saveFailed: '保存失败，请重试。',\n  discard: '放弃',\n  cancel: '取消',\n  show: '显示',\n  hide: '隐藏',\n  usageTitle: '账户用量',\n  usageRefresh: '刷新',\n  usageRefreshing: '刷新中…',\n  usageLoading: '正在获取账户用量…',\n  usageNoKey: '配置 API 密钥后，这里会显示账户的用量与额度状态。',\n  usageError: '用量获取失败',\n  usageRequests: '请求',\n  usageFailed: '失败',\n  usageSuccessRate: '成功率',\n  usageCost: '花费',\n  usageTokens: 'Token',\n  usageTokensIn: '入',\n  usageTokensOut: '出',\n  usageMonthly: '月额度',\n  usagePurchased: '已购',\n  usageFree: '赠送',\n  usageFiveHour: '5 小时窗口',\n  usageWeekly: '每周窗口',\n  usageExceeded: '已超限',\n  usageReset: '重置于',\n  usagePartial: '部分端点数据不可用',\n  usageKeyClear: '清除已存密钥',\n  usageKeyClearStaged: '将清除（保存后生效）',\n  usageUndoKeyClear: '撤销清除',\n  usageKeyInvalid: 'API 密钥无效或已过期',\n  usageKeyInvalidHint: '服务端拒绝了全部请求（401）。请检查该账户配置的密钥，或到 commandcode.ai 控制台重新生成。',\n  usageServiceUnavailable: 'Command Code 服务暂时不可用',\n  usageServiceUnavailableHint: '服务端返回了错误（5xx），稍后点击刷新重试。',\n  usageNetworkError: '无法连接 Command Code 服务',\n  usageNetworkHint: '所有请求都没有到达服务端。请检查网络连接或 API 地址设置。',\n  usageUpdated: '更新于',\n  usagePeriodEnd: '账期截止',\n  usageActive: '当前使用',\n  usageCooldown: '限额冷却中',\n  usageInvalidKey: '密钥无效',\n  usageUnconfigured: '该账户尚未配置 API 密钥。',\n  updateAvailable: '可更新',\n  updateHint: '已发布新版本，点击查看发布说明；更新插件后刷新本页，提示会自动消失。',\n  loginTitle: '通过官方登录获取密钥',\n  loginHintIdle: '不想手动创建密钥？点击登录后浏览器会打开 commandcode.ai 授权页，完成后密钥自动写入本机凭据服务，下次请求即生效。',\n  loginButton: '登录 Command Code',\n  loginStarting: '正在启动本地回调服务…',\n  loginWaiting: '等待在浏览器中完成授权…',\n  loginOpenLink: '打开授权页面 ↗',\n  loginCancel: '取消登录',\n  loginSuccess: '已登录为',\n  loginUnavailable: '此环境暂不支持登录流程，请手动粘贴密钥。',\n  loginDenied: '授权被拒绝。可重试，或手动粘贴密钥。',\n  loginTimeout: '等待超时：未在窗口期内收到授权回调，请重试。',\n  loginInvalidKey: '获取到的密钥未通过校验（401），请重试或手动粘贴。',\n  loginNetwork: '无法连接 Command Code 服务校验密钥，请检查网络后重试。',\n  loginStoreFailed: '密钥无法写入本机凭据服务，请手动粘贴。',\n  loginCancelled: '登录已取消。',\n  loginFailedGeneric: '登录失败，请重试或手动粘贴密钥。',\n  cardTitle: 'Command Code',\n  cardRouteActive: '已启用',\n  cardLoadingHint: '正在读取 Command Code 配置…',\n  cardRegistrationHint: '此卡片随 Command Code 插件注册，需要较新版本的 DeepSeek Harness 才会显示完整内容。',\n}\n\nexport const en: Record<SettingsCommandCodeKey, string> = {\n  nav: 'Command Code',\n  title: 'Command Code',\n  intro:\n    'Configure the Command Code Provider connection. The API key is stored only'\n    + ' in the local credential service and never echoed; other fields are written'\n    + ' to user settings and take effect on the next request.',\n  apiKey: 'API key',\n  apiKeyHint: 'Create one in the commandcode.ai console. Saving with this field'\n    + ' blank keeps the stored key.',\n  apiKeySet: 'Configured',\n  apiKeyUnset: 'Not configured',\n  apiKeyLocked: 'Key provided by a read-only source',\n  apiBase: 'API base URL',\n  apiBaseHint: 'Defaults to https://api.commandcode.ai; usually leave as-is.',\n  workingDir: 'Working directory',\n  workingDirHint: 'Optional. Leave blank to use the process cwd shown as the'\n    + ' placeholder; fill in only to pin a specific path.',\n  requestTimeoutMs: 'Request timeout (ms)',\n  requestTimeoutMsHint: 'Time to wait for the first response byte; default 60000.',\n  streamIdleTimeoutMs: 'Stream idle timeout (ms)',\n  streamIdleTimeoutMsHint: 'How long a stalled stream is treated as dead; default 300000'\n    + ' (deliberately generous — long-thinking models can stay silent for minutes).',\n  advancedSettings: 'Advanced',\n  advancedSettingsHint: 'Rarely touched options: API base URL, working directory, timeouts, and model filtering.',\n  advancedOverriddenOne: '1 customized',\n  advancedOverriddenMany: '{count} customized',\n  advancedInvalid: 'A number in Advanced settings is not ready to save; expand to fix it.',\n  filterModelsByPlan: 'Hide out-of-plan models',\n  filterModelsByPlanHint: 'When on, the model picker lists only models your subscription'\n    + ' includes; any on-demand credit balance shows the full catalog.',\n  webSearch: 'Serve dsh web search with Command Code',\n  webSearchHint: 'When on, the model-facing web_search tool is backed by Command Code'\n    + ' (same API key and base URL as chat), winning over other search backends.'\n    + ' Off hands the selection back to the previous backend (e.g. modsearch)'\n    + ' instead of forcing the shipped DeepSeek search.',\n  accountsTitle: 'Account rotation',\n  accountsHint: 'When the active account hits its usage limit (429) or its key'\n    + ' fails (401), requests switch to the next account; when every account is'\n    + ' exhausted the error names the earliest window reset.',\n  accountAdd: 'Add account',\n  accountRemove: 'Remove',\n  accountLabel: 'Account label',\n  accountKey: 'API key',\n  accountKeyHint: 'This account’s API key. Saving with the field blank keeps the stored key.',\n  accountDefault: 'Default account',\n  activeAccount: 'Active account',\n  activeAccountAuto: 'Auto (first usable account)',\n  activeAccountHint: 'Pin the preferred account; applies to the next request after saving.'\n    + ' If the selected account is exhausted, requests still rotate to another usable account.',\n  rulesTitle: 'Route models to accounts',\n  rulesHint: 'Pick models (multi-select) and route them to an account. When the'\n    + ' request’s model is in a rule and that account is usable, it serves;'\n    + ' an exhausted or invalid routed account falls back to the normal rotation.'\n    + ' Rules match in list order — the first hit wins.',\n  rulesEmpty: 'No rules yet.',\n  rulesCatalogFailed: 'Could not load the model catalog — selecting models is unavailable; saved rules still apply.',\n  ruleAdd: 'Add rule',\n  ruleRemove: 'Remove',\n  ruleModel: 'Models',\n  ruleModelPick: 'Select models…',\n  ruleModelCount: '{count} model(s) selected',\n  ruleAccount: 'Target account',\n  ruleHint: 'Check the models to route from the dropdown (multi-select), then pick the target account.',\n  modelSearchPlaceholder: 'Search models…',\n  modelSearchEmpty: 'No matching models.',\n  modelStale: 'Retired',\n  visibleModelsTitle: 'Model allowlist',\n  visibleModelsHint:\n    'Check the models you want to keep, and model pickers will list only those. '\n    + 'If nothing is checked, every model is shown. After saving, the change '\n    + 'applies the next time you open a model picker.',\n  visibleModelsPick: 'Select models to keep…',\n  visibleModelsCount: '{count} model(s) selected',\n  visibleModelsShowAll: 'Show all',\n  visibleModelsStaleHint: '{count} selected model(s) are no longer in the catalog (possibly retired);'\n    + ' other models are unaffected. Clean them up or keep them.',\n  visibleModelsCleanStale: 'Clean stale ({count})',\n  overridden: 'Overridden',\n  reset: 'Reset',\n  invalidNumber: 'Invalid number',\n  numberTooSmall: 'Must be at least 1 (ms)',\n  numberTooLarge: 'Above the allowed maximum (2147483647 ms)',\n  readOnly: 'Settings are read-only.',\n  unsaved: 'Unsaved',\n  save: 'Save',\n  saving: 'Saving',\n  saved: 'Saved ✓',\n  saveFailed: 'Save failed, please retry.',\n  discard: 'Discard',\n  cancel: 'Cancel',\n  show: 'Show',\n  hide: 'Hide',\n  usageTitle: 'Account usage',\n  usageRefresh: 'Refresh',\n  usageRefreshing: 'Refreshing…',\n  usageLoading: 'Fetching account usage…',\n  usageNoKey: 'Configure an API key to see this account’s usage and credit state here.',\n  usageError: 'Could not fetch usage',\n  usageRequests: 'Requests',\n  usageFailed: 'failed',\n  usageSuccessRate: 'Success rate',\n  usageCost: 'Spend',\n  usageTokens: 'Tokens',\n  usageTokensIn: 'in',\n  usageTokensOut: 'out',\n  usageMonthly: 'Monthly',\n  usagePurchased: 'Purchased',\n  usageFree: 'Free',\n  usageFiveHour: '5-hour window',\n  usageWeekly: 'Weekly window',\n  usageExceeded: 'Exceeded',\n  usageReset: 'Resets',\n  usagePartial: 'Some endpoint data unavailable',\n  usageKeyClear: 'Clear stored key',\n  usageKeyClearStaged: 'Will be cleared on save',\n  usageUndoKeyClear: 'Undo clear',\n  usageKeyInvalid: 'API key invalid or expired',\n  usageKeyInvalidHint: 'The server rejects every request (401). Check the key configured for this account, or generate a new one in the commandcode.ai console.',\n  usageServiceUnavailable: 'The Command Code service is temporarily unavailable',\n  usageServiceUnavailableHint: 'The server returned errors (5xx); try Refresh again later.',\n  usageNetworkError: 'Could not reach the Command Code service',\n  usageNetworkHint: 'No request reached the server. Check your network connection or the API base setting.',\n  usageUpdated: 'Updated',\n  usagePeriodEnd: 'Period ends',\n  usageActive: 'Active',\n  usageCooldown: 'Cooling down',\n  usageInvalidKey: 'Invalid key',\n  usageUnconfigured: 'No API key configured for this account yet.',\n  updateAvailable: 'update available',\n  updateHint: 'A newer version has been published; click for release notes. The notice disappears once the plugin is updated.',\n  loginTitle: 'Sign in to fetch a key',\n  loginHintIdle: 'Rather not create a key by hand? Sign in and your browser opens the commandcode.ai authorization page; the approved key is stored in the local credential service and applies to the next request.',\n  loginButton: 'Sign in to Command Code',\n  loginStarting: 'Starting the local callback server…',\n  loginWaiting: 'Waiting for authorization in your browser…',\n  loginOpenLink: 'Open the authorization page ↗',\n  loginCancel: 'Cancel sign-in',\n  loginSuccess: 'Signed in as',\n  loginUnavailable: 'Sign-in is unavailable in this environment; paste the API key instead.',\n  loginDenied: 'Authorization was denied. Try again or paste the key manually.',\n  loginTimeout: 'Timed out waiting for the authorization callback; try again.',\n  loginInvalidKey: 'The delivered key failed validation (401). Try again or paste it manually.',\n  loginNetwork: 'Could not reach the Command Code service to validate the key; check your network and retry.',\n  loginStoreFailed: 'The key could not be stored in the local credential service; paste it manually.',\n  loginCancelled: 'Sign-in cancelled.',\n  loginFailedGeneric: 'Sign-in failed; try again or paste the key manually.',\n  cardTitle: 'Command Code',\n  cardRouteActive: 'Active',\n  cardLoadingHint: 'Loading the Command Code configuration…',\n  cardRegistrationHint: 'This card is contributed by the Command Code plugin; a newer DeepSeek Harness is needed to show the full controls.',\n}\n","/**\n * Browser half of the dsh-commandcode-provider bundle.\n *\n * Two responsibilities:\n *\n * 1. A \"Command Code\" settings page (a `settings.section` entry at the same\n *    nav level as General / Models / Plugins). The Models page renders an\n *    unknown-adapter-family card for the `commandcode` provider and disables\n *    its submit, so the API key cannot be configured there; this page is the\n *    dedicated surface. It writes the API key through the credentials domain\n *    (the `COMMANDCODE_API_KEY` reference the plugin resolves via\n *    `ctx.remote.credentials`) and the connection facts through the\n *    `llm-commandcode` settings namespace, so a saved key or endpoint reaches\n *    the very next request.\n *\n * 2. The Models-page provider card (settings.models.provider-card) and the\n *    friendly image-gate error wrapper — see `./card.tsx` / `./sessions.ts`.\n *    The wrapper is deliberately narrow: only the `model-unavailable` code is\n *    rewritten, only when the message matches the image-session gate, and only\n *    the message text changes.\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\nimport { createSnapshotStore } from './snapshot-store.ts'\n// Type-only imports that pull in the client-service augmentations\n// (`slots`/`remote`/`locale` on Context) and the `settings.section` SlotMap\n// entry (`settingsScope` arrives through dsh-client-ui-settings).\nimport type {} from '@deepseek-ai/dsh-api-remotes/client'\nimport type {} from '@deepseek-ai/dsh-client-locale/client'\nimport type {} from '@deepseek-ai/dsh-client-ui-renderer/client'\nimport type {} from '@deepseek-ai/dsh-client-ui-settings/client'\nimport { installFriendlyImageError } from './sessions.ts'\nimport type { ConnectionLike } from './sessions.ts'\nimport { CommandCodeSettingsController, COMMANDCODE_NS, type SettingsPageState } from './settings.ts'\nimport type { HostDescriptionSource, SettingsPageApi } from './settings.ts'\nimport { adaptLegacyCredentials, type LegacyCredentialsApi } from './legacy-credentials.ts'\nimport { CommandCodeUsageController, type UsagePageState, type UsageRemote } from './usage.ts'\nimport { CommandCodePricesController, type SessionCostPricesState } from './prices.ts'\nimport { CommandCodeLoginController, type LoginPageState, type LoginRemote } from './login.ts'\nimport { USAGE_REMOTE_CONTRIBUTION, MODELS_REMOTE_CONTRIBUTION, PRICES_REMOTE_CONTRIBUTION } from '../usage-wire.ts'\nimport { LOGIN_REMOTE_CONTRIBUTION } from '../login-wire.ts'\nimport type { TypertRemoteContribution } from '@deepseek-ai/dsh-typert-protocol'\nimport { CommandCodeSettingsPage } from './section.tsx'\nimport { CommandCodeProviderCard } from './card.tsx'\nimport { CommandCodePanel, CommandCodeFooterEntry } from './panel-view.tsx'\nimport type { PanelInjected } from './panel-view.tsx'\nimport { CommandCodeSessionCost } from './session-cost-view.tsx'\nimport type { SessionCostInjected } from './session-cost-view.tsx'\nimport { startPanelAutoRefresh } from './panel.ts'\nimport { PANEL_CSS, PANEL_CSS_ID } from './panel-styles.ts'\n// Type-only: pulls in the SlotMap merge for the composer dock\n// (`./session-cost-slots.ts`). The sidebar-foot / center-column merge rides the\n// `./panel-view.tsx` value import above, which imports `./panel-slots.ts`.\nimport type {} from './session-cost-slots.ts'\nimport { zh, en } from './locales.ts'\n\nexport { isImageSessionRejection, withFriendlyImageError } from './sessions.ts'\n\n/** CSS for the settings page, injected once (harness bundle convention). */\nconst PAGE_CSS = `\n.cc-section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex}\n.cc-title{margin:0;font-size:18px;font-weight:600}\n.cc-intro{color:var(--dsw-alias-label-tertiary);margin:0;font-size:13px;line-height:1.5}\n.cc-readOnly{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}\n.cc-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:4px 16px}\n.cc-field{flex-direction:column;gap:6px;padding:12px 0;display:flex}\n.cc-field+.cc-field{border-top:1px solid var(--dsw-alias-border-l2)}\n.cc-fieldHead{align-items:center;gap:8px;display:flex}\n.cc-label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}\n.cc-badges{align-items:center;gap:8px;display:inline-flex}\n.cc-badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}\n.cc-badgeMuted{white-space:nowrap;color:var(--dsw-alias-label-tertiary);border-radius:999px;padding:1px 8px;font-size:11px;line-height:17px}\n.cc-reset{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}\n.cc-reset:hover:not(:disabled){color:var(--dsw-alias-label-primary)}\n.cc-reset:disabled{cursor:default;opacity:.5}\n.cc-input{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}\n.cc-input:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}\n.cc-input:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}\n/* The routing-rule model multi-select: a button trigger that opens an\n * anchored Menu of checkbox rows. The trigger mirrors .cc-input sizing so it\n * sits flush with the sibling account select. */\n.cc-ruleTrigger{align-items:center;gap:8px;display:flex;width:100%;text-align:left;cursor:pointer}\n.cc-ruleTrigger:disabled{cursor:default}\n.cc-ruleTriggerText{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.cc-ruleCaret{flex-shrink:0;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);width:6px;height:6px;margin-right:4px;margin-bottom:2px;transform:rotate(45deg)}\n.cc-checkRow{align-items:center;gap:8px;display:inline-flex;min-width:0}\n.cc-checkRow:hover{cursor:pointer}\n.cc-check{appearance:none;flex-shrink:0;width:15px;height:15px;margin:0;border:1px solid var(--dsw-alias-border-l2);border-radius:4px;background:var(--dsw-alias-bg-layer-1);position:relative}\n.cc-check:checked{background:var(--dsw-alias-brand-primary);border-color:var(--dsw-alias-brand-primary)}\n.cc-check:checked::after{content:'';position:absolute;top:2px;left:5px;width:3px;height:7px;border:solid #fff;border-width:0 1.5px 1.5px 0;transform:rotate(45deg)}\n.cc-checkName{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n/* The model multi-select search box: stacked under the trigger while the\n * dropdown is open, same input sizing so the pair reads as one control. The\n * box lives inside the Menu anchor (which renders inside the Menu's root\n * span), so focusing/typing it never trips the Menu's outside-click close. */\n.cc-modelSelectAnchor{flex-direction:column;gap:6px;display:flex;width:100%}\n.cc-modelSearch{width:100%}\n.cc-modelSearch::-webkit-search-cancel-button{cursor:pointer}\n/* Selects need their own treatment to sit flush with the text inputs:\n * the UA stylesheet renders <select> border-box (34px total vs the inputs'\n * 36px) and forces its own menulist text metrics, so drop the native\n * chrome entirely (appearance:none), restore content-box so the outer box\n * matches the inputs again, and draw the chevron ourselves. Longhand\n * background-* only — the shorthand would reset .cc-input's background. */\nselect.cc-input{appearance:none;-webkit-appearance:none;-moz-appearance:none;box-sizing:content-box;padding-right:32px;background-image:url(\"data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='7' viewBox='0 0 12 7'%3E%3Cpath d='M1 1l5 5 5-5' fill='none' stroke='%23888f98' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E\");background-repeat:no-repeat;background-position:right 11px center}\n.cc-inputInvalid{border-color:var(--dsw-alias-label-error)}\n.cc-invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}\n/* The Advanced card: its header row is one full-width toggle button; the\n * chevron is two borders on a rotated square (no icon dependency). */\n.cc-advancedHead{align-items:center;gap:8px;display:flex;width:100%;padding:12px 0;background:0 0;border:none;cursor:pointer;font:inherit;text-align:left}\n.cc-advancedHead:hover .cc-advancedTitle{color:var(--dsw-alias-label-primary)}\n.cc-advancedTitle{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:500;line-height:1.5}\n.cc-advancedSpacer{flex:1}\n.cc-chevron{flex-shrink:0;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);width:8px;height:8px;margin-right:4px;margin-bottom:2px;transform:rotate(45deg);transition:transform .15s ease}\n.cc-chevronUp{transform:rotate(-135deg);margin-bottom:-3px}\n.cc-advancedBody{flex-direction:column;display:flex}\n.cc-advancedBody>.cc-field:first-of-type{border-top:1px solid var(--dsw-alias-border-l2)}\n.cc-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}\n.cc-footer{justify-content:flex-end;align-items:center;gap:8px;display:flex}\n.cc-toggleRow{align-items:center;gap:8px;cursor:pointer;display:flex}\n.cc-toggleRow:has(.cc-toggle:disabled){cursor:default}\n.cc-toggle{appearance:none;flex-shrink:0;background:var(--dsw-alias-border-l2);border-radius:999px;width:30px;height:18px;margin:0;cursor:pointer;position:relative;transition:background .15s ease}\n.cc-toggle:checked{background:var(--dsw-alias-brand-primary)}\n.cc-toggle::after{content:'';background:#fff;border-radius:50%;width:14px;height:14px;position:absolute;top:2px;left:2px;transition:left .15s ease}\n.cc-toggle:checked::after{left:14px}\n.cc-toggle:disabled{cursor:default;opacity:.5}\n.cc-failed{min-width:0;color:var(--dsw-alias-label-error);flex:1;margin:0;font-size:12px;line-height:1.5}\n.cc-usageCard{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:14px 16px;flex-direction:column;gap:12px;display:flex}\n.cc-usageHead{align-items:center;gap:8px;display:flex}\n.cc-usageTitle{color:var(--dsw-alias-label-primary);flex:1;margin:0;font-size:13px;font-weight:600;line-height:1.5}\n.cc-usageAccount{max-width:40%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}\n.cc-usagePlan{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-brand-primary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:600;line-height:17px}\n.cc-usagePlanStatus{white-space:nowrap;color:var(--dsw-alias-label-error);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}\n.cc-usageRefresh{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}\n.cc-usageRefresh:hover:not(:disabled){color:var(--dsw-alias-label-primary)}\n.cc-usageRefresh:disabled{cursor:default;opacity:.5}\n.cc-usageHint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}\n.cc-usageError{align-items:center;gap:8px;color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5;display:flex}\n.cc-usageStats{grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:8px;display:grid}\n.cc-usageStat{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:8px;padding:8px 10px;flex-direction:column;gap:2px;display:flex}\n.cc-usageStatLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}\n.cc-usageStatValue{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}\n.cc-usageStatSub{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}\n.cc-usageWindows{flex-direction:column;gap:16px;display:flex}\n.cc-usageWindow{flex-direction:column;gap:6px;display:flex}\n.cc-usageWindowHead{align-items:baseline;gap:8px;display:flex}\n.cc-usageWindowLabel{color:var(--dsw-alias-label-secondary);flex:1;font-size:12px;font-weight:500;line-height:1.5}\n.cc-usageWindowValue{color:var(--dsw-alias-label-primary);font-size:12px;font-weight:500;line-height:1.5}\n.cc-usageExceeded{color:var(--dsw-alias-label-error);font-size:11px;font-weight:500;line-height:1.5}\n.cc-usageBar{overflow:hidden;background:var(--dsw-alias-bg-layer-1);border-radius:999px;height:6px}\n.cc-usageBarFill{background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}\n.cc-usageBarFillWarn{background:var(--dsw-alias-label-error)}\n@media (prefers-reduced-motion:reduce){.cc-chevron,.cc-toggle,.cc-toggle::after,.cc-usageBarFill{transition:none}}.cc-usageWindowReset{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}\n.cc-usageMeta{align-items:center;gap:8px;display:flex}\n.cc-accountReport{flex-direction:column;gap:12px;display:flex}\n.cc-tabs{flex-wrap:wrap;gap:6px;display:flex}\n.cc-tab{align-items:center;font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex;gap:6px}\n.cc-tab:hover:not(.cc-tabActive){color:var(--dsw-alias-label-primary)}\n.cc-tabActive{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-brand-primary)}\n.cc-tabDotOk{background:var(--dsw-alias-brand-primary);border-radius:50%;width:6px;height:6px}\n.cc-tabDotWarn{background:#d97706;border-radius:50%;width:6px;height:6px}\n.cc-tabDotError{background:var(--dsw-alias-label-error);border-radius:50%;width:6px;height:6px}\n.cc-usageMetaSpacer{flex:1}\n.cc-usageUpdated{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}\n.cc-usagePartial{color:var(--dsw-alias-label-error);margin:0;font-size:11px;line-height:1.5}\n.cc-usageBlocked{border:1px solid var(--dsw-alias-label-error);border-radius:10px;padding:10px 12px;display:flex;flex-direction:column;gap:4px}\n.cc-usageBlockedTitle{color:var(--dsw-alias-label-error);margin:0;font-size:13px;font-weight:600;line-height:1.5}\n.cc-usageBlockedHint{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px;line-height:1.5}\n.cc-version{margin:4px 0 0;text-align:center;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}\n/* The Models-page provider panel root: unstyled by design — the row card the\n * Models page owns supplies the surface, the panel only stacks its controls. */\n.cc-providerCard{flex-direction:column;display:flex}\n/* The update hint rides the footer version line: warning-tinted (with a\n * muted fallback for themes without the alias), quiet until hovered. */\n.cc-versionLink{color:var(--dsw-alias-state-warning-primary,var(--dsw-alias-label-secondary));text-decoration:none}\n.cc-versionLink:hover{color:var(--dsw-alias-label-primary);text-decoration:underline;text-underline-position:under}\n/* The login panel rides the connection card as one more field row; the\n * authorization link is the only branded element on it. */\n.cc-loginLink{color:var(--dsw-alias-brand-primary);text-decoration:none;font-size:12px;line-height:1.5}\n.cc-loginLink:hover{text-decoration:underline;text-underline-position:under}\n.cc-loginDone{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary))}\n.cc-loginError{color:var(--dsw-alias-label-error)}\n.cc-saved{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-secondary));margin:0;font-size:12px;font-weight:500;line-height:1.5}\n.cc-badgeWarn{background:var(--dsw-alias-state-warning-secondary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warning-primary,var(--dsw-alias-label-secondary))}\n`\n\n/** Inject the page stylesheet once (idempotent per tag). */\nfunction injectPageCss(): void {\n  if (typeof document === 'undefined') return\n  const id = '@mars-sea/dsh-commandcode-provider/CommandCodeSettingsPage.module.css'\n  if (document.querySelector(`style[data-plugin-css=\"${id}\"]`) !== null) return\n  const tag = document.createElement('style')\n  tag.dataset.plugin = '@mars-sea/dsh-commandcode-provider'\n  tag.dataset.pluginCss = id\n  tag.textContent = PAGE_CSS\n  document.head.appendChild(tag)\n}\n\n/**\n * Install the plans & quota panel's stylesheet and return its disposer, for\n * `ctx.effect` to own. Keyed by its own `data-plugin-css` id, so the injection\n * is idempotent even if a second surface asks for it later.\n */\nfunction injectPanelCss(): () => void {\n  if (typeof document === 'undefined') return () => {}\n  if (document.querySelector(`style[data-plugin-css=\"${PANEL_CSS_ID}\"]`) !== null) return () => {}\n  const tag = document.createElement('style')\n  tag.dataset.plugin = '@mars-sea/dsh-commandcode-provider'\n  tag.dataset.pluginCss = PANEL_CSS_ID\n  tag.textContent = PANEL_CSS\n  document.head.appendChild(tag)\n  return () => {\n    tag.remove()\n  }\n}\n\n/**\n * Plans & quota panel id. It is the layout's `MainPanelId`: one string shared\n * by the `sidebar.footer.action` card and the `main` slot cell, so the card\n * selects this panel and nothing else. `dsh-client-ui-layout` is not a\n * dependency of this bundle (its type is only a brand over `string`), so the\n * brand is applied at the call site instead of importing the package.\n */\nconst PANEL_ID = 'commandcode-panel'\n\n/**\n * The composer figure's entry id in `conversation.composer.dock`. Its own id,\n * not the shipped `stats` cell's: reusing `stats` would REPLACE the tokens /\n * cache-hit / throughput readout rather than inject into it, and that readout\n * is the harness's to format (see `./session-cost-display.ts`).\n */\nconst SESSION_COST_ID = 'commandcode-session-cost'\n\n/**\n * The one shot of the `layout` service this plugin needs, declared\n * structurally for the same reason as {@link PANEL_ID}: importing the package\n * would make the browser resolve a client module this bundle never calls.\n * Reached through the reflective `ctx.get('layout')`, never a bare `ctx.layout`\n * property — cordis throws `cannot get property … without inject` for an\n * undeclared service, and declaring `layout` statically would park the whole\n * client fiber (settings page included) on a service some profiles never mount.\n */\ninterface LayoutSelectionSeam {\n  selectPanel(id: string): void\n}\n\n/** Connection fields retained by pre-0.1.2 clients and absent from the current transport handle. */\ninterface LegacyConnectionLike extends ConnectionLike {\n  api?: ConnectionLike['api'] & { credentials?: LegacyCredentialsApi }\n  hostDescription?: HostDescriptionSource\n}\n\n/**\n * Client plugin body. Gates on the services shared by both client generations\n * (`slots`, `locale`, `connection`, `remote`, `settingsScope`). Current clients\n * mount the page after `remote.credentials` appears; legacy clients mount it\n * from the connection ApiProxy credential face.\n */\nexport function apply(ctx: Context): void {\n  injectPageCss()\n\n  const connection = ctx.get('connection') as LegacyConnectionLike | undefined\n  if (connection !== undefined) {\n    // The wrapper is reached from a non-React path that has no `t` in scope;\n    // it reads the active client locale at call time, so a language switch\n    // immediately applies to the next selectModel failure. On legacy builds\n    // it wraps `connection.api.sessions`; 0.1.2 replaced that façade with\n    // `remote.session`, so the helper safely skips this UX-only rewrite there\n    // instead of preventing the whole plugin from activating.\n    installFriendlyImageError(connection, () => ctx.locale.getLocale().active === 'zh' ? 'zh' : 'en')\n  }\n\n  // The \"Command Code\" settings page: register the section once the\n  // `settings.section` declaration is on the ledger (ui-settings-general\n  // owns the shell; registration order relative to it is not constrained —\n  // `slots.inject` waits for the declaration).\n  ctx.effect(() => ctx.locale.register('settings.commandcode', { zh, en }), 'dsh-commandcode-provider: page copy')\n\n  const legacyApi = adaptLegacyCredentials(connection?.api?.credentials)\n  if (legacyApi !== undefined) {\n    applyClientSurfaces(ctx, legacyApi, connection?.hostDescription)\n    return\n  }\n\n  // DSH 0.1.2 exposes credentials through a Typert Remote namespace. Keep it\n  // optional at the root so a legacy client without `remote.credentials` can\n  // still activate through the ApiProxy branch above.\n  ctx.inject(['remote.credentials'], (remoteCtx) => {\n    const credentials = (remoteCtx.remote as unknown as {\n      credentials: SettingsPageApi['credentials']\n    }).credentials\n    applyClientSurfaces(remoteCtx, { credentials })\n  })\n}\n\n/** Mount the one shared UI implementation over either credential transport. */\nfunction applyClientSurfaces(\n  ctx: Context,\n  api: SettingsPageApi,\n  hostDescription?: HostDescriptionSource,\n): void {\n  const scope = ctx.settingsScope.bind<Record<string, unknown>>({ namespace: COMMANDCODE_NS })\n  // The model catalog for the settings page's model editors (the\n  // routing-rule editor and the visible-models filter) is served by the\n  // `commandcode/models` Remote below; the controller reads it through this\n  // mutable seam so the Remote mount (which happens after the controller is\n  // constructed) still reaches the catalog fetch. Unset until the mount\n  // lands — the controller degrades to the empty-catalog state meanwhile.\n  let modelsRemote: NonNullable<SettingsPageApi['models']> | undefined\n  const controller = new CommandCodeSettingsController(\n    scope,\n    { ...api, models: () => modelsRemote?.() ?? Promise.resolve({ ok: false, error: { message: 'commandcode/models remote is not mounted' } }) },\n    hostDescription,\n  )\n  ctx.effect(() => () => controller.dispose(), 'dsh-commandcode-provider: settings controller')\n  const store = createSnapshotStore<SettingsPageState>(controller.state())\n  controller.subscribe(() => store.set(controller.state()))\n  ctx.effect(\n    () => (ctx.remote as unknown as {\n      $on(event: 'credentials/reference-updated', listener: (ref: string) => void): () => void\n    }).$on('credentials/reference-updated', () => { controller.refreshCredentials() }),\n    'dsh-commandcode-provider: credential invalidations',\n  )\n\n  // The account-usage card + login panel: mount the shared Remote contribution\n  // (one mount carries every endpoint this plugin serves — report, catalog,\n  // price table, and login — so the Client's bookkeeping stays 1:1 with the\n  // Host's single registry registration), then resolve the\n  // `remote.commandcode` namespace through a scoped inject. Cordis only serves\n  // services a fiber declares in `inject`, and the namespace service exists\n  // only after the mount — a static inject would deadlock the plugin (the\n  // mounter would wait for its own mount), so the inject is registered\n  // dynamically once the mount lands. A Host half that predates the Remote\n  // fails the calls instead, and the surfaces render their error branches.\n  let usageNamespace: (typeof ctx.remote)['commandcode'] | undefined\n  let usageMountError: string | undefined\n  // Declared here, constructed below once the Remote seam exists: the mount\n  // effect underneath calls `ensure()` from its inject callback, which cordis\n  // runs synchronously while the mount promise settles — before the\n  // controller's own `const` below would have been initialized.\n  let pricesController: CommandCodePricesController | undefined\n  const contribution: TypertRemoteContribution = {\n    package: USAGE_REMOTE_CONTRIBUTION.package,\n    descriptors: [\n      ...USAGE_REMOTE_CONTRIBUTION.descriptors,\n      ...MODELS_REMOTE_CONTRIBUTION.descriptors,\n      ...PRICES_REMOTE_CONTRIBUTION.descriptors,\n      ...LOGIN_REMOTE_CONTRIBUTION.descriptors,\n    ],\n  }\n  ctx.effect(() => {\n    let cancelled = false\n    let unmount: (() => Promise<void>) | undefined\n    void ctx.remote.$mount(contribution).then((dispose: () => Promise<void>) => {\n      if (cancelled) {\n        void dispose()\n        return\n      }\n      unmount = dispose\n      ctx.inject(['remote.commandcode'], (namespaceCtx) => {\n        usageNamespace = namespaceCtx.remote.commandcode\n        // The catalog Remote is live now; (re)fetch it for the model editors.\n        controller.refreshCatalog()\n        // ...and the price table, which the composer's cost readout needs. This\n        // is its only trigger: `ensure()` is idempotent, so a readout already on\n        // screen simply starts pricing when the table lands, and asking earlier\n        // could only fail (the namespace did not exist yet).\n        pricesController?.reload()\n        namespaceCtx.effect(() => () => {\n          usageNamespace = undefined\n        }, 'dsh-commandcode-provider: usage namespace')\n      })\n    }, (error: unknown) => {\n      // A mount failure (e.g. a harness without the Remote mount) leaves the\n      // namespace unset; keep the reason so the card can surface it.\n      usageMountError = error instanceof Error ? error.message : String(error)\n    })\n    return () => {\n      cancelled = true\n      usageNamespace = undefined\n      if (unmount !== undefined) void unmount()\n    }\n  }, 'dsh-commandcode-provider: usage remote')\n  const usageRemote: UsageRemote = {\n    report: async () => {\n      const namespace = usageNamespace\n      if (namespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode/report remote is not mounted' } }\n      }\n      return namespace.report()\n    },\n    models: async () => {\n      const namespace = usageNamespace\n      if (namespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode/models remote is not mounted' } }\n      }\n      return namespace.models()\n    },\n    prices: async () => {\n      const namespace = usageNamespace\n      if (namespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode/prices remote is not mounted' } }\n      }\n      const call = namespace.prices\n      // A Host half older than the price table mounts no such descriptor, so\n      // the namespace member is genuinely missing. Report it as a failure the\n      // readout treats as permanent rather than throwing.\n      if (typeof call !== 'function') {\n        return { ok: false, error: { message: 'the Host serves no commandcode/prices endpoint', permanent: true } }\n      }\n      return call.call(namespace)\n    },\n  }\n  // Wire the catalog Remote into the settings controller's models seam so the\n  // model editors can fetch the catalog once the mount lands.\n  modelsRemote = () => usageRemote.models()\n  const usageController = new CommandCodeUsageController(usageRemote)\n  ctx.effect(() => () => usageController.dispose(), 'dsh-commandcode-provider: usage controller')\n  const usageStore = createSnapshotStore<UsagePageState>(usageController.state())\n  usageController.subscribe(() => usageStore.set(usageController.state()))\n\n  // The composer's session-cost readout prices a session from a static table,\n  // so its controller is a one-shot cache rather than a poll: it fetches once\n  // the namespace is live and never again.\n  pricesController = new CommandCodePricesController(usageRemote)\n  ctx.effect(() => () => pricesController?.dispose(), 'dsh-commandcode-provider: price table')\n  const pricesStore = createSnapshotStore<SessionCostPricesState>(pricesController.state())\n  pricesController.subscribe(() => pricesStore.set(pricesController.state()))\n\n  // The login panel: same namespace, three endpoints; the key never crosses\n  // to the browser — the Host validates and stores it through the credentials\n  // seam, and a landed login re-reads the credential badges + usage card.\n  const loginRemote: LoginRemote = {\n    loginBegin: async () => {\n      if (usageNamespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode remote is not mounted' } }\n      }\n      return usageNamespace.loginBegin()\n    },\n    loginStatus: async () => {\n      if (usageNamespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode remote is not mounted' } }\n      }\n      return usageNamespace.loginStatus()\n    },\n    loginCancel: async () => {\n      if (usageNamespace === undefined) {\n        return { ok: false, error: { message: usageMountError ?? 'commandcode remote is not mounted' } }\n      }\n      return usageNamespace.loginCancel()\n    },\n  }\n  const loginController = new CommandCodeLoginController(() => loginRemote)\n  ctx.effect(() => () => loginController.dispose(), 'dsh-commandcode-provider: login controller')\n  const loginStore = createSnapshotStore<LoginPageState>(loginController.state())\n  let lastLoginPhase = loginController.state().phase\n  loginController.subscribe(() => {\n    const phase = loginController.state().phase\n    // A landed login stored the key Host-side behind the page's back; the\n    // badges must follow and the account card can finally fetch.\n    if (phase === 'success' && lastLoginPhase !== 'success') {\n      controller.refreshCredentials()\n      void usageController.refresh()\n    }\n    lastLoginPhase = phase\n    loginStore.set(loginController.state())\n  })\n\n  const injected = () => ({\n    hooks: { commandCodeSettings: store, commandCodeUsage: usageStore, commandCodeLogin: loginStore },\n    edit: (field: string, text: string) => controller.edit(field, text),\n    resetField: (field: string) => controller.resetField(field),\n    // A landed save can change the key or endpoint the usage endpoints read,\n    // so the account card refetches; a failed save keeps the old data.\n    save: () => void controller.save().then(() => {\n      const settled = controller.state()\n      if (!settled.failed && settled.anyAccountConfigured) void usageController.refresh()\n    }),\n    discard: () => controller.discard(),\n    refreshUsage: () => void usageController.refresh(),\n    beginLogin: () => void loginController.begin(),\n    cancelLogin: () => void loginController.cancel(),\n    addAccount: () => controller.addAccount(),\n    removeAccount: (id: string) => controller.removeAccount(id),\n    editAccountLabel: (id: string, text: string) => controller.editAccountLabel(id, text),\n    editAccountKey: (id: string, text: string) => controller.editAccountKey(id, text),\n    toggleKeyClear: (id: string) => controller.toggleKeyClear(id),\n    addRule: () => controller.addRule(),\n    removeRule: (id: string) => controller.removeRule(id),\n    editRuleModels: (id: string, ids: string[]) => controller.editRuleModels(id, ids),\n    editRuleAccount: (id: string, text: string) => controller.editRuleAccount(id, text),\n    editVisibleModels: (ids: string[]) => controller.editVisibleModels(ids),\n    clearVisibleModels: () => controller.clearVisibleModels(),\n  })\n\n  ctx.slots.inject('settings.section', () => ctx.slots.register({\n    name: 'settings.section',\n    id: 'commandcode',\n    order: 12,\n    label: () => ctx.locale.bind('settings.commandcode')('nav'),\n    locale: 'settings.commandcode',\n    inject: injected,\n  }, CommandCodeSettingsPage))\n\n  // The Models-page provider panel (dsh 0.1.2, rc.1): a keyed slot the\n  // Models section dispatches with `entryKey = settingsNs` on every provider\n  // card of an adapter family. Registering under `llm-commandcode` mounts the\n  // panel beside the official editor on every Command Code row — including\n  // the first-run setup posture, exactly where a user without a key lands.\n  // While the official 编辑 toggle is open, the panel hides the official\n  // editor shell (for this namespace it holds only the settings.yaml hint\n  // over a disabled apply) and shows the real controls; see card.tsx.\n  // The registration carries its own inject face (store hooks + actions)\n  // because the declaring entry is ui-settings-models', not ours; the `t`\n  // seat comes from the registration's own `locale` namespace.\n  //\n  // On dsh builds without this slot the declaration never exists and\n  // `slots.inject` never fires its callback — the registration silently\n  // does not happen, and nothing else about the plugin changes.\n  ctx.slots.inject('settings.models.provider-card', () => ctx.slots.register({\n    name: 'settings.models.provider-card',\n    key: 'llm-commandcode',\n    locale: 'settings.commandcode',\n    inject: () => ({\n      hooks: { commandCodeSettings: store, commandCodeLogin: loginStore },\n      edit: (field: string, text: string) => controller.edit(field, text),\n      save: () => void controller.save().then(() => {\n        const settled = controller.state()\n        if (!settled.failed && settled.anyAccountConfigured) void usageController.refresh()\n      }),\n      discard: () => controller.discard(),\n      beginLogin: () => void loginController.begin(),\n      cancelLogin: () => void loginController.cancel(),\n    }),\n  }, CommandCodeProviderCard))\n\n  // The plans & quota panel: a footer card pinned at the bottom of the\n  // sidebar, on top of the Settings seat, that opens a dashboard in the\n  // center column.\n  //\n  // Two registrations, one navigation entry. `sidebar.footer.action` is the\n  // list the sidebar shell renders in its foot area directly above the\n  // Settings seat (`footArea` = `footerActions` then `settingsArea`), which is\n  // what puts this card at the bottom of the column rather than at the top\n  // with the global panel icons of `sidebar.panellist`. The layout's keyed\n  // `main` slot holds the panel the card opens — `ctx.layout.selectPanel(id)`\n  // resolves the id against that registry and throws when no cell occupies it,\n  // so BOTH are required, and BOTH need the `inject` face below (an entry\n  // without one receives none of the panel's data; see the `hooks` → `useX`\n  // rule in panel-view.tsx).\n  //\n  // Unlike a `sidebar.panellist` row, the shell renders NO chrome around a\n  // footer action: our component is the button, it owns the label (so a title\n  // carrying live quota needs no re-registration — that dance exists only\n  // because the shell caches a panellist entry's label), and it selects the\n  // panel itself through the `open` action below.\n  //\n  // Neither registration declares a `locale` namespace: the panel is English by\n  // construction, from `./panel-copy.ts`, not by locale lookup. That is a\n  // deliberate limitation, not an oversight — the two quota labels are the\n  // surface's whole point and the copy is reviewed as one block.\n  //\n  // Version reality, measured across 0.1.1-rc.2 … 0.1.5-rc.2 (see AGENTS.md):\n  // `sidebar.footer.action` and `conversation.composer.dock` exist and RENDER in\n  // every one of those releases, while the layout's keyed `main` slot and its\n  // `selectPanel` arrive in 0.1.5 (alpha.2 and rc.1 respectively). So the three\n  // slots do NOT share a version floor, and the honest boundary is the layout\n  // seam: without `selectPanel` the card would register, render, and do nothing\n  // when clicked — a dead button. The footer registration is therefore gated on\n  // the `layout` service, which arrives with the same package that owns `main`.\n  //\n  // The dashboard cell itself needs no such gate: registering a cell for a\n  // declaration that never arrives is a no-op by construction (the callback only\n  // runs while the declaration is live), so on an older engine it simply never\n  // registers. Only the always-declared footer seat needed an explicit guard.\n  //\n  // Shape notes:\n  //   * The stylesheet gets its own `ctx.effect` rather than riding an `inject`\n  //     callback's return value, so the tag's lifetime is the plugin fiber's and\n  //     is unaffected by a slot declaration collapsing and re-declaring.\n  //   * Each registration is guarded so a failure in one surface cannot abort\n  //     `applyClientSurfaces` and take the OTHER surfaces down with it —\n  //     `slots.inject` rethrows a callback failure synchronously once the\n  //     declaration exists. The renderer contains a *render* crash by abdicating\n  //     the entry with no visible error, so a failure that leaves nothing on\n  //     screen must at least be loud in the console.\n  const panelFace = (): PanelInjected => ({\n    hooks: { commandCodeUsage: usageStore, commandCodeSettings: store },\n    refresh: () => { pricesController?.ensure(); void usageController.refresh() },\n    // The Host resolves every credential source, including CLI auth and literals.\n    // A browser credential-reference lookup cannot determine availability.\n    startAutoRefresh: () => startPanelAutoRefresh(usageController, () => true),\n    // `layout` is read reflectively AT CLICK TIME, never captured at setup:\n    // ui-layout is not a dependency of this bundle (its types are not imported\n    // and its client module is never resolved), so a static `inject` would park\n    // the whole client fiber — settings page included — on a service another\n    // profile may never mount. The footer registration is gated on that same\n    // seam, so by the time this runs the method exists; the guard stays as the\n    // last line of defence against a layout that renames it.\n    open: () => {\n      const layout = ctx.get('layout') as LayoutSelectionSeam | undefined\n      if (typeof layout?.selectPanel === 'function') layout.selectPanel(PANEL_ID)\n    },\n  })\n\n  ctx.effect(() => injectPanelCss(), 'dsh-commandcode-provider: panel styles')\n\n  try {\n    ctx.slots.inject('main', () => ctx.slots.register(\n      { name: 'main', key: PANEL_ID, inject: panelFace },\n      CommandCodePanel,\n    ))\n  } catch (error: unknown) {\n    console.error('[dsh-commandcode-provider] could not register the plans & quota panel:', error)\n  }\n\n  // The footer card is registered only where the layout can actually open the\n  // panel behind it. `ctx.inject(['layout'], …)` runs its body when that service\n  // is live and re-runs it if the service is replaced, mirroring how the Remote\n  // namespace is mounted — so a profile without ui-layout (the TUI, a headless\n  // client) never registers the card, and a pre-0.1.5 engine that mounts a\n  // layout lacking `selectPanel` is filtered out by the explicit capability\n  // check below. Without this gate the card would render and silently do\n  // nothing on click, which is worse than not being there.\n  ctx.inject(['layout'], (layoutCtx) => {\n    const layout = layoutCtx.get('layout') as LayoutSelectionSeam | undefined\n    if (typeof layout?.selectPanel !== 'function') return\n    try {\n      layoutCtx.slots.inject('sidebar.footer.action', () => layoutCtx.slots.register(\n        // `order` is the only control over position inside a list slot, and the\n        // renderer sorts ascending. ui-cordis's footer chip registers at the\n        // default 0, so 1 sorts after it — but any sibling passing an order ≥ 1\n        // lands between this card and Settings, so \"directly above Settings\" is\n        // a preference, not a guarantee.\n        { name: 'sidebar.footer.action', id: PANEL_ID, order: 1, inject: panelFace },\n        CommandCodeFooterEntry,\n      ))\n    } catch (error: unknown) {\n      console.error('[dsh-commandcode-provider] could not register the sidebar footer card:', error)\n    }\n  })\n\n  // The composer's session-cost figure: an entry in the dock below the input\n  // that renders NO surface of its own. The cost is injected into the harness's\n  // own token-usage UI — the amount as the last item of the shipped pill's text\n  // run, the breakdown as rows inside the usage dialog that pill opens (see\n  // `./session-cost-display.ts`).\n  //\n  // The entry exists for its SEATS, not for a surface: `useProjection` is a\n  // standard prop the composer hands every dock occupant, so this registration\n  // is the only way to read the session's token accounting. Its id must stay\n  // distinct from the shipped `stats` cell's, because registering under an\n  // existing id REPLACES that cell rather than extending it.\n  //\n  // It carries only the price-table hook: the token buckets and the model\n  // selection arrive from the composer itself as standard dock props\n  // (`useProjection`), which the owner supplies to every occupant.\n  //\n  // No `locale` namespace and no `t` seat: the figure is English by\n  // construction, from `./session-cost.ts`. dsh builds before 0.1.5 have no\n  // `conversation.composer.dock`, so this registration silently does not happen\n  // there — as does the injection itself, whose DOM anchors are 0.1.5 markup.\n  const sessionCostFace = (): SessionCostInjected => ({\n    hooks: { commandCodePrices: pricesStore },\n  })\n\n  try {\n    ctx.slots.inject('conversation.composer.dock', () => ctx.slots.register(\n      // No `order`: the entry renders nothing, so its position among the dock's\n      // rows cannot matter — the sort only ever decides what a reader sees.\n      { name: 'conversation.composer.dock', id: SESSION_COST_ID, inject: sessionCostFace },\n      CommandCodeSessionCost,\n    ))\n  } catch (error: unknown) {\n    console.error('[dsh-commandcode-provider] could not register the composer session-cost readout:', error)\n  }\n}\n\nexport const inject: readonly string[] = [\n  'slots',\n  'locale',\n  'connection',\n  'remote',\n  'settingsScope',\n]\n"],"mappings":";;;;;;;;;;;EAmBA,SAAS,gBAAgB,WAA0C;GACjE,KAAK,MAAM,YAAY,WACrB,IAAI;IACF,SAAS;GACX,SAAS,OAAgB;IACvB,QAAQ,MAAM,0DAA0D,KAAK;GAC/E;EAEJ;;EAGA,SAAgB,oBAAuB,SAA8B;GACnE,IAAI,WAAW;GACf,MAAM,4BAAY,IAAI,IAAgB;GACtC,OAAO;IACL,mBAAmB;IACnB,UAAU,UAAsB;KAC9B,UAAU,IAAI,QAAQ;KACtB,aAAa;MACX,UAAU,OAAO,QAAQ;KAC3B;IACF;IACA,IAAI,OAAU;KACZ,IAAI,OAAO,GAAG,OAAO,QAAQ,GAAG;KAChC,WAAW;KACX,gBAAgB,SAAS;IAC3B;GACF;EACF;;;ECGA,MAAa,qBAA8E;GACzF,IAAI;IACF,OAAO;IACP,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,wBAAwB;IACxB,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,mBACE;IACF,2BACE;IACF,gBACE;IACF,UAAU;IACV,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,UAAU;IACV,YAAY;IACZ,eAAe;IACf,aAAa;IACb,SAAS;IACT,eAAe;IACf,cAAc;IACd,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,WAAW;IACX,WACE;GAEJ;GACA,IAAI;IACF,OAAO;IACP,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,wBAAwB;IACxB,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,mBACE;IACF,2BACE;IACF,gBACE;IACF,UAAU;IACV,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,UAAU;IACV,YAAY;IACZ,eAAe;IACf,aAAa;IACb,SAAS;IACT,eAAe;IACf,cAAc;IACd,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,WAAW;IACX,WACE;GAGJ;EACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ECpDA,SAAgB,wBACd,QAC0E;GAC1E,OACE,CAAC,OAAO,OAAO,MACf,OAAO,OAAO,MAAM,SAAS,uBAC7B,OAAO,OAAO,MAAM,QAAQ,SAAS,6BAA6B;EAEtE;;EAGA,SAAgB,uBACd,UACA,WACc;GACd,MAAM,cAAc,SAAS,YAAY,KAAK,QAAQ;GACtD,OAAO;IACL,GAAG;IACH,aAAa,OAAO,SAAS,WAAW;KACtC,MAAM,SAAS,MAAM,YAAY,SAAS,MAAM;KAChD,IAAI,CAAC,wBAAwB,MAAM,GAAG,OAAO;KAC7C,MAAM,QAAQ,OAAO,OAAO,MAAM,SAAS,SAAS,QAAQ;KAC5D,MAAM,WAAW,mBAAmB,UAAU,EAAE,CAAC,aAC5C,mBAAmB,GAAG;KAC3B,OAAO;MACL,GAAG;MACH,QAAQ;OACN,GAAG,OAAO;OACV,OAAO;QACL,GAAG,OAAO,OAAO;QACjB,SAAS,SAAS,QAAQ,WAAW,KAAK;OAC5C;MACF;KACF;IACF;GACF;EACF;;;;;;;;EAmBA,SAAgB,0BACd,YACA,WACS;GACT,MAAM,MAAM,WAAW;GACvB,MAAM,WAAW,KAAK;GACtB,IAAI,QAAQ,KAAA,KAAa,aAAa,KAAA,KAAa,OAAO,SAAS,gBAAgB,YAAY,OAAO;GACtG,IAAI,WAAW,uBAAuB,UAAU,SAAS;GACzD,OAAO;EACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EC7GA,MAAa,iBAAiB;;EAE9B,MAAa,sBAAsB;;EAwNnC,SAAS,UAAU,OAA0B;GAC3C,OAAO;IACL;IACA,SAAS,UAAW,OAAO,UAAU,WAAW,QAAQ;IACxD,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,OAAO,YAAY,KAAK,EAAE,MAAM,QAAQ,IAAI;MAAE,MAAM;MAAO,OAAO;KAAQ;IAC5E;GACF;EACF;;;;;;;;;EAUA,SAASA,cAAY,OAAe,QAAoD;GACtF,OAAO;IACL;IACA,SAAS,UAAW,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI;IAChE,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,IAAI,YAAY,IAAI,OAAO,EAAE,MAAM,QAAQ;KAC3C,MAAM,SAAS,OAAO,OAAO;KAC7B,IAAI,CAAC,OAAO,SAAS,MAAM,GAAG,OAAO;MAAE,MAAM;MAAW,QAAQ;KAAS;KACzE,IAAI,QAAQ,QAAQ,KAAA,KAAa,SAAS,OAAO,KAAK,OAAO;MAAE,MAAM;MAAW,QAAQ;KAAW;KACnG,IAAI,QAAQ,QAAQ,KAAA,KAAa,SAAS,OAAO,KAAK,OAAO;MAAE,MAAM;MAAW,QAAQ;KAAW;KACnG,OAAO;MAAE,MAAM;MAAO,OAAO;KAAO;IACtC;GACF;EACF;;;;;;EAOA,SAASC,eAAa,OAA0B;GAC9C,OAAO;IACL;IACA,SAAS,UAAW,OAAO,UAAU,YAAY,OAAO,KAAK,IAAI;IACjE,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,IAAI,YAAY,IAAI,OAAO,EAAE,MAAM,QAAQ;KAC3C,IAAI,YAAY,QAAQ,OAAO;MAAE,MAAM;MAAO,OAAO;KAAK;KAC1D,IAAI,YAAY,SAAS,OAAO;MAAE,MAAM;MAAO,OAAO;KAAM;KAC5D,OAAO;MAAE,MAAM;MAAW,QAAQ;KAAS;IAC7C;GACF;EACF;EAUA,MAAa,iBAAiB;;EAG9B,MAAM,iBAA8B;GAClC,UAAU,SAAS;GACnB,UAAU,YAAY;GACtBD,cAAY,oBAAoB;IAAE,KAAA;IAAqB,KAAK;GAAe,CAAC;GAC5EA,cAAY,uBAAuB;IAAE,KAAA;IAAqB,KAAK;GAAe,CAAC;GAC/EC,eAAa,oBAAoB;GACjCA,eAAa,WAAW;GACxB,UAAU,eAAe;EAC3B;;EAGA,SAAS,WAAW,GAAsB,GAA+B;GACvE,IAAI,EAAE,WAAW,EAAE,QAAQ,OAAO;GAClC,MAAM,MAAM,IAAI,IAAI,CAAC;GACrB,OAAO,EAAE,OAAO,OAAO,IAAI,IAAI,EAAE,CAAC;EACpC;;;;;;EAOA,SAAS,gBAAgB,OAA8E;GACrG,OAAO,KAAK,UAAU,MAAM,KAAK,SAAS,CAAC,KAAK,QAAQ,KAAK,OAAO,CAAC,CAAC;EACxE;;;;;;EAOA,IAAa,gCAAb,MAA2C;GACzC;GACA;GACA,QAAyB,IAAI,IAAI,eAAe,KAAK,SAAS,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;GACjF,yBAA0B,IAAI,IAAoB;GAClD,4BAA6B,IAAI,IAAgB;GACjD,YAAgD,CAAC;GACjD,WAAmB;GACnB;;GAEA,gBAAwB;;GAExB,mCAAoC,IAAI,IAAwD;;GAEhG,gBAA+D,CAAC;;GAEhE,8BAA+B,IAAI,IAAY;;GAE/C,8BAA+B,IAAI,IAAoB;;GAEvD,4BAA6B,IAAI,IAAoB;;GAErD,4BAA6B,IAAI,IAAY;;GAE7C,aAAmE,CAAC;;GAEpE,6BAA8B,IAAI,IAAmD;;;;;;;;GAQrF,iCAAkC,IAAI,IAAmD;;;;;;GAMzF,kBAA8C,KAAA;;GAE9C,qBAAmD,KAAA;;GAEnD,gBAA8C,CAAC;GAC/C,gBAAwB;GACxB,SAAiB;GACjB,SAAiB;GACjB,aAAqB;;;;;;;GAQrB,YACE,OACA,KACA,iBACA;IACA,KAAK,QAAQ;IACb,KAAK,MAAM;IACX,KAAK,UAAU,KAAK,MAAM,gBAAgB;KACxC,KAAK,uBAAuB;KAC5B,KAAU,YAAY;KACtB,KAAK,QAAQ;IACf,CAAC,CAAC;IACF,IAAI,oBAAoB,KAAA,GAAW;KACjC,KAAK,oBAAoB,gBAAgB,YAAY,CAAC,EAAE;KACxD,KAAK,UAAU,KAAK,gBAAgB,gBAAgB;MAClD,IAAI,KAAK,UAAU;MACnB,MAAM,MAAM,gBAAgB,YAAY,CAAC,EAAE;MAC3C,IAAI,QAAQ,KAAK,mBAAmB;OAClC,KAAK,oBAAoB;OACzB,KAAK,QAAQ;MACf;KACF,CAAC,CAAC;IACJ;IACA,KAAK,uBAAuB;IAC5B,KAAU,YAAY;IACtB,KAAK,eAAe;GACtB;;GAGA,UAAgB;IACd,IAAI,KAAK,UAAU;IACnB,KAAK,WAAW;IAChB,KAAK,MAAM,WAAW,KAAK,WAAW,QAAQ;IAC9C,KAAK,UAAU,SAAS;IACxB,KAAK,UAAU,MAAM;GACvB;;;;;;;GAQA,yBAAuC;IACrC,MAAM,WAAW,KAAK,MAAM,YAAY;IACxC,MAAM,QAAQ,OAAO,SAAS,OAAO,cAAc,YAAY,SAAS,MAAM,UAAU,SAAS,IAC7F,SAAS,MAAM,YACf;IACJ,IAAI,UAAU,KAAK,eAAe;IAGlC,KAAK,iBAAiB,OAAO,KAAK,aAAa;IAC/C,KAAK,gBAAgB;GACvB;;GAGA,UAAU,UAAkC;IAC1C,KAAK,UAAU,IAAI,QAAQ;IAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;GAC7C;;GAGA,QAA2B;IACzB,MAAM,WAAW,KAAK,MAAM,YAAY;IACxC,MAAM,OAAO,KAAK,KAAK;IACvB,MAAM,aAAa,KAAK,iBAAiB,IAAI,KAAK,aAAa;IAC/D,MAAM,WAAW,KAAK,kBAAkB;IACxC,OAAO;KACL,WAAW,SAAS,WAAW;KAC/B,UAAU,SAAS;KACnB,kBAAkB,YAAY,cAAc;KAC5C,uBAAuB,YAAY,cAAc,UAAU,SAAS,MAAM,YAAY,QAAQ,UAAU;KACxG,gBAAgB,YAAY,YAAY;KACxC,QAAQ;MACN,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,QAAQ;MACzC,OAAO;MACP,YAAY;MACZ,SAAS;MACT,eAAe,KAAA;KACjB;KACA,mBAAmB,KAAK,UAAU,IAAI,KAAK,aAAa;KACxD,SAAS,KAAK,MAAM,SAAS;KAC7B,YAAY,KAAK,MAAM,YAAY;KACnC,mBAAmB,KAAK;KACxB,kBAAkB,KAAK,MAAM,kBAAkB;KAC/C,qBAAqB,KAAK,MAAM,qBAAqB;KACrD,oBAAoB,KAAK,MAAM,oBAAoB;KACnD,WAAW,KAAK,MAAM,WAAW;KACjC,eAAe,KAAK,MAAM,eAAe;KACzC;KACA,kBAAkB,CAAC,GAAG,KAAK,WAAW;KACtC,OAAO,KAAK,eAAe;KAC3B,eAAe,KAAK,uBAAuB;KAC3C,eAAe,KAAK;KACpB,eAAe,KAAK;KACpB,OAAO,KAAK,SAAS,KAAK,KAAK,cAAc,KAAK,KAAK,WAAW,KAAK,KAAK,mBAAmB;KAC/F,SAAS,KAAK,MAAM,SAAS,KAAK,QAAQ,KAAA,CAAS;KACnD,QAAQ,KAAK;KACb,QAAQ,KAAK;KACb,YAAY,KAAK;IACnB;GACF;;GAGA,aAAmB;IACjB,MAAM,uBAAO,IAAI,IAAI;KACnB,KAAK;KACL,GAAG,KAAK,aAAa,CAAC,CAAC,KAAK,UAAU,MAAM,GAAG;KAC/C,GAAG,KAAK,cAAc,KAAK,UAAU,MAAM,GAAG;IAChD,CAAC;IAKD,IAAI,IAAI;IACR,OAAO,KAAK,IAAI,GAAG,KAAK,cAAc,GAAG,GAAG,GAAG,KAAK;IACpD,MAAM,QAAQ,KAAK,aAAa,CAAC,CAAC,SAAS,KAAK,cAAc,SAAS;IACvE,KAAK,cAAc,KAAK;KAAE,OAAO,WAAW;KAAS,KAAK,GAAG,KAAK,cAAc,GAAG;IAAI,CAAC;IACxF,KAAK,SAAS;IACd,KAAU,YAAY;IACtB,KAAK,QAAQ;GACf;;GAGA,cAAc,IAAkB;IAC9B,MAAM,aAAa,KAAK,cAAc,WAAW,UAAU,MAAM,QAAQ,EAAE;IAC3E,IAAI,cAAc,GAAG,KAAK,cAAc,OAAO,YAAY,CAAC;SACvD,KAAK,YAAY,IAAI,EAAE;IAC5B,KAAK,YAAY,OAAO,EAAE;IAC1B,KAAK,UAAU,OAAO,EAAE;IAIxB,MAAM,eAAe,KAAK,OAAO,IAAI,eAAe;IAIpD,KAHoB,iBAAiB,KAAA,IACjC,aAAa,QAAQ,KAAK,aAAa,OACvC,OAAO,KAAK,aAAa,eAAe,MAAM,WAAW,KAAK,aAAa,eAAe,IAAc,QACxF,IAClB,KAAK,OAAO,IAAI,iBAAiB;KAAE,MAAM;KAAI,OAAO;IAAK,CAAC;IAE5D,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,iBAAiB,IAAY,MAAoB;IAC/C,KAAK,YAAY,IAAI,IAAI,IAAI;IAC7B,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,eAAe,IAAY,MAAoB;IAC7C,KAAK,UAAU,IAAI,IAAI,IAAI;IAI3B,KAAK,UAAU,OAAO,EAAE;IACxB,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;;;;;;;GASA,eAAe,QAAsB;IACnC,MAAM,MAAM,WAAW,YAAY,KAAK,gBAAgB;IACxD,IAAI,KAAK,UAAU,IAAI,GAAG,GACxB,KAAK,UAAU,OAAO,GAAG;SACpB;KACL,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe,MAAM;KAEzD,KAAK,UAAU,OAAO,GAAG;KACzB,IAAI,QAAQ,KAAK,eAAe,KAAK,OAAO,OAAO,QAAQ;KAC3D,KAAK,UAAU,IAAI,GAAG;IACxB;IACA,KAAK,SAAS;IACd,KAAU,YAAY;IACtB,KAAK,QAAQ;GACf;;GAGA,UAAgB;IACd,KAAK,WAAW,KAAK;KAAE,QAAQ,CAAC;KAAG,SAAS;IAAU,CAAC;IACvD,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,WAAW,IAAkB;IAC3B,MAAM,aAAa,KAAK,WAAW,WAAW,GAAG,UAAU,OAAO,YAAY,EAAE;IAChF,IAAI,cAAc,GAAG,KAAK,WAAW,OAAO,YAAY,CAAC;SACpD;KAGH,MAAM,SAAS,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS,KAAK,OAAO,EAAE;KAC/D,KAAK,eAAe,IAAI,IAAI,WAAW,KAAA,IACnC;MAAE,QAAQ,CAAC;MAAG,SAAS;KAAG,IAC1B;MAAE,QAAQ,CAAC,GAAG,OAAO,MAAM;MAAG,SAAS,OAAO;KAAQ,CAAC;IAC7D;IACA,KAAK,WAAW,OAAO,EAAE;IACzB,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,eAAe,IAAY,QAAwB;IACjD,MAAM,aAAa,KAAK,WAAW,WAAW,GAAG,UAAU,OAAO,YAAY,EAAE;IAChF,IAAI,cAAc,GAChB,KAAK,WAAW,cAAc;KAAE,GAAG,KAAK,WAAW;KAAc;IAAO;SACnE;KACL,MAAM,UAAU,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS,KAAK,OAAO,EAAE,KAAK;MAAE,QAAQ,CAAC;MAAG,SAAS;KAAU;KACjI,KAAK,WAAW,IAAI,IAAI;MAAE,GAAG;MAAS;KAAO,CAAC;IAChD;IACA,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,gBAAgB,IAAY,MAAoB;IAC9C,MAAM,aAAa,KAAK,WAAW,WAAW,GAAG,UAAU,OAAO,YAAY,EAAE;IAChF,IAAI,cAAc,GAChB,KAAK,WAAW,cAAc;KAAE,GAAG,KAAK,WAAW;KAAc,SAAS;IAAK;SAC1E;KACL,MAAM,UAAU,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS,KAAK,OAAO,EAAE,KAAK;MAAE,QAAQ,CAAC;MAAG,SAAS;KAAU;KACjI,KAAK,WAAW,IAAI,IAAI;MAAE,GAAG;MAAS,SAAS;KAAK,CAAC;IACvD;IACA,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,KAAK,OAAe,MAAoB;IACtC,KAAK,OAAO,IAAI,OAAO;KAAE;KAAM,OAAO;IAAM,CAAC;IAE7C,IAAI,UAAU,UAAU,KAAK,UAAU,OAAO,KAAK,aAAa;IAChE,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,WAAW,OAAqB;IAC9B,IAAI,UAAU,UAAU;KACtB,KAAK,OAAO,OAAO,QAAQ;KAC3B,KAAK,SAAS;KACd,KAAK,QAAQ;KACb;IACF;IACA,MAAM,OAAO,KAAK,KAAK,KAAK;IAC5B,KAAK,OAAO,IAAI,OAAO;KAAE,MAAM,KAAK,OAAO,KAAK,UAAU,KAAK,CAAC;KAAG,OAAO;IAAK,CAAC;IAChF,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,UAAgB;IACd,IAAI,KAAK,OAAO,SAAS,KAAK,CAAC,KAAK,eAAe,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,oBAAoB,KAAK,CAAC,KAAK,QAAQ;IAC5H,KAAK,OAAO,MAAM;IAClB,KAAK,oBAAoB;IACzB,KAAK,iBAAiB;IACtB,KAAK,0BAA0B;IAC/B,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;;;;;GAOA,qBAA2B;IACzB,KAAU,YAAY;GACxB;;GAGA,MAAM,OAAsB;IAC1B,MAAM,OAAO,KAAK,KAAK;IACvB,MAAM,cAAc,KAAK,YAAY;IACrC,MAAM,WAAW,KAAK,UAAU;IAChC,MAAM,cAAc,KAAK,kBAAkB;IAC3C,IAAK,KAAK,WAAW,KAAK,YAAY,WAAW,KAAK,SAAS,WAAW,KAAK,YAAY,WAAW,KAAM,KAAK,QAAQ;IACzH,MAAM,OAAsC,CAAC;IAC7C,KAAK,MAAM,QAAQ,MAAM;KACvB,IAAI,KAAK,QAAQ,KAAA,GAAW;KAC5B,KAAK,KAAK,KAAK,GAAG;IACpB;IACA,KAAK,SAAS;IACd,KAAK,SAAS;IAId,KAAK,kBAAkB,gBAAgB,KAAK,YAAY,CAAC;IACzD,KAAK,QAAQ;IACb,IAAI,SAAS;IAOb,KAAK,MAAM,OAAO;KAAC,GAAG;KAAM,GAAG;KAAa,GAAG;KAAU,GAAG;IAAW,GAAG;KACxE,IAAI,KAAK;KACT,IAAI;MACF,KAAK,MAAM,IAAI;KACjB,QAAQ;MACN,KAAK;KACP;KACA,IAAI,CAAC,IAAI;MACP,SAAS;MACT;KACF;IACF;IACA,KAAK,SAAS;IACd,KAAK,SAAS,CAAC;IACf,IAAI,QAAQ;KACV,KAAK,cAAc;KACnB,KAAK,OAAO,MAAM;KAClB,KAAK,oBAAoB;KACzB,KAAK,iBAAiB;KACtB,KAAK,0BAA0B;IACjC,OAAO;KAKL,KAAK,wBAAwB;KAC7B,KAAK,qBAAqB;KAC1B,KAAK,8BAA8B;IACrC;IACA,KAAK,QAAQ;GACf;;;;;;;;GASA,0BAAwC;IACtC,MAAM,SAAS,IAAI,IAAI,KAAK,aAAa,CAAC,CAAC,KAAK,UAAU,MAAM,GAAG,CAAC;IACpE,KAAK,gBAAgB,KAAK,cAAc,QAAQ,UAAU,CAAC,OAAO,IAAI,MAAM,GAAG,CAAC;IAChF,KAAK,MAAM,OAAO,CAAC,GAAG,KAAK,WAAW,GACpC,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,YAAY,OAAO,GAAG;IAEnD,KAAK,MAAM,CAAC,KAAK,SAAS,CAAC,GAAG,KAAK,WAAW,GAAG;KAC/C,MAAM,cAAc,KAAK,aAAa,CAAC,CAAC,MAAM,UAAU,MAAM,QAAQ,GAAG,CAAC,EAAE;KAO5E,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,KAAK,KAAK,GAAG,KAAK,YAAY,OAAO,GAAG;IAC3F;IAGA,KAAK,MAAM,OAAO,CAAC,GAAG,KAAK,SAAS,GAClC,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe,MAAM,KAAK,UAAU,OAAO,GAAG;GAEtF;GAMA,KAAa,OAA0B;IACrC,MAAM,OAAO,KAAK,MAAM,IAAI,KAAK;IACjC,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,0CAA0C,OAAO;IACzF,OAAO;GACT;;GAGA,MAAc,OAA4B;IACxC,MAAM,OAAO,KAAK,KAAK,KAAK;IAC5B,MAAM,SAAS,KAAK,OAAO,IAAI,KAAK;IACpC,IAAI,WAAW,KAAA,GACb,OAAO;KACL,MAAM,KAAK,OAAO,KAAK,aAAa,KAAK,CAAC;KAC1C,OAAO;KACP,YAAY,KAAK,OAAO,KAAK;KAC7B,SAAS;KACT,eAAe,KAAA;IACjB;IAEF,MAAM,SAAS,OAAO,QAAQ,EAAE,MAAM,QAAiB,IAAI,KAAK,MAAM,OAAO,IAAI;IACjF,OAAO;KACL,MAAM,OAAO;KACb,OAAO,OAAO;KACd,YAAY,OAAO,SAAS;KAC5B,SAAS,OAAO,SAAS;KACzB,eAAe,OAAO,SAAS,YAAY,OAAO,SAAS,KAAA;IAC7D;GACF;GAEA,aAAqB,OAAwB;IAC3C,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC,QAAQ;GAC1C;GAEA,UAAkB,OAAwB;IACxC,MAAM,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC;IACtC,OAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,MAAM,QAAQ,IAAI,IAClE,KAAiC,SAClC,KAAA;GACN;GAEA,YAAyD;IACvD,MAAM,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC;IACtC,OAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,MAAM,QAAQ,IAAI,IAClE,OACD,KAAA;GACN;GAEA,OAAe,OAAwB;IACrC,MAAM,OAAO,KAAK,UAAU;IAC5B,OAAO,SAAS,KAAA,KAAa,OAAO,UAAU,eAAe,KAAK,MAAM,KAAK;GAC/E;;;;;GAMA,OAAoF;IAClF,MAAM,OAA4E,CAAC;IACnF,KAAK,MAAM,CAAC,OAAO,WAAW,KAAK,QAAQ;KACzC,IAAI,UAAU,UAAU;MACtB,MAAM,QAAQ,OAAO,KAAK,KAAK;MAC/B,IAAI,UAAU,IACZ,KAAK,KAAK;OAAE;OAAO,WAAW,KAAK,SAAS,KAAK;MAAE,CAAC;MAEtD;KACF;KACA,MAAM,OAAO,KAAK,KAAK,KAAK;KAC5B,IAAI,OAAO,OAAO;MAChB,IAAI,KAAK,OAAO,KAAK,GAAG,KAAK,KAAK;OAAE;OAAO,WAAW,KAAK,MAAM,KAAK;MAAE,CAAC;MACzE;KACF;KACA,IAAI,OAAO,SAAS,KAAK,OAAO,KAAK,aAAa,KAAK,CAAC,GAAG;KAC3D,MAAM,SAAS,KAAK,MAAM,OAAO,IAAI;KACrC,IAAI,OAAO,SAAS,WAAW,KAAK,KAAK;MAAE;MAAO,KAAK,KAAA;KAAU,CAAC;UAC7D,IAAI,OAAO,SAAS,SAAS,KAAK,KAAK;MAAE;MAAO,WAAW,KAAK,MAAM,KAAK;KAAE,CAAC;UAC9E,KAAK,KAAK;MAAE;MAAO,WAAW,KAAK,MAAM,OAAO,OAAO,KAAK;KAAE,CAAC;IACtE;IACA,OAAO;GACT;GAEA,MAAc,MAAM,OAAiC;IACnD,MAAM,KAAK,MAAM,MAAM,KAAK;IAC5B,OAAO,CAAC,KAAK,OAAO,KAAK;GAC3B;GAEA,MAAc,MAAM,OAAe,OAAoD;IACrF,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK;IACjC,OAAO,KAAK,UAAU,CAAC,GAAG,WAAW;GACvC;;GAGA,MAAc,SAAS,OAAiC;IACtD,OAAO,KAAK,WAAW,KAAK,eAAe,KAAK;GAClD;;GAGA,MAAc,WAAW,KAAa,OAAiC;IACrE,IAAI;KAEF,IAAI,EAAC,MADkB,KAAK,IAAI,YAAY,IAAI,KAAK,KAAK,EAAA,CAC5C,IAAI,OAAO;IAC3B,QAAQ;KACN,OAAO;IACT;IACA,MAAM,KAAK,YAAY;IACvB,OAAO,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,cAAc;GACvD;;GAGA,MAAc,cAA6B;IACzC,MAAM,OAAO;KACX,KAAK;KACL,GAAG,KAAK,aAAa,CAAC,CAAC,KAAK,UAAU,MAAM,GAAG;KAC/C,GAAG,KAAK,cAAc,KAAK,UAAU,MAAM,GAAG;IAChD;IACA,IAAI;IACJ,IAAI;KACF,WAAW,MAAM,KAAK,IAAI,YAAY,SAAS,IAAI;IACrD,QAAQ;KACN;IACF;IACA,IAAI,CAAC,SAAS,IAAI;IAClB,IAAI,UAAU;IACd,KAAK,MAAM,OAAO,MAAM;KACtB,MAAM,OAAO,SAAS,QAAQ;KAC9B,MAAM,OAAO;MACX,YAAY,MAAM,cAAc;MAChC,UAAU,MAAM,YAAY;KAC9B;KACA,MAAM,OAAO,KAAK,iBAAiB,IAAI,GAAG;KAC1C,IAAI,SAAS,KAAA,KAAa,KAAK,eAAe,KAAK,cAAc,KAAK,aAAa,KAAK,UAAU;MAChG,KAAK,iBAAiB,IAAI,KAAK,IAAI;MACnC,UAAU;KACZ;IACF;IACA,IAAI,SAAS,KAAK,QAAQ;GAC5B;;;;;;;GAQA,iBAAuB;IACrB,MAAM,SAAS,KAAK,IAAI;IACxB,IAAI,WAAW,KAAA,GAAW;KACxB,KAAK,gBAAgB;KACrB,KAAK,QAAQ;KACb;IACF;IACA,OAAY,CAAC,CAAC,MAAM,aAAa;KAC/B,IAAI,SAAS,MAAM,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG;MAGxD,MAAM,SAA+B,CAAC;MACtC,KAAK,MAAM,SAAS,SAAS,MAAM,QAAQ;OACzC,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;OACjD,MAAM,QAAQ;OACd,IAAI,OAAO,MAAM,OAAO,YAAY,OAAO,MAAM,SAAS,UAAU;OACpE,OAAO,KAAK;QACV,IAAI,MAAM;QACV,MAAM,MAAM;QACZ,GAAI,OAAO,MAAM,SAAS,WAAW,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;OAC/D,CAAC;MACH;MACA,KAAK,gBAAgB;MACrB,KAAK,gBAAgB;KACvB,OACE,KAAK,gBAAgB;IAEzB,SAAS;KACP,KAAK,gBAAgB;IACvB,CAAC,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC;GAC9B;;GAOA,oBAA4D;IAC1D,MAAM,MAAM,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO;IAC5C,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC;IACjC,OAAO,IAAI,QACR,UACC,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,CACvE;GACF;;;;;;;;;;;GAYA,eAA8D;IAC5D,MAAM,MAA6C,CAAC;IACpD,KAAK,MAAM,UAAU,KAAK,kBAAkB,GAAG;KAC7C,MAAM,MAAM,OAAO;KACnB,IAAI,OAAO,QAAQ,YAAY,QAAQ,IAAI;KAC3C,MAAM,QAAQ,OAAO;KACrB,IAAI,KAAK;MAAE,OAAO,OAAO,UAAU,YAAY,UAAU,KAAK,QAAQ;MAAK;KAAI,CAAC;IAClF;IACA,OAAO;GACT;;GAGA,oBAAgD;IAC9C,MAAM,SAAS,KAAK,aAAa,CAAC,CAC/B,QAAQ,UAAU,CAAC,KAAK,YAAY,IAAI,MAAM,GAAG,CAAC,CAAC,CACnD,KAAK,WAAW;KAAE,GAAG;KAAO,OAAO;IAAM,EAAE;IAC9C,MAAM,QAAQ,KAAK,cAAc,KAAK,WAAW;KAAE,GAAG;KAAO,OAAO;IAAK,EAAE;IAC3E,OAAO,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,WAAW;KAC3C,IAAI,MAAM;KACV,KAAK,MAAM;KACX,OAAO,KAAK,YAAY,IAAI,MAAM,GAAG,KAAK,MAAM;KAChD,SAAS,KAAK,UAAU,IAAI,MAAM,GAAG,KAAK;KAC1C,YAAY,KAAK,iBAAiB,IAAI,MAAM,GAAG,CAAC,EAAE,cAAc;KAChE,UAAU,KAAK,iBAAiB,IAAI,MAAM,GAAG,CAAC,EAAE,YAAY;KAC5D,OAAO,MAAM;KACb,aAAa,KAAK,UAAU,IAAI,MAAM,GAAG;IAC3C,EAAE;GACJ;;GAGA,iBAAkC;IAChC,OAAO,KAAK,cAAc,SAAS,KAC9B,KAAK,YAAY,OAAO,KACxB,KAAK,YAAY,OAAO,KACxB,KAAK,UAAU,OAAO,KACtB,KAAK,UAAU,OAAO;GAC7B;;GAGA,gBAAiC;IAC/B,IAAI,KAAK,cAAc,SAAS,KAAK,KAAK,YAAY,OAAO,GAAG,OAAO;IACvE,KAAK,MAAM,CAAC,KAAK,SAAS,KAAK,aAAa;KAC1C,MAAM,OAAO,KAAK,aAAa,CAAC,CAAC,MAAM,UAAU,MAAM,QAAQ,GAAG,CAAC,EAAE;KACrE,IAAI,SAAS,KAAA,KAAa,KAAK,KAAK,MAAM,MAAM,SAAS,MAAM,OAAO;IACxE;IACA,KAAK,MAAM,QAAQ,KAAK,UAAU,OAAO,GACvC,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO;IAIjC,KAAK,MAAM,OAAO,KAAK,WACrB,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe,MAAM,OAAO;IAElE,OAAO;GACT;;GAGA,sBAAoC;IAClC,KAAK,gBAAgB,CAAC;IACtB,KAAK,YAAY,MAAM;IACvB,KAAK,YAAY,MAAM;IACvB,KAAK,UAAU,MAAM;IACrB,KAAK,UAAU,MAAM;GACvB;;GAGA,MAAc,SAAS,KAA+B;IACpD,IAAI;KAEF,IAAI,EAAC,MADkB,KAAK,IAAI,YAAY,MAAM,GAAG,EAAA,CACvC,IAAI,OAAO;IAC3B,QAAQ;KACN,OAAO;IACT;IACA,MAAM,KAAK,YAAY;IACvB,OAAO,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe;GACxD;;GAGA,cAAqD;IACnD,IAAI,CAAC,KAAK,cAAc,GAAG,OAAO,CAAC;IACnC,MAAM,OAAsC,CAAC;IAI7C,KAAK,MAAM,OAAO,KAAK,WACrB,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,EAAE,eAAe,MACjD,KAAK,WAAW,KAAK,SAAS,GAAG,CAAC;IAGtC,KAAK,MAAM,CAAC,KAAK,SAAS,KAAK,WAAW;KACxC,MAAM,QAAQ,KAAK,KAAK;KACxB,IAAI,UAAU,MAAM,CAAC,KAAK,YAAY,IAAI,GAAG,KAAK,CAAC,KAAK,UAAU,IAAI,GAAG,GACvE,KAAK,WAAW,KAAK,WAAW,KAAK,KAAK,CAAC;IAE/C;IACA,KAAK,WAAW,KAAK,cAAc,CAAC;IACpC,OAAO;GACT;;;;;;;;;;;;GAaA,MAAc,gBAAkC;IAC9C,MAAM,UAAU,KAAK;IACrB,MAAM,0BAAU,IAAI,IAAY;IAChC,MAAM,OAAuC,CAAC;IAC9C,KAAK,MAAM,SAAS,KAAK,kBAAkB,GAAG;KAC5C,MAAM,MAAM,MAAM;KAGlB,IAAI,OAAO,QAAQ,YAAY,QAAQ,IAAI;MACzC,KAAK,KAAK,EAAE,GAAG,MAAM,CAAC;MACtB;KACF;KACA,IAAI,QAAQ,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG;KAC1C,QAAQ,IAAI,GAAG;KACf,KAAK,KAAK,KAAK,aAAa,KAAK,KAAK,CAAC;IACzC;IAKA,KAAK,MAAM,SAAS,KAAK,eAAe;KACtC,IAAI,QAAQ,IAAI,MAAM,GAAG,GAAG;KAC5B,QAAQ,IAAI,MAAM,GAAG;KACrB,KAAK,KAAK,KAAK,aAAa,MAAM,KAAK,KAAK,CAAC;IAC/C;IACA,MAAM,KAAK,MAAM,IAAI,YAAY,IAAI;IAIrC,MAAM,QAAQ,KAAK,kBAAkB;IACrC,OAAO,MAAM,WAAW,KAAK,UACxB,KAAK,OAAO,MAAM,UAAU,MAAM,MAAM,EAAE,cAAc,KAAK,SAAS;GAC7E;;;;;;GAOA,aACE,KACA,UACyB;IACzB,MAAM,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,EAAE,KAAK;IAC9C,MAAM,OAAO,SAAS,WAClB,EAAE,OAAQ,SAA+B,MAAM,IAC/C,EAAE,GAAI,SAAqC;IAC/C,MAAM,cAAc,KAAK;IACzB,OAAO;KACL,GAAG;KACH,OAAO,UAAU,KAAA,KAAa,UAAU,KACpC,QACA,OAAO,gBAAgB,YAAY,gBAAgB,KAAK,cAAc;KAC1E,WAAW;IACb;GACF;;GAOA,cAAgF;IAC9E,MAAM,MAAM,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO;IAC5C,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC;IACjC,MAAM,MAAgE,CAAC;IACvE,KAAK,MAAM,CAAC,OAAO,UAAU,IAAI,QAAQ,GAAG;KAC1C,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;KACzE,MAAM,SAAS;KACf,MAAM,SAAS,OAAO;KACtB,MAAM,UAAU,OAAO;KACvB,MAAM,aAAa,MAAM,QAAQ,MAAM,KAAK,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,IAChF,OAAoB,QAAQ,MAAM,MAAM,EAAE,IAC3C,CAAC;KACL,IAAI,WAAW,WAAW,GAAG;KAC7B,IAAI,KAAK;MACP,IAAI,QAAQ;MACZ,QAAQ;MACR,SAAS,OAAO,YAAY,YAAY,YAAY,KAAK,UAAU;KACrE,CAAC;IACH;IACA,OAAO;GACT;;GAGA,iBAA0C;IACxC,MAAM,SAAS,KAAK,YAAY,CAAC,CAC9B,QAAQ,SAAS,CAAC,KAAK,eAAe,IAAI,KAAK,EAAE,CAAC,CAAC,CACnD,KAAK,SAAS;KACb,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,EAAE;KACzC,OAAO;MACL,IAAI,KAAK;MACT,QAAQ,OAAO,UAAU,KAAK;MAC9B,SAAS,OAAO,WAAW,KAAK;MAChC,OAAO;KACT;IACF,CAAC;IACH,MAAM,QAAQ,KAAK,WAAW,KAAK,MAAM,WAAW;KAClD,IAAI,OAAO;KACX,QAAQ,KAAK;KACb,SAAS,KAAK;KACd,OAAO;IACT,EAAE;IACF,OAAO,CAAC,GAAG,QAAQ,GAAG,KAAK;GAC7B;;GAGA,cAA+B;IAC7B,OAAO,KAAK,WAAW,SAAS,KAAK,KAAK,eAAe,OAAO,KAAK,KAAK,WAAW,OAAO;GAC9F;;GAGA,aAA8B;IAC5B,IAAI,KAAK,WAAW,SAAS,KAAK,KAAK,eAAe,OAAO,GAAG,OAAO;IACvE,KAAK,MAAM,CAAC,IAAI,UAAU,KAAK,YAAY;KACzC,MAAM,OAAO,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS,KAAK,OAAO,EAAE;KAC7D,IAAI,SAAS,KAAA,GAAW;KACxB,IAAI,MAAM,OAAO,SAAS,KAAK,CAAC,WAAW,MAAM,QAAQ,KAAK,MAAM,GAAG,OAAO;KAC9E,IAAI,MAAM,YAAY,KAAK,SAAS,OAAO;IAC7C;IACA,OAAO;GACT;;GAGA,mBAAiC;IAC/B,KAAK,aAAa,CAAC;IACnB,KAAK,WAAW,MAAM;IACtB,KAAK,eAAe,MAAM;GAC5B;;;;;;;;;;;GAYA,uBAAqC;IACnC,MAAM,SAAS,KAAK,YAAY;IAChC,KAAK,aAAa,KAAK,WAAW,QAAQ,UACxC,CAAC,OAAO,MAAM,SACZ,WAAW,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,YAAY,KAAK,OAAO,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,GAAG,KAAK,cAAc,GAGlD,IAAI,CAFY,OAAO,MAAM,SAC3B,WAAW,SAAS,QAAQ,KAAK,MAAM,KAAK,SAAS,YAAY,KAAK,OAAO,GACnE,KAAK,eAAe,OAAO,EAAE;IAW3C,IAAI,KAAK,oBAAoB,KAAA,KAAa,gBAAgB,MAAM,MAAM,KAAK,iBAAiB;IAC5F,KAAK,WAAW,MAAM;GACxB;;GAGA,sBAAwC;IACtC,MAAM,MAAM,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO;IAC5C,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC;IACjC,OAAO,IAAI,QAAQ,MAAmB,OAAO,MAAM,YAAY,MAAM,EAAE;GACzE;;GAGA,yBAA2C;IACzC,OAAO,KAAK,sBAAsB,KAAK,oBAAoB;GAC7D;;GAGA,qBAAsC;IACpC,OAAO,KAAK,uBAAuB,KAAA,KAC9B,CAAC,WAAW,KAAK,oBAAoB,KAAK,oBAAoB,CAAC;GACtE;;GAGA,sBAAuC;IACrC,OAAO,KAAK,uBAAuB,KAAA;GACrC;;GAGA,4BAA0C;IACxC,KAAK,qBAAqB,KAAA;GAC5B;;GAGA,gCAA8C;IAC5C,IAAI,KAAK,uBAAuB,KAAA,KAC3B,WAAW,KAAK,oBAAoB,KAAK,oBAAoB,CAAC,GACjE,KAAK,qBAAqB,KAAA;GAE9B;;GAGA,oBAA2D;IACzD,IAAI,CAAC,KAAK,mBAAmB,GAAG,OAAO,CAAC;IACxC,OAAO,OAAO,KAAK,mBAAmB,CAAC;GACzC;;GAGA,MAAc,qBAAuC;IACnD,MAAM,OAAO,KAAK,sBAAsB,CAAC;IACzC,MAAM,KAAK,MAAM,IAAI,iBAAiB,IAAI;IAC1C,OAAO,WAAW,KAAK,oBAAoB,GAAG,IAAI;GACpD;;GAGA,kBAAkB,QAAwB;IACxC,KAAK,qBAAqB,CAAC,GAAG,MAAM;IACpC,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,qBAA2B;IACzB,KAAK,qBAAqB,CAAC;IAC3B,KAAK,SAAS;IACd,KAAK,QAAQ;GACf;;GAGA,YAAmD;IACjD,IAAI,CAAC,KAAK,WAAW,GAAG,OAAO,CAAC;IAChC,OAAO,OAAO,KAAK,WAAW,CAAC;GACjC;;GAGA,MAAc,aAA+B;IAS3C,MAAM,OAAO,CACX,GATW,KAAK,YAAY,CAAC,CAAC,QAAQ,SAAS;KAC/C,MAAM,WAAW,KAAK,eAAe,IAAI,KAAK,EAAE;KAGhD,OAAO,aAAa,KAAA,KACf,CAAC,WAAW,SAAS,QAAQ,KAAK,MAAM,KACxC,SAAS,YAAY,KAAK;IACjC,CAEQ,CAAC,CAAC,KAAK,SAAS;KACpB,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,EAAE;KACzC,OAAO;MACL,QAAQ,UAAU,KAAA,KAAa,MAAM,OAAO,SAAS,IAAI,MAAM,SAAS,KAAK;MAC7E,SAAS,OAAO,YAAY,KAAA,KAAa,MAAM,YAAY,KAAK,MAAM,UAAU,KAAK;KACvF;IACF,CAAC,GACD,GAAG,KAAK,WAAW,KAAK,UAAU;KAChC,QAAQ,KAAK;KACb,SAAS,KAAK;IAChB,EAAE,CACJ,CAAC,CAAC,QAAQ,SAAS,KAAK,OAAO,SAAS,CAAC;IAGzC,MAAM,uBAAO,IAAI,IAAY;IAC7B,MAAM,UAAU,KAAK,QAAQ,SAAS;KACpC,MAAM,MAAM,GAAG,KAAK,QAAQ,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAQ;KACzE,IAAI,KAAK,IAAI,GAAG,GAAG,OAAO;KAC1B,KAAK,IAAI,GAAG;KACZ,OAAO;IACT,CAAC;IACD,MAAM,KAAK,MAAM,IAAI,qBAAqB,OAAO;IACjD,MAAM,QAAQ,KAAK,YAAY;IAC/B,OAAO,MAAM,WAAW,QAAQ,UAC3B,QAAQ,OAAO,MAAM,UACtB,MAAM,WAAW,KAAA,KACd,WAAW,MAAM,MAAM,CAAC,QAAQ,KAAK,MAAM,KAC3C,MAAM,MAAM,CAAC,YAAY,KAAK,OAAO;GAC9C;GAEA,UAAwB;IACtB,IAAI,KAAK,UAAU;IACnB,KAAK,MAAM,YAAY,KAAK,WAAW,SAAS;GAClD;EACF;;;;ECnzCA,SAAgB,uBACd,QAC6B;GAC7B,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;GACjC,OAAO,EACL,aAAa;IACX,UAAU,OAAO,SAAS;KACxB,MAAM,WAAW,MAAM,OAAO,SAAS,EAAE,KAAK,CAAC;KAC/C,OAAO,SAAS,OAAO,KACnB;MAAE,IAAI;MAAM,OAAO,SAAS,OAAO,MAAM;KAAY,IACrD;MAAE,IAAI;MAAO,OAAO,SAAS,OAAO;KAAM;IAChD;IACA,KAAK,OAAO,KAAK,UAAU;KACzB,MAAM,WAAW,MAAM,OAAO,IAAI;MAAE;MAAK;KAAM,CAAC;KAChD,OAAO,SAAS,OAAO,KACnB;MAAE,IAAI;MAAM,OAAO,KAAA;KAAU,IAC7B;MAAE,IAAI;MAAO,OAAO,SAAS,OAAO;KAAM;IAChD;IACA,OAAO,OAAO,QAAQ;KACpB,MAAM,WAAW,MAAM,OAAO,MAAM,EAAE,IAAI,CAAC;KAC3C,OAAO,SAAS,OAAO,KACnB;MAAE,IAAI;MAAM,OAAO,KAAA;KAAU,IAC7B;MAAE,IAAI;MAAO,OAAO,SAAS,OAAO;KAAM;IAChD;GACF,EACF;EACF;;;EC+CA,MAAMC,SAAuB;GAAE,QAAQ;GAAQ,QAAQ,KAAA;GAAW,OAAO,KAAA;GAAW,WAAW,KAAA;EAAU;;;;;;EAOzG,IAAa,6BAAb,MAAwC;GACtC;GACA,4BAA6B,IAAI,IAAgB;GACjD,UAAkCA;GAClC,aAAqB;GACrB,WAAmB;GACnB,WAAmB;GAEnB,YAAY,QAAqB;IAC/B,KAAK,SAAS;GAChB;;GAGA,UAAgB;IACd,KAAK,WAAW;IAChB,KAAK,cAAc;IACnB,KAAK,UAAU,MAAM;GACvB;;GAGA,UAAU,UAAkC;IAC1C,KAAK,UAAU,IAAI,QAAQ;IAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;GAC7C;;GAGA,QAAwB;IACtB,OAAO,KAAK;GACd;;;;;GAMA,MAAM,UAAyB;IAC7B,IAAI,KAAK,YAAY,KAAK,UAAU;IACpC,MAAM,aAAa,EAAE,KAAK;IAC1B,KAAK,WAAW;IAChB,KAAK,UAAU;KAAE,GAAG,KAAK;KAAS,QAAQ;KAAW,OAAO,KAAA;IAAU;IACtE,KAAK,QAAQ;IACb,IAAI;KACF,MAAM,WAAW,MAAM,KAAK,OAAO,OAAO;KAC1C,IAAI,KAAK,YAAY,eAAe,KAAK,YAAY;KACrD,IAAI,SAAS,IACX,KAAK,UAAU;MAAE,QAAQ;MAAS,QAAQ,SAAS;MAAO,OAAO,KAAA;MAAW,WAAW,KAAK,IAAI;KAAE;UAElG,KAAK,UAAU;MAAE,GAAG,KAAK;MAAS,QAAQ;MAAS,OAAO,SAAS,MAAM;KAAQ;IAErF,SAAS,OAAgB;KACvB,IAAI,KAAK,YAAY,eAAe,KAAK,YAAY;KACrD,KAAK,UAAU;MACb,GAAG,KAAK;MACR,QAAQ;MACR,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;KAC9D;IACF,UAAU;KACR,IAAI,eAAe,KAAK,YAAY,KAAK,WAAW;IACtD;IACA,KAAK,QAAQ;GACf;GAEA,UAAwB;IACtB,IAAI,KAAK,UAAU;IACnB,KAAK,MAAM,YAAY,KAAK,WAAW,SAAS;GAClD;EACF;;EAOA,SAAgB,YAAY,OAAuB;GACjD,OAAO,IAAI,MAAM,QAAQ,CAAC;EAC5B;;EAGA,SAAgB,iBAAiB,OAAuB;GACtD,OAAO,IAAI,MAAM,QAAQ,CAAC;EAC5B;;EAGA,SAAgB,oBAAoB,OAAuB;GACzD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;GACrD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;GACrD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;GACrD,OAAO,OAAO,KAAK;EACrB;;;;;;;;EASA,SAAgB,kBAAkB,OAAuB;GACvD,OAAO,OAAO,OAAO,MAAM,QAAQ,CAAC,CAAC,CAAC;EACxC;;EAGA,SAAgB,YAAY,MAAc,KAAqB;GAC7D,IAAI,OAAO,GAAG,OAAO;GACrB,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,OAAO,GAAG,CAAC;EAC5C;;EAGA,SAAgB,cAAc,IAAoB;GAChD,IAAI,MAAM,GAAG,OAAO;GACpB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,eAAe;EACrC;;EAGA,SAAgB,eAAe,OAAuB;GACpD,MAAM,WAAW,MAAM,QAAQ,YAAY,CAAC;GAC5C,OAAO;IACL,SAAS,MAAM,WAAW;IAC1B,eAAe,MAAM,WAAW;IAChC,OAAO,SAAS,SAAS,KAAK,CAAC,SAAS,MAAK,YAAW,QAAQ,UAAU;GAC5E;EACF;;;ECzKA,MAAM,OAA+B;GAAE,QAAQ;GAAQ,OAAO,KAAA;GAAW,OAAO,KAAA;EAAU;EAU1F,MAAM,cAA+B;GACnC,IAAI,UAAU,IAAI;IAAE,MAAM,SAAS,WAAW,UAAU,EAAE;IAAG,OAAO,QAAQ;IAAG,OAAO;GAAO;GAC7F,MAAM,QAAQ;IAAE,aAAa,MAAuC;GAAE;EACxE;;;;;;;;;;;;;EAcA,IAAa,8BAAb,MAAyC;GACvC;GACA,4BAA6B,IAAI,IAAgB;GACjD,UAA0C;GAC1C,aAAqB;GACrB,WAAmB;GACnB,WAAmB;GAEnB;GACA,WAAmB;GACnB,YAAoB;GACpB;GAEA,YAAY,QAAsB,QAAyB,aAAa;IACtE,KAAK,QAAQ;IACb,KAAK,SAAS;GAChB;;GAGA,UAAgB;IACd,KAAK,WAAW;IAChB,KAAK,WAAW;IAChB,KAAK,UAAU,MAAM;GACvB;;GAGA,UAAU,UAAkC;IAC1C,KAAK,UAAU,IAAI,QAAQ;IAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;GAC7C;;GAGA,QAAgC;IAC9B,OAAO,KAAK;GACd;;;;;;;;;;GAWA,SAAe;IACb,IAAI,KAAK,YAAY,KAAK,aAAa,KAAK,YAAY,KAAK,QAAQ,WAAW,SAAS;IACzF,KAAK,WAAW;IAChB,MAAM,OAAO,KAAK,OAAO;IAIzB,IAAI,OAAO,SAAS,YAAY;KAC9B,KAAK,YAAY;KACjB,KAAK,QAAQ;MAAE,QAAQ;MAAS,OAAO,KAAA;MAAW,OAAO;KAAiD,CAAC;KAC3G;IACF;IACA,MAAM,aAAa,KAAK;IACxB,KAAK,WAAW;IAChB,KAAK,YAAY;IACjB,KAAK,QAAQ;KAAE,QAAQ;KAAW,OAAO,KAAK,QAAQ;KAAO,OAAO,KAAA;IAAU,CAAC;IAC/E,IAAI;IACJ,IAAI;KAAE,UAAU,KAAK,KAAK,KAAK,MAAM;IAAE,SAAS,OAAO;KAAE,UAAU,QAAQ,OAAO,KAAK;IAAE;IACzF,QAAa,MAAM,WAAW;KAC5B,IAAI,KAAK,YAAY,eAAe,KAAK,YAAY;KACrD,KAAK,WAAW;KAChB,IAAI,OAAO,IAAI;MACb,KAAK,QAAQ;OAAE,QAAQ;OAAS,OAAO,OAAO;OAAO,OAAO,KAAA;MAAU,CAAC;MACvE;KACF;KACA,KAAK,YAAY,OAAO,MAAM,cAAc;KAC5C,KAAK,QAAQ;MAAE,QAAQ;MAAS,OAAO,KAAA;MAAW,OAAO,OAAO,MAAM;KAAQ,CAAC;KAC/E,KAAK,cAAc;IACrB,IAAI,UAAmB;KACrB,IAAI,KAAK,YAAY,eAAe,KAAK,YAAY;KACrD,KAAK,WAAW;KAChB,KAAK,QAAQ;MACX,QAAQ;MACR,OAAO,KAAA;MACP,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;KAC9D,CAAC;KACD,KAAK,cAAc;IACrB,CAAC;GACH;;GAGA,SAAe;IACb,IAAI,KAAK,UAAU;IACnB,KAAK,cAAc;IACnB,KAAK,WAAW;IAChB,KAAK,WAAW;IAChB,KAAK,YAAY;IACjB,KAAK,WAAW;IAChB,KAAK,UAAU;IACf,KAAK,OAAO;GACd;GAEA,aAA2B;IACzB,IAAI,KAAK,gBAAgB,KAAA,GAAW,KAAK,MAAM,MAAM,KAAK,WAAW;IACrE,KAAK,cAAc,KAAA;GACrB;GAEA,gBAA8B;IAC5B,IAAI,KAAK,YAAY,KAAK,aAAa,KAAK,YAAY,GAAG;IAC3D,KAAK,cAAc,KAAK,MAAM,UAAU;KAAE,KAAK,cAAc,KAAA;KAAW,KAAK,OAAO;IAAE,GAAG,MAAO,MAAM,KAAK,WAAW,EAAE;GAC1H;GAEA,QAAgB,MAAoC;IAClD,KAAK,UAAU;IACf,KAAK,MAAM,YAAY,KAAK,WAAW,SAAS;GAClD;EACF;;;;EC/HA,MAAM,mBAAmB;;;;;EAMzB,IAAa,6BAAb,MAAwC;GACtC;GACA,4BAA6B,IAAI,IAAgB;GACjD;;GAEA,aAAqB;GACrB,WAAmB;GAEnB,QAAyC;GACzC;GACA;GACA;GACA;GACA;GAEA,YAAY,QAAuC,SAAS,kBAAkB;IAC5E,KAAK,SAAS;IACd,KAAK,SAAS;GAChB;;GAGA,UAAU,UAAkC;IAC1C,KAAK,UAAU,IAAI,QAAQ;IAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;GAC7C;;GAGA,QAAwB;IACtB,OAAO;KACL,OAAO,KAAK;KACZ,SAAS,KAAK;KACd,UAAU,KAAK;KACf,SAAS,KAAK;KACd,QAAQ,KAAK;KACb,SAAS,KAAK;IAChB;GACF;;GAGA,MAAM,QAAuB;IAC3B,IAAI,KAAK,YAAY,KAAK,UAAU,cAAc,KAAK,UAAU,WAAW;IAC5E,MAAM,aAAa,EAAE,KAAK;IAC1B,KAAK,IAAI;KAAE,OAAO;KAAY,SAAS,KAAA;KAAW,UAAU,KAAA;KAAW,SAAS,KAAA;KAAW,QAAQ,KAAA;KAAW,SAAS,KAAA;IAAU,CAAC;IAClI,MAAM,SAAS,KAAK,OAAO;IAC3B,IAAI,WAAW,KAAA,GAAW;KACxB,KAAK,IAAI;MAAE,OAAO;MAAe,SAAS,KAAA;MAAW,UAAU,KAAA;MAAW,SAAS,KAAA;MAAW,QAAQ,KAAA;MAAW,SAAS;KAA8B,CAAC;KACzJ;IACF;IACA,IAAI;IACJ,IAAI;KACF,SAAS,MAAM,OAAO,WAAW;IACnC,SAAS,OAAgB;KAEvB,SAAS;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;KAAE;IACnG;IACA,IAAI,KAAK,WAAW,UAAU,GAAG;IACjC,IAAI,CAAC,OAAO,IAAI;KACd,KAAK,IAAI;MAAE,OAAO;MAAe,SAAS,KAAA;MAAW,UAAU,KAAA;MAAW,SAAS,KAAA;MAAW,QAAQ,KAAA;MAAW,SAAS,OAAO,MAAM;KAAQ,CAAC;KAChJ;IACF;IACA,KAAK,MAAM,OAAO,KAAK;IACvB,IAAI,KAAK,iBAAiB,WAAW,KAAU,KAAK,UAAU;GAChE;;GAGA,MAAM,SAAwB;IAC5B,IAAI,KAAK,YAAa,KAAK,UAAU,cAAc,KAAK,UAAU,WAAY;IAC9E,MAAM,aAAa,EAAE,KAAK;IAC1B,MAAM,SAAS,KAAK,OAAO;IAC3B,IAAI,WAAW,KAAA,GAAW;IAC1B,IAAI;IACJ,IAAI;KACF,SAAS,MAAM,OAAO,YAAY;IACpC,QAAQ;KAEN,KAAK,IAAI;MAAE,OAAO;MAAU,SAAS,KAAA;MAAW,UAAU,KAAA;MAAW,SAAS,KAAA;MAAW,QAAQ;MAAa,SAAS,KAAA;KAAU,CAAC;KAClI;IACF;IACA,IAAI,KAAK,WAAW,UAAU,GAAG;IACjC,IAAI,OAAO,IAAI,KAAK,MAAM,OAAO,KAAK;SACjC,KAAK,IAAI;KAAE,OAAO;KAAU,SAAS,KAAA;KAAW,UAAU,KAAA;KAAW,SAAS,KAAA;KAAW,QAAQ;KAAa,SAAS,KAAA;IAAU,CAAC;GACzI;;GAGA,UAAgB;IACd,IAAI,KAAK,UAAU;IACnB,KAAK,WAAW;IAChB,KAAK,cAAc;IACnB,KAAK,UAAU,MAAM;GACvB;;GAOA,MAAc,KAAK,YAAmC;IAGpD,OAAO,CAAC,KAAK,YAAY,CAAC,KAAK,WAAW,UAAU,KAAK,KAAK,iBAAiB,WAAW;KACxF,MAAM,MAAM,KAAK,MAAM;KACvB,IAAI,KAAK,YAAY,KAAK,WAAW,UAAU,KAAK,KAAK,iBAAiB,WAAW;KACrF,MAAM,SAAS,KAAK,OAAO;KAC3B,IAAI,WAAW,KAAA,GAAW;MACxB,KAAK,IAAI;OAAE,OAAO;OAAe,SAAS,KAAA;OAAW,UAAU,KAAA;OAAW,SAAS,KAAA;OAAW,QAAQ,KAAA;OAAW,SAAS;MAA8B,CAAC;MACzJ;KACF;KACA,IAAI;KACJ,IAAI;MACF,SAAS,MAAM,OAAO,YAAY;KACpC,QAAQ;MACN;KACF;KACA,IAAI,KAAK,WAAW,UAAU,KAAK,KAAK,iBAAiB,WAAW;KACpE,IAAI,OAAO,IAAI,KAAK,MAAM,OAAO,KAAK;IACxC;GACF;GAEA,IAAY,eAAwC;IAClD,OAAO,KAAK;GACd;;GAGA,MAAc,QAAsC;IAClD,MAAM,OAAO;KAAE,SAAS,KAAA;KAAW,UAAU,KAAA;KAAW,SAAS,KAAA;KAAW,QAAQ,KAAA;KAAW,SAAS,KAAA;IAAU;IAClH,IAAI,OAAO,UAAU,WAAW;KAC9B,KAAK,IAAI;MAAE,GAAG;MAAM,OAAO;MAAW,SAAS,OAAO;KAAQ,CAAC;KAC/D;IACF;IACA,IAAI,OAAO,UAAU,WAAW;KAC9B,KAAK,IAAI;MAAE,GAAG;MAAM,OAAO;MAAW,UAAU,OAAO;MAAU,SAAS,OAAO;KAAQ,CAAC;KAC1F;IACF;IACA,IAAI,OAAO,UAAU,UAAU;KAC7B,KAAK,IAAI;MAAE,GAAG;MAAM,OAAO;MAAU,QAAQ,OAAO;MAAQ,SAAS,OAAO;KAAQ,CAAC;KACrF;IACF;IAEA,KAAK,IAAI;KAAE,GAAG;KAAM,OAAO;KAAU,QAAQ;KAAa,SAAS;IAAwC,CAAC;GAC9G;;GAGA,IAAY,OAA6B;IACvC,KAAK,QAAQ,MAAM;IACnB,KAAK,UAAU,MAAM;IACrB,KAAK,WAAW,MAAM;IACtB,KAAK,UAAU,MAAM;IACrB,KAAK,SAAS,MAAM;IACpB,KAAK,UAAU,MAAM;IACrB,KAAK,QAAQ;GACf;GAEA,WAAmB,YAA6B;IAC9C,OAAO,KAAK,YAAY,eAAe,KAAK;GAC9C;GAEA,UAAwB;IACtB,IAAI,KAAK,UAAU;IACnB,KAAK,MAAM,YAAY,CAAC,GAAG,KAAK,SAAS,GAAG,SAAS;GACvD;EACF;EAEA,SAAS,MAAM,IAA2B;GACxC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;EACzD;;;;;;EAWA,SAAgB,iBACd,QACA,GACQ;GACR,IAAI,WAAW,UAAU,OAAO,EAAE,aAAa;GAC/C,IAAI,WAAW,WAAW,OAAO,EAAE,cAAc;GACjD,IAAI,WAAW,eAAe,OAAO,EAAE,iBAAiB;GACxD,IAAI,WAAW,WAAW,OAAO,EAAE,cAAc;GACjD,IAAI,WAAW,eAAe,OAAO,EAAE,kBAAkB;GACzD,IAAI,WAAW,aAAa,OAAO,EAAE,gBAAgB;GACrD,OAAO,EAAE,oBAAoB;EAC/B;;;;;;EAeA,SAAgB,UACd,OACA,GACW;GACX,IAAI,MAAM,UAAU,cAAc,MAAM,UAAU,WAChD,OAAO;IACL,MAAM,EAAE,MAAM,UAAU,aAAa,kBAAkB,cAAc;IACrE,WAAW;IACX,OAAO,KAAA;GACT;GAEF,IAAI,MAAM,UAAU,WAAW;IAC7B,MAAM,UAAU,MAAM,YAAY,KAAA,KAAa,MAAM,YAAY,KAAK,MAAM,MAAM,YAAY;IAC9F,OAAO;KACL,MAAM,GAAG,EAAE,cAAc,EAAE,GAAG,MAAM,YAAY,KAAK,UAAU,KAAK;KACpE,WAAW;KACX,OAAO,KAAA;IACT;GACF;GACA,IAAI,MAAM,UAAU,UAClB,OAAO;IACL,MAAM,iBAAiB,MAAM,QAAQ,CAAC;IACtC,WAAW;IACX,OAAO,MAAM;GACf;GAEF,IAAI,MAAM,UAAU,eAClB,OAAO;IACL,MAAM,GAAG,EAAE,kBAAkB,EAAE,GAAG,MAAM,WAAW,KAAK,KAAK;IAC7D,WAAW;IACX,OAAO,KAAA;GACT;GAEF,OAAO;IAAE,MAAM,EAAE,eAAe;IAAG,WAAW;IAAW,OAAO,KAAA;GAAU;EAC5E;;;;EChSA,MAAa,iBAAiB;;EAG9B,MAAa,iBAAiB;;EAG9B,MAAa,mBAAmB;;;;;;;;;;;;;EA4BhC,SAAgB,sBAAsB,QAAmC;GACvE,MAAM,UAAU,UAAyB;IACvC,MAAM,IAAI,UAAU,GAAG,OAAO,WAAW,OAAO;GAClD;GACA,MAAM,UAAU,OAAgB,UAC9B,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAC/D,QACA,OAAO,KAAK;GAClB,MAAM,eAAe,QAAiC,KAAa,UACjE,OAAO,OAAO,SAAS,WAAW,OAAO,OAAiB,OAAO,KAAK;GACxE,MAAM,eAAe,QAAiC,KAAa,UACjE,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,OAAO,IAAc,IACpE,OAAO,OACP,OAAO,KAAK;GAClB,MAAM,gBAAgB,QAAiC,KAAa,UAClE,OAAO,OAAO,SAAS,YAAY,OAAO,OAAkB,OAAO,KAAK;GAC1E,OAAO;IAAE;IAAQ;IAAQ;IAAa;IAAa;GAAa;EAClE;;;;;;;;EASA,SAAgB,qBACd,UACA,QACA,YACA,QACsB;GACtB,OAAO;IACL,IAAI,GAAG,eAAe,GAAG;IACzB,SAAS;IACT,WAAW;IACX;IACA,YAAY,EAAE,MAAM,SAAS;IAC7B,YAAY,CAAC;IACb,QAAQ;KACN,MAAM;KACN;KACA;IACF;GACF;EACF;;;;ECzCA,MAAa,uBAAuB;;EAGpC,MAAa,wBAAwB;;;;;EAMrC,MAAM,EAAE,QAAA,UAAQ,QAAA,UAAQ,aAAA,eAAa,aAAa,iBAChD,sBAAsB,4BAA4B;;;;;;;;;;EAWpD,SAAS,YACP,OACA,OAC+E;GAC/E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;GAChC,MAAM,SAASC,SAAO,OAAO,KAAK;GAClC,OAAO;IACL,MAAM,YAAY,QAAQ,QAAQ,GAAG,MAAM,MAAM;IACjD,KAAK,YAAY,QAAQ,OAAO,GAAG,MAAM,KAAK;IAC9C,UAAU,aAAa,QAAQ,YAAY,GAAG,MAAM,UAAU;IAC9D,SAAS,YAAY,QAAQ,WAAW,GAAG,MAAM,SAAS;GAC5D;EACF;;;;;;EAOA,SAAS,iBAAiB,OAAwC;GAChE,MAAM,SAASA,SAAO,OAAO,QAAQ;GACrC,MAAM,WAAW,OAAO;GACxB,IAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,MAAM,UAAU,OAAO,UAAU,QAAQ,GAAG,SAAO,UAAU;GACtG,MAAM,SAAiC,EAAY,SAAqB;GAExE,IAAI,OAAO,YAAY,KAAA,GAAW;IAChC,MAAM,UAAU,OAAO;IAIvB,IAAI,YAAY,iBAAiB,YAAY,yBAAyB,YAAY,WAChF,OAAO,UAAU;SAEjB,SAAO,SAAS;GAEpB;GAEA,IAAI,OAAO,YAAY,KAAA,GAAW;IAChC,MAAM,UAAUA,SAAO,OAAO,SAAS,SAAS;IAChD,OAAO,UAAU;KACf,IAAIC,cAAY,SAAS,MAAM,YAAY;KAC3C,MAAMA,cAAY,SAAS,QAAQ,cAAc;KACjD,UAAUA,cAAY,SAAS,YAAY,kBAAkB;IAC/D;GACF;GAEA,IAAI,OAAO,UAAU,KAAA,GAAW;IAC9B,MAAM,QAAQD,SAAO,OAAO,OAAO,OAAO;IAC1C,OAAO,QAAQ;KACb,YAAY,YAAY,OAAO,cAAc,kBAAkB;KAC/D,WAAW,YAAY,OAAO,aAAa,iBAAiB;KAC5D,aAAa,YAAY,OAAO,eAAe,mBAAmB;KAClE,gBAAgB,YAAY,OAAO,kBAAkB,sBAAsB;KAC3E,aAAa,YAAY,OAAO,eAAe,mBAAmB;KAClE,eAAe,YAAY,OAAO,iBAAiB,qBAAqB;KACxE,gBAAgB,YAAY,OAAO,kBAAkB,sBAAsB;KAC3E,cAAc,YAAY,OAAO,gBAAgB,oBAAoB;KACrE,aAAaC,cAAY,OAAO,eAAe,mBAAmB;IACpE;GACF;GAEA,IAAI,OAAO,YAAY,KAAA,GAAW;IAChC,MAAM,UAAUD,SAAO,OAAO,SAAS,SAAS;IAChD,MAAM,SAA6B;KACjC,gBAAgB,YAAY,SAAS,kBAAkB,wBAAwB;KAC/E,kBAAkB,YAAY,SAAS,oBAAoB,0BAA0B;KACrF,aAAa,YAAY,SAAS,eAAe,qBAAqB;IACxE;IAQA,IAAI,QAAQ,oBAAoB,KAAA,GAC9B,OAAO,kBAAkB,aAAa,SAAS,mBAAmB,yBAAyB;IAE7F,KAAK,MAAM,QAAQ,CAAC,qBAAqB,cAAc,GACrD,IAAI,QAAQ,UAAU,KAAA,GAAW,OAAO,QAAQ,aAAa,SAAS,MAAM,WAAW,MAAM;IAK/F,MAAM,WAAW,YAAY,QAAQ,UAAU,kBAAkB;IACjE,MAAM,SAAS,YAAY,QAAQ,QAAQ,gBAAgB;IAC3D,IAAI,aAAa,KAAA,GAAW,OAAO,WAAW;IAC9C,IAAI,WAAW,KAAA,GAAW,OAAO,SAAS;IAC1C,OAAO,UAAU;GACnB;GAEA,IAAI,OAAO,SAAS,KAAA,GAAW;IAC7B,MAAM,OAAOA,SAAO,OAAO,MAAM,MAAM;IACvC,MAAM,UAAU,KAAK;IACrB,IAAI,YAAY,SAAS,OAAO,YAAY,YAAY,CAAC,OAAO,SAAS,OAAO,IAAI,SAAO,qBAAqB;IAChH,OAAO,OAAO;KACZ,QAAQC,cAAY,MAAM,UAAU,aAAa;KACjD,MAAMA,cAAY,MAAM,QAAQ,WAAW;KAC3C,QAAQA,cAAY,MAAM,UAAU,aAAa;KACjD,gBAAgB;KAChB,kBAAkB,YAAY,MAAM,oBAAoB,uBAAuB;IACjF;GACF;GAEA,OAAO;EACT;;EAGA,SAAS,kBAAkB,OAAyC;GAClE,MAAM,SAASD,SAAO,OAAO,SAAS;GACtC,OAAO;IACL,IAAIC,cAAY,QAAQ,MAAM,YAAY;IAC1C,OAAOA,cAAY,QAAQ,SAAS,eAAe;IACnD,YAAY,aAAa,QAAQ,cAAc,oBAAoB;IACnE,QAAQ,aAAa,QAAQ,UAAU,gBAAgB;IACvD,MAAMA,cAAY,QAAQ,QAAQ,cAAc;IAChD,eAAe,YAAY,QAAQ,iBAAiB,uBAAuB;IAC3E,QAAQ,iBAAiB,OAAO,MAAM;GACxC;EACF;;EAGA,SAAS,oBAAoB,OAA2C;GAEtE,MAAM,WADSD,SAAO,OAAO,QACP,CAAC,CAAC;GACxB,IAAI,MAAM,QAAQ,QAAQ,GACxB,OAAO,EAAE,UAAU,SAAS,IAAI,iBAAiB,EAAE;GAErD,OAAOE,SAAO,UAAU;EAC1B;;EAsCA,MAAa,4BAAsD;GACjE,SAAS;GACT,aAAa,CAvBb,qBACE,uBACA,UACA,GAAG,qBAAqB,6BACxB,EAbF,OAAO,oBAaL,CAmBY,CAAuB;EACvC;;EA4BA,MAAa,kBAAkB;;;;;;EAO/B,MAAM,EACJ,QAAQ,eACR,aAAa,kBACX,sBAAsB,4BAA4B;;EAGtD,SAAS,kBAAkB,OAAyC;GAClE,MAAM,SAAS,cAAc,OAAO,OAAO;GAC3C,MAAM,QAAiC;IACrC,IAAI,cAAc,QAAQ,MAAM,UAAU;IAC1C,MAAM,cAAc,QAAQ,QAAQ,YAAY;GAClD;GAGA,IAAI,OAAO,SAAS,KAAA,GAClB,MAAM,OAAO,cAAc,QAAQ,QAAQ,YAAY;GAEzD,OAAO;EACT;;EAGA,SAAS,aAAa,OAAoC;GAExD,MAAM,SADS,cAAc,OAAO,QAChB,CAAC,CAAC;GACtB,IAAI,MAAM,QAAQ,MAAM,GACtB,OAAO,EAAE,QAAQ,OAAO,IAAI,iBAAiB,EAAE;GAEjD,MAAM,IAAI,UAAU,2CAA2C;EACjE;;EAoBA,MAAa,6BAAuD;GAClE,SAAS;GACT,aAAa,CAVb,qBACE,iBACA,UACA,GAAG,qBAAqB,sBACxB,EAZF,OAAO,aAYL,CAMY,CAAiB;EACjC;;EA0EA,MAAa,kBAAkB;;;;;EAM/B,MAAM,EACJ,QAAQ,aACR,QAAQ,aACR,aAAa,aACb,aAAa,aACb,cAAc,iBACZ,sBAAsB,4BAA4B;;EAGtD,SAAS,WAAW,QAAiC,OAAsC;GACzF,MAAM,QAA+B;IACnC,WAAW,YAAY,QAAQ,aAAa,GAAG,MAAM,WAAW;IAChE,YAAY,YAAY,QAAQ,cAAc,GAAG,MAAM,YAAY;IACnE,eAAe,YAAY,QAAQ,iBAAiB,GAAG,MAAM,eAAe;GAC9E;GAIA,IAAI,OAAO,mBAAmB,KAAA,GAC5B,MAAM,iBAAiB,YAAY,QAAQ,kBAAkB,GAAG,MAAM,gBAAgB;GAExF,OAAO;EACT;;EAGA,SAAS,gBAAgB,OAAuC;GAC9D,MAAM,SAAS,YAAY,OAAO,OAAO;GACzC,MAAM,QAA+B;IACnC,IAAI,YAAY,QAAQ,MAAM,UAAU;IACxC,MAAM,YAAY,QAAQ,QAAQ,YAAY;IAC9C,GAAG,WAAW,QAAQ,OAAO;GAC/B;GACA,IAAI,OAAO,SAAS,KAAA,GAAW,MAAM,OAAO,WAAW,YAAY,OAAO,MAAM,YAAY,GAAG,YAAY;GAC3G,IAAI,OAAO,iBAAiB,KAAA,GAAW;IACrC,IAAI,CAAC,MAAM,QAAQ,OAAO,YAAY,KAAK,OAAO,aAAa,WAAW,GAAG,YAAY,cAAc;IACvG,IAAI,WAAW;IACf,MAAM,eAAgB,OAAO,aAA2B,KAAK,OAAO,OAAO,UAAU;KACnF,MAAM,OAAO,YAAY,OAAO,aAAa;KAC7C,MAAM,MAA8B,WAAW,MAAM,aAAa;KAClE,IAAI,KAAK,eAAe,KAAA,GAAW;MACjC,MAAM,MAAM,YAAY,MAAM,cAAc,wBAAwB;MACpE,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,OAAO,YAAY,UAAU,MAAM,SAAS,GAAG,YAAY,wBAAwB;MACrH,WAAW;MACX,IAAI,aAAa;KACnB,OAAO,IAAI,UAAU,MAAM,SAAS,GAAG,YAAY,wBAAwB;KAC3E,OAAO;IACT,CAAC;GACH;GACA,IAAI,OAAO,SAAS,KAAA,GAAW,MAAM,OAAO,aAAa,QAAQ,QAAQ,YAAY;GACrF,OAAO;EACT;;EAGA,SAAS,gBAAgB,OAAuC;GAC9D,MAAM,SAAS,YAAY,OAAO,QAAQ;GAC1C,MAAM,SAAS,OAAO;GACtB,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG,YAAY,QAAQ;GAChD,MAAM,YAAY,OAAO;GACzB,IAAI,CAAC,MAAM,QAAQ,SAAS,GAAG,YAAY,WAAW;GACtD,OAAO;IACL,QAAS,OAAqB,IAAI,eAAe;IACjD,WAAY,UAAwB,KAAK,WAAW;KAClD,IAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAAG,YAAY,aAAa;KAC5E,MAAM,CAAC,OAAO,OAAO;KACrB,IAAI,OAAO,UAAU,YAAY,OAAO,QAAQ,UAAU,YAAY,aAAa;KACnF,OAAO,CAAC,OAAO,GAAG;IACpB,CAAC;GACH;EACF;;EAoBA,MAAa,6BAAuD;GAClE,SAAS;GACT,aAAa,CAVb,qBACE,iBACA,UACA,GAAG,qBAAqB,yBACxB,EAZF,OAAO,gBAYL,CAMY,CAAiB;EACjC;;;;ECxbA,MAAa,uBAAuB;EACpC,MAAa,wBAAwB;EACrC,MAAa,wBAAwB;EAErC,MAAM,UAAoD;GACxD;GAAU;GAAW;GAAe;GAAW;GAAe;GAAa;EAC7E;;;EAIA,MAAM,EAAE,QAAQ,QAAQ,gBACtB,sBAAsB,2BAA2B;;;;;;EAOnD,SAAgB,iBAAiB,OAAwC;GACvE,MAAM,SAAS,OAAO,OAAO,QAAQ;GACrC,MAAM,QAAQ,OAAO;GAGrB,IAAI,UAAU,UAAU,UAAU,aAAa,UAAU,aAAa,UAAU,UAAU;IACxF,MAAM,SAAiC,EAAE,MAAM;IAC/C,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;IAE3D,IAAI,OAAO,aAAa,KAAA,GACtB,OAAO,WAAW,YAAY,QAAQ,YAAY,UAAU;IAE9D,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;IAE3D,IAAI,OAAO,WAAW,KAAA,GAAW;KAC/B,MAAM,SAAS,OAAO;KACtB,IAAI,OAAO,WAAW,YAAY,QAAQ,SAAS,MAAuC,GACxF,OAAO,SAAS;UAEhB,OAAO,QAAQ;IAEnB;IACA,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;IAE3D,OAAO;GACT;GACA,OAAO,OAAO,OAAO;EACvB;;EAGA,MAAa,oBAA0D,EACrE,OAAO,iBACT;;EAGA,SAAS,gBAAgB,UAAkB,QAAsC;GAC/E,OAAO,qBACL,UACA,QACA,GAAG,eAAe,0BAClB,iBACF;EACF;;EAkBA,MAAa,4BAAsD;GACjE,SAAS;GACT,aAAa;IAhBb,gBAAgB,sBAAsB,YAAY;IAClD,gBAAgB,uBAAuB,aAAa;IACpD,gBAAgB,uBAAuB,aAAa;GAcvC;EACf;;;;ECxHA,SAAgB,SAAS,EAAE,OAAO,UAAU,GAAG,SAAS,YAA2B;GACjF,MAAM,OAAO,MAAM,UAAU,cAAc,MAAM,UAAU;GAC3D,MAAM,OAAO,UAAU,OAAO,CAAC;GAC/B,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAY,UAAA,EAAE,YAAY;MAAQ,CAAA,GAClD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OACb,UAAA,OACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAW,SAAS;QAAW,UAAA,EAAE,aAAa;OAAU,CAAA,IAExF,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAqB;QAAU,SAAS;QAAU,UAAA,EAAE,aAAa;OAAU,CAAA;MAEzG,CAAA,CACH;;KACJ,MAAM,YAAY,KAAA,IACjB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MACX,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAe,MAAM,MAAM;OAAS,QAAO;OAAS,KAAI;OAAc,UAAA,EAAE,eAAe;MAAK,CAAA;KACxG,CAAA,IACD;KACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAW,KAAK;MAAW,OAAO,KAAK;MAAQ,UAAA,KAAK;KAAQ,CAAA;IAC5D;;EAET;;;;;;;;;;;;;;;;;;;;;;;;;;EC5BA,MAAM,gBAAkD;GACtD,IAAI;GACJ,MAAM;GACN,KAAK;GACL,UAAU;GACV,KAAK;EACP;;;;;;;EAQA,SAAgB,eACd,SACA,YACoB;GACpB,MAAM,OAAO,WAAW;GACxB,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;GAC/B,OAAO,cAAc,SAAS;EAChC;;;;;EAgCA,SAAgB,kBACd,OACA,OACS;GACT,MAAM,SAAS,MAAM,KAAK,CAAC,CAAC,YAAY;GACxC,IAAI,WAAW,IAAI,OAAO;GAC1B,OAAO,MAAM,GAAG,YAAY,CAAC,CAAC,SAAS,MAAM,KACxC,MAAM,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM;EAC/C;;;;;;;;;;;EAYA,SAAgB,wBACd,SACA,UACA,QAAQ,IACa;GACrB,MAAM,aAAa,IAAI,IAAI,QAAQ,KAAK,UAAU,MAAM,EAAE,CAAC;GAC3D,MAAM,UAAU,QACb,QAAQ,UAAU,kBAAkB,OAAO,KAAK,CAAC,CAAC,CAClD,KAAK,WAAW;IAAE,OAAO,MAAM;IAAI,OAAO,MAAM;IAAM,OAAO;GAAM,EAAE;GAGxE,MAAM,OAAO,IAAI,IAAI,UAAU;GAC/B,KAAK,MAAM,MAAM,UAAU;IACzB,IAAI,OAAO,MAAM,KAAK,IAAI,EAAE,GAAG;IAC/B,KAAK,IAAI,EAAE;IACX,IAAI,WAAW,IAAI,EAAE,GAAG;IACxB,IAAI,CAAC,kBAAkB;KAAE;KAAI,MAAM;IAAG,GAAG,KAAK,GAAG;IACjD,QAAQ,KAAK;KAAE,OAAO;KAAI,OAAO;KAAI,OAAO;IAAK,CAAC;GACpD;GACA,OAAO;EACT;;;;;;;;;EAUA,SAAgB,wBACd,SACA,QACoB;GACpB,MAAM,SAA6B,CAAC;GACpC,MAAM,4BAAY,IAAI,IAA0C;GAChE,KAAK,MAAM,UAAU,SAAS;IAI5B,MAAM,UAAU,OAAO,QAAQ,KAAA,IAAY,OAAO,OAAO,KAAK;IAC9D,IAAI,QAAQ,UAAU,IAAI,OAAO;IACjC,IAAI,UAAU,KAAA,GAAW;KACvB,QAAQ;MAAE;MAAS,SAAS,CAAC;KAAE;KAC/B,UAAU,IAAI,SAAS,KAAK;KAC5B,OAAO,KAAK,KAAK;IACnB;IACA,MAAM,QAAQ,KAAK,MAAM;GAC3B;GACA,OAAO;EACT;;;;;;EAOA,SAAgB,qBACd,UACA,SACU;GACV,OAAO,SAAS,SAAS,OAAO,IAC5B,SAAS,QAAQ,UAAU,UAAU,OAAO,IAC5C,CAAC,GAAG,UAAU,OAAO;EAC3B;;;;;;;;;;;EAoBA,SAAgB,eAAe,WAAsC;GACnE,OAAO,UAAU,WAAW,SAAS,KAAK,CAAC,UAAU;EACvD;;;;;;EAOA,SAAgB,cACd,UACA,WACU;GACV,MAAM,aAAa,IAAI,IAAI,UAAU,UAAU;GAC/C,OAAO,SAAS,QAAQ,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;EACpD;;;;;;;;;;;;;;;;;;;;;;EErLA,MAAa,iBAAyBC;;;;;;EAOtC,MAAa,6BAAqC;GAChD,MAAM,OAAgBC;GACtB,MAAM,MAAM,OAAO,SAAS,WAAW,OAAQ,MAAwC;GACvF,OAAO,GAAG,OAAO,QAAQ,WAAW,IAAI,QAAQ,UAAU,EAAE,CAAC,CAAC,QAAQ,UAAU,EAAE,IAAI,uDAAuD;EAC/I,EAAA,CAAG;;ECKH,MAAa,mBAAmB;;;;;EAMhC,MAAa,iBACX;;;;;;;;;;;EAYF,SAAgB,gBAAgB,GAAW,GAAmB;GAC5D,MAAM,OAAO,aAAa,CAAC;GAC3B,MAAM,QAAQ,aAAa,CAAC;GAC5B,MAAM,QAAQ,KAAK,IAAI,KAAK,KAAK,QAAQ,MAAM,KAAK,MAAM;GAC1D,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,SAAS,GAAG;IAC7C,MAAM,SAAS,KAAK,KAAK,UAAU,MAAM,MAAM,KAAK,UAAU;IAC9D,IAAI,UAAU,GAAG,OAAO,KAAK,KAAK,KAAK;GACzC;GAEA,IAAI,KAAK,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,GAAG,OAAO;GAC5D,IAAI,KAAK,IAAI,WAAW,GAAG,OAAO;GAClC,IAAI,MAAM,IAAI,WAAW,GAAG,OAAO;GACnC,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,QAAQ,MAAM,IAAI,MAAM;GACxD,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,SAAS,GAAG;IAC7C,MAAM,IAAI,KAAK,IAAI;IACnB,MAAM,IAAI,MAAM,IAAI;IACpB,IAAI,MAAM,KAAA,GAAW,OAAO;IAC5B,IAAI,MAAM,KAAA,GAAW,OAAO;IAC5B,MAAM,WAAW,QAAQ,KAAK,CAAC;IAC/B,MAAM,WAAW,QAAQ,KAAK,CAAC;IAC/B,IAAI;IACJ,IAAI,YAAY,UAAU,QAAQ,OAAO,CAAC,IAAI,OAAO,CAAC;SACjD,IAAI,UAAU,QAAQ;SACtB,IAAI,UAAU,QAAQ;SACtB,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI;IACtC,IAAI,UAAU,GAAG,OAAO,KAAK,KAAK,KAAK;GACzC;GACA,OAAO;EACT;;EAGA,SAAgB,eAAe,WAAmB,SAA0B;GAC1E,OAAO,gBAAgB,WAAW,OAAO,IAAI;EAC/C;;EAGA,SAAS,aAAa,OAAkD;GAGtE,MAAM,UAAU,MAAM,KAAK,CAAC,CAAC,QAAQ,OAAO,EAAE;GAC9C,MAAM,OAAO,QAAQ,QAAQ,GAAG;GAChC,MAAM,WAAW,OAAO,IAAI,UAAU,QAAQ,MAAM,GAAG,IAAI;GAC3D,MAAM,UAAU,OAAO,IAAI,KAAA,IAAY,QAAQ,MAAM,OAAO,CAAC;GAQ7D,OAAO;IAAE,MAPI,aAAa,KACtB,CAAC,CAAC,IACF,SAAS,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS;KAChC,MAAM,SAAS,OAAO,SAAS,MAAM,EAAE;KACvC,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS;IAC5C,CAAC;IAEU,KADH,YAAY,KAAA,IAAY,CAAC,IAAI,QAAQ,MAAM,GAAG;GACvC;EACrB;;;;;;EAOA,SAAgB,mBAAmB,SAA0B;GAC3D,IAAI,OAAO,YAAY,YAAY,YAAY,MAC7C,MAAM,IAAI,MAAM,qCAAqC;GAEvD,MAAM,UAAW,QAAkC;GACnD,IAAI,OAAO,YAAY,YAAY,CAAC,cAAc,KAAK,OAAO,GAC5D,MAAM,IAAI,MAAM,0CAA0C;GAE5D,OAAO;EACT;;EAGA,eAAsB,mBACpB,YAA0B,OACT;GACjB,MAAM,aAAa,IAAI,gBAAgB;GACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,gBAAgB;GACnE,IAAI;IACF,MAAM,WAAW,MAAM,UAAU,gBAAgB,EAAE,QAAQ,WAAW,OAAO,CAAC;IAC9E,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,sBAAsB,SAAS,QAAQ;IAEzD,OAAO,mBAAmB,MAAM,SAAS,KAAK,CAAC;GACjD,UAAU;IACR,aAAa,KAAK;GACpB;EACF;;EAiBA,MAAa,yBAAyB;;;;;;EAOtC,SAAgB,wBACd,UAA+B,OAAO,iBAAiB,cAAc,KAAA,IAAY,cAC/D;GAClB,OAAO;IACL,OAAsC;KACpC,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;KAClC,IAAI;MACF,MAAM,MAAM,QAAQ,QAAQ,sBAAsB;MAClD,IAAI,QAAQ,MAAM,OAAO,KAAA;MACzB,MAAM,SAAkB,KAAK,MAAM,GAAG;MACtC,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO,KAAA;MAC1D,MAAM,KAAM,OAA4B;MACxC,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,SAAS,EAAE,GAAG,OAAO,KAAA;MAC3D,MAAM,UAAW,OAAiC;MAClD,OAAO;OACL;OACA,SAAS,OAAO,YAAY,YAAY,YAAY,KAAK,UAAU,KAAA;MACrE;KACF,QAAQ;MACN;KACF;IACF;IACA,MAAM,QAAiC;KACrC,IAAI,YAAY,KAAA,GAAW;KAC3B,IAAI;MACF,QAAQ,QAAQ,wBAAwB,KAAK,UAAU,MAAM,CAAC;KAChE,QAAQ,CAER;IACF;GACF;EACF;;;;;;;;;EAUA,eAAsB,eAAe,SAKL;GAC9B,MAAM,EAAE,gBAAgB,KAAK,UAAU;GACvC,MAAM,UAAU,YACd,YAAY,KAAA,KAAa,eAAe,SAAS,cAAc,IAAI,UAAU,KAAA;GAE/E,MAAM,QAAQ,MAAM,KAAK;GACzB,IAAI,UAAU,KAAA,KAAa,MAAM,MAAM,KAAA,OACrC,OAAO,OAAO,MAAM,OAAO;GAG7B,IAAI;GACJ,IAAI;IACF,UAAU,MAAM,mBAAmB,QAAQ,SAAS;GACtD,QAAQ,CAER;GACA,MAAM,UAAU,WAAW,OAAO;GAClC,MAAM,MAAM;IAAE,IAAI;IAAK;GAAQ,CAAC;GAChC,OAAO,OAAO,OAAO;EACvB;;;;;;;;;;;;;;;;;;;;ECjKA,MAAM,kBAA4C;GAChD;GACA;GACA;GACA;GACA;GACA;EACF;;EAGA,SAAS,MAAM,EACb,IACA,OACA,MACA,OACA,UACA,SACA,aACA,QACA,SACA,KAYC;GACD,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAS;OAAK,UAAA;MAAa,CAAA,GACvD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;OAAM,WAAU;OAAhB,UAAA,CACG,MAAM,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAY,UAAA,EAAE,YAAY;OAAQ,CAAA,IAAI,MAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAqB;QAAU,SAAS;QAAS,cAAY,GAAG,MAAM,KAAK,EAAE,OAAO;QAAM,UAAA,EAAE,OAAO;OAAU,CAAA,CACzI;MACH,CAAA,CAAA;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACM;MACJ,WAAW,MAAM,UAAU,6BAA6B;MACxD,MAAK;MACL,WAAW,UAAU,YAAY,KAAA;MACjC,OAAO,MAAM;MACA;MACH;MACV,WAAW,UAAU,OAAO,MAAM,OAAO,KAAK;KAC/C,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAW,MAAM,UAAU,eAAe;MAC1C,UAAA,MAAM,UAAU,YAAY,MAAM,eAAe,CAAC,IAAI;KACtD,CAAA;IACA;;EAET;;EAGA,SAAS,YAAY,QAAsC,GAA8C;GACvG,IAAI,WAAW,YAAY,OAAO,EAAE,gBAAgB;GACpD,IAAI,WAAW,YAAY,OAAO,EAAE,gBAAgB;GACpD,OAAO,EAAE,eAAe;EAC1B;;;;;;;;EASA,SAAS,gBAAgB,EACvB,OACA,UACA,GACA,QACA,WAOC;GACD,MAAM,CAAC,UAAU,gBAAA,GAAeC,MAAAA,SAAAA,CAAS,KAAK;GAC9C,MAAM,aAAa,gBAAgB,QAAQ,UAAU,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;GAC9E,MAAM,UAAU,gBAAgB,MAAM,UAAU,MAAM,MAAM,CAAC,OAAO;GACpE,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;MACE,MAAK;MACL,WAAU;MACV,iBAAe;MACf,iBAAc;MACd,eAAe,aAAa,UAAU,CAAC,KAAK;MAL9C,UAAA;OAOE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAoB,UAAA,EAAE,kBAAkB;OAAQ,CAAA;OAC/D,aAAa,IACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QACb,UAAA,eAAe,IAAI,EAAE,uBAAuB,IAAI,EAAE,0BAA0B,EAAE,OAAO,WAAW,CAAC;OAC9F,CAAA,IACJ;OAGH,CAAC,YAAY,UACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAyB,UAAA,EAAE,iBAAiB;OAAQ,CAAA,IAClE;OACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,oBAAqB,CAAA;OACrC,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAW,WAAW,4BAA4B;QAAc,eAAY;OAAQ,CAAA;MACpF;;KACP,WACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,IAAG;MAAmB,WAAU;MAArC,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAW,UAAA,EAAE,sBAAsB;OAAK,CAAA;OACrD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QACE,IAAG;QACH,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,aAAa;QACrB,OAAO,MAAM;QACH;QACV,SAAS,SAAS,OAAO,WAAW,IAAI;QACxC,eAAe,QAAQ,SAAS;QAC7B;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QACE,IAAG;QACH,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,gBAAgB;QACxB,OAAO,MAAM;QACH;QACV,aAAa,MAAM;QACnB,SAAS,SAAS,OAAO,cAAc,IAAI;QAC3C,eAAe,QAAQ,YAAY;QAChC;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QACE,IAAG;QACH,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,sBAAsB;QAC9B,OAAO,MAAM;QACH;QACV,SAAA;QACA,SAAS,SAAS,OAAO,oBAAoB,IAAI;QACjD,eAAe,QAAQ,kBAAkB;QACtC;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QACE,IAAG;QACH,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,yBAAyB;QACjC,OAAO,MAAM;QACH;QACV,SAAA;QACA,SAAS,SAAS,OAAO,uBAAuB,IAAI;QACpD,eAAe,QAAQ,qBAAqB;QACzC;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;QACE,IAAG;QACH,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,wBAAwB;QAChC,OAAO,MAAM;QACH;QACV,gBAAA;QACA,SAAS,SAAS,OAAO,sBAAsB,IAAI;QACnD,eAAe,QAAQ,oBAAoB;QACxC;OACJ,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;QACE,IAAG;QACH,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,eAAe;QACvB,OAAO,MAAM;QACH;QACV,gBAAA;QACA,SAAS,SAAS,OAAO,aAAa,IAAI;QAC1C,eAAe,QAAQ,WAAW;QAC/B;OACJ,CAAA;MACE;KACH,CAAA,IAAA;KACH,YAAY,UACX,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAa,MAAK;MAAU,UAAA,EAAE,iBAAiB;KAAK,CAAA,IAC/D;IACD;;EAET;;;;;;EAOA,SAAS,YAAY,EACnB,IACA,OACA,MACA,OACA,UACA,gBACA,QACA,SACA,KAWC;GACD,MAAM,UAAU,MAAM,SAAS,KAAK,iBAAiB,MAAM,SAAS;GACpE,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;KAAK,WAAU;KAAf,UAAA,CAGE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAW,eAAY;MAAQ,UAAA;KAAY,CAAA,GAC3D,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;MAAM,WAAU;MAAhB,UAAA,CACG,MAAM,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAY,UAAA,EAAE,YAAY;MAAQ,CAAA,IAAI,MAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OAAQ,MAAK;OAAS,WAAU;OAAqB;OAAU,SAAS;OAAS,cAAY,GAAG,MAAM,KAAK,EAAE,OAAO;OAAM,UAAA,EAAE,OAAO;MAAU,CAAA,CACzI;KACH,CAAA,CAAA;IACL,CAAA,GAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;KAAO,WAAU;KAAjB,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACM;MACJ,WAAU;MACV,MAAK;MACL,MAAK;MACI;MACC;MACV,WAAW,UAAU,OAAO,MAAM,OAAO,UAAU,SAAS,OAAO;KACpE,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAW,UAAA;KAAW,CAAA,CACjC;IACJ,CAAA,CAAA;;EAET;;;;;;;EAQA,SAAS,eAAe,EACtB,OACA,MACA,OACA,UACA,YACA,iBACA,mBACA,aACA,WACA,WACA,YACA,kBACA,gBACA,QACA,iBAiBC;GACD,MAAM,CAAC,SAAS,eAAA,GAAcA,MAAAA,SAAAA,CAAS,KAAK;GAC5C,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAQ;OAAc,UAAA;MAAa,CAAA,GAC/D,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;OAAM,WAAU;OAAhB,UAAA;QACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAW,aAAa,aAAa;SACxC,UAAA,aAAa,kBAAkB;QAC5B,CAAA;QACL,cAAc,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAyB,UAAA;QAAuB,CAAA,IAAI;QAClF,aACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SACrE,UAAA,cAAc,iBAAiB;QAC1B,CAAA,IACN;QACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACA;SACV,eAAe,YAAY,UAAU,CAAC,KAAK;SAE1C,UAAA,UAAU,YAAY;QACjB,CAAA;OACJ;MACH,CAAA,CAAA;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,IAAG;MACH,WAAU;MACV,MAAM,UAAU,SAAS;MACzB,cAAa;MACb,YAAY;MACZ,OAAO,MAAM;MACH;MACV,WAAW,UAAU,OAAO,MAAM,OAAO,KAAK;KAC/C,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA;KAAQ,CAAA;IAC7B;;EAET;;EAGA,SAAS,UAAU,EAAE,OAAO,OAAO,OAAmE;GACpG,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAqB,UAAA;KAAY,CAAA;KACjD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAqB,UAAA;KAAY,CAAA;KAChD,QAAQ,KAAA,KAAa,QAAQ,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAmB,UAAA;KAAU,CAAA,IAAI;IACjF;;EAET;;EAGA,SAAS,YAAY,EACnB,OACA,OACA,KAKC;GACD,MAAM,EAAE,MAAM,KAAK,UAAU,YAAY;GACzC,MAAM,QAAQ,YAAY,MAAM,GAAG;GACnC,MAAM,QAAQ,cAAc,OAAO;GACnC,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAuB,UAAA;OAAY,CAAA;OAClD,WAAW,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAoB,UAAA,EAAE,eAAe;OAAQ,CAAA,IAAI;OAC7E,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAuB,UAAA,MAAM,IAAI,GAAG,YAAY,IAAI,EAAE,KAAK,YAAY,GAAG,MAAM,YAAY,IAAI;OAAQ,CAAA;MACrH;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;MAAK,WAAU;MAAc,MAAK;MAAc,cAAY;MAAO,iBAAe;MAAG,iBAAe;MAAK,iBAAe,KAAK,MAAM,QAAQ,GAAG;MAC5I,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,WAAW,WAAW,wCAAwC;OAAmB,OAAO,EAAE,OAAO,GAAG,QAAQ,IAAI,GAAG;MAAI,CAAA;KACzH,CAAA;KACJ,UAAU,KAAK,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,WAAU;MAAb,UAAA;OAAoC,EAAE,YAAY;OAAE;OAAE;MAAS;KAAI,CAAA,IAAA;IAChF;;EAET;;EAGA,SAAS,YAAY,EAAE,OAAO,KAA+E;GAC3G,IAAI,MAAM,QAAQ,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAU;IAAgB,UAAA,EAAE,aAAa;GAAQ,CAAA;GAChF,IAAI,MAAM,SAAS,sBAAsB,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAU;IAAsB,UAAA,EAAE,iBAAiB;GAAQ,CAAA;GACjH,IAAI,MAAM,gBAAgB,GACxB,OAAO,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;IAAM,WAAU;IAAhB,UAAA;KAAsC,EAAE,eAAe;KAAE;KAAE,cAAc,MAAM,aAAa;IAAQ;;GAE7G,IAAI,MAAM,SAAS,cAAc,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAU;IAAsB,UAAA,EAAE,eAAe;GAAQ,CAAA;GACvG,OAAO;EACT;;;;;EAMA,SAAS,cAAc,EAAE,OAAO,WAAW,GAAG,YAW3C;GACD,MAAM,SAAS,MAAM;GACrB,MAAM,UAAU,OAAO;GACvB,MAAM,cAAc,YAAY,KAAA,IAAY,KAAK,QAAQ,YAAY,QAAQ;GAC7E,MAAM,UAAU,OAAO;GACvB,MAAM,OAAO,OAAO;GACpB,MAAM,WAAW,MAAM,QAAQ;GAC/B,MAAM,aAAa,SAAS,KAAA,KAAa,KAAK,WAAW,MAAM,KAAK,WAAW,WAAW,KAAK,SAAS;GACxG,MAAM,aAAa,SAAS,KAAA,KAAa,KAAK,mBAAmB;GACjE,MAAM,cAAc,OAAO,SAAS,SAAS,KAAK,OAAO,YAAY,KAAA;GAErE,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;QAAI,WAAU;QAAiB,UAAA,MAAM;OAAU,CAAA;OAC/C,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;QAAoB;QAAU;OAAI,CAAA;OACjC,gBAAgB,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAmB,UAAA;OAAkB,CAAA,IAAI;OAC9E,aAAa,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAgB,UAAA;OAAe,CAAA,IAAI;OACrE,eAAe,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAsB,UAAA;OAAiB,CAAA,IAAI;OAChF,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,qBAAsB,CAAA;OACrC,aAAa,KAAA,IACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAkB,SAAS;QAAW,UAAA,EAAE,eAAe;OAAU,CAAA,IAC/F;MACD;;KAEJ,CAAC,MAAM,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAgB,UAAA,EAAE,mBAAmB;KAAK,CAAA,IAAI;KAE/E,OAAO,YAAY,KAAA,IAClB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAkB,MAAK;MAAtC,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAwB,UAAA,aAAa,OAAO,SAAS,CAAC;MAAK,CAAA,GACxE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAuB,UAAA,YAAY,OAAO,SAAS,CAAC;MAAK,CAAA,CACnE;KACH,CAAA,IAAA;KAEH,OAAO,UAAU,KAAA,IAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QACE,OAAO,EAAE,eAAe;QACxB,OAAO,OAAO,OAAO,MAAM,cAAc;QACzC,KAAK,GAAG,EAAE,aAAa,EAAE,GAAG,OAAO,MAAM;OAC1C,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QAAW,OAAO,EAAE,kBAAkB;QAAG,OAAO,GAAG,kBAAkB,OAAO,MAAM,WAAW,EAAE;OAAK,CAAA;OACpG,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QACE,OAAO,EAAE,WAAW;QACpB,OAAO,iBAAiB,OAAO,MAAM,SAAS;QAC9C,KAAK,GAAG,YAAY,OAAO,MAAM,YAAY,EAAE;OAChD,CAAA;OACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QACE,OAAO,EAAE,aAAa;QACtB,OAAO,oBAAoB,OAAO,MAAM,gBAAgB,OAAO,MAAM,cAAc;QACnF,KAAK,GAAG,oBAAoB,OAAO,MAAM,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,oBAAoB,OAAO,MAAM,cAAc,EAAE,GAAG,EAAE,gBAAgB;OAC1J,CAAA;MACE;KACH,CAAA,IAAA;KAEH,YAAY,KAAA,IACX,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QAAW,OAAO,EAAE,cAAc;QAAG,OAAO,QAAQ,oBAAoB,QAAQ,MAAM,YAAY,QAAQ,cAAc;OAAI,CAAA;OAC5H,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QAAW,OAAO,EAAE,gBAAgB;QAAG,OAAO,QAAQ,sBAAsB,QAAQ,MAAM,YAAY,QAAQ,gBAAgB;OAAI,CAAA;OAClI,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;QAAW,OAAO,EAAE,WAAW;QAAG,OAAO,QAAQ,iBAAiB,QAAQ,MAAM,YAAY,QAAQ,WAAW;OAAI,CAAA;MAChH;KACH,CAAA,IAAA;KAEH,SAAS,aAAa,KAAA,KAAa,SAAS,WAAW,KAAA,IACtD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACG,QAAQ,aAAa,KAAA,IACpB,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;OAAa,OAAO,EAAE,eAAe;OAAG,OAAO,QAAQ;OAAa;MAAI,CAAA,IACtE,MACH,QAAQ,WAAW,KAAA,IAClB,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;OAAa,OAAO,EAAE,aAAa;OAAG,OAAO,QAAQ;OAAW;MAAI,CAAA,IAClE,IACD;KACH,CAAA,IAAA;KAEH,cAAc,eAAe,cAAc,KAAA,IAC1C,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACG,aACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAU;QAAb,UAAA;SAAgC,EAAE,gBAAgB;SAAE;SAAE,IAAI,KAAK,KAAK,gBAAgB,CAAC,CAAC,mBAAmB;QAAK;OAC5G,CAAA,IAAA;OACH,cACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAkB,OAAO,OAAO,SAAS,KAAK,IAAI;QAAI,UAAA,EAAE,cAAc;OAAK,CAAA,IACtF;OACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,qBAAsB,CAAA;OACrC,cAAc,KAAA,IACb,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAU;QAAb,UAAA;SAAgC,EAAE,cAAc;SAAE;SAAE,IAAI,KAAK,SAAS,CAAC,CAAC,mBAAmB;QAAK;OAC9F,CAAA,IAAA;MACD;KACH,CAAA,IAAA;IACD;;EAET;;EAGA,SAAS,aAAa,QAA2C,GAA8C;GAC7G,IAAI,WAAW,eAAe,OAAO,EAAE,iBAAiB;GACxD,IAAI,WAAW,uBAAuB,OAAO,EAAE,yBAAyB;GACxE,OAAO,EAAE,mBAAmB;EAC9B;;EAGA,SAAS,YAAY,QAA2C,GAA8C;GAC5G,IAAI,WAAW,eAAe,OAAO,EAAE,qBAAqB;GAC5D,IAAI,WAAW,uBAAuB,OAAO,EAAE,6BAA6B;GAC5E,OAAO,EAAE,kBAAkB;EAC7B;;EAGA,SAAS,cAAc,EAAE,SAA6C;GACpE,MAAM,MAAM,MAAM,SAAS,uBACvB,6BACA,MAAM,SAAS,MAAM,MAAM,gBAAgB,IACzC,4BACA;GAEN,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAW;IAAK,eAAY;GAAQ,CAAA;EACnD;;;;;;;;;;EAWA,SAAS,UAAU,EAAE,GAAG,OAAO,aAAa,cAAc,WAAW,WAAW,mBAgB7E;GACD,MAAM,EAAE,SAAS,eAAe,UAAU,eAAe,KAAK;GAG9D,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,eAAe,UAAU;GAC/B,GAAG,CAAC,eAAe,SAAS,CAAC;GAE7B,MAAM,SAAS,MAAM;GAKrB,MAAM,CAAC,gBAAgB,sBAAA,GAAqBA,MAAAA,SAAAA,CAA4B,CAAC,CAAC;GAC1E,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,kBAAkB,CAAC,CAAC;GACtB,GAAG,CAAC,MAAM,SAAS,CAAC;GACpB,MAAM,yBAAS,IAAI,IAAI,CAAC,GAAG,aAAa,GAAG,cAAc,CAAC;GAC1D,MAAM,0BAAU,IAAI,IAAY;GAChC,MAAM,WAAW,QAAQ,YAAY,CAAC,EAAA,CAAG,QAAQ,UAAU;IACzD,IAAI,OAAO,IAAI,MAAM,EAAE,GAAG,OAAO;IAGjC,IAAI,QAAQ,IAAI,MAAM,EAAE,GAAG,OAAO;IAClC,QAAQ,IAAI,MAAM,EAAE;IACpB,OAAO;GACT,CAAC;GACD,MAAM,CAAC,YAAY,kBAAA,GAAiBA,MAAAA,SAAAA,CAA6B,KAAA,CAAS;GAG1E,MAAM,WAAW,QAAQ,MAAM,UAAU,MAAM,OAAO,UAAU,KAC3D,QAAQ,MAAM,UAAU,MAAM,MAAM,KACpC,QAAQ;GACb,MAAM,iBAAiB,aAAa,aAAa,KAAA,KAAa,aAAa,SAAS,SAAS,EAAE,UACrF;IACJ,MAAM,KAAK,SAAS;IACpB,mBAAmB,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC;IACzC,gBAAgB,EAAE;GACpB,IACA,KAAA;GAEJ,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAe,cAAY,EAAE,YAAY;IAAxD,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;QAAI,WAAU;QAAiB,UAAA,EAAE,YAAY;OAAM,CAAA;OACnD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,qBAAsB,CAAA;OACtC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAkB,UAAU;QAAS,SAAS;QAC3E,UAAA,UAAU,EAAE,iBAAiB,IAAI,EAAE,cAAc;OAC5C,CAAA;MACL;;KAEJ,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAgB,UAAA,EAAE,YAAY;KAAK,CAAA,IAAI;KAC5D,WAAW,KAAA,KAAa,UAAU,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAgB,UAAA,EAAE,cAAc;KAAK,CAAA,IAAI;KACxF,MAAM,WAAW,UAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAgB,MAAK;MAChC,UAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD,EAAA,UAAA,CAAO,EAAE,YAAY,GAAG,MAAM,UAAU,KAAA,KAAa,MAAM,UAAU,KAAK,MAAM,MAAM,UAAU,EAAS,EAAA,CAAA;KACxG,CAAA,IACD;KAIH,QAAQ,SAAS,IAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;MAAK,WAAU;MAAU,cAAY,EAAE,eAAe;MACnD,UAAA,QAAQ,KAAK,UACZ,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;OAEE,MAAK;OACL,gBAAc,UAAU,OAAO,MAAM;OACrC,WAAW,UAAU,OAAO,MAAM,KAAK,wBAAwB;OAC/D,eAAe,cAAc,MAAM,EAAE;OALvC,UAAA,CAOE,iBAAA,GAAA,kBAAA,IAAA,CAAC,eAAD,EAAsB,MAAQ,CAAA,GAC7B,MAAM,KACD;MARD,GAAA,MAAM,EAQL,CACT;KACE,CAAA,IACH;KAEH,aAAa,KAAA,IACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,eAAD;MAEE,OAAO;MACP,WAAW,MAAM;MACd;MACH,UAAU;KACX,GALM,SAAS,EAKf,IACC;IACD;;EAET;;;;;;;;EASA,SAAS,WAAW,EAAE,SAAS,UAAU,GAAG,SAAS,OAAO,eAAe,YAQxE;GACD,MAAM,SAAS,CAAC,QAAQ;GACxB,MAAM,CAAC,YAAY,kBAAA,GAAiBA,MAAAA,SAAAA,CAAS,KAAK;GAClD,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAS,oBAAoB,QAAQ;OAAO,UAAA,EAAE,cAAc;MAAS,CAAA,GACjG,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;OAAM,WAAU;OAAhB,UAAA;QACG,QAAQ,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAY,UAAA,EAAE,SAAS;QAAQ,CAAA,IAAI;QACpE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAW,QAAQ,aAAa,aAAa;SAChD,UAAA,QAAQ,aAAa,EAAE,WAAW,IAAI,EAAE,aAAa;QAClD,CAAA;QACL,QAAQ,cAAc,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAyB,UAAA,EAAE,qBAAqB;QAAQ,CAAA,IAAI;QAClG,QAAQ,cAAc,CAAC,QAAQ,cAC9B,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SACrE,UAAA,EAAE,eAAe;QACZ,CAAA,IACN;QACH,QAAQ,cACP,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SACrE,UAAA,EAAE,mBAAmB;QAChB,CAAA,IACN;QACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACA;SACV,eAAe,eAAe,UAAU,CAAC,KAAK;SAE7C,UAAA,aAAa,EAAE,MAAM,IAAI,EAAE,MAAM;QAC5B,CAAA;QACP,QAAQ,QACP,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SAAW,UAAA,EAAE,eAAe;QAAU,CAAA,IAC5G;OACA;MACH,CAAA,CAAA;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,IAAI,oBAAoB,QAAQ;MAChC,WAAU;MACV,MAAK;MACL,OAAO,QAAQ;MACL;MACV,WAAW,UAAU,QAAQ,MAAM,OAAO,KAAK;KAChD,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,IAAI,kBAAkB,QAAQ;MAC9B,WAAU;MACV,MAAM,aAAa,SAAS;MAC5B,cAAa;MACb,YAAY;MACZ,aAAa,EAAE,YAAY;MAC3B,OAAO,QAAQ;MACf,UAAU,YAAY;MACtB,WAAW,UAAU,MAAM,MAAM,OAAO,KAAK;KAC9C,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,SAAS,EAAE,cAAc,IAAI,EAAE,gBAAgB;KAAK,CAAA;IACzE;;EAET;;EAGA,SAAS,aAAa,EAAE,GAAG,OAAO,UAAU,OAAO,UAAU,SAAS,OAAO,eAAe,UAAU,iBAWnG;GACD,MAAM,SAAS,MAAM;GACrB,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAU,cAAY,EAAE,eAAe;IAAtD,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;QAAO,WAAU;QAAY,UAAA,EAAE,eAAe;OAAS,CAAA,GACvD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QACd,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SAAQ,UAAA,EAAE,YAAY;QAAU,CAAA;OACpG,CAAA,CACH;MACL,CAAA,GAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAW,UAAA,EAAE,cAAc;MAAK,CAAA,CAC1C;;KACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,WAAU;QAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;SAAO,WAAU;SAAW,SAAQ;SAAqB,UAAA,EAAE,eAAe;QAAS,CAAA,GACnF,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;SAAM,WAAU;SAAhB,UAAA,CACG,OAAO,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;UAAM,WAAU;UAAY,UAAA,EAAE,YAAY;SAAQ,CAAA,IAAI,MAC3E,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,MAAK;UAAS,WAAU;UAAqB;UAAU,SAAS;UAAgB,UAAA,EAAE,OAAO;SAAU,CAAA,CACvG;QACH,CAAA,CAAA;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;QACE,IAAG;QACH,WAAU;QACV,OAAO,OAAO;QACJ;QACV,WAAW,UAAU,SAAS,MAAM,OAAO,KAAK;QALlD,UAAA;SAOE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,OAAM;UAAI,UAAA,EAAE,mBAAmB;SAAU,CAAA;SACjD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,OAAM;UAAW,UAAA,EAAE,gBAAgB;SAAU,CAAA;SACpD,MAAM,SAAS,QAAQ,YAAY,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,YACvD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAyB,OAAO,QAAQ;UAAM,UAAA,QAAQ;SAAc,GAAvD,QAAQ,EAA+C,CACrE;QACK;;OACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAW,UAAA,EAAE,mBAAmB;OAAK,CAAA;MAC/C;;KACJ,MAAM,SAAS,KAAK,YACnB,iBAAA,GAAA,kBAAA,IAAA,CAAC,YAAD;MAEW;MACC;MACP;MACH,UAAU,SAAS,QAAQ,QAAQ,IAAI,IAAI;MAC3C,QAAQ,SAAS,MAAM,QAAQ,IAAI,IAAI;MACvC,qBAAqB,cAAc,QAAQ,EAAE;MAC7C,gBAAgB,SAAS,QAAQ,EAAE;KACpC,GARM,QAAQ,EAQd,CACF;IACE;;EAET;;EAGA,SAAS,QAAQ,EAAE,MAAM,UAAU,SAAS,UAAU,GAAG,UAAU,WAAW,YAS3E;GACD,MAAM,UAAU,CACd;IAAE,OAAO;IAAW,OAAO,EAAE,gBAAgB;GAAE,GAC/C,GAAG,SAAS,QAAQ,YAAY,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,aAAa;IAAE,OAAO,QAAQ;IAAK,OAAO,QAAQ;GAAM,EAAE,CACjH;GACA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAS,iBAAiB,KAAK;OAAO,UAAA,EAAE,WAAW;MAAS,CAAA,GACxF,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;OAAM,WAAU;OAAhB,UAAA,CACG,KAAK,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAY,UAAA,EAAE,SAAS;OAAQ,CAAA,IAAI,MACjE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAqB;QAAU,SAAS;QAAW,UAAA,EAAE,YAAY;OAAU,CAAA,CACvG;MACH,CAAA,CAAA;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,kBAAD;MACE,IAAI,iBAAiB,KAAK;MAC1B,UAAU,KAAK;MACN;MACC;MACP;MACH,UAAU;KACX,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MACE,IAAI,mBAAmB,KAAK;MAC5B,WAAU;MACV,OAAO,KAAK;MACF;MACV,WAAW,UAAU,UAAU,MAAM,OAAO,KAAK;MACjD,cAAY,EAAE,aAAa;MAE1B,UAAA,QAAQ,KAAK,WACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OAA2B,OAAO,OAAO;OAAQ,UAAA,OAAO;MAAc,GAAzD,OAAO,KAAkD,CACvE;KACK,CAAA;KACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,UAAU;KAAK,CAAA;IACtC;;EAET;;;;;;;;;;;;;EAcA,SAAS,iBAAiB,EAAE,IAAI,UAAU,SAAS,UAAU,GAAG,YAO7D;GACD,MAAM,CAAC,MAAM,YAAA,GAAWA,MAAAA,SAAAA,CAAS,KAAK;GACtC,MAAM,CAAC,OAAO,aAAA,GAAYA,MAAAA,SAAAA,CAAS,EAAE;GAErC,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,MAAM,SAAS,EAAE;GACvB,GAAG,CAAC,IAAI,CAAC;GAIT,MAAM,SAAA,GAAQC,MAAAA,QAAAA,OACN,OAAO,YACX,QAAQ,SAAS,UAAU,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,IAAI,CAAU,CAAC,CAC9F,GACA,CAAC,OAAO,CACV;GAGA,MAAM,UAAU,wBAAwB,SAAS,UAAU,KAAK;GAEhE,MAAM,QADS,wBAAwB,UAAU,YAAY,eAAe,SAAS,KAAK,CAC1D,CAAC,CAAC,SAAS,UAAU,CACnD,GAAI,MAAM,YAAY,KAAA,IAClB,CAAC,IACD,CAAC;IAAE,MAAM;IAAkB,IAAI,WAAW,MAAM;IAAW,MAAM,MAAM;GAAQ,CAAC,GACpF,GAAG,MAAM,QAAQ,KAAK,YAAY;IAChC,IAAI,OAAO;IACX,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;KAAM,WAAU;KAAhB,UAAA;MACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OACE,MAAK;OACL,WAAU;OACV,SAAS,SAAS,SAAS,OAAO,KAAK;OACvC,UAAA;OACA,UAAU;MACX,CAAA;MACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAgB,UAAA,OAAO;MAAY,CAAA;MAClD,OAAO,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAY,UAAA,EAAE,YAAY;MAAQ,CAAA,IAAI;KAClE;;GAEV,EAAE,CACJ,CAAC;GAKD,OACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,sCAAAA,MAAD;IACQ;IACN,eAAe,QAAQ,KAAK;IAC5B,WAAW,YAAY;KACrB,SAAS,qBAAqB,UAAU,OAAO,CAAC;IAClD;IACA,aAAa;IACN;IACP,QAAQ,QAAQ,WAAW,IAAI,CAAC;KAC9B,MAAM;KACN,IAAI;KACJ,MAAM,EAAE,kBAAkB;IAC5B,CAAC,IAAI,CAAC;IACN,QAAA;IACA,QACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;KAAM,WAAU;KAAhB,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;MACM;MACJ,MAAK;MACL,WAAU;MACV,UAAU,YAAY,QAAQ,WAAW;MACzC,eAAe,SAAS,UAAU,CAAC,KAAK;MAL1C,UAAA,CAOE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OACb,UAAA,SAAS,WAAW,IAAI,EAAE,eAAe,IAAI,EAAE,kBAAkB,EAAE,OAAO,SAAS,OAAO,CAAC;MACxF,CAAA,GACN,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAe,eAAY;MAAQ,CAAA,CAC7C;KACP,CAAA,GAAA,OACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,MAAK;MACL,WAAU;MACV,aAAa,EAAE,wBAAwB;MACvC,cAAY,EAAE,wBAAwB;MACtC,OAAO;MACG;MACV,WAAA;MACA,WAAW,UAAU,SAAS,MAAM,OAAO,KAAK;KACjD,CAAA,IACC,IACA;;GAET,CAAA;EAEL;;EAGA,SAAS,UAAU,EAAE,GAAG,OAAO,UAAU,OAAO,UAAU,UAAU,aAQjE;GACD,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAU,cAAY,EAAE,YAAY;IAAnD,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,WAAU;QAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;SAAO,WAAU;SAAY,UAAA,EAAE,YAAY;QAAS,CAAA,GACpD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SACd,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,MAAK;UAAS,WAAU;UAAqB;UAAU,SAAS;UAAQ,UAAA,EAAE,SAAS;SAAU,CAAA;QACjG,CAAA,CACH;;OACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAW,UAAA,EAAE,WAAW;OAAK,CAAA;OACzC,MAAM,gBAAgB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAc,UAAA,EAAE,oBAAoB;OAAK,CAAA,IAAI;MAC9E;;KACJ,MAAM,MAAM,KAAK,SAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MAEQ;MACN,UAAU,MAAM;MAChB,SAAS,MAAM;MACL;MACP;MACH,WAAW,QAAQ,SAAS,KAAK,IAAI,GAAG;MACxC,YAAY,SAAS,UAAU,KAAK,IAAI,IAAI;MAC5C,gBAAgB,SAAS,KAAK,EAAE;KACjC,GATM,KAAK,EASX,CACF;KACA,MAAM,MAAM,WAAW,IAAI,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,YAAY;KAAK,CAAA,IAAI;IACxE;;EAET;;EAGA,SAAS,kBAAkB,EAAE,GAAG,OAAO,UAAU,UAAU,WAMxD;GACD,MAAM,QAAQ,MAAM,cAAc;GAClC,MAAM,SAA4C,KAAK,WAAW;IAChE,IAAI,QAAQ,iBAAiB,OAAO,EAAE,mBAAmB;IACzD,IAAI,QAAQ,kBAAkB,OAAO,EAAE,sBAAsB,MAAM;IACnE,OAAO,EAAE,KAAK,MAAM;GACtB;GAWA,MAAM,YAAY;IAAE,YAAY,MAAM,cAAc,KAAK,UAAU,MAAM,EAAE;IAAG,eAAe,MAAM;GAAc;GACjH,MAAM,WAAW,cAAc,MAAM,eAAe,SAAS;GAC7D,MAAM,eAAe,eAAe,SAAS;GAC7C,OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;IAAK,WAAU;IAAU,cAAY,EAAE,oBAAoB;IACzD,UAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;KAAK,WAAU;KAAf,UAAA;MACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;QAAO,WAAU;QAAY,UAAA,EAAE,oBAAoB;OAAS,CAAA,GAC5D,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAU;QAAhB,UAAA,CACG,gBAAgB,SAAS,SAAS,IACjC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACA;SACV,eAAe,SAAS,MAAM,cAAc,QAAQ,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAAC;SAEjF,UAAA,EAAE,2BAA2B,EAAE,OAAO,SAAS,OAAO,CAAC;QAClD,CAAA,IACN,MACH,QAAQ,IACP,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,MAAK;SAAS,WAAU;SAAqB;SAAU,SAAS;SACrE,UAAA,EAAE,sBAAsB;QACnB,CAAA,IACN,IACA;OACH,CAAA,CAAA;;MACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAW,UAAA,EAAE,mBAAmB;MAAK,CAAA;MACjD,MAAM,gBAAgB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAc,UAAA,EAAE,oBAAoB;MAAK,CAAA,IAAI;MAChF,SAAS,SAAS,KAAK,eACtB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAW,UAAA,EAAE,0BAA0B,EAAE,OAAO,SAAS,OAAO,CAAC;MAAK,CAAA,IACjF;MACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,kBAAD;OACE,IAAG;OACH,UAAU,MAAM;OAChB,SAAS,MAAM;OACL;OACV,GAAG;OACO;MACX,CAAA;KACE;;GACF,CAAA;EAET;;;;;;EAOA,SAAS,cAAc,MAAuB;GAC5C,MAAM,CAAC,SAAS,eAAA,GAAcF,MAAAA,SAAAA,CAAS,KAAK;GAC5C,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,SAAS,GAAG;IAChB,WAAW,IAAI;IACf,MAAM,QAAQ,iBAAiB,WAAW,KAAK,GAAG,IAAI;IACtD,aAAa,aAAa,KAAK;GACjC,GAAG,CAAC,IAAI,CAAC;GACT,OAAO;EACT;;;;;;;EAQA,SAAS,kBAAsC;GAC7C,MAAM,CAAC,WAAW,iBAAA,GAAgBA,MAAAA,SAAAA,CAA6B,KAAA,CAAS;GACxE,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,YAAY;IAChB,eAAoB;KAClB,gBAAgB;KAChB,KAAK,KAAK,IAAI;KACd,OAAO,wBAAwB;IACjC,CAAC,CAAC,CAAC,MAAM,YAAY;KACnB,IAAI,CAAC,WAAW,aAAa,OAAO;IAGtC,SAAS,CAAC,CAAC;IACX,aAAa;KACX,YAAY;IACd;GACF,GAAG,CAAC,CAAC;GACL,OAAO;EACT;;EAGA,SAAgB,wBAAwB,OAAiC;GACvE,MAAM,EAAE,MAAM;GACd,MAAM,QAAQ,MAAM,wBAAwB,aAAa,QAAQ;GACjE,MAAM,QAAQ,MAAM,qBAAqB,aAAa,QAAQ;GAC9D,MAAM,QAAQ,MAAM,qBAAqB,aAAa,QAAQ;GAC9D,MAAM,WAAW,CAAC,MAAM;GACxB,MAAM,YAAY,CAAC,MAAM;GACzB,MAAM,eAAe,cAAc,MAAM,UAAU;GACnD,MAAM,gBAAgB,gBAAgB;GACtC,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,WAAD;IAAS,WAAU;IAAa,cAAY,EAAE,OAAO;IAArD,UAAA;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;MAAI,WAAU;MAAY,UAAA,EAAE,OAAO;KAAM,CAAA;KACzC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAY,UAAA,EAAE,OAAO;KAAK,CAAA;KACtC,CAAC,MAAM,WAAW,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAc,MAAK;MAAU,UAAA,EAAE,UAAU;KAAK,CAAA,IAAI;KAClF,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;MACK;MACI;MACP,aAAa,MAAM;MACnB,cAAc,MAAM,SAAS,KAAK,YAAY,QAAQ,EAAE;MACxD,WAAW,MAAM;MACjB,WAAW,MAAM;MACjB,iBAAiB,MAAM;KACxB,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;MACK;MACI;MACG;MACV,OAAO,MAAM;MACb,UAAU,MAAM;MAChB,SAAS,MAAM;MACf,OAAO,MAAM;MACb,gBAAgB,OAAO,MAAM,eAAe,EAAE;MAC9C,WAAW,SAAS,MAAM,KAAK,iBAAiB,IAAI;MACpD,qBAAqB,MAAM,WAAW,eAAe;KACtD,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD;MACK;MACI;MACG;MACV,OAAO,MAAM;MACb,UAAU,MAAM;MAChB,UAAU,MAAM;MAChB,WAAW,MAAM;KAClB,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,mBAAD;MACK;MACI;MACG;MACV,UAAU,MAAM;MAChB,SAAS,MAAM;KAChB,CAAA;KACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,gBAAD;OACE,OAAO,EAAE,QAAQ;OACjB,MAAM,YAAY,EAAE,cAAc,IAAI,EAAE,YAAY;OACpD,OAAO,MAAM;OACb,UAAU,YAAY;OACtB,YAAY,MAAM;OAClB,iBAAiB,EAAE,WAAW;OAC9B,mBAAmB,EAAE,aAAa;OAClC,aAAa,MAAM;OACnB,WAAW,EAAE,MAAM;OACnB,WAAW,EAAE,MAAM;OACnB,YAAY,EAAE,eAAe;OAC7B,kBAAkB,EAAE,qBAAqB;OACzC,gBAAgB,EAAE,mBAAmB;OACrC,SAAS,SAAS,MAAM,KAAK,UAAU,IAAI;OAC3C,qBAAqB,MAAM,eAAe,SAAS;MACpD,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OACE,OAAO;OACP,UAAU,YAAY;OACnB;OACH,SAAS,MAAM;OACf,UAAU,MAAM;MACjB,CAAA,CACE;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,iBAAD;MACS;MACG;MACP;MACH,QAAQ,MAAM;MACd,SAAS,MAAM;KAChB,CAAA;KACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACG,MAAM,SAAS,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAY,MAAK;QAAU,UAAA,EAAE,YAAY;OAAK,CAAA,IAAI;OAC9E,eAAe,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAW,MAAK;QAAU,UAAA,EAAE,OAAO;OAAK,CAAA,IAAI;OACzE,iBAAA,GAAA,kBAAA,IAAA,CAACG,sCAAAA,QAAD;QAAQ,SAAQ;QAAQ,MAAK;QAAK,UAAU,CAAC,MAAM,SAAS,MAAM;QAAQ,SAAS,MAAM;QACtF,UAAA,EAAE,SAAS;OACN,CAAA;OACR,iBAAA,GAAA,kBAAA,IAAA,CAACA,sCAAAA,QAAD;QACE,SAAQ;QACR,MAAK;QACL,UAAU,CAAC,MAAM,SAAS,MAAM,WAAW,MAAM;QACjD,SAAS,MAAM;QAEd,UAAA,EAAE,MAAM,SAAS,WAAW,MAAM;OAC7B,CAAA;MACL;;KACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,WAAU;MAAb,UAAA;OAA0B;OACA;OACvB,kBAAkB,KAAA,IACjB,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACG,OACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QACE,WAAU;QACV,MAAM;QACN,QAAO;QACP,KAAI;QACJ,OAAO,EAAE,YAAY;QALvB,UAAA;SAMC;SACG;SAAc;SAAE,EAAE,iBAAiB;QACpC;OACH,CAAA,CAAA,EAAA,CAAA,IACA;MACH;;IACI;;EAEb;;;;;;;;;;;ECjnCA,SAAgB,mBAAmB,SAAmE;GACpG,IAAI,YAAY,MAAM,OAAO;GAC7B,KAAK,MAAM,WAAW,CAAC,QAAQ,wBAAwB,QAAQ,kBAAkB,GAC/E,IAAI,YAAY,QAAQ,OAAO,QAAQ,cAAc,YAAY,QAAQ,UAAU,SAAS,QAAQ,GAClG,OAAO;GAGX,OAAO;EACT;;EAGA,MAAMC,iBAAe,EAAE,SAAS,OAAO;;;;;;;EAyBvC,SAAgB,SACd,UACU;GACV,IAAI,aAAa,KAAA,GAAW,OAAO,EAAE,MAAM,eAAe;GAC1D,OAAO;IACL,MAAM;IACN,OAAO,SAAS;IAChB,sBAAsB,SAAS;IAC/B,UAAU,SAAS;IACnB,gBAAgB,SAAS;GAC3B;EACF;;EAGA,SAAS,YAAY,EAAE,IAAI,SAAS,gBAIjC;GACD,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAW,KAAK,aAAa;IAAkB,UAAA,KAAK,UAAU;GAAmB,CAAA;EAChG;;EAGA,SAAS,aAAa,EAAE,OAAO,UAAU,GAAG,UAKzC;GACD,MAAM,CAAC,SAAS,eAAA,GAAcC,MAAAA,SAAAA,CAAS,KAAK;GAC5C,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;OAAO,WAAU;OAAW,SAAQ;OAAmB,UAAA,EAAE,QAAQ;MAAS,CAAA,GAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OACd,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAU;QAAqB;QAAU,eAAe,YAAY,UAAU,CAAC,KAAK;QACvG,UAAA,UAAU,EAAE,MAAM,IAAI,EAAE,MAAM;OACzB,CAAA;MACJ,CAAA,CACH;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;MACE,IAAG;MACH,WAAU;MACV,MAAM,UAAU,SAAS;MACzB,cAAa;MACb,YAAY;MACZ,OAAO,MAAM;MACH;MACV,WAAW,UAAU,OAAO,MAAM,OAAO,KAAK;KAC/C,CAAA;KACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,YAAY;KAAK,CAAA;IACxC;;EAET;;;;;;;;;;;;;;EAeA,SAAgB,wBAAwB,OAAsD;GAC5F,MAAM,EAAE,MAAM;GAEd,MAAM,QAAQ,MAAM,2BAA2B,KAAA,IAC3C,MAAM,wBAAwB,aAAa,QAAQ,IACnD,KAAA;GACJ,MAAM,OAAO,SAAS,KAAK;GAC3B,MAAM,QAAQ,MAAM,wBAAwB,KAAA,IACxC,MAAM,qBAAqB,aAAa,QAAQ,IAChD,KAAA;GACJ,MAAM,QAAQ,OAAO,SAAS;GAC9B,MAAM,SAAS,OAAO,UAAU;GAChC,MAAM,UAAU,OAAO,WAAW;GAClC,MAAM,SAAS,OAAO,UAAU;GAChC,MAAM,gBAAgB,CAAC,SAAS;GAChC,MAAM,aAAa,KAAK,SAAS,UAAU,KAAK,QAAQ,KAAK,uBAAuB,MAAM;GAC1F,MAAM,WAAW,KAAK,SAAS,WAAW,CAAC,KAAK,YAAa,UAAU,KAAA,KAAa,CAAC,KAAK;GAC1F,MAAM,WAAW,KAAK,SAAS,UAAU,KAAK,SAAS,UAAU,KAAA;GAMjE,MAAM,WAAA,GAAUC,MAAAA,OAAAA,CAA8B,IAAI;GAClD,MAAM,CAAC,YAAY,kBAAA,GAAiBD,MAAAA,SAAAA,CAAS,KAAK;GAClD,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,MAAM,OAAO,QAAQ;IACrB,IAAI,SAAS,QAAQ,OAAO,qBAAqB,aAAa;IAC9D,MAAM,UAAU,KAAK,QAAQ,6CAAgC,KAAK,KAAK;IACvE,IAAI,YAAY,MAAM;IACtB,MAAM,MAAM,QAAQ;IACpB,IAAI,QAAQ,MAAM;IAClB,IAAI,eAAmC;IACvC,MAAM,aAAa;KACjB,MAAM,SAAS,mBAAmB,OAAO;KACzC,cAAc,WAAW,IAAI;KAC7B,IAAI,WAAW,MAAM;MAInB,OAAO,MAAM,UAAU;MACvB,eAAe;KACjB;IACF;IACA,KAAK;IACL,MAAM,WAAW,IAAI,iBAAiB,IAAI;IAC1C,SAAS,QAAQ,KAAK,EAAE,WAAW,KAAK,CAAC;IACzC,aAAa;KACX,SAAS,WAAW;KAGpB,IAAI,iBAAiB,MAAM,aAAa,MAAM,UAAU;IAC1D;GACF,GAAG,CAAC,CAAC;GACL,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IACE,KAAK;IACL,WAAU;IACV,uBAAoB;IACpB,OAAO,aAAa,KAAA,IAAYD;IAJlC,UAAA;KAMG,cAAc,KAAK,SAAS,iBAAiB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,sBAAsB;KAAK,CAAA,IAAI;KACtG,cAAc,KAAK,SAAS,UAAU,CAAC,KAAK,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAW,UAAA,EAAE,iBAAiB;KAAK,CAAA,IAAI;KACxG,cAAc,WACb,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA;MACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,WAAU;OACb,UAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,WAAU;QAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAY,UAAA,EAAE,WAAW;QAAQ,CAAA,GACjD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;SAAM,WAAU;SAAhB,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;UAAa,IAAI;UAAY,SAAS,EAAE,WAAW;UAAG,cAAc,EAAE,aAAa;SAAI,CAAA,GACtF,MAAM,SAAS,SAAS,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;UAAM,WAAU;UAAY,UAAA,EAAE,iBAAiB;SAAQ,CAAA,IAAI,IAChF;QACH,CAAA,CAAA;;MACF,CAAA;MACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;OACE,OAAO,MAAM;OACH;OACP;OACH,SAAS,SAAS,MAAM,KAAK,UAAU,IAAI;MAC5C,CAAA;MACA,UAAU,KAAA,IACT,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OACE,OAAO;OACG;OACP;OACH,SAAS,MAAM;OACf,UAAU,MAAM;MACjB,CAAA,IACC;MACJ,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAAf,UAAA;QACG,SAAS,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAG,WAAU;SAAY,MAAK;SAAU,UAAA,EAAE,YAAY;QAAK,CAAA,IAAI;QACzE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACV,UAAU,CAAC,SAAS;SACpB,SAAS,MAAM;SAEd,UAAA,EAAE,SAAS;QACN,CAAA;QACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,WAAU;SACV,UAAU,iBAAiB;SAC3B,SAAS,MAAM;SAEd,UAAA,EAAE,SAAS,WAAW,MAAM;QACvB,CAAA;OACL;;KACL,EAAA,CAAA,IACA;IACD;;EAET;;;;ECpPA,MAAa,aAAuC;GAClD,KAAK;GACL,UAAU;GACV,SAAS;GACT,YAAY;GACZ,SAAS;GACT,OAAO;GACP,WAAW;GACX,MAAM;GACN,SAAS;GACT,QAAQ;GACR,OAAO;GACP,SAAS;GACT,cAAc;GACd,aAAa;GACb,WAAW;GACX,WAAW;GACX,MAAM;GACN,UAAU;GACV,QAAQ;GACR,eAAe;GACf,aAAa;GACb,iBAAiB;GACjB,UAAU;GACV,WAAW;GACX,QAAQ;GACR,UAAU;GACV,QAAQ;GACR,aAAa;GACb,OAAO;GACP,QAAQ;GACR,UAAU;GACV,WAAW;GACX,YAAY;GACZ,SAAS;GACT,SAAS;GACT,QAAQ;GACR,aAAa;GACb,YAAY;GACZ,cAAc;GACd,aAAa;GACb,iBAAiB;GACjB,qBAAqB;GACrB,yBAAyB;GACzB,6BAA6B;GAC7B,cAAc;GACd,kBAAkB;GAClB,cAAc;EAChB;;EAGA,SAAgB,UAAU,KAAuB;GAC/C,OAAO,WAAW,QAAQ;EAC5B;;;;ECgFA,SAAS,MAAM,OAAuB;GACpC,IAAI,UAAU,GAAG,OAAO,YAAY,CAAC;GACrC,OAAO,KAAK,IAAI,KAAK,IAAI,MAAO,iBAAiB,KAAK,IAAI,YAAY,KAAK;EAC7E;;;;;;EAOA,MAAM,aAAa;;EAGnB,SAAS,UAAU,IAAoB;GACrC,IAAI,MAAM,GAAG,OAAO;GACpB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,eAAe;EACrC;;EAGA,SAAS,SAAS,IAAoB;GACpC,IAAI,MAAM,GAAG,OAAO;GACpB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,mBAAmB;EACzC;;EAGA,SAAS,SAAS,IAAoB;GACpC,IAAI,MAAM,GAAG,OAAO;GACpB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,mBAAmB;EACzC;;;;;;EAOA,SAAS,WAAW,MAAc,KAAqB;GACrD,IAAI,OAAO,GAAG,OAAO;GACrB,OAAO,KAAK,MAAO,OAAO,MAAO,GAAG;EACtC;;EAGA,SAAS,WAAW,SAAyB;GAC3C,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;EAC3C;;EAGA,SAAS,WAAW,OAAiB,OAAqC;GACxE,MAAM,UAAU,WAAW,MAAM,MAAM,MAAM,GAAG;GAChD,MAAM,SAAS,MAAM,MAAM;GAC3B,OAAO;IACL;IAGA,OAAO,SAAS,GAAG,MAAM,MAAM,IAAI,EAAE,KAAK,MAAM,MAAM,GAAG,MAAM,MAAM,MAAM,IAAI;IAC/E;IACA;IACA,YAAY,WAAW,OAAO;IAC9B,UAAU,MAAM;IAChB,UAAU,UAAU,MAAM,OAAO;GACnC;EACF;;;;;;;;;;;;;;;;;;EAmBA,SAAS,YAAY,QAA8D;GACjF,MAAM,UAAU,OAAO;GACvB,MAAM,OAAO,OAAO;GACpB,IAAI,YAAY,KAAA,KAAa,SAAS,KAAA,GAAW,OAAO,KAAA;GAExD,MAAM,aAAa,MAAM,kBAAkB;GAI3C,MAAM,oBAAoB,YAAY,KAAA,KAAa,QAAQ,oBAAoB;GAC/E,MAAM,YAAY,oBAAoB,KAAK,IAAI,GAAG,QAAQ,cAAc,IAAI;GAE5E,MAAM,QAAQ,eAAe,QAAQ,aAAa,KAAK;GACvD,MAAM,OAAO,QAAQ,KAAK,IAAI,GAAG,aAAa,SAAS,IAAI;GAC3D,MAAM,UAAU,QAAQ,WAAW,MAAM,UAAU,IAAI;GAEvD,OAAO;IACL;IACA,OAAO,eAAe,OAAO,MAAM,UAAU,IAAI;IACjD,MAAM,QAAQ,MAAM,IAAI,IAAI;IAC5B,WAAW,oBAAoB,MAAM,SAAS,IAAI;IAClD,WAAW,YAAY,KAAA,KAAa,QAAQ,sBAAsB,QAAQ,MAAM,KAAK,IAAI,GAAG,QAAQ,gBAAgB,CAAC,IAAI;IACzH,MAAM,YAAY,KAAA,KAAa,QAAQ,iBAAiB,QAAQ,MAAM,KAAK,IAAI,GAAG,QAAQ,WAAW,CAAC,IAAI;IAC1G;IACA,YAAY,WAAW,OAAO;IAC9B,WAAW,SAAS,aAAa;IACjC,YAAY,SAAS,MAAM,oBAAoB,CAAC;GAClD;EACF;;EAGA,SAAS,YAAY,OAAkD;GACrE,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,OAAO;GACvB,MAAM,OAAO,OAAO;GACpB,MAAM,UAAU,OAAO;GACvB,MAAM,QAAQ,OAAO;GAErB,MAAM,QAAyB,CAAC;GAChC,IAAI,UAAU,KAAA,GAAW;IACvB,MAAM,KAAK;KACT,OAAO;KACP,OAAO,OAAO,MAAM,cAAc;KAClC,KAAK,GAAG,MAAM,YAAY,GAAG,UAAU,QAAQ;IACjD,CAAC;IACD,MAAM,KAAK;KAAE,OAAO;KAAe,OAAO,GAAG,kBAAkB,MAAM,WAAW,EAAE;KAAI,KAAK;IAAG,CAAC;IAC/F,MAAM,KAAK;KACT,OAAO;KACP,OAAO,iBAAiB,MAAM,SAAS;KACvC,KAAK,GAAG,YAAY,MAAM,YAAY,EAAE;IAC1C,CAAC;IACD,MAAM,KAAK;KACT,OAAO;KACP,OAAO,oBAAoB,MAAM,gBAAgB,MAAM,cAAc;KACrE,KAAK,GAAG,oBAAoB,MAAM,aAAa,EAAE,GAAG,UAAU,UAAU,EAAE,KAAK,oBAAoB,MAAM,cAAc,EAAE,GAAG,UAAU,WAAW;IACnJ,CAAC;GACH;GAEA,MAAM,UAA6B,CAAC;GAKpC,IAAI,SAAS,aAAa,KAAA,GAAW,QAAQ,KAAK,WAAW,YAAY,QAAQ,QAAQ,CAAC;GAC1F,IAAI,SAAS,WAAW,KAAA,GAAW,QAAQ,KAAK,WAAW,UAAU,QAAQ,MAAM,CAAC;GAIpF,IAAI;GACJ,IAAI,MAAM,QAAQ,OAAO;QACpB,IAAI,MAAM,SAAS,sBAAsB,OAAO;QAChD,IAAI,MAAM,gBAAgB,KAAK,MAAM,SAAS,cAAc,OAAO;GAExE,OAAO;IACL,IAAI,MAAM;IACV,OAAO,MAAM;IACb,OAAO,YAAY,KAAA,IAAY,KAAK,QAAQ,YAAY,QAAQ;IAChE,UAAU,MAAM,QAAQ;IACxB,YAAY,SAAS,KAAA,KAAa,KAAK,WAAW,MAAM,KAAK,WAAW,WAAW,KAAK,SAAS;IACjG;IACA,eAAe,MAAM,gBAAgB,IAAI,UAAU,MAAM,aAAa,IAAI;IAC1E,cAAc,CAAC,MAAM;IACrB,YAAY,SAAS,MAAM,oBAAoB,CAAC;IAChD,QAAQ,MAAM;IACd,SAAS,YAAY,MAAM;IAC3B;IACA;GACF;EACF;;EAGA,SAAS,YAAY,OAAqD;GACxE,MAAM,UAAU,MAAM,QAAQ,SAAS,MAAM,UAAU,MAAM,OAAO,YAAY,KAAA,CAAS,CAAC,EAAE,OAAO;GACnG,IAAI,YAAY,eACd,OAAO;IAAE,OAAO;IAAmB,MAAM;IAAuB,QAAQ;GAAG;GAE7E,IAAI,YAAY,uBACd,OAAO;IAAE,OAAO;IAA2B,MAAM;IAA+B,QAAQ;GAAG;GAE7F,IAAI,YAAY,WACd,OAAO;IAAE,OAAO;IAAgB,MAAM;IAAoB,QAAQ;GAAG;GAIvE,IAAI,MAAM,WAAW,WAAW,MAAM,WAAW,KAAA,GAC/C,OAAO;IAAE,OAAO;IAAgB,MAAM;IAAgB,QAAQ,MAAM,SAAS;GAAG;EAGpF;;;;;;;EAQA,SAAS,eAAyC;GAChD,MAAM,OAAO,OAAO,KAAK,UAAU;GACnC,MAAM,MAAM,CAAC;GACb,KAAK,MAAM,OAAO,MAAM,IAAI,OAAO,UAAU,GAAG;GAChD,OAAO;EACT;;;;;;;;EASA,SAAgB,eAAe,OAAkC;GAC/D,MAAM,EAAE,UAAU;GAClB,MAAM,SAAS,IAAI,IAAI,MAAM,eAAe,CAAC,CAAC;GAC9C,MAAM,uBAAO,IAAI,IAAY;GAC7B,MAAM,WAAW,MAAM,QAAQ,YAAY,CAAC,EAAA,CAAG,QAAQ,UAAU;IAC/D,IAAI,OAAO,IAAI,MAAM,EAAE,GAAG,OAAO;IACjC,IAAI,KAAK,IAAI,MAAM,EAAE,GAAG,OAAO;IAC/B,KAAK,IAAI,MAAM,EAAE;IACjB,OAAO;GACT,CAAC;GACD,MAAM,WAAW,QAAQ,IAAI,WAAW;GACxC,MAAM,gBAAgB,QAAQ,MAAM,UAAU,MAAM,MAAM,KAAK,QAAQ;GACvE,MAAM,eAAe,SAAS,MAAM,SAAS,KAAK,OAAO,eAAe,EAAE;GAM1E,MAAM,aAA+B,CAAC;GACtC,MAAM,aAAyD,CAC7D,CAAC,iBAAiB,eAAe,OAAO,SAAS,QAAQ,GACzD,CAAC,eAAe,eAAe,OAAO,SAAS,MAAM,CACvD;GACA,KAAK,MAAM,CAAC,OAAO,WAAW,YAAY;IACxC,IAAI,WAAW,KAAA,KAAa,OAAO,OAAO,GAAG;IAC7C,MAAM,UAAU,WAAW,OAAO,MAAM,OAAO,GAAG;IAClD,WAAW,KAAK;KACd;KACA,SAAS,GAAG,QAAQ;KACpB,YAAY,WAAW,OAAO;KAC9B,MAAM,OAAO;KACb,QAAQ,GAAG,MAAM,OAAO,IAAI,EAAE,KAAK,MAAM,OAAO,GAAG;IACrD,CAAC;GACH;GAGA,MAAM,YAAY,eAAe,OAAO,OAAO;GAC/C,MAAM,OAAO,cAAc,KAAA,IAAY,KAAK,MAAM,SAAS;GAE3D,IAAI,SAAS;GACb,IAAI,QAAQ,SAAS,KAAK,CAAC,QAAQ,MAAK,UAAS,MAAM,UAAU,GAAG,SAAS,UAAU,cAAc;QAChG,IAAI,cAAc,SAAS,KAAA,KAAa,aAAa,SAAS,UAAU,SAAS,UAAU,aAAa,IAAI;QAC5G,IAAI,kBAAkB,KAAA,GAAW,SAAS,UAAU,aAAa;GAEtE,MAAM,WAAW,iBAAiB,KAAA,KAAa,aAAa,aAAa,KAAK,aAAa,WAAW,UAAU,KAAK;GAIrH,MAAM,aAAa,aAAa,UAAU,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,KAAK,GAAG,QAAQ;GAC3F,KAAK,MAAM,OAAO,YAAY;IAC5B,MAAM,UAAU,IAAI,WAAW,KAAK,KAAK,IAAI,IAAI;IACjD,WAAW,KAAK,GAAG,UAAU,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,QAAQ,EAAE;GACtE;GACA,IAAI,SAAS,IAAI,WAAW,KAAK,GAAG,UAAU,OAAO,EAAE,GAAG,MAAM;GAEhE,OAAO;IACL,MAAM,aAAa;IACnB;IACA;IACA;IACA;IACA,WAAW,WAAW,KAAK,KAAK;IAChC;IACA,YAAY,eAAe;IAC3B,UAAU;IACV,SAAS,MAAM,WAAW,aAAa,MAAM,WAAW,KAAA;IACxD,OAAO,QAAQ,SAAS,KAAK,CAAC,QAAQ,MAAK,UAAS,MAAM,UAAU;IACpE,SAAS,YAAY,KAAK;IAC1B,YAAY,MAAM,WAAW,WAAW,MAAM,WAAW,KAAA,IAAY,MAAM,SAAS,KAAK,KAAA;IACzF,SAAU,MAAM,QAAQ,SAAS,MAAM,UAAU,MAAM,OAAO,SAAS,SAAS,KAAK,MAAM,OAAO,YAAY,KAAA,CAAS,KAAK,QACxH,YACA,KAAA;IACJ,WAAW,SAAS,MAAM,aAAa,CAAC;GAC1C;EACF;;;;;;EAWA,MAAa,wBAAwB;;EAerC,MAAM,aAA+B;GACnC,MAAM,UAAU,OAAO,WAAW,UAAU,EAAE;GAC9C,QAAQ,WAAW,aAAa,MAAuC;EACzE;;EAGA,IAAI,aAAa;;EAEjB,IAAI;;EAEJ,IAAI,YAAY;;EAEhB,IAAI;;;;;;;;;;;;;;;;;;EAmBJ,SAAgB,sBACd,OACA,cACA,QAA0B,YACd;GACZ,cAAc;GACd,MAAM,SAAS,EAAE;GACjB,MAAM,aAAmB;IACvB,IAAI,iBAAiB,QAAQ;IAC7B,IAAI,aAAa,GAAG,MAAW,QAAQ;IACvC,SAAS,MAAM,IAAI,MAAM,qBAAqB;GAChD;GAEA,IAAI,iBAAiB,KAAA,GAAW;IAC9B,eAAe;IACf,SAAS,MAAM,IAAI,MAAM,qBAAqB;IAE9C,IAAI,aAAa,GAAG,MAAW,QAAQ;GACzC;GAEA,IAAI,UAAU;GACd,aAAa;IACX,IAAI,SAAS;IACb,UAAU;IACV,cAAc;IAKd,IAAI,aAAa,GAAG;IACpB,eAAe,KAAA;IACf,IAAI,WAAW,KAAA,GAAW;KACxB,MAAM,MAAM,MAAM;KAClB,SAAS,KAAA;IACX;GACF;EACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;ECnfA,SAAS,aAAa,OAAuC;GAC3D,MAAM,QAAQ,MAAM,qBAAqB,UAAU,KAAK;GACxD,MAAM,WAAW,MAAM,wBAAwB,UAAU,KAAK;GAC9D,OAAO,eAAe;IACpB;IACA,kBAAkB,SAAS;IAC3B,aAAa,SAAS;GACxB,CAAC;EACH;;;;;;EAOA,SAAS,KAAK,EAAE,SAAS,MAAM,QAA0D;GACvF,MAAM,UAAU,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;GAClD,MAAM,gBAAgB;GAGtB,MAAM,aAAa,KAAK,MAAM,iBAAiB,IAAI,UAAU,OAAO,GAAI,IAAI;GAC5E,OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,WAAU;IAAY,eAAY;IACtC,UAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;KAAK,SAAQ;KAAY,OAAO;KAAM,QAAQ;KAAM,WAAU;KAA9D,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MAAQ,IAAG;MAAK,IAAG;MAAK,GAAE;MAAO,MAAK;MAAO,QAAO;MAAe,aAAY;MAAM,SAAQ;KAAO,CAAA,GACpG,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MACE,IAAG;MACH,IAAG;MACH,GAAE;MACF,MAAK;MACL,QAAQ,OAAO,yCAAyC;MACxD,aAAY;MACZ,eAAc;MACd,iBAAiB,OAAO,aAAa;MACrC,kBAAkB,OAAO,UAAU;MACnC,WAAU;KACX,CAAA,CACE;;GACD,CAAA;EAEV;;EAGA,SAAS,SAAS,EAAE,OAAO,OAAO,SAAS,YAAY,MAAM,UAAU,eAQpE;GACD,MAAM,UAAU,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,UAAU,CAAC;GACrD,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAmB,UAAA;OAAY,CAAA;OAC9C,SAAS,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAe,UAAA;OAAW,CAAA,IAAI;OAC7D,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,aAAc,CAAA;OAC7B,UAAU,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAmB,UAAA;OAAY,CAAA,IAAI;OACnE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAiB,UAAA;OAAc,CAAA;MAC5C;;KACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;MAAK,WAAU;MAAU,MAAK;MAAc,cAAY;MAAO,iBAAe;MAAG,iBAAe;MAAK,iBAAe;MAClH,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,WAAW,SAAS,KAAK,gCAAgC;OAAe,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG;MAAI,CAAA;KAC5G,CAAA;KACJ,aAAa,KAAK,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,WAAU;MAAb,UAAA;OAAgC;OAAY;OAAE;MAAY;KAAI,CAAA,IAAA;IAC9E;;EAET;;EAGA,SAAS,KAAK,EAAE,OAAO,OAAO,OAAuD;GACnF,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAiB,UAAA;KAAY,CAAA;KAC7C,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAiB,UAAA;KAAY,CAAA;KAC5C,QAAQ,KAAA,KAAa,QAAQ,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAe,UAAA;KAAU,CAAA,IAAI;IAC7E;;EAET;;EAGA,SAAS,SAAS,EAAE,MAAM,SAAiD;GACzE,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;IAAa;IAAO,OAAO,KAAK;IAAO,KAAK,KAAK;GAAM,CAAA;EAChE;;EAGA,SAAS,SAAS,SAA2B,MAAyC;GACpF,IAAI,QAAQ,SAAS,KAAA,GAAW,OAAO;GACvC,IAAI,QAAQ,SAAS,iBAAiB,QAAQ,kBAAkB,IAC9D,OAAO,GAAG,KAAK,aAAa,EAAE,KAAK,QAAQ;GAE7C,OAAO,KAAK,QAAQ,IAAI;EAC1B;;EAGA,SAAS,QAAQ,OAAuB;GACtC,MAAM,UAAU,MAAM,KAAK;GAC3B,OAAO,YAAY,KAAK,MAAM,QAAQ,EAAE,CAAE,YAAY;EACxD;;;;;EAMA,SAAS,YAAY,EAAE,SAAS,QAAwD;GACtF,MAAM,QAAQ,QAA0B,KAAK,KAAK,QAAQ;GAC1D,MAAM,OAAO,SAAS,SAAS,IAAI;GACnC,MAAM,UAAU,QAAQ;GAExB,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,WAAD;IAAS,WAAU;IAAW,cAAY,QAAQ;IAAlD,UAAA;KACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;MAAQ,WAAU;MAAlB,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAa,eAAY;QAAQ,UAAA,QAAQ,QAAQ,KAAK;OAAQ,CAAA;OAC9E,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAU;QAAhB,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAiB,UAAA,QAAQ;QAAY,CAAA,GACpD,QAAQ,UAAU,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAU;SAAiB,UAAA,QAAQ;QAAY,CAAA,IAAI,IAC7E;;OACN,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,aAAc,CAAA;OAC7B,QAAQ,aAAa,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAa,UAAA,QAAQ;OAAe,CAAA,IAAI;OAClF,QAAQ,eAAe,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAA2B,UAAA,QAAQ;OAAiB,CAAA,IAAI;OACpG,SAAS,KACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAW,QAAQ,SAAS,eAAe,6BAA6B;QAAmB,UAAA;OAAW,CAAA,IAC1G;OACH,QAAQ,eAAe,KACtB,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAU;QAAhB,UAAA;SAA4B,KAAK,YAAY;SAAE;SAAE,QAAQ;QAAiB;OACxE,CAAA,IAAA;MACE;;KAEP,QAAQ,eAAe,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAU;MAAY,UAAA,KAAK,cAAc;KAAK,CAAA,IAAI;KAE5E,YAAY,KAAA,KAAa,QAAQ,QAChC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MACE,OAAO,KAAK,SAAS;MACrB,OAAO,GAAG,QAAQ,KAAK,KAAK,QAAQ;MACpC,SAAS,GAAG,QAAQ,QAAQ;MAC5B,YAAY,QAAQ;MACpB,MAAM,QAAQ,YAAY,KAAK,WAAW,IAAI;MAC9C,UAAS;MACT,aAAY;KACb,CAAA,IAED,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CAKE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAkB,UAAA,KAAK,MAAM;MAAQ,CAAA,GACrD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAgB,UAAA,QAAQ,aAAa,KAAK,QAAQ,WAAW,KAAK,aAAa;MAAQ,CAAA,CACpG;;KAKN,YAAY,KAAA,KAAa,QAAQ,cAAc,MAC9C,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAkB,UAAA,KAAK,WAAW;MAAQ,CAAA,GAC1D,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAgB,UAAA,QAAQ;MAAgB,CAAA,CACrD;KACH,CAAA,IAAA;KAEH,QAAQ,QAAQ,SAAS,IACxB,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;MAAK,WAAU;MACZ,UAAA,QAAQ,QAAQ,KAAK,WACpB,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;OAEE,OAAO,KAAK,OAAO,KAAK;OACxB,OAAO,OAAO;OACd,SAAS,OAAO,SAAS,GAAG,OAAO,QAAQ,KAAK,KAAK,iBAAiB;OACtE,YAAY,OAAO;OACnB,MAAM,OAAO,WAAW,KAAK,UAAU,IAAI;OAC3C,UAAU,OAAO;OACjB,aAAa,KAAK,QAAQ;MAC3B,GARM,OAAO,KAQb,CACF;KACE,CAAA,IACH;KAEH,YAAY,KAAA,IACX,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;OAAI,WAAU;OAAkB,UAAA,KAAK,SAAS;MAAM,CAAA,GACpD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAAf,UAAA;QACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;SAAM,OAAO,KAAK,cAAc;SAAG,OAAO,QAAQ;QAAQ,CAAA;QAC1D,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;SAAM,OAAO,KAAK,aAAa;SAAG,OAAO,QAAQ;QAAO,CAAA;QACxD,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;SAAM,OAAO,KAAK,WAAW;SAAG,OAAO,QAAQ;QAAY,CAAA;QAC3D,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;SAAM,OAAO,KAAK,WAAW;SAAG,OAAO,QAAQ;QAAY,CAAA;QAC3D,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;SAAM,OAAO,KAAK,MAAM;SAAG,OAAO,QAAQ;QAAO,CAAA;OAC9C;MACF,CAAA,CAAA;KACH,CAAA,IAAA;KAEH,QAAQ,MAAM,SAAS,IACtB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAU;MAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;OAAI,WAAU;OAAkB,UAAA,KAAK,OAAO;MAAM,CAAA,GAClD,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,WAAU;OACZ,UAAA,QAAQ,MAAM,KAAK,SAClB,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAiC;QAAM,OAAO,KAAK,KAAK,KAAK;OAAI,GAAlD,KAAK,KAA6C,CAClE;MACE,CAAA,CACF;KACH,CAAA,IAAA;IACG;;EAEb;;;;;;;EAQA,SAAgB,iBAAiB,OAA4B;GAC3D,MAAM,OAAO,aAAa,KAAK;GAC/B,MAAM,QAAQ,QAA0B,KAAK,KAAK,QAAQ;GAC1D,MAAM,CAAC,YAAY,kBAAA,GAAiBG,MAAAA,SAAAA,CAA6B,KAAA,CAAS;GAE1E,MAAM,mBAAmB,MAAM;GAC/B,CAAA,GAAA,MAAA,UAAA,OAAgB,iBAAiB,GAAG,CAAC,gBAAgB,CAAC;GAEtD,MAAM,WAAW,KAAK;GACtB,MAAM,WAAW,SAAS,MAAM,YAAY,QAAQ,OAAO,UAAU,KAChE,KAAK,YACL,SAAS;GAEd,OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;IAAK,WAAU;IAAW,MAAK;IAAS,cAAY,KAAK,KAAK;IAC5D,UAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;KAAK,WAAU;KAAf,UAAA;MACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;OAAQ,WAAU;OAAlB,UAAA;QACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;SAAK,WAAU;SAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;UAAI,WAAU;UAAa,UAAA,KAAK,KAAK;SAAM,CAAA,GAC3C,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;UAAG,WAAU;UAAgB,UAAA,KAAK,UAAU;SAAK,CAAA,CAC9C;;QACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,aAAc,CAAA;QAC7B,KAAK,cAAc,KAAK,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;SAAM,WAAU;SAAhB,UAAA;UAA4B,KAAK,SAAS;UAAE;UAAE,KAAK;SAAgB;QAAI,CAAA,IAAA;QAChG,iBAAA,GAAA,kBAAA,IAAA,CAACC,sCAAAA,QAAD;SACE,SAAQ;SACR,MAAK;SACL,UAAU,KAAK;SACf,eAAe,MAAM,QAAQ;SAE5B,UAAA,KAAK,UAAU,KAAK,YAAY,IAAI,KAAK,SAAS;QAC7C,CAAA;OACF;;MAEP,KAAK,QACJ,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAmB,UAAA,KAAK,OAAO;OAAK,CAAA,GACjD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAU;QAAkB,UAAA,KAAK,WAAW;OAAK,CAAA,CACjD;MACH,CAAA,IAAA;MAEH,KAAK,YAAY,KAAA,IAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAU;OAA6B,MAAK;OAAjD,UAAA;QACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAG,WAAU;SAAmB,UAAA,KAAK,KAAK,QAAQ,KAAK;QAAK,CAAA;QAC5D,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAG,WAAU;SAAkB,UAAA,KAAK,KAAK,QAAQ,IAAI;QAAK,CAAA;QACzD,KAAK,QAAQ,WAAW,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAG,WAAU;SAAoB,UAAA,KAAK,QAAQ;QAAU,CAAA,IAAI;OACvF;MACH,CAAA,IAAA;MAEH,CAAC,KAAK,SAAS,KAAK,YAAY,KAAA,KAAa,SAAS,WAAW,KAAK,KAAK,UAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAY,UAAA,KAAK,SAAS;MAAK,CAAA,IAC1C;MAEH,KAAK,eAAe,KAAA,KAAa,KAAK,eAAe,KACpD,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;OAAG,WAAU;OAAW,MAAK;OAA7B,UAAA;QAAuC,KAAK,cAAc;QAAE;QAAI,KAAK;OAAc;MACjF,CAAA,IAAA;MAEH,SAAS,SAAS,IACjB,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,WAAU;OAAW,MAAK;OAAU,cAAY,KAAK,KAAK;OAC5D,UAAA,SAAS,KAAK,YACb,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAEE,MAAK;QACL,MAAK;QACL,iBAAe,UAAU,OAAO,QAAQ;QACxC,WAAW,UAAU,OAAO,QAAQ,KAAK,0BAA0B;QACnE,eAAe,cAAc,QAAQ,EAAE;QAEtC,UAAA,QAAQ;OACH,GARD,QAAQ,EAQP,CACT;MACE,CAAA,IACH;MAEH,aAAa,KAAA,IAAY,iBAAA,GAAA,kBAAA,IAAA,CAAC,aAAD;OAAa,SAAS;OAAgB;MAAO,CAAA,IAAI;MAE1E,KAAK,YAAY,KAAA,IAAY,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAU;OAAY,UAAA,KAAK,KAAK,OAAO;MAAK,CAAA,IAAI;KAC9E;;GACF,CAAA;EAET;;;;;;;;;;;;;;;;;;EAmBA,SAAgB,uBAAuB,OAAoC;GACzE,MAAM,OAAO,aAAa,KAAK;GAE/B,MAAM,mBAAmB,MAAM;GAC/B,CAAA,GAAA,MAAA,UAAA,OAAgB,iBAAiB,GAAG,CAAC,gBAAgB,CAAC;GAEtD,MAAM,QAAQ,QAA0B,KAAK,KAAK,QAAQ;GAI1D,MAAM,WAAW,KAAK,WAAW;GAGjC,MAAM,QAAQ,KAAK;GAEnB,IAAI,CAAC,MAAM,MACT,OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;IACE,MAAK;IACL,WAAU;IACV,cAAY;IACL;IACP,eAAe,MAAM,KAAK;IAE1B,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;KAAM,SAAS,UAAU,cAAc;KAAG,MAAM,UAAU,QAAQ;KAAO,MAAM;IAAK,CAAA;GAC9E,CAAA;GAIZ,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;IACE,MAAK;IACL,WAAU;IACV,cAAY;IACL;IACP,eAAe,MAAM,KAAK;IAL5B,UAAA,CAOE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;KAAM,WAAU;KAAhB,UAAA;MACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;OAAM,SAAS,UAAU,cAAc;OAAG,MAAM,UAAU,QAAQ;OAAO,MAAM;MAAK,CAAA;MACpF,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAgB,UAAA,KAAK,KAAK;MAAQ,CAAA;MAClD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,aAAc,CAAA;MAC7B,KAAK,WAAW,KACf,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAkB,UAAA,KAAK;MAAa,CAAA,IAClD,KAAK,aAAa,KAAK,KAAK,IAC9B,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,WAAU;OAAa,UAAA,KAAK;MAAe,CAAA,IAC/C;KACA;IAEL,CAAA,GAAA,KAAK,WAAW,KAAK,QACpB,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;KAAM,WAAU;KAAhB,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;MAAM,WAAU;MAAhB,UAAA;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAiB,UAAA,KAAK,IAAI,KAAK;OAAQ,CAAA;OACvD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAM,WAAU,aAAc,CAAA;OAC7B,IAAI,WAAW,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAkB,UAAA,IAAI;OAAa,CAAA,IAAI;OAC5E,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAU;QAAe,UAAA,IAAI;OAAc,CAAA;MAC7C;KACN,CAAA,GAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MACd,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OACE,WAAW,IAAI,OAAO,kCAAkC;OACxD,OAAO,EAAE,OAAO,GAAG,IAAI,WAAW,GAAG;MACtC,CAAA;KACG,CAAA,CACF;IAb6B,GAAA,IAAI,KAajC,CACP,CACK;;EAEZ;;;EC9bA,MAAa,wBAAoC;GAAE,qBAAqB;GAAG,cAAc;GAAG,iBAAiB;GAAG,kBAAkB;EAAE;EACpI,MAAa,kBAAkB;GAAC;GAAuB;GAAgB;GAAmB;EAAkB;EAE5G,SAAgB,SAAS,IAAY,SAA4D;GAC/F,MAAM,OAAO,IAAI,KAAK,EAAE;GACxB,OAAO,KAAK,UAAU,MAAM,KAAK,KAAK,UAAU,MAAM,KACjD,QAAQ,MAAM,CAAC,OAAO,SAAS,KAAK,YAAY,KAAK,SAAS,KAAK,YAAY,IAAI,GAAG;EAC7F;;;;;;;;;;EAWA,SAAgB,aAAa,OAA8B,IAAmB,eAAuB,OAAqD;GAMxJ,MAAM,OAAO,MAAM,cAAc,MAAK,SAAQ,KAAK,eAAe,KAAA,KAAa,iBAAiB,KAAK,UAAU;GAC/G,IAAI,SAAS,KAAA,GAAW,OAAO;GAC/B,OAAO,MAAM,SAAS,KAAA,KAAa,OAAO,QAAQ,SAAS,IAAI,MAAM,SAAS,IAAI,MAAM,OAAO;EACjG;;EAGA,SAAgB,WAAW,OAAsC;GAC/D,MAAM,SAAS,MAA6B;IAAC,EAAE;IAAW,EAAE;IAAY,EAAE;IAAe,EAAE,kBAAkB;GAAI;GACjH,MAAM,YAAY,KAAK,UAAU;IAAC;IAAsB,MAAM;IAAW,MAAM,OAAO,KAAI,MAAK;KAAC,EAAE;KAAI,EAAE;KAAM,EAAE,SAAS;KAAM,MAAM,CAAC;KAAG,EAAE,OAAO,MAAM,EAAE,IAAI,IAAI;KAAM,EAAE,cAAc,KAAI,MAAK,CAAC,EAAE,cAAc,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK;IAAI,CAAC;GAAC,CAAC;GAC7O,IAAI,OAAO;GACX,KAAK,MAAM,KAAK,WAAW,OAAO,KAAK,KAAK,OAAO,EAAE,WAAW,CAAC,GAAG,QAAQ,MAAM;GAClF,OAAO;EACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ECvBA,MAAM,uBAAuB;;EAG7B,MAAM,uBAAuB;;;;;;;;EAS7B,MAAa,oBAAoB;;GAE/B,MAAM;;;;;;;GAON,WAAW;;GAEX,YAAY;;GAEZ,aAAa;;GAEb,oBAAoB;;GAEpB,WAAW;;GAEX,cAAc;;GAEd,iBAAiB;;GAEjB,eAAe;;GAEf,QAAQ;;GAER,WAAW;;GAEX,YAAY;EACd;;EAiFA,SAAS,MAAM,OAAmC;GAChD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,QAAQ,IAAI,QAAQ;EACpF;;;;;;EAsBA,SAAS,WAAW,OAAkE;GACpF,MAAM,wBAAQ,IAAI,IAAmC;GACrD,KAAK,MAAM,SAAS,MAAM,QACxB,KAAK,MAAM,OAAO,CAAC,MAAM,IAAI,MAAM,IAAI,GAAG;IACxC,IAAI,OAAO,QAAQ,YAAY,QAAQ,IAAI;IAC3C,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,KAAK,KAAK;IACzC,MAAM,QAAQ,IAAI,YAAY;IAC9B,IAAI,CAAC,MAAM,IAAI,KAAK,GAAG,MAAM,IAAI,OAAO,KAAK;GAC/C;GAEF,OAAO;EACT;EAmBA,SAAS,OACP,OACA,OACA,MACsB;GACtB,IAAI,MACF,OAAO;IAAE,eAAe;IAAG,WAAW;IAAG,YAAY;IAAG,QAAQ;IAAG,OAAO;IAAG,0BAA0B;GAAE;GAE3G,MAAM,WAAW,QAAgB,SAA0B,SAAS,OAAQ;GAC5E,MAAM,gBAAgB,QAAQ,MAAM,MAAM,mBAAmB,GAAG,MAAM,SAAS;GAC/E,MAAM,SAAS,QAAQ,MAAM,MAAM,YAAY,GAAG,MAAM,UAAU;GAClE,MAAM,YAAY,QAAQ,MAAM,MAAM,eAAe,GAAG,MAAM,aAAa;GAC3E,MAAM,mBAAmB,MAAM,MAAM,gBAAgB;GACrD,MAAM,aAAa,MAAM,mBAAmB,KAAA,IACxC,KAAA,IACA,QAAQ,kBAAkB,MAAM,cAAc;GAClD,OAAO;IACL;IACA;IACA;IACA;IACA,OAAO,gBAAgB,SAAS,aAAa,cAAc;IAC3D,0BAA0B,MAAM,mBAAmB,KAAA,IAAY,mBAAmB;GACpF;EACF;;;;;;;;;EAUA,SAAgB,kBAAkB,OAAuB;GACvD,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG,OAAO,YAAY,CAAC;GAC/D,IAAI,QAAQ,MAAQ,OAAO;GAC3B,OAAO,QAAQ,MAAO,iBAAiB,KAAK,IAAI,YAAY,KAAK;EACnE;;EAGA,SAAS,OAAO,OAAe,QAAoC;GACjE,OAAO,SAAS,IAAI,GAAG,MAAM,GAAG,oBAAoB,MAAM,MAAM,KAAA;EAClE;;;;;;;;EASA,SAAgB,qBAAqB,OAAsD;GACzF,MAAM,EAAE,OAAO,OAAO,UAAU;GAChC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,MAAM,eAAe,WAAW,KAAK,GAAG,OAAO,KAAA;GACjF,MAAM,SAAS,eAAe;GAC9B,MAAM,QAAQ,WAAW,KAAK;GAC9B,MAAM,YAAkC;IAAE,eAAe;IAAG,WAAW;IAAG,YAAY;IAAG,QAAQ;IAAG,OAAO;IAAG,0BAA0B;GAAE;GAC1I,IAAI,OAAO;GACX,IAAI,OAAO;GACX,IAAI,UAAU;GACd,IAAI,SAAS;GACb,MAAM,QAAkB,CAAC;GACzB,KAAK,MAAM,SAAS,MAAM,QAAQ;IAChC,KAAK,MAAM,OAAO,iBAAiB,OAAO,QAAQ,MAAM,OAAO;IAC/D,IAAI,MAAM,aAAa,sBAAsB;KAAE,UAAU;KAAM;IAAS;IACxE,MAAM,QAAQ,MAAM,IAAI,MAAM,KAAK;IACnC,IAAI,CAAC,OAAO;KAAE,UAAU;KAAM;IAAS;IACvC,MAAM,SAAS,MAAM,SAAS;IAC9B,SAAS;IACT,IAAI,MAAM,QAAQ,MAAM,OAAO,MAAM;KACnC,UAAU;KACV,MAAM,KAAK,gDAAgD;IAC7D;IACA,MAAM,QAAQ,aAAa,OAAO,MAAM,IAAI,MAAM,eAAe,KAAK;IACtE,MAAM,OAAO,OAAO,MAAM,QAAQ,OAAO,MAAM;IAC/C,WAAW,UAAU,KAAK,QAAQ;IAClC,KAAK,MAAM,OAAO;KAAC;KAAiB;KAAa;KAAU;KAAS;IAA0B,GAAY,UAAU,QAAQ,KAAK;IACjI,UAAU,cAAc,UAAU,cAAc,MAAM,KAAK,cAAc;IACzE,IAAI,MAAM,MAAM;KACd,MAAM,SAAS,MAAM,OAAO,QAAQ,SAAS,MAAM,IAAI,MAAM,SAAS;KACtE,SAAS;KACT,MAAM,KAAK,SAAS,kBAAkB,YAAY,kBAAkB,YAAY;IAClF;GACF;GAGA,IAAI,gBAAgB,MAAK,QAAO,OAAO,SAAS,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,OAAO,KAAA;GACtF,MAAM,EAAE,OAAO,6BAA6B;GAC5C,YAAY,2BAA2B;GACvC,SAAS,CAAC;GACV,IAAI,SAAS,MAAM,KAAK,8EAA8E;GACtG,MAAM,KAAK,kBAAkB,eAAe;GAC5C,MAAM,gBAAgB,OAAO;GAC7B,MAAM,SAAS,OAAO;GACtB,MAAM,YAAY,OAAO;GACzB,MAAM,aAAa,OAAO;GAI1B,IAAI,kBAAkB,KAAK,WAAW,KAAK,cAAc,KAAK,eAAe,GAAG,OAAO,KAAA;GAIvF,IAAI,CAAC,QAAQ,SAAS,GAAG,OAAO,KAAA;GAEhC,MAAM,QAAQ,OACV,kBAAkB,OAClB,GAAG,UAAU,MAAM,kBAAkB,cAAc,kBAAkB,KAAK;GAC9E,MAAM,SAAS,WACb,WAAW,KAAA,IAAY,KAAA,IAAY,kBAAkB,MAAM;GAG7D,MAAM,OAA+B;IACnC;KAAE,KAAK;KAAiB,OAAO,kBAAkB;KAAe,QAAQ;KAAe,UAAU,MAAM,UAAU,aAAa;IAAE;IAChI;KAAE,KAAK;KAAa,OAAO,kBAAkB;KAAW,QAAQ;KAAW,UAAU,MAAM,UAAU,SAAS;IAAE;IAChH;KAAE,KAAK;KAAc,OAAO,kBAAkB;KAAY,QAAQ;KAAY,UAAU,6BAA6B,cAAc,aAAa,IAAI,KAAA,IAAY,MAAM,UAAU,UAAU;IAAE;IAC5L;KAAE,KAAK;KAAU,OAAO,kBAAkB;KAAQ,QAAQ;KAAQ,UAAU,MAAM,UAAU,MAAM;IAAE;GACtG;GACA,IAAI,2BAA2B,GAAG,MAAM,KAAK,kBAAkB,kBAAkB;GAajF,OAAO;IACL;IACA;IACA,OAZa;KACb,GAAG,kBAAkB,WAAW,GAAG,OAAO,kBAAkB,OAAO,kBAAkB,KAAK;KAC1F,OAAO,kBAAkB,eAAe,aAAa;KACrD,OAAO,kBAAkB,QAAQ,MAAM;KACvC,OAAO,kBAAkB,WAAW,SAAS;KAC7C,OAAO,kBAAkB,YAAY,UAAU;KAC/C,GAAG;IACL,CAAC,CAA+B,QAAQ,SAAyB,SAAS,KAAA,CAAS,CAAC,CAAC,KAAK,KAKpF;IACJ;IACA,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC;IACzB;IACA;IACA;IACA,aAAa,CAAC;GAChB;EACF;;EAmBA,SAAgB,mBAAmB,MAA2C;GAC5E,OAAO;IAAE,WAAW,kBAAkB;IAAW,OAAO,KAAK;GAAM;EACrE;;;;;;;;;;;;;;EAgDA,SAAgB,0BAA0B,MAAmD;GAC3F,MAAM,UAAU,QACd,KAAK,KAAK,MAAM,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,UAAU;GACtD,MAAM,SAAS,QAAyD;IACtE,IAAI,KAAK,MAAM,OAAO,KAAA;IACtB,OAAO,KAAK,KAAK,MAAM,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE;GACnD;GACA,MAAM,gBAAgB,OAAO,eAAe;GAC5C,MAAM,YAAY,OAAO,WAAW;GACpC,MAAM,aAAa,OAAO,YAAY;GACtC,MAAM,SAAS,OAAO,QAAQ;GAC9B,MAAM,OAAmC,CAAC;GAC1C,IAAI,gBAAgB,YAAY,aAAa,GAC3C,KAAK,KAAK;IAAE,KAAK;IAAY,QAAQ,KAAA;IAAW,QAAQ,KAAA;IAAW,QAAQ;GAAM,CAAC;GAEpF,KAAK,KAAK;IAAE,KAAK;IAAiB,QAAQ;IAAe,QAAQ,MAAM,eAAe;IAAG,QAAQ;GAAM,CAAC;GACxG,KAAK,KAAK;IAAE,KAAK;IAAa,QAAQ;IAAW,QAAQ,MAAM,WAAW;IAAG,QAAQ;GAAM,CAAC;GAC5F,IAAI,eAAe,GAAG;IAMpB,MAAM,SAAS,MAAM,YAAY;IACjC,KAAK,KAAK;KAAE,KAAK;KAAc,QAAQ;KAAY;KAAQ,QAAQ,WAAW,KAAA;IAAU,CAAC;GAC3F;GACA,KAAK,KAAK;IAAE,KAAK;IAAU,QAAQ;IAAQ,QAAQ,MAAM,QAAQ;IAAG,QAAQ;GAAM,CAAC;GACnF,OAAO;EACT;;;;ECxYA,MAAM,aAAa;;;;;;EAOnB,MAAM,eAAe;;;;;;EAOrB,MAAM,iBAAiB;;;;;;EAOvB,MAAM,UAAU;;EAGhB,MAAM,wBAAwB;;;;;;EAgB9B,MAAM,uBAAmD,QAAQ,aAAa;GAC5E,IAAI,OAAO,qBAAqB,aAAa,OAAO,KAAA;GACpD,MAAM,WAAW,IAAI,iBAAiB,QAAQ;GAC9C,SAAS,QAAQ,QAAQ,EAAE,WAAW,KAAK,CAAC;GAC5C,aAAa,SAAS,WAAW;EACnC;;;;;;;;;EAwBA,IAAa,qBAAb,MAAgC;GAC9B;GACA;GACA;GACA,OAA4C,KAAA;;GAE5C,SAA2C,KAAA;;GAE3C,WAAwC,KAAA;;GAExC,WAA4C,KAAA;GAC5C,YAA6C,KAAA;GAC7C,WAA4C,KAAA;;GAE5C,YAAoB;;GAEpB,aAA0C,KAAA;GAC1C,+BAAuB,IAAI,IAA8B;GACzD,+BAAuB,IAAI,IAAiB;GAC5C,aAAqB;GAErB,YAAY,SAAoC;IAC9C,KAAK,MAAM,QAAQ;IACnB,KAAK,QAAQ,QAAQ;IACrB,KAAK,UAAU,QAAQ,WAAW;GACpC;;GAGA,QAAc;IACZ,IAAI,KAAK,WAAW,KAAA,GAAW;IAC/B,MAAM,OAAO,KAAK,IAAI;IACtB,IAAI,SAAS,QAAQ,SAAS,KAAA,GAAW;IACzC,KAAK,SAAS,KAAK,QAAQ,YAAY,KAAK,MAAM,CAAC;GACrD;;;;;;;GAQA,KAAK,MAAyC;IAC5C,KAAK,OAAO;IACZ,KAAK,MAAM;GACb;;GAGA,UAAgB;IACd,KAAK,SAAS;IACd,KAAK,SAAS,KAAA;IACd,KAAK,WAAW;IAChB,KAAK,YAAY;IACjB,KAAK,OAAO,KAAA;GACd;;GAGA,QAAsB;IACpB,KAAK,UAAU;IACf,KAAK,YAAY;GACnB;GAMA,YAA0B;IACxB,MAAM,OAAO,KAAK;IAClB,IAAI,SAAS,KAAA,GAAW;KACtB,KAAK,WAAW;KAChB;IACF;IACA,IAAI,KAAK,UAAU,gBAAgB,MAAM;KACvC,MAAM,SAAS,KAAK,kBAAkB;KACtC,IAAI,WAAW,MAAM;MACnB,KAAK,cAAc;MACnB,IAAI,KAAK,eAAe,uBACtB,QAAQ,KACN,iCAAiC,WAAW,8EAC9C;MAEF;KACF;KACA,KAAK,aAAa;KAClB,KAAK,WAAW;KAChB,KAAK,UAAU,QAAQ,mBAAmB,IAAI,CAAC;IACjD;IACA,IAAI,KAAK,cAAc,KAAA,GAAW;KAChC,MAAM,SAAS,mBAAmB,IAAI,CAAC,CAAC;KACxC,IAAI,KAAK,UAAU,gBAAgB,QAAQ,KAAK,UAAU,cAAc;IAC1E;IACA,IAAI,KAAK,aAAa,KAAA,GAAW;KAC/B,IAAI,KAAK,SAAS,UAAU,KAAK,OAAO,KAAK,SAAS,QAAQ,KAAK;KACnE,MAAM,cAAc,KAAK,cAAc,SAAS;KAChD,IAAI,KAAK,SAAS,aAAa,kBAAkB,MAAM,aAAa;MAClE,IAAI,gBAAgB,MAAM,KAAK,SAAS,gBAAgB,kBAAkB;WACrE,KAAK,SAAS,aAAa,oBAAoB,WAAW;KACjE;IACF;IACA,IAAI,KAAK,aAAa,KAAA,GAAW;KAC/B,MAAM,YAAY,GAAG,kBAAkB,WAAW,GAAG,KAAK;KAC1D,IAAI,KAAK,SAAS,gBAAgB,WAAW,KAAK,SAAS,cAAc;IAC3E;GACF;;GAGA,oBAA4C;IAE1C,MAAM,QADQ,KAAK,MAAM,KAAK,KAAK,IAAA,CAChB,cAAc,UAAU;IAC3C,IAAI,SAAS,MAAM,OAAO;IAC1B,MAAM,WAAW,KAAK,iBAAiB,cAAc;IACrD,OAAO,SAAS,WAAW,IAAI,OAAQ,SAAS,SAAS,SAAS,MAAM;GAC1E;;;;;GAMA,UAAkB,QAAiB,KAA+B;IAChE,MAAM,MAAM,KAAK;IACjB,MAAM,OAAO,IAAI,cAAc,MAAM;IACrC,KAAK,aAAa,8BAA8B,EAAE;IAKlD,MAAM,YAAY,IAAI,cAAc,MAAM;IAC1C,UAAU,cAAc,IAAI;IAC5B,UAAU,aAAa,eAAe,MAAM;IAC5C,UAAU,MAAM,QAAQ;IACxB,UAAU,MAAM,SAAS;IACzB,MAAM,QAAQ,IAAI,cAAc,MAAM;IACtC,MAAM,cAAc,IAAI;IACxB,MAAM,MAAM,aAAa;IAGzB,MAAM,OAAO,IAAI,cAAc,MAAM;IACrC,KAAK,KAAK;IACV,KAAK,MAAM,UAAU;IACrB,KAAK,YAAY,SAAS;IAC1B,KAAK,YAAY,KAAK;IACtB,KAAK,YAAY,IAAI;IACrB,OAAO,YAAY,IAAI;IAIvB,IAAI,CAAC,OAAO,aAAa,kBAAkB,GAAG;KAC5C,OAAO,aAAa,oBAAoB,OAAO;KAC/C,KAAK,YAAY;IACnB;IACA,KAAK,WAAW;IAChB,KAAK,WAAW;IAChB,KAAK,YAAY;IACjB,KAAK,WAAW;GAClB;GAEA,aAA2B;IACzB,IAAI,KAAK,aAAa,KAAA,KAAa,KAAK,SAAS,eAAe,MAC9D,KAAK,SAAS,WAAW,YAAY,KAAK,QAAQ;IAEpD,IAAI,KAAK,WAAW;KAClB,KAAK,UAAU,gBAAgB,kBAAkB;KACjD,KAAK,YAAY;IACnB;IACA,KAAK,WAAW,KAAA;IAChB,KAAK,WAAW,KAAA;IAChB,KAAK,YAAY,KAAA;IACjB,KAAK,WAAW,KAAA;GAClB;GAMA,cAA4B;IAC1B,MAAM,OAAO,KAAK;IAClB,MAAM,OAAO,SAAS,KAAA,IAAY,OAAO,KAAK,cAAc;IAC5D,IAAI,SAAS,QAAQ,SAAS,KAAA,GAAW;KACvC,KAAK,YAAY;KACjB;IACF;IACA,KAAK,YAAY,IAAI;IACrB,MAAM,OAAO,0BAA0B,IAAI;IAC3C,MAAM,QAAQ,YAAY,IAAI;IAC9B,IAAI,CAAC,mBAAmB,OAAO,MAAM,KAAK,YAAY,GAAG;KAIvD,KAAK,YAAY;KACjB;IACF;IACA,MAAM,yBAAS,IAAI,IAAiB;IACpC,KAAK,MAAM,CAAC,OAAO,QAAQ,KAAK,QAAQ,GAAG;KACzC,MAAM,OAAO,MAAM;KACnB,IAAI,SAAS,KAAA,GAAW;KACxB,MAAM,OAAO,KAAK,aAAa,IAAI,KAAK,EAAE;KAC1C,IAAI,IAAI,QAAQ;MAId,IAAI,KAAK,GAAG,MAAM,YAAY,QAAQ,KAAK,GAAG,MAAM,UAAU;MAC9D,IAAI,KAAK,GAAG,MAAM,YAAY,QAAQ,KAAK,GAAG,MAAM,UAAU;MAC9D,OAAO,IAAI,KAAK,EAAE;MAClB,OAAO,IAAI,KAAK,EAAE;MAClB,KAAK,kBAAkB,KAAK,IAAI,IAAI;MACpC;KACF;KACA,IAAI,KAAK,GAAG,MAAM,YAAY,QAAQ,KAAK,GAAG,MAAM,UAAU;KAC9D,IAAI,KAAK,GAAG,MAAM,YAAY,QAAQ,KAAK,GAAG,MAAM,UAAU;KAC9D,IAAI,IAAI,WAAW,KAAA,GAAW;MAC5B,KAAK,kBAAkB,KAAK,IAAI,IAAI;MACpC;KACF;KACA,MAAM,QAAQ,QAAQ,KAAK,kBAAkB,KAAK,IAAI,IAAI,GAAG;KAI7D,IAAI,MAAM,eAAe,KAAK,IAAI,KAAK,GAAG,YAAY,KAAK;KAC3D,IAAI,MAAM,gBAAgB,IAAI,QAAQ,MAAM,cAAc,IAAI;IAChE;IAGA,KAAK,MAAM,QAAQ,CAAC,GAAG,KAAK,YAAY,GAAG;KACzC,IAAI,OAAO,IAAI,IAAI,GAAG;KACtB,IAAI,KAAK,MAAM,YAAY,QAAQ,KAAK,MAAM,UAAU;KACxD,KAAK,aAAa,OAAO,IAAI;IAC/B;IACA,KAAK,MAAM,QAAQ,QAAQ,KAAK,aAAa,IAAI,IAAI;IACrD,KAAK,aAAa;GACpB;;GAGA,YAAoB,MAAqB;IACvC,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,KAAK,YAAY,GAAG;KAChD,IAAI,GAAG,eAAe,MAAM;KAC5B,IAAI,MAAM,eAAe,MAAM,MAAM,WAAW,YAAY,KAAK;KACjE,KAAK,aAAa,OAAO,EAAE;IAC7B;IACA,KAAK,MAAM,QAAQ,CAAC,GAAG,KAAK,YAAY,GAAG;KACzC,IAAI,KAAK,eAAe,MAAM;KAO9B,IAAI,KAAK,MAAM,YAAY,QAAQ,KAAK,MAAM,UAAU;KACxD,KAAK,aAAa,OAAO,IAAI;IAC/B;GACF;;GAGA,kBAA0B,IAAiB,KAAyC;IAClF,MAAM,QAAQ,KAAK,IAAI,cAAc,MAAM;IAC3C,MAAM,aAAa,2BAA2B,GAAG;IAIjD,MAAM,MAAM,aAAa;IACzB,MAAM,MAAM,UAAU;IACtB,MAAM,MAAM,WAAW;IACvB,MAAM,MAAM,YAAY;IACxB,MAAM,MAAM,aAAa;IACzB,GAAG,YAAY,KAAK;IACpB,KAAK,aAAa,IAAI,IAAI,KAAK;IAC/B,OAAO;GACT;GAEA,kBAA0B,IAAiB,OAAsC;IAC/E,IAAI,UAAU,KAAA,GAAW;IACzB,IAAI,MAAM,eAAe,MAAM,MAAM,WAAW,YAAY,KAAK;IACjE,KAAK,aAAa,OAAO,EAAE;GAC7B;;;;;;;;;;GAWA,gBAAwC;IACtC,IAAI,KAAK,YAAY,gBAAgB,MAAM,OAAO,KAAK;IAGvD,KAAK,YAAY;IACjB,OAAO,KAAK,IAAI,cAAc,YAAY;GAC5C;;GAGA,cAA4B;IAC1B,KAAK,MAAM,SAAS,KAAK,aAAa,OAAO,GAC3C,IAAI,MAAM,eAAe,MAAM,MAAM,WAAW,YAAY,KAAK;IAEnE,KAAK,aAAa,MAAM;IACxB,KAAK,MAAM,QAAQ,KAAK,cACtB,IAAI,KAAK,MAAM,YAAY,QAAQ,KAAK,MAAM,UAAU;IAE1D,KAAK,aAAa,MAAM;IACxB,KAAK,aAAa,KAAA;GACpB;EACF;;EAGA,SAAS,YAAY,MAA4D;GAC/E,MAAM,QAAqD,CAAC;GAC5D,IAAI,QAA4B;GAChC,KAAK,MAAM,QAAQ,MAAM,KAAK,KAAK,UAAU,GAAG;IAC9C,MAAM,MAAM,UAAU,IAAI;IAC1B,IAAI,QAAQ,MAAM,QAAQ;SACrB,IAAI,QAAQ,QAAQ,UAAU,MAAM;KACvC,MAAM,KAAK;MAAE,IAAI;MAAO,IAAI;KAAoB,CAAC;KACjD,QAAQ;IACV;GACF;GACA,OAAO;EACT;;EAGA,SAAS,UAAU,MAAoB;GACrC,MAAM,MAAO,KAAiB;GAC9B,OAAO,OAAO,QAAQ,WAAW,IAAI,YAAY,IAAI;EACvD;;;;;;;;;;;EAYA,SAAS,mBACP,OACA,MACA,QACS;GACT,IAAI,MAAM,WAAW,KAAK,QAAQ,OAAO;GACzC,OAAO,KAAK,OAAO,KAAK,UAAU;IAChC,MAAM,OAAO,MAAM;IACnB,IAAI,SAAS,KAAA,GAAW,OAAO;IAC/B,MAAM,OAAO,cAAc,KAAK,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,SAAS,GAAG;IACtD,OAAO,SAAS,IAAI,MAAM,OAAO,IAAI,MAAM;GAC7C,CAAC;EACH;;;;;EAMA,SAAS,cAAc,IAAiB,OAAwC;GAC9E,IAAI,OAAO;GACX,KAAK,MAAM,QAAQ,MAAM,KAAK,GAAG,UAAU,GAAG;IAC5C,IAAI,SAAS,OAAO;IACpB,QAAQ,KAAK,eAAe;GAC9B;GACA,OAAO;EACT;;EAGA,SAAS,SAAS,MAAsB;GACtC,OAAO,KAAK,QAAQ,OAAO,EAAE;EAC/B;;;;EC7bA,MAAM,cAAc;;EAGpB,MAAM,eAAe,EAAE,SAAS,OAAO;;EA6CvC,IAAI,oBAAoB;;;;;;;EAQxB,SAAgB,uBAAuB,OAAkC;GACvE,IAAI,OAAO,MAAM,kBAAkB,cAAc,OAAO,MAAM,yBAAyB,YAAY;IACjG,IAAI,CAAC,mBAAmB;KACtB,oBAAoB;KACpB,QAAQ,MACN,4IACF;IACF;IACA,OAAO;GACT;GACA,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,kBAAD,EAAkB,GAAI,MAAQ,CAAA;EACvC;;EAGA,SAAS,iBAAiB,OAAkC;GAC1D,MAAM,aAAA,GAAYC,MAAAA,OAAAA,CAA+B,IAAI;GACrD,MAAM,cAAA,GAAaA,MAAAA,OAAAA,CAAkC,IAAI;GACzD,MAAM,SAAS,MAAM,sBAAsB,UAAU,KAAK;GAI1D,MAAM,OAAO,qBAAqB;IAAE,OAHtB,MAAM,cAAc,YAGE;IAAO,WAFzB,MAAM,cAAc,gBAEK;IAAW,OADxC,MAAM,cAAc,iBACoB;IAAO,OAAO,OAAO;IAAO,KAAK,KAAK,IAAI;GAAE,CAAC;GAEnG,CAAA,GAAA,MAAA,UAAA,OAAgB;IAGd,IAAI,OAAO,aAAa,aAAa;IACrC,MAAM,UAAU,IAAI,mBAAmB;KACrC,KAAK;KACL,aAAa,UAAU,SAAS,QAAQ,WAAW,CAAC,EAAE,iBAAiB;IACzE,CAAC;IACD,WAAW,UAAU;IACrB,QAAQ,MAAM;IACd,aAAa;KACX,WAAW,UAAU;KACrB,QAAQ,QAAQ;IAClB;GACF,GAAG,CAAC,CAAC;GAKL,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,WAAW,SAAS,KAAK,IAAI;GAC/B,CAAC;GAED,IAAI,SAAS,KAAA,GAAW,OAAO;GAC/B,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,KAAK;IAAW,OAAO;IAAc,gCAA6B;GAAI,CAAA;EACrF;;;;;;;;;;;;;;;;;;;;;;;;;;;ECnIA,MAAa,eAAe;;EAG5B,MAAa,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ECwHzB,MAAa,KAA6C;GACxD,KAAK;GACL,OAAO;GACP,OACE;GAEF,QAAQ;GACR,YAAY;GACZ,WAAW;GACX,aAAa;GACb,cAAc;GACd,SAAS;GACT,aAAa;GACb,YAAY;GACZ,gBAAgB;GAChB,kBAAkB;GAClB,sBAAsB;GACtB,qBAAqB;GACrB,yBAAyB;GACzB,kBAAkB;GAClB,sBAAsB;GACtB,uBAAuB;GACvB,wBAAwB;GACxB,iBAAiB;GACjB,oBAAoB;GACpB,wBAAwB;GACxB,WAAW;GACX,eAAe;GACf,eAAe;GACf,cAAc;GACd,YAAY;GACZ,eAAe;GACf,cAAc;GACd,YAAY;GACZ,gBAAgB;GAChB,gBAAgB;GAChB,eAAe;GACf,mBAAmB;GACnB,mBAAmB;GACnB,YAAY;GACZ,WAAW;GACX,YAAY;GACZ,oBAAoB;GACpB,SAAS;GACT,YAAY;GACZ,WAAW;GACX,eAAe;GACf,gBAAgB;GAChB,aAAa;GACb,UAAU;GACV,wBAAwB;GACxB,kBAAkB;GAClB,YAAY;GACZ,oBAAoB;GACpB,mBACE;GAEF,mBAAmB;GACnB,oBAAoB;GACpB,sBAAsB;GACtB,wBAAwB;GACxB,yBAAyB;GACzB,YAAY;GACZ,OAAO;GACP,eAAe;GACf,gBAAgB;GAChB,gBAAgB;GAChB,UAAU;GACV,SAAS;GACT,MAAM;GACN,QAAQ;GACR,OAAO;GACP,YAAY;GACZ,SAAS;GACT,QAAQ;GACR,MAAM;GACN,MAAM;GACN,YAAY;GACZ,cAAc;GACd,iBAAiB;GACjB,cAAc;GACd,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,aAAa;GACb,kBAAkB;GAClB,WAAW;GACX,aAAa;GACb,eAAe;GACf,gBAAgB;GAChB,cAAc;GACd,gBAAgB;GAChB,WAAW;GACX,eAAe;GACf,aAAa;GACb,eAAe;GACf,YAAY;GACZ,cAAc;GACd,eAAe;GACf,qBAAqB;GACrB,mBAAmB;GACnB,iBAAiB;GACjB,qBAAqB;GACrB,yBAAyB;GACzB,6BAA6B;GAC7B,mBAAmB;GACnB,kBAAkB;GAClB,cAAc;GACd,gBAAgB;GAChB,aAAa;GACb,eAAe;GACf,iBAAiB;GACjB,mBAAmB;GACnB,iBAAiB;GACjB,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,aAAa;GACb,eAAe;GACf,cAAc;GACd,eAAe;GACf,aAAa;GACb,cAAc;GACd,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,iBAAiB;GACjB,cAAc;GACd,kBAAkB;GAClB,gBAAgB;GAChB,oBAAoB;GACpB,WAAW;GACX,iBAAiB;GACjB,iBAAiB;GACjB,sBAAsB;EACxB;EAEA,MAAa,KAA6C;GACxD,KAAK;GACL,OAAO;GACP,OACE;GAGF,QAAQ;GACR,YAAY;GAEZ,WAAW;GACX,aAAa;GACb,cAAc;GACd,SAAS;GACT,aAAa;GACb,YAAY;GACZ,gBAAgB;GAEhB,kBAAkB;GAClB,sBAAsB;GACtB,qBAAqB;GACrB,yBAAyB;GAEzB,kBAAkB;GAClB,sBAAsB;GACtB,uBAAuB;GACvB,wBAAwB;GACxB,iBAAiB;GACjB,oBAAoB;GACpB,wBAAwB;GAExB,WAAW;GACX,eAAe;GAIf,eAAe;GACf,cAAc;GAGd,YAAY;GACZ,eAAe;GACf,cAAc;GACd,YAAY;GACZ,gBAAgB;GAChB,gBAAgB;GAChB,eAAe;GACf,mBAAmB;GACnB,mBAAmB;GAEnB,YAAY;GACZ,WAAW;GAIX,YAAY;GACZ,oBAAoB;GACpB,SAAS;GACT,YAAY;GACZ,WAAW;GACX,eAAe;GACf,gBAAgB;GAChB,aAAa;GACb,UAAU;GACV,wBAAwB;GACxB,kBAAkB;GAClB,YAAY;GACZ,oBAAoB;GACpB,mBACE;GAGF,mBAAmB;GACnB,oBAAoB;GACpB,sBAAsB;GACtB,wBAAwB;GAExB,yBAAyB;GACzB,YAAY;GACZ,OAAO;GACP,eAAe;GACf,gBAAgB;GAChB,gBAAgB;GAChB,UAAU;GACV,SAAS;GACT,MAAM;GACN,QAAQ;GACR,OAAO;GACP,YAAY;GACZ,SAAS;GACT,QAAQ;GACR,MAAM;GACN,MAAM;GACN,YAAY;GACZ,cAAc;GACd,iBAAiB;GACjB,cAAc;GACd,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,aAAa;GACb,kBAAkB;GAClB,WAAW;GACX,aAAa;GACb,eAAe;GACf,gBAAgB;GAChB,cAAc;GACd,gBAAgB;GAChB,WAAW;GACX,eAAe;GACf,aAAa;GACb,eAAe;GACf,YAAY;GACZ,cAAc;GACd,eAAe;GACf,qBAAqB;GACrB,mBAAmB;GACnB,iBAAiB;GACjB,qBAAqB;GACrB,yBAAyB;GACzB,6BAA6B;GAC7B,mBAAmB;GACnB,kBAAkB;GAClB,cAAc;GACd,gBAAgB;GAChB,aAAa;GACb,eAAe;GACf,iBAAiB;GACjB,mBAAmB;GACnB,iBAAiB;GACjB,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,aAAa;GACb,eAAe;GACf,cAAc;GACd,eAAe;GACf,aAAa;GACb,cAAc;GACd,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,iBAAiB;GACjB,cAAc;GACd,kBAAkB;GAClB,gBAAgB;GAChB,oBAAoB;GACpB,WAAW;GACX,iBAAiB;GACjB,iBAAiB;GACjB,sBAAsB;EACxB;;;;ECzXA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgIjB,SAAS,gBAAsB;GAC7B,IAAI,OAAO,aAAa,aAAa;GACrC,MAAM,KAAK;GACX,IAAI,SAAS,cAAc,0BAA0B,GAAG,GAAG,MAAM,MAAM;GACvE,MAAM,MAAM,SAAS,cAAc,OAAO;GAC1C,IAAI,QAAQ,SAAS;GACrB,IAAI,QAAQ,YAAY;GACxB,IAAI,cAAc;GAClB,SAAS,KAAK,YAAY,GAAG;EAC/B;;;;;;EAOA,SAAS,iBAA6B;GACpC,IAAI,OAAO,aAAa,aAAa,aAAa,CAAC;GACnD,IAAI,SAAS,cAAc,yFAA0C,MAAM,MAAM,aAAa,CAAC;GAC/F,MAAM,MAAM,SAAS,cAAc,OAAO;GAC1C,IAAI,QAAQ,SAAS;GACrB,IAAI,QAAQ,YAAY;GACxB,IAAI,cAAc;GAClB,SAAS,KAAK,YAAY,GAAG;GAC7B,aAAa;IACX,IAAI,OAAO;GACb;EACF;;;;;;;;EASA,MAAM,WAAW;;;;;;;EAQjB,MAAM,kBAAkB;;;;;;;EA2BxB,SAAgB,MAAM,KAAoB;GACxC,cAAc;GAEd,MAAM,aAAa,IAAI,IAAI,YAAY;GACvC,IAAI,eAAe,KAAA,GAOjB,0BAA0B,kBAAkB,IAAI,OAAO,UAAU,CAAC,CAAC,WAAW,OAAO,OAAO,IAAI;GAOlG,IAAI,aAAa,IAAI,OAAO,SAAS,wBAAwB;IAAE;IAAI;GAAG,CAAC,GAAG,qCAAqC;GAE/G,MAAM,YAAY,uBAAuB,YAAY,KAAK,WAAW;GACrE,IAAI,cAAc,KAAA,GAAW;IAC3B,oBAAoB,KAAK,WAAW,YAAY,eAAe;IAC/D;GACF;GAKA,IAAI,OAAO,CAAC,oBAAoB,IAAI,cAAc;IAChD,MAAM,cAAe,UAAU,OAE5B;IACH,oBAAoB,WAAW,EAAE,YAAY,CAAC;GAChD,CAAC;EACH;;EAGA,SAAS,oBACP,KACA,KACA,iBACM;GACN,MAAM,QAAQ,IAAI,cAAc,KAA8B,EAAE,WAAW,eAAe,CAAC;GAO3F,IAAI;GACJ,MAAM,aAAa,IAAI,8BACrB,OACA;IAAE,GAAG;IAAK,cAAc,eAAe,KAAK,QAAQ,QAAQ;KAAE,IAAI;KAAO,OAAO,EAAE,SAAS,2CAA2C;IAAE,CAAC;GAAE,GAC3I,eACF;GACA,IAAI,mBAAmB,WAAW,QAAQ,GAAG,+CAA+C;GAC5F,MAAM,QAAQ,oBAAuC,WAAW,MAAM,CAAC;GACvE,WAAW,gBAAgB,MAAM,IAAI,WAAW,MAAM,CAAC,CAAC;GACxD,IAAI,aACK,IAAI,OAER,IAAI,uCAAuC;IAAE,WAAW,mBAAmB;GAAE,CAAC,GACjF,oDACF;GAYA,IAAI;GACJ,IAAI;GAKJ,IAAI;GACJ,MAAM,eAAyC;IAC7C,SAAS,0BAA0B;IACnC,aAAa;KACX,GAAG,0BAA0B;KAC7B,GAAG,2BAA2B;KAC9B,GAAG,2BAA2B;KAC9B,GAAG,0BAA0B;IAC/B;GACF;GACA,IAAI,aAAa;IACf,IAAI,YAAY;IAChB,IAAI;IACJ,IAAS,OAAO,OAAO,YAAY,CAAC,CAAC,MAAM,YAAiC;KAC1E,IAAI,WAAW;MACb,QAAa;MACb;KACF;KACA,UAAU;KACV,IAAI,OAAO,CAAC,oBAAoB,IAAI,iBAAiB;MACnD,iBAAiB,aAAa,OAAO;MAErC,WAAW,eAAe;MAK1B,kBAAkB,OAAO;MACzB,aAAa,mBAAmB;OAC9B,iBAAiB,KAAA;MACnB,GAAG,2CAA2C;KAChD,CAAC;IACH,IAAI,UAAmB;KAGrB,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IACzE,CAAC;IACD,aAAa;KACX,YAAY;KACZ,iBAAiB,KAAA;KACjB,IAAI,YAAY,KAAA,GAAW,QAAa;IAC1C;GACF,GAAG,wCAAwC;GAC3C,MAAM,cAA2B;IAC/B,QAAQ,YAAY;KAClB,MAAM,YAAY;KAClB,IAAI,cAAc,KAAA,GAChB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,2CAA2C;KAAE;KAExG,OAAO,UAAU,OAAO;IAC1B;IACA,QAAQ,YAAY;KAClB,MAAM,YAAY;KAClB,IAAI,cAAc,KAAA,GAChB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,2CAA2C;KAAE;KAExG,OAAO,UAAU,OAAO;IAC1B;IACA,QAAQ,YAAY;KAClB,MAAM,YAAY;KAClB,IAAI,cAAc,KAAA,GAChB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,2CAA2C;KAAE;KAExG,MAAM,OAAO,UAAU;KAIvB,IAAI,OAAO,SAAS,YAClB,OAAO;MAAE,IAAI;MAAO,OAAO;OAAE,SAAS;OAAkD,WAAW;MAAK;KAAE;KAE5G,OAAO,KAAK,KAAK,SAAS;IAC5B;GACF;GAGA,qBAAqB,YAAY,OAAO;GACxC,MAAM,kBAAkB,IAAI,2BAA2B,WAAW;GAClE,IAAI,mBAAmB,gBAAgB,QAAQ,GAAG,4CAA4C;GAC9F,MAAM,aAAa,oBAAoC,gBAAgB,MAAM,CAAC;GAC9E,gBAAgB,gBAAgB,WAAW,IAAI,gBAAgB,MAAM,CAAC,CAAC;GAKvE,mBAAmB,IAAI,4BAA4B,WAAW;GAC9D,IAAI,mBAAmB,kBAAkB,QAAQ,GAAG,uCAAuC;GAC3F,MAAM,cAAc,oBAA4C,iBAAiB,MAAM,CAAC;GACxF,iBAAiB,gBAAgB,YAAY,IAAI,iBAAiB,MAAM,CAAC,CAAC;GAK1E,MAAM,cAA2B;IAC/B,YAAY,YAAY;KACtB,IAAI,mBAAmB,KAAA,GACrB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,oCAAoC;KAAE;KAEjG,OAAO,eAAe,WAAW;IACnC;IACA,aAAa,YAAY;KACvB,IAAI,mBAAmB,KAAA,GACrB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,oCAAoC;KAAE;KAEjG,OAAO,eAAe,YAAY;IACpC;IACA,aAAa,YAAY;KACvB,IAAI,mBAAmB,KAAA,GACrB,OAAO;MAAE,IAAI;MAAO,OAAO,EAAE,SAAS,mBAAmB,oCAAoC;KAAE;KAEjG,OAAO,eAAe,YAAY;IACpC;GACF;GACA,MAAM,kBAAkB,IAAI,iCAAiC,WAAW;GACxE,IAAI,mBAAmB,gBAAgB,QAAQ,GAAG,4CAA4C;GAC9F,MAAM,aAAa,oBAAoC,gBAAgB,MAAM,CAAC;GAC9E,IAAI,iBAAiB,gBAAgB,MAAM,CAAC,CAAC;GAC7C,gBAAgB,gBAAgB;IAC9B,MAAM,QAAQ,gBAAgB,MAAM,CAAC,CAAC;IAGtC,IAAI,UAAU,aAAa,mBAAmB,WAAW;KACvD,WAAW,mBAAmB;KAC9B,gBAAqB,QAAQ;IAC/B;IACA,iBAAiB;IACjB,WAAW,IAAI,gBAAgB,MAAM,CAAC;GACxC,CAAC;GAED,MAAM,kBAAkB;IACtB,OAAO;KAAE,qBAAqB;KAAO,kBAAkB;KAAY,kBAAkB;IAAW;IAChG,OAAO,OAAe,SAAiB,WAAW,KAAK,OAAO,IAAI;IAClE,aAAa,UAAkB,WAAW,WAAW,KAAK;IAG1D,YAAY,KAAK,WAAW,KAAK,CAAC,CAAC,WAAW;KAC5C,MAAM,UAAU,WAAW,MAAM;KACjC,IAAI,CAAC,QAAQ,UAAU,QAAQ,sBAAsB,gBAAqB,QAAQ;IACpF,CAAC;IACD,eAAe,WAAW,QAAQ;IAClC,oBAAoB,KAAK,gBAAgB,QAAQ;IACjD,kBAAkB,KAAK,gBAAgB,MAAM;IAC7C,mBAAmB,KAAK,gBAAgB,OAAO;IAC/C,kBAAkB,WAAW,WAAW;IACxC,gBAAgB,OAAe,WAAW,cAAc,EAAE;IAC1D,mBAAmB,IAAY,SAAiB,WAAW,iBAAiB,IAAI,IAAI;IACpF,iBAAiB,IAAY,SAAiB,WAAW,eAAe,IAAI,IAAI;IAChF,iBAAiB,OAAe,WAAW,eAAe,EAAE;IAC5D,eAAe,WAAW,QAAQ;IAClC,aAAa,OAAe,WAAW,WAAW,EAAE;IACpD,iBAAiB,IAAY,QAAkB,WAAW,eAAe,IAAI,GAAG;IAChF,kBAAkB,IAAY,SAAiB,WAAW,gBAAgB,IAAI,IAAI;IAClF,oBAAoB,QAAkB,WAAW,kBAAkB,GAAG;IACtE,0BAA0B,WAAW,mBAAmB;GAC1D;GAEA,IAAI,MAAM,OAAO,0BAA0B,IAAI,MAAM,SAAS;IAC5D,MAAM;IACN,IAAI;IACJ,OAAO;IACP,aAAa,IAAI,OAAO,KAAK,sBAAsB,CAAC,CAAC,KAAK;IAC1D,QAAQ;IACR,QAAQ;GACV,GAAG,uBAAuB,CAAC;GAiB3B,IAAI,MAAM,OAAO,uCAAuC,IAAI,MAAM,SAAS;IACzE,MAAM;IACN,KAAK;IACL,QAAQ;IACR,eAAe;KACb,OAAO;MAAE,qBAAqB;MAAO,kBAAkB;KAAW;KAClE,OAAO,OAAe,SAAiB,WAAW,KAAK,OAAO,IAAI;KAClE,YAAY,KAAK,WAAW,KAAK,CAAC,CAAC,WAAW;MAC5C,MAAM,UAAU,WAAW,MAAM;MACjC,IAAI,CAAC,QAAQ,UAAU,QAAQ,sBAAsB,gBAAqB,QAAQ;KACpF,CAAC;KACD,eAAe,WAAW,QAAQ;KAClC,kBAAkB,KAAK,gBAAgB,MAAM;KAC7C,mBAAmB,KAAK,gBAAgB,OAAO;IACjD;GACF,GAAG,uBAAuB,CAAC;GAoD3B,MAAM,mBAAkC;IACtC,OAAO;KAAE,kBAAkB;KAAY,qBAAqB;IAAM;IAClE,eAAe;KAAE,kBAAkB,OAAO;KAAG,gBAAqB,QAAQ;IAAE;IAG5E,wBAAwB,sBAAsB,uBAAuB,IAAI;IAQzE,YAAY;KACV,MAAM,SAAS,IAAI,IAAI,QAAQ;KAC/B,IAAI,OAAO,QAAQ,gBAAgB,YAAY,OAAO,YAAY,QAAQ;IAC5E;GACF;GAEA,IAAI,aAAa,eAAe,GAAG,wCAAwC;GAE3E,IAAI;IACF,IAAI,MAAM,OAAO,cAAc,IAAI,MAAM,SACvC;KAAE,MAAM;KAAQ,KAAK;KAAU,QAAQ;IAAU,GACjD,gBACF,CAAC;GACH,SAAS,OAAgB;IACvB,QAAQ,MAAM,0EAA0E,KAAK;GAC/F;GAUA,IAAI,OAAO,CAAC,QAAQ,IAAI,cAAc;IAEpC,IAAI,OADW,UAAU,IAAI,QACb,CAAC,EAAE,gBAAgB,YAAY;IAC/C,IAAI;KACF,UAAU,MAAM,OAAO,+BAA+B,UAAU,MAAM,SAMpE;MAAE,MAAM;MAAyB,IAAI;MAAU,OAAO;MAAG,QAAQ;KAAU,GAC3E,sBACF,CAAC;IACH,SAAS,OAAgB;KACvB,QAAQ,MAAM,0EAA0E,KAAK;IAC/F;GACF,CAAC;GAsBD,MAAM,yBAA8C,EAClD,OAAO,EAAE,mBAAmB,YAAY,EAC1C;GAEA,IAAI;IACF,IAAI,MAAM,OAAO,oCAAoC,IAAI,MAAM,SAG7D;KAAE,MAAM;KAA8B,IAAI;KAAiB,QAAQ;IAAgB,GACnF,sBACF,CAAC;GACH,SAAS,OAAgB;IACvB,QAAQ,MAAM,oFAAoF,KAAK;GACzG;EACF;EAEA,MAAa,SAA4B;GACvC;GACA;GACA;GACA;GACA;EACF"}
\ No newline at end of file
diff --git a/lib/index.d.ts b/lib/index.d.ts
index 7a1e443..fe7db7f 100644
--- a/lib/index.d.ts
+++ b/lib/index.d.ts
@@ -126,15 +126,36 @@ interface CommandCodeCredits {
   monthlyCredits: number;
   purchasedCredits: number;
   freeCredits: number;
-  /** Five-hour rolling window limits. */
-  fiveHour: {
+  /**
+   * Whether the endpoint actually published a monthly balance. The scalar
+   * above defaults to 0 for shape stability, which is a LIE about an omitted
+   * field — and a false "0 left, fully consumed" on the dashboard. Consumers
+   * that render the figure must check this first: an explicit `false` means
+   * "not reported", not "nothing left".
+   *
+   * Optional on purpose. `undefined` means the flag itself was never recorded —
+   * an older Host half, or a frame from before this field existed — and is read
+   * as "assume reported", which is the behavior that shipped. Only an explicit
+   * `false` from a Host that knows the balance was omitted suppresses the
+   * figure, so a cross-version pair does not lose a real balance.
+   */
+  monthlyReported?: boolean;
+  purchasedReported?: boolean;
+  freeReported?: boolean;
+  /**
+   * Five-hour rolling window limits, absent when the endpoint reported no such
+   * window. Absence is NOT "a window with no cap": a reported window with
+   * `cap === 0` is uncapped spend, while an absent one was never reported at
+   * all, and only the un-reported case must keep a figure off the dashboard.
+   */
+  fiveHour?: {
     used: number;
     cap: number;
     exceeded: boolean;
     resetAt: number;
   };
-  /** Weekly window limits. */
-  weekly: {
+  /** Weekly window limits; absent under the same rule as {@link fiveHour}. */
+  weekly?: {
     used: number;
     cap: number;
     exceeded: boolean;
@@ -670,8 +691,11 @@ declare const KNOWN_DEALS: Readonly<Record<string, KnownDeal>>;
  * weekday, full price) **Monday to Friday only**; the other 17 hours of a
  * weekday and every hour of Saturday/Sunday (UTC) are off-peak at half price.
  * The V4 Flash Vision (exp) variant (command-code@1.32.0) shares the V4 Flash
- * windows and peak prices ($0.44/$1.32) — each row's hover annotation states
- * exactly 2× that row's displayed off-peak prices. The picker shows the
+ * rates exactly — $0.15/$0.60 off-peak and $0.30/$1.20 peak, per the page's own
+ * `timeOfDay` block, not merely 2× its own off-peak figures: a rate that is
+ * internally consistent can still be the wrong row, which is why the vendored
+ * price table (`./model-prices.ts`) is synced from the page and not hand-kept.
+ * The picker shows the
  * *current* state as a compact
  * label (`Peak`/`Half`) matching the English noun style of the other markers
  * (`Image`, `FREE`), so a developer can tell at a glance whether calling the
@@ -790,6 +814,69 @@ interface CommandCodeCatalogModel {
 interface CommandCodeCatalog {
   models: CommandCodeCatalogModel[];
 }
+/**
+ * One model's per-token rates, in USD per 1,000,000 tokens — the unit the
+ * official pricing page publishes in.
+ */
+interface CommandCodeModelRates {
+  /** Uncached (billed) input tokens. */
+  inputCost: number;
+  /** Completion tokens. */
+  outputCost: number;
+  /** Input tokens served from the provider's cache. */
+  cacheReadCost: number;
+  /**
+   * Input tokens written into the provider's cache. Present for a minority of
+   * models — the page publishes no cache-write rate for the rest, whose
+   * cache-write tokens are therefore UNPRICED. Do not substitute a multiple of
+   * the input rate for a missing value.
+   */
+  cacheWriteCost?: number;
+}
+/** One whole-request context band; maxContext is inclusive, absent on the last band. */
+interface CommandCodeContextTier extends CommandCodeModelRates {
+  maxContext?: number;
+}
+/** One model's rates plus the peak-hour override for time-of-day models. */
+interface CommandCodeModelPrice extends CommandCodeModelRates {
+  /**
+   * Lookup key: the catalog model id when a catalog model maps to this row,
+   * otherwise the pricing page's own slug. A session reports catalog ids, so
+   * this is the primary key the browser looks up by.
+   */
+  id: string;
+  /** The pricing page's slug for this row — the secondary lookup key. */
+  slug: string;
+  /**
+   * Rates charged inside the peak windows. The row's own top-level rates are
+   * the off-peak rates, so a row WITH this block is time-of-day priced and a
+   * row without it is flat-priced.
+   */
+  peak?: CommandCodeModelRates;
+  contextTiers?: CommandCodeContextTier[];
+  /**
+   * Whether the model costs nothing on every plan right now (a free deal or a
+   * `:free` catalog variant). Served explicitly at zero rates so a surface can
+   * say "free" rather than showing nothing.
+   */
+  free?: boolean;
+}
+/** The price-table Remote result: every known model's rates. */
+interface CommandCodePriceTable {
+  /**
+   * Every priced model, keyed by {@link CommandCodeModelPrice.id} (catalog id
+   * first, pricing slug as the fallback) and carrying its slug as a second
+   * lookup key. A model absent from this list has no known price and must
+   * render no cost at all rather than a guess.
+   */
+  models: CommandCodeModelPrice[];
+  /**
+   * Peak-pricing windows as `[startHour, endHour)` in UTC, end-exclusive,
+   * applying Monday–Friday only. Shipped with the table so the browser prices
+   * against the Host snapshot's schedule instead of restating it.
+   */
+  peakHours: Array<[number, number]>;
+}
 //#endregion
 //#region src/command-locales.d.ts
 /**
@@ -915,6 +1002,13 @@ interface CommandCodeUsageDeps<C extends CommandCodeConnectionOptions = CommandC
    * editors degrade to the empty state.
    */
   listModels?: () => Promise<CommandCodeCatalog>;
+  /**
+   * Price-table source for the composer's session-cost figure. Defaults to the
+   * vendored snapshot, so the endpoint can never silently serve an empty table
+   * — an unpriced cost is the failure this feature is meant to remove. Override
+   * only to stub it in a test.
+   */
+  prices?: () => CommandCodePriceTable;
   /**
    * The browser-login flow (wired by the plugin entry). Absent means the
    * login endpoints answer `idle` / reject with a plain message — the page's
@@ -949,6 +1043,13 @@ declare class CommandCodeUsageService<C extends CommandCodeConnectionOptions = C
    * the live list instead of typed by hand.
    */
   models(): Promise<CommandCodeCatalog>;
+  /**
+   * The model price table the composer prices an in-progress session with.
+   * Static vendored data (the official pricing page's rates), served Host-side
+   * so the browser bundle never carries a copy that could drift from the
+   * snapshot, and so a price update reaches an open page without a rebuild.
+   */
+  prices(): Promise<CommandCodePriceTable>;
   /**
    * Start (or rejoin) a browser-login attempt and return its fresh status —
    * `waiting` carrying the Studio URL. Rejects when the flow cannot start
diff --git a/lib/index.js b/lib/index.js
index e22c4f7..d5e6e6d 100644
--- a/lib/index.js
+++ b/lib/index.js
@@ -12,267 +12,6 @@ import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { createServer } from "node:http";
 import { createServer as createServer$1 } from "node:net";
 import { WebError } from "@deepseek-ai/dsh-web";
-//#region src/accounts.ts
-/**
-* Multi-account pool for the Command Code provider (host side).
-*
-* One Command Code subscription (e.g. the Go plan's 5-hour window) is
-* metered; a user with several subscriptions wants a request that hits one
-* account's limit to continue on the next account without a visible failure.
-* This module owns that rotation:
-*
-*   - {@link CommandCodeAccountPool.resolveKey} hands out the first account
-*     whose key is not currently marked exhausted — or, when the request's
-*     model matches a {@link CommandCodeModelAccountRule} and that account is
-*     usable, the routed account — resolving each slot's key lazily (literal
-*     config key → credential seam → launch environment → the official CLI
-*     auth file for the default slot only).
-*   - {@link CommandCodeAccountPool.markRejected} records a 429 (rate limit,
-*     window unknown) or 401 (invalid key, disabled until the config changes)
-*     against the exact API key, so several slots sharing one key share one
-*     state.
-*   - When every account is marked, the pool probes each key's
-*     `/alpha/billing/credits` window limits (through the injected
-*     {@link CommandCodeAccountPoolDeps.probeWindow}): an account whose window
-*     no longer reports `exceeded` is revived, otherwise the pool throws a
-*     `RATE_LIMIT` error naming the earliest reset time.
-*
-* The pool is deliberately cordis-free (like the adapter): every host fact
-* arrives through injected thunks, so node tests can drive it directly.
-*
-* @module dsh-commandcode-provider/accounts
-*/
-/**
-* Upper bound on the retry wait this pool attaches to the all-exhausted
-* `RATE_LIMIT` error. Must equal the `backoff.maxDelayMs` in the adapter's
-* `providerRetryPolicy` (which imports it from here): dsh-llm-retry honors a
-* provider-specified wait verbatim only at or below that cap — in normal mode
-* a LONGER attached wait makes the executor abandon the retry entirely
-* instead of falling back to local backoff, which would turn "poll until the
-* window opens" into "fail now".
-*/
-const RETRY_MAX_DELAY_MS = 9e5;
-/** A labeled, human-readable clock reading for error messages. */
-function clockLabel(ms) {
-	return new Date(ms).toLocaleString();
-}
-/**
-* Whether an account with this rotation state can serve a request right now.
-* `undefined` (never rejected) is usable; a cooldown becomes usable again
-* once its reset time passes; `unknown` (429, reset unprobed) and
-* `disabled` (401) are not.
-*/
-function accountUsable(state) {
-	if (state === void 0) return true;
-	if (state.kind === "cooldown") return state.until > 0 && Date.now() >= state.until;
-	return false;
-}
-/**
-* Pick the account that should serve now: the manually preferred slot when it
-* is usable, otherwise the first usable account in rotation order; undefined
-* when no account is usable. Shared by the pool (request path) and the plugin
-* entry (the usage view's active badge) so both always agree.
-*/
-function selectActiveAccount(accounts, preferredId) {
-	const usable = accounts.filter((account) => accountUsable(account.state));
-	if (preferredId !== void 0) {
-		const preferred = usable.find((account) => account.slot.id === preferredId);
-		if (preferred !== void 0) return preferred;
-	}
-	return usable[0];
-}
-/**
-* The first routing rule whose model list contains the request's model id.
-* Undefined when no rule matches.
-*/
-function matchModelRule(model, rules) {
-	if (model === "" || rules === void 0 || rules.length === 0) return void 0;
-	for (const rule of rules) if (rule.models.includes(model)) return rule;
-}
-/**
-* The routed account for a request's model: the first usable account whose
-* slot id matches the first matching rule's target. Undefined when no rule
-* matches or the routed account is not usable (the caller then falls back to
-* the normal preferred/rotation selection).
-*/
-function selectAccountForModel(accounts, model, rules) {
-	const rule = matchModelRule(model, rules);
-	if (rule === void 0) return void 0;
-	return accounts.find((account) => account.slot.id === rule.account && accountUsable(account.state));
-}
-/**
-* The account pool. Rotation state is keyed by API key (never logged), so two
-* slots resolving to the same credential share one mark, and a key changed in
-* the credentials service starts with a clean slate.
-*/
-var CommandCodeAccountPool = class {
-	deps;
-	/** Rotation state by API key. */
-	states = /* @__PURE__ */ new Map();
-	constructor(deps) {
-		this.deps = deps;
-	}
-	/**
-	* Resolve every slot's key, deduplicated by key (first slot wins). Slots
-	* without any resolvable key are omitted — they still appear in the
-	* settings page as unconfigured, they just cannot serve requests.
-	*/
-	async resolvedAccounts() {
-		const out = [];
-		const seen = /* @__PURE__ */ new Set();
-		for (const slot of this.deps.slots()) {
-			const key = await this.resolveSlotKey(slot);
-			if (key === void 0 || seen.has(key)) continue;
-			seen.add(key);
-			out.push({
-				slot,
-				key,
-				state: this.states.get(key)
-			});
-		}
-		return out;
-	}
-	/**
-	* Every slot paired with its resolved key and rotation state — NOT
-	* deduplicated: two slots sharing one credential both appear (the usage
-	* view reports them individually), while slots without any resolvable key
-	* are omitted. The serving path uses {@link resolvedAccounts} instead.
-	*/
-	async describeAccounts() {
-		const out = [];
-		for (const slot of this.deps.slots()) {
-			const key = await this.resolveSlotKey(slot);
-			if (key === void 0) continue;
-			out.push({
-				slot,
-				key,
-				state: this.states.get(key)
-			});
-		}
-		return out;
-	}
-	/**
-	* Hand out the key for a request: the model-routed account when the
-	* request's model matches a rule (and that account is usable), else the
-	* manually preferred account when usable, else the first usable account in
-	* rotation order. Returns `undefined` when no account resolves any key at
-	* all (the caller then reports the missing credential). Throws
-	* `RATE_LIMIT` — naming the earliest window reset — or
-	* `INVALID_CREDENTIAL` when accounts exist but none can serve.
-	*
-	* `options.model` is the request's model id; routing rules re-read per
-	* resolution, so a settings change applies live.
-	*
-	* `options.exclude` skips one key during the probe-revival pass: the
-	* rotation hook excludes the just-rejected key so a probe that clears its
-	* window cannot re-offer the same key within the same request (the adapter
-	* refuses already-tried keys; the next request picks the revived key up).
-	*/
-	async resolveKey(options) {
-		const accounts = await this.resolvedAccounts();
-		if (accounts.length === 0) return;
-		const routed = selectAccountForModel(accounts, options?.model ?? "", this.deps.modelAccountRules?.());
-		if (routed !== void 0) return this.pick(routed);
-		const preferred = this.deps.preferredId?.();
-		const chosen = selectActiveAccount(accounts, preferred);
-		if (chosen !== void 0) return this.pick(chosen);
-		await Promise.all(accounts.map(async (account) => {
-			if (account.state?.kind === "disabled") return;
-			if (options?.exclude !== void 0 && account.key === options.exclude) return;
-			let probe;
-			try {
-				probe = await this.deps.probeWindow(account.key);
-			} catch {
-				return;
-			}
-			if (probe === void 0) return;
-			if (!probe.exceeded) this.states.delete(account.key);
-			else this.states.set(account.key, {
-				kind: "cooldown",
-				reason: account.state?.reason ?? "rate limited (429)",
-				until: probe.resetAt
-			});
-		}));
-		const latest = await this.resolvedAccounts();
-		const revived = selectActiveAccount(latest, preferred);
-		if (revived !== void 0) return this.pick(revived);
-		if (latest.filter((account) => account.state?.kind === "disabled").length === latest.length) throw new LlmError(`llm-commandcode: every configured Command Code account (${latest.length}) was rejected with 401 — check the stored API keys (Models page / settings) or the auth file；已配置的 ${latest.length} 个 Command Code 账户密钥均被拒绝（401）——请在设置页检查存储的 API 密钥，或重新运行 command-code login`, "INVALID_CREDENTIAL");
-		const resets = latest.map((account) => account.state).filter((state) => state !== void 0 && state.kind === "cooldown" && state.until > 0).map((state) => state.until);
-		const earliest = resets.length > 0 ? Math.min(...resets) : 0;
-		const wait = earliest > 0 ? Math.max(1e3, earliest - Date.now()) : 0;
-		throw new LlmError(`llm-commandcode: all ${latest.length} Command Code account(s) have exhausted their usage window` + (earliest > 0 ? `; the earliest window resets at ${clockLabel(earliest)}` : "") + ` — requests will succeed again after the reset (or add another account)；已用尽全部 ${latest.length} 个 Command Code 账户的用量窗口` + (earliest > 0 ? `，最早的重置时间为 ${clockLabel(earliest)}` : "") + "——窗口重置后请求会自动恢复（也可以添加更多账户）", "RATE_LIMIT", wait > 0 && wait <= 9e5 ? { providerRetryAfterMs: wait } : void 0);
-	}
-	/**
-	* Record a rejection against one key. `rate-limit` (429) marks the key
-	* exhausted with an unknown reset (probed lazily at the next resolution
-	* once every account is marked); `invalid-credential` (401) disables the
-	* key until the stored credential changes.
-	*/
-	markRejected(apiKey, rejection) {
-		if (rejection === "invalid-credential") this.states.set(apiKey, {
-			kind: "disabled",
-			reason: "invalid API key (401)",
-			until: 0
-		});
-		else this.states.set(apiKey, {
-			kind: "unknown",
-			reason: "rate limited (429)",
-			until: 0
-		});
-	}
-	/**
-	* One account's key: literal → credential seam → auth file (default slot).
-	*
-	* Every source is normalized here, at the single point where a slot's key
-	* enters the pool. The adapter sends the key through the harness's
-	* `assertUsableApiKey()`, which trims it — a stored key from the credentials
-	* seam, a `.env` line, or a shell export all pick up surrounding whitespace
-	* — and reports that trimmed form back to `markRejected()`. Returning the
-	* raw value would file every 429/401 mark under a key no later lookup can
-	* find: rotation would re-offer the same account, the account card would show
-	* no mark, and the usage endpoints would 401 while chat kept working.
-	* Normalizing once makes resolution, probing, marking, and the request path
-	* agree on one string.
-	*/
-	async resolveSlotKey(slot) {
-		if (slot.literal !== void 0) {
-			const literal = normalizeResolvedKey(slot.literal);
-			if (literal !== void 0) return literal;
-		}
-		if (slot.ref !== void 0) {
-			const hit = await this.deps.resolveRef(slot.ref);
-			if (hit !== void 0) {
-				const resolved = normalizeResolvedKey(hit);
-				if (resolved !== void 0) return resolved;
-			}
-		}
-		if (slot.allowAuthFile) {
-			const fromFile = this.deps.authFileKey();
-			if (fromFile !== void 0) {
-				const fileKey = normalizeResolvedKey(fromFile);
-				if (fileKey !== void 0) return fileKey;
-			}
-		}
-	}
-	/** Hand out the chosen account's key. */
-	pick(account) {
-		return {
-			key: account.key,
-			slot: account.slot
-		};
-	}
-};
-/**
-* Normalize one resolved credential to the form every consumer sees. Trim
-* only: a blank-after-trim value means "no key" (the slot is omitted and the
-* caller reports `MISSING_CREDENTIAL`), while characters an HTTP header cannot
-* carry are left for `assertUsableApiKey()` to reject with its own message.
-*/
-function normalizeResolvedKey(value) {
-	const trimmed = value.trim();
-	return trimmed === "" ? void 0 : trimmed;
-}
-//#endregion
 //#region src/capabilities.ts
 /**
 * Static capability snapshot for the Command Code provider: model →
@@ -751,268 +490,1586 @@ const PLAN_LABELS = {
 	max: "Max"
 };
 /**
-* Plan-tier sort weights, low to high. Models outside the snapshot (unknown
-* plans) sort after every known tier, keeping known models predictable.
+* Plan-tier sort weights, low to high. Models outside the snapshot (unknown
+* plans) sort after every known tier, keeping known models predictable.
+*/
+const PLAN_ORDER = {
+	go: 0,
+	goat: 1,
+	pro: 2,
+	provider: 3,
+	max: 4
+};
+/**
+* Whether a model is free (requests cost no credits), per the pricing page's
+* deals (`KNOWN_DEALS` `free: true`). Free models lead the picker regardless
+* of tier — they are usable by every account, so they are the best default
+* candidates.
+*/
+function isFreeModel(modelId) {
+	return KNOWN_DEALS[modelId]?.free === true;
+}
+/**
+* Comparator for the model picker: free models first (zero credit cost, usable
+* by every account), then by plan tier (lowest first), then by model name,
+* then by id as a tiebreak. Models with no known plan sort last.
+*/
+function compareByPlan(a, b) {
+	const freeDelta = Number(isFreeModel(b.id)) - Number(isFreeModel(a.id));
+	if (freeDelta !== 0) return freeDelta;
+	const pa = PLAN_ORDER[KNOWN_PLANS[a.id] ?? ""] ?? Number.MAX_SAFE_INTEGER;
+	const pb = PLAN_ORDER[KNOWN_PLANS[b.id] ?? ""] ?? Number.MAX_SAFE_INTEGER;
+	if (pa !== pb) return pa - pb;
+	const nameDiff = a.name.localeCompare(b.name);
+	if (nameDiff !== 0) return nameDiff;
+	return a.id.localeCompare(b.id);
+}
+/**
+* Subscription plan table, synced from the official CLI bundle's plan maps
+* (located by the `"individual-go"` key in command-code@1.53.0 `dist/cli.mjs`,
+* re-verified unchanged through 1.53.0): subscription `planId`
+* prefix → display name and the plan's monthly credit total. This is the
+* account's own subscription (from `/alpha/billing/subscriptions`) — distinct
+* from {@link KNOWN_PLANS}, which maps catalog models to their minimum tier.
+*
+* `tierWeight` is plugin-added (not from the CLI maps): the plan's rank on
+* the {@link PLAN_ORDER} scale, used by the picker's plan filter
+* ({@link modelVisibleInPlan}) to hide models above the account's tier.
+*/
+const KNOWN_SUBSCRIPTION_PLANS = {
+	"individual-go": {
+		name: "Go",
+		monthlyCredits: 10,
+		tierWeight: 0
+	},
+	"individual-goat": {
+		name: "GOAT",
+		monthlyCredits: 70,
+		tierWeight: 1
+	},
+	"individual-pro": {
+		name: "Pro",
+		monthlyCredits: 30,
+		tierWeight: 2
+	},
+	"individual-pro-v1": {
+		name: "Pro",
+		monthlyCredits: 80,
+		tierWeight: 2
+	},
+	"individual-provider": {
+		name: "Provider",
+		monthlyCredits: 15,
+		tierWeight: 3
+	},
+	"individual-max": {
+		name: "Max",
+		monthlyCredits: 150,
+		tierWeight: 4
+	},
+	"individual-ultra": {
+		name: "Ultra",
+		monthlyCredits: 300,
+		tierWeight: 4
+	},
+	"teams-pro": {
+		name: "Teams Pro",
+		monthlyCredits: 40,
+		tierWeight: 2
+	}
+};
+/** Plan-id prefixes, longest first — the CLI's prefix-match order. */
+const SUBSCRIPTION_PLAN_PREFIXES = Object.keys(KNOWN_SUBSCRIPTION_PLANS).sort((a, b) => b.length - a.length);
+/**
+* Resolve a subscription `planId` (e.g. `individual-pro-v1`) to its display
+* name and monthly credit total, mirroring the CLI's `getPlanInfo`:
+* normalize (lowercase, `_` → `-`), then longest-prefix match so
+* `individual-pro-v1` wins over `individual-pro`. Unknown ids return
+* `undefined`.
+*/
+function subscriptionPlanInfo(planId) {
+	const normalized = planId.toLowerCase().replace(/_/g, "-");
+	const prefix = SUBSCRIPTION_PLAN_PREFIXES.find((candidate) => normalized.startsWith(candidate));
+	return prefix === void 0 ? void 0 : KNOWN_SUBSCRIPTION_PLANS[prefix];
+}
+/**
+* Whether the picker lists `modelId` for an account with the given billing
+* access. Fails open at every uncertainty: no billing data, an unknown plan,
+* a non-finite weight (corrupt billing fact), or a model outside
+* {@link KNOWN_PLANS} all keep the model visible — the server remains the
+* final gate (`403 MODEL_NOT_IN_PLAN`).
+*/
+function modelVisibleInPlan(modelId, access) {
+	if (access === void 0) return true;
+	if (access.onDemandCredits > 0) return true;
+	if (access.tierWeight === void 0 || !Number.isFinite(access.tierWeight)) return true;
+	const tier = KNOWN_PLANS[modelId];
+	if (tier === void 0) return true;
+	const weight = PLAN_ORDER[tier];
+	if (weight === void 0) return true;
+	return weight <= access.tierWeight;
+}
+const KNOWN_DEALS = {
+	"MiniMaxAI/MiniMax-M3": { label: "50% off" },
+	"xiaomi/mimo-v2.5-pro": { label: "99% off" },
+	"xiaomi/mimo-v2.5": { label: "98% off" },
+	"poolside/laguna-s-2.1-free": {
+		label: "FREE",
+		free: true
+	},
+	"meituan/LongCat-2.0:free": {
+		label: "FREE",
+		free: true
+	},
+	"inclusionai/ling-3.0-flash-sante:free": {
+		label: "FREE",
+		free: true
+	}
+};
+/**
+* Models with time-of-day (peak/off-peak) pricing, per the official pricing
+* page (`/docs/resources/pricing-limits`). Since 2026-08-16 16:00 UTC, DeepSeek
+* charges by the hour: peak hours are 01:00–04:00 and 06:00–10:00 UTC (7h per
+* weekday, full price) **Monday to Friday only**; the other 17 hours of a
+* weekday and every hour of Saturday/Sunday (UTC) are off-peak at half price.
+* The V4 Flash Vision (exp) variant (command-code@1.32.0) shares the V4 Flash
+* rates exactly — $0.15/$0.60 off-peak and $0.30/$1.20 peak, per the page's own
+* `timeOfDay` block, not merely 2× its own off-peak figures: a rate that is
+* internally consistent can still be the wrong row, which is why the vendored
+* price table (`./model-prices.ts`) is synced from the page and not hand-kept.
+* The picker shows the
+* *current* state as a compact
+* label (`Peak`/`Half`) matching the English noun style of the other markers
+* (`Image`, `FREE`), so a developer can tell at a glance whether calling the
+* model right now is cheap or expensive.
+*
+* Authoritative extraction: the pricing page embeds a model JSON array whose
+* hourly-priced entries carry a `timeOfDay` block
+* (`{ windows: "01–04 & 06–10 UTC, Mon–Fri", peakHoursPerDay: 7,
+* offPeakHoursPerDay: 17, peak: {...}, offPeak: {...} }`). Exactly four models
+* carry it: V4 Pro, V4 Flash, V4 Flash Vision (exp), and V4.1 Flash (added in
+* command-code@1.53.0 at $0.15/$0.60 off-peak, $0.30/$1.20 peak — the same
+* schedule as the other three).
+*
+* Extraction caution: the rendered HTML rows are a trap. Each annotation div
+* sits inside its OWN row's container, immediately before the NEXT row starts,
+* so flattening the page to text makes every annotation look like it belongs
+* to the model printed after it — that is how `deepseek/deepseek-v4-flash-fast`
+* was wrongly added here (its row is flat-priced at $0.28/$0.56/$0.07 and has
+* no `timeOfDay` block). Trust the embedded JSON's `timeOfDay` membership and
+* the 2× price relation, never the flat-text neighbor.
+*
+* Keep in sync with the official pricing page when the model set, the peak
+* windows, or the weekday rule change (see the dsh-commandcode-upstream skill).
+*/
+const KNOWN_PEAK_PRICING = /* @__PURE__ */ new Set([
+	"deepseek/deepseek-v4-pro",
+	"deepseek/deepseek-v4-flash",
+	"deepseek/deepseek-v4-flash-vision-exp",
+	"deepseek/deepseek-v4.1-flash"
+]);
+/**
+* Peak hours (UTC, hour-of-day range end-exclusive): 01–03 and 06–09.
+* Weekday-only — see `peakPricingState()`; weekends are fully off-peak.
+*
+* Exported because the vendored price table (`./model-prices.ts`) ships these
+* windows to the browser with the table itself: the composer prices a session
+* against the very schedule this snapshot knows rather than restating it, so
+* there is one place to update when the windows move.
 */
-const PLAN_ORDER = {
-	go: 0,
-	goat: 1,
-	pro: 2,
-	provider: 3,
-	max: 4
-};
+const PEAK_HOUR_RANGES = [[1, 4], [6, 10]];
 /**
-* Whether a model is free (requests cost no credits), per the pricing page's
-* deals (`KNOWN_DEALS` `free: true`). Free models lead the picker regardless
-* of tier — they are usable by every account, so they are the best default
-* candidates.
+* Whether `now` (defaults to `Date.now()`) falls inside a peak-pricing window,
+* ignoring which model is asking. Peak rates apply Monday–Friday (UTC) only,
+* so a weekend timestamp is off-peak even inside {@link PEAK_HOUR_RANGES}.
+*
+* Model-independent on purpose: `peakPricingState()` adds the membership test
+* on top for the picker's label, while the price table selects peak rates from
+* a row's own `peak` block — so a model whose catalog id spelling differs from
+* the one in {@link KNOWN_PEAK_PRICING} still gets the right half of the day.
 */
-function isFreeModel(modelId) {
-	return KNOWN_DEALS[modelId]?.free === true;
+function isPeakPricingHour(now = Date.now()) {
+	const at = new Date(now);
+	const day = at.getUTCDay();
+	if (day === 0 || day === 6) return false;
+	const hour = at.getUTCHours();
+	return PEAK_HOUR_RANGES.some(([start, end]) => hour >= start && hour < end);
 }
 /**
-* Comparator for the model picker: free models first (zero credit cost, usable
-* by every account), then by plan tier (lowest first), then by model name,
-* then by id as a tiebreak. Models with no known plan sort last.
+* Whether `now` (defaults to `Date.now()`) falls in a peak-pricing window for
+* time-of-day-priced models. Peak rates apply Monday–Friday (UTC) only: the
+* official rule charges Saturday and Sunday completely off-peak for all 24
+* hours, so a weekend timestamp is off-peak even inside `PEAK_HOUR_RANGES`.
+* `undefined` for models outside the snapshot.
 */
-function compareByPlan(a, b) {
-	const freeDelta = Number(isFreeModel(b.id)) - Number(isFreeModel(a.id));
-	if (freeDelta !== 0) return freeDelta;
-	const pa = PLAN_ORDER[KNOWN_PLANS[a.id] ?? ""] ?? Number.MAX_SAFE_INTEGER;
-	const pb = PLAN_ORDER[KNOWN_PLANS[b.id] ?? ""] ?? Number.MAX_SAFE_INTEGER;
-	if (pa !== pb) return pa - pb;
-	const nameDiff = a.name.localeCompare(b.name);
-	if (nameDiff !== 0) return nameDiff;
-	return a.id.localeCompare(b.id);
+function peakPricingState(modelId, now = Date.now()) {
+	if (!KNOWN_PEAK_PRICING.has(modelId)) return void 0;
+	return isPeakPricingHour(now) ? "peak" : "off-peak";
 }
 /**
-* Subscription plan table, synced from the official CLI bundle's plan maps
-* (located by the `"individual-go"` key in command-code@1.53.0 `dist/cli.mjs`,
-* re-verified unchanged through 1.53.0): subscription `planId`
-* prefix → display name and the plan's monthly credit total. This is the
-* account's own subscription (from `/alpha/billing/subscriptions`) — distinct
-* from {@link KNOWN_PLANS}, which maps catalog models to their minimum tier.
+* Compact label for the current peak/off-peak state: `Peak` (full price) or
+* `Half` (off-peak, half price). These English nouns match the picker's other
+* markers (`Go`, `Image`, `FREE`), and since they appear only on time-of-day
+* priced models they double as a "priced by the hour" signal. Returns undefined
+* for models without time-of-day pricing.
+*/
+function peakPricingLabel(modelId, now = Date.now()) {
+	const state = peakPricingState(modelId, now);
+	if (state === void 0) return void 0;
+	return state === "peak" ? "Peak" : "Half";
+}
+/**
+* Official display label for a model's minimum plan, or undefined for models
+* outside the snapshot (e.g. future catalog additions).
+*/
+function planLabel(modelId) {
+	const plan = KNOWN_PLANS[modelId];
+	return plan === void 0 ? void 0 : PLAN_LABELS[plan];
+}
+/**
+* The active deal label for a model, or undefined when the model has no deal
+* or the deal has expired. Expiry is judged against `now` (defaults to
+* `Date.now()`), so a snapshot that has gone stale stops showing its discount
+* the moment the official end date passes — the user never believes a lapsed
+* deal is still live. Permanent deals (no `expiresAt`) never lapse.
+*/
+function dealLabel(modelId, now = Date.now()) {
+	const deal = KNOWN_DEALS[modelId];
+	if (deal === void 0) return void 0;
+	if (deal.expiresAt !== void 0 && now >= Date.parse(deal.expiresAt)) return void 0;
+	return deal.label;
+}
+/**
+* Compact human-readable context window, e.g. `1_000_000 -> "1M"`,
+* `256_000 -> "256K"`, `262_144 -> "262K"` (floor to the nearest K).
+* Returns undefined for unknown/absent sizes; values under 1K render raw.
+*/
+function formatContext(contextWindow) {
+	if (contextWindow === void 0 || !Number.isFinite(contextWindow) || contextWindow <= 0) return;
+	if (contextWindow >= 1e6) {
+		const m = contextWindow / 1e6;
+		const rounded = Math.round(m * 10) / 10;
+		return `${Number.isInteger(rounded) ? rounded : rounded.toFixed(1)}M`;
+	}
+	if (contextWindow < 1e3) return String(Math.floor(contextWindow));
+	return `${Math.floor(contextWindow / 1e3)}K`;
+}
+/**
+* Compact one-line summary for the model picker: plan tier, then any active
+* deal (discount or FREE), then the current peak/off-peak state (`Peak`/`Half`)
+* for time-of-day-priced models, then `Image` for Vision-capable models, then
+* the context window. Text-only models simply omit the Image marker — "Text
+* only" adds nothing the picker needs to show.
+*/
+function capabilityDescription(modelId, contextWindow, now = Date.now()) {
+	const parts = [];
+	const plan = planLabel(modelId);
+	if (plan !== void 0) parts.push(plan);
+	const deal = dealLabel(modelId, now);
+	if (deal !== void 0) parts.push(deal);
+	const peak = peakPricingLabel(modelId, now);
+	if (peak !== void 0) parts.push(peak);
+	if (KNOWN_IMAGE_MODELS.has(modelId)) parts.push("Image");
+	const ctx = formatContext(contextWindow);
+	if (ctx !== void 0) parts.push(ctx);
+	return parts.join(" · ");
+}
+//#endregion
+//#region src/model-prices.ts
+/**
+* Every price row the page publishes, ordered by its own slug.
 *
-* `tierWeight` is plugin-added (not from the CLI maps): the plan's rank on
-* the {@link PLAN_ORDER} scale, used by the picker's plan filter
-* ({@link modelVisibleInPlan}) to hide models above the account's tier.
+* Note on the GPT rows: `gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini` and
+* `gpt-5.5` carry a LITERAL `cacheWriteCost: 0` — a different fact from a
+* missing key, because `ratesOf()` keeps it and the readout then charges
+* cache writes at zero instead of reporting them unpriced. That is what the
+* page's JSON says; its rendered column shows `—` for exactly these four while
+* rendering a genuine zero as `$0.00` elsewhere, so the page contradicts
+* itself. The table stays faithful to the machine-readable source and the
+* discrepancy is recorded in AGENTS.md rather than papered over here.
 */
-const KNOWN_SUBSCRIPTION_PLANS = {
-	"individual-go": {
-		name: "Go",
-		monthlyCredits: 10,
-		tierWeight: 0
+const MODEL_PRICE_ROWS = [
+	{
+		id: "claude-fable-5",
+		rates: [
+			10,
+			50,
+			1,
+			12.5
+		]
+	},
+	{
+		id: "claude-fable-5-1",
+		rates: [
+			10,
+			50,
+			.25,
+			12.5
+		]
+	},
+	{
+		id: "claude-haiku-4-5",
+		rates: [
+			1,
+			5,
+			.1,
+			1.25
+		]
+	},
+	{
+		id: "claude-opus-4-6",
+		rates: [
+			5,
+			25,
+			.5,
+			6.25
+		]
+	},
+	{
+		id: "claude-opus-4-7",
+		rates: [
+			5,
+			25,
+			.5,
+			6.25
+		]
+	},
+	{
+		id: "claude-opus-4-8",
+		rates: [
+			5,
+			25,
+			.5,
+			6.25
+		]
+	},
+	{
+		id: "claude-opus-5",
+		rates: [
+			5,
+			25,
+			.5,
+			6.25
+		]
+	},
+	{
+		id: "claude-sonnet-4-6",
+		rates: [
+			3,
+			15,
+			.3,
+			3.75
+		]
+	},
+	{
+		id: "claude-sonnet-5",
+		rates: [
+			2,
+			10,
+			.2,
+			2.5
+		]
+	},
+	{
+		id: "deepseek-v4-flash",
+		rates: [
+			.15,
+			.6,
+			.003
+		],
+		peak: [
+			.3,
+			1.2,
+			.006
+		]
+	},
+	{
+		id: "deepseek-v4-flash-fast",
+		rates: [
+			.28,
+			.56,
+			.07
+		]
+	},
+	{
+		id: "deepseek-v4-flash-vision-exp",
+		rates: [
+			.15,
+			.6,
+			.003
+		],
+		peak: [
+			.3,
+			1.2,
+			.006
+		]
+	},
+	{
+		id: "deepseek-v4-pro",
+		rates: [
+			.66,
+			1.98,
+			.022
+		],
+		peak: [
+			1.32,
+			3.96,
+			.044
+		]
+	},
+	{
+		id: "deepseek-v4.1-flash",
+		rates: [
+			.15,
+			.6,
+			.003
+		],
+		peak: [
+			.3,
+			1.2,
+			.006
+		]
+	},
+	{
+		id: "fugu-ultra",
+		rates: [
+			5,
+			30,
+			.5
+		]
+	},
+	{
+		id: "gemini-3.1-flash-lite",
+		rates: [
+			.25,
+			1.5,
+			.03
+		]
+	},
+	{
+		id: "gemini-3.5-flash",
+		rates: [
+			1.5,
+			9,
+			.15
+		]
+	},
+	{
+		id: "gemini-3.5-flash-lite",
+		rates: [
+			.3,
+			2.5,
+			.03
+		]
+	},
+	{
+		id: "gemini-3.6-flash",
+		rates: [
+			1.5,
+			7.5,
+			.15
+		]
+	},
+	{
+		id: "gemini-3.7-flash",
+		rates: [
+			1.5,
+			7.5,
+			.15,
+			.08334
+		]
+	},
+	{
+		id: "gemini-3.8-flash",
+		rates: [
+			1.5,
+			7.5,
+			.15
+		]
+	},
+	{
+		id: "glm-5",
+		rates: [
+			1,
+			3.2,
+			.2
+		]
+	},
+	{
+		id: "glm-5.1",
+		rates: [
+			1.4,
+			4.4,
+			.26
+		]
+	},
+	{
+		id: "glm-5.2",
+		rates: [
+			1.4,
+			4.4,
+			.26
+		]
+	},
+	{
+		id: "glm-5.2-fast",
+		rates: [
+			3,
+			10.25,
+			.5
+		]
+	},
+	{
+		id: "glm-5.3",
+		rates: [
+			1.4,
+			4.4,
+			.26
+		]
+	},
+	{
+		id: "glm-5.3-flash",
+		rates: [
+			.15,
+			.5,
+			.03
+		]
+	},
+	{
+		id: "gpt-5.3-codex",
+		rates: [
+			2,
+			8,
+			.5,
+			0
+		]
+	},
+	{
+		id: "gpt-5.4",
+		rates: [
+			2.5,
+			15,
+			.25,
+			0
+		]
+	},
+	{
+		id: "gpt-5.4-mini",
+		rates: [
+			.75,
+			4.5,
+			.075,
+			0
+		]
+	},
+	{
+		id: "gpt-5.5",
+		rates: [
+			5,
+			30,
+			.5,
+			0
+		]
+	},
+	{
+		id: "gpt-5.6-luna",
+		rates: [
+			.2,
+			1.2,
+			.02,
+			.25
+		],
+		contextTiers: [{
+			"maxContext": 272e3,
+			"rates": [
+				.2,
+				1.2,
+				.02,
+				.25
+			]
+		}, { "rates": [
+			.4,
+			1.8,
+			.04,
+			.5
+		] }]
+	},
+	{
+		id: "gpt-5.6-sol",
+		rates: [
+			5,
+			30,
+			.5,
+			6.25
+		],
+		contextTiers: [{
+			"maxContext": 272e3,
+			"rates": [
+				5,
+				30,
+				.5,
+				6.25
+			]
+		}, { "rates": [
+			10,
+			45,
+			1,
+			12.5
+		] }]
+	},
+	{
+		id: "gpt-5.6-terra",
+		rates: [
+			2,
+			12,
+			.2,
+			2.5
+		],
+		contextTiers: [{
+			"maxContext": 272e3,
+			"rates": [
+				2,
+				12,
+				.2,
+				2.5
+			]
+		}, { "rates": [
+			4,
+			18,
+			.4,
+			5
+		] }]
+	},
+	{
+		id: "gpt-6-astra",
+		rates: [
+			10,
+			50,
+			1,
+			12.5
+		],
+		contextTiers: [{
+			"maxContext": 272e3,
+			"rates": [
+				10,
+				50,
+				1,
+				12.5
+			]
+		}, { "rates": [
+			20,
+			75,
+			2,
+			25
+		] }]
+	},
+	{
+		id: "grok-4.5",
+		rates: [
+			2,
+			6,
+			.5
+		]
+	},
+	{
+		id: "grok-4.6",
+		rates: [
+			2,
+			6,
+			.5
+		],
+		contextTiers: [{
+			"maxContext": 2e5,
+			"rates": [
+				2,
+				6,
+				.5
+			]
+		}, { "rates": [
+			4,
+			12,
+			1
+		] }]
+	},
+	{
+		id: "inkling",
+		rates: [
+			1,
+			4.05,
+			.17
+		]
+	},
+	{
+		id: "inkling-small",
+		rates: [
+			.5,
+			1.2,
+			.1
+		]
+	},
+	{
+		id: "kimi-k2.5",
+		rates: [
+			.6,
+			3,
+			.1
+		]
+	},
+	{
+		id: "kimi-k2.6",
+		rates: [
+			.95,
+			4,
+			.16
+		]
+	},
+	{
+		id: "kimi-k2.7-code",
+		rates: [
+			.95,
+			4,
+			.19
+		]
+	},
+	{
+		id: "kimi-k2.7-code-highspeed",
+		rates: [
+			1.9,
+			8,
+			.38
+		]
+	},
+	{
+		id: "kimi-k3",
+		rates: [
+			3,
+			15,
+			.3
+		]
+	},
+	{
+		id: "mimo-v2.5",
+		rates: [
+			.14,
+			.28,
+			.0028
+		]
+	},
+	{
+		id: "mimo-v2.5-pro",
+		rates: [
+			.435,
+			.87,
+			.0036
+		]
+	},
+	{
+		id: "minimax-m2.5",
+		rates: [
+			.3,
+			1.2,
+			.03
+		]
+	},
+	{
+		id: "minimax-m2.7",
+		rates: [
+			.3,
+			1.2,
+			.06
+		]
+	},
+	{
+		id: "minimax-m3",
+		rates: [
+			.3,
+			1.2,
+			.06
+		]
+	},
+	{
+		id: "muse-spark-1.1",
+		rates: [
+			1.25,
+			4.25,
+			.15
+		]
+	},
+	{
+		id: "muse-spark-1.2",
+		rates: [
+			1.25,
+			4.25,
+			.15
+		]
+	},
+	{
+		id: "muse-spark-1.2-contributor",
+		rates: [
+			.1,
+			.2,
+			.002
+		]
+	},
+	{
+		id: "muse-spark-1.3",
+		rates: [
+			1.25,
+			4.25,
+			.15
+		]
+	},
+	{
+		id: "muse-spark-1.3-contributor",
+		rates: [
+			.1,
+			.2,
+			.002
+		]
+	},
+	{
+		id: "nemotron-3-ultra",
+		rates: [
+			.6,
+			2.4,
+			.12
+		]
+	},
+	{
+		id: "qwen-3.6-max",
+		rates: [
+			1.3,
+			7.8,
+			.26,
+			1.63
+		]
+	},
+	{
+		id: "qwen-3.6-plus",
+		rates: [
+			.5,
+			3,
+			.1
+		],
+		contextTiers: [{
+			"maxContext": 256e3,
+			"rates": [
+				.5,
+				3,
+				.1
+			]
+		}, { "rates": [
+			2,
+			6,
+			.2
+		] }]
 	},
-	"individual-goat": {
-		name: "GOAT",
-		monthlyCredits: 70,
-		tierWeight: 1
+	{
+		id: "qwen-3.7-flash",
+		rates: [
+			.03,
+			.13,
+			.006,
+			.038
+		],
+		contextTiers: [
+			{
+				"maxContext": 32e3,
+				"rates": [
+					.03,
+					.13,
+					.006,
+					.038
+				]
+			},
+			{
+				"maxContext": 256e3,
+				"rates": [
+					.1,
+					.4,
+					.02,
+					.125
+				]
+			},
+			{ "rates": [
+				.2,
+				.8,
+				.04,
+				.25
+			] }
+		]
 	},
-	"individual-pro": {
-		name: "Pro",
-		monthlyCredits: 30,
-		tierWeight: 2
+	{
+		id: "qwen-3.7-max",
+		rates: [
+			2.5,
+			7.5,
+			.5,
+			3.13
+		]
 	},
-	"individual-pro-v1": {
-		name: "Pro",
-		monthlyCredits: 80,
-		tierWeight: 2
+	{
+		id: "qwen-3.7-plus",
+		rates: [
+			.4,
+			1.6,
+			.08,
+			.5
+		],
+		contextTiers: [{
+			"maxContext": 256e3,
+			"rates": [
+				.4,
+				1.6,
+				.08,
+				.5
+			]
+		}, { "rates": [
+			1.2,
+			4.8,
+			.24,
+			1.5
+		] }]
 	},
-	"individual-provider": {
-		name: "Provider",
-		monthlyCredits: 15,
-		tierWeight: 3
+	{
+		id: "qwen-3.8-27b",
+		rates: [
+			.4,
+			3,
+			.04
+		]
 	},
-	"individual-max": {
-		name: "Max",
-		monthlyCredits: 150,
-		tierWeight: 4
+	{
+		id: "qwen-3.8-flash",
+		rates: [
+			.16,
+			.47,
+			.016
+		]
 	},
-	"individual-ultra": {
-		name: "Ultra",
-		monthlyCredits: 300,
-		tierWeight: 4
+	{
+		id: "qwen-3.8-max",
+		rates: [
+			2,
+			6,
+			.25,
+			2.5
+		]
 	},
-	"teams-pro": {
-		name: "Teams Pro",
-		monthlyCredits: 40,
-		tierWeight: 2
+	{
+		id: "qwen-3.8-max-0902",
+		rates: [
+			2,
+			6,
+			.25
+		]
+	},
+	{
+		id: "step-3.5-flash",
+		rates: [
+			.1,
+			.3,
+			.02
+		]
+	},
+	{
+		id: "step-3.7-flash",
+		rates: [
+			.2,
+			1.15,
+			.04
+		]
+	},
+	{
+		id: "tencent/hy3-paid",
+		rates: [
+			.14,
+			.58,
+			.035
+		]
+	},
+	{
+		id: "tencent/hy4-preview",
+		rates: [
+			.834,
+			2.501,
+			.042
+		]
 	}
-};
-/** Plan-id prefixes, longest first — the CLI's prefix-match order. */
-const SUBSCRIPTION_PLAN_PREFIXES = Object.keys(KNOWN_SUBSCRIPTION_PLANS).sort((a, b) => b.length - a.length);
+];
 /**
-* Resolve a subscription `planId` (e.g. `individual-pro-v1`) to its display
-* name and monthly credit total, mirroring the CLI's `getPlanInfo`:
-* normalize (lowercase, `_` → `-`), then longest-prefix match so
-* `individual-pro-v1` wins over `individual-pro`. Unknown ids return
-* `undefined`.
+* Catalog ids no candidate rule can reach, because the page names the model
+* differently from the catalog. `tests/model-prices.test.ts` fails whenever a
+* catalog model has no price, so a new miss lands here as a visible decision
+* rather than a silently unpriced model.
 */
-function subscriptionPlanInfo(planId) {
-	const normalized = planId.toLowerCase().replace(/_/g, "-");
-	const prefix = SUBSCRIPTION_PLAN_PREFIXES.find((candidate) => normalized.startsWith(candidate));
-	return prefix === void 0 ? void 0 : KNOWN_SUBSCRIPTION_PLANS[prefix];
+const PRICE_SLUG_OVERRIDES = { "nvidia/nemotron-3-ultra-550b-a55b": "nemotron-3-ultra" };
+/**
+* Plausible price slugs for one catalog model id, most specific first.
+*
+* The page normalizes to lowercase and usually drops the vendor segment, but
+* not consistently: `tencent/hy4-preview` keeps its prefix while
+* `Qwen/Qwen3.8-Max-0902` becomes `qwen-3.8-max-0902`, with a hyphen the
+* catalog id does not have. Generating candidates and taking the first that
+* exists in the vendored table absorbs that drift without a hand-maintained
+* map of seventy ids.
+*/
+function priceSlugCandidates(modelId) {
+	const lower = modelId.toLowerCase();
+	const bare = lower.includes("/") ? lower.slice(lower.indexOf("/") + 1) : lower;
+	const out = /* @__PURE__ */ new Set();
+	const add = (slug) => {
+		const hyphenated = slug.replace(/^([a-z]+)(\d)/, "$1-$2");
+		out.add(slug);
+		out.add(hyphenated);
+		out.add(slug.replace(/-\d{8}$/, ""));
+		out.add(slug.replace(/-(preview|latest)$/, ""));
+		out.add(hyphenated.replace(/-\d{8}$/, ""));
+		out.add(hyphenated.replace(/-(preview|latest)$/, ""));
+	};
+	add(lower);
+	add(bare);
+	return [...out];
+}
+/** The pricing-page slug for one catalog model id, or undefined when unpriced. */
+function priceSlugFor(modelId, known) {
+	const override = PRICE_SLUG_OVERRIDES[modelId];
+	if (override !== void 0) return known.has(override) ? override : void 0;
+	return priceSlugCandidates(modelId).find((slug) => known.has(slug));
+}
+/** Split a stored triplet/quadruplet into the wire rate shape. */
+function ratesOf(values) {
+	const rates = {
+		inputCost: values[0],
+		outputCost: values[1],
+		cacheReadCost: values[2]
+	};
+	if (values[3] !== void 0) rates.cacheWriteCost = values[3];
+	return rates;
+}
+/** Build the full price row the browser prices a session with. */
+function wireRow(id, slug, row) {
+	const price = {
+		id,
+		slug,
+		...ratesOf(row.rates)
+	};
+	if (row.peak !== void 0) price.peak = ratesOf(row.peak);
+	if (row.contextTiers !== void 0) price.contextTiers = row.contextTiers.map((tier) => ({
+		...ratesOf(tier.rates),
+		...tier.maxContext === void 0 ? {} : { maxContext: tier.maxContext }
+	}));
+	return price;
 }
 /**
-* Whether the picker lists `modelId` for an account with the given billing
-* access. Fails open at every uncertainty: no billing data, an unknown plan,
-* a non-finite weight (corrupt billing fact), or a model outside
-* {@link KNOWN_PLANS} all keep the model visible — the server remains the
-* final gate (`403 MODEL_NOT_IN_PLAN`).
+* Build the table the composer prices a session with.
+*
+* Rows are keyed by CATALOG id wherever the two namespaces reconcile, because
+* that is what a session reports, and every row also carries its page slug as a
+* second lookup key. Price rows no catalog model claims are served under the
+* slug alone, so drift in either direction still prices: a page rename the
+* catalog has not followed, or a model the catalog snapshot has not learned
+* yet. Free models are served explicitly at zero so the composer can say so
+* instead of showing nothing.
+*
+* The peak windows travel with the table, so the browser applies the very
+* schedule this snapshot knows instead of restating it.
 */
-function modelVisibleInPlan(modelId, access) {
-	if (access === void 0) return true;
-	if (access.onDemandCredits > 0) return true;
-	if (access.tierWeight === void 0 || !Number.isFinite(access.tierWeight)) return true;
-	const tier = KNOWN_PLANS[modelId];
-	if (tier === void 0) return true;
-	const weight = PLAN_ORDER[tier];
-	if (weight === void 0) return true;
-	return weight <= access.tierWeight;
+function modelPriceTable() {
+	const bySlug = new Map(MODEL_PRICE_ROWS.map((row) => [row.id, row]));
+	const known = new Set(bySlug.keys());
+	const models = [];
+	const claimed = /* @__PURE__ */ new Set();
+	for (const catalogId of Object.keys(KNOWN_PLANS)) {
+		if (isFreeModel(catalogId) || catalogId.endsWith(":free")) {
+			models.push({
+				id: catalogId,
+				slug: catalogId,
+				inputCost: 0,
+				outputCost: 0,
+				cacheReadCost: 0,
+				free: true
+			});
+			continue;
+		}
+		const slug = priceSlugFor(catalogId, known);
+		if (slug === void 0) continue;
+		const row = bySlug.get(slug);
+		if (row === void 0) continue;
+		claimed.add(slug);
+		models.push(wireRow(catalogId, slug, row));
+	}
+	for (const row of MODEL_PRICE_ROWS) {
+		if (claimed.has(row.id)) continue;
+		models.push(wireRow(row.id, row.id, row));
+	}
+	return {
+		models,
+		peakHours: PEAK_HOUR_RANGES.map(([start, end]) => [start, end])
+	};
 }
-const KNOWN_DEALS = {
-	"MiniMaxAI/MiniMax-M3": { label: "50% off" },
-	"xiaomi/mimo-v2.5-pro": { label: "99% off" },
-	"xiaomi/mimo-v2.5": { label: "98% off" },
-	"poolside/laguna-s-2.1-free": {
-		label: "FREE",
-		free: true
-	},
-	"meituan/LongCat-2.0:free": {
-		label: "FREE",
-		free: true
-	},
-	"inclusionai/ling-3.0-flash-sante:free": {
-		label: "FREE",
-		free: true
+//#endregion
+//#region src/cost-facts.ts
+const zeroCostTokens = () => ({
+	uncachedInputTokens: 0,
+	outputTokens: 0,
+	cacheReadTokens: 0,
+	cacheWriteTokens: 0
+});
+const COST_TOKEN_KEYS = [
+	"uncachedInputTokens",
+	"outputTokens",
+	"cacheReadTokens",
+	"cacheWriteTokens"
+];
+function peakHour(at, windows) {
+	const time = new Date(at);
+	return time.getUTCDay() !== 0 && time.getUTCDay() !== 6 && windows.some(([start, end]) => time.getUTCHours() >= start && time.getUTCHours() < end);
+}
+/**
+* All prompt billing buckets determine a request's band, never cumulative session input.
+*
+* A tiered model returns the matching band and does NOT then apply `peak`: the
+* page publishes those two dimensions independently, no row carries both today,
+* and the generator would report a tiered row on every sync — so the combination
+* becoming real is visible before it reaches a user. This ordering is a latent
+* choice, not a verified upstream rule.
+*/
+function requestRates(price, at, contextTokens, table) {
+	const tier = price.contextTiers?.find((tier) => tier.maxContext === void 0 || contextTokens <= tier.maxContext);
+	if (tier !== void 0) return tier;
+	return price.peak !== void 0 && at !== null && peakHour(at, table.peakHours) ? price.peak : price;
+}
+/** Cache version and wire guard: changing bands/rates must refold historical groups. */
+function pricingKey(table) {
+	const rates = (r) => [
+		r.inputCost,
+		r.outputCost,
+		r.cacheReadCost,
+		r.cacheWriteCost ?? null
+	];
+	const canonical = JSON.stringify([
+		"commandCodeCost-v1",
+		table.peakHours,
+		table.models.map((p) => [
+			p.id,
+			p.slug,
+			p.free === true,
+			rates(p),
+			p.peak ? rates(p.peak) : null,
+			p.contextTiers?.map((t) => [t.maxContext ?? null, rates(t)]) ?? null
+		])
+	]);
+	let hash = 2166136261;
+	for (const c of canonical) hash = Math.imul(hash ^ c.charCodeAt(0), 16777619) >>> 0;
+	return hash;
+}
+/** Only safe to merge requests whose billing classification is identical. */
+function costGroupKey(group, table) {
+	const price = table.models.find((p) => p.id === group.model || p.slug === group.model);
+	return JSON.stringify([
+		group.provider,
+		group.model,
+		price === void 0 ? null : requestRates(price, group.at, group.contextTokens, table),
+		group.at === null
+	]);
+}
+//#endregion
+//#region src/cost-projection.ts
+const record$2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? v : void 0;
+const finite = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0;
+function tokensOf(value) {
+	const u = record$2(value);
+	if (!u || !finite(u.inputTokens) || !finite(u.outputTokens)) return void 0;
+	if (u.cacheReadTokens !== void 0 && !finite(u.cacheReadTokens) || u.cacheWriteTokens !== void 0 && !finite(u.cacheWriteTokens)) return void 0;
+	return {
+		uncachedInputTokens: u.inputTokens,
+		outputTokens: u.outputTokens,
+		cacheReadTokens: u.cacheReadTokens ?? 0,
+		cacheWriteTokens: u.cacheWriteTokens ?? 0
+	};
+}
+/** Current v2 settlements store the last usage in their stream; v1 stores chunk events. */
+function usageOf(type, data) {
+	if (type === "assistant/chunk") {
+		const chunk = record$2(data.chunk);
+		return chunk?.type === "usage" ? tokensOf(chunk.usage) : void 0;
 	}
-};
+	if (type !== "assistant/message" && type !== "assistant/attempt") return void 0;
+	const direct = tokensOf(data.usage);
+	if (direct !== void 0) return direct;
+	if (!Array.isArray(data.stream)) return void 0;
+	for (let i = data.stream.length - 1; i >= 0; i--) {
+		const item = record$2(data.stream[i]);
+		const chunk = item?.type === "chunk" ? record$2(item.chunk) : void 0;
+		if (chunk?.type === "usage") return tokensOf(chunk.usage);
+	}
+}
+function parseState(value) {
+	const s = record$2(value), facts = record$2(s?.facts);
+	if (!s || !facts || !finite(facts.pricingKey) || !Array.isArray(facts.groups)) throw new TypeError("invalid commandCodeCost state");
+	const group = (v) => {
+		const g = record$2(v), t = record$2(g?.tokens);
+		return !!g && typeof g.provider === "string" && typeof g.model === "string" && (g.at === null || finite(g.at)) && finite(g.contextTokens) && !!t && COST_TOKEN_KEYS.every((k) => finite(t[k]));
+	};
+	const sel = record$2(s.selection), last = record$2(s.last);
+	if (!(s.selection === null || sel && typeof sel.provider === "string" && typeof sel.model === "string") || !(s.at === null || finite(s.at)) || !facts.groups.every(group) || !(s.last === null || last && finite(last.turn) && finite(last.step) && group(last.group))) throw new TypeError("invalid commandCodeCost state");
+	return value;
+}
+/** Optional registry uses only synchronous parse/view; no new runtime module is required. */
+function createCostProjection(table = modelPriceTable()) {
+	const version = pricingKey(table);
+	return {
+		key: "commandCodeCost",
+		stateVersion: version,
+		stateSchema: { parse: parseState },
+		init: () => ({
+			selection: null,
+			at: null,
+			last: null,
+			facts: {
+				pricingKey: version,
+				groups: []
+			}
+		}),
+		apply(state, event) {
+			const data = record$2(event.data);
+			if (!data) return state;
+			if (event.type === "request/header") {
+				const config = record$2(record$2(data.header)?.config);
+				return {
+					...state,
+					selection: config && typeof config.provider === "string" && typeof config.model === "string" ? {
+						provider: config.provider,
+						model: config.model
+					} : null
+				};
+			}
+			if (event.type === "step/start" || event.type === "llm/retry-started") return {
+				...state,
+				at: finite(event.time) ? event.time : null,
+				last: null
+			};
+			const tokens = usageOf(event.type, data);
+			if (tokens === void 0 || !finite(data.turn) || !finite(data.step)) return state;
+			const previous = state.last?.turn === data.turn && state.last.step === data.step ? state.last.group : void 0;
+			const group = {
+				provider: state.selection?.provider ?? "",
+				model: state.selection?.model ?? "",
+				at: state.at,
+				contextTokens: tokens.uncachedInputTokens + tokens.cacheReadTokens + tokens.cacheWriteTokens,
+				tokens
+			};
+			if (previous && JSON.stringify(previous) === JSON.stringify(group)) return state;
+			const groups = state.facts.groups.map((g) => ({
+				...g,
+				tokens: { ...g.tokens }
+			}));
+			if (previous) {
+				const old = groups.find((g) => costGroupKey(g, table) === costGroupKey(previous, table));
+				if (old) for (const k of COST_TOKEN_KEYS) old.tokens[k] -= previous.tokens[k];
+			}
+			let target = groups.find((g) => costGroupKey(g, table) === costGroupKey(group, table));
+			if (!target) {
+				target = {
+					...group,
+					tokens: zeroCostTokens()
+				};
+				groups.push(target);
+			}
+			for (const k of COST_TOKEN_KEYS) target.tokens[k] += tokens[k];
+			return {
+				...state,
+				last: {
+					turn: data.turn,
+					step: data.step,
+					group
+				},
+				facts: {
+					pricingKey: version,
+					groups: groups.filter((g) => COST_TOKEN_KEYS.some((k) => g.tokens[k] > 0))
+				}
+			};
+		},
+		wire: {
+			view: (state) => state.facts,
+			viewSchema: { parse(value) {
+				return parseState({
+					selection: null,
+					at: null,
+					last: null,
+					facts: value
+				}).facts;
+			} }
+		}
+	};
+}
+function installCostProjection(ctx) {
+	ctx.inject(["sessionProjections"], (c) => {
+		const registry = c.get("sessionProjections");
+		if (typeof registry?.register === "function") c.effect(() => registry.register(createCostProjection()), "commandcode cost projection");
+	});
+}
+//#endregion
+//#region src/accounts.ts
 /**
-* Models with time-of-day (peak/off-peak) pricing, per the official pricing
-* page (`/docs/resources/pricing-limits`). Since 2026-08-16 16:00 UTC, DeepSeek
-* charges by the hour: peak hours are 01:00–04:00 and 06:00–10:00 UTC (7h per
-* weekday, full price) **Monday to Friday only**; the other 17 hours of a
-* weekday and every hour of Saturday/Sunday (UTC) are off-peak at half price.
-* The V4 Flash Vision (exp) variant (command-code@1.32.0) shares the V4 Flash
-* windows and peak prices ($0.44/$1.32) — each row's hover annotation states
-* exactly 2× that row's displayed off-peak prices. The picker shows the
-* *current* state as a compact
-* label (`Peak`/`Half`) matching the English noun style of the other markers
-* (`Image`, `FREE`), so a developer can tell at a glance whether calling the
-* model right now is cheap or expensive.
+* Multi-account pool for the Command Code provider (host side).
 *
-* Authoritative extraction: the pricing page embeds a model JSON array whose
-* hourly-priced entries carry a `timeOfDay` block
-* (`{ windows: "01–04 & 06–10 UTC, Mon–Fri", peakHoursPerDay: 7,
-* offPeakHoursPerDay: 17, peak: {...}, offPeak: {...} }`). Exactly four models
-* carry it: V4 Pro, V4 Flash, V4 Flash Vision (exp), and V4.1 Flash (added in
-* command-code@1.53.0 at $0.15/$0.60 off-peak, $0.30/$1.20 peak — the same
-* schedule as the other three).
+* One Command Code subscription (e.g. the Go plan's 5-hour window) is
+* metered; a user with several subscriptions wants a request that hits one
+* account's limit to continue on the next account without a visible failure.
+* This module owns that rotation:
 *
-* Extraction caution: the rendered HTML rows are a trap. Each annotation div
-* sits inside its OWN row's container, immediately before the NEXT row starts,
-* so flattening the page to text makes every annotation look like it belongs
-* to the model printed after it — that is how `deepseek/deepseek-v4-flash-fast`
-* was wrongly added here (its row is flat-priced at $0.28/$0.56/$0.07 and has
-* no `timeOfDay` block). Trust the embedded JSON's `timeOfDay` membership and
-* the 2× price relation, never the flat-text neighbor.
+*   - {@link CommandCodeAccountPool.resolveKey} hands out the first account
+*     whose key is not currently marked exhausted — or, when the request's
+*     model matches a {@link CommandCodeModelAccountRule} and that account is
+*     usable, the routed account — resolving each slot's key lazily (literal
+*     config key → credential seam → launch environment → the official CLI
+*     auth file for the default slot only).
+*   - {@link CommandCodeAccountPool.markRejected} records a 429 (rate limit,
+*     window unknown) or 401 (invalid key, disabled until the config changes)
+*     against the exact API key, so several slots sharing one key share one
+*     state.
+*   - When every account is marked, the pool probes each key's
+*     `/alpha/billing/credits` window limits (through the injected
+*     {@link CommandCodeAccountPoolDeps.probeWindow}): an account whose window
+*     no longer reports `exceeded` is revived, otherwise the pool throws a
+*     `RATE_LIMIT` error naming the earliest reset time.
 *
-* Keep in sync with the official pricing page when the model set, the peak
-* windows, or the weekday rule change (see the dsh-commandcode-upstream skill).
+* The pool is deliberately cordis-free (like the adapter): every host fact
+* arrives through injected thunks, so node tests can drive it directly.
+*
+* @module dsh-commandcode-provider/accounts
 */
-const KNOWN_PEAK_PRICING = /* @__PURE__ */ new Set([
-	"deepseek/deepseek-v4-pro",
-	"deepseek/deepseek-v4-flash",
-	"deepseek/deepseek-v4-flash-vision-exp",
-	"deepseek/deepseek-v4.1-flash"
-]);
 /**
-* Peak hours (UTC, hour-of-day range end-exclusive): 01–03 and 06–09.
-* Weekday-only — see `peakPricingState()`; weekends are fully off-peak.
+* Upper bound on the retry wait this pool attaches to the all-exhausted
+* `RATE_LIMIT` error. Must equal the `backoff.maxDelayMs` in the adapter's
+* `providerRetryPolicy` (which imports it from here): dsh-llm-retry honors a
+* provider-specified wait verbatim only at or below that cap — in normal mode
+* a LONGER attached wait makes the executor abandon the retry entirely
+* instead of falling back to local backoff, which would turn "poll until the
+* window opens" into "fail now".
 */
-const PEAK_HOUR_RANGES = [[1, 4], [6, 10]];
+const RETRY_MAX_DELAY_MS = 9e5;
+/** A labeled, human-readable clock reading for error messages. */
+function clockLabel(ms) {
+	return new Date(ms).toLocaleString();
+}
 /**
-* Whether `now` (defaults to `Date.now()`) falls in a peak-pricing window for
-* time-of-day-priced models. Peak rates apply Monday–Friday (UTC) only: the
-* official rule charges Saturday and Sunday completely off-peak for all 24
-* hours, so a weekend timestamp is off-peak even inside `PEAK_HOUR_RANGES`.
-* `undefined` for models outside the snapshot.
+* Whether an account with this rotation state can serve a request right now.
+* `undefined` (never rejected) is usable; a cooldown becomes usable again
+* once its reset time passes; `unknown` (429, reset unprobed) and
+* `disabled` (401) are not.
 */
-function peakPricingState(modelId, now = Date.now()) {
-	if (!KNOWN_PEAK_PRICING.has(modelId)) return void 0;
-	const at = new Date(now);
-	const day = at.getUTCDay();
-	if (day === 0 || day === 6) return "off-peak";
-	const hour = at.getUTCHours();
-	return PEAK_HOUR_RANGES.some(([start, end]) => hour >= start && hour < end) ? "peak" : "off-peak";
+function accountUsable(state) {
+	if (state === void 0) return true;
+	if (state.kind === "cooldown") return state.until > 0 && Date.now() >= state.until;
+	return false;
 }
 /**
-* Compact label for the current peak/off-peak state: `Peak` (full price) or
-* `Half` (off-peak, half price). These English nouns match the picker's other
-* markers (`Go`, `Image`, `FREE`), and since they appear only on time-of-day
-* priced models they double as a "priced by the hour" signal. Returns undefined
-* for models without time-of-day pricing.
-*/
-function peakPricingLabel(modelId, now = Date.now()) {
-	const state = peakPricingState(modelId, now);
-	if (state === void 0) return void 0;
-	return state === "peak" ? "Peak" : "Half";
+* Pick the account that should serve now: the manually preferred slot when it
+* is usable, otherwise the first usable account in rotation order; undefined
+* when no account is usable. Shared by the pool (request path) and the plugin
+* entry (the usage view's active badge) so both always agree.
+*/
+function selectActiveAccount(accounts, preferredId) {
+	const usable = accounts.filter((account) => accountUsable(account.state));
+	if (preferredId !== void 0) {
+		const preferred = usable.find((account) => account.slot.id === preferredId);
+		if (preferred !== void 0) return preferred;
+	}
+	return usable[0];
 }
 /**
-* Official display label for a model's minimum plan, or undefined for models
-* outside the snapshot (e.g. future catalog additions).
+* The first routing rule whose model list contains the request's model id.
+* Undefined when no rule matches.
 */
-function planLabel(modelId) {
-	const plan = KNOWN_PLANS[modelId];
-	return plan === void 0 ? void 0 : PLAN_LABELS[plan];
+function matchModelRule(model, rules) {
+	if (model === "" || rules === void 0 || rules.length === 0) return void 0;
+	for (const rule of rules) if (rule.models.includes(model)) return rule;
 }
 /**
-* The active deal label for a model, or undefined when the model has no deal
-* or the deal has expired. Expiry is judged against `now` (defaults to
-* `Date.now()`), so a snapshot that has gone stale stops showing its discount
-* the moment the official end date passes — the user never believes a lapsed
-* deal is still live. Permanent deals (no `expiresAt`) never lapse.
+* The routed account for a request's model: the first usable account whose
+* slot id matches the first matching rule's target. Undefined when no rule
+* matches or the routed account is not usable (the caller then falls back to
+* the normal preferred/rotation selection).
 */
-function dealLabel(modelId, now = Date.now()) {
-	const deal = KNOWN_DEALS[modelId];
-	if (deal === void 0) return void 0;
-	if (deal.expiresAt !== void 0 && now >= Date.parse(deal.expiresAt)) return void 0;
-	return deal.label;
+function selectAccountForModel(accounts, model, rules) {
+	const rule = matchModelRule(model, rules);
+	if (rule === void 0) return void 0;
+	return accounts.find((account) => account.slot.id === rule.account && accountUsable(account.state));
 }
 /**
-* Compact human-readable context window, e.g. `1_000_000 -> "1M"`,
-* `256_000 -> "256K"`, `262_144 -> "262K"` (floor to the nearest K).
-* Returns undefined for unknown/absent sizes; values under 1K render raw.
+* The account pool. Rotation state is keyed by API key (never logged), so two
+* slots resolving to the same credential share one mark, and a key changed in
+* the credentials service starts with a clean slate.
 */
-function formatContext(contextWindow) {
-	if (contextWindow === void 0 || !Number.isFinite(contextWindow) || contextWindow <= 0) return;
-	if (contextWindow >= 1e6) {
-		const m = contextWindow / 1e6;
-		const rounded = Math.round(m * 10) / 10;
-		return `${Number.isInteger(rounded) ? rounded : rounded.toFixed(1)}M`;
+var CommandCodeAccountPool = class {
+	deps;
+	/** Rotation state by API key. */
+	states = /* @__PURE__ */ new Map();
+	constructor(deps) {
+		this.deps = deps;
 	}
-	if (contextWindow < 1e3) return String(Math.floor(contextWindow));
-	return `${Math.floor(contextWindow / 1e3)}K`;
-}
+	/**
+	* Resolve every slot's key, deduplicated by key (first slot wins). Slots
+	* without any resolvable key are omitted — they still appear in the
+	* settings page as unconfigured, they just cannot serve requests.
+	*/
+	async resolvedAccounts() {
+		const out = [];
+		const seen = /* @__PURE__ */ new Set();
+		for (const slot of this.deps.slots()) {
+			const key = await this.resolveSlotKey(slot);
+			if (key === void 0 || seen.has(key)) continue;
+			seen.add(key);
+			out.push({
+				slot,
+				key,
+				state: this.states.get(key)
+			});
+		}
+		return out;
+	}
+	/**
+	* Every slot paired with its resolved key and rotation state — NOT
+	* deduplicated: two slots sharing one credential both appear (the usage
+	* view reports them individually), while slots without any resolvable key
+	* are omitted. The serving path uses {@link resolvedAccounts} instead.
+	*/
+	async describeAccounts() {
+		const out = [];
+		for (const slot of this.deps.slots()) {
+			const key = await this.resolveSlotKey(slot);
+			if (key === void 0) continue;
+			out.push({
+				slot,
+				key,
+				state: this.states.get(key)
+			});
+		}
+		return out;
+	}
+	/**
+	* Hand out the key for a request: the model-routed account when the
+	* request's model matches a rule (and that account is usable), else the
+	* manually preferred account when usable, else the first usable account in
+	* rotation order. Returns `undefined` when no account resolves any key at
+	* all (the caller then reports the missing credential). Throws
+	* `RATE_LIMIT` — naming the earliest window reset — or
+	* `INVALID_CREDENTIAL` when accounts exist but none can serve.
+	*
+	* `options.model` is the request's model id; routing rules re-read per
+	* resolution, so a settings change applies live.
+	*
+	* `options.exclude` skips one key during the probe-revival pass: the
+	* rotation hook excludes the just-rejected key so a probe that clears its
+	* window cannot re-offer the same key within the same request (the adapter
+	* refuses already-tried keys; the next request picks the revived key up).
+	*/
+	async resolveKey(options) {
+		const accounts = await this.resolvedAccounts();
+		if (accounts.length === 0) return;
+		const routed = selectAccountForModel(accounts, options?.model ?? "", this.deps.modelAccountRules?.());
+		if (routed !== void 0) return this.pick(routed);
+		const preferred = this.deps.preferredId?.();
+		const chosen = selectActiveAccount(accounts, preferred);
+		if (chosen !== void 0) return this.pick(chosen);
+		await Promise.all(accounts.map(async (account) => {
+			if (account.state?.kind === "disabled") return;
+			if (options?.exclude !== void 0 && account.key === options.exclude) return;
+			let probe;
+			try {
+				probe = await this.deps.probeWindow(account.key);
+			} catch {
+				return;
+			}
+			if (probe === void 0) return;
+			if (!probe.exceeded) this.states.delete(account.key);
+			else this.states.set(account.key, {
+				kind: "cooldown",
+				reason: account.state?.reason ?? "rate limited (429)",
+				until: probe.resetAt
+			});
+		}));
+		const latest = await this.resolvedAccounts();
+		const revived = selectActiveAccount(latest, preferred);
+		if (revived !== void 0) return this.pick(revived);
+		if (latest.filter((account) => account.state?.kind === "disabled").length === latest.length) throw new LlmError(`llm-commandcode: every configured Command Code account (${latest.length}) was rejected with 401 — check the stored API keys (Models page / settings) or the auth file；已配置的 ${latest.length} 个 Command Code 账户密钥均被拒绝（401）——请在设置页检查存储的 API 密钥，或重新运行 command-code login`, "INVALID_CREDENTIAL");
+		const resets = latest.map((account) => account.state).filter((state) => state !== void 0 && state.kind === "cooldown" && state.until > 0).map((state) => state.until);
+		const earliest = resets.length > 0 ? Math.min(...resets) : 0;
+		const wait = earliest > 0 ? Math.max(1e3, earliest - Date.now()) : 0;
+		throw new LlmError(`llm-commandcode: all ${latest.length} Command Code account(s) have exhausted their usage window` + (earliest > 0 ? `; the earliest window resets at ${clockLabel(earliest)}` : "") + ` — requests will succeed again after the reset (or add another account)；已用尽全部 ${latest.length} 个 Command Code 账户的用量窗口` + (earliest > 0 ? `，最早的重置时间为 ${clockLabel(earliest)}` : "") + "——窗口重置后请求会自动恢复（也可以添加更多账户）", "RATE_LIMIT", wait > 0 && wait <= 9e5 ? { providerRetryAfterMs: wait } : void 0);
+	}
+	/**
+	* Record a rejection against one key. `rate-limit` (429) marks the key
+	* exhausted with an unknown reset (probed lazily at the next resolution
+	* once every account is marked); `invalid-credential` (401) disables the
+	* key until the stored credential changes.
+	*/
+	markRejected(apiKey, rejection) {
+		if (rejection === "invalid-credential") this.states.set(apiKey, {
+			kind: "disabled",
+			reason: "invalid API key (401)",
+			until: 0
+		});
+		else this.states.set(apiKey, {
+			kind: "unknown",
+			reason: "rate limited (429)",
+			until: 0
+		});
+	}
+	/**
+	* One account's key: literal → credential seam → auth file (default slot).
+	*
+	* Every source is normalized here, at the single point where a slot's key
+	* enters the pool. The adapter sends the key through the harness's
+	* `assertUsableApiKey()`, which trims it — a stored key from the credentials
+	* seam, a `.env` line, or a shell export all pick up surrounding whitespace
+	* — and reports that trimmed form back to `markRejected()`. Returning the
+	* raw value would file every 429/401 mark under a key no later lookup can
+	* find: rotation would re-offer the same account, the account card would show
+	* no mark, and the usage endpoints would 401 while chat kept working.
+	* Normalizing once makes resolution, probing, marking, and the request path
+	* agree on one string.
+	*/
+	async resolveSlotKey(slot) {
+		if (slot.literal !== void 0) {
+			const literal = normalizeResolvedKey(slot.literal);
+			if (literal !== void 0) return literal;
+		}
+		if (slot.ref !== void 0) {
+			const hit = await this.deps.resolveRef(slot.ref);
+			if (hit !== void 0) {
+				const resolved = normalizeResolvedKey(hit);
+				if (resolved !== void 0) return resolved;
+			}
+		}
+		if (slot.allowAuthFile) {
+			const fromFile = this.deps.authFileKey();
+			if (fromFile !== void 0) {
+				const fileKey = normalizeResolvedKey(fromFile);
+				if (fileKey !== void 0) return fileKey;
+			}
+		}
+	}
+	/** Hand out the chosen account's key. */
+	pick(account) {
+		return {
+			key: account.key,
+			slot: account.slot
+		};
+	}
+};
 /**
-* Compact one-line summary for the model picker: plan tier, then any active
-* deal (discount or FREE), then the current peak/off-peak state (`Peak`/`Half`)
-* for time-of-day-priced models, then `Image` for Vision-capable models, then
-* the context window. Text-only models simply omit the Image marker — "Text
-* only" adds nothing the picker needs to show.
+* Normalize one resolved credential to the form every consumer sees. Trim
+* only: a blank-after-trim value means "no key" (the slot is omitted and the
+* caller reports `MISSING_CREDENTIAL`), while characters an HTTP header cannot
+* carry are left for `assertUsableApiKey()` to reject with its own message.
 */
-function capabilityDescription(modelId, contextWindow, now = Date.now()) {
-	const parts = [];
-	const plan = planLabel(modelId);
-	if (plan !== void 0) parts.push(plan);
-	const deal = dealLabel(modelId, now);
-	if (deal !== void 0) parts.push(deal);
-	const peak = peakPricingLabel(modelId, now);
-	if (peak !== void 0) parts.push(peak);
-	if (KNOWN_IMAGE_MODELS.has(modelId)) parts.push("Image");
-	const ctx = formatContext(contextWindow);
-	if (ctx !== void 0) parts.push(ctx);
-	return parts.join(" · ");
+function normalizeResolvedKey(value) {
+	const trimmed = value.trim();
+	return trimmed === "" ? void 0 : trimmed;
 }
 //#endregion
 //#region src/adapter.ts
@@ -1665,13 +2722,22 @@ function parseUsageTotals(usage) {
 	};
 }
 /** Parse one window-limit block (`fiveHour` / `weekly`). */
+/**
+* Parse one window block into a window limit, or undefined when the endpoint
+* reported no such window.
+*
+* Returning undefined (rather than a zeroed window) is load-bearing: the panel
+* must not draw a quota row for a window the account never reported, and a
+* zeroed window is indistinguishable from a genuinely uncapped one.
+*/
 function parseWindowLimit(value) {
 	const block = isRecord(value) ? value : void 0;
+	if (block === void 0) return void 0;
 	return {
-		used: numberValue(block?.used) ?? 0,
-		cap: numberValue(block?.cap) ?? 0,
-		exceeded: block?.exceeded === true,
-		resetAt: numberValue(block?.resetAt) ?? 0
+		used: numberValue(block.used) ?? 0,
+		cap: numberValue(block.cap) ?? 0,
+		exceeded: block.exceeded === true,
+		resetAt: numberValue(block.resetAt) ?? 0
 	};
 }
 /**
@@ -1685,13 +2751,19 @@ function parseCreditLimits(credits) {
 	const fiveHour = windowLimits !== void 0 && isRecord(windowLimits.fiveHour) ? windowLimits.fiveHour : void 0;
 	const weekly = windowLimits !== void 0 && isRecord(windowLimits.weekly) ? windowLimits.weekly : void 0;
 	if (creditsData === void 0 && fiveHour === void 0 && weekly === void 0) return void 0;
-	return {
+	const parsed = {
 		monthlyCredits: numberValue(creditsData?.monthlyCredits) ?? 0,
 		purchasedCredits: numberValue(creditsData?.purchasedCredits) ?? 0,
 		freeCredits: numberValue(creditsData?.freeCredits) ?? 0,
-		fiveHour: parseWindowLimit(fiveHour),
-		weekly: parseWindowLimit(weekly)
+		monthlyReported: numberValue(creditsData?.monthlyCredits) !== void 0,
+		purchasedReported: numberValue(creditsData?.purchasedCredits) !== void 0,
+		freeReported: numberValue(creditsData?.freeCredits) !== void 0
 	};
+	const fiveHourLimit = parseWindowLimit(fiveHour);
+	const weeklyLimit = parseWindowLimit(weekly);
+	if (fiveHourLimit !== void 0) parsed.fiveHour = fiveHourLimit;
+	if (weeklyLimit !== void 0) parsed.weekly = weeklyLimit;
+	return parsed;
 }
 /**
 * Parse the account identity from whoami plus the plan identity from the
@@ -2880,8 +3952,13 @@ function renderReport(report, locale, title) {
 	}
 	if (report.credits) {
 		const c = report.credits;
-		const monthlyPct = c.monthlyCredits > 0 ? `${(c.monthlyCredits / (c.monthlyCredits + c.purchasedCredits) * 100).toFixed(0)}%` : "—";
-		lines.push(commandCopy(locale, "creditsHeader"), commandCopy(locale, "monthlyLine").replace("{monthly}", moneyShort(c.monthlyCredits)).replace("{purchased}", moneyShort(c.purchasedCredits)).replace("{free}", moneyShort(c.freeCredits)), commandCopy(locale, "barLine").replace("{bar}", bar(c.monthlyCredits, c.monthlyCredits + c.purchasedCredits)).replace("{pct}", monthlyPct), "", commandCopy(locale, "windowsHeader"), commandCopy(locale, "fiveHourLine").replace("{used}", moneyShort(c.fiveHour.used)).replace("{cap}", moneyShort(c.fiveHour.cap)).replace("{warn}", c.fiveHour.exceeded ? commandCopy(locale, "exceededWarning") : ""), commandCopy(locale, "windowBarLine").replace("{bar}", bar(c.fiveHour.used, c.fiveHour.cap)).replace("{when}", resetLabel(c.fiveHour.resetAt)), commandCopy(locale, "weeklyLine").replace("{used}", moneyShort(c.weekly.used)).replace("{cap}", moneyShort(c.weekly.cap)).replace("{warn}", c.weekly.exceeded ? commandCopy(locale, "exceededWarning") : ""), commandCopy(locale, "windowBarLine").replace("{bar}", bar(c.weekly.used, c.weekly.cap)).replace("{when}", resetLabel(c.weekly.resetAt)), "");
+		const balanceTotal = c.monthlyCredits + c.purchasedCredits;
+		const ratioKnown = c.monthlyReported !== false && c.purchasedReported !== false && balanceTotal > 0;
+		lines.push(commandCopy(locale, "creditsHeader"), commandCopy(locale, "monthlyLine").replace("{monthly}", c.monthlyReported === false ? "—" : moneyShort(c.monthlyCredits)).replace("{purchased}", c.purchasedReported === false ? "—" : moneyShort(c.purchasedCredits)).replace("{free}", c.freeReported === false ? "—" : moneyShort(c.freeCredits)), ...ratioKnown ? [commandCopy(locale, "barLine").replace("{bar}", bar(c.monthlyCredits, balanceTotal)).replace("{pct}", (c.monthlyCredits / balanceTotal * 100).toFixed(0))] : [], "");
+		const windowLines = [];
+		if (c.fiveHour !== void 0) windowLines.push(commandCopy(locale, "fiveHourLine").replace("{used}", moneyShort(c.fiveHour.used)).replace("{cap}", moneyShort(c.fiveHour.cap)).replace("{warn}", c.fiveHour.exceeded ? commandCopy(locale, "exceededWarning") : ""), commandCopy(locale, "windowBarLine").replace("{bar}", bar(c.fiveHour.used, c.fiveHour.cap)).replace("{when}", resetLabel(c.fiveHour.resetAt)));
+		if (c.weekly !== void 0) windowLines.push(commandCopy(locale, "weeklyLine").replace("{used}", moneyShort(c.weekly.used)).replace("{cap}", moneyShort(c.weekly.cap)).replace("{warn}", c.weekly.exceeded ? commandCopy(locale, "exceededWarning") : ""), commandCopy(locale, "windowBarLine").replace("{bar}", bar(c.weekly.used, c.weekly.cap)).replace("{when}", resetLabel(c.weekly.resetAt)));
+		if (windowLines.length > 0) lines.push(commandCopy(locale, "windowsHeader"), ...windowLines, "");
 	}
 	if (report.failures.length > 0) lines.push(commandCopy(locale, "partialFailures").replace("{list}", report.failures.join("; ")), "");
 	if (!report.account && !report.usage && !report.credits) lines.push(commandCopy(locale, "noData"), "");
@@ -2997,7 +4074,16 @@ const USAGE_REPORT_ENDPOINT = "commandcode/report";
 */
 const { reject: reject$1, record: record$1, stringField: stringField$1, numberField, booleanField } = makeBoundaryValidator("commandcode/report result:");
 /** Validate one window-limit block (`fiveHour` / `weekly`). */
+/**
+* Parse one quota window, or undefined when the frame carries no such window.
+*
+* The distinction is load-bearing at this boundary: an ABSENT window means the
+* billing endpoint reported none (an unlimited plan), while a present block with
+* `cap: 0` means uncapped spend that was really reported. Collapsing the two
+* would draw a zeroed quota row for an account that has no such limit.
+*/
 function windowLimit(value, field) {
+	if (value === void 0) return void 0;
 	const source = record$1(value, field);
 	return {
 		used: numberField(source, "used", `${field}.used`),
@@ -3045,13 +4131,18 @@ function parseUsageReport(value) {
 	}
 	if (source.credits !== void 0) {
 		const credits = record$1(source.credits, "credits");
-		report.credits = {
+		const parsed = {
 			monthlyCredits: numberField(credits, "monthlyCredits", "credits.monthlyCredits"),
 			purchasedCredits: numberField(credits, "purchasedCredits", "credits.purchasedCredits"),
-			freeCredits: numberField(credits, "freeCredits", "credits.freeCredits"),
-			fiveHour: windowLimit(credits.fiveHour, "credits.fiveHour"),
-			weekly: windowLimit(credits.weekly, "credits.weekly")
+			freeCredits: numberField(credits, "freeCredits", "credits.freeCredits")
 		};
+		if (credits.monthlyReported !== void 0) parsed.monthlyReported = booleanField(credits, "monthlyReported", "credits.monthlyReported");
+		for (const flag of ["purchasedReported", "freeReported"]) if (credits[flag] !== void 0) parsed[flag] = booleanField(credits, flag, `credits.${flag}`);
+		const fiveHour = windowLimit(credits.fiveHour, "credits.fiveHour");
+		const weekly = windowLimit(credits.weekly, "credits.weekly");
+		if (fiveHour !== void 0) parsed.fiveHour = fiveHour;
+		if (weekly !== void 0) parsed.weekly = weekly;
+		report.credits = parsed;
 	}
 	if (source.plan !== void 0) {
 		const plan = record$1(source.plan, "plan");
@@ -3133,6 +4224,72 @@ function parseCatalog(value) {
 * service and `commandcode` namespace as the usage report.
 */
 const MODELS_DESCRIPTOR = makeRemoteDescriptor(MODELS_ENDPOINT, "models", `${USAGE_REMOTE_PACKAGE}#CommandCodeCatalog`, { parse: parseCatalog });
+/** Canonical `<namespace>/<method>` endpoint of the price-table Remote. */
+const PRICES_ENDPOINT = "commandcode/prices";
+/**
+* The shared read/validate helpers for the price-table endpoint — its own
+* instance so price boundary errors name `commandcode/prices`.
+*/
+const { reject: priceReject, record: priceRecord, stringField: priceString, numberField: priceNumber, booleanField: priceBoolean } = makeBoundaryValidator("commandcode/prices result:");
+/** Parse one rate block (`rates`, or a model's `peak` override). */
+function parseRates(source, field) {
+	const rates = {
+		inputCost: priceNumber(source, "inputCost", `${field}.inputCost`),
+		outputCost: priceNumber(source, "outputCost", `${field}.outputCost`),
+		cacheReadCost: priceNumber(source, "cacheReadCost", `${field}.cacheReadCost`)
+	};
+	if (source.cacheWriteCost !== void 0) rates.cacheWriteCost = priceNumber(source, "cacheWriteCost", `${field}.cacheWriteCost`);
+	return rates;
+}
+/** Parse one untrusted boundary value into a {@link CommandCodeModelPrice}. */
+function parseModelPrice(value) {
+	const source = priceRecord(value, "model");
+	const price = {
+		id: priceString(source, "id", "model.id"),
+		slug: priceString(source, "slug", "model.slug"),
+		...parseRates(source, "model")
+	};
+	if (source.peak !== void 0) price.peak = parseRates(priceRecord(source.peak, "model.peak"), "model.peak");
+	if (source.contextTiers !== void 0) {
+		if (!Array.isArray(source.contextTiers) || source.contextTiers.length === 0) priceReject("contextTiers");
+		let previous = 0;
+		price.contextTiers = source.contextTiers.map((value, index, tiers) => {
+			const tier = priceRecord(value, "contextTier");
+			const out = parseRates(tier, "contextTier");
+			if (tier.maxContext !== void 0) {
+				const max = priceNumber(tier, "maxContext", "contextTier.maxContext");
+				if (!Number.isSafeInteger(max) || max <= previous || index === tiers.length - 1) priceReject("contextTier.maxContext");
+				previous = max;
+				out.maxContext = max;
+			} else if (index !== tiers.length - 1) priceReject("contextTier.maxContext");
+			return out;
+		});
+	}
+	if (source.free !== void 0) price.free = priceBoolean(source, "free", "model.free");
+	return price;
+}
+/** Parse the wire result into a {@link CommandCodePriceTable}. */
+function parsePriceTable(value) {
+	const source = priceRecord(value, "result");
+	const models = source.models;
+	if (!Array.isArray(models)) priceReject("models");
+	const peakHours = source.peakHours;
+	if (!Array.isArray(peakHours)) priceReject("peakHours");
+	return {
+		models: models.map(parseModelPrice),
+		peakHours: peakHours.map((window) => {
+			if (!Array.isArray(window) || window.length !== 2) priceReject("peakHours[]");
+			const [start, end] = window;
+			if (typeof start !== "number" || typeof end !== "number") priceReject("peakHours[]");
+			return [start, end];
+		})
+	};
+}
+/**
+* The price-table invocation descriptor, sharing the same `commandcodeUsage`
+* service and `commandcode` namespace as the report and catalog endpoints.
+*/
+const PRICES_DESCRIPTOR = makeRemoteDescriptor(PRICES_ENDPOINT, "prices", `${USAGE_REMOTE_PACKAGE}#CommandCodePriceTable`, { parse: parsePriceTable });
 //#endregion
 //#region src/login-wire.ts
 /** The canonical endpoint paths of the three login Remotes. */
@@ -3232,6 +4389,15 @@ var CommandCodeUsageService = class extends TypertRemoteService {
 		return this.deps.listModels?.() ?? { models: [] };
 	}
 	/**
+	* The model price table the composer prices an in-progress session with.
+	* Static vendored data (the official pricing page's rates), served Host-side
+	* so the browser bundle never carries a copy that could drift from the
+	* snapshot, and so a price update reaches an open page without a rebuild.
+	*/
+	async prices() {
+		return (this.deps.prices ?? modelPriceTable)();
+	}
+	/**
 	* Start (or rejoin) a browser-login attempt and return its fresh status —
 	* `waiting` carrying the Studio URL. Rejects when the flow cannot start
 	* (no free loopback port, disposed plugin); the Gateway folds the throw
@@ -3268,6 +4434,7 @@ function applyUsageRemote(ctx, deps) {
 			invocations: [
 				...USAGE_HOST_CONTRIBUTION.invocations,
 				MODELS_DESCRIPTOR,
+				PRICES_DESCRIPTOR,
 				...LOGIN_DESCRIPTORS
 			]
 		});
@@ -4370,6 +5537,7 @@ function readModelVisibility(raw) {
 	return entries.length === 0 ? void 0 : Object.fromEntries(entries);
 }
 function apply(ctx, config) {
+	installCostProjection(ctx);
 	let current = () => config;
 	let lastRaw;
 	let lastGood;
diff --git a/lib/index.js.map b/lib/index.js.map
index 5e7b919..0ecbf8b 100644
--- a/lib/index.js.map
+++ b/lib/index.js.map
@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["record","stringField","reject","createNetServer","createHttpServer"],"sources":["../src/accounts.ts","../src/capabilities.ts","../src/adapter.ts","../src/command-locales.ts","../src/commands.ts","../src/wire-shared.ts","../src/usage-wire.ts","../src/login-wire.ts","../src/usage-remote.ts","../src/login.ts","../src/web-search.ts","../src/tui-settings.ts","../src/index.ts"],"sourcesContent":["/**\n * Multi-account pool for the Command Code provider (host side).\n *\n * One Command Code subscription (e.g. the Go plan's 5-hour window) is\n * metered; a user with several subscriptions wants a request that hits one\n * account's limit to continue on the next account without a visible failure.\n * This module owns that rotation:\n *\n *   - {@link CommandCodeAccountPool.resolveKey} hands out the first account\n *     whose key is not currently marked exhausted — or, when the request's\n *     model matches a {@link CommandCodeModelAccountRule} and that account is\n *     usable, the routed account — resolving each slot's key lazily (literal\n *     config key → credential seam → launch environment → the official CLI\n *     auth file for the default slot only).\n *   - {@link CommandCodeAccountPool.markRejected} records a 429 (rate limit,\n *     window unknown) or 401 (invalid key, disabled until the config changes)\n *     against the exact API key, so several slots sharing one key share one\n *     state.\n *   - When every account is marked, the pool probes each key's\n *     `/alpha/billing/credits` window limits (through the injected\n *     {@link CommandCodeAccountPoolDeps.probeWindow}): an account whose window\n *     no longer reports `exceeded` is revived, otherwise the pool throws a\n *     `RATE_LIMIT` error naming the earliest reset time.\n *\n * The pool is deliberately cordis-free (like the adapter): every host fact\n * arrives through injected thunks, so node tests can drive it directly.\n *\n * @module dsh-commandcode-provider/accounts\n */\n\nimport { LlmError } from '@deepseek-ai/dsh-llm'\nimport type { CredentialRef } from '@deepseek-ai/dsh-credentials'\n\n/**\n * Upper bound on the retry wait this pool attaches to the all-exhausted\n * `RATE_LIMIT` error. Must equal the `backoff.maxDelayMs` in the adapter's\n * `providerRetryPolicy` (which imports it from here): dsh-llm-retry honors a\n * provider-specified wait verbatim only at or below that cap — in normal mode\n * a LONGER attached wait makes the executor abandon the retry entirely\n * instead of falling back to local backoff, which would turn \"poll until the\n * window opens\" into \"fail now\".\n */\nexport const RETRY_MAX_DELAY_MS = 900_000\n\n/** One extra account's raw configuration (composition config or settings). */\nexport interface CommandCodeAccountConfig {\n  /** Display label shown in the usage dashboard and settings page. */\n  label?: string\n  /** Credential reference (environment-variable style name) holding this account's API key. */\n  apiKeyEnv?: string\n  /** Literal API key (composition config only; never stored in settings). */\n  apiKey?: string\n}\n\n/** One account slot after config normalization. */\nexport interface CommandCodeAccountSlot {\n  /** Stable id: `default` for the implicit first account, `account-N` for extras. */\n  id: string\n  /** Display label (user-provided or generated). */\n  label: string\n  /** Credential reference resolved through the seam; undefined for literal-only slots. */\n  ref?: CredentialRef | undefined\n  /** Literal key from composition config. */\n  literal?: string | undefined\n  /** Whether the official CLI auth file may back this slot (default slot only). */\n  allowAuthFile: boolean\n}\n\n/** Why a key stopped serving requests. */\nexport type AccountRejection = 'rate-limit' | 'invalid-credential'\n\n/** One key's rotation state. */\nexport interface CommandCodeAccountState {\n  kind:\n    /** Marked by a 429; the window's reset time is unknown until probed. */\n    | 'unknown'\n    /** Probed (or marked with a known reset): unusable until `until` (millis). */\n    | 'cooldown'\n    /** Marked by a 401: skipped until the stored credential changes. */\n    | 'disabled'\n  /** Human-readable reason for the mark (e.g. `rate limited (429)`). */\n  reason: string\n  /** Cooldown end in millis; 0 for the other kinds. */\n  until: number\n}\n\n/** A slot paired with its resolved key (both pool-internal and UI-facing). */\nexport interface ResolvedAccount {\n  slot: CommandCodeAccountSlot\n  key: string\n  /** The key's current rotation state; undefined means usable. */\n  state: CommandCodeAccountState | undefined\n}\n\n/** Five-hour window facts probed from `/alpha/billing/credits`. */\nexport interface FiveHourWindowProbe {\n  exceeded: boolean\n  resetAt: number\n}\n\n/** Everything the pool needs from the host; all seams are injected. */\nexport interface CommandCodeAccountPoolDeps {\n  /** The current account slots, re-read per resolution so settings changes apply live. */\n  slots(): readonly CommandCodeAccountSlot[]\n  /** Resolve one credential reference through the credentials service or the launch environment. */\n  resolveRef(ref: CredentialRef): Promise<string | undefined>\n  /** The official CLI auth-file key (`~/.commandcode/auth.json`); default slot only. */\n  authFileKey(): string | undefined\n  /** Probe one key's five-hour window; undefined when the probe itself failed. */\n  probeWindow(apiKey: string): Promise<FiveHourWindowProbe | undefined>\n  /**\n   * The manually selected account (a slot id, e.g. `default` or an extra's\n   * credential reference), re-read per resolution. The preferred account\n   * serves whenever it is usable; an unknown id or an exhausted preferred\n   * account falls back to the first usable slot.\n   */\n  preferredId?(): string | undefined\n  /**\n   * Model → account routing rules, re-read per resolution so settings changes\n   * apply live. Each rule lists catalog model ids (see\n   * {@link CommandCodeModelAccountRule}) to an account slot id. When the\n   * request's model matches a rule and that account is usable, it serves\n   * before the preferred/rotation selection; an unusable routed account falls\n   * back to the normal selection (the router is a hint, never a hard gate).\n   */\n  modelAccountRules?(): readonly CommandCodeModelAccountRule[]\n}\n\n/**\n * One \"route these models to that account\" rule. `models` lists catalog ids\n * (`deepseek/deepseek-v4-pro`, …); `account` is a slot id (`default` or an\n * extra account's credential reference). A request whose model id is in the\n * list routes to that account. The first matching rule in list order wins.\n */\nexport interface CommandCodeModelAccountRule {\n  /** Catalog model ids to match against the request's model. */\n  models: string[]\n  /** Account slot id to prefer for matching models. */\n  account: string\n}\n\n/** A labeled, human-readable clock reading for error messages. */\nfunction clockLabel(ms: number): string {\n  return new Date(ms).toLocaleString()\n}\n\n/**\n * Whether an account with this rotation state can serve a request right now.\n * `undefined` (never rejected) is usable; a cooldown becomes usable again\n * once its reset time passes; `unknown` (429, reset unprobed) and\n * `disabled` (401) are not.\n */\nexport function accountUsable(state: CommandCodeAccountState | undefined): boolean {\n  if (state === undefined) return true\n  if (state.kind === 'cooldown') return state.until > 0 && Date.now() >= state.until\n  return false\n}\n\n/**\n * Pick the account that should serve now: the manually preferred slot when it\n * is usable, otherwise the first usable account in rotation order; undefined\n * when no account is usable. Shared by the pool (request path) and the plugin\n * entry (the usage view's active badge) so both always agree.\n */\nexport function selectActiveAccount(\n  accounts: readonly ResolvedAccount[],\n  preferredId: string | undefined,\n): ResolvedAccount | undefined {\n  const usable = accounts.filter((account) => accountUsable(account.state))\n  if (preferredId !== undefined) {\n    const preferred = usable.find((account) => account.slot.id === preferredId)\n    if (preferred !== undefined) return preferred\n  }\n  return usable[0]\n}\n\n/**\n * The first routing rule whose model list contains the request's model id.\n * Undefined when no rule matches.\n */\nexport function matchModelRule(\n  model: string,\n  rules: readonly CommandCodeModelAccountRule[] | undefined,\n): CommandCodeModelAccountRule | undefined {\n  if (model === '' || rules === undefined || rules.length === 0) return undefined\n  for (const rule of rules) {\n    if (rule.models.includes(model)) return rule\n  }\n  return undefined\n}\n\n/**\n * The routed account for a request's model: the first usable account whose\n * slot id matches the first matching rule's target. Undefined when no rule\n * matches or the routed account is not usable (the caller then falls back to\n * the normal preferred/rotation selection).\n */\nexport function selectAccountForModel(\n  accounts: readonly ResolvedAccount[],\n  model: string,\n  rules: readonly CommandCodeModelAccountRule[] | undefined,\n): ResolvedAccount | undefined {\n  const rule = matchModelRule(model, rules)\n  if (rule === undefined) return undefined\n  return accounts.find((account) => account.slot.id === rule.account && accountUsable(account.state))\n}\n\n/**\n * The account pool. Rotation state is keyed by API key (never logged), so two\n * slots resolving to the same credential share one mark, and a key changed in\n * the credentials service starts with a clean slate.\n */\nexport class CommandCodeAccountPool {\n  /** Rotation state by API key. */\n  private readonly states = new Map<string, CommandCodeAccountState>()\n  constructor(private readonly deps: CommandCodeAccountPoolDeps) {}\n\n  /**\n   * Resolve every slot's key, deduplicated by key (first slot wins). Slots\n   * without any resolvable key are omitted — they still appear in the\n   * settings page as unconfigured, they just cannot serve requests.\n   */\n  async resolvedAccounts(): Promise<ResolvedAccount[]> {\n    const out: ResolvedAccount[] = []\n    const seen = new Set<string>()\n    for (const slot of this.deps.slots()) {\n      const key = await this.resolveSlotKey(slot)\n      if (key === undefined || seen.has(key)) continue\n      seen.add(key)\n      out.push({ slot, key, state: this.states.get(key) })\n    }\n    return out\n  }\n\n  /**\n   * Every slot paired with its resolved key and rotation state — NOT\n   * deduplicated: two slots sharing one credential both appear (the usage\n   * view reports them individually), while slots without any resolvable key\n   * are omitted. The serving path uses {@link resolvedAccounts} instead.\n   */\n  async describeAccounts(): Promise<ResolvedAccount[]> {\n    const out: ResolvedAccount[] = []\n    for (const slot of this.deps.slots()) {\n      const key = await this.resolveSlotKey(slot)\n      if (key === undefined) continue\n      out.push({ slot, key, state: this.states.get(key) })\n    }\n    return out\n  }\n\n  /**\n   * Hand out the key for a request: the model-routed account when the\n   * request's model matches a rule (and that account is usable), else the\n   * manually preferred account when usable, else the first usable account in\n   * rotation order. Returns `undefined` when no account resolves any key at\n   * all (the caller then reports the missing credential). Throws\n   * `RATE_LIMIT` — naming the earliest window reset — or\n   * `INVALID_CREDENTIAL` when accounts exist but none can serve.\n   *\n   * `options.model` is the request's model id; routing rules re-read per\n   * resolution, so a settings change applies live.\n   *\n   * `options.exclude` skips one key during the probe-revival pass: the\n   * rotation hook excludes the just-rejected key so a probe that clears its\n   * window cannot re-offer the same key within the same request (the adapter\n   * refuses already-tried keys; the next request picks the revived key up).\n   */\n  async resolveKey(options?: { exclude?: string; model?: string }): Promise<{ key: string; slot: CommandCodeAccountSlot } | undefined> {\n    const accounts = await this.resolvedAccounts()\n    if (accounts.length === 0) {\n      return undefined\n    }\n    const routed = selectAccountForModel(accounts, options?.model ?? '', this.deps.modelAccountRules?.())\n    if (routed !== undefined) return this.pick(routed)\n    const preferred = this.deps.preferredId?.()\n    const chosen = selectActiveAccount(accounts, preferred)\n    if (chosen !== undefined) return this.pick(chosen)\n\n    // Every key is marked: probe the real windows before giving up. Disabled\n    // (401) keys are not probed — an invalid key stays invalid. A throwing\n    // probe counts as \"unknown\" (like a failed probe): it must not turn the\n    // all-exhausted path into a raw rejection instead of RATE_LIMIT.\n    await Promise.all(accounts.map(async (account) => {\n      if (account.state?.kind === 'disabled') return\n      if (options?.exclude !== undefined && account.key === options.exclude) return\n      let probe: FiveHourWindowProbe | undefined\n      try {\n        probe = await this.deps.probeWindow(account.key)\n      } catch {\n        return\n      }\n      if (probe === undefined) return\n      if (!probe.exceeded) {\n        this.states.delete(account.key)\n      } else {\n        this.states.set(account.key, {\n          kind: 'cooldown',\n          reason: account.state?.reason ?? 'rate limited (429)',\n          until: probe.resetAt,\n        })\n      }\n    }))\n\n    // Re-resolve once: the probe pass above may have revived keys (fresh\n    // states), and both the revival check and the error classification read\n    // the same post-probe snapshot. (Each resolvedAccounts() re-runs the\n    // async seams, so two calls — not three — is the minimum here.)\n    const latest = await this.resolvedAccounts()\n    const revived = selectActiveAccount(latest, preferred)\n    if (revived !== undefined) return this.pick(revived)\n\n    const disabled = latest.filter((account) => account.state?.kind === 'disabled')\n    if (disabled.length === latest.length) {\n      // Bilingual: the harness UI renders this message verbatim inside its\n      // (already localized) retry/turn-error chrome, so both languages ride\n      // in one string — English first, then the Chinese reading.\n      throw new LlmError(\n        `llm-commandcode: every configured Command Code account (${latest.length}) was rejected with 401`\n          + ' — check the stored API keys (Models page / settings) or the auth file'\n          + `；已配置的 ${latest.length} 个 Command Code 账户密钥均被拒绝（401）`\n          + '——请在设置页检查存储的 API 密钥，或重新运行 command-code login',\n        'INVALID_CREDENTIAL',\n      )\n    }\n    const resets = latest\n      .map((account) => account.state)\n      .filter((state): state is CommandCodeAccountState => state !== undefined && state.kind === 'cooldown' && state.until > 0)\n      .map((state) => state.until)\n    const earliest = resets.length > 0 ? Math.min(...resets) : 0\n    // Hand dsh-llm-retry the exact wait until the earliest known reset so the\n    // retry policy sleeps through the window instead of polling at its\n    // backoff cadence. Capped at RETRY_MAX_DELAY_MS: the executor honors a\n    // provider wait verbatim only at or below the policy's maxDelayMs — a\n    // LONGER attached wait makes it abandon the retry entirely (normal mode),\n    // which would turn \"poll until the window opens\" into \"fail now\". Longer\n    // resets simply ride the capped local backoff and the probe revival.\n    const wait = earliest > 0 ? Math.max(1000, earliest - Date.now()) : 0\n    throw new LlmError(\n      `llm-commandcode: all ${latest.length} Command Code account(s) have exhausted their usage window`\n        + (earliest > 0 ? `; the earliest window resets at ${clockLabel(earliest)}` : '')\n        + ' — requests will succeed again after the reset (or add another account)'\n        + `；已用尽全部 ${latest.length} 个 Command Code 账户的用量窗口`\n        + (earliest > 0 ? `，最早的重置时间为 ${clockLabel(earliest)}` : '')\n        + '——窗口重置后请求会自动恢复（也可以添加更多账户）',\n      'RATE_LIMIT',\n      wait > 0 && wait <= RETRY_MAX_DELAY_MS ? { providerRetryAfterMs: wait } : undefined,\n    )\n  }\n\n  /**\n   * Record a rejection against one key. `rate-limit` (429) marks the key\n   * exhausted with an unknown reset (probed lazily at the next resolution\n   * once every account is marked); `invalid-credential` (401) disables the\n   * key until the stored credential changes.\n   */\n  markRejected(apiKey: string, rejection: AccountRejection): void {\n    if (rejection === 'invalid-credential') {\n      this.states.set(apiKey, { kind: 'disabled', reason: 'invalid API key (401)', until: 0 })\n    } else {\n      this.states.set(apiKey, { kind: 'unknown', reason: 'rate limited (429)', until: 0 })\n    }\n  }\n\n  /**\n   * One account's key: literal → credential seam → auth file (default slot).\n   *\n   * Every source is normalized here, at the single point where a slot's key\n   * enters the pool. The adapter sends the key through the harness's\n   * `assertUsableApiKey()`, which trims it — a stored key from the credentials\n   * seam, a `.env` line, or a shell export all pick up surrounding whitespace\n   * — and reports that trimmed form back to `markRejected()`. Returning the\n   * raw value would file every 429/401 mark under a key no later lookup can\n   * find: rotation would re-offer the same account, the account card would show\n   * no mark, and the usage endpoints would 401 while chat kept working.\n   * Normalizing once makes resolution, probing, marking, and the request path\n   * agree on one string.\n   */\n  private async resolveSlotKey(slot: CommandCodeAccountSlot): Promise<string | undefined> {\n    if (slot.literal !== undefined) {\n      const literal = normalizeResolvedKey(slot.literal)\n      if (literal !== undefined) return literal\n    }\n    if (slot.ref !== undefined) {\n      const hit = await this.deps.resolveRef(slot.ref)\n      if (hit !== undefined) {\n        const resolved = normalizeResolvedKey(hit)\n        if (resolved !== undefined) return resolved\n      }\n    }\n    if (slot.allowAuthFile) {\n      const fromFile = this.deps.authFileKey()\n      if (fromFile !== undefined) {\n        const fileKey = normalizeResolvedKey(fromFile)\n        if (fileKey !== undefined) return fileKey\n      }\n    }\n    return undefined\n  }\n\n  /** Hand out the chosen account's key. */\n  private pick(account: ResolvedAccount): { key: string; slot: CommandCodeAccountSlot } {\n    return { key: account.key, slot: account.slot }\n  }\n}\n\n/**\n * Normalize one resolved credential to the form every consumer sees. Trim\n * only: a blank-after-trim value means \"no key\" (the slot is omitted and the\n * caller reports `MISSING_CREDENTIAL`), while characters an HTTP header cannot\n * carry are left for `assertUsableApiKey()` to reject with its own message.\n */\nfunction normalizeResolvedKey(value: string): string | undefined {\n  const trimmed = value.trim()\n  return trimmed === '' ? undefined : trimmed\n}\n","/**\n * Static capability snapshot for the Command Code provider: model →\n * reasoning-effort levels, vision/thinking flags, model → minimum plan tier,\n * subscription-plan labels, deals, and hourly (peak/off-peak) pricing.\n *\n * Everything in this module is synced from official sources (the command-code\n * CLI bundle's model table and the official plan/pricing/model docs — see the\n * dsh-commandcode-upstream skill for the exact extraction procedures), and\n * changes whenever an upstream CLI release reshuffles models/plans/prices.\n * Keeping the snapshot in its own module confines those frequent sync diffs\n * here: src/adapter.ts holds only the stable wire/runtime logic and imports\n * these tables + read helpers.\n *\n * Snapshot read helpers (planLabel, dealLabel, formatContext,\n * capabilityDescription, peakPricing*, compareByPlan, modelVisibleInPlan,\n * subscriptionPlanInfo, isFreeModel) live here too — they exist only to read\n * the tables, so a sync never has to touch src/adapter.ts.\n *\n * Ported from pi-commandcode-provider (MIT); originally part of src/adapter.ts\n * and split out so upstream syncs stay reviewable.\n */\n// ---------------------------------------------------------------------------\n// Static capability snapshot (from the official command-code@1.53.0 bundled\n// model catalog, dist/cli.mjs). The Provider API does not expose reasoning\n// metadata; models omitted here let Command Code choose their reasoning\n// depth, matching the official CLI.\n// ---------------------------------------------------------------------------\n\nexport const KNOWN_EFFORTS: Readonly<Record<string, readonly string[]>> = {\n  // Re-verified against the authoritative command-code@1.53.0 bundled model\n  // table (dist/cli.mjs, the provider effort map): exactly these models carry\n  // selectable efforts. Models marked 'reasoning:!0' without efforts\n  // (e.g. Tencent Hy3, GLM-5/5.1/5.2-Fast)\n  // think automatically and are absent here - the CLI omits\n  // 'reasoning_effort' for them, so the picker must not offer a selector. Do\n  // NOT add entries from the OAuth provider tables (anthropic/openai) - only\n  // the Provider-API table is authoritative for this plugin's route.\n  // `stealth/ox-alpha` (['low', 'high', 'max']) was removed in\n  // command-code@1.34.0 when its preview ended; its successor,\n  // `z-ai/glm-5.3-flash`, ships the same effort set.\n  // `tencent/hy4-preview` gained ['low', 'medium', 'high'] in\n  // command-code@1.38.0 (it previously thought automatically with no\n  // selectable levels).\n  // `moonshotai/Kimi-K3` gained ['low', 'high', 'max'] in command-code@1.39.3\n  // (it previously thought automatically with no selectable levels).\n  // `claude-fable-5-1` (Claude Fable 5.1, command-code@1.40.0) ships the same\n  // five-level effort set as its predecessor `claude-fable-5` and is served\n  // by the Provider API (the Provider/Max tier; see KNOWN_PLANS).\n  // command-code@1.41.0 added `Qwen/Qwen3.8-Max-0902` and command-code@1.43.0\n  // added `google/gemini-3.8-flash`; both carry effort sets matching their\n  // existing family members. command-code@1.45.0 added selectable\n  // ['low', 'medium', 'high', 'xhigh'] efforts for the Muse Spark family\n  // (1.1, 1.2, 1.2-contributor, 1.3, 1.3-contributor); they previously reasoned\n  // automatically with no selectable levels. command-code@1.48.0 added the\n  // `max` effort tier to Muse Spark 1.3 (previously ['low','medium','high',\n  // 'xhigh']); 1.3 and 1.3-contributor now ship different effort sets.\n  // command-code@1.49.0 added `gpt-6-astra` with the five-level effort set.\n  // command-code@1.51.0 briefly added `deepseek/deepseek-v4.1-flash-beta`\n  // (text+image, reasoning without selectable efforts, hidden behind a\n  // 2026-09-10 expiry gate); command-code@1.51.2 removed it from the bundle\n  // entirely, so no snapshot entry is needed.\n  'Qwen/Qwen3.8-Max': ['low', 'medium', 'xhigh'],\n  'Qwen/Qwen3.8-Max-0902': ['low', 'medium', 'xhigh'],\n  'Qwen/Qwen3.8-27B': ['low', 'medium', 'xhigh'],\n  'Qwen/Qwen3.8-Flash': ['low', 'medium', 'xhigh'],\n  'claude-fable-5-1': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-fable-5': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-opus-4-7': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-opus-4-8': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-opus-5': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-sonnet-4-6': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-sonnet-5': ['low', 'medium', 'high', 'xhigh', 'max'],\n  // `deepseek/deepseek-v4-flash-fast` joined in command-code@1.39.0\n  // (\"Add DeepSeek V4 Flash Fast\"); 1.39.1 dropped `medium` for it, and\n  // the 1.39.2 table ships ['low', 'high', 'max'].\n  'deepseek/deepseek-v4-flash-fast': ['low', 'high', 'max'],\n  // command-code@1.53.0 added DeepSeek V4.1 Flash (\"Add new\n  // deepseek/deepseek-v4.1-flash model\"); the bundle ships\n  // ['low', 'high', 'max'] for it.\n  'deepseek/deepseek-v4.1-flash': ['low', 'high', 'max'],\n  'deepseek/deepseek-v4-flash': ['high', 'max'],\n  'deepseek/deepseek-v4-flash-vision-exp': ['high', 'max'],\n  'deepseek/deepseek-v4-pro': ['high', 'max'],\n  'google/gemini-3.1-flash-lite': ['low', 'medium', 'high'],\n  'google/gemini-3.5-flash': ['low', 'medium', 'high'],\n  'google/gemini-3.5-flash-lite': ['low', 'medium', 'high'],\n  'google/gemini-3.6-flash': ['low', 'medium', 'high'],\n  'google/gemini-3.7-flash': ['low', 'medium', 'high'],\n  'gpt-5.3-codex': ['low', 'medium', 'high', 'xhigh'],\n  'gpt-5.4': ['low', 'medium', 'high', 'xhigh'],\n  'gpt-5.4-mini': ['low', 'medium', 'high'],\n  'gpt-5.5': ['low', 'medium', 'high', 'xhigh'],\n  'gpt-5.6-luna': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'gpt-5.6-sol': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'gpt-5.6-terra': ['low', 'medium', 'high', 'xhigh', 'max'],\n  // `moonshotai/Kimi-K3` gained selectable ['low', 'high', 'max'] efforts in\n  // command-code@1.39.3 (\"Add low, high, and max reasoning effort support for\n  // Kimi K3\"); it previously reasoned automatically with no levels.\n  'moonshotai/Kimi-K3': ['low', 'high', 'max'],\n  // command-code@1.43.0 added Gemini 3.8 Flash with the same three-level\n  // effort set as the rest of the Gemini Flash family.\n  'google/gemini-3.8-flash': ['low', 'medium', 'high'],\n  'sakana/fugu-ultra': ['high', 'xhigh'],\n  'tencent/hy4-preview': ['low', 'medium', 'high'],\n  'xai/grok-4.5': ['low', 'medium', 'high'],\n  'xai/grok-4.6': ['low', 'medium', 'high', 'xhigh'],\n  'z-ai/glm-5.3-flash': ['low', 'high', 'max'],\n  'zai-org/GLM-5.2': ['high', 'max'],\n  'zai-org/GLM-5.3': ['low', 'high', 'max'],\n  // Muse Spark family (command-code@1.45.0: \"Reasoning levels for Muse\n  // Spark 1.3\") gained selectable ['low', 'medium', 'high', 'xhigh'] efforts\n  // — they previously reasoned automatically with no levels.\n  'meta/muse-spark-1.1': ['low', 'medium', 'high', 'xhigh'],\n  'meta/muse-spark-1.2': ['low', 'medium', 'high', 'xhigh'],\n  'meta/muse-spark-1.2-contributor': ['low', 'medium', 'high', 'xhigh'],\n  // command-code@1.48.0 added `max` to Muse Spark 1.3; 1.3-contributor keeps\n  // the four-level set.\n  'meta/muse-spark-1.3': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'meta/muse-spark-1.3-contributor': ['low', 'medium', 'high', 'xhigh'],\n  // command-code@1.49.0 added GPT-6 Astra with the full five-level effort set.\n  'gpt-6-astra': ['low', 'medium', 'high', 'xhigh', 'max'],\n  // command-code@1.51.3 gave MiniMax M3 selectable ['low', 'medium', 'high']\n  // efforts (it previously reasoned automatically with no levels and lived in\n  // KNOWN_THINKING_MODELS; the hidden `minimax/minimax-m3-free` sibling gained\n  // the same set in the bundle). No CLI changelog entry exists for 1.51.1–1.51.3\n  // yet — this was read from the 1.51.3 bundled model table.\n  // command-code@1.52.0 added `inclusionai/ling-3.0-flash-sante:free` with\n  // automatic reasoning and no selectable efforts, so the effort map is\n  // unchanged by that release.\n  'MiniMaxAI/MiniMax-M3': ['low', 'medium', 'high'],\n}\n\n/**\n * Models whose Capabilities include Vision, per the official Command Code\n * model registry (`https://commandcode.ai/docs/reference/cli/models`, generated\n * from the same registry as `cmd --list-models` / the `/model` picker).\n *\n * The Provider API does not expose modality metadata, so this snapshot is the\n * source of truth for image-input gating. Command Code's own CLI falls back to\n * a client-side VISION side-call for text-only models; this adapter does not\n * reproduce that interactive feature, so images sent to a model outside this\n * list are refused loudly (`UNSUPPORTED_CONTENT`) instead of being dropped or\n * sent to a model that cannot read them.\n *\n * Keep in sync with the official registry when new models ship (see the\n * dsh-commandcode-upstream skill).\n */\nexport const KNOWN_IMAGE_MODELS: ReadonlySet<string> = new Set([\n  'MiniMaxAI/MiniMax-M3',\n  'Qwen/Qwen3.6-Plus',\n  'Qwen/Qwen3.7-Flash',\n  'Qwen/Qwen3.7-Plus',\n  'Qwen/Qwen3.8-27B',\n  'Qwen/Qwen3.8-Flash',\n  'Qwen/Qwen3.8-Max',\n  // command-code@1.41.0 added Qwen 3.8 Max 0902; Vision per the official\n  // registry (\"Text input, Vision, Reasoning\") and the CLI's\n  // inputModalities:[\"text\",\"image\"].\n  'Qwen/Qwen3.8-Max-0902',\n  'claude-fable-5-1',\n  'claude-fable-5',\n  'claude-haiku-4-5-20251001',\n  'claude-opus-4-7',\n  'claude-opus-4-8',\n  'claude-opus-5',\n  'claude-sonnet-4-6',\n  'claude-sonnet-5',\n  'deepseek/deepseek-v4-flash-vision-exp',\n  // command-code@1.53.0 added DeepSeek V4.1 Flash; Vision per the official\n  // registry (\"Text input, Vision, Reasoning\") and the CLI's\n  // inputModalities:[\"text\",\"image\"].\n  'deepseek/deepseek-v4.1-flash',\n  'google/gemini-3.1-flash-lite',\n  'google/gemini-3.5-flash',\n  'google/gemini-3.5-flash-lite',\n  'google/gemini-3.6-flash',\n  'google/gemini-3.7-flash',\n  // command-code@1.43.0 added Gemini 3.8 Flash; Vision per the official\n  // registry and the CLI's inputModalities:[\"text\",\"image\"].\n  'google/gemini-3.8-flash',\n  'gpt-5.3-codex',\n  'gpt-5.4',\n  'gpt-5.4-mini',\n  'gpt-5.5',\n  'gpt-5.6-luna',\n  'gpt-5.6-sol',\n  'gpt-5.6-terra',\n  // command-code@1.49.0 added GPT-6 Astra; Vision per the official registry\n  // and the CLI's inputModalities:[\"text\",\"image\"].\n  'gpt-6-astra',\n  // command-code@1.44.0 added Muse Spark 1.3 and its Contributor sibling;\n  // both are Vision per the official registry and the CLI's\n  // inputModalities:[\"text\",\"image\"].\n  'meta/muse-spark-1.1',\n  'meta/muse-spark-1.2',\n  'meta/muse-spark-1.2-contributor',\n  'meta/muse-spark-1.3',\n  'meta/muse-spark-1.3-contributor',\n  'moonshotai/Kimi-K2.5',\n  'moonshotai/Kimi-K2.6',\n  'moonshotai/Kimi-K2.7-Code',\n  'moonshotai/Kimi-K2.7-Code-Highspeed',\n  'moonshotai/Kimi-K3',\n  'sakana/fugu-ultra',\n  'stepfun/Step-3.7-Flash',\n  'thinkingmachines/inkling',\n  'thinkingmachines/inkling-small',\n  'xai/grok-4.5',\n  // command-code@1.47.0 marked Grok 4.6 vision-capable (it was text-only in\n  // 1.46.0); re-verified present in the 1.53.0 bundle's\n  // inputModalities:[\"text\",\"image\"] entries.\n  'xai/grok-4.6',\n  'xiaomi/mimo-v2.5',\n  'z-ai/glm-5.3-flash',\n])\n\n/**\n * Models the official CLI's model table (command-code@1.53.0) marks\n * `reasoning:!0` but defines no selectable `reasoning_effort` levels — they\n * think automatically, with Command Code driving the depth. This is the\n * authoritative \"thinks, effort not adjustable\" set: `KNOWN_EFFORTS` (which\n * mirrors the CLI's effort map exactly) stays the sole source for selectable\n * effort levels, and this snapshot is not surfaced in the picker's compact\n * description — it exists for programmatic consumers.\n *\n * Source: the command-code@1.53.0 bundled model table (dist/cli.mjs),\n * cross-checked with https://commandcode.ai/docs/reference/cli/models.\n * (`stealth/ox-alpha` left this set in command-code@1.32.1, which gave it\n * selectable `['low', 'high', 'max']` efforts; the preview then ended in\n * 1.34.0, removing the model from the catalog entirely. `tencent/hy4-preview`\n * joined this set in command-code@1.37.0 — reasoning:!0, no efforts, 1M\n * context, routed through OpenRouter — then gained selectable\n * `['low', 'medium', 'high']` efforts in command-code@1.38.0 and moved to\n * `KNOWN_EFFORTS`. `moonshotai/Kimi-K3` followed the same path in\n * command-code@1.39.3 — it gained `['low', 'high', 'max']` efforts and moved\n * to `KNOWN_EFFORTS`. command-code@1.42.0 added `meituan/LongCat-2.0:free`\n * (reasoning:!0, no efforts). command-code@1.45.0 gave the Muse Spark family\n * (1.1, 1.2, 1.2-contributor, 1.3, 1.3-contributor) selectable\n * `['low', 'medium', 'high', 'xhigh']` efforts — they moved to `KNOWN_EFFORTS`.\n * command-code@1.51.3 gave `MiniMaxAI/MiniMax-M3` selectable\n * `['low', 'medium', 'high']` efforts — it moved to `KNOWN_EFFORTS` too.\n * command-code@1.52.0 added `inclusionai/ling-3.0-flash-sante:free`\n * (reasoning:!0, no efforts).)\n * command-code@1.53.0 added `deepseek/deepseek-v4.1-flash` with selectable\n * ['low', 'high', 'max'] efforts, so it lives in `KNOWN_EFFORTS`, not here.)\n * Keep in sync via the dsh-commandcode-upstream skill.\n */\nexport const KNOWN_THINKING_MODELS: ReadonlySet<string> = new Set([\n  'Qwen/Qwen3.6-Max-Preview',\n  'Qwen/Qwen3.6-Plus',\n  'Qwen/Qwen3.7-Flash',\n  'Qwen/Qwen3.7-Max',\n  'Qwen/Qwen3.7-Plus',\n  'moonshotai/Kimi-K2.7-Code',\n  'moonshotai/Kimi-K2.7-Code-Highspeed',\n  'stepfun/Step-3.5-Flash',\n  'stepfun/Step-3.7-Flash',\n  'tencent/hy3-paid',\n  'nvidia/nemotron-3-ultra-550b-a55b',\n  'thinkingmachines/inkling',\n  'thinkingmachines/inkling-small',\n  'poolside/laguna-s-2.1-free',\n  // LongCat 2.0 (command-code@1.42.0, Meituan's trillion-parameter coding\n  // model, 1M context) is free and text-only, with automatic reasoning.\n  'meituan/LongCat-2.0:free',\n  // Ling 3.0 Flash Sante (command-code@1.52.0, 262K context, text-only) is\n  // free and reasons automatically with no selectable efforts.\n  'inclusionai/ling-3.0-flash-sante:free',\n])\n\n/**\n * The minimum subscription plan a model is included in, per the official plan\n * pages (`/docs/plans/go`, `/docs/plans/goat`, `/docs/plans/pro`, `/docs/plans/max`\n * and `/docs/resources/pricing-limits`). Each plan's model list is a superset of\n * the one below it: Go ⊂ GOAT ⊂ Pro ⊂ Provider/Max. Models absent from every\n * plan list (Claude Opus/Fable, Fugu Ultra) are Provider-tier.\n * `claude-fable-5-1` (Claude Fable 5.1, added in command-code@1.40.0) is\n * Provider/Max-tier exactly like `claude-fable-5` — its availability matrix on\n * the official plan/pricing pages grants individual-provider/max/ultra and\n * teams-pro only, and the CLI's plan-access map blocks it on Go/GOAT/Pro.\n * command-code@1.41.0 added `Qwen/Qwen3.8-Max-0902` (Go) and 1.42.0 added\n * `meituan/LongCat-2.0:free` (Go, free promo); command-code@1.43.0 added\n * `google/gemini-3.8-flash` (GOAT) and 1.44.0 added `meta/muse-spark-1.3`\n * (GOAT) plus its Contributor sibling (Go); command-code@1.52.0 added the\n * free `inclusionai/ling-3.0-flash-sante:free` (Go); command-code@1.53.0\n * added `deepseek/deepseek-v4.1-flash` (Go).\n *\n * The Provider API exposes no plan metadata, so this snapshot is the source of\n * truth for the picker's plan annotation — it answers \"which plan do I need to\n * actually use this model?\" at a glance. Plan labels use the official tier\n * names (`Go`, `GOAT`, `Pro`, `Provider`), with `Max` implying Provider.\n *\n * Keep in sync with the official plan pages when they change (see the\n * dsh-commandcode-upstream skill).\n */\nexport const KNOWN_PLANS: Readonly<Record<string, string>> = {\n  // --- Go (44) ---\n  'MiniMaxAI/MiniMax-M2.5': 'go',\n  'MiniMaxAI/MiniMax-M2.7': 'go',\n  'MiniMaxAI/MiniMax-M3': 'go',\n  'Qwen/Qwen3.6-Max-Preview': 'go',\n  'Qwen/Qwen3.6-Plus': 'go',\n  'Qwen/Qwen3.7-Flash': 'go',\n  'Qwen/Qwen3.7-Max': 'go',\n  'Qwen/Qwen3.7-Plus': 'go',\n  'Qwen/Qwen3.8-27B': 'go',\n  'Qwen/Qwen3.8-Flash': 'go',\n  'Qwen/Qwen3.8-Max': 'go',\n  // command-code@1.41.0 added Qwen 3.8 Max 0902; it sits on the Go plan page.\n  'Qwen/Qwen3.8-Max-0902': 'go',\n  // command-code@1.39.0 added DeepSeek V4 Flash Fast; it is a Go-tier model\n  // alongside the rest of the DeepSeek V4 family.\n  'deepseek/deepseek-v4-flash-fast': 'go',\n  // command-code@1.53.0 added DeepSeek V4.1 Flash (\"Add new\n  // deepseek/deepseek-v4.1-flash model\"); the pricing page's embedded\n  // availability grants it every plan including Go, and the Go/GOAT/Pro/Max\n  // plan pages all list it.\n  'deepseek/deepseek-v4.1-flash': 'go',\n  'deepseek/deepseek-v4-flash': 'go',\n  'deepseek/deepseek-v4-flash-vision-exp': 'go',\n  'deepseek/deepseek-v4-pro': 'go',\n  'gpt-5.6-luna': 'go',\n  // command-code@1.42.0 added Meituan's LongCat 2.0 as a free Go-tier model\n  // (\"LongCat 2.0 free model\" — 100% off while it lasts, every plan).\n  'meituan/LongCat-2.0:free': 'go',\n  // command-code@1.52.0 added Ling 3.0 Flash Sante as a free Go-tier model\n  // (\"free, up to 100 requests a day\", every plan) — the successor to the\n  // retired `inclusionai/ling-3.0-flash-free` promo.\n  'inclusionai/ling-3.0-flash-sante:free': 'go',\n  // command-code@1.44.0 added Muse Spark 1.3 Contributor on every plan\n  // including Go, like its 1.2 Contributor sibling.\n  'meta/muse-spark-1.2-contributor': 'go',\n  'meta/muse-spark-1.3-contributor': 'go',\n\n  'moonshotai/Kimi-K2.5': 'go',\n  'moonshotai/Kimi-K2.6': 'go',\n  'moonshotai/Kimi-K2.7-Code': 'go',\n  'moonshotai/Kimi-K2.7-Code-Highspeed': 'go',\n  'moonshotai/Kimi-K3': 'go',\n  'nvidia/nemotron-3-ultra-550b-a55b': 'go',\n  'poolside/laguna-s-2.1-free': 'go',\n  'stepfun/Step-3.5-Flash': 'go',\n  'stepfun/Step-3.7-Flash': 'go',\n  'tencent/hy3-paid': 'go',\n  'tencent/hy4-preview': 'go',\n  'thinkingmachines/inkling': 'go',\n  'thinkingmachines/inkling-small': 'go',\n  'xai/grok-4.5': 'go',\n  'xiaomi/mimo-v2.5': 'go',\n  'xiaomi/mimo-v2.5-pro': 'go',\n  'z-ai/glm-5.3-flash': 'go',\n  'zai-org/GLM-5': 'go',\n  'zai-org/GLM-5.1': 'go',\n  'zai-org/GLM-5.2': 'go',\n  'zai-org/GLM-5.2-Fast': 'go',\n  'zai-org/GLM-5.3': 'go',\n  // --- GOAT (6 more) ---\n  'google/gemini-3.7-flash': 'goat',\n  // command-code@1.43.0 added Gemini 3.8 Flash; the pricing page marks it\n  // \"Available on GOAT and above\", like the rest of the Gemini Flash family.\n  'google/gemini-3.8-flash': 'goat',\n  'gpt-5.6-sol': 'goat',\n  'meta/muse-spark-1.2': 'goat',\n  // command-code@1.44.0 added Muse Spark 1.3; the pricing page marks it\n  // \"Available on GOAT and above\", like the 1.2/1.1 models.\n  'meta/muse-spark-1.3': 'goat',\n  'xai/grok-4.6': 'goat',\n  // --- Pro (13 more) ---\n  'claude-haiku-4-5-20251001': 'pro',\n  'claude-sonnet-4-6': 'pro',\n  'claude-sonnet-5': 'pro',\n  'google/gemini-3.1-flash-lite': 'pro',\n  'google/gemini-3.5-flash': 'pro',\n  'google/gemini-3.5-flash-lite': 'pro',\n  'google/gemini-3.6-flash': 'pro',\n  'gpt-5.3-codex': 'pro',\n  'gpt-5.4': 'pro',\n  'gpt-5.4-mini': 'pro',\n  'gpt-5.5': 'pro',\n  'gpt-5.6-terra': 'pro',\n  'meta/muse-spark-1.1': 'pro',\n  // --- Provider / Max (7) ---\n  'claude-fable-5-1': 'provider',\n  'claude-fable-5': 'provider',\n  'claude-opus-4-7': 'provider',\n  'claude-opus-4-8': 'provider',\n  'claude-opus-5': 'provider',\n  // command-code@1.49.0 added GPT-6 Astra; per the pricing page it sits on\n  // Max (Provider/Max tier).\n  'gpt-6-astra': 'provider',\n  'sakana/fugu-ultra': 'provider',\n}\n\n/** Official display labels for each plan tier. */\nexport const PLAN_LABELS: Readonly<Record<string, string>> = {\n  go: 'Go',\n  goat: 'GOAT',\n  pro: 'Pro',\n  provider: 'Provider',\n  max: 'Max',\n}\n\n/**\n * Plan-tier sort weights, low to high. Models outside the snapshot (unknown\n * plans) sort after every known tier, keeping known models predictable.\n */\nexport const PLAN_ORDER: Readonly<Record<string, number>> = {\n  go: 0,\n  goat: 1,\n  pro: 2,\n  provider: 3,\n  max: 4,\n}\n\n/**\n * Whether a model is free (requests cost no credits), per the pricing page's\n * deals (`KNOWN_DEALS` `free: true`). Free models lead the picker regardless\n * of tier — they are usable by every account, so they are the best default\n * candidates.\n */\nexport function isFreeModel(modelId: string): boolean {\n  return KNOWN_DEALS[modelId]?.free === true\n}\n\n/**\n * Comparator for the model picker: free models first (zero credit cost, usable\n * by every account), then by plan tier (lowest first), then by model name,\n * then by id as a tiebreak. Models with no known plan sort last.\n */\nexport function compareByPlan(\n  a: { id: string; name: string },\n  b: { id: string; name: string },\n): number {\n  const freeDelta = Number(isFreeModel(b.id)) - Number(isFreeModel(a.id))\n  if (freeDelta !== 0) return freeDelta\n  const pa = PLAN_ORDER[KNOWN_PLANS[a.id] ?? ''] ?? Number.MAX_SAFE_INTEGER\n  const pb = PLAN_ORDER[KNOWN_PLANS[b.id] ?? ''] ?? Number.MAX_SAFE_INTEGER\n  if (pa !== pb) return pa - pb\n  const nameDiff = a.name.localeCompare(b.name)\n  if (nameDiff !== 0) return nameDiff\n  return a.id.localeCompare(b.id)\n}\n\n/**\n * Subscription plan table, synced from the official CLI bundle's plan maps\n * (located by the `\"individual-go\"` key in command-code@1.53.0 `dist/cli.mjs`,\n * re-verified unchanged through 1.53.0): subscription `planId`\n * prefix → display name and the plan's monthly credit total. This is the\n * account's own subscription (from `/alpha/billing/subscriptions`) — distinct\n * from {@link KNOWN_PLANS}, which maps catalog models to their minimum tier.\n *\n * `tierWeight` is plugin-added (not from the CLI maps): the plan's rank on\n * the {@link PLAN_ORDER} scale, used by the picker's plan filter\n * ({@link modelVisibleInPlan}) to hide models above the account's tier.\n */\nexport const KNOWN_SUBSCRIPTION_PLANS: Readonly<Record<string, { name: string; monthlyCredits: number; tierWeight: number }>> = {\n  'individual-go': { name: 'Go', monthlyCredits: 10, tierWeight: 0 },\n  'individual-goat': { name: 'GOAT', monthlyCredits: 70, tierWeight: 1 },\n  'individual-pro': { name: 'Pro', monthlyCredits: 30, tierWeight: 2 },\n  'individual-pro-v1': { name: 'Pro', monthlyCredits: 80, tierWeight: 2 },\n  'individual-provider': { name: 'Provider', monthlyCredits: 15, tierWeight: 3 },\n  'individual-max': { name: 'Max', monthlyCredits: 150, tierWeight: 4 },\n  'individual-ultra': { name: 'Ultra', monthlyCredits: 300, tierWeight: 4 },\n  'teams-pro': { name: 'Teams Pro', monthlyCredits: 40, tierWeight: 2 },\n}\n\n/** Plan-id prefixes, longest first — the CLI's prefix-match order. */\nconst SUBSCRIPTION_PLAN_PREFIXES = Object.keys(KNOWN_SUBSCRIPTION_PLANS).sort((a, b) => b.length - a.length)\n\n/**\n * Resolve a subscription `planId` (e.g. `individual-pro-v1`) to its display\n * name and monthly credit total, mirroring the CLI's `getPlanInfo`:\n * normalize (lowercase, `_` → `-`), then longest-prefix match so\n * `individual-pro-v1` wins over `individual-pro`. Unknown ids return\n * `undefined`.\n */\nexport function subscriptionPlanInfo(planId: string): { name: string; monthlyCredits: number; tierWeight: number } | undefined {\n  const normalized = planId.toLowerCase().replace(/_/g, '-')\n  const prefix = SUBSCRIPTION_PLAN_PREFIXES.find((candidate) => normalized.startsWith(candidate))\n  return prefix === undefined ? undefined : KNOWN_SUBSCRIPTION_PLANS[prefix]\n}\n\n/**\n * The billing facts the picker's plan filter needs, fetched by mirroring the\n * CLI's `createBilling` flow (whoami → orgId, then `/alpha/billing/subscriptions`\n * for the plan id and `/alpha/billing/credits` for the on-demand balances).\n */\nexport interface CommandCodeBillingAccess {\n  /** Account plan tier weight on the {@link PLAN_ORDER} scale; undefined when the plan is unknown. */\n  tierWeight: number | undefined\n  /**\n   * Purchased + free on-demand credit balance. The official access model\n   * (`evaluateModelAccess` in the CLI) allows every model when the account\n   * holds any on-demand credits — the plan gate only applies at zero balance.\n   */\n  onDemandCredits: number\n}\n\n/**\n * Whether the picker lists `modelId` for an account with the given billing\n * access. Fails open at every uncertainty: no billing data, an unknown plan,\n * a non-finite weight (corrupt billing fact), or a model outside\n * {@link KNOWN_PLANS} all keep the model visible — the server remains the\n * final gate (`403 MODEL_NOT_IN_PLAN`).\n */\nexport function modelVisibleInPlan(modelId: string, access: CommandCodeBillingAccess | undefined): boolean {\n  if (access === undefined) return true\n  if (access.onDemandCredits > 0) return true\n  if (access.tierWeight === undefined || !Number.isFinite(access.tierWeight)) return true\n  const tier = KNOWN_PLANS[modelId]\n  if (tier === undefined) return true\n  const weight = PLAN_ORDER[tier]\n  if (weight === undefined) return true\n  return weight <= access.tierWeight\n}\n\n/**\n * Active pricing deals per the official pricing page\n * (`/docs/resources/pricing-limits#deals`). Each entry records the model's\n * promotional label and — critically — when it expires, so the picker never\n * shows a stale discount after the plugin's snapshot has gone out of date.\n *\n * - `expiresAt` is an ISO timestamp. When it is in the past (checked at\n *   render time against `Date.now()`), the deal label is hidden until the\n *   snapshot is refreshed from the official page. `undefined` means\n *   \"no expiry\" (permanent).\n * - `free` marks models whose requests cost no credits (Laguna S 2.1), shown\n *   as a `FREE` badge; it degrades to a plain discount once the deal lapses.\n *\n * Keep in sync with the official pricing page when deals change (see the\n * dsh-commandcode-upstream skill).\n */\nexport interface KnownDeal {\n  /** Promotional label, e.g. \"50% off\" or \"2× usage\". */\n  label: string\n  /** Deal end date (ISO). `undefined` = permanent / no expiry. */\n  expiresAt?: string\n  /** Model is free (requests cost no credits). */\n  free?: boolean\n}\n\nexport const KNOWN_DEALS: Readonly<Record<string, KnownDeal>> = {\n  // Gemini 3.7 Flash's 50% off deal was retired from the official pricing\n  // page's #deals section (command-code@1.38.2 sync); the model now shows at\n  // full price.\n  'MiniMaxAI/MiniMax-M3': { label: '50% off' },\n  'xiaomi/mimo-v2.5-pro': { label: '99% off' },\n  'xiaomi/mimo-v2.5': { label: '98% off' },\n  // The MiniMax M3 / M2.7 FREE promo variants were retired in\n  // command-code@1.39.2 (\"Retire MiniMax free models\"): the official CLI hides\n  // them and the pricing page no longer lists them as free, so the free\n  // entries that shipped through 1.38.2 (with a 2026-09-05 expiry) are removed\n  // here rather than left to lapse on schedule. The paid MiniMax M3 / M2.7\n  // rows keep their own rates.\n  'poolside/laguna-s-2.1-free': { label: 'FREE', free: true },\n  // Meituan's LongCat 2.0 (command-code@1.42.0, \"LongCat 2.0 free model\") is\n  // 100% off while it lasts — a permanent-style deal (no fixed end date; the\n  // pricing page's DEAL block says \"Term: while it lasts\"). Free requests cost\n  // no credits on every plan, like Laguna S 2.1.\n  'meituan/LongCat-2.0:free': { label: 'FREE', free: true },\n  // Ling 3.0 Flash Sante (command-code@1.52.0) is free \"up to 100 requests a\n  // day\" while the promo lasts — a permanent-style deal (no fixed end date,\n  // like LongCat 2.0). Free requests cost no credits on every plan.\n  'inclusionai/ling-3.0-flash-sante:free': { label: 'FREE', free: true },\n}\n\n/**\n * Models with time-of-day (peak/off-peak) pricing, per the official pricing\n * page (`/docs/resources/pricing-limits`). Since 2026-08-16 16:00 UTC, DeepSeek\n * charges by the hour: peak hours are 01:00–04:00 and 06:00–10:00 UTC (7h per\n * weekday, full price) **Monday to Friday only**; the other 17 hours of a\n * weekday and every hour of Saturday/Sunday (UTC) are off-peak at half price.\n * The V4 Flash Vision (exp) variant (command-code@1.32.0) shares the V4 Flash\n * windows and peak prices ($0.44/$1.32) — each row's hover annotation states\n * exactly 2× that row's displayed off-peak prices. The picker shows the\n * *current* state as a compact\n * label (`Peak`/`Half`) matching the English noun style of the other markers\n * (`Image`, `FREE`), so a developer can tell at a glance whether calling the\n * model right now is cheap or expensive.\n *\n * Authoritative extraction: the pricing page embeds a model JSON array whose\n * hourly-priced entries carry a `timeOfDay` block\n * (`{ windows: \"01–04 & 06–10 UTC, Mon–Fri\", peakHoursPerDay: 7,\n * offPeakHoursPerDay: 17, peak: {...}, offPeak: {...} }`). Exactly four models\n * carry it: V4 Pro, V4 Flash, V4 Flash Vision (exp), and V4.1 Flash (added in\n * command-code@1.53.0 at $0.15/$0.60 off-peak, $0.30/$1.20 peak — the same\n * schedule as the other three).\n *\n * Extraction caution: the rendered HTML rows are a trap. Each annotation div\n * sits inside its OWN row's container, immediately before the NEXT row starts,\n * so flattening the page to text makes every annotation look like it belongs\n * to the model printed after it — that is how `deepseek/deepseek-v4-flash-fast`\n * was wrongly added here (its row is flat-priced at $0.28/$0.56/$0.07 and has\n * no `timeOfDay` block). Trust the embedded JSON's `timeOfDay` membership and\n * the 2× price relation, never the flat-text neighbor.\n *\n * Keep in sync with the official pricing page when the model set, the peak\n * windows, or the weekday rule change (see the dsh-commandcode-upstream skill).\n */\nexport const KNOWN_PEAK_PRICING: ReadonlySet<string> = new Set([\n  'deepseek/deepseek-v4-pro',\n  'deepseek/deepseek-v4-flash',\n  'deepseek/deepseek-v4-flash-vision-exp',\n  // command-code@1.53.0 added DeepSeek V4.1 Flash with the same `timeOfDay`\n  // block as the other DeepSeek models (off-peak $0.15/$0.60, peak\n  // $0.30/$1.20, 01–04 & 06–10 UTC Mon–Fri).\n  'deepseek/deepseek-v4.1-flash',\n])\n\n/**\n * Peak hours (UTC, hour-of-day range end-exclusive): 01–03 and 06–09.\n * Weekday-only — see `peakPricingState()`; weekends are fully off-peak.\n */\nconst PEAK_HOUR_RANGES: ReadonlyArray<readonly [number, number]> = [\n  [1, 4],\n  [6, 10],\n]\n\n/**\n * Whether `now` (defaults to `Date.now()`) falls in a peak-pricing window for\n * time-of-day-priced models. Peak rates apply Monday–Friday (UTC) only: the\n * official rule charges Saturday and Sunday completely off-peak for all 24\n * hours, so a weekend timestamp is off-peak even inside `PEAK_HOUR_RANGES`.\n * `undefined` for models outside the snapshot.\n */\nexport function peakPricingState(\n  modelId: string,\n  now: number = Date.now(),\n): 'peak' | 'off-peak' | undefined {\n  if (!KNOWN_PEAK_PRICING.has(modelId)) return undefined\n  const at = new Date(now)\n  const day = at.getUTCDay()\n  if (day === 0 || day === 6) return 'off-peak'\n  const hour = at.getUTCHours()\n  const inPeak = PEAK_HOUR_RANGES.some(([start, end]) => hour >= start && hour < end)\n  return inPeak ? 'peak' : 'off-peak'\n}\n\n/**\n * Compact label for the current peak/off-peak state: `Peak` (full price) or\n * `Half` (off-peak, half price). These English nouns match the picker's other\n * markers (`Go`, `Image`, `FREE`), and since they appear only on time-of-day\n * priced models they double as a \"priced by the hour\" signal. Returns undefined\n * for models without time-of-day pricing.\n */\nexport function peakPricingLabel(\n  modelId: string,\n  now: number = Date.now(),\n): string | undefined {\n  const state = peakPricingState(modelId, now)\n  if (state === undefined) return undefined\n  return state === 'peak' ? 'Peak' : 'Half'\n}\n\n// ---------------------------------------------------------------------------\n// Snapshot read helpers (kept with the tables: a model/plan/deal sync must\n// never touch src/adapter.ts)\n// ---------------------------------------------------------------------------\n/**\n * Official display label for a model's minimum plan, or undefined for models\n * outside the snapshot (e.g. future catalog additions).\n */\nexport function planLabel(modelId: string): string | undefined {\n  const plan = KNOWN_PLANS[modelId]\n  return plan === undefined ? undefined : PLAN_LABELS[plan]\n}\n\n/**\n * The active deal label for a model, or undefined when the model has no deal\n * or the deal has expired. Expiry is judged against `now` (defaults to\n * `Date.now()`), so a snapshot that has gone stale stops showing its discount\n * the moment the official end date passes — the user never believes a lapsed\n * deal is still live. Permanent deals (no `expiresAt`) never lapse.\n */\nexport function dealLabel(modelId: string, now: number = Date.now()): string | undefined {\n  const deal = KNOWN_DEALS[modelId]\n  if (deal === undefined) return undefined\n  if (deal.expiresAt !== undefined && now >= Date.parse(deal.expiresAt)) return undefined\n  return deal.label\n}\n\n/**\n * Compact human-readable context window, e.g. `1_000_000 -> \"1M\"`,\n * `256_000 -> \"256K\"`, `262_144 -> \"262K\"` (floor to the nearest K).\n * Returns undefined for unknown/absent sizes; values under 1K render raw.\n */\nexport function formatContext(contextWindow: number | undefined): string | undefined {\n  if (contextWindow === undefined || !Number.isFinite(contextWindow) || contextWindow <= 0) {\n    return undefined\n  }\n  if (contextWindow >= 1_000_000) {\n    const m = contextWindow / 1_000_000\n    // Round to one decimal only when it adds information: 1_048_576 -> \"1M\",\n    // 1_050_000 -> \"1.1M\".\n    const rounded = Math.round(m * 10) / 10\n    return `${Number.isInteger(rounded) ? rounded : rounded.toFixed(1)}M`\n  }\n  if (contextWindow < 1_000) return String(Math.floor(contextWindow))\n  return `${Math.floor(contextWindow / 1_000)}K`\n}\n\n/**\n * Compact one-line summary for the model picker: plan tier, then any active\n * deal (discount or FREE), then the current peak/off-peak state (`Peak`/`Half`)\n * for time-of-day-priced models, then `Image` for Vision-capable models, then\n * the context window. Text-only models simply omit the Image marker — \"Text\n * only\" adds nothing the picker needs to show.\n */\nexport function capabilityDescription(\n  modelId: string,\n  contextWindow?: number,\n  now: number = Date.now(),\n): string {\n  const parts: string[] = []\n  const plan = planLabel(modelId)\n  if (plan !== undefined) parts.push(plan)\n  const deal = dealLabel(modelId, now)\n  if (deal !== undefined) parts.push(deal)\n  const peak = peakPricingLabel(modelId, now)\n  if (peak !== undefined) parts.push(peak)\n  if (KNOWN_IMAGE_MODELS.has(modelId)) parts.push('Image')\n  const ctx = formatContext(contextWindow)\n  if (ctx !== undefined) parts.push(ctx)\n  return parts.join(' · ')\n}\n","/**\n * DeepSeek Harness LLM adapter for the Command Code Provider API.\n *\n * Ported from pi-commandcode-provider@0.5.1 (MIT). This is an unofficial,\n * community-maintained integration; you need your own Command Code account\n * and API key or subscription, and Command Code's terms apply.\n *\n * Wire protocol (reverse-engineered by the pi plugin, command-code@1.28.4;\n * re-verified against command-code@1.53.1 — endpoints, request shape, and\n * stream events unchanged):\n *   POST {apiBase}/alpha/generate\n *   body: { config, memory, taste, skills, params: { model, messages, tools,\n *          system, max_tokens, temperature, stream, reasoning_effort? }, threadId }\n *   SSE-ish JSONL events: text-delta | reasoning-start/delta/end | tool-call\n *                         | tool-result | finish | error\n *   Model catalog: GET {apiBase}/provider/v1/models -> { object: 'list', data: [...] }\n *\n * The adapter is deliberately free of cordis/schemastery: it receives a\n * per-request options thunk and an API-key resolver from the plugin entry\n * (src/index.ts), so a settings change reaches the very next request.\n */\n\nimport { existsSync, readFileSync } from 'node:fs'\nimport { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises'\nimport { homedir } from 'node:os'\nimport { dirname, join } from 'node:path'\nimport { randomUUID } from 'node:crypto'\n\nimport type { AttachmentStore, ImageAttachmentRef } from '@deepseek-ai/dsh-attachment'\n\nimport {\n  attributionHeaders,\n  LlmAdapter,\n  LlmError,\n  ReasoningEffortId,\n  ToolCallId,\n  errorChain,\n  resolveRetryPolicy,\n  type ResolvedRetryPolicy,\n  type ContentBlock,\n  type FinishReason,\n  type GenerateOptions,\n  type LlmModelInfo,\n  type LlmProviderInfo,\n  type LlmResolvedModelInfo,\n  type Message,\n  type StreamChunk,\n  type TokenUsage,\n} from '@deepseek-ai/dsh-llm'\nimport { RETRY_MAX_DELAY_MS } from './accounts.ts'\n\nimport {\n  KNOWN_EFFORTS,\n  KNOWN_IMAGE_MODELS,\n  capabilityDescription,\n  compareByPlan,\n  modelVisibleInPlan,\n  subscriptionPlanInfo,\n  type CommandCodeBillingAccess,\n} from './capabilities.ts'\n\n// ---------------------------------------------------------------------------\n// Request / connection defaults (protocol constants). The model/plan/deal\n// capability snapshot lives in ./capabilities.ts — the sync-only surface.\n// ---------------------------------------------------------------------------\nexport const COMMAND_CODE_CLI_VERSION = '1.53.1'\nexport const DEFAULT_API_BASE = 'https://api.commandcode.ai'\nexport const DEFAULT_GENERATE_MAX_TOKENS = 64_000\nexport const DEFAULT_MAX_OUTPUT_TOKENS = 65_536\nexport const MODELS_TIMEOUT_MS = 10_000\n/** How long the picker's plan-filter billing facts stay cached before refetching. */\nexport const BILLING_ACCESS_TTL_MS = 5 * 60_000\n/**\n * How long a learned CLI-only protocol preference stays cached per account.\n * After this TTL a request may probe Provider API again, so an upgraded Go\n * account can recover without a restart.\n */\nexport const PROTOCOL_CACHE_TTL_MS = 15 * 60_000\n/** Endpoint protocol selected for one generate call. */\ntype CommandCodeProtocol = 'cli' | 'openai'\n\n/** The entry-plan tier weight (`individual-go` in KNOWN_SUBSCRIPTION_PLANS). */\nconst GO_TIER_WEIGHT = 0\n\n/** Hard cap on account rotations within one request (one attempt per distinct key). */\nconst MAX_ACCOUNT_ROTATIONS = 16\n\n/**\n * Subscription statuses the CLI treats as live (`Mr` in command-code's\n * cli.mjs): the plan gate applies only under one of these.\n */\nconst ACTIVE_SUBSCRIPTION_STATUSES: ReadonlySet<string> = new Set(['active', 'trialing', 'past_due'])\n/** Head-of-request timeout: how long to wait for the first response byte. */\nexport const DEFAULT_REQUEST_TIMEOUT_MS = 60_000\n/** Stream idle timeout: a generation that stalls this long is a dead connection. */\nexport const DEFAULT_STREAM_IDLE_TIMEOUT_MS = 300_000\nconst MODEL_CACHE_VERSION = 1\n\n// ---------------------------------------------------------------------------\n// Small helpers (ported from converters.ts / models.ts)\n// ---------------------------------------------------------------------------\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction stringValue(value: unknown): string | undefined {\n  return typeof value === 'string' ? value : undefined\n}\n\nfunction numberValue(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined\n}\n\nfunction booleanValue(value: unknown): boolean | undefined {\n  return typeof value === 'boolean' ? value : undefined\n}\n\n/** Parse a billing-period timestamp (ISO string or millis) into millis; 0 when absent/invalid. */\nfunction periodEndValue(value: unknown): number {\n  const asNumber = numberValue(value)\n  if (asNumber !== undefined) return asNumber\n  const asString = stringValue(value)\n  if (asString === undefined) return 0\n  const parsed = Date.parse(asString)\n  return Number.isNaN(parsed) ? 0 : parsed\n}\n\n/**\n * Terminal stream-error markers from the official CLI (`Xw` in command-code's\n * cli.mjs): these always mean \"retrying cannot succeed\", so the adapter must\n * not classify them as transient server errors.\n */\nconst TERMINAL_STREAM_ERROR_MARKERS = [\n  'premium_credits_exhausted',\n  'model_not_in_plan',\n  'insufficient credits',\n]\n\nfunction hasTerminalStreamMarker(message: string): boolean {\n  const lower = message.toLowerCase()\n  return TERMINAL_STREAM_ERROR_MARKERS.some((marker) => lower.includes(marker))\n}\n\nfunction recordOrEmpty(value: unknown): Record<string, unknown> {\n  if (isRecord(value)) return value\n  if (typeof value === 'string') {\n    try {\n      const parsed: unknown = JSON.parse(value)\n      if (isRecord(parsed)) return parsed\n    } catch {\n      // Some providers stream incomplete JSON argument fragments.\n    }\n  }\n  return {}\n}\n\n// ---------------------------------------------------------------------------\n// Tool-schema normalization (issue #35)\n// The gateway validates every function schema's ROOT as an object schema and\n// rejects the whole request otherwise (`schema must be a JSON Schema of\n// type: \"object\", got type: null`). Tool schemas do not always come from\n// the harness's own typed builder, which always declares `type: 'object'`: a\n// third-party plugin or an MCP bridge can register a hand-written schema, and\n// a generator can emit a root `$ref`. Neither is this plugin's to correct, but\n// the request is the plugin's to send, so every schema leaving here is\n// normalized to the object root the provider requires. Only the root is\n// touched, and every path returns a copy: the harness may deep-freeze the\n// caller's schema.\n// ---------------------------------------------------------------------------\n\n/** How deep a root `$ref` / combinator chain is followed while normalizing. */\nconst SCHEMA_NORMALIZE_MAX_DEPTH = 4\n\n/**\n * Whether a type-less node is object-shaped enough to be one with the type\n * declared: `properties`/`required`/`additionalProperties` only make sense on\n * an object, and a schema carrying them was meant to be one.\n */\nfunction isObjectShaped(node: Record<string, unknown>): boolean {\n  return (\n    isRecord(node.properties) ||\n    isRecord(node.patternProperties) ||\n    Array.isArray(node.required) ||\n    node.additionalProperties !== undefined\n  )\n}\n\n/** The `required` names of one schema node, ignoring malformed entries. */\nfunction requiredNames(node: Record<string, unknown>): string[] {\n  return Array.isArray(node.required) ? node.required.filter((name): name is string => typeof name === 'string') : []\n}\n\n/** Resolve a local `#/...` pointer inside the schema that carried it. */\nfunction resolveLocalRef(root: Record<string, unknown>, ref: string): Record<string, unknown> | undefined {\n  if (!ref.startsWith('#/')) return undefined\n  let node: unknown = root\n  for (const rawSegment of ref.slice(2).split('/')) {\n    const segment = rawSegment.replace(/~1/g, '/').replace(/~0/g, '~')\n    if (!isRecord(node)) return undefined\n    node = node[segment]\n  }\n  return isRecord(node) ? node : undefined\n}\n\n/**\n * Flatten a type-less combinator node into one object schema, so the model\n * still sees the branch fields instead of an argument-free tool. `allOf`\n * branches must all hold, so their `required` entries are all kept; `anyOf` /\n * `oneOf` branches are alternatives, so only a name required by every branch\n * survives. Returns undefined when no branch describes an object.\n */\nfunction mergeCombinatorBranches(\n  node: Record<string, unknown>,\n  depth: number,\n): Record<string, unknown> | undefined {\n  // A plugin can hand over a self-referential schema object; the bound keeps\n  // the walk finite (JSON-parsed schemas are acyclic, JS ones need not be).\n  if (depth >= SCHEMA_NORMALIZE_MAX_DEPTH) return undefined\n  const properties: Record<string, unknown> = {}\n  const required = new Set<string>()\n  const alternatives: string[][] = []\n  let sawBranch = false\n\n  for (const key of ['allOf', 'anyOf', 'oneOf'] as const) {\n    const branches = node[key]\n    if (!Array.isArray(branches)) continue\n    const objectBranches: Record<string, unknown>[] = []\n    for (const branch of branches) {\n      if (!isRecord(branch)) continue\n      objectBranches.push(toolParametersSchema(branch, depth + 1))\n    }\n    if (objectBranches.length === 0) continue\n    sawBranch = true\n    // An `anyOf`/`oneOf` group contributes the intersection of its branches;\n    // an `allOf` group contributes the union.\n    const names = objectBranches.map(requiredNames)\n    if (key === 'allOf') for (const name of names.flat()) required.add(name)\n    else if (names.length > 0) {\n      alternatives.push(names[0]!.filter((name) => names.every((list) => list.includes(name))))\n    }\n    for (const branch of objectBranches) {\n      const branchProperties = isRecord(branch.properties) ? branch.properties : {}\n      for (const [name, schema] of Object.entries(branchProperties)) {\n        if (!(name in properties)) properties[name] = schema\n      }\n    }\n  }\n  if (!sawBranch) return undefined\n  // A name must satisfy every group, so each group's intersection joins the\n  // union: an allOf-required field and an anyOf-common field are both required.\n  for (const group of alternatives) for (const name of group) required.add(name)\n\n  const merged: Record<string, unknown> = { type: 'object', properties }\n  if (required.size > 0) merged.required = [...required]\n  // The merged schema is a superset of the alternatives it replaced, so it\n  // stays open unless the node itself closed it.\n  if (node.additionalProperties !== undefined) merged.additionalProperties = node.additionalProperties\n  for (const key of ['description', 'title'] as const) {\n    if (node[key] !== undefined) merged[key] = node[key]\n  }\n  return merged\n}\n\n/**\n * Normalize one tool's parameters schema to an object-rooted JSON Schema.\n * A schema that already declares an object root is passed through untouched;\n * a type-less object-shaped one gains the type; a root `$ref` or combinator is\n * resolved/merged; anything else (an array/scalar root, or no schema at all)\n * degrades to a permissive free-form object, because a request the provider\n * refuses helps no one and the tool's own description is still in the prompt.\n */\nfunction toolParametersSchema(parameters: unknown, depth = 0): Record<string, unknown> {\n  if (!isRecord(parameters)) return { type: 'object', properties: {}, additionalProperties: true }\n  if (parameters.type === 'object') return parameters\n  // `[\"object\", \"null\"]` is accepted by JSON Schema but not by the provider's\n  // validator, which compares the root `type` against the string \"object\".\n  if (Array.isArray(parameters.type) && parameters.type.includes('object')) {\n    return { ...parameters, type: 'object' }\n  }\n\n  if (parameters.type === undefined || parameters.type === null) {\n    if (typeof parameters.$ref === 'string' && depth < SCHEMA_NORMALIZE_MAX_DEPTH) {\n      const target = resolveLocalRef(parameters, parameters.$ref)\n      if (target !== undefined) {\n        const { $ref: _ref, ...rest } = parameters\n        return toolParametersSchema({ ...target, ...rest }, depth + 1)\n      }\n    }\n    if (isObjectShaped(parameters)) return { ...parameters, type: 'object' }\n    const merged = mergeCombinatorBranches(parameters, depth)\n    if (merged !== undefined) return merged\n    // A root `$ref` this plugin cannot resolve still gets the declared type:\n    // that is what the provider validates for, and an object is what every\n    // schema generator emits one for.\n    if (typeof parameters.$ref === 'string') return { ...parameters, type: 'object' }\n  }\n\n  return { type: 'object', properties: {}, additionalProperties: true }\n}\n\nexport function projectSlugFromPath(pathName: string): string {\n  const slug = pathName\n    .toLowerCase()\n    .replace(/^[a-z]:/i, '')\n    .replace(/[^a-z0-9]+/g, '-')\n    // Trim leading/trailing separators. This must stay linear: the classic\n    // `/^-+|-+$/` form is ambiguous — on `a<200k dashes>b` the unanchored\n    // `-+$` retries every start position, giving O(n^2) matching (CodeQL\n    // js/polynomial-redos). The negative lookbehind `(?<!-)` restricts `-+$`\n    // to the first dash of the trailing run, so only one start position is\n    // tried. Verified empirically: ~14.5s -> ~0ms on a 200k-dash input.\n    .replace(/^-+|(?<!-)-+$/g, '')\n  return slug || 'project'\n}\n\nfunction parseStreamEventLine(line: string): unknown | undefined {\n  let trimmed = line.trim()\n  if (!trimmed || trimmed.startsWith(':') || trimmed.startsWith('event:')) return undefined\n  if (trimmed.startsWith('data:')) trimmed = trimmed.slice(5).trim()\n  if (!trimmed || trimmed === '[DONE]') return undefined\n  try {\n    return JSON.parse(trimmed) as unknown\n  } catch {\n    return undefined\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Credential fallback from the official Command Code CLI auth file. Used as\n// the last fallback by the plugin entry, so a user who already logged in with\n// `command-code login` can reuse that credential. Only the official CLI's own\n// file is read — pi/OMP auth files are intentionally not scanned, so their\n// credentials and formats cannot surprise this adapter.\n// ---------------------------------------------------------------------------\n\n/** Extract the key from the CLI's nested credential records (`command-code`). */\nfunction apiKeyFromCredentialRecord(value: unknown): string | undefined {\n  if (!isRecord(value)) return undefined\n  const type = stringValue(value.type)\n  if (type === 'api') return stringValue(value.key)\n  if (type === 'oauth') return stringValue(value.access)\n  return stringValue(value.key) ?? stringValue(value.access)\n}\n\n/** Read a usable Command Code credential from the official CLI auth file. */\nexport function resolveAuthFileApiKey(): string | undefined {\n  const authPath = join(homedir(), '.commandcode', 'auth.json')\n  try {\n    if (!existsSync(authPath)) return undefined\n    const parsed: unknown = JSON.parse(readFileSync(authPath, 'utf-8'))\n    if (!isRecord(parsed)) return undefined\n    const direct = stringValue(parsed.apiKey) ?? stringValue(parsed.commandcode)\n    if (direct) return direct\n    const nested =\n      apiKeyFromCredentialRecord(parsed.commandcode) ??\n      apiKeyFromCredentialRecord(parsed['command-code'])\n    return nested\n  } catch {\n    // Ignore malformed or unreadable auth file.\n  }\n  return undefined\n}\n\n// ---------------------------------------------------------------------------\n// Model catalog discovery with on-disk cache fallback (ported from models.ts)\n// ---------------------------------------------------------------------------\n\ninterface CommandCodeModel {\n  id: string\n  name: string\n  contextWindow: number\n  maxTokens: number\n}\n\nfunction parseCatalogResponse(value: unknown): CommandCodeModel[] {\n  if (!isRecord(value) || value.object !== 'list' || !Array.isArray(value.data)) {\n    throw new LlmError('Unexpected Command Code models response shape', 'PROVIDER_PROTOCOL_ERROR')\n  }\n  const models: CommandCodeModel[] = []\n  for (const entry of value.data) {\n    if (!isRecord(entry)) continue\n    const id = stringValue(entry.id)\n    const name = stringValue(entry.name)\n    const contextLength = numberValue(entry.context_length)\n    if (!id || !name || !contextLength || contextLength <= 0) continue\n    models.push({\n      id,\n      name,\n      contextWindow: contextLength,\n      maxTokens: Math.min(contextLength, DEFAULT_MAX_OUTPUT_TOKENS),\n    })\n  }\n  if (models.length === 0) {\n    throw new LlmError('Command Code returned an empty model catalog', 'PROVIDER_PROTOCOL_ERROR')\n  }\n  return models\n}\n\nasync function readModelsCache(cachePath: string): Promise<CommandCodeModel[]> {\n  const parsed: unknown = JSON.parse(await readFile(cachePath, 'utf-8'))\n  if (!isRecord(parsed) || parsed.version !== MODEL_CACHE_VERSION || !Array.isArray(parsed.models)) {\n    throw new Error(`Invalid model cache at ${cachePath}`)\n  }\n  return parsed.models as CommandCodeModel[]\n}\n\nasync function writeModelsCache(cachePath: string, models: CommandCodeModel[]): Promise<void> {\n  await mkdir(dirname(cachePath), { recursive: true })\n  const tmp = `${cachePath}.${process.pid}.tmp`\n  try {\n    await writeFile(tmp, `${JSON.stringify({ version: MODEL_CACHE_VERSION, models }, null, 2)}\\n`, {\n      encoding: 'utf-8',\n      mode: 0o600,\n    })\n    await rename(tmp, cachePath)\n  } finally {\n    await rm(tmp, { force: true }).catch(() => undefined)\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Message conversion: harness Message[] -> Command Code wire messages.\n// Both transports replay historical reasoning. The CLI transport carries it as\n// a `reasoning` block inside the assistant message (the shape the official\n// CLI's `toWireMessages` emits), the Provider API transport as the\n// `reasoning_content` field, because DeepSeek's thinking-mode contract\n// requires the previous chain of thought to be passed back whenever tool calls\n// are in play (issue #34). Only tool calls with a paired tool result are\n// replayed on both transports.\n// ---------------------------------------------------------------------------\n\n/**\n * Collect the tool calls that have a paired tool result, plus each call's\n * name. The name map feeds the `toolName` of replayed tool results: some\n * backends (e.g. Google Gemini `functionResponse`) reject a result whose\n * function name is empty, so the real name must round-trip (the official\n * CLI does the same via its `tool_use_id -> toolName` map).\n */\nfunction pairedToolCalls(messages: readonly Message[]): {\n  ids: Set<string>\n  names: Map<string, string>\n} {\n  const callIds = new Set<string>()\n  const names = new Map<string, string>()\n  const resultIds = new Set<string>()\n  for (const message of messages) {\n    for (const block of message.content) {\n      if (message.role === 'assistant' && block.type === 'tool-call') {\n        callIds.add(block.id)\n        names.set(block.id, block.name)\n      }\n      if (block.type === 'tool-result') resultIds.add(block.toolCallId)\n    }\n  }\n  return { ids: new Set([...callIds].filter((id) => resultIds.has(id))), names }\n}\n\n/**\n * The Command Code gateway rejects tool call ids longer than 64 characters\n * (`input[N].call_id` must be `<= 64`, issue #23). Cross-provider histories\n * can carry longer ids — e.g. switching to Command Code mid-session after\n * another provider issued the call — so overlong paired ids are remapped to\n * short per-request aliases. Correlation only needs to hold within one\n * request (each call travels with its result in the same body), so a\n * sequential alias is enough: no durable state, no cross-request stability,\n * and the harness log keeps the original ids.\n */\nconst MAX_WIRE_TOOL_CALL_ID_LENGTH = 64\n\n/**\n * Map each paired tool-call id to its wire id: ids within the gateway limit\n * pass through verbatim, overlong ids get a collision-free `cc-<n>` alias.\n * Callers must resolve BOTH the tool-call and its paired tool-result through\n * the returned map so the pair stays correlated.\n */\nfunction wireToolCallIds(paired: ReadonlySet<string>): Map<string, string> {\n  const wire = new Map<string, string>()\n  const taken = new Set<string>()\n  for (const id of paired) {\n    if (id.length <= MAX_WIRE_TOOL_CALL_ID_LENGTH) {\n      wire.set(id, id)\n      taken.add(id)\n    }\n  }\n  let seq = 1\n  for (const id of paired) {\n    if (wire.has(id)) continue\n    let alias = `cc-${seq++}`\n    while (taken.has(alias)) alias = `cc-${seq++}`\n    wire.set(id, alias)\n    taken.add(alias)\n  }\n  return wire\n}\n\nfunction blockText(block: ContentBlock): string {\n  return block.type === 'text' || block.type === 'reasoning' ? block.text : ''\n}\n\n/**\n * One paired tool result as the wire needs it: its text and the images the\n * tool returned. Neither wire transport can carry an image inside a tool\n * result (`/provider/v1/chat/completions` forbids non-text `role: 'tool'`\n * content, and the CLI transport's own `tool-result` output is text-only), so\n * those images travel in a user message emitted right after the tool message —\n * the same shape `@deepseek-ai/dsh-llm-deepseek` uses (issue #30).\n */\ninterface ToolResultMedia {\n  /** Visible result text; `''` when the result carried images but no text. */\n  text: string\n  /** Nested image references, in block order, deduplicated by attachment id. */\n  images: ImageAttachmentRef[]\n}\n\n/**\n * Collect text and nested images of one tool result. The harness `read_image`\n * tool returns both, so dropping the image half is what made a tool-read image\n * invisible to a Vision model (issue #30). Deduplication keeps a result that\n * repeats one attachment from paying for the same pixels twice.\n */\nfunction toolResultMedia(block: Extract<ContentBlock, { type: 'tool-result' }>): ToolResultMedia {\n  const chunks: string[] = []\n  const images: ImageAttachmentRef[] = []\n  const seen = new Set<string>()\n  const walk = (blocks: readonly ContentBlock[]): void => {\n    for (const nested of blocks) {\n      if (nested.type === 'text' || nested.type === 'reasoning') {\n        if (nested.text) chunks.push(nested.text)\n        continue\n      }\n      if (nested.type === 'image') {\n        if (!seen.has(nested.attachment.attachmentId)) {\n          seen.add(nested.attachment.attachmentId)\n          images.push(nested.attachment)\n        }\n        continue\n      }\n      if (nested.type === 'tool-result') walk(nested.content)\n    }\n  }\n  walk(block.content)\n  return { text: chunks.join('\\n'), images }\n}\n\n/**\n * Result text for the wire's `role: 'tool'` message. A tool that returned only\n * an image (and possibly a nested image-only tool result) has no text at all,\n * and neither transport accepts an empty tool content string, so it gets a\n * descriptor pointing at the user message that follows with the pixels.\n */\nfunction toolResultTextForWire(media: ToolResultMedia): string {\n  return media.text || (media.images.length > 0 ? '(image returned; see the attached image)' : '')\n}\n\n/** Leading line of the user message that carries a tool result's images. */\nconst TOOL_RESULT_IMAGE_TEXT = 'Attached image(s) from tool result'\n\n/**\n * The model-visible note introducing the images carried out of one tool\n * result. Neither transport merges them back into the tool result, so this\n * line is what tells the model the image it is about to see belongs to the\n * tool it just ran rather than to the user; it also leads the part list,\n * because an image-first content array is what some gateways reject.\n *\n * The note names the tool call the image came out of, because a turn's\n * carriers are emitted as a group after the whole tool group (issue #33):\n * position alone would have to carry the association, and every `read_image`\n * result renders the same envelope text, so two parallel calls would produce\n * two identical notes. The id is the WIRE id — the one the model saw on the\n * `tool-call` it issued and on the tool message just above — so an overlong\n * cross-provider id is named by the alias that replaced it, not by the\n * harness-side id the model never saw.\n *\n * Count and pixel dimensions are appended when the tool's own text does not\n * already state them (a result that returns the image and nothing else).\n */\nfunction toolResultImageNote(media: ToolResultMedia, toolCallId: string): string {\n  const lead = `${TOOL_RESULT_IMAGE_TEXT} (${toolCallId}):`\n  const first = media.images[0]\n  if (first === undefined) return lead\n  const dimensions = `${first.width}x${first.height} px`\n  if (first.width <= 0 || first.height <= 0 || media.text.includes(dimensions)) {\n    return lead\n  }\n  const count = media.images.length > 1 ? `${media.images.length} images, ` : ''\n  return `${lead} ${count}${dimensions}`\n}\n\nfunction hasImageContent(message: Message): boolean {\n  const check = (blocks: readonly ContentBlock[]): boolean =>\n    blocks.some(\n      (b) => b.type === 'image' || (b.type === 'tool-result' && check(b.content)),\n    )\n  return check(message.content)\n}\n\n/**\n * Convert one image reference to the Command Code wire format, as the official\n * CLI does: `{ type: 'image', source: { type: 'base64', media_type, data } }`.\n * Bytes come from the durable attachment service; the media type is the one\n * verified at save time.\n */\nasync function imageToCommandCode(\n  ref: ImageAttachmentRef,\n  readImage: (ref: ImageAttachmentRef) => Promise<Uint8Array>,\n): Promise<{ type: 'image'; source: { type: 'base64'; media_type: string; data: string } }> {\n  const data = await readImage(ref)\n  return {\n    type: 'image',\n    source: {\n      type: 'base64',\n      media_type: ref.mediaType,\n      data: Buffer.from(data).toString('base64'),\n    },\n  }\n}\n\nasync function messagesToCC(\n  messages: readonly Message[],\n  readImage?: (ref: ImageAttachmentRef) => Promise<Uint8Array>,\n): Promise<unknown[]> {\n  const out: unknown[] = []\n  const { ids: paired, names: toolNames } = pairedToolCalls(messages)\n  // Remap cross-provider ids the gateway would reject (issue #23); the\n  // result side resolves through the same map so each pair stays correlated.\n  const wireIds = wireToolCallIds(paired)\n\n  // Tool-returned images ride as user messages after their tool result. The\n  // harness can emit several tool calls in one assistant turn, and the\n  // gateway expects an assistant's tool blocks to be answered consecutively:\n  // a user message interleaved between tool results breaks the pairing and\n  // the request is rejected. So image carriers are buffered and flushed only\n  // once the whole tool group (or the next non-tool message) has been emitted.\n  const pendingImages: unknown[] = []\n  const flushPendingImages = () => {\n    for (const message of pendingImages) out.push(message)\n    pendingImages.length = 0\n  }\n\n  for (const message of messages) {\n    if (message.role === 'system') continue // folded into params.system by the caller\n\n    if (message.role === 'user' && message.source.kind !== 'tool') {\n      flushPendingImages()\n      const parts: unknown[] = []\n      for (const block of message.content) {\n        if (block.type === 'text') parts.push({ type: 'text', text: block.text })\n        if (block.type === 'image') {\n          // The caller (stream) has already gated image input on model\n          // capability and attachment-service availability, so reaching this\n          // branch with no resolver is an internal contract violation.\n          if (!readImage) {\n            throw new LlmError(\n              'Image input requires the durable attachment service',\n              'UNSUPPORTED_CONTENT',\n            )\n          }\n          parts.push(await imageToCommandCode(block.attachment, readImage))\n        }\n      }\n      // A user message that converted to nothing carries no information, and\n      // an empty content array is a needless gateway-compat risk, so it is\n      // dropped — the same rule the Provider API converter applies below.\n      // (`dsh-llm-deepseek` instead pushes `content: ''`; skipping is the\n      // safer half of that divergence to keep.) The flush above has already\n      // run, so a pending image carrier is never dropped with it.\n      if (parts.length === 0) continue\n      out.push({ role: 'user', content: parts })\n      continue\n    }\n\n    if (message.role === 'assistant') {\n      flushPendingImages()\n      const parts: unknown[] = []\n      for (const block of message.content) {\n        if (block.type === 'text') {\n          parts.push({ type: 'text', text: block.text })\n        } else if (block.type === 'reasoning') {\n          // Replay the thinking block, exactly as the official CLI's\n          // `toWireMessages` does (command-code@1.53.1: a `thinking` block\n          // becomes `{ type: 'reasoning', text }`). This is not optional\n          // politeness: the gateway rebuilds the provider request from these\n          // blocks, and a DeepSeek thinking-mode assistant turn whose tool\n          // calls arrive without its reasoning is rejected with \"The\n          // `reasoning_content` in the thinking mode must be passed back to\n          // the API\" — which failed every tool-loop turn (issue #34).\n          parts.push({ type: 'reasoning', text: block.text })\n        } else if (block.type === 'tool-call' && paired.has(block.id)) {\n          parts.push({\n            type: 'tool-call',\n            toolCallId: wireIds.get(block.id) ?? block.id,\n            toolName: block.name,\n            input: recordOrEmpty(block.arguments),\n          })\n        }\n      }\n      if (parts.length > 0) out.push({ role: 'assistant', content: parts })\n      continue\n    }\n\n    // tool-result message (user role, single tool-result block)\n    if (message.role === 'user' && message.source.kind === 'tool') {\n      const block = message.content[0]\n      if (!block || block.type !== 'tool-result' || !paired.has(block.toolCallId)) continue\n      const media = toolResultMedia(block)\n      // Resolved once: the tool message and the carrier note below must name\n      // the same call, or the model cannot tie an image back to its result.\n      const wireToolCallId = wireIds.get(block.toolCallId) ?? block.toolCallId\n      out.push({\n        role: 'tool',\n        content: [\n          {\n            type: 'tool-result',\n            toolCallId: wireToolCallId,\n            // `paired` guarantees a call with this id exists, so the map\n            // always hits; `|| 'unknown'` also guards an empty call name\n            // (matches the official CLI's `?? \"unknown\"` fallback).\n            toolName: toolNames.get(block.toolCallId) || 'unknown',\n            output: block.isError\n              ? { type: 'error-text', value: toolResultTextForWire(media) }\n              : { type: 'text', value: toolResultTextForWire(media) },\n          },\n        ],\n      })\n      // Images a tool returned (e.g. `read_image`) cannot ride inside the\n      // tool result on this wire, so they follow it as a user message —\n      // otherwise a Vision model receives the metadata text and no pixels.\n      if (media.images.length > 0) {\n        if (!readImage) {\n          throw new LlmError(\n            'Image input requires the durable attachment service',\n            'UNSUPPORTED_CONTENT',\n          )\n        }\n        const carried: unknown[] = [{ type: 'text', text: toolResultImageNote(media, wireToolCallId) }]\n        for (const attachment of media.images) {\n          carried.push(await imageToCommandCode(attachment, readImage))\n        }\n        pendingImages.push({ role: 'user', content: carried })\n      }\n    }\n  }\n  flushPendingImages()\n  return out\n}\n\n/**\n * Convert one image reference to the OpenAI Chat Completions wire format:\n * `{ type: 'image_url', image_url: { url: 'data:...;base64,...' } }`.\n */\nasync function imageToOpenAI(\n  ref: ImageAttachmentRef,\n  readImage: (ref: ImageAttachmentRef) => Promise<Uint8Array>,\n): Promise<{ type: 'image_url'; image_url: { url: string } }> {\n  const data = await readImage(ref)\n  return {\n    type: 'image_url',\n    image_url: {\n      url: `data:${ref.mediaType};base64,${Buffer.from(data).toString('base64')}`,\n    },\n  }\n}\n\n/**\n * Convert harness messages to the OpenAI Chat Completions request shape.\n *\n * Unlike the Command Code CLI transport, this transport is the documented\n * Provider API surface. DeepSeek's thinking-mode contract requires historical\n * `reasoning_content` to be passed back whenever tools are in play, so this\n * converter intentionally DOES replay reasoning blocks as `reasoning_content`\n * on assistant messages. Only tool calls with a paired tool result are\n * replayed (same policy as the CLI path).\n */\nasync function messagesToOpenAI(\n  messages: readonly Message[],\n  readImage?: (ref: ImageAttachmentRef) => Promise<Uint8Array>,\n): Promise<unknown[]> {\n  const out: unknown[] = []\n  const { ids: paired } = pairedToolCalls(messages)\n  // Same overlong-id remap as the CLI transport (issue #23): OpenAI\n  // `tool_call_id` fields accept longer values, but the remap keeps both\n  // transports consistent and correlation only needs to hold per request.\n  const wireIds = wireToolCallIds(paired)\n\n  // Tool-returned images ride as user messages after their tool result. The\n  // harness can emit several tool calls in one assistant turn, and the\n  // gateway expects an assistant's tool blocks to be answered consecutively:\n  // a user message interleaved between tool results breaks the pairing and\n  // the request is rejected. So image carriers are buffered and flushed only\n  // once the whole tool group (or the next non-tool message) has been emitted.\n  const pendingImages: unknown[] = []\n  const flushPendingImages = () => {\n    for (const message of pendingImages) out.push(message)\n    pendingImages.length = 0\n  }\n\n  for (const message of messages) {\n    // System messages are folded into the single top-level system message by\n    // the caller, matching the existing adapter's conversation folding.\n    if (message.role === 'system') continue\n\n    if (message.role === 'user' && message.source.kind !== 'tool') {\n      flushPendingImages()\n      const parts: unknown[] = []\n      for (const block of message.content) {\n        if (block.type === 'text') parts.push({ type: 'text', text: block.text })\n        if (block.type === 'image') {\n          if (!readImage) {\n            throw new LlmError(\n              'Image input requires the durable attachment service',\n              'UNSUPPORTED_CONTENT',\n            )\n          }\n          parts.push(await imageToOpenAI(block.attachment, readImage))\n        }\n      }\n      // Same rule as the CLI converter: a converted-to-nothing user message is\n      // dropped rather than sent as an empty content array. The flush above\n      // already ran, so a pending image carrier survives this skip.\n      if (parts.length === 0) continue\n      const hasImage = parts.some((part) => (part as { type?: string }).type === 'image_url')\n      if (!hasImage && parts.length === 1) {\n        out.push({ role: 'user', content: (parts[0] as { text: string }).text })\n      } else {\n        // Preserve separate text/image parts rather than silently joining\n        // text blocks together.\n        out.push({ role: 'user', content: parts })\n      }\n      continue\n    }\n\n    if (message.role === 'assistant') {\n      flushPendingImages()\n      const text = message.content\n        .filter((block): block is Extract<ContentBlock, { type: 'text' }> => block.type === 'text')\n        .map((block) => block.text)\n        .join('')\n      const reasoning = message.content\n        .filter((block): block is Extract<ContentBlock, { type: 'reasoning' }> => block.type === 'reasoning')\n        .map((block) => block.text)\n        .join('')\n      const toolCalls = message.content\n        .filter((block): block is Extract<ContentBlock, { type: 'tool-call' }> => block.type === 'tool-call' && paired.has(block.id))\n        .map((block) => ({\n          id: wireIds.get(block.id) ?? block.id,\n          type: 'function' as const,\n          function: {\n            name: block.name,\n            arguments: block.arguments,\n          },\n        }))\n\n      if (text === '' && reasoning === '' && toolCalls.length === 0) continue\n      const assistant: Record<string, unknown> = {\n        role: 'assistant',\n        content: text === '' ? null : text,\n      }\n      // Chat Completions / DeepSeek thinking mode: replay historical reasoning\n      // so tool-calling loops can continue from the previous chain of thought.\n      if (reasoning !== '') assistant.reasoning_content = reasoning\n      if (toolCalls.length > 0) assistant.tool_calls = toolCalls\n      out.push(assistant)\n      continue\n    }\n\n    // tool-result message (user role, single tool-result block)\n    if (message.role === 'user' && message.source.kind === 'tool') {\n      const block = message.content[0]\n      if (!block || block.type !== 'tool-result' || !paired.has(block.toolCallId)) continue\n      const media = toolResultMedia(block)\n      // Resolved once: the tool message and the carrier note below must name\n      // the same call, or the model cannot tie an image back to its result.\n      const wireToolCallId = wireIds.get(block.toolCallId) ?? block.toolCallId\n      out.push({\n        role: 'tool',\n        tool_call_id: wireToolCallId,\n        content: toolResultTextForWire(media),\n      })\n      // Chat Completions allows no image part under `role: 'tool'`, so a\n      // tool-returned image (e.g. `read_image`) follows as a user message.\n      if (media.images.length > 0) {\n        if (!readImage) {\n          throw new LlmError(\n            'Image input requires the durable attachment service',\n            'UNSUPPORTED_CONTENT',\n          )\n        }\n        const carried: unknown[] = [{ type: 'text', text: toolResultImageNote(media, wireToolCallId) }]\n        for (const attachment of media.images) {\n          carried.push(await imageToOpenAI(attachment, readImage))\n        }\n        pendingImages.push({ role: 'user', content: carried })\n      }\n    }\n  }\n  flushPendingImages()\n  return out\n}\n\n// ---------------------------------------------------------------------------\n// Adapter\n// ---------------------------------------------------------------------------\n/** Connection facts resolved fresh per request by the plugin entry. */\nexport interface CommandCodeConnectionOptions {\n  /** API base; the Provider API lives under it (`/alpha/generate`, `/provider/v1/chat/completions`, `/provider/v1/models`). */\n  apiBase: string\n  /** Working directory reported to the API (project slug, config block). */\n  workingDir: string\n  /** Model catalog cache path. */\n  modelsCachePath: string\n  /**\n   * Milliseconds to wait for generate response headers / first byte (default 60s).\n   * Must not bound the subsequent body stream — long generations are gated by\n   * {@link streamIdleTimeoutMs} and the caller AbortSignal instead.\n   */\n  requestTimeoutMs: number\n  /** Milliseconds a stream may stall before it is treated as a dead connection (default 300s). */\n  streamIdleTimeoutMs: number\n  /**\n   * Whether the picker hides models above the account's subscription tier\n   * (default true). The filter fails open: unknown plan, billing-endpoint\n   * failure, a positive on-demand credit balance, or an unmapped model all\n   * keep the full catalog visible. Set false to always list every model.\n   */\n  filterModelsByPlan?: boolean\n  /**\n   * Visible-model allowlist: catalog model ids shown in pickers. Empty or\n   * unset means \"show everything\"; applies after the subscription-tier filter.\n   * The settings page persists it; the catalog endpoint serves the full\n   * catalog regardless so the page can always offer every model.\n   */\n  visibleModels?: string[] | undefined\n  /**\n   * Per-model visibility overrides, keyed by catalog id. Written by the\n   * terminal settings page, whose checkbox list gives every model its own\n   * boolean field: a field writes one value at one path, so membership in\n   * {@link visibleModels} cannot be expressed from there, while a flag can.\n   * An id present here decides that model on its own (true = listed, false =\n   * hidden); an id absent here follows {@link visibleModels} exactly as it did\n   * before, so composition configs and the web page are unaffected.\n   */\n  modelVisibility?: Readonly<Record<string, boolean>> | undefined\n  /**\n   * Optional protocol hint. `'auto'` (default) uses billing/cache plus\n   * Provider API fallback; `'cli'` forces `/alpha/generate`; `'openai'`\n   * prefers `/provider/v1/chat/completions` but still falls back to the CLI\n   * transport on `upgrade_required` (Go-plan keys have no Provider API\n   * access — failing outright would strand them). This is a\n   * connection-level test/operator seam and is intentionally not part of\n   * the plugin's user settings schema.\n   */\n  protocol?: 'auto' | CommandCodeProtocol\n}\n\n/**\n * Resolve the durable attachment service, or undefined when the host does not\n * provide one. Called lazily only when a request actually carries images, so a\n * text-only request never depends on the attachment seam.\n */\nexport type ResolveAttachments = () => AttachmentStore | undefined\n\n/** Everything the adapter needs beyond the request itself. */\nexport interface CommandCodeAdapterDeps<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions> {\n  /** Resolve the current connection facts (fresh per request, settings-aware). */\n  options: () => C\n  /**\n   * Resolve a usable API key for the given connection facts and the request's\n   * model id, or throw `MISSING_CREDENTIAL`. The model is optional: hosts\n   * without model-aware routing ignore it.\n   */\n  resolveApiKey: (connection: C, model?: string) => Promise<string>\n  /**\n   * Multi-account rotation hook: the request sent with `rejectedKey` was\n   * refused with 429 (`rate-limit`) or 401 (`invalid-credential`) before\n   * any response body streamed. The host marks that key and returns the next\n   * account's key to retry with, or `undefined` to surface the failure.\n   * Only pre-stream rejections rotate — a mid-stream failure never replays a\n   * partially consumed generation against another account.\n   */\n  rotateApiKey?: (rejectedKey: string, rejection: 'rate-limit' | 'invalid-credential', connection: C, model?: string) => Promise<string | undefined>\n  /** HTTP transport override (tests); defaults to the global `fetch`. */\n  fetchImpl?: typeof fetch\n  /** Resolve the optional durable attachment service for image input (tests); defaults to none. */\n  resolveAttachments?: ResolveAttachments\n}\n\n/** Account identity from `/alpha/whoami`. */\nexport interface CommandCodeAccount {\n  id: string\n  name: string\n  userName: string\n}\n\n/** Usage summary from `/alpha/usage/summary`. */\nexport interface CommandCodeUsage {\n  totalCount: number\n  totalCost: number\n  successRate: number\n  completedCount: number\n  failedCount: number\n  totalTokensIn: number\n  totalTokensOut: number\n  totalCredits: number\n  periodBasis: string\n}\n\n/** Credit/limit state from `/alpha/billing/credits`. */\nexport interface CommandCodeCredits {\n  monthlyCredits: number\n  purchasedCredits: number\n  freeCredits: number\n  /** Five-hour rolling window limits. */\n  fiveHour: { used: number; cap: number; exceeded: boolean; resetAt: number }\n  /** Weekly window limits. */\n  weekly: { used: number; cap: number; exceeded: boolean; resetAt: number }\n}\n\n/** Subscription plan state from `/alpha/billing/subscriptions`. */\nexport interface CommandCodePlan {\n  /** Raw subscription plan id (e.g. `individual-pro`); empty when unreported. */\n  planId: string\n  /** Display name (e.g. `Pro`); falls back to the raw id for unknown plans. */\n  name: string\n  /** Raw subscription status (`active`, `trialing`, `past_due`, …); empty when unreported. */\n  status: string\n  /** The plan's monthly credit total per {@link KNOWN_SUBSCRIPTION_PLANS}; null for unknown plans. */\n  monthlyCredits: number | null\n  /** Billing period end in millis; 0 when the endpoint did not report one. */\n  currentPeriodEnd: number\n}\n\n/**\n * Why every account endpoint failed at once (the report then carries no data\n * at all, so the degraded per-endpoint view would hide the root cause behind\n * a generic \"partial data\" note). Undefined for partial failures.\n */\nexport type UsageBlockReason = 'invalid-key' | 'service-unavailable' | 'network'\n\n/** Account endpoints fetched by one `getUsage()` run (see the classification there). */\nconst USAGE_ENDPOINT_COUNT = 4\n\n/** Everything the usage endpoints report, fetched together. */\nexport interface CommandCodeUsageReport {\n  account?: CommandCodeAccount\n  usage?: CommandCodeUsage\n  credits?: CommandCodeCredits\n  plan?: CommandCodePlan\n  /** Endpoint failures degrade the report instead of failing it. */\n  failures: string[]\n  /**\n   * The single reason every endpoint failed, when they all did: `invalid-key`\n   * (every call rejected with 401 — the stored key is wrong or expired),\n   * `service-unavailable` (every call answered 5xx), or `network` (no HTTP\n   * response at all). Undefined when any endpoint succeeded.\n   */\n  blocked?: UsageBlockReason\n}\n\n/**\n * Parse one usage/summary payload into the report's usage section.\n * Returns undefined when the endpoint answered nothing usable.\n */\nfunction parseUsageTotals(usage: Record<string, unknown> | undefined): CommandCodeUsage | undefined {\n  // Note: `getUsage` always answers `usage` (200 with `{}` parses to zeros)\n  // — undefined here means the endpoint failed or answered non-JSON, which\n  // the caller already booked into `failures`.\n  if (usage === undefined) return undefined\n  return {\n    totalCount: numberValue(usage.totalCount) ?? 0,\n    totalCost: numberValue(usage.totalCost) ?? 0,\n    successRate: numberValue(usage.successRate) ?? 0,\n    completedCount: numberValue(usage.completedCount) ?? 0,\n    failedCount: numberValue(usage.failedCount) ?? 0,\n    totalTokensIn: numberValue(usage.totalTokensIn) ?? 0,\n    totalTokensOut: numberValue(usage.totalTokensOut) ?? 0,\n    totalCredits: numberValue(usage.totalCredits) ?? 0,\n    periodBasis: stringValue(usage.periodBasis) ?? 'billing-period',\n  }\n}\n\n/** Parse one window-limit block (`fiveHour` / `weekly`). */\nfunction parseWindowLimit(value: unknown): CommandCodeCredits['fiveHour'] {\n  const block = isRecord(value) ? value : undefined\n  return {\n    used: numberValue(block?.used) ?? 0,\n    cap: numberValue(block?.cap) ?? 0,\n    exceeded: block?.exceeded === true,\n    resetAt: numberValue(block?.resetAt) ?? 0,\n  }\n}\n\n/**\n * Parse one billing/credits payload into the report's credits section.\n * Returns undefined when the endpoint answered nothing usable.\n */\nfunction parseCreditLimits(credits: Record<string, unknown> | undefined): CommandCodeCredits | undefined {\n  if (credits === undefined) return undefined\n  const creditsData = isRecord(credits.credits) ? credits.credits : undefined\n  const windowLimits = isRecord(credits.windowLimits) ? credits.windowLimits : undefined\n  const fiveHour = windowLimits !== undefined && isRecord(windowLimits.fiveHour) ? windowLimits.fiveHour : undefined\n  const weekly = windowLimits !== undefined && isRecord(windowLimits.weekly) ? windowLimits.weekly : undefined\n  if (creditsData === undefined && fiveHour === undefined && weekly === undefined) return undefined\n  return {\n    monthlyCredits: numberValue(creditsData?.monthlyCredits) ?? 0,\n    purchasedCredits: numberValue(creditsData?.purchasedCredits) ?? 0,\n    freeCredits: numberValue(creditsData?.freeCredits) ?? 0,\n    fiveHour: parseWindowLimit(fiveHour),\n    weekly: parseWindowLimit(weekly),\n  }\n}\n\n/**\n * Parse the account identity from whoami plus the plan identity from the\n * subscriptions/credits payloads. Returns the org id for the subscriptions\n * query alongside, so getUsage fetches whoami first and the rest in parallel.\n */\nfunction parseAccountIdentity(whoami: Record<string, unknown> | undefined): {\n  account: CommandCodeAccount | undefined\n  orgId: string | undefined\n} {\n  const whoamiData = whoami !== undefined && isRecord(whoami.user) ? whoami.user : undefined\n  const orgData = whoami !== undefined && isRecord(whoami.org) ? whoami.org : undefined\n  return {\n    account: whoamiData === undefined ? undefined : {\n      id: stringValue(whoamiData.id) ?? '',\n      name: stringValue(whoamiData.name) ?? '',\n      userName: stringValue(whoamiData.userName) ?? '',\n    },\n    orgId: orgData === undefined ? undefined : stringValue(orgData.id),\n  }\n}\n\n/**\n * Classify a TOTAL failure: when every endpoint failed with one class of\n * error, the degraded per-endpoint view would hide the root cause behind\n * a generic \"partial data\" note — name it instead.\n */\nfunction classifyTotalFailure(\n  failures: readonly string[],\n  failedStatuses: ReadonlyArray<number | undefined>,\n): UsageBlockReason | undefined {\n  // Four endpoints are fetched (whoami, usage/summary, billing/credits,\n  // billing/subscriptions; the last may carry an orgId query, so the\n  // classification counts endpoints, not paths).\n  if (failures.length !== USAGE_ENDPOINT_COUNT) return undefined\n  const codes = failedStatuses.filter((status): status is number => status !== undefined)\n  if (codes.length === USAGE_ENDPOINT_COUNT && codes.every((code) => code === 401)) {\n    return 'invalid-key'\n  }\n  if (codes.length === USAGE_ENDPOINT_COUNT && codes.every((code) => code >= 500)) {\n    return 'service-unavailable'\n  }\n  if (codes.length === 0) return 'network'\n  return undefined\n}\n\n/**\n * The shared facts one generate call needs, computed once up front so the\n * body builders, the connect loop, and the stream pump below all read the\n * same snapshot instead of closing over `stream()` locals.\n */\ninterface GenerateCallFacts {\n  /** Resolved API key for the first attempt (rotation may replace it). */\n  apiKey: string\n  /** maxTokens cap for the request model (in-memory catalog, else default). */\n  maxTokens: number\n  /** Validated reasoning effort, or undefined when unset/unsupported. */\n  reasoningEffort: string | undefined\n  /** Folded system text (top-level system + system-role messages). */\n  systemText: string\n  /** Per-call image byte resolver; set only when the request carries images. */\n  readImage: ((ref: ImageAttachmentRef) => Promise<Uint8Array>) | undefined\n}\n\n/** Build the legacy CLI (`/alpha/generate`) request body for one call. */\nasync function buildCliBody(\n  options: GenerateOptions,\n  connection: CommandCodeConnectionOptions,\n  facts: Pick<GenerateCallFacts, 'maxTokens' | 'reasoningEffort' | 'systemText' | 'readImage'>,\n): Promise<Record<string, unknown>> {\n  return {\n    config: {\n      workingDir: connection.workingDir,\n      date: new Date().toISOString().split('T')[0],\n      environment: `${process.platform}-${process.arch}, Node.js ${process.version}`,\n      structure: [],\n      isGitRepo: false,\n      currentBranch: '',\n      mainBranch: '',\n      gitStatus: '',\n      recentCommits: [],\n    },\n    memory: null,\n    taste: null,\n    skills: null,\n    params: {\n      model: options.model,\n      messages: await messagesToCC(options.messages, facts.readImage),\n      tools: (options.tools ?? []).map((tool) => ({\n        type: 'function',\n        name: tool.name,\n        description: tool.description,\n        input_schema: toolParametersSchema(tool.parameters),\n      })),\n      system: facts.systemText,\n      max_tokens: facts.maxTokens,\n      temperature: options.temperature ?? 0.3,\n      stream: true,\n      ...(facts.reasoningEffort ? { reasoning_effort: facts.reasoningEffort } : {}),\n    },\n    threadId: randomUUID(),\n  }\n}\n\n/** Build the documented Provider Chat Completions request body for one call. */\nasync function buildOpenAIBody(\n  options: GenerateOptions,\n  facts: Pick<GenerateCallFacts, 'maxTokens' | 'reasoningEffort' | 'systemText' | 'readImage'>,\n): Promise<Record<string, unknown>> {\n  const openAiMessages = [\n    ...(facts.systemText ? [{ role: 'system', content: facts.systemText }] : []),\n    ...(await messagesToOpenAI(options.messages, facts.readImage)),\n  ]\n  const openAiTools = (options.tools ?? []).map((tool) => ({\n    type: 'function',\n    function: {\n      name: tool.name,\n      description: tool.description,\n      parameters: toolParametersSchema(tool.parameters),\n    },\n  }))\n  return {\n    model: options.model,\n    messages: openAiMessages,\n    ...(openAiTools.length > 0 ? { tools: openAiTools } : {}),\n    max_tokens: facts.maxTokens,\n    temperature: options.temperature ?? 0.3,\n    stream: true,\n    ...(facts.reasoningEffort ? { reasoning_effort: facts.reasoningEffort } : {}),\n  }\n}\n\n/**\n * One connect attempt's inputs: everything `connectGenerate` needs beyond\n * the per-attempt key and protocol. Passed explicitly (not closed over) so\n * the rotation loop's mutation of `protocol`/`body` stays visible at the\n * call site.\n */\ninterface GenerateConnectDeps {\n  options: GenerateOptions\n  connection: CommandCodeConnectionOptions\n  fetchImpl: typeof fetch\n}\n\n/**\n * One pre-stream connect attempt: POST the body and wait for response\n * headers only (`requestTimeoutMs` must never bound the body stream — see\n * the caller). Returns the live response plus its cleanup, or the rejection\n * facts for the rotation loop to classify. Every failure path cleans up\n * before returning or throwing; on success the caller-abort listener\n * outlives the connect phase (it aborts a stalled body read), so the\n * streaming tail calls cleanup.\n */\nasync function connectGenerate(\n  deps: GenerateConnectDeps,\n  key: string,\n  protocol: CommandCodeProtocol,\n  body: Record<string, unknown>,\n): Promise<{ response: Response; cleanup: () => void } | { status: number; errText: string; retryAfterMs?: number }> {\n  const { options, connection, fetchImpl } = deps\n  const connectAbort = new AbortController()\n  let connectTimedOut = false\n  const endpoint = protocol === 'cli'\n    ? `${connection.apiBase}/alpha/generate`\n    : `${connection.apiBase}/provider/v1/chat/completions`\n  const connectTimer = setTimeout(() => {\n    connectTimedOut = true\n    connectAbort.abort(\n      new DOMException(\n        `Command Code API request to ${endpoint} did not respond within ${connection.requestTimeoutMs}ms`,\n        'TimeoutError',\n      ),\n    )\n  }, connection.requestTimeoutMs)\n  const onCallerAbort = () => {\n    connectAbort.abort(options.signal?.reason)\n  }\n  if (options.signal) {\n    if (options.signal.aborted) {\n      onCallerAbort()\n    } else {\n      options.signal.addEventListener('abort', onCallerAbort, { once: true })\n    }\n  }\n  const cleanup = () => {\n    clearTimeout(connectTimer)\n    if (options.signal) {\n      options.signal.removeEventListener('abort', onCallerAbort)\n    }\n  }\n\n  let response: Response\n  const headers = protocol === 'cli'\n    ? {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${key}`,\n        'x-command-code-version': COMMAND_CODE_CLI_VERSION,\n        'x-cli-environment': 'production',\n        'x-project-slug': projectSlugFromPath(connection.workingDir),\n        'x-taste-learning': 'true',\n        'x-co-flag': 'false',\n        ...attributionHeaders(),\n      }\n    : {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${key}`,\n        Accept: 'text/event-stream',\n        // Deliberately no x-command-code-version / x-cli-environment:\n        // this is the documented OpenAI-format surface, not the CLI\n        // transport — do not \"fix\" these in.\n        ...attributionHeaders(),\n      }\n  try {\n    response = await fetchImpl(endpoint, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n      signal: connectAbort.signal,\n    })\n    clearTimeout(connectTimer)\n  } catch (error: unknown) {\n    cleanup()\n    if (options.signal?.aborted) {\n      throw error\n    }\n    if (connectTimedOut || (error instanceof DOMException && error.name === 'TimeoutError')) {\n      throw new LlmError(\n        `Command Code API request to ${endpoint} did not respond within ${connection.requestTimeoutMs}ms`\n        + `: ${errorChain(error)}`\n        + `；Command Code API 请求在 ${connection.requestTimeoutMs} 毫秒内未收到响应——通常是网络或代理问题，请检查后重试`,\n        'TIMEOUT',\n        { cause: error },\n      )\n    }\n    // fetch wraps every transport failure (DNS, refused connection, TLS,\n    // proxy, reset) in a bare `TypeError: fetch failed` whose actionable\n    // detail lives on `cause`. Include the full chain so the failure reason\n    // shown in the web UI (which renders only the message, not `cause`)\n    // names the real root cause instead of a generic wrapper.\n    throw new LlmError(\n      `Command Code API request to ${endpoint} failed: ${errorChain(error)}`\n      + '；Command Code API 请求连接失败——通常是网络或代理问题，请检查网络或代理设置后重试',\n      'TRANSPORT',\n      { cause: error },\n    )\n  }\n\n  if (!response.ok) {\n    const errText = await response.text().catch(() => '')\n    cleanup()\n    const retryAfterMs = parseRetryAfterMs(response.headers.get('retry-after'))\n    // exactOptionalPropertyTypes: the key must be absent, not undefined.\n    return retryAfterMs === undefined\n      ? { status: response.status, errText }\n      : { status: response.status, errText, retryAfterMs }\n  }\n  return { response, cleanup }\n}\n\n/**\n * The StreamChunk block-assembly state shared by both transport handlers:\n * at most one text block and one reasoning block are open at a time (same\n * assumption as the pi plugin).\n */\ninterface BlockAssembler {\n  nextIndex: number\n  textIndex: number\n  textContent: string\n  reasoningIndex: number\n  reasoningContent: string\n  sawContent: boolean\n  /** Buffered OpenAI tool-call fragments, flushed at finish. */\n  openAiToolCalls: Array<{ index: number; id?: string; name: string; arguments: string }>\n}\n\n/** Fresh block-assembly state for one stream. */\nfunction createBlockAssembler(): BlockAssembler {\n  return {\n    nextIndex: 0,\n    textIndex: -1,\n    textContent: '',\n    reasoningIndex: -1,\n    reasoningContent: '',\n    sawContent: false,\n    openAiToolCalls: [],\n  }\n}\n\nfunction* closeText(asm: BlockAssembler): Generator<StreamChunk> {\n  if (asm.textIndex < 0) return\n  yield {\n    type: 'block-end',\n    index: asm.textIndex,\n    block: { type: 'text', text: asm.textContent },\n  }\n  asm.textIndex = -1\n  asm.textContent = ''\n}\n\nfunction* closeReasoning(asm: BlockAssembler): Generator<StreamChunk> {\n  if (asm.reasoningIndex < 0) return\n  yield {\n    type: 'block-end',\n    index: asm.reasoningIndex,\n    block: { type: 'reasoning', text: asm.reasoningContent },\n  }\n  asm.reasoningIndex = -1\n  asm.reasoningContent = ''\n}\n\nfunction* emitOpenAiToolCalls(asm: BlockAssembler): Generator<StreamChunk> {\n  for (const call of asm.openAiToolCalls) {\n    const id = call.id ?? randomUUID()\n    const name = call.name ?? ''\n    const args = call.arguments || '{}'\n    const index = asm.nextIndex++\n    asm.sawContent = true\n    yield { type: 'block-start', index, blockType: 'tool-call' }\n    yield { type: 'tool-call-delta', index, id: ToolCallId(id), name, argumentsDelta: args }\n    yield {\n      type: 'block-end',\n      index,\n      block: { type: 'tool-call', id: ToolCallId(id), name, arguments: args },\n    }\n  }\n  asm.openAiToolCalls.length = 0\n}\n\nexport class CommandCodeAdapter<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions> extends LlmAdapter {\n  private catalog: CommandCodeModel[] = []\n  private readonly fetchImpl: typeof fetch\n  private readonly resolveAttachments: ResolveAttachments | undefined\n  // Billing facts are per account: with a multi-account pool each key has its\n  // own subscription tier, so the cache and the in-flight dedupe are keyed by\n  // the resolved API key (process-local only, never logged). Entries are\n  // small and bounded by the account count in practice; a changed key simply\n  // starts a fresh entry while the orphaned one goes cold (no eviction —\n  // transience is intentional, persistence would serve stale tiers).\n  private readonly billingAccess = new Map<string, { value: CommandCodeBillingAccess | undefined; at: number }>()\n  private readonly billingAccessInflight = new Map<string, Promise<CommandCodeBillingAccess | undefined>>()\n  // Protocol preference is per account: the Go plan is the only plan without\n  // Provider API access, and that fact is independent of model. A negative\n  // result (provider API rejected this key with upgrade_required) is cached so\n  // every request does not pay the double TTFT of probing then falling back.\n  // Same bounded-by-account-count note as above: no eviction by design.\n  private readonly protocolCache = new Map<string, { useCli: boolean; at: number }>()\n\n  constructor(private readonly deps: CommandCodeAdapterDeps<C>) {\n    super()\n    this.fetchImpl = deps.fetchImpl ?? fetch\n    this.resolveAttachments = deps.resolveAttachments\n  }\n\n  /**\n   * Display metadata for the picker's provider group header. The base class\n   * returns the raw route id (`commandcode`, all lowercase) as the name, which\n   * is what the model selector shows as this group's sticky title; return the\n   * proper display name instead, matching the Models settings page card (the\n   * configurable-provider `displayName`). The id must stay equal to the route.\n   */\n  override providerInfo(provider: string): LlmProviderInfo {\n    return { id: provider, name: 'Command Code' }\n  }\n\n  /**\n   * Near-unbounded retry for transient failures only (`mode: 'normal'` with\n   * an explicit 1000-attempt cap — opencode-style persistence without the\n   * unbounded loop): `RATE_LIMIT`/`SERVER`/`TIMEOUT`/`TRANSPORT`/\n   * `EMPTY_RESPONSE` retry up to 1000 times with waits doubling from 500 ms\n   * and capping at 15 minutes (±10% jitter), so an exhausted 5-hour window\n   * recovers in-session instead of failing after two tries. Permanent\n   * failures (an invalid key's `INVALID_CREDENTIAL`, `UNSUPPORTED_CONTENT`,\n   * plan rejections) are absent from the whitelist and surface immediately\n   * instead of looping. Waits the pool/adapter attach as\n   * `providerRetryAfterMs` are honored verbatim at or below the 15-minute\n   * cap and never attached above it (in normal mode a longer attached wait\n   * makes the executor abandon the retry outright — see RETRY_MAX_DELAY_MS).\n   *\n   * Captured once at route registration (dsh-llm snapshots this value), so a\n   * future config knob for it would apply on profile restart, not per request.\n   */\n  override providerRetryPolicy(_provider: string): ResolvedRetryPolicy {\n    return resolveRetryPolicy(\n      {\n        mode: 'normal',\n        maxRetries: 1000,\n        retryableCodes: ['EMPTY_RESPONSE', 'RATE_LIMIT', 'SERVER', 'TIMEOUT', 'TRANSPORT'],\n        backoff: { initialDelayMs: 500, maxDelayMs: RETRY_MAX_DELAY_MS, jitterRatio: 0.1 },\n      },\n      'llm-commandcode: retryPolicy',\n    )\n  }\n\n  /** Refresh the catalog (live fetch, cache fallback) and return it. */\n  private async loadCatalog(signal?: AbortSignal): Promise<CommandCodeModel[]> {\n    const { apiBase, modelsCachePath } = this.deps.options()\n    try {\n      const response = await this.fetchImpl(`${apiBase}/provider/v1/models`, {\n        headers: { accept: 'application/json', ...attributionHeaders() },\n        signal: signal ?? AbortSignal.timeout(MODELS_TIMEOUT_MS),\n      })\n      if (!response.ok) {\n        throw new Error(`models endpoint returned ${response.status}`)\n      }\n      this.catalog = parseCatalogResponse(await response.json())\n      await writeModelsCache(modelsCachePath, this.catalog).catch(() => undefined)\n    } catch (error) {\n      if (signal?.aborted) throw error\n      // A catalog refresh failure is a degradation, not a request failure:\n      // fall back to the last successful catalog on disk (or the in-memory\n      // one from an earlier successful load). The adapter still serves any\n      // model the user names; only the advisory selector loses entries.\n      this.catalog = await readModelsCache(modelsCachePath).catch(() => this.catalog)\n    }\n    return this.catalog\n  }\n\n  override async listModels(\n    provider: string,\n    opts?: { unfiltered?: boolean },\n  ): Promise<readonly LlmModelInfo[]> {\n    const catalog = await this.loadCatalog()\n    const toInfo = (model: (typeof catalog)[number]) => {\n      const vision = KNOWN_IMAGE_MODELS.has(model.id)\n      return {\n        provider,\n        id: model.id,\n        name: `${model.name} (CC)`,\n        // The picker renders `description` under the model name: plan tier,\n        // active deal, Image marker for Vision models, and context window.\n        description: capabilityDescription(model.id, model.contextWindow),\n        inputModalities: vision ? (['text', 'image'] as const) : (['text'] as const),\n      }\n    }\n    // Unfiltered: the settings page's catalog endpoint serves the full catalog\n    // so the filter editor can always offer every model.\n    if (opts?.unfiltered === true) return catalog.map(toInfo).sort(compareByPlan)\n    // Plan filter: hide models above the account's subscription tier. Fails\n    // open — a billing-fetch problem, an unknown plan, or a positive\n    // on-demand balance all keep the full catalog visible, and the server\n    // remains the final gate (403 MODEL_NOT_IN_PLAN). The catalog itself is\n    // never filtered: resolveModel still serves every model.\n    const access = this.deps.options().filterModelsByPlan === false\n      ? undefined\n      : await this.loadBillingAccess()\n    // Visible-model allowlist: empty/unset means \"show everything\".\n    const visible = this.deps.options().visibleModels\n    const allow = Array.isArray(visible) && visible.length > 0\n      ? new Set(visible.filter((id) => typeof id === 'string' && id !== ''))\n      : undefined\n    // Per-model overrides, written by the terminal settings page's checkboxes\n    // (its seam can only give each model its own boolean field, and a boolean\n    // cannot express \"this id is in the list\"). An explicit flag decides the\n    // model on its own; everything unflagged still follows the array above, so\n    // a composition-config allowlist and the web page keep working untouched.\n    const overrides = this.deps.options().modelVisibility\n    return catalog\n      .filter((model) => modelVisibleInPlan(model.id, access))\n      .filter((model) => {\n        const override = overrides?.[model.id]\n        if (typeof override === 'boolean') return override\n        return allow === undefined || allow.has(model.id)\n      })\n      .map(toInfo)\n      // The picker renders rows in the order returned: sort by plan tier\n      // (Go first, … Provider last) so the models a Go-plan user can actually\n      // use lead the list, then alphabetically within each tier.\n      .sort(compareByPlan)\n  }\n\n  override async resolveModel(\n    provider: string,\n    model: string,\n    signal?: AbortSignal,\n  ): Promise<LlmResolvedModelInfo> {\n    const entry =\n      this.catalog.find((m) => m.id === model) ??\n      (await this.loadCatalog(signal)).find((m) => m.id === model)\n\n    const efforts = KNOWN_EFFORTS[model]\n    const vision = KNOWN_IMAGE_MODELS.has(model)\n    return {\n      provider,\n      id: model,\n      name: entry ? `${entry.name} (CC)` : model,\n      description: capabilityDescription(model, entry?.contextWindow),\n      inputModalities: vision ? (['text', 'image'] as const) : (['text'] as const),\n      ...(entry\n        ? {\n            context: { contextWindow: entry.contextWindow },\n            defaultMaxTokens: Math.min(entry.maxTokens, DEFAULT_GENERATE_MAX_TOKENS),\n          }\n        : {}),\n      // Omit `reasoning` entirely for models without known effort support:\n      // the harness then treats the model as having no selectable efforts.\n      ...(efforts\n        ? {\n            reasoning: {\n              efforts: efforts.map((effort) => ({\n                id: ReasoningEffortId(effort),\n                name: effort,\n              })),\n            },\n          }\n        : {}),\n    }\n  }\n\n  /** The headers every authenticated account endpoint shares. */\n  private async accountHeaders(apiKey?: string): Promise<Record<string, string>> {\n    const connection = this.deps.options()\n    const key = apiKey ?? (await this.deps.resolveApiKey(connection))\n    return {\n      Authorization: `Bearer ${key}`,\n      'x-command-code-version': COMMAND_CODE_CLI_VERSION,\n      'x-cli-environment': 'production',\n      ...attributionHeaders(),\n    }\n  }\n\n  /**\n   * Fetch one account endpoint and parse its JSON body. Returns the HTTP\n   * status alongside the parsed record so each caller applies its own\n   * failure accounting: the billing probe fails open silently, the usage\n   * report books failures per endpoint. Non-2xx and non-record bodies come\n   * back without a record; only a transport throw propagates to the caller.\n   */\n  private async fetchEndpointJson(\n    url: string,\n    headers: Record<string, string>,\n  ): Promise<{ status: number; record?: Record<string, unknown> }> {\n    const response = await this.fetchImpl(url, {\n      headers,\n      // A hung account endpoint must not stall the picker / usage card forever.\n      signal: AbortSignal.timeout(MODELS_TIMEOUT_MS),\n    })\n    if (!response.ok) return { status: response.status }\n    const parsed: unknown = await response.json()\n    return { status: response.status, ...(isRecord(parsed) ? { record: parsed } : {}) }\n  }\n\n  /**\n   * The billing facts behind the picker's plan filter, cached for\n   * {@link BILLING_ACCESS_TTL_MS} and shared across concurrent callers.\n   * `undefined` means \"unknown — show everything\" (fail-open).\n   */\n  private async loadBillingAccess(): Promise<CommandCodeBillingAccess | undefined> {\n    let apiKey: string\n    try {\n      apiKey = await this.deps.resolveApiKey(this.deps.options())\n    } catch {\n      return undefined\n    }\n    const cached = this.billingAccess.get(apiKey)\n    if (cached !== undefined && Date.now() - cached.at < BILLING_ACCESS_TTL_MS) return cached.value\n    const existing = this.billingAccessInflight.get(apiKey)\n    if (existing !== undefined) return existing\n    const inflight = this.fetchBillingAccess(apiKey)\n      .then((value) => {\n        this.billingAccess.set(apiKey, { value, at: Date.now() })\n        return value\n      })\n      .finally(() => {\n        this.billingAccessInflight.delete(apiKey)\n      })\n    this.billingAccessInflight.set(apiKey, inflight)\n    return inflight\n  }\n\n  /**\n   * The billing facts behind the picker's plan filter, mirroring the CLI's\n   * `createBilling` flow: whoami yields the org id, then the subscriptions\n   * and credits endpoints answer in parallel. The plan id is honored only\n   * when the subscription reports an active-ish status (the CLI's rule); when\n   * the subscriptions endpoint fails entirely, `credits.planId` is the\n   * fallback (the CLI stamps plan identity from it too). Any failure resolves\n   * to `undefined` (fail-open) rather than breaking the picker.\n   */\n  private async fetchBillingAccess(apiKey: string): Promise<CommandCodeBillingAccess | undefined> {\n    try {\n      const connection = this.deps.options()\n      const headers = await this.accountHeaders(apiKey)\n      const base = connection.apiBase\n      // Billing probe fails open silently: any non-record is \"unknown\".\n      const getJson = async (path: string): Promise<Record<string, unknown> | undefined> =>\n        (await this.fetchEndpointJson(`${base}${path}`, headers)).record\n      const whoami = await getJson('/alpha/whoami')\n      const orgData = whoami && isRecord(whoami.org) ? whoami.org : undefined\n      const orgId = orgData === undefined ? undefined : stringValue(orgData.id)\n      const [subscription, credits] = await Promise.all([\n        getJson(orgId === undefined\n          ? '/alpha/billing/subscriptions'\n          : `/alpha/billing/subscriptions?orgId=${encodeURIComponent(orgId)}`),\n        getJson('/alpha/billing/credits'),\n      ])\n      const subData = subscription && isRecord(subscription.data) ? subscription.data : undefined\n      const creditsData = credits && isRecord(credits.credits) ? credits.credits : undefined\n      if (subData === undefined && creditsData === undefined) return undefined\n      let planId: string | undefined\n      if (subData !== undefined) {\n        const status = stringValue(subData.status)\n        if (status !== undefined && ACTIVE_SUBSCRIPTION_STATUSES.has(status)) planId = stringValue(subData.planId)\n      } else {\n        planId = stringValue(creditsData?.planId)\n      }\n      return {\n        tierWeight: planId === undefined ? undefined : subscriptionPlanInfo(planId)?.tierWeight,\n        onDemandCredits: (numberValue(creditsData?.purchasedCredits) ?? 0) + (numberValue(creditsData?.freeCredits) ?? 0),\n      }\n    } catch {\n      return undefined\n    }\n  }\n\n  /** Fresh cached billing tier weight for a key, or undefined when not known. */\n  private cachedBillingTierWeight(apiKey: string): number | undefined {\n    const hit = this.billingAccess.get(apiKey)\n    if (hit === undefined || Date.now() - hit.at >= BILLING_ACCESS_TTL_MS) return undefined\n    return hit.value?.tierWeight\n  }\n\n  /** Cached protocol decision for a key, or undefined when expired/unknown. */\n  private cachedProtocolUseCli(apiKey: string): boolean | undefined {\n    const hit = this.protocolCache.get(apiKey)\n    if (hit === undefined || Date.now() - hit.at >= PROTOCOL_CACHE_TTL_MS) return undefined\n    return hit.useCli\n  }\n\n  private rememberProtocol(apiKey: string, useCli: boolean): void {\n    this.protocolCache.set(apiKey, { useCli, at: Date.now() })\n  }\n\n  /**\n   * Choose the initial protocol for one request. A fresh protocol cache entry\n   * wins; otherwise a cached (not network-fetched) billing tier of Go is\n   * treated as CLI-only. Unknown accounts default to Provider API and fall\n   * back only after an `upgrade_required` rejection.\n   */\n  private resolveProtocol(apiKey: string): CommandCodeProtocol {\n    const forced = this.deps.options().protocol\n    if (forced === 'cli' || forced === 'openai') return forced\n    const cached = this.cachedProtocolUseCli(apiKey)\n    if (cached !== undefined) return cached ? 'cli' : 'openai'\n    if (this.cachedBillingTierWeight(apiKey) === GO_TIER_WEIGHT) {\n      this.rememberProtocol(apiKey, true)\n      return 'cli'\n    }\n    return 'openai'\n  }\n\n\n  /**\n   * Fetch account, usage, credit, and subscription state from the Command\n   * Code account endpoints (`/alpha/whoami`, `/alpha/usage/summary`,\n   * `/alpha/billing/credits`, `/alpha/billing/subscriptions`).\n   * Each endpoint degrades independently: a failed one lands in `failures`\n   * while the rest still report, so a transient outage never blanks the whole\n   * view. Requires a usable API key (throws `MISSING_CREDENTIAL` otherwise).\n   * Pass `apiKey` to report on a specific account of a multi-account pool;\n   * the default resolves the currently active account.\n   */\n  async getUsage(apiKey?: string): Promise<CommandCodeUsageReport> {\n    const connection = this.deps.options()\n    const base = connection.apiBase\n    const headers = await this.accountHeaders(apiKey)\n    const failures: string[] = []\n    // HTTP status per failed endpoint (undefined for transport failures), in\n    // failure order — the all-failed classification below reads it.\n    const failedStatuses: Array<number | undefined> = []\n\n    const getJson = async (path: string): Promise<Record<string, unknown> | undefined> => {\n      try {\n        const { status, record } = await this.fetchEndpointJson(`${base}${path}`, headers)\n        if (record === undefined) {\n          failures.push(`${path}: HTTP ${status}`)\n          failedStatuses.push(status)\n          return undefined\n        }\n        return record\n      } catch (error: unknown) {\n        failures.push(`${path}: ${error instanceof Error ? error.message : String(error)}`)\n        failedStatuses.push(undefined)\n        return undefined\n      }\n    }\n\n    const report: CommandCodeUsageReport = { failures }\n\n    // whoami first (account identity + the org id the subscriptions query\n    // needs); the other three endpoints are independent once headers exist,\n    // so they run in parallel instead of paying 4x the timeout serially.\n    const whoami = await getJson('/alpha/whoami')\n    const { account, orgId } = parseAccountIdentity(whoami)\n    if (account !== undefined) report.account = account\n    const [usage, credits, subscription] = await Promise.all([\n      getJson('/alpha/usage/summary'),\n      getJson('/alpha/billing/credits'),\n      getJson(orgId === undefined\n        ? '/alpha/billing/subscriptions'\n        : `/alpha/billing/subscriptions?orgId=${encodeURIComponent(orgId)}`),\n    ])\n\n    // usage/summary -> totals.\n    const totals = parseUsageTotals(usage)\n    if (totals !== undefined) report.usage = totals\n\n    // billing/credits -> credit + window limits.\n    const limits = parseCreditLimits(credits)\n    if (limits !== undefined) report.credits = limits\n\n    // billing/subscriptions -> plan identity + billing period. The credits\n    // response may also carry a planId; it is the fallback when the\n    // subscriptions endpoint fails.\n    const subData = subscription !== undefined && isRecord(subscription.data) ? subscription.data : undefined\n    const creditsData = credits !== undefined && isRecord(credits.credits) ? credits.credits : undefined\n    const planId = stringValue(subData?.planId) ?? stringValue(creditsData?.planId)\n    if (subData !== undefined || planId !== undefined) {\n      const info = planId === undefined ? undefined : subscriptionPlanInfo(planId)\n      report.plan = {\n        planId: planId ?? '',\n        name: info?.name ?? planId ?? '',\n        status: stringValue(subData?.status) ?? '',\n        monthlyCredits: info?.monthlyCredits ?? null,\n        currentPeriodEnd: periodEndValue(subData?.currentPeriodEnd),\n      }\n    }\n\n    const blocked = classifyTotalFailure(failures, failedStatuses)\n    if (blocked !== undefined) report.blocked = blocked\n\n    return report\n  }\n\n  /**\n   * Probe one account's five-hour window from `/alpha/billing/credits`. The\n   * multi-account pool calls this when every account is marked exhausted: an\n   * account whose window no longer reports `exceeded` is revived, and the\n   * `resetAt` values feed the \"earliest reset\" error message. Returns\n   * `undefined` when the probe itself failed (transport, non-200, or a\n   * payload without window limits) — a failed probe never changes pool state.\n   */\n  async probeFiveHourWindow(apiKey: string): Promise<{ exceeded: boolean; resetAt: number } | undefined> {\n    try {\n      const connection = this.deps.options()\n      const response = await this.fetchImpl(`${connection.apiBase}/alpha/billing/credits`, {\n        headers: await this.accountHeaders(apiKey),\n        signal: AbortSignal.timeout(MODELS_TIMEOUT_MS),\n      })\n      if (!response.ok) return undefined\n      const parsed: unknown = await response.json()\n      if (!isRecord(parsed)) return undefined\n      const windowLimits = isRecord(parsed.windowLimits) ? parsed.windowLimits : undefined\n      const fiveHour = windowLimits && isRecord(windowLimits.fiveHour) ? windowLimits.fiveHour : undefined\n      if (fiveHour === undefined) return undefined\n      return { exceeded: fiveHour.exceeded === true, resetAt: numberValue(fiveHour.resetAt) ?? 0 }\n    } catch {\n      return undefined\n    }\n  }\n\n  async *stream(options: GenerateOptions): AsyncIterable<StreamChunk> {\n    if (options.stop?.length) {\n      // The Command Code wire format has no documented stop field; refuse\n      // loudly instead of silently dropping a request field.\n      throw new LlmError('Command Code adapter does not support stop sequences', 'UNSUPPORTED_OPTION')\n    }\n    const hasImages = options.messages.some(hasImageContent)\n    // Per-call image byte resolver, set only when this request carries images.\n    // Local, not an instance field: concurrent streams must never read each\n    // other's resolver.\n    let readImage: ((ref: ImageAttachmentRef) => Promise<Uint8Array>) | undefined\n    if (hasImages) {\n      // Model-capability gate: only models the official registry lists with\n      // Vision accept images natively. Command Code's own CLI falls back to a\n      // client-side VISION side-call for text-only models; this adapter does\n      // not reproduce that interactive feature, so it refuses loudly instead\n      // of sending bytes to a model that cannot read them.\n      if (!KNOWN_IMAGE_MODELS.has(options.model)) {\n        throw new LlmError(\n          `Command Code model \"${options.model}\" does not support image input;`\n          + ' switch to a Vision-capable model (see the model registry)',\n          'UNSUPPORTED_CONTENT',\n        )\n      }\n      // Attachment seam: images arrive as durable references; resolving them\n      // requires the host's attachment service.\n      const attachments = this.resolveAttachments?.()\n      if (attachments === undefined) {\n        throw new LlmError(\n          'Command Code image input requires the durable attachment service',\n          'UNSUPPORTED_CONTENT',\n        )\n      }\n      readImage = (ref) => attachments.readImage(ref).then((stored) => stored.data)\n    }\n\n    const connection = this.deps.options()\n    // The model id reaches key resolution so hosts with model→account routing\n    // rules can pick the account that covers this model.\n    let apiKey = await this.deps.resolveApiKey(connection, options.model)\n    // Cap maxTokens from the in-memory catalog: it warms via listModels /\n    // resolveModel on picker paths, and a fresh-process catalog must not add\n    // a models fetch (and its failure modes) in front of every generate.\n    const modelMax = this.catalog.find((m) => m.id === options.model)?.maxTokens\n      ?? DEFAULT_MAX_OUTPUT_TOKENS\n    const maxTokens = Math.min(\n      options.maxTokens ?? modelMax,\n      modelMax,\n      DEFAULT_GENERATE_MAX_TOKENS,\n    )\n\n    const effort = options.reasoningEffort as string | undefined\n    const supported = KNOWN_EFFORTS[options.model]\n    const reasoningEffort =\n      effort && effort !== 'off' && supported?.includes(effort) ? effort : undefined\n\n    const systemText = [\n      options.system ?? '',\n      ...options.messages\n        .filter((m) => m.role === 'system')\n        .map((m) => m.content.map(blockText).filter(Boolean).join('\\n')),\n    ]\n      .filter(Boolean)\n      .join('\\n\\n')\n\n    // Endpoint protocol: billing/cache may know Go plan -> CLI; unknown\n    // accounts default to the documented Provider Chat Completions surface.\n    let protocol: CommandCodeProtocol = this.resolveProtocol(apiKey)\n    const buildBody = async (target: CommandCodeProtocol): Promise<Record<string, unknown>> =>\n      target === 'cli'\n        ? buildCliBody(options, connection, { maxTokens, reasoningEffort, systemText, readImage })\n        : buildOpenAIBody(options, { maxTokens, reasoningEffort, systemText, readImage })\n    let body: Record<string, unknown> = await buildBody(protocol)\n\n\n    // Account rotation loop: the first attempt uses the pool's active key; a\n    // pre-stream 429/401 rotates to the next account (at most one attempt per\n    // distinct key, hard-capped so a misbehaving hook cannot loop forever).\n    // requestTimeoutMs bounds the headers wait of EACH attempt (see\n    // connectGenerate); the body is account-independent, nothing has\n    // streamed yet, so the switch is invisible to the caller.\n    const tried = new Set<string>()\n    const connectDeps: GenerateConnectDeps = { options, connection, fetchImpl: this.fetchImpl }\n    let connected: { response: Response; cleanup: () => void } | undefined\n    for (;;) {\n      tried.add(apiKey)\n      const attempt = await connectGenerate(connectDeps, apiKey, protocol, body)\n      if ('response' in attempt) {\n        connected = attempt\n        break\n      }\n      // Provider API is the preferred surface for non-Go accounts. If the\n      // gateway says the key is on the Go plan (the only plan without API\n      // access), remember that and retry the same key through /alpha/generate\n      // without burning the double TTFT on every later request.\n      if (\n        protocol === 'openai'\n        && isUpgradeRequiredError(attempt.status, attempt.errText)\n      ) {\n        protocol = 'cli'\n        this.rememberProtocol(apiKey, true)\n        body = await buildBody('cli')\n        continue\n      }\n      const rotate = this.deps.rotateApiKey\n      if (\n        (attempt.status === 429 || attempt.status === 401)\n        && rotate !== undefined\n        && options.signal?.aborted !== true\n        && tried.size < MAX_ACCOUNT_ROTATIONS\n      ) {\n        const next = await rotate(apiKey, attempt.status === 429 ? 'rate-limit' : 'invalid-credential', connection, options.model)\n        if (next !== undefined && !tried.has(next)) {\n          apiKey = next\n          continue\n        }\n      }\n      throw generateHttpError(attempt.status, attempt.errText, attempt.retryAfterMs)\n    }\n    if (connected === undefined) {\n      // Unreachable: the loop only exits via `break` (connected set) or\n      // `throw` above. The guard keeps the narrowing explicit.\n      throw new LlmError('Command Code API connection failed without a response', 'TRANSPORT')\n    }\n    const { response, cleanup } = connected\n    if (!response.body) {\n      cleanup()\n      throw new LlmError('Command Code API returned no response body', 'PROVIDER_PROTOCOL_ERROR')\n    }\n\n    // --- SSE/JSONL event stream -> harness StreamChunk protocol ---\n    const reader = response.body.getReader()\n    const decoder = new TextDecoder()\n    let buffer = ''\n\n    // Stream idle watchdog: a generation that stalls this long has a dead\n    // connection (the API keeps the socket open between reasoning/text\n    // bursts). The default (300s) is deliberately generous: frontier\n    // reasoning models (xhigh/max effort) can legitimately stay silent for\n    // minutes while thinking, and the official CLI sets no idle cap at all —\n    // an aggressive cap turns long thinking into spurious TIMEOUTs and\n    // retries. reader.cancel() unblocks a pending read(), which the loop then\n    // turns into a TIMEOUT failure instead of hanging forever.\n    let idleTimer: ReturnType<typeof setTimeout> | undefined\n    let idleFired = false\n    const armIdle = () => {\n      if (idleTimer !== undefined) clearTimeout(idleTimer)\n      idleTimer = setTimeout(() => {\n        idleFired = true\n        void reader.cancel().catch(() => undefined)\n      }, connection.streamIdleTimeoutMs)\n    }\n    const clearIdle = () => {\n      if (idleTimer !== undefined) {\n        clearTimeout(idleTimer)\n        idleTimer = undefined\n      }\n    }\n\n    const asm = createBlockAssembler()\n    const handle = (event: unknown): StreamChunk[] => handleEvent(asm, protocol, event)\n    try {\n      let finished = false\n      for (;;) {\n        let read: ReadableStreamReadResult<Uint8Array>\n        armIdle()\n        try {\n          read = await reader.read()\n        } catch (error: unknown) {\n          // A mid-stream transport failure (connection reset, TLS teardown)\n          // surfaces here. Caller cancellation propagates as-is.\n          if (options.signal?.aborted) throw error\n          throw new LlmError(\n            `Command Code API stream from ${connection.apiBase} failed while reading: ${errorChain(error)}`\n            + '；Command Code API 流式响应中途断开——网络波动所致，重试通常可恢复',\n            'TRANSPORT',\n            { cause: error },\n          )\n        } finally {\n          clearIdle()\n        }\n        const { done, value } = read\n        if (done) {\n          // The idle watchdog cancels the reader to unblock a stalled read;\n          // cancel() resolves a pending read() as done, so a done here after\n          // the watchdog fired is a timeout, not a normal stream end.\n          if (idleFired) {\n            throw new LlmError(\n              `Command Code API stream from ${connection.apiBase} was idle for ${connection.streamIdleTimeoutMs}ms`\n              + ' (no events) and was treated as a dead connection'\n              + `；Command Code API 流式响应已 ${connection.streamIdleTimeoutMs} 毫秒无任何事件，被判定为死连接——长思考模型可在设置中调大流空闲超时`,\n              'TIMEOUT',\n            )\n          }\n          if (buffer.trim()) {\n            // The final line may lack its trailing newline: account its\n            // chunks exactly like the line loop (a trailing `finish` must\n            // set `finished`, or the tail below would emit a second one).\n            for (const chunk of handle(parseStreamEventLine(buffer))) {\n              yield chunk\n              if (chunk.type === 'finish') finished = true\n            }\n          }\n          break\n        }\n        buffer += decoder.decode(value, { stream: true })\n        const lines = buffer.split('\\n')\n        buffer = lines.pop() ?? ''\n        for (const line of lines) {\n          const chunks = handle(parseStreamEventLine(line))\n          for (const chunk of chunks) {\n            yield chunk\n            if (chunk.type === 'finish') finished = true\n          }\n        }\n        if (finished) break\n      }\n      if (!finished) {\n        // Stream ended without a finish event: close open blocks and\n        // terminate according to the adapter contract (usage, then finish).\n        yield* closeText(asm)\n        yield* closeReasoning(asm)\n        if (protocol === 'openai') yield* emitOpenAiToolCalls(asm)\n        if (!asm.sawContent) {\n          throw new LlmError('Command Code returned an empty response；Command Code 返回了空响应，重试通常可恢复', 'EMPTY_RESPONSE')\n        }\n        yield { type: 'finish', reason: { kind: 'stop' } }\n      }\n    } finally {\n      clearIdle()\n      cleanup()\n      await reader.cancel().catch(() => undefined)\n      reader.releaseLock()\n    }\n  }\n}\n\n/**\n * Map a pre-stream generate HTTP failure onto a stable LlmError. Command\n * Code folds several business rejections into 403 (plan limits, CLI version,\n * model access): prefer the machine-readable `error.code` when present; the\n * status alone cannot distinguish them. A 429's `Retry-After` rides along as\n * `providerRetryAfterMs` so dsh-llm-retry can wait exactly that long instead\n * of guessing at the backoff cadence — capped at RETRY_MAX_DELAY_MS, because\n * in normal mode a longer attached wait makes the executor abandon the retry\n * outright instead of falling back to local backoff.\n */\nfunction generateHttpError(status: number, errText: string, retryAfterMs?: number): LlmError {\n  let providerCode: string | undefined\n  try {\n    const parsed: unknown = JSON.parse(errText)\n    if (isRecord(parsed) && isRecord(parsed.error)) {\n      providerCode = stringValue(parsed.error.code)\n    }\n  } catch {\n    // Plain-text bodies: rely on the status mapping below.\n  }\n  const detail = providerCode ?? `HTTP ${status}`\n  if (status === 401) {\n    // An invalid or missing credential is a config problem, not a\n    // transport failure: retrying it identically cannot succeed. Bilingual —\n    // the harness UI renders this message verbatim in its retry chrome.\n    return new LlmError(\n      `Command Code API error 401 (${detail}): the API key is missing or invalid — check the`\n      + ' key stored for COMMANDCODE_API_KEY (Models page) or the auth file'\n      + '；Command Code API 返回 401：API 密钥缺失或无效——请在设置页检查 COMMANDCODE_API_KEY 存储的密钥，或检查 auth 文件',\n      'INVALID_CREDENTIAL',\n      { status: 401 },\n    )\n  }\n  return new LlmError(\n    `Command Code API error ${status}${detail === `HTTP ${status}` ? '' : ` (${detail})`}: ${errText.slice(0, 500)}`,\n    status === 429 ? 'RATE_LIMIT' : 'PROVIDER_HTTP_ERROR',\n    {\n      status,\n      ...(retryAfterMs !== undefined && retryAfterMs > 0 && retryAfterMs <= RETRY_MAX_DELAY_MS\n        ? { providerRetryAfterMs: retryAfterMs }\n        : {}),\n    },\n  )\n}\n\n\n/**\n * Handle one CLI-transport (`/alpha/generate`) stream event, appending\n * harness StreamChunks. Pure over the passed assembler — no stream() locals.\n */\nfunction handleCliEvent(asm: BlockAssembler, event: unknown): StreamChunk[] {\n  const chunks: StreamChunk[] = []\n  if (!isRecord(event)) return chunks\n\n  switch (event.type) {\n    case 'text-delta': {\n      chunks.push(...closeReasoning(asm))\n      if (asm.textIndex < 0) {\n        asm.textIndex = asm.nextIndex++\n        chunks.push({ type: 'block-start', index: asm.textIndex, blockType: 'text' })\n      }\n      const delta = stringValue(event.text) ?? ''\n      asm.textContent += delta\n      asm.sawContent = true\n      chunks.push({ type: 'text-delta', index: asm.textIndex, text: delta })\n      break\n    }\n    case 'reasoning-delta': {\n      chunks.push(...closeText(asm))\n      if (asm.reasoningIndex < 0) {\n        asm.reasoningIndex = asm.nextIndex++\n        chunks.push({ type: 'block-start', index: asm.reasoningIndex, blockType: 'reasoning' })\n      }\n      const delta = stringValue(event.text) ?? ''\n      asm.reasoningContent += delta\n      chunks.push({ type: 'reasoning-delta', index: asm.reasoningIndex, text: delta })\n      break\n    }\n    case 'reasoning-start':\n      chunks.push(...closeText(asm))\n      break\n    case 'reasoning-end':\n      chunks.push(...closeReasoning(asm))\n      break\n    case 'tool-call': {\n      chunks.push(...closeText(asm), ...closeReasoning(asm))\n      const id = stringValue(event.toolCallId) ?? randomUUID()\n      const name = stringValue(event.toolName) ?? ''\n      const args = JSON.stringify(recordOrEmpty(event.input ?? event.args ?? event.arguments))\n      const index = asm.nextIndex++\n      asm.sawContent = true\n      chunks.push(\n        { type: 'block-start', index, blockType: 'tool-call' },\n        { type: 'tool-call-delta', index, id: ToolCallId(id), name, argumentsDelta: args },\n        {\n          type: 'block-end',\n          index,\n          block: { type: 'tool-call', id: ToolCallId(id), name, arguments: args },\n        },\n      )\n      break\n    }\n    case 'finish': {\n      chunks.push(...closeText(asm), ...closeReasoning(asm))\n      const usage = isRecord(event.totalUsage) ? event.totalUsage : undefined\n      if (usage) {\n        const details = isRecord(usage.inputTokenDetails) ? usage.inputTokenDetails : undefined\n        const totalInput = numberValue(usage.inputTokens) ?? 0\n        const cacheRead = numberValue(details?.cacheReadTokens) ?? 0\n        const cacheWrite = numberValue(details?.cacheWriteTokens) ?? 0\n        // Harness TokenUsage counts are disjoint: uncached input only.\n        const tokenUsage: TokenUsage = {\n          inputTokens:\n            numberValue(details?.noCacheTokens) ?? Math.max(0, totalInput - cacheRead - cacheWrite),\n          outputTokens: numberValue(usage.outputTokens) ?? 0,\n          cacheReadTokens: cacheRead,\n          cacheWriteTokens: cacheWrite,\n        }\n        chunks.push({ type: 'usage', usage: tokenUsage })\n      }\n      chunks.push({ type: 'finish', reason: mapFinishReason(event.finishReason) })\n      break\n    }\n    case 'error': {\n      // Mirror the official CLI's stream-error classification\n      // (readStreamErrorEvent + isStreamErrorRetryable in command-code's\n      // cli.mjs): a stream error that is explicitly non-retryable, carries\n      // a terminal marker (quota/plan/credits), or reports a non-retryable\n      // HTTP status is a hard failure; anything else is a transient\n      // mid-stream drop that the harness's default retry policy should\n      // retry (SERVER is in the default retryable set, PROVIDER_STREAM_ERROR\n      // is not). Without this, a server-side blip that the official CLI\n      // silently recovers from fails the whole turn.\n      const err = isRecord(event.error) ? event.error : undefined\n      const detail = isRecord(event.error)\n        ? (stringValue(event.error.message) ?? JSON.stringify(event.error))\n        : (stringValue(event.error) ?? stringValue(event.message) ?? 'Stream error')\n      const statusCode = err ? numberValue(err.statusCode) : undefined\n      const isRetryable = err ? booleanValue(err.isRetryable) : undefined\n      const retryableStatus = statusCode !== undefined && (statusCode === 429 || statusCode >= 500)\n      const terminal = hasTerminalStreamMarker(detail)\n      const retryable = isRetryable === true\n        || (statusCode !== undefined ? retryableStatus : (isRetryable !== false && !terminal))\n      if (!retryable) {\n        throw new LlmError(\n          `Command Code stream error: ${detail}`,\n          'PROVIDER_STREAM_ERROR',\n          statusCode !== undefined ? { status: statusCode } : undefined,\n        )\n      }\n      throw new LlmError(\n        `Command Code stream error: ${detail}`,\n        'SERVER',\n        statusCode !== undefined ? { status: statusCode } : undefined,\n      )\n    }\n  }\n  return chunks\n}\n\n/**\n * Handle one OpenAI-transport (`/provider/v1/chat/completions`) SSE event.\n * Same assembler contract as {@link handleCliEvent}; tool-call fragments\n * buffer on the assembler and flush at finish.\n */\nfunction handleOpenAIEvent(asm: BlockAssembler, event: unknown): StreamChunk[] {\n  const chunks: StreamChunk[] = []\n  if (!isRecord(event)) return chunks\n  const choices = event.choices\n  if (!Array.isArray(choices) || choices.length === 0) {\n    // A standalone usage chunk (some OpenAI-compatible servers send it\n    // before [DONE]) still carries usage.\n    if (event.usage !== undefined) {\n      chunks.push({ type: 'usage', usage: mapOpenAIUsage(event.usage) })\n    }\n    return chunks\n  }\n  const choice = isRecord(choices[0]) ? choices[0] : {}\n  const delta = isRecord(choice.delta) ? choice.delta : {}\n\n  const reasoningDelta = stringValue(delta.reasoning) ?? stringValue(delta.reasoning_content) ?? ''\n  if (reasoningDelta !== '') {\n    chunks.push(...closeText(asm))\n    if (asm.reasoningIndex < 0) {\n      asm.reasoningIndex = asm.nextIndex++\n      chunks.push({ type: 'block-start', index: asm.reasoningIndex, blockType: 'reasoning' })\n    }\n    asm.reasoningContent += reasoningDelta\n    chunks.push({ type: 'reasoning-delta', index: asm.reasoningIndex, text: reasoningDelta })\n  }\n\n  const contentDelta = stringValue(delta.content) ?? ''\n  if (contentDelta !== '') {\n    chunks.push(...closeReasoning(asm))\n    if (asm.textIndex < 0) {\n      asm.textIndex = asm.nextIndex++\n      chunks.push({ type: 'block-start', index: asm.textIndex, blockType: 'text' })\n    }\n    asm.textContent += contentDelta\n    asm.sawContent = true\n    chunks.push({ type: 'text-delta', index: asm.textIndex, text: contentDelta })\n  }\n\n  if (Array.isArray(delta.tool_calls)) {\n    asm.sawContent = true\n    for (const rawCall of delta.tool_calls) {\n      if (!isRecord(rawCall)) continue\n      const callIndex = numberValue(rawCall.index) ?? 0\n      let existing = asm.openAiToolCalls.find((call) => call.index === callIndex)\n      const fn = isRecord(rawCall.function) ? rawCall.function : undefined\n      const id = stringValue(rawCall.id)\n      const name = fn === undefined ? undefined : stringValue(fn.name)\n      const argDelta = fn === undefined\n        ? undefined\n        : (stringValue(fn.arguments) ?? (fn.arguments === undefined ? '' : JSON.stringify(fn.arguments)))\n      if (!existing) {\n        existing = {\n          index: callIndex,\n          name: name ?? '',\n          arguments: argDelta ?? '',\n        }\n        if (id !== undefined) existing.id = id\n        asm.openAiToolCalls.push(existing)\n      } else {\n        if (id !== undefined && existing.id === undefined) existing.id = id\n        if (name !== undefined && existing.name === '') existing.name = name\n        if (argDelta !== undefined) existing.arguments += argDelta\n      }\n    }\n  }\n\n  if (choice.finish_reason !== undefined && choice.finish_reason !== null) {\n    chunks.push(...closeText(asm), ...closeReasoning(asm), ...emitOpenAiToolCalls(asm))\n    if (event.usage !== undefined) {\n      chunks.push({ type: 'usage', usage: mapOpenAIUsage(event.usage) })\n    }\n    chunks.push({ type: 'finish', reason: mapFinishReason(choice.finish_reason) })\n  }\n  return chunks\n}\n\n/** Dispatch one parsed stream event to the active transport's handler. */\nfunction handleEvent(asm: BlockAssembler, protocol: CommandCodeProtocol, event: unknown): StreamChunk[] {\n  return protocol === 'openai' ? handleOpenAIEvent(asm, event) : handleCliEvent(asm, event)\n}\n\n\n/**\n * Parse an HTTP `Retry-After` value (delay-seconds or an HTTP-date) into\n * milliseconds; undefined when absent or unparseable. An HTTP-date in the\n * past yields 0, which the caller drops (LlmError wants a positive delay).\n * A delay-seconds value whose millisecond product is not finite (e.g. `1e308`)\n * also yields undefined: LlmError validates its options and would otherwise\n * replace the provider failure with an internal construction error.\n */\nfunction parseRetryAfterMs(value: string | null | undefined, now = Date.now()): number | undefined {\n  if (value === undefined || value === null) return undefined\n  const trimmed = value.trim()\n  if (trimmed === '') return undefined\n  const seconds = Number(trimmed)\n  if (Number.isFinite(seconds) && seconds >= 0) {\n    const ms = seconds * 1000\n    return Number.isFinite(ms) ? Math.round(ms) : undefined\n  }\n  const date = Date.parse(trimmed)\n  if (!Number.isNaN(date)) return Math.max(0, date - now)\n  return undefined\n}\n\n/**\n * Map a stream finish reason onto the harness taxonomy. The two transports\n * spell tool-calls differently (`tool-calls` on the CLI transport,\n * `tool_calls` on the OpenAI transport) but share every other reason, so\n * one function serves both — a new reason cannot drift between them.\n */\nfunction mapFinishReason(reason: unknown): FinishReason {\n  if (reason === 'tool-calls' || reason === 'tool_calls') return { kind: 'tool-calls' }\n  if (\n    reason === 'length' ||\n    reason === 'max_tokens' ||\n    reason === 'max-tokens' ||\n    reason === 'max_output_tokens'\n  ) {\n    return { kind: 'max-tokens' }\n  }\n  return { kind: 'stop' }\n}\n\n/**\n * True when a Provider API pre-stream rejection is Command Code's Go-plan\n * gate (`upgrade_required`). Only this exact class of rejection should fall\n * back to the CLI /alpha/generate transport; other 4xx/5xx must surface as\n * ordinary errors so real account/model problems are not masked.\n */\nfunction isUpgradeRequiredError(status: number, errText: string): boolean {\n  if (status !== 403) return false\n  const lower = errText.toLowerCase()\n  if (lower.includes('upgrade_required')) return true\n  if (lower.includes('go plan') && lower.includes('api access')) return true\n  if (lower.includes('only plan without api access')) return true\n  if (lower.includes('upgrade to goat or higher')) return true\n  try {\n    const parsed: unknown = JSON.parse(errText)\n    if (isRecord(parsed)) {\n      const error = isRecord(parsed.error) ? parsed.error : parsed\n      const code = stringValue(error.code) ?? stringValue(error.type)\n      if (code?.toLowerCase() === 'upgrade_required') return true\n      const message = stringValue(error.message) ?? ''\n      if (message.toLowerCase().includes('go plan') && message.toLowerCase().includes('api access')) return true\n    }\n  } catch {\n    // Already handled via the plain-text substring checks above.\n  }\n  return false\n}\n\n/** Map an OpenAI Chat Completions usage payload to harness disjoint counts. */\nfunction mapOpenAIUsage(usage: unknown): TokenUsage {\n  const source = isRecord(usage) ? usage : {}\n  const promptTokens = numberValue(source.prompt_tokens) ?? 0\n  const outputTokens = numberValue(source.completion_tokens) ?? 0\n  const totalTokens = numberValue(source.total_tokens)\n  const promptDetails = isRecord(source.prompt_tokens_details) ? source.prompt_tokens_details : undefined\n  const cacheRead = numberValue(promptDetails?.cached_tokens) ?? 0\n  const cacheWrite = numberValue(promptDetails?.cache_creation_input_tokens) ?? 0\n  const completionDetails = isRecord(source.completion_tokens_details) ? source.completion_tokens_details : undefined\n  const reasoningTokens = numberValue(completionDetails?.reasoning_tokens)\n  const usageOut: TokenUsage = {\n    inputTokens: Math.max(0, promptTokens - cacheRead - cacheWrite),\n    outputTokens,\n    cacheReadTokens: cacheRead,\n  }\n  if (cacheWrite > 0) usageOut.cacheWriteTokens = cacheWrite\n  if (reasoningTokens !== undefined) usageOut.reasoningTokens = reasoningTokens\n  if (totalTokens !== undefined) usageOut.totalTokens = totalTokens\n  return usageOut\n}\n","/**\n * Locale copy for the `/commandcode` usage command and the friendly\n * image-gate error rewrite. Distinct from `./client/locales.ts` (the\n * settings-page namespace `settings.commandcode`): the command runs on the\n * Host and has no access to the client's `ctx.locale`, so the dictionaries\n * are exposed as plain constants for direct lookup; the resolver lives in\n * `pickCommandLocale()`. The image-gate wrapper also lives on the client\n * but is reached from a non-React path that has no `t` in scope, so the\n * same dictionaries serve both surfaces.\n *\n * zh is the source of truth for the key set; en must carry the exact same\n * keys — a mismatch is a compile error at the lookup site.\n */\n\n/** Active locale id recognized by the command and the image-gate wrapper. */\nexport type LocaleId = 'zh' | 'en'\n\n/** Dictionary keys used by the `/commandcode` command and the image-gate wrapper. */\nexport type CommandCodeCommandKey =\n  | 'title'                   // top heading of a single-account report\n  | 'accountTitle'            // per-account heading in the multi-account view\n  | 'accountSeparator'        // rule between accounts in the multi-account view\n  | 'activeBadge'             // \"currently serving\" badge\n  | 'invalidCredentialBadge'  // mark for an account whose key is invalid\n  | 'cooldownBadge'           // mark for an account in rate-limit cooldown\n  | 'rateLimitBadge'          // mark when the pool has marked a key rate-limited\n  | 'unconfigured'            // one-account row when the slot has no key\n  | 'blockedInvalidKey'       // top-of-report block when the whole account is 401\n  | 'blockedServiceUnavailable' // 5xx\n  | 'blockedNetwork'          // network unreachable\n  | 'planLine'                // \"  📦 套餐    {name}{status}{period}\"\n  | 'planPeriodSuffix'        // \" · 账期截止 {date}\" / \" · period ends {date}\"\n  | 'usageHeader'             // \"── 请求 ─────...\"\n  | 'requestsLine'            // \"  💬 请求    {n} 次 / 失败 {f}  成功率 {r}%\"\n  | 'costLine'                // \"  💰 花费    {money}  ({credits} credits)\"\n  | 'tokensLine'              // \"  🔤 Token   {in} 入 / {out} 出\"\n  | 'creditsHeader'           // \"── 信用 ─────...\"\n  | 'monthlyLine'             // \"  💳 月额度  {monthly}   (已购 {purchased} / 赠送 {free})\"\n  | 'barLine'                 // \"     └ {bar}  {pct}%\"\n  | 'windowsHeader'           // \"── 窗口用量 ─────...\"\n  | 'fiveHourLine'            // \"  ⏱ 5 小时  {used} / {cap}{warn}\"\n  | 'weeklyLine'              // \"  📅 每周    {used} / {cap}{warn}\"\n  | 'windowBarLine'           // \"     └ {bar}  重置 {when}\"\n  | 'exceededWarning'         // the trailing \"  ⚠️ 超限!\" / \"  ⚠️ exceeded!\"\n  | 'resetSuffix'             // \"重置 {when}\" (the suffix after the bar)\n  | 'partialFailures'         // \"⚠️  部分端点失败: {list}\"\n  | 'noData'                  // \"(no data — check your API key)\"\n  | 'errorText'               // \"Could not fetch Command Code usage: {message}\"\n  | 'imageGate'               // image-gate rejection rewrite (with {model})\n\nexport const commandcodeCommand: Record<LocaleId, Record<CommandCodeCommandKey, string>> = {\n  zh: {\n    title: '📊 Command Code 用量{account}',\n    accountTitle: '📊 {label}{badges}',\n    accountSeparator: '────────────────────',\n    activeBadge: '  ✅ 当前使用',\n    invalidCredentialBadge: '  ⛔ 密钥无效',\n    cooldownBadge: '  ⏳ 限额冷却中，重置 {when}',\n    rateLimitBadge: '  ⏳ 已达限额（等待窗口探测）',\n    unconfigured: '  (未配置 API 密钥)',\n    blockedInvalidKey:\n      '⛔ API 密钥无效或已过期 — 服务端拒绝了全部请求（401），请检查该账户的密钥配置',\n    blockedServiceUnavailable:\n      '⚠️ Command Code 服务暂时不可用（5xx），稍后重试',\n    blockedNetwork:\n      '⚠️ 无法连接 Command Code 服务 — 请检查网络或 API 地址',\n    planLine: '  📦 套餐    {name}{status}{period}',\n    planPeriodSuffix: ' · 账期截止 {date}',\n    usageHeader: '── 请求 ──────────────────────────────',\n    requestsLine: '  💬 请求    {n} 次 / 失败 {f}  成功率 {r}%',\n    costLine: '  💰 花费    {money}  ({credits} credits)',\n    tokensLine: '  🔤 Token   {in} 入 / {out} 出',\n    creditsHeader: '── 信用 ──────────────────────────────',\n    monthlyLine: '  💳 月额度  {monthly}   (已购 {purchased} / 赠送 {free})',\n    barLine: '     └ {bar}  {pct}%',\n    windowsHeader: '── 窗口用量 ──────────────────────────',\n    fiveHourLine: '  ⏱ 5 小时  {used} / {cap}{warn}',\n    weeklyLine: '  📅 每周    {used} / {cap}{warn}',\n    windowBarLine: '     └ {bar}  重置 {when}',\n    exceededWarning: '  ⚠️ 超限!',\n    resetSuffix: '重置 {when}',\n    partialFailures: '⚠️  部分端点失败: {list}',\n    noData: '（无数据 — 请检查 API 密钥）',\n    errorText: '获取 Command Code 用量失败：{message}',\n    imageGate:\n      '当前会话已包含图片，而模型 {model} 不支持图片输入；'\n      + '请选择支持图片的模型，或先移除会话中的图片。',\n  },\n  en: {\n    title: '📊 Command Code usage{account}',\n    accountTitle: '📊 {label}{badges}',\n    accountSeparator: '────────────────────',\n    activeBadge: '  ✅ active',\n    invalidCredentialBadge: '  ⛔ invalid key',\n    cooldownBadge: '  ⏳ cooling down, resets {when}',\n    rateLimitBadge: '  ⏳ rate-limited (waiting for window probe)',\n    unconfigured: '  (no API key configured)',\n    blockedInvalidKey:\n      '⛔ API key invalid or expired — the server rejected every request (401); check the key configured for this account',\n    blockedServiceUnavailable:\n      '⚠️ Command Code service temporarily unavailable (5xx); try again later',\n    blockedNetwork:\n      '⚠️ could not reach the Command Code service — check your network or the API base setting',\n    planLine: '  📦 Plan     {name}{status}{period}',\n    planPeriodSuffix: ' · period ends {date}',\n    usageHeader: '── Requests ──────────────────────────',\n    requestsLine: '  💬 Requests {n} / failed {f}  success rate {r}%',\n    costLine: '  💰 Spend    {money}  ({credits} credits)',\n    tokensLine: '  🔤 Tokens   {in} in / {out} out',\n    creditsHeader: '── Credits ───────────────────────────',\n    monthlyLine: '  💳 Monthly  {monthly}   (purchased {purchased} / free {free})',\n    barLine: '     └ {bar}  {pct}%',\n    windowsHeader: '── Window usage ──────────────────────',\n    fiveHourLine: '  ⏱ 5-hour   {used} / {cap}{warn}',\n    weeklyLine: '  📅 Weekly   {used} / {cap}{warn}',\n    windowBarLine: '     └ {bar}  resets {when}',\n    exceededWarning: '  ⚠️ exceeded!',\n    resetSuffix: 'resets {when}',\n    partialFailures: '⚠️  some endpoints failed: {list}',\n    noData: '(no data — check your API key)',\n    errorText: 'Could not fetch Command Code usage: {message}',\n    imageGate:\n      'This session already contains images, and model {model} does not accept'\n      + ' image input; please select an image-capable model, or remove the'\n      + ' images from the session first.',\n  },\n}\n\n/**\n * Resolve the active locale for a Host-side command run.\n *\n * Priority: explicit `override` (from `Config.lang`) → `LC_ALL` → `LANG` →\n * the conventional fallback (`'zh'`, matching the existing single-language\n * behavior so unconfigured deployments keep their current output).\n *\n * The values are matched on the leading tag only — `zh_CN.UTF-8`,\n * `zh-Hans`, `zh` all map to `'zh'`; everything starting with `en` maps to\n * `'en'`; anything else falls back to `'zh'` (a non-`en` shell that\n * already has Chinese in the terminal is the closest sensible default;\n * a Western shell that happens to be neither keeps the existing Chinese\n * output rather than swapping to half-translated English).\n */\nexport function pickCommandLocale(\n  override: string | undefined,\n  env: Readonly<Record<string, string | undefined>> = process.env as Record<string, string | undefined>,\n): LocaleId {\n  if (override === 'zh' || override === 'en') return override\n  const raw = env.LC_ALL ?? env.LANG ?? ''\n  const tag = raw.toLowerCase().split(/[._-]/)[0] ?? ''\n  if (tag === 'en') return 'en'\n  return 'zh'\n}\n\n/** Look up a key in the active locale, with an internal en fallback. */\nexport function commandCopy(locale: LocaleId, key: CommandCodeCommandKey): string {\n  return commandcodeCommand[locale][key] ?? commandcodeCommand.en[key] ?? key\n}\n","/**\n * `/commandcode` slash command — account usage dashboard.\n *\n *   /commandcode            show account, usage, and credit state\n *   /commandcode status     same as bare `/commandcode`\n *\n * Backed by the Command Code account endpoints the official CLI uses\n * (`/alpha/whoami`, `/alpha/usage/summary`, `/alpha/billing/credits`),\n * exposed through `CommandCodeAdapter.getUsage()`.\n *\n * The command is Host-side and has no access to the client's `ctx.locale`;\n * the active locale is resolved through `deps.getLocale()` (supplied by the\n * plugin entry from `Config.lang` and the shell's `LC_ALL`/`LANG`, defaulting\n * to `zh`). All user-facing copy lives in `./command-locales.ts`; a missing\n * key in one dictionary falls back to the `en` copy rather than dropping\n * text.\n *\n * @module dsh-commandcode-provider/commands\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\n// Type-only import that loads the module augmentation (`ctx.commands`).\nimport type { CommandDefinition } from '@deepseek-ai/dsh-commands'\nimport { CommandCodeAdapter } from './adapter.ts'\nimport type { CommandCodeConnectionOptions, CommandCodeUsageReport } from './adapter.ts'\nimport type { CommandCodeAccountUsage, CommandCodeAccountsReport } from './usage-wire.ts'\nimport { commandCopy, type LocaleId } from './command-locales.ts'\n\n/** Everything the command needs beyond the adapter itself. */\nexport interface CommandCodeCommandDeps<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions> {\n  /** The registered adapter (for getUsage / listModels). */\n  adapter: CommandCodeAdapter<C>\n  /**\n   * Multi-account report source (wired by the plugin entry). Absent in\n   * programmatic setups, the command falls back to a single\n   * `adapter.getUsage()` report.\n   */\n  reports?: () => Promise<CommandCodeAccountsReport>\n  /**\n   * Resolve the active locale for one command run. The plugin entry wires\n   * this from `Config.lang` and the shell's `LC_ALL`/`LANG`. Absent in\n   * programmatic setups (notably the existing test), the command renders\n   * with the default locale (`'zh'`) — historically the only language the\n   * command ever shipped in.\n   */\n  getLocale?: () => LocaleId\n}\n\n// ---------------------------------------------------------------------------\n// Number / time formatting (locale-independent; the locale only changes\n// the surrounding labels)\n// ---------------------------------------------------------------------------\n\n/** Format a dollar amount. */\nfunction money(value: number): string {\n  return `$${value.toFixed(4)}`\n}\n\n/** Format a dollar amount compactly (2 decimals). */\nfunction moneyShort(value: number): string {\n  return `$${value.toFixed(2)}`\n}\n\n/** Format a large token count compactly (1.9M style). */\nfunction tokensCompact(value: number): string {\n  if (value >= 1e9) return `${(value / 1e9).toFixed(1)}B`\n  if (value >= 1e6) return `${(value / 1e6).toFixed(1)}M`\n  if (value >= 1e3) return `${(value / 1e3).toFixed(1)}K`\n  return String(value)\n}\n\n/**\n * Format a success-rate percentage (already in percent units): at most two\n * decimals, trailing zeros trimmed — mirrors `formatSuccessRate` in\n * `./client/usage.ts`, which the settings card uses.\n */\nfunction successRateText(value: number): string {\n  return String(Number(value.toFixed(2)))\n}\n\n/** Format a millis timestamp as a local date; `n/a` when unset. */\nfunction resetLabel(ms: number): string {\n  if (ms <= 0) return 'n/a'\n  return new Date(ms).toLocaleString()\n}\n\n/**\n * A 10-cell horizontal bar: `██████████` for 100%, `███░░░░░░░` for ~33%.\n * Handles caps of 0 (no limit) and out-of-range values.\n */\nfunction bar(used: number, cap: number): string {\n  if (cap <= 0) return '—'\n  const ratio = Math.max(0, Math.min(1, used / cap))\n  const filled = Math.round(ratio * 10)\n  return '█'.repeat(filled) + '░'.repeat(10 - filled)\n}\n\n// ---------------------------------------------------------------------------\n// Report rendering\n// ---------------------------------------------------------------------------\n\n/** Render one account's rotation mark / cooldown as a short badge. */\nfunction markLabel(entry: CommandCodeAccountUsage, locale: LocaleId): string {\n  if (entry.mark === 'invalid-credential') return commandCopy(locale, 'invalidCredentialBadge')\n  if (entry.cooldownUntil > 0) {\n    return commandCopy(locale, 'cooldownBadge').replace('{when}', resetLabel(entry.cooldownUntil))\n  }\n  if (entry.mark === 'rate-limit') return commandCopy(locale, 'rateLimitBadge')\n  return ''\n}\n\n/** Render the usage report as a structured, aligned, bar-chart text view. */\nfunction renderReport(report: CommandCodeUsageReport, locale: LocaleId, title?: string): string {\n  const lines: string[] = []\n  const account = report.account ? ` (${report.account.userName || report.account.name})` : ''\n\n  lines.push(\n    title ?? commandCopy(locale, 'title').replace('{account}', account),\n    '',\n  )\n\n  // A total failure names its cause up front; the per-endpoint failure list\n  // at the bottom would bury it.\n  if (report.blocked === 'invalid-key') {\n    lines.push(commandCopy(locale, 'blockedInvalidKey'), '')\n  } else if (report.blocked === 'service-unavailable') {\n    lines.push(commandCopy(locale, 'blockedServiceUnavailable'), '')\n  } else if (report.blocked === 'network') {\n    lines.push(commandCopy(locale, 'blockedNetwork'), '')\n  }\n\n  if (report.plan && report.plan.name !== '') {\n    const p = report.plan\n    const status = p.status !== '' && p.status !== 'active' ? ` (${p.status})` : ''\n    const period = p.currentPeriodEnd > 0\n      ? commandCopy(locale, 'planPeriodSuffix').replace('{date}', new Date(p.currentPeriodEnd).toLocaleDateString())\n      : ''\n    lines.push(commandCopy(locale, 'planLine')\n      .replace('{name}', p.name)\n      .replace('{status}', status)\n      .replace('{period}', period), '')\n  }\n\n  if (report.usage) {\n    const u = report.usage\n    lines.push(\n      commandCopy(locale, 'usageHeader'),\n      commandCopy(locale, 'requestsLine')\n        .replace('{n}', String(u.completedCount))\n        .replace('{f}', String(u.failedCount))\n        .replace('{r}', successRateText(u.successRate)),\n      commandCopy(locale, 'costLine')\n        .replace('{money}', money(u.totalCost))\n        .replace('{credits}', moneyShort(u.totalCredits)),\n      commandCopy(locale, 'tokensLine')\n        .replace('{in}', tokensCompact(u.totalTokensIn))\n        .replace('{out}', tokensCompact(u.totalTokensOut)),\n      '',\n    )\n  }\n\n  if (report.credits) {\n    const c = report.credits\n    const monthlyPct = c.monthlyCredits > 0\n      ? `${((c.monthlyCredits / (c.monthlyCredits + c.purchasedCredits)) * 100).toFixed(0)}%`\n      : '—'\n    lines.push(\n      commandCopy(locale, 'creditsHeader'),\n      commandCopy(locale, 'monthlyLine')\n        .replace('{monthly}', moneyShort(c.monthlyCredits))\n        .replace('{purchased}', moneyShort(c.purchasedCredits))\n        .replace('{free}', moneyShort(c.freeCredits)),\n      commandCopy(locale, 'barLine')\n        .replace('{bar}', bar(c.monthlyCredits, c.monthlyCredits + c.purchasedCredits))\n        .replace('{pct}', monthlyPct),\n      '',\n      commandCopy(locale, 'windowsHeader'),\n      commandCopy(locale, 'fiveHourLine')\n        .replace('{used}', moneyShort(c.fiveHour.used))\n        .replace('{cap}', moneyShort(c.fiveHour.cap))\n        .replace('{warn}', c.fiveHour.exceeded ? commandCopy(locale, 'exceededWarning') : ''),\n      commandCopy(locale, 'windowBarLine')\n        .replace('{bar}', bar(c.fiveHour.used, c.fiveHour.cap))\n        .replace('{when}', resetLabel(c.fiveHour.resetAt)),\n      commandCopy(locale, 'weeklyLine')\n        .replace('{used}', moneyShort(c.weekly.used))\n        .replace('{cap}', moneyShort(c.weekly.cap))\n        .replace('{warn}', c.weekly.exceeded ? commandCopy(locale, 'exceededWarning') : ''),\n      commandCopy(locale, 'windowBarLine')\n        .replace('{bar}', bar(c.weekly.used, c.weekly.cap))\n        .replace('{when}', resetLabel(c.weekly.resetAt)),\n      '',\n    )\n  }\n\n  if (report.failures.length > 0) {\n    lines.push(commandCopy(locale, 'partialFailures').replace('{list}', report.failures.join('; ')), '')\n  }\n  if (!report.account && !report.usage && !report.credits) {\n    lines.push(commandCopy(locale, 'noData'), '')\n  }\n\n  return lines.join('\\n').trimEnd()\n}\n\n/** The one registered `/commandcode` command. */\nexport function commandDefinition<C extends CommandCodeConnectionOptions>(\n  deps: CommandCodeCommandDeps<C>,\n): CommandDefinition {\n  const { adapter } = deps\n  return {\n    name: 'commandcode',\n    description: 'Command Code account usage dashboard',\n    input: { hint: '[status]' },\n    handler: async () => {\n      const locale: LocaleId = deps.getLocale?.() ?? 'zh'\n      try {\n        if (deps.reports !== undefined) {\n          const { accounts } = await deps.reports()\n          const sections = accounts.map((entry) => {\n            const badges = `${entry.active ? commandCopy(locale, 'activeBadge') : ''}${markLabel(entry, locale)}`\n            const title = commandCopy(locale, 'accountTitle')\n              .replace('{label}', entry.label)\n              .replace('{badges}', badges)\n            if (!entry.configured) return `${title}\\n\\n${commandCopy(locale, 'unconfigured')}`\n            return renderReport(entry.report, locale, title)\n          })\n          return { kind: 'success', text: sections.join(`\\n\\n${commandCopy(locale, 'accountSeparator')}\\n\\n`) }\n        }\n        const report = await adapter.getUsage()\n        return { kind: 'success', text: renderReport(report, locale) }\n      } catch (error: unknown) {\n        const message = error instanceof Error ? error.message : String(error)\n        return {\n          kind: 'error',\n          text: commandCopy(locale, 'errorText').replace('{message}', message),\n        }\n      }\n    },\n  }\n}\n\n/** Register the command on `ctx.commands` (called from the plugin entry). */\nexport function applyCommands<C extends CommandCodeConnectionOptions>(\n  ctx: Context,\n  deps: CommandCodeCommandDeps<C>,\n): void {\n  ctx.commands.register(commandDefinition(deps))\n}\n","/**\n * Shared boundary-validation and Remote-descriptor plumbing for the plugin's\n * hand-rolled Typert wire contracts (`commandcode/report`, `commandcode/models`,\n * `commandcode/login*`).\n *\n * Every Remote this plugin serves crosses the Typert Gateway with a strict\n * result schema: the Host half registers a descriptor against a Cordis service\n * (`src/usage-remote.ts`) and the browser half mounts the matching contribution\n * on `ctx.remote` (`src/client/index.ts`). The wire contract is deliberately\n * dependency-free so the client bundle can inline it — a pure-TS helper module\n * imported by the wire files keeps it that way while removing the schema\n * helpers and descriptor boilerplate they used to duplicate.\n *\n * @module dsh-commandcode-provider/wire-shared\n */\n\nimport type { InvocationDescriptor, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\n\n/** The npm package identity every contribution and descriptor claims. */\nexport const REMOTE_PACKAGE = '@mars-sea/dsh-commandcode-provider'\n\n/** The Cordis service key the Gateway resolves every Command Code Remote from. */\nexport const REMOTE_SERVICE = 'commandcodeUsage'\n\n/** The wire namespace all Command Code endpoints share. */\nexport const REMOTE_NAMESPACE = 'commandcode'\n\n/** The read/validate helpers one boundary codec needs. */\nexport interface BoundaryValidator {\n  /** Reject one boundary value with a field-naming error. */\n  reject(field: string): never\n  /** Narrow an unknown value to a plain record, or reject. */\n  record(value: unknown, field: string): Record<string, unknown>\n  /** Read one required string field (`field` is the dotted error label). */\n  stringField(source: Record<string, unknown>, key: string, field: string): string\n  /** Read one required finite number field (`field` is the dotted error label). */\n  numberField(source: Record<string, unknown>, key: string, field: string): number\n  /** Read one required boolean field (`field` is the dotted error label). */\n  booleanField(source: Record<string, unknown>, key: string, field: string): boolean\n}\n\n/**\n * Build the validator helpers one endpoint uses. `prefix` names the\n * endpoint in the rejection message (e.g. `commandcode/report result:`), so\n * each wire file keeps its own diagnostic phrasing while sharing the helper\n * bodies.\n *\n * The helpers return the reject call directly in the failure branch: since\n * `reject` is typed `never`, the ternary's union collapses to the success type\n * without relying on TypeScript's control-flow analysis of a never-returning\n * call (which only recognizes function declarations, not the destructured\n * arrow `reject` callers receive from this factory).\n */\nexport function makeBoundaryValidator(prefix: string): BoundaryValidator {\n  const reject = (field: string): never => {\n    throw new TypeError(`${prefix} invalid ${field}`)\n  }\n  const record = (value: unknown, field: string): Record<string, unknown> =>\n    typeof value === 'object' && value !== null && !Array.isArray(value)\n      ? value as Record<string, unknown>\n      : reject(field)\n  const stringField = (source: Record<string, unknown>, key: string, field: string): string =>\n    typeof source[key] === 'string' ? source[key] as string : reject(field)\n  const numberField = (source: Record<string, unknown>, key: string, field: string): number =>\n    typeof source[key] === 'number' && Number.isFinite(source[key] as number)\n      ? source[key] as number\n      : reject(field)\n  const booleanField = (source: Record<string, unknown>, key: string, field: string): boolean =>\n    typeof source[key] === 'boolean' ? source[key] as boolean : reject(field)\n  return { reject, record, stringField, numberField, booleanField }\n}\n\n/**\n * Build one strict invocation descriptor. Every Command Code Remote shares the\n * `commandcode` namespace, the `commandcodeUsage` service, and a strict\n * `mode: 'strict'` result — only the endpoint, method, result type symbol, and\n * schema differ — so the boilerplate lives here once and each endpoint supplies\n * only its own facts.\n */\nexport function makeRemoteDescriptor<Output>(\n  endpoint: string,\n  method: string,\n  typeSymbol: string,\n  schema: TypertSchema<Output>,\n): InvocationDescriptor {\n  return {\n    id: `${REMOTE_PACKAGE}#${endpoint}`,\n    service: REMOTE_SERVICE,\n    namespace: REMOTE_NAMESPACE,\n    method,\n    invocation: { kind: 'direct' },\n    parameters: [],\n    result: {\n      mode: 'strict',\n      typeSymbol,\n      schema,\n    },\n  }\n}","/**\n * Wire contract for the Command Code account-usage Remote\n * (`commandcode/report`).\n *\n * The settings page renders the same account/usage/credit facts the\n * `/commandcode` command prints, but the browser never holds the API key —\n * the report must be produced Host-side and cross the Connection RPC carrier.\n * The harness exposes plugin-defined Host methods through the Typert Gateway:\n * the Host half registers a strict invocation descriptor against a Cordis\n * service (`src/usage-remote.ts`), and the browser half mounts the matching\n * Remote contribution on `ctx.remote` (`src/client/index.ts`).\n *\n * This module is the single source both halves share: the result validator\n * (a hand-rolled {@link TypertSchema}, so neither half needs a schema library)\n * and the exact descriptor object, so the endpoint can never drift apart.\n * It is deliberately dependency-free — the client bundle inlines it, and only\n * `import type` edges leave it (erased at build). The boundary-validator\n * helpers and the descriptor boilerplate live in `./wire-shared.ts`, shared\n * with the login wire contract.\n *\n * @module dsh-commandcode-provider/usage-wire\n */\n\nimport type { CommandCodeUsageReport, UsageBlockReason } from './adapter.ts'\n\nexport type { CommandCodeUsageReport, UsageBlockReason }\nimport type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\nimport {\n  makeBoundaryValidator,\n  makeRemoteDescriptor,\n  REMOTE_PACKAGE,\n} from './wire-shared.ts'\n\n/** One account's usage entry in the multi-account report. */\nexport interface CommandCodeAccountUsage {\n  /** Stable slot id (`default`, `account-2`, …). */\n  id: string\n  /** Display label (user-provided or generated). */\n  label: string\n  /** Whether an API key resolved for this account. */\n  configured: boolean\n  /** Whether this account currently serves requests (first usable slot). */\n  active: boolean\n  /** Rotation mark: `''` (usable), `'rate-limit'`, or `'invalid-credential'`. */\n  mark: string\n  /** Known cooldown end in millis; 0 when unknown or not cooling down. */\n  cooldownUntil: number\n  /** The per-account report; `failures`-only when the fetch itself failed. */\n  report: CommandCodeUsageReport\n}\n\n/** The settings page's account card data: one entry per configured account. */\nexport interface CommandCodeAccountsReport {\n  accounts: CommandCodeAccountUsage[]\n}\n\n/** The npm package identity both contribution registrations claim. */\nexport const USAGE_REMOTE_PACKAGE = REMOTE_PACKAGE\n\n/** Canonical `<namespace>/<method>` endpoint of the usage report Remote. */\nexport const USAGE_REPORT_ENDPOINT = 'commandcode/report'\n\n/**\n * The shared read/validate helpers for the usage report endpoint, prefixed\n * so rejection messages name the offending boundary.\n */\nconst { reject, record, stringField, numberField, booleanField } =\n  makeBoundaryValidator('commandcode/report result:')\n\n/** Validate one window-limit block (`fiveHour` / `weekly`). */\nfunction windowLimit(value: unknown, field: string): { used: number; cap: number; exceeded: boolean; resetAt: number } {\n  const source = record(value, field)\n  return {\n    used: numberField(source, 'used', `${field}.used`),\n    cap: numberField(source, 'cap', `${field}.cap`),\n    exceeded: booleanField(source, 'exceeded', `${field}.exceeded`),\n    resetAt: numberField(source, 'resetAt', `${field}.resetAt`),\n  }\n}\n\n/**\n * Parse one untrusted boundary value into a {@link CommandCodeUsageReport}.\n * Optional sections stay optional; every present field is shape-checked so a\n * malformed frame fails the boundary instead of rendering garbage.\n */\nfunction parseUsageReport(value: unknown): CommandCodeUsageReport {\n  const source = record(value, 'report')\n  const failures = source.failures\n  if (!Array.isArray(failures) || failures.some((entry) => typeof entry !== 'string')) reject('failures')\n  const report: CommandCodeUsageReport = { failures: failures as string[] }\n\n  if (source.blocked !== undefined) {\n    const blocked = source.blocked\n    // Positive check: TS's never-return control-flow analysis only recognizes\n    // function declarations, not the factory's destructured-arrow `reject`, so\n    // narrow `blocked` in the positive branch instead.\n    if (blocked === 'invalid-key' || blocked === 'service-unavailable' || blocked === 'network') {\n      report.blocked = blocked\n    } else {\n      reject('blocked')\n    }\n  }\n\n  if (source.account !== undefined) {\n    const account = record(source.account, 'account')\n    report.account = {\n      id: stringField(account, 'id', 'account.id'),\n      name: stringField(account, 'name', 'account.name'),\n      userName: stringField(account, 'userName', 'account.userName'),\n    }\n  }\n\n  if (source.usage !== undefined) {\n    const usage = record(source.usage, 'usage')\n    report.usage = {\n      totalCount: numberField(usage, 'totalCount', 'usage.totalCount'),\n      totalCost: numberField(usage, 'totalCost', 'usage.totalCost'),\n      successRate: numberField(usage, 'successRate', 'usage.successRate'),\n      completedCount: numberField(usage, 'completedCount', 'usage.completedCount'),\n      failedCount: numberField(usage, 'failedCount', 'usage.failedCount'),\n      totalTokensIn: numberField(usage, 'totalTokensIn', 'usage.totalTokensIn'),\n      totalTokensOut: numberField(usage, 'totalTokensOut', 'usage.totalTokensOut'),\n      totalCredits: numberField(usage, 'totalCredits', 'usage.totalCredits'),\n      periodBasis: stringField(usage, 'periodBasis', 'usage.periodBasis'),\n    }\n  }\n\n  if (source.credits !== undefined) {\n    const credits = record(source.credits, 'credits')\n    report.credits = {\n      monthlyCredits: numberField(credits, 'monthlyCredits', 'credits.monthlyCredits'),\n      purchasedCredits: numberField(credits, 'purchasedCredits', 'credits.purchasedCredits'),\n      freeCredits: numberField(credits, 'freeCredits', 'credits.freeCredits'),\n      fiveHour: windowLimit(credits.fiveHour, 'credits.fiveHour'),\n      weekly: windowLimit(credits.weekly, 'credits.weekly'),\n    }\n  }\n\n  if (source.plan !== undefined) {\n    const plan = record(source.plan, 'plan')\n    const monthly = plan.monthlyCredits\n    if (monthly !== null && (typeof monthly !== 'number' || !Number.isFinite(monthly))) reject('plan.monthlyCredits')\n    report.plan = {\n      planId: stringField(plan, 'planId', 'plan.planId'),\n      name: stringField(plan, 'name', 'plan.name'),\n      status: stringField(plan, 'status', 'plan.status'),\n      monthlyCredits: monthly as number | null,\n      currentPeriodEnd: numberField(plan, 'currentPeriodEnd', 'plan.currentPeriodEnd'),\n    }\n  }\n\n  return report\n}\n\n/** Parse one untrusted boundary value into a {@link CommandCodeAccountUsage}. */\nfunction parseAccountUsage(value: unknown): CommandCodeAccountUsage {\n  const source = record(value, 'account')\n  return {\n    id: stringField(source, 'id', 'account.id'),\n    label: stringField(source, 'label', 'account.label'),\n    configured: booleanField(source, 'configured', 'account.configured'),\n    active: booleanField(source, 'active', 'account.active'),\n    mark: stringField(source, 'mark', 'account.mark'),\n    cooldownUntil: numberField(source, 'cooldownUntil', 'account.cooldownUntil'),\n    report: parseUsageReport(source.report),\n  }\n}\n\n/** Parse the wire result into a {@link CommandCodeAccountsReport}. */\nfunction parseAccountsReport(value: unknown): CommandCodeAccountsReport {\n  const source = record(value, 'result')\n  const accounts = source.accounts\n  if (Array.isArray(accounts)) {\n    return { accounts: accounts.map(parseAccountUsage) }\n  }\n  return reject('accounts')\n}\n\n/**\n * The strict result codec both halves attach to the descriptor. Hand-rolled:\n * the client bundle may not require a schema library, and `TypertSchema` is\n * deliberately minimal so one `parse` function satisfies it.\n */\nexport const usageReportSchema: TypertSchema<CommandCodeAccountsReport> = {\n  parse: parseAccountsReport,\n}\n\n/**\n * The one invocation descriptor, shared verbatim by the Host registration and\n * the Client mount. `service` names the Cordis key the Gateway resolves the\n * receiver from; `namespace`/`method` name the wire endpoint.\n */\nexport const USAGE_REPORT_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodeAccountsReport>(\n    USAGE_REPORT_ENDPOINT,\n    'report',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodeAccountsReport`,\n    usageReportSchema,\n  )\n\n/** The Host-face contribution registered on `ctx.typert`. */\nexport const USAGE_HOST_CONTRIBUTION = {\n  package: USAGE_REMOTE_PACKAGE,\n  face: 'host' as const,\n  schemas: [],\n  // 0.1.2's Typert registry requires every Host contribution to carry its\n  // reflection model. This hand-written Remote deliberately has no generated\n  // reflection exports, so use the official empty-model form rather than a\n  // cast that leaves registry inspection with `model: undefined`.\n  model: { services: [], events: [], objects: [] },\n  invocations: [USAGE_REPORT_DESCRIPTOR],\n}\n\n/** The Client-face contribution mounted on `ctx.remote`. */\nexport const USAGE_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [USAGE_REPORT_DESCRIPTOR],\n}\n\n// ---------------------------------------------------------------------------\n// Model catalog Remote (`commandcode/models`)\n// ---------------------------------------------------------------------------\n\n/** One catalog entry the settings page's model editors offer. */\nexport interface CommandCodeCatalogModel {\n  /** Catalog model id (e.g. `deepseek/deepseek-v4-pro`). */\n  id: string\n  /** Display name from the catalog. */\n  name: string\n  /**\n   * Minimum plan-tier key for this model (a `KNOWN_PLANS` value: `go`,\n   * `goat`, `pro`, `provider`, `max`), or undefined for models outside the\n   * snapshot. The settings page groups the model-editor dropdowns under\n   * tier headings from this — the browser cannot import the Host's\n   * capability snapshot, so the Host stamps it per entry.\n   */\n  tier?: string\n}\n\n/** The model-catalog Remote result: the full catalog, sorted for picking. */\nexport interface CommandCodeCatalog {\n  models: CommandCodeCatalogModel[]\n}\n\n/** Canonical `<namespace>/<method>` endpoint of the model-catalog Remote. */\nexport const MODELS_ENDPOINT = 'commandcode/models'\n\n/**\n * The shared read/validate helpers for the model-catalog endpoint — a\n * separate instance so catalog boundary errors name `commandcode/models`,\n * not the report endpoint.\n */\nconst {\n  record: catalogRecord,\n  stringField: catalogString,\n} = makeBoundaryValidator('commandcode/models result:')\n\n/** Parse one untrusted boundary value into a {@link CommandCodeCatalogModel}. */\nfunction parseCatalogModel(value: unknown): CommandCodeCatalogModel {\n  const source = catalogRecord(value, 'model')\n  const model: CommandCodeCatalogModel = {\n    id: catalogString(source, 'id', 'model.id'),\n    name: catalogString(source, 'name', 'model.name'),\n  }\n  // Tier is optional on the wire (older Hosts predate it); a present\n  // non-string is a contract violation, not a silent drop.\n  if (source.tier !== undefined) {\n    model.tier = catalogString(source, 'tier', 'model.tier')\n  }\n  return model\n}\n\n/** Parse the wire result into a {@link CommandCodeCatalog}. */\nfunction parseCatalog(value: unknown): CommandCodeCatalog {\n  const source = catalogRecord(value, 'result')\n  const models = source.models\n  if (Array.isArray(models)) {\n    return { models: models.map(parseCatalogModel) }\n  }\n  throw new TypeError('commandcode/models result: invalid models')\n}\n\n/** The strict result codec for the model-catalog Remote. */\nexport const modelsSchema: TypertSchema<CommandCodeCatalog> = {\n  parse: parseCatalog,\n}\n\n/**\n * The model-catalog invocation descriptor, sharing the same `commandcodeUsage`\n * service and `commandcode` namespace as the usage report.\n */\nexport const MODELS_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodeCatalog>(\n    MODELS_ENDPOINT,\n    'models',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodeCatalog`,\n    modelsSchema,\n  )\n\n/** The Client-face contribution for the model-catalog endpoint. */\nexport const MODELS_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [MODELS_DESCRIPTOR],\n}","/**\n * Wire contract for the Command Code login Remote endpoints\n * (`commandcode/loginBegin`, `commandcode/loginStatus`,\n * `commandcode/loginCancel`).\n *\n * The settings page can start a browser login against the official Command\n * Code Studio (the same loopback flow `command-code login` performs) instead\n * of pasting an API key. The loopback server must live in the Host half — it\n * binds a local port and receives the key — so the page drives it through the\n * Typert Gateway exactly like the usage report.\n *\n * This module is the single source both halves share, deliberately\n * dependency-free (`import type` edges only): the strict status validator the\n * client trusts, the three descriptors both halves register, and the two\n * contribution objects. The state shape mirrors the Host-only flow machine in\n * `src/login.ts` as plain JSON.\n *\n * @module dsh-commandcode-provider/login-wire\n */\n\nimport type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\nimport {\n  makeBoundaryValidator,\n  makeRemoteDescriptor,\n  REMOTE_PACKAGE,\n} from './wire-shared.ts'\n\n/** Why a login attempt ended in `failed` (stable across versions for copy). */\nexport type CommandCodeLoginFailureReason =\n  /** The Studio page reported the authorization was denied by the user. */\n  | 'denied'\n  /** No callback arrived within the flow's timeout window. */\n  | 'timeout'\n  /** The delivered key failed `/alpha/whoami` validation (401). */\n  | 'invalid-key'\n  /** The validation request could not reach the API. */\n  | 'network'\n  /** The key could not be stored (credentials seam unavailable). */\n  | 'unavailable'\n  /** The attempt was cancelled by the user or torn down with the plugin. */\n  | 'cancelled'\n  /** Anything else. */\n  | 'error'\n\n/** One login attempt's full state face, as carried over the wire. */\nexport interface CommandCodeLoginStatus {\n  /**\n   * `idle` — no attempt; `waiting` — the loopback server is up and the\n   * Studio URL is live; `success` — the key validated and was stored;\n   * `failed` — see `reason`/`message`.\n   */\n  state: 'idle' | 'waiting' | 'success' | 'failed'\n  /** The Studio authorization URL while `waiting`. */\n  authUrl?: string\n  /** The account display name reported by the Studio, on `success`. */\n  userName?: string\n  /** The key's label from the Studio, on `success`. */\n  keyName?: string\n  /** Why the attempt failed, when `failed`. */\n  reason?: CommandCodeLoginFailureReason\n  /** Human-readable failure detail, when `failed` (secondary to `reason`). */\n  message?: string\n}\n\n/** The canonical endpoint paths of the three login Remotes. */\nexport const LOGIN_BEGIN_ENDPOINT = 'commandcode/loginBegin'\nexport const LOGIN_STATUS_ENDPOINT = 'commandcode/loginStatus'\nexport const LOGIN_CANCEL_ENDPOINT = 'commandcode/loginCancel'\n\nconst REASONS: readonly CommandCodeLoginFailureReason[] = [\n  'denied', 'timeout', 'invalid-key', 'network', 'unavailable', 'cancelled', 'error',\n]\n\n/** The shared read/validate helpers, prefixed with the login endpoint so\n * rejection messages name the offending boundary. */\nconst { reject, record, stringField } =\n  makeBoundaryValidator('commandcode/login result:')\n\n/**\n * Parse one untrusted boundary value into a {@link CommandCodeLoginStatus}.\n * Every field is shape-checked so a malformed frame fails the boundary\n * instead of leaking into the page.\n */\nexport function parseLoginStatus(value: unknown): CommandCodeLoginStatus {\n  const source = record(value, 'status')\n  const state = source.state\n  // The factory's destructured-arrow `reject` is typed never-returning but\n  // TS narrows it only in the positive branch — assign inside the guard.\n  if (state === 'idle' || state === 'waiting' || state === 'success' || state === 'failed') {\n    const status: CommandCodeLoginStatus = { state }\n    if (source.authUrl !== undefined) {\n      status.authUrl = stringField(source, 'authUrl', 'authUrl')\n    }\n    if (source.userName !== undefined) {\n      status.userName = stringField(source, 'userName', 'userName')\n    }\n    if (source.keyName !== undefined) {\n      status.keyName = stringField(source, 'keyName', 'keyName')\n    }\n    if (source.reason !== undefined) {\n      const reason = source.reason\n      if (typeof reason === 'string' && REASONS.includes(reason as CommandCodeLoginFailureReason)) {\n        status.reason = reason as CommandCodeLoginFailureReason\n      } else {\n        reject('reason')\n      }\n    }\n    if (source.message !== undefined) {\n      status.message = stringField(source, 'message', 'message')\n    }\n    return status\n  }\n  return reject('state')\n}\n\n/** The strict result codec shared by all three login endpoints. */\nexport const loginStatusSchema: TypertSchema<CommandCodeLoginStatus> = {\n  parse: parseLoginStatus,\n}\n\n/** Build one login invocation descriptor (uniform result, no parameters). */\nfunction loginDescriptor(endpoint: string, method: string): InvocationDescriptor {\n  return makeRemoteDescriptor<CommandCodeLoginStatus>(\n    endpoint,\n    method,\n    `${REMOTE_PACKAGE}#CommandCodeLoginStatus`,\n    loginStatusSchema,\n  )\n}\n\n/** The three login descriptors, shared verbatim by Host registration and Client mount. */\nexport const LOGIN_DESCRIPTORS: readonly InvocationDescriptor[] = [\n  loginDescriptor(LOGIN_BEGIN_ENDPOINT, 'loginBegin'),\n  loginDescriptor(LOGIN_STATUS_ENDPOINT, 'loginStatus'),\n  loginDescriptor(LOGIN_CANCEL_ENDPOINT, 'loginCancel'),\n]\n\n/** The Host-face contribution fragment registered on `ctx.typert`. */\nexport const LOGIN_HOST_CONTRIBUTION = {\n  package: REMOTE_PACKAGE,\n  face: 'host' as const,\n  schemas: [],\n  invocations: LOGIN_DESCRIPTORS,\n}\n\n/** The Client-face contribution fragment mounted on `ctx.remote`. */\nexport const LOGIN_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: REMOTE_PACKAGE,\n  descriptors: LOGIN_DESCRIPTORS,\n}\n","/**\n * Host half of the account-usage Remote (`commandcode/report`).\n *\n * The settings page's account card needs the same report the `/commandcode`\n * command prints, but the browser never holds the API key — the fetch must\n * run Host-side. This module exposes `adapter.getUsage()` through the Typert\n * Gateway: a `TypertRemoteService` provides the receiver the Gateway resolves,\n * and the shared strict descriptor (`src/usage-wire.ts`) is registered on the\n * `typert` registry so the Gateway claims the `commandcode/report` endpoint.\n *\n * The whole wiring rides an optional `ctx.inject(['typert'], ...)` fiber: a\n * profile without the web stack (no Typert registry, no Gateway) simply never\n * activates it, exactly like the `/commandcode` command rides `commands`.\n *\n * @module dsh-commandcode-provider/usage-remote\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\nimport { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol'\nimport type { CommandCodeAdapter, CommandCodeConnectionOptions } from './adapter.ts'\nimport { USAGE_HOST_CONTRIBUTION } from './usage-wire.ts'\nimport { MODELS_DESCRIPTOR } from './usage-wire.ts'\nimport type { CommandCodeAccountsReport, CommandCodeCatalog } from './usage-wire.ts'\nimport { LOGIN_DESCRIPTORS } from './login-wire.ts'\nimport type { CommandCodeLoginStatus } from './login-wire.ts'\n\n/**\n * The browser-login face the usage service exposes (`commandcode/login*`).\n * Backed by the Host-half {@link !CommandCodeLoginFlow} when the plugin entry\n * wired one; absent, `status`/`cancel` degrade to the idle status while\n * `begin` rejects with a plain message (so the page's manual paste path\n * stays the fallback instead of hanging).\n */\nexport interface LoginFlowFacade {\n  /** Start (or rejoin) an attempt; rejects when it cannot start at all. */\n  begin(): Promise<CommandCodeLoginStatus>\n  /** The current attempt's status. */\n  status(): CommandCodeLoginStatus\n  /** Cancel a waiting attempt. */\n  cancel(): void\n}\n\n/** Everything the usage service needs beyond its Cordis context. */\nexport interface CommandCodeUsageDeps<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions> {\n  /** The registered adapter (for getUsage). */\n  adapter: CommandCodeAdapter<C>\n  /**\n   * Multi-account report source (wired by the plugin entry). Absent in\n   * programmatic setups, the service falls back to a single default-account\n   * entry around `adapter.getUsage()`.\n   */\n  reports?: () => Promise<CommandCodeAccountsReport>\n  /**\n   * Model-catalog source for the settings page's model editors (the\n   * routing-rule editor and the visible-models filter; wired by the plugin\n   * entry). Absent, the `models` endpoint answers an empty list — the page's\n   * editors degrade to the empty state.\n   */\n  listModels?: () => Promise<CommandCodeCatalog>\n  /**\n   * The browser-login flow (wired by the plugin entry). Absent means the\n   * login endpoints answer `idle` / reject with a plain message — the page's\n   * manual paste path stays the fallback.\n   */\n  login?: LoginFlowFacade\n}\n\n/**\n * The registry method surface this module uses. `Context['typert']` is typed\n * as the read-only `TypertRegistryContract`; contribution registration lives\n * on the concrete registry service, so the cast is spelled out once here.\n * The contribution is the combined one built below (report + models + login\n * endpoints), so the type is structural rather than tied to the\n * single-endpoint `USAGE_HOST_CONTRIBUTION` shape.\n */\ninterface TypertContributionRegistry {\n  register(contribution: {\n    package: string\n    face: 'host'\n    schemas: unknown[]\n    model: { services: unknown[]; events: unknown[]; objects: unknown[] }\n    invocations: unknown[]\n  }): () => void | Promise<void>\n}\n\n/**\n * The Remote receiver: a Cordis service the Gateway resolves by key\n * (`commandcodeUsage`) and binds to the wire namespace (`commandcode`). The\n * base class stamps the `typertRemote` binding the Gateway validates on every\n * dispatch; no decorators are needed because the descriptor is registered\n * explicitly (strict path) rather than discovered from source markers.\n */\nexport class CommandCodeUsageService<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions>\n  extends TypertRemoteService {\n  private readonly deps: CommandCodeUsageDeps<C>\n\n  constructor(ctx: Context, deps: CommandCodeUsageDeps<C>) {\n    super(ctx, 'commandcodeUsage', { namespace: 'commandcode' })\n    this.deps = deps\n  }\n\n  /**\n   * Account, usage, and credit state for the settings page's account card —\n   * one entry per pool account when the plugin entry wired `reports`, a\n   * single default-account entry otherwise. Degrades per endpoint like the\n   * `/commandcode` command (failures land in `report.failures`); throws\n   * `MISSING_CREDENTIAL` when no key resolves, which the Gateway folds into\n   * the failure branch the page renders as a hint.\n   */\n  async report(): Promise<CommandCodeAccountsReport> {\n    if (this.deps.reports !== undefined) return this.deps.reports()\n    const report = await this.deps.adapter.getUsage()\n    return {\n      accounts: [{\n        id: 'default',\n        label: 'Default',\n        configured: true,\n        active: true,\n        mark: '',\n        cooldownUntil: 0,\n        report,\n      }],\n    }\n  }\n\n  /**\n   * The full model catalog for the settings page's model editors (the\n   * routing-rule editor and the visible-models filter). The browser never\n   * calls the Command Code API directly — the Host serves the catalog\n   * (already fetched/cached by the adapter) so models can be picked from\n   * the live list instead of typed by hand.\n   */\n  async models(): Promise<CommandCodeCatalog> {\n    return this.deps.listModels?.() ?? { models: [] }\n  }\n\n  /**\n   * Start (or rejoin) a browser-login attempt and return its fresh status —\n   * `waiting` carrying the Studio URL. Rejects when the flow cannot start\n   * (no free loopback port, disposed plugin); the Gateway folds the throw\n   * into the failure branch the page renders.\n   */\n  async loginBegin(): Promise<CommandCodeLoginStatus> {\n    const login = this.requireLogin()\n    return login.begin()\n  }\n\n  /** Poll a login attempt's status. */\n  async loginStatus(): Promise<CommandCodeLoginStatus> {\n    return this.deps.login?.status() ?? { state: 'idle' }\n  }\n\n  /** Cancel a waiting attempt; returns the post-cancel status. */\n  async loginCancel(): Promise<CommandCodeLoginStatus> {\n    this.deps.login?.cancel()\n    return this.deps.login?.status() ?? { state: 'idle' }\n  }\n\n  private requireLogin(): LoginFlowFacade {\n    const login = this.deps.login\n    if (login === undefined) {\n      throw new Error('login flow is not wired in this setup; paste the API key instead')\n    }\n    return login\n  }\n}\n\n/**\n * Provide the usage service and register its Remote descriptor. The registry\n * contribution is tied to this fiber's lifetime: the registry's own\n * `register()` effect would otherwise outlive the plugin.\n */\nexport function applyUsageRemote<C extends CommandCodeConnectionOptions>(\n  ctx: Context,\n  deps: CommandCodeUsageDeps<C>,\n): void {\n  ctx.inject(['typert'], (remoteCtx) => {\n    new CommandCodeUsageService(remoteCtx, deps)\n    const registry = remoteCtx.typert as unknown as TypertContributionRegistry\n    // One registration carries the report endpoint, the models endpoint, and\n    // the login endpoints: the descriptors are unique per endpoint, and a\n    // single contribution keeps the Host's registry bookkeeping (and the\n    // Client mount) 1:1.\n    const unregister = registry.register({\n      ...USAGE_HOST_CONTRIBUTION,\n      invocations: [...USAGE_HOST_CONTRIBUTION.invocations, MODELS_DESCRIPTOR, ...LOGIN_DESCRIPTORS],\n    })\n    // The registry's own effect would outlive this fiber; withdraw the\n    // contribution when the plugin unloads.\n    remoteCtx.effect(() => () => void unregister(), 'dsh-commandcode-provider: usage remote')\n  })\n}\n","/**\n * Host half of the Command Code browser login (the loopback flow).\n *\n * Mirrors what the official `command-code login` CLI command performs\n * (reverse-engineered from `command-code@1.32.1`, `createAuthFlowController`\n * + `createAuthServer` in its bundle):\n *\n * 1. Bind a temporary HTTP server on `127.0.0.1`, first available port from\n *    5959 upward (10 attempts).\n * 2. Generate a random state token and open\n *    `{studio}/studio/auth/cli?callback=http://localhost:{port}/callback&state={state}`.\n * 3. After the user signs in, the Studio page POSTs the credentials JSON\n *    `{ apiKey, state, userId, userName, keyName }` to the loopback callback —\n *    no OAuth code exchange, the page holds the final API key.\n * 4. The delivered key is validated against `GET {apiBase}/alpha/whoami`\n *    before anything is stored.\n *\n * Server behaviour is mirrored exactly: POST-only `/callback`, a 10 KB body\n * cap, JSON responses (`{success:true}` / `{success:false,error}`), CORS for\n * the Studio origins only, and state-token equality as the anti-forgery\n * check. One deliberate hardening over the CLI build: the CORS origin is\n * echoed only when it is allowlisted (the CLI falls back to the first\n * origin), which browsers treat identically.\n *\n * Storage stays out of this module: the plugin entry supplies\n * {@link CommandCodeLoginFlowDeps.storeKey}, which writes through the dsh\n * credentials seam so the next request resolves the new key with no restart.\n * Everything external (fetch, ports, randomness, timing) is injectable for\n * node tests; the tests drive a real loopback server end to end.\n *\n * @module dsh-commandcode-provider/login\n */\n\nimport { createServer as createHttpServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http'\nimport { createServer as createNetServer } from 'node:net'\nimport { randomBytes } from 'node:crypto'\nimport { DEFAULT_API_BASE } from './adapter.ts'\nimport type { CommandCodeLoginFailureReason, CommandCodeLoginStatus } from './login-wire.ts'\n\n/** Give up on the browser after this long without a callback (mirrors the CLI). */\nexport const LOGIN_TIMEOUT_MS = 120_000\n\n/** First local port the flow tries (mirrors the CLI). */\nexport const LOGIN_START_PORT = 5959\n\n/** How many consecutive ports to try from {@link LOGIN_START_PORT}. */\nexport const LOGIN_MAX_PORT_ATTEMPTS = 10\n\n/** Reject callback bodies larger than this (mirrors the CLI). */\nexport const LOGIN_BODY_LIMIT_BYTES = 10_000\n\n/** The Studio origins allowed to POST credentials to the loopback server. */\nexport const LOGIN_ALLOWED_ORIGINS: readonly string[] = [\n  'http://localhost:3000',\n  'https://staging.commandcode.ai',\n  'https://commandcode.ai',\n]\n\n/** The Studio route that performs the browser-side login. */\nconst STUDIO_AUTH_PATH = '/studio/auth/cli'\n\n/** Credentials as delivered by the Studio's callback POST. */\nexport interface CommandCodeLoginCredentials {\n  apiKey: string\n  userId: string\n  userName: string\n  keyName: string\n}\n\n/** Outcome of validating a delivered key against `/alpha/whoami`. */\nexport type ApiKeyValidation =\n  | { valid: true }\n  | { valid: false; error: 'invalid_key' | 'server_error' | 'network_error' }\n\nexport interface CommandCodeLoginFlowDeps {\n  /**\n   * The Provider API base used for `/alpha/whoami` validation; also selects\n   * the matching Studio base (staging api → staging studio). A thunk is fine:\n   * it is re-read when each attempt starts, so a settings change reaches the\n   * next login. Defaults to the public API base.\n   */\n  apiBase?: string | (() => string | undefined)\n  /** Attempt timeout in millis; defaults to {@link LOGIN_TIMEOUT_MS}. */\n  timeoutMs?: number\n  /** First port to try; defaults to {@link LOGIN_START_PORT}. */\n  startPort?: number\n  /** Consecutive-port attempts; defaults to {@link LOGIN_MAX_PORT_ATTEMPTS}. */\n  maxPortAttempts?: number\n  /** Validation fetch seam; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n  /** Randomness seam; defaults to `node:crypto` randomBytes(32) base64url. */\n  randomToken?: (byteLength: number) => string\n  /**\n   * Receives the validated credentials after a successful login. Rejecting\n   * fails the attempt with `unavailable`.\n   */\n  storeKey(credentials: CommandCodeLoginCredentials): Promise<void>\n}\n\n/** Compose the Studio authorization URL (pure, exported for tests). */\nexport function buildCommandAuthUrl(options: { studioBase: string; port: number; state: string }): string {\n  const callback = `http://localhost:${options.port}/callback`\n  return `${options.studioBase}${STUDIO_AUTH_PATH}?callback=${encodeURIComponent(callback)}&state=${encodeURIComponent(options.state)}`\n}\n\n/** Map an API base onto the Studio base the CLI pairs it with. */\nexport function studioBaseForApiBase(apiBase: string): string {\n  if (/^https:\\/\\/staging-api\\.commandcode\\.ai/i.test(apiBase)) return 'https://staging.commandcode.ai'\n  if (/^http:\\/\\/localhost(:\\d+)?$/i.test(apiBase)) return 'http://localhost:3000'\n  return 'https://commandcode.ai'\n}\n\n/**\n * Validate one candidate key against `/alpha/whoami` (pure, exported for\n * tests). Mirrors the CLI's verdicts: 401 → invalid_key, other non-OK →\n * server_error, transport failure → network_error.\n */\nexport async function validateCommandApiKey(\n  fetchImpl: typeof fetch,\n  apiBase: string,\n  apiKey: string,\n): Promise<ApiKeyValidation> {\n  try {\n    const response = await fetchImpl(`${apiBase}/alpha/whoami`, {\n      method: 'GET',\n      headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${apiKey}` },\n    })\n    if (response.status === 401) return { valid: false, error: 'invalid_key' }\n    if (response.ok) return { valid: true }\n    return { valid: false, error: 'server_error' }\n  } catch {\n    return { valid: false, error: 'network_error' }\n  }\n}\n\n/** Whether one loopback port is free right now. */\nfunction checkPortAvailable(port: number): Promise<boolean> {\n  return new Promise((resolve) => {\n    const probe = createNetServer()\n    probe.once('error', () => resolve(false))\n    probe.once('listening', () => probe.close(() => resolve(true)))\n    probe.listen(port, '127.0.0.1')\n  })\n}\n\n/** Whether a callback body carries every credential field the CLI requires. */\nfunction isCallbackCredentials(value: unknown): value is CommandCodeLoginCredentials & Record<string, unknown> {\n  if (typeof value !== 'object' || value === null) return false\n  const record = value as Record<string, unknown>\n  return typeof record.apiKey === 'string' && record.apiKey !== ''\n    && typeof record.state === 'string'\n    && typeof record.userId === 'string'\n    && typeof record.userName === 'string'\n    && typeof record.keyName === 'string'\n}\n\n/**\n * One browser-login attempt machine. Single-flight by design: `begin()` while\n * waiting returns the live attempt's status instead of starting a second one;\n * a terminal state makes the next `begin()` start fresh.\n */\nexport class CommandCodeLoginFlow {\n  private readonly deps: CommandCodeLoginFlowDeps\n  private readonly listeners = new Set<() => void>()\n\n  private statusValue: CommandCodeLoginStatus = { state: 'idle' }\n  private server: Server | undefined\n  private timer: ReturnType<typeof setTimeout> | undefined\n  /** Settle hooks of the live attempt's callback promise. */\n  private settle: {\n    resolve(credentials: CommandCodeLoginCredentials): void\n    reject(failure: LoginSettleError): void\n  } | undefined\n  /**\n   * Attempt generation. A delivered callback keeps validating the key\n   * asynchronously (`complete()`), and that window is open to a cancel or a\n   * fresh `begin()`; the generation lets a late completion recognize that it\n   * no longer owns the status face and stop instead of storing a credential\n   * the user cancelled and flipping the page back to success.\n   */\n  private attemptSeq = 0\n  private disposed = false\n\n  constructor(deps: CommandCodeLoginFlowDeps) {\n    this.deps = deps\n  }\n\n  /** Subscribe to state transitions. @returns the disposer. */\n  onChange(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** The current attempt's status face. */\n  status(): CommandCodeLoginStatus {\n    return this.statusValue\n  }\n\n  /**\n   * Start an attempt (or rejoin the live one) and resolve with its status —\n   * `waiting` carrying the Studio URL once the loopback server is up.\n   * Rejects only when the flow cannot start at all (no free port, disposed).\n   */\n  async begin(): Promise<CommandCodeLoginStatus> {\n    if (this.disposed) throw new Error('login flow has been disposed')\n    // Rejoin only a live attempt. A `waiting` status whose server is already\n    // torn down means the callback was consumed and the key is being\n    // validated: that attempt can no longer receive anything, so handing its\n    // dead authUrl back would give the user a link to a closed port. Starting\n    // fresh retires it (the generation check below drops its late completion).\n    if (this.statusValue.state === 'waiting' && this.server !== undefined) return this.statusValue\n    this.teardown()\n    const attempt = ++this.attemptSeq\n\n    const port = await this.findPort()\n    const expectedState = this.deps.randomToken?.(32) ?? randomBytes(32).toString('base64url')\n\n    // The attempt settles exactly once: fulfilled with delivered credentials,\n    // rejected with a tagged failure the mapping below turns into copy.\n    const settled = new Promise<CommandCodeLoginCredentials>((resolve, reject) => {\n      this.settle = { resolve, reject }\n    })\n    // A bind failure must surface before the attempt reports `waiting`.\n    await this.bindServer(port, expectedState)\n\n    const apiBase = this.readApiBase()\n    this.setStatus({\n      state: 'waiting',\n      authUrl: buildCommandAuthUrl({ studioBase: studioBaseForApiBase(apiBase), port, state: expectedState }),\n    })\n\n    // Watchdog mirrors the CLI's 2-minute window.\n    this.timer = setTimeout(() => {\n      this.teardown()\n      this.setStatus({\n        state: 'failed',\n        reason: 'timeout',\n        message: 'No browser callback arrived within the login window.',\n      })\n    }, this.deps.timeoutMs ?? LOGIN_TIMEOUT_MS)\n    this.timer.unref?.()\n\n    void settled.then(\n      (credentials) => this.complete(attempt, credentials),\n      (failure) => this.failFrom(attempt, failure),\n    )\n    return this.statusValue\n  }\n\n  /** Cancel a waiting attempt; terminal states are untouched. */\n  cancel(): void {\n    if (this.disposed || this.statusValue.state !== 'waiting') return\n    this.teardown()\n    this.setStatus({ state: 'failed', reason: 'cancelled' })\n  }\n\n  /** Stop everything; a waiting attempt ends cancelled. Idempotent. */\n  dispose(): void {\n    if (this.disposed) return\n    this.disposed = true\n    const wasWaiting = this.statusValue.state === 'waiting'\n    this.teardown()\n    if (wasWaiting) this.setStatus({ state: 'failed', reason: 'cancelled' })\n  }\n\n  // -----------------------------------------------------------------------\n  // Internals\n  // -----------------------------------------------------------------------\n\n  private readApiBase(): string {\n    const raw = typeof this.deps.apiBase === 'function' ? this.deps.apiBase() : this.deps.apiBase\n    return raw ?? DEFAULT_API_BASE\n  }\n\n  private setStatus(next: CommandCodeLoginStatus): void {\n    this.statusValue = next\n    for (const listener of [...this.listeners]) listener()\n  }\n\n  /** First free port among the consecutive candidates. */\n  private async findPort(): Promise<number> {\n    const startPort = this.deps.startPort ?? LOGIN_START_PORT\n    const attempts = this.deps.maxPortAttempts ?? LOGIN_MAX_PORT_ATTEMPTS\n    for (let index = 0; index < attempts; index += 1) {\n      const candidate = startPort + index\n      if (await checkPortAvailable(candidate)) return candidate\n    }\n    throw new Error(`No available port found after ${attempts} attempts starting from port ${startPort}`)\n  }\n\n  /**\n   * Bind the attempt's loopback server, resolving when the port is live.\n   * Pre-bind failures reject (surfacing from `begin()`); a later server error\n   * settles the live attempt as a tagged failure instead.\n   */\n  private bindServer(port: number, expectedState: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n      let binding = true\n      const server = createHttpServer((request, response) => this.handleCallback(request, response, expectedState))\n      this.server = server\n      server.once('error', (error: NodeJS.ErrnoException) => {\n        if (this.server !== server) return\n        this.server = undefined\n        const tagged = new LoginSettleError(\n          'error',\n          `Could not bind the login callback server on port ${port}: ${error.code ?? error.message}`,\n        )\n        if (binding) {\n          binding = false\n          reject(tagged)\n        } else {\n          this.settle?.reject(tagged)\n        }\n      })\n      server.listen(port, '127.0.0.1', () => {\n        if (!binding) return\n        binding = false\n        resolve()\n      })\n    })\n  }\n\n  /** One request against the attempt's callback endpoint (CLI-mirrored). */\n  private handleCallback(request: IncomingMessage, response: ServerResponse, expectedState: string): void {\n    // One-shot responses: the server dies with the attempt, and a client\n    // pooling the connection would otherwise race its next request against\n    // the close.\n    response.setHeader('Connection', 'close')\n    response.setHeader('Access-Control-Allow-Origin', corsOrigin(request.headers.origin))\n    response.setHeader('Access-Control-Allow-Methods', 'POST, OPTIONS')\n    response.setHeader('Access-Control-Allow-Headers', 'Content-Type')\n    response.setHeader('Content-Type', 'application/json')\n    const json = (code: number, body: Record<string, unknown>) => {\n      response.writeHead(code)\n      response.end(JSON.stringify(body))\n    }\n    if (request.method === 'OPTIONS') {\n      response.writeHead(204)\n      response.end()\n      return\n    }\n    const path = request.url?.split('?')[0] ?? '/'\n    if (path !== '/callback') {\n      json(404, { success: false, error: 'Not found' })\n      return\n    }\n    if (request.method !== 'POST') {\n      json(405, { success: false, error: 'Method not allowed. Use POST.' })\n      return\n    }\n    // The cap is on wire bytes, not JS string length: multibyte bodies\n    // (CJK/emoji) would otherwise pass ~1.5-2x the limit before tripping it.\n    let bodyBytes = 0\n    let body = ''\n    request.on('data', (chunk: Buffer) => {\n      bodyBytes += chunk.length\n      body += chunk.toString()\n      if (bodyBytes > LOGIN_BODY_LIMIT_BYTES) request.destroy()\n    })\n    request.on('end', () => {\n      // A destroyed (over-limit) request never processes its partial body.\n      if (request.destroyed) return\n      let payload: unknown\n      try {\n        payload = JSON.parse(body)\n      } catch {\n        json(400, { success: false, error: 'Invalid JSON' })\n        return\n      }\n      // The Studio reports a denied authorization as an error object. The\n      // state token is checked FIRST, exactly as the CLI does: a denial is\n      // terminal, so an unauthenticated caller that could reach this branch\n      // without a state match could kill a live login from any web page (the\n      // POST rides as a CORS simple request, which the browser sends\n      // regardless of our origin allowlist). Only the holder of the state this\n      // attempt generated may end it.\n      if (typeof payload === 'object' && payload !== null && 'error' in payload) {\n        const denial = payload as Record<string, unknown>\n        if (denial.state !== expectedState) {\n          json(403, { success: false, error: 'Invalid state token' })\n          return\n        }\n        const description = denial.error_description ?? denial.error\n        this.settleAttempt(json, 200, { success: true }, new LoginSettleError(\n          denial.error === 'access_denied' ? 'denied' : 'error',\n          typeof description === 'string' && description !== '' ? description : 'Authorization failed',\n        ))\n        return\n      }\n      if (!isCallbackCredentials(payload)) {\n        json(400, { success: false, error: 'Missing required fields' })\n        return\n      }\n      if (payload.state !== expectedState) {\n        // Not terminal: a stale tab replaying an old state must not kill the\n        // live attempt — answer 403 and keep waiting (the CLI does the same).\n        json(403, { success: false, error: 'Invalid state token' })\n        return\n      }\n      this.settleAttempt(json, 200, { success: true }, undefined, { ...payload })\n    })\n    request.on('error', () => {})\n  }\n\n  /** Answer a decisive callback, stop listening, and settle the attempt. */\n  private settleAttempt(\n    json: (code: number, body: Record<string, unknown>) => void,\n    code: number,\n    body: Record<string, unknown>,\n    failure?: LoginSettleError,\n    credentials?: CommandCodeLoginCredentials,\n  ): void {\n    json(code, body)\n    // Capture the settle hooks BEFORE teardown clears them.\n    const settle = this.settle\n    this.teardown()\n    if (settle === undefined) return\n    if (failure !== undefined) settle.reject(failure)\n    else if (credentials !== undefined) settle.resolve(credentials)\n  }\n\n  /**\n   * Post-validation completion: whoami check, then hand-off to storage.\n   *\n   * Every step re-checks {@link ownsAttempt} first: the whoami round-trip and\n   * the credential write are awaits, and the user may cancel (or start another\n   * attempt) while one is in flight. A completion that no longer owns the\n   * attempt must not write the key or publish a status — otherwise cancel\n   * would report \"cancelled\" while the credential landed anyway, and the page\n   * would silently flip to success.\n   */\n  private async complete(attempt: number, credentials: CommandCodeLoginCredentials): Promise<void> {\n    if (!this.ownsAttempt(attempt)) return\n    const validation = await validateCommandApiKey(\n      this.deps.fetchImpl ?? fetch,\n      this.readApiBase(),\n      credentials.apiKey,\n    )\n    if (!this.ownsAttempt(attempt)) return\n    if (!validation.valid) {\n      const reason: CommandCodeLoginFailureReason = validation.error === 'invalid_key'\n        ? 'invalid-key'\n        : validation.error === 'network_error' ? 'network' : 'error'\n      this.setStatus({\n        state: 'failed',\n        reason,\n        message: `/alpha/whoami rejected the delivered key (${validation.error}).`,\n      })\n      return\n    }\n    // Last gate before the side effect: a cancel that arrived during the\n    // whoami check must win over storing the key.\n    if (!this.ownsAttempt(attempt)) return\n    try {\n      await this.deps.storeKey(credentials)\n    } catch (error: unknown) {\n      if (!this.ownsAttempt(attempt)) return\n      this.setStatus({\n        state: 'failed',\n        reason: 'unavailable',\n        message: error instanceof Error ? error.message : String(error),\n      })\n      return\n    }\n    if (!this.ownsAttempt(attempt)) return\n    this.clearTimer()\n    this.setStatus({ state: 'success', userName: credentials.userName, keyName: credentials.keyName })\n  }\n\n  /** Whether one attempt still owns the status face (not cancelled, replaced, or disposed). */\n  private ownsAttempt(attempt: number): boolean {\n    return !this.disposed && this.attemptSeq === attempt && this.statusValue.state === 'waiting'\n  }\n\n  /** Map a tagged settle rejection onto the status face. */\n  private failFrom(attempt: number, failure: unknown): void {\n    if (!(failure instanceof LoginSettleError)) return\n    if (!this.ownsAttempt(attempt)) return\n    this.setStatus({ state: 'failed', reason: failure.reason, message: failure.message })\n  }\n\n  private clearTimer(): void {\n    if (this.timer !== undefined) {\n      clearTimeout(this.timer)\n      this.timer = undefined\n    }\n  }\n\n  /** Close the server and watchdog without touching the published status. */\n  private teardown(): void {\n    this.clearTimer()\n    this.server?.close()\n    this.server = undefined\n    this.settle = undefined\n  }\n}\n\n/** A tagged settle failure carrying the stable copy reason. */\nclass LoginSettleError extends Error {\n  constructor(public readonly reason: CommandCodeLoginFailureReason, message: string) {\n    super(message)\n    this.name = 'LoginSettleError'\n  }\n}\n\n/** Echo the Origin header only when the Studio allowlist contains it. */\nfunction corsOrigin(origin: string | undefined): string {\n  return origin !== undefined && LOGIN_ALLOWED_ORIGINS.includes(origin) ? origin : ''\n}\n","/**\n * dsh-commandcode-provider — Command Code web search provider over `ctx.web`.\n *\n * The official Command Code CLI ships a built-in `web_search` tool that POSTs\n * `{ query, numResults, allowedDomains?, blockedDomains? }` to\n * `{apiBase}/alpha/web-search` and reads `{ results: [{ title, url, snippet }] }`\n * back. It authenticates with the SAME `Authorization: Bearer <key>` header and\n * `x-command-code-version` the model adapter uses, so this provider reuses the\n * plugin's existing credential chain (`COMMANDCODE_API_KEY` → credentials seam →\n * `~/.commandcode/auth.json`) — no separate DeepSeek key, no extra endpoint.\n *\n * This mirrors the host-side `@deepseek-ai/dsh-web-search-deepseek` provider in\n * shape: a cordis-free class registered into the web seam, resolving its key per\n * search, mapping each server-side result to the harness's normalized\n * `WebSearchSource`. The web seam owns `maxResults` truncation.\n *\n * @module dsh-commandcode-provider/web-search\n */\n\nimport { WebError, type WebSearchProvider, type WebSearchRequest, type WebSearchResult, type WebSearchSource } from '@deepseek-ai/dsh-web'\nimport type { WebRuntime } from '@deepseek-ai/dsh-web'\nimport { attributionHeaders, type HarnessError } from '@deepseek-ai/dsh-llm'\nimport { COMMAND_CODE_CLI_VERSION } from './adapter.ts'\n\n/** Stable id this provider registers under in `ctx.web`. */\nexport const COMMANDCODE_SEARCH_PROVIDER_ID = 'commandcode'\n\n/**\n * The factory-declared search provider id dsh ships by default (from\n * `dsh-base`'s cordis patch `web.config.searchProvider`). Kept as a\n * documented reference only: disabling this plugin's `webSearch` toggle\n * restores the previously selected backend (see\n * {@link applyCommandCodeSearchSelection}) — it never forces this default,\n * because forcing it is what used to silence sibling search plugins such as\n * modsearch even with Command Code search turned off (issue #26).\n */\nexport const DEFAULT_WEB_SEARCH_PROVIDER_ID = 'deepseek-official'\n\n/**\n * A structurally-typed view of `WebRuntime`'s private selection field.\n *\n * `searchProviderId` is declared `private readonly` on the class, but the\n * compiled runtime property is a plain writable field read per search call\n * (`web.search()` reads `this.searchProviderId` on every invocation). dsh\n * offers no public API to change the selected search provider at runtime, so\n * this seam mutates the instance field directly. That is a deliberate, bounded\n * dependency on the runtime shape: if dsh ever makes the field `#private` or\n * caches it in a closure, this write silently stops applying and the plugin\n * falls back to its provider remaining registered-but-unselected (the boot-time\n * `searchProvider: commandcode` cordis patch is the durable alternative).\n */\ninterface WebRuntimeSearchField {\n  /** The selected search provider id; read per call by `search()`. */\n  searchProviderId: string | undefined\n}\n\n/**\n * Point the web seam's search selection at this plugin's provider (`commandcode`).\n * Sets the runtime field; the next search call honours it because `search()`\n * re-reads `searchProviderId` each time. Returns the prior id (or undefined).\n * Never throws: a hardened/frozen runtime shape must not break the\n * settings-save path that calls this — the provider simply stays\n * registered-but-unselected (the boot-time `searchProvider: commandcode`\n * cordis patch is the durable alternative).\n *\n * @deprecated Prefer {@link applyCommandCodeSearchSelection}: this overload\n * always overwrites the displaced backend with the factory default on\n * disable, so turning Command Code search off silences whichever provider\n * was selected before (e.g. modsearch) instead of restoring it (issue #26).\n */\nexport function selectCommandCodeSearchProvider(web: WebRuntime, enable: boolean): string | undefined {\n  try {\n    const field = web as unknown as WebRuntimeSearchField\n    const prior = field.searchProviderId\n    field.searchProviderId = enable ? COMMANDCODE_SEARCH_PROVIDER_ID : DEFAULT_WEB_SEARCH_PROVIDER_ID\n    return prior\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Tracked web-search selection state for one mounted `WebRuntime`.\n *\n * `owner` marks whether this plugin currently owns the selection (i.e. it\n * wrote `commandcode` and has not given it back yet). `displaced` is the\n * backend id the plugin displaced when it took over — restored when the\n * toggle turns off or the plugin unloads. `undefined` means \"nothing was\n * configured, leave auto-select\" and must round-trip untouched: writing the\n * factory default instead would still override a sibling plugin's own\n * constructor-time pin.\n */\nexport interface CommandCodeSearchSelection {\n  owner: boolean\n  displaced: string | undefined\n}\n\n/** Fresh selection state: the plugin starts out not owning the selection. */\nexport function commandCodeSearchSelection(): CommandCodeSearchSelection {\n  return { owner: false, displaced: undefined }\n}\n\n/**\n * Reach one end of the `webSearch` toggle without trampling sibling search\n * providers (issue #26).\n *\n * - Enabling writes `commandcode` and remembers whatever it displaced. When\n *   the plugin already owns the selection (e.g. a settings save while still\n *   on), the original `displaced` value is kept — the field currently holds\n *   our own id, which must never be mistaken for the user's backend.\n * - Disabling hands the selection back to the remembered backend. When the\n *   state holds no memory (a fresh boot straight into `webSearch: false`),\n *   the field is left alone: the runtime's current value — a sibling's\n *   cordis pin such as `searchProvider: modsearch`, or unset for\n *   auto-select — already says what the user wants.\n * - When the field already reads `commandcode` at first touch (e.g. a\n *   surviving runtime the plugin did not set, or a manual\n *   `searchProvider: commandcode` pin), `displaced` stays undefined so the\n *   later disable is a no-op rather than a guess at the factory default.\n *\n * Never throws: like the low-level rewrite, a hardened runtime shape degrades\n * to registered-but-unselected.\n */\nexport function applyCommandCodeSearchSelection(\n  web: WebRuntime,\n  state: CommandCodeSearchSelection,\n  enable: boolean,\n): void {\n  try {\n    const field = web as unknown as WebRuntimeSearchField\n    if (enable) {\n      if (state.owner) {\n        // Still on across a re-apply: re-assert without forgetting whom we displaced.\n        field.searchProviderId = COMMANDCODE_SEARCH_PROVIDER_ID\n        return\n      }\n      const prior = field.searchProviderId\n      state.displaced = prior === COMMANDCODE_SEARCH_PROVIDER_ID ? undefined : prior\n      field.searchProviderId = COMMANDCODE_SEARCH_PROVIDER_ID\n      state.owner = true\n      return\n    }\n    if (state.owner) {\n      state.owner = false\n      field.searchProviderId = state.displaced\n      return\n    }\n    // Off without ever having taken over: nothing of ours to give back.\n  } catch {\n    // Hardened/frozen runtime: stay registered-but-unselected.\n  }\n}\n\n/** Command Code's lower/upper bound on `numResults` (from the CLI's `web_search` schema). */\nconst MIN_NUM_RESULTS = 1\nconst MAX_NUM_RESULTS = 10\n/** CLI default when the caller sets no result cap. */\nconst DEFAULT_NUM_RESULTS = 5\n\n/** The endpoint the search POST goes to; `{apiBase}` is prepended. */\nconst SEARCH_ROUTE = '/alpha/web-search'\n\n/** Per-request facts the provider needs, all injected so the class stays cordis-free and testable. */\nexport interface CommandCodeSearchProviderDeps {\n  /** Resolve one usable Command Code key (credential seam → env → auth file), or undefined when none. */\n  resolveKey(): Promise<string | undefined>\n  /** The API base host (defaults to `https://api.commandcode.ai`). */\n  apiBase(): string\n  /** Injectable fetch for tests; defaults to the global fetch. */\n  fetchImpl?: typeof fetch\n}\n\n/**\n * Clamp a DSH `maxResults` bound into Command Code's 1–10 range, applying the\n * CLI default of 5 when the caller supplied none.\n */\nfunction clampNumResults(maxResults: number | undefined): number {\n  return maxResults === undefined\n    ? DEFAULT_NUM_RESULTS\n    : Math.max(MIN_NUM_RESULTS, Math.min(MAX_NUM_RESULTS, Math.round(maxResults)))\n}\n\n/** Build a `WebSearchSource` from one raw `{ title, url, snippet }` result, omitting empty optional fields. */\nfunction toSource(result: { url?: string; title?: string; snippet?: string }): WebSearchSource | undefined {\n  const url = result.url?.trim()\n  if (url === undefined || url.length === 0) return undefined\n  const title = result.title?.trim()\n  const snippet = result.snippet?.trim()\n  return {\n    url,\n    ...title !== undefined && title.length > 0 ? { title } : {},\n    ...snippet !== undefined && snippet.length > 0 ? { snippet } : {},\n  }\n}\n\nfunction isAbortError(error: unknown): boolean {\n  return error instanceof DOMException && error.name === 'AbortError'\n}\n\n/** Build the provider's stable cancellation error while retaining the caller's reason. */\nfunction searchAborted(signal: AbortSignal | undefined, fallback: unknown): WebError {\n  return new WebError('Command Code web search aborted', 'WEB_ABORTED', {\n    cause: signal?.aborted === true ? signal.reason : fallback,\n  })\n}\n\nfunction throwIfAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted === true) throw searchAborted(signal, undefined)\n}\n\n/**\n * A `ctx.web` search provider backed by the Command Code Provider API. Reuses\n * the plugin's credential chain and `apiBase`, so search \"just works\" with the\n * existing key — the model-facing `web_search` tool needs no separate\n * configuration. Selection between multiple search providers is the web seam's\n * job (pin `searchProvider: commandcode` if ambiguous).\n */\nexport class CommandCodeSearchProvider implements WebSearchProvider {\n  readonly id = COMMANDCODE_SEARCH_PROVIDER_ID\n\n  constructor(private readonly deps: CommandCodeSearchProviderDeps) {}\n\n  /** Cheap local check; must not make network calls. Presence of a parseable base is enough. */\n  available(): boolean {\n    const base = this.deps.apiBase()\n    return base.length > 0 && URL.canParse(base)\n  }\n\n  async search(request: WebSearchRequest, signal?: AbortSignal): Promise<WebSearchResult> {\n    throwIfAborted(signal)\n    const apiBase = this.deps.apiBase()\n    if (!URL.canParse(apiBase)) {\n      throw new WebError(\n        `Command Code web search is misconfigured: apiBase ${JSON.stringify(apiBase)} is not a valid URL`,\n        'WEB_PROVIDER_ERROR',\n      )\n    }\n    const key = await this.resolveKey(signal)\n    throwIfAborted(signal)\n    const endpoint = `${apiBase.replace(/\\/$/, '')}${SEARCH_ROUTE}`\n\n    const body = {\n      query: request.query,\n      numResults: clampNumResults(request.maxResults),\n    }\n\n    let response: Response\n    try {\n      response = await (this.deps.fetchImpl ?? fetch)(endpoint, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Authorization: `Bearer ${key}`,\n          'x-command-code-version': COMMAND_CODE_CLI_VERSION,\n          'x-cli-environment': 'production',\n          ...attributionHeaders(),\n        },\n        body: JSON.stringify(body),\n        ...signal !== undefined ? { signal } : {},\n      })\n    } catch (error: unknown) {\n      if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error)\n      throw new WebError(\n        `Command Code web search request failed: ${error instanceof Error ? error.message : String(error)}`,\n        'WEB_PROVIDER_ERROR',\n        { cause: error },\n      )\n    }\n\n    if (!response.ok) {\n      let message = `Command Code web search failed (HTTP ${response.status})`\n      try {\n        const parsed: unknown = await response.json()\n        const detail = typeof parsed === 'object' && parsed !== null\n          ? (parsed as { error?: unknown })?.error\n          : undefined\n        if (typeof detail === 'string' && detail.length > 0) message += `: ${detail}`\n        else if (typeof detail === 'object' && detail !== null) {\n          const code = (detail as { code?: unknown })?.code\n          const inner = (detail as { message?: unknown })?.message\n          if (typeof code === 'string' || typeof inner === 'string') {\n            message += `: ${typeof code === 'string' ? code : ''}${typeof code === 'string' && typeof inner === 'string' ? ' — ' : ''}${typeof inner === 'string' ? inner : ''}`\n          }\n        }\n      } catch (error) {\n        if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error)\n        // Non-JSON error bodies (proxy/gateway HTML): keep a truncated slice\n        // so the status line still says something actionable.\n        const text = await response.text().catch(() => '')\n        const slice = text.trim().slice(0, 200)\n        if (slice !== '') message += `: ${slice}`\n      }\n      throw new WebError(message, 'WEB_PROVIDER_ERROR')\n    }\n\n    let payload: unknown\n    try {\n      payload = await response.json()\n    } catch (error) {\n      if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error)\n      throw new WebError('Command Code web search returned an unparseable response body', 'WEB_PROVIDER_ERROR', { cause: error })\n    }\n\n    const results = (payload as { results?: unknown })?.results\n    if (!Array.isArray(results)) {\n      throw new WebError(\n        'Command Code web search returned no results array (the server may have rejected the query)',\n        'WEB_PROVIDER_ERROR',\n      )\n    }\n\n    const sources: WebSearchSource[] = []\n    const seen = new Set<string>()\n    for (const item of results) {\n      if (typeof item !== 'object' || item === null) continue\n      const source = toSource(item as { url?: string; title?: string; snippet?: string })\n      if (source === undefined || seen.has(source.url)) continue\n      seen.add(source.url)\n      sources.push(source)\n    }\n\n    return { sources, truncated: false }\n  }\n\n  private async resolveKey(signal: AbortSignal | undefined): Promise<string> {\n    let key: string | undefined\n    try {\n      key = await this.deps.resolveKey()\n    } catch (error) {\n      if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error)\n      // Preserve the plugin's structured credential/usage taxonomy so the web\n      // tool surfaces the real cause (e.g. every account exhausted, key\n      // invalid) instead of a generic provider failure. The actionable\n      // \"no key configured\" case maps to WEB_PROVIDER_CREDENTIAL_MISSING;\n      // real rejection causes (INVALID_CREDENTIAL / RATE_LIMIT) keep their\n      // message but ride the provider-error code the tool understands.\n      if (error instanceof Error && typeof (error as HarnessError).code === 'string') {\n        const code = (error as HarnessError).code\n        if (code === 'MISSING_CREDENTIAL') throw new WebError(error.message, 'WEB_PROVIDER_CREDENTIAL_MISSING', { cause: error })\n        if (code === 'INVALID_CREDENTIAL' || code === 'RATE_LIMIT') {\n          throw new WebError(error.message, 'WEB_PROVIDER_ERROR', { cause: error })\n        }\n      }\n      throw new WebError(\n        `Command Code web search credential resolution failed: ${error instanceof Error ? error.message : String(error)}`,\n        'WEB_PROVIDER_ERROR',\n        { cause: error },\n      )\n    }\n    if (key === undefined || key.length === 0) {\n      throw new WebError(\n        'Command Code web search has no API key; store COMMANDCODE_API_KEY through the credentials service (the web Models page writes it), export it in the launching environment, set config.apiKey, or run `command-code login` to write ~/.commandcode/auth.json',\n        'WEB_PROVIDER_CREDENTIAL_MISSING',\n      )\n    }\n    return key\n  }\n}\n","/**\n * dsh-TUI settings section (`tuiSettingsSections`).\n *\n * The terminal front door (dsh-TUI) owns its settings screen and asks plugins\n * only to DECLARE what is editable: a section over the plugin's own settings\n * namespace, which the screen renders and writes through the dsh settings\n * service. Without such a declaration a TUI-only user cannot enter the Command\n * Code API key at all — the web Models page is the only surface that writes\n * it, and dsh-TUI's own `/provider` wizard manages its `llm-pi-ai` routes\n * exclusively (issue #28).\n *\n * The seam is third-party, so this module carries LOCAL structural types\n * instead of importing `@deepseek-harness-tui/dsh-tui`: the plugin keeps zero\n * dependency on a terminal front door it may never meet, and an unmeet seam\n * degrades to \"no section\" rather than to a failed import. Registration rides\n * `ctx.inject(['tuiSettingsSections'], …)` in the plugin entry, so a profile\n * without dsh-TUI never activates the fiber — the same optional-service shape\n * `commands`, `web` and `typert` already use.\n *\n * The API-key field is a **secret** field: dsh-TUI keeps the literal out of\n * the settings document and writes the draft through the credentials seam\n * under the declared reference — the same guarantee the web card provides.\n * The reference must not collide with a host-owned one; dsh-TUI rejects\n * `DEEPSEEK_*`/`DSH_*` refs from plugin sections, and this plugin's default\n * (`COMMANDCODE_API_KEY`) is its own namespace.\n *\n * The model allowlist is a **checkbox per catalog model**, grouped by plan\n * tier — the terminal counterpart of the web page's searchable dropdown, and\n * the reason this page does not ask anyone to type 60+ model ids from memory.\n * dsh-TUI's seam has no multi-select kind (only `text | number | boolean |\n * select`) and no array element path a checkbox could own, so each model is\n * its own `boolean` field that WRITES THE WHOLE ARRAY through its `parse`:\n * the seam lets a field's write carry any value, which is what makes a\n * per-model checkbox express set membership. Two rules keep that honest.\n * (1) `parse` reads the allowlist LIVE through its thunk instead of the value\n * the field was built with, and rebuilds the array from THAT: the screen\n * stages several toggles into one save, so a captured base would let two\n * quick toggles resurrect each other's stale list. (2) An empty allowlist\n * means \"show every model\" to the adapter, so the checkboxes render the\n * EFFECTIVE set — unset shows everything checked, and checking a box only\n * records an explicit list once something is excluded.\n *\n * @module dsh-commandcode-provider/tui-settings\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\n\nimport {\n  KNOWN_PLANS,\n  capabilityDescription,\n  isFreeModel,\n} from './capabilities.ts'\n\n/** Provider-owned translations for one title, label, or hint. */\nexport interface TuiLocalizedText {\n  readonly zh?: string\n  readonly en?: string\n}\n\n/** Control kinds the dsh-TUI settings screen knows how to render. */\nexport type TuiSettingsFieldKind = 'text' | 'number' | 'boolean' | 'select'\n\n/** One choice of an options-bearing field. */\nexport interface TuiSettingsFieldOption {\n  /** Stored value. */\n  readonly value: string\n  /** Display label (English; also the fallback). */\n  readonly label: string\n  /** Provider-owned translations for the label. */\n  readonly descriptions?: TuiLocalizedText\n}\n\n/** The write one field's draft stages when the section is saved. */\nexport type TuiSettingsFieldWrite =\n  | { readonly kind: 'set'; readonly value: unknown }\n  | { readonly kind: 'clear' }\n\n/** One editable field inside a section. */\nexport interface TuiSettingsField {\n  /** Key path from the section root, in the settings service's `mutate` vocabulary. */\n  readonly path: readonly string[]\n  /** Short field label (English; also the fallback). */\n  readonly label: string\n  /** Provider-owned translations for the label. */\n  readonly descriptions?: TuiLocalizedText\n  /** Optional one-line help rendered under the field. */\n  readonly hint?: string\n  /** Provider-owned translations for the hint. */\n  readonly hintDescriptions?: TuiLocalizedText\n  /** Optional group id; grouped fields render on that group's subpage. */\n  readonly group?: string\n  readonly kind: TuiSettingsFieldKind\n  /**\n   * Choices for an options-bearing field. A `text` field that carries options\n   * is the TUI's own \"preset plus custom value\" shape: `←`/`→` cycle the\n   * presets while Enter opens the text editor.\n   */\n  readonly options?: readonly TuiSettingsFieldOption[]\n  /** Input placeholder for `kind: 'text' | 'number'`. */\n  readonly placeholder?: string\n  /**\n   * Credential control: the literal never rides the settings document — the\n   * draft starts blank on every open, a blank draft writes nothing, and a\n   * typed draft writes through the credentials seam under `ref`.\n   */\n  readonly secret?: { readonly ref: string }\n  /** Render a stored value as draft text. */\n  readonly format?: (value: unknown) => string\n  /** The write a draft text stages; `undefined` marks the draft invalid. */\n  readonly parse?: (text: string) => TuiSettingsFieldWrite | undefined\n}\n\n/** Optional navigation group inside one section. */\nexport interface TuiSettingsGroup {\n  /** Stable identifier, unique inside the section. */\n  readonly id: string\n  /** Group title (English; also the fallback). */\n  readonly title: string\n  /** Provider-owned translations for the title. */\n  readonly descriptions?: TuiLocalizedText\n}\n\n/** One plugin's section inside the dsh-TUI settings screen. */\nexport interface TuiSettingsSection {\n  /** Settings namespace this section edits. */\n  readonly ns: string\n  /** Section title (English; also the fallback). */\n  readonly title: string\n  /** Provider-owned translations for the title. */\n  readonly descriptions?: TuiLocalizedText\n  /** Optional navigation groups, in display order. */\n  readonly groups?: readonly TuiSettingsGroup[]\n  /** Editable fields, in display order. */\n  readonly fields: readonly TuiSettingsField[]\n}\n\n/** The slice of the `tuiSettingsSections` service this module uses. */\nexport interface TuiSettingsSectionsService {\n  /** Declare a section; the returned disposer withdraws it. */\n  register(section: TuiSettingsSection): () => void\n}\n\n/** The selector value meaning \"no pinned account — follow rotation order\". */\nexport const ACTIVE_ACCOUNT_AUTO = 'auto'\n\n/** The selector value meaning \"no language override — follow the shell locale\". */\nexport const LANG_AUTO = 'auto'\n\n/** Tier display names, mirroring the web dropdown's headings (`model-select.ts`). */\nconst TIER_TITLES: Readonly<Record<string, string>> = {\n  go: 'Go',\n  goat: 'GOAT',\n  pro: 'Pro',\n  provider: 'Provider',\n  max: 'Max',\n}\n\n/** Tiers in picker order; a model outside this set joins the \"Other\" group. */\nconst TIER_ORDER: readonly string[] = ['go', 'goat', 'pro', 'provider', 'max']\n\n/** The group holding models this build's catalog does not know. */\nconst OTHER_GROUP_ID = 'models-other'\n\n/** One catalog model offered as a checkbox. */\nexport interface TuiModelChoice {\n  /** Catalog model id, e.g. `deepseek/deepseek-v4-pro`. */\n  readonly id: string\n  /** Minimum plan tier key from `KNOWN_PLANS`. */\n  readonly tier: string\n  /** Whether the model is currently free, so it leads its group. */\n  readonly free: boolean\n  /** Footer hint for the focused row: plan tier · deal · peak · `Image`. */\n  readonly hint: string\n}\n\n/**\n * Every model this build knows, in checkbox order: plan tier (Go first), then\n * free before paid inside a tier, then by id.\n *\n * The list is the static capability snapshot rather than a live catalog read\n * on purpose — a settings page must draw synchronously, and the snapshot is\n * synced from the same upstream table the picker's tier headings come from.\n * A model added upstream after this build still reaches the user: an empty\n * allowlist shows everything, and a model named in the allowlist but absent\n * here is rendered by the \"Other\" group instead of disappearing.\n */\nexport function commandCodeTuiModelChoices(): readonly TuiModelChoice[] {\n  return Object.keys(KNOWN_PLANS)\n    .map((id) => ({\n      id,\n      tier: KNOWN_PLANS[id] ?? '',\n      free: isFreeModel(id),\n      hint: capabilityDescription(id),\n    }))\n    .sort((a, b) => {\n      const tierDelta = tierRank(a.tier) - tierRank(b.tier)\n      if (tierDelta !== 0) return tierDelta\n      if (a.free !== b.free) return a.free ? -1 : 1\n      return a.id.localeCompare(b.id)\n    })\n}\n\n/** Sort rank of a tier key; unknown tiers trail every known one. */\nfunction tierRank(tier: string): number {\n  const rank = TIER_ORDER.indexOf(tier)\n  return rank === -1 ? TIER_ORDER.length : rank\n}\n\n/** The stored allowlist as a clean id list (non-strings and blanks dropped). */\nfunction storedIds(value: unknown): string[] {\n  return Array.isArray(value)\n    ? value.filter((id): id is string => typeof id === 'string' && id !== '')\n    : []\n}\n\n/** Everything the section needs from the plugin entry. */\nexport interface CommandCodeTuiSettingsDeps {\n  /** The plugin's settings namespace (`llm-commandcode`). */\n  ns: string\n  /** Section title; defaults to `Command Code`. */\n  title?: string\n  /**\n   * The credential reference the API-key field writes through, read per\n   * registration so a `Config.apiKeyEnv` change re-targets the field instead\n   * of silently writing to the old reference.\n   */\n  apiKeyRef: () => string\n  /**\n   * Account slots for the active-account selector, in rotation order, read\n   * per registration. A changed list re-registers the section (see\n   * {@link applyCommandCodeTuiSettings}).\n   */\n  accountSlots: () => readonly { id: string; label: string }[]\n  /**\n   * The stored model allowlist, read LIVE at save time. A checkbox judges its\n   * inherited state against this, so it must be read when the write runs, not\n   * captured when the section was registered. An empty list means \"every model\n   * is visible\" (the adapter's rule).\n   */\n  visibleModels: () => readonly string[]\n  /**\n   * The per-model override map the checkboxes write, read per registration so\n   * ids this build's catalog does not know still get a row of their own. Same\n   * live-read rule as {@link visibleModels}.\n   */\n  modelVisibility?: () => Readonly<Record<string, boolean>> | undefined\n  /** The models to offer as checkboxes; defaults to the static snapshot. */\n  modelChoices?: () => readonly TuiModelChoice[]\n}\n\n/**\n * Build the section descriptor. Pure, so tests can pin the exact fields\n * without a dsh-TUI host.\n *\n * Field choices worth keeping: the two option-bearing fields (`activeAccount`,\n * `lang`) are `text` + `options` rather than `select`, because a `select`\n * cannot express \"unset\" — cycling only ever lands on a declared option, so a\n * `select` would strand the user on a pinned value with no way back to\n * automatic. The `auto` sentinel plus a `parse` that clears the path keeps the\n * unset state reachable. `filterModelsByPlan` formats its EFFECTIVE default\n * (unset means true at the adapter), so a fresh install reads true instead of\n * the screen's \"(empty)\".\n */\nexport function buildCommandCodeTuiSection(\n  deps: CommandCodeTuiSettingsDeps,\n): TuiSettingsSection {\n  const ref = deps.apiKeyRef()\n  const slots = deps.accountSlots()\n  const choices = (deps.modelChoices ?? commandCodeTuiModelChoices)()\n  const catalogIds = choices.map((choice) => choice.id)\n  const known = new Set(catalogIds)\n  // An empty allowlist means \"show every model\" at the adapter, so an\n  // unchecked-for-no-reason model reads as visible. The stored facts are read\n  // live by each field, never captured here.\n  const stored = storedIds(deps.visibleModels())\n  const overrides = deps.modelVisibility?.() ?? {}\n  // Models this build's catalog cannot place (retired or renamed upstream, or\n  // added after this snapshot) plus stored-but-unknown ids. They get their own\n  // group so they stay visible and switchable instead of silently sticking.\n  const extras = [...new Set([...stored, ...Object.keys(overrides)])].filter((id) => !known.has(id))\n\n  const tierGroups = TIER_ORDER\n    .filter((tier) => choices.some((choice) => choice.tier === tier))\n    .map((tier) => ({\n      id: `models-${tier}`,\n      title: `${TIER_TITLES[tier] ?? tier} models`,\n      descriptions: { zh: `${TIER_TITLES[tier] ?? tier} 模型` },\n    }))\n  // Models this snapshot cannot place (a tier added upstream) share the group\n  // with the stored-but-unknown allowlist entries.\n  const unranked = choices.filter((choice) => tierRank(choice.tier) === TIER_ORDER.length)\n  const otherGroup = unranked.length > 0 || extras.length > 0\n    ? [{ id: OTHER_GROUP_ID, title: 'Other models', descriptions: { zh: '其他模型' } }]\n    : []\n\n  /**\n   * One checkbox: a boolean at a path of its OWN (`modelVisibility.<id>`).\n   *\n   * The path must be unique per model. dsh-TUI keys a staged draft by the\n   * field's path (`fieldKey`), so N checkboxes sharing `visibleModels` share\n   * ONE draft: every one of them then parses that same draft on save, all N\n   * write ops address the same path, and only the LAST field's op survives —\n   * which silently rewrote the allowlist from the last catalog model instead\n   * of the one that was toggled. A per-model key is what makes a checkbox\n   * express one model's state.\n   *\n   * An override equal to what the array already says is written as a CLEAR, so\n   * toggling a model back to its inherited state leaves no residue and the\n   * document stays minimal.\n   */\n  const modelField = (id: string, hint: string, group: string): TuiSettingsField => ({\n    path: ['modelVisibility', id],\n    group,\n    kind: 'boolean',\n    label: id,\n    ...(hint === '' ? {} : { hint }),\n    format: (value) => {\n      if (typeof value === 'boolean') return String(value)\n      // No override: the model follows the array allowlist, where empty or\n      // unset means \"everything is visible\".\n      const listed = storedIds(deps.visibleModels())\n      return String(listed.length === 0 || listed.includes(id))\n    },\n    parse: (text) => {\n      const on = text.trim() === 'true'\n      // Read the array LIVE, not at registration time: the screen stages a\n      // toggle and saves it later, and the inherited state must be judged\n      // against what the document holds when the write runs.\n      const listed = storedIds(deps.visibleModels())\n      const inherited = listed.length === 0 || listed.includes(id)\n      return on === inherited ? { kind: 'clear' } : { kind: 'set', value: on }\n    },\n  })\n\n  return {\n    ns: deps.ns,\n    title: deps.title ?? 'Command Code',\n    descriptions: { zh: 'Command Code（非官方）' },\n    groups: [\n      { id: 'connection', title: 'Connection', descriptions: { zh: '连接' } },\n      { id: 'models', title: 'Models', descriptions: { zh: '模型' } },\n      ...tierGroups,\n      ...otherGroup,\n      { id: 'advanced', title: 'Advanced', descriptions: { zh: '高级' } },\n    ],\n    fields: [\n      {\n        path: ['apiKey'],\n        group: 'connection',\n        kind: 'text',\n        label: 'API key',\n        descriptions: { zh: 'API 密钥' },\n        secret: { ref },\n        hint: `Stored in the credential store as ${ref}, never in settings.yaml.`,\n        hintDescriptions: { zh: `保存在凭据库（${ref}），不会写入 settings.yaml。` },\n      },\n      {\n        path: ['apiBase'],\n        group: 'connection',\n        kind: 'text',\n        label: 'API base',\n        descriptions: { zh: 'API 地址' },\n        placeholder: 'https://api.commandcode.ai',\n        hint: 'Leave empty for the public Command Code Provider API.',\n        hintDescriptions: { zh: '留空即使用官方 Command Code Provider API。' },\n        parse: (text) => {\n          const trimmed = text.trim()\n          return trimmed === '' ? { kind: 'clear' } : { kind: 'set', value: trimmed }\n        },\n      },\n      {\n        path: ['filterModelsByPlan'],\n        group: 'models',\n        kind: 'boolean',\n        label: 'Hide out-of-plan models',\n        descriptions: { zh: '隐藏套餐外的模型' },\n        hint: 'Keeps models above your subscription tier out of the picker. Fails open.',\n        hintDescriptions: { zh: '在选择器里隐藏超出当前订阅档位的模型；判断不出来时全部显示。' },\n        // Unset means \"filter\" at the adapter, so render the effective default\n        // rather than letting the raw boolean format report an empty value.\n        format: (value) => (value === false ? 'false' : 'true'),\n        parse: (text) => ({ kind: 'set', value: text.trim() === 'true' }),\n      },\n      ...choices\n        .filter((choice) => tierRank(choice.tier) !== TIER_ORDER.length)\n        .map((choice) => modelField(choice.id, choice.hint, `models-${choice.tier}`)),\n      ...unranked.map((choice) => modelField(choice.id, choice.hint, OTHER_GROUP_ID)),\n      ...extras.map((id) => modelField(id, capabilityDescription(id), OTHER_GROUP_ID)),\n      {\n        path: ['activeAccount'],\n        group: 'advanced',\n        kind: 'text',\n        label: 'Active account',\n        descriptions: { zh: '当前账号' },\n        hint: 'A pinned account id, or auto to follow the rotation order.',\n        hintDescriptions: { zh: '固定使用某个账号的 id；auto 表示按轮换顺序自动选择。' },\n        options: [\n          {\n            value: ACTIVE_ACCOUNT_AUTO,\n            label: 'Automatic (rotation order)',\n            descriptions: { zh: '自动（按轮换顺序）' },\n          },\n          ...slots.map((slot) => ({\n            value: slot.id,\n            label: slot.label,\n            descriptions: { zh: slot.label },\n          })),\n        ],\n        format: (value) => (typeof value === 'string' && value.trim() !== '' ? value : ACTIVE_ACCOUNT_AUTO),\n        parse: (text) => {\n          const trimmed = text.trim()\n          return trimmed === '' || trimmed === ACTIVE_ACCOUNT_AUTO\n            ? { kind: 'clear' }\n            : { kind: 'set', value: trimmed }\n        },\n      },\n      {\n        path: ['lang'],\n        group: 'advanced',\n        kind: 'text',\n        label: 'Command language',\n        descriptions: { zh: '命令语言' },\n        hint: 'Language of the /commandcode dashboard; auto follows the shell locale.',\n        hintDescriptions: { zh: '/commandcode 用量面板的语言；auto 跟随终端 locale。' },\n        options: [\n          { value: LANG_AUTO, label: 'Automatic (shell locale)', descriptions: { zh: '自动（跟随终端 locale）' } },\n          { value: 'zh', label: '中文' },\n          { value: 'en', label: 'English' },\n        ],\n        format: (value) => (value === 'zh' || value === 'en' ? value : LANG_AUTO),\n        parse: (text) => {\n          const trimmed = text.trim()\n          return trimmed === '' || trimmed === LANG_AUTO\n            ? { kind: 'clear' }\n            : { kind: 'set', value: trimmed }\n        },\n      },\n    ],\n  }\n}\n\n/**\n * The `tuiSettingsSections` service, read defensively.\n *\n * The service name is declared by dsh-TUI's own module augmentation, which\n * this package deliberately does not import, so the typed `Context` has no\n * such property. The read goes through the REFLECTIVE `ctx.get` rather than a\n * bare property access: cordis refuses a property read for a service the fiber\n * never declared in `inject` (`cannot get property … without inject`), and an\n * unmeet seam must degrade to \"no section\" instead of throwing out of the\n * plugin's boot.\n */\nfunction tuiSettingsService(ctx: Context): TuiSettingsSectionsService | undefined {\n  let candidate: unknown\n  try {\n    candidate = ctx.get('tuiSettingsSections')\n  } catch {\n    return undefined\n  }\n  if (typeof candidate !== 'object' || candidate === null) return undefined\n  const register = (candidate as { register?: unknown }).register\n  if (typeof register !== 'function') return undefined\n  return {\n    register: (register as (section: TuiSettingsSection) => () => void)\n      .bind(candidate) as TuiSettingsSectionsService['register'],\n  }\n}\n\n/**\n * Identity of everything in the section that can change at runtime: the\n * credential reference behind the API-key field, the account slots behind the\n * active-account selector, and the stored-but-unknown allowlist entries that\n * get a checkbox of their own. Re-registration is skipped while this matches,\n * so ordinary settings writes never churn the screen's section list — the\n * checkboxes themselves read their state live and need no re-declaration.\n */\nfunction sectionSignature(section: TuiSettingsSection): string {\n  const active = section.fields.find((field) => field.path.join('.') === 'activeAccount')\n  return JSON.stringify({\n    secret: section.fields.find((field) => field.secret !== undefined)?.secret?.ref ?? '',\n    options: active?.options?.map((option) => option.value) ?? [],\n    // Only this group's membership can change the field LIST: every catalog\n    // checkbox reads its own state live, so an ordinary toggle needs no\n    // re-declaration.\n    other: section.fields\n      .filter((field) => field.group === OTHER_GROUP_ID)\n      .map((field) => field.label),\n  })\n}\n\n/**\n * Register the Command Code section on a dsh-TUI host.\n *\n * @param ctx - the context of an activated `tuiSettingsSections` injection.\n * @param deps - plugin-owned facts the section reads.\n * @returns a refresh function that re-registers the section when a fact it\n *   renders changed (the plugin entry calls it from its settings `onChange`\n *   hook), or `undefined` when the seam is unusable. The returned function is\n *   inert after the fiber is torn down.\n */\nexport function applyCommandCodeTuiSettings(\n  ctx: Context,\n  deps: CommandCodeTuiSettingsDeps,\n): (() => void) | undefined {\n  const service = tuiSettingsService(ctx)\n  if (service === undefined) return undefined\n  let disposed = false\n  let current: { signature: string; dispose: () => void } | undefined\n  const refresh = (): void => {\n    if (disposed) return\n    const section = buildCommandCodeTuiSection(deps)\n    const signature = sectionSignature(section)\n    if (current?.signature === signature) return\n    // Withdraw before re-declaring: dsh-TUI keeps one section per namespace,\n    // so a second register would otherwise be refused (or shadow the first,\n    // depending on the host build) instead of replacing it.\n    current?.dispose()\n    current = undefined\n    try {\n      current = { signature, dispose: service.register(section) }\n    } catch (error: unknown) {\n      // A host that rejects the declaration (a shadow-mode capability policy,\n      // a future contract change) must not take the plugin down with it: the\n      // terminal simply keeps no Command Code page, and the web page plus\n      // settings.yaml stay the fallback.\n      ctx.logger?.warn(\n        `llm-commandcode: could not register the dsh-TUI settings section: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n      )\n    }\n  }\n  refresh()\n  ctx.effect(() => () => {\n    disposed = true\n    current?.dispose()\n    current = undefined\n  }, 'dsh-commandcode-provider: tui settings section')\n  return refresh\n}\n","/**\n * dsh-commandcode-provider — DeepSeek Harness LLM provider plugin for Command\n * Code (unofficial; ported from pi-commandcode-provider@0.5.1).\n *\n * Registers the `commandcode` provider route on `ctx.llm` and declares it in\n * the configurable-provider directory, so the web Models page shows a\n * \"Command Code\" card with an API-key field and the model picker lists the\n * live Command Code model catalog. Connection facts resolve per request over\n * the optional `llm-commandcode` user-settings section and the credential\n * seam, so a changed key, endpoint, or cache path reaches the next request\n * without a restart.\n *\n * ```yaml\n * - id: llm-commandcode\n *   name: \"@mars-sea/dsh-commandcode-provider\"\n *   config:\n *     apiKeyEnv: COMMANDCODE_API_KEY\n * ```\n *\n * The `name` is the full package specifier as installed in the profile's\n * node_modules: the loader imports it as a module, and pnpm links packages by\n * their true (scoped) name — a bare `dsh-commandcode-provider` fails to\n * resolve (ERR_MODULE_NOT_FOUND) and crashes the app on boot. The value must\n * be quoted in YAML: an unquoted scalar starting with `@` fails to parse.\n *\n * @module dsh-commandcode-provider\n */\n\nimport { homedir } from 'node:os'\nimport { join } from 'node:path'\n\nimport type { Context } from '@deepseek-ai/cordis'\nimport type { WebRuntime } from '@deepseek-ai/dsh-web'\nimport z from '@deepseek-ai/schemastery'\nimport { MAX_TIMER_DELAY_MS } from '@deepseek-ai/dsh-timeout'\nimport { assertUsableApiKey, LlmError } from '@deepseek-ai/dsh-llm'\nimport { credentialRef, type CredentialRef } from '@deepseek-ai/dsh-credentials'\nimport { launchEnvironmentOf } from '@deepseek-ai/dsh-launch-environment'\nimport type {} from '@deepseek-ai/dsh-settings'\nimport { CommandCodeAdapter, DEFAULT_API_BASE, resolveAuthFileApiKey } from './adapter.ts'\nimport { DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_STREAM_IDLE_TIMEOUT_MS } from './adapter.ts'\nimport type { CommandCodeConnectionOptions, CommandCodeUsageReport } from './adapter.ts'\nimport { CommandCodeAccountPool, accountUsable, selectActiveAccount } from './accounts.ts'\nimport type { CommandCodeAccountConfig, CommandCodeAccountSlot, CommandCodeModelAccountRule } from './accounts.ts'\nimport { applyCommands } from './commands.ts'\nimport { applyUsageRemote } from './usage-remote.ts'\nimport type { CommandCodeAccountsReport, CommandCodeCatalog } from './usage-wire.ts'\nimport { CommandCodeLoginFlow } from './login.ts'\nimport type { CommandCodeLoginCredentials } from './login.ts'\nimport { pickCommandLocale, type LocaleId } from './command-locales.ts'\nimport { CommandCodeSearchProvider, applyCommandCodeSearchSelection, commandCodeSearchSelection } from './web-search.ts'\nimport { applyCommandCodeTuiSettings } from './tui-settings.ts'\nimport { KNOWN_PLANS } from './capabilities.ts'\n\nexport {\n  COMMAND_CODE_CLI_VERSION,\n  DEFAULT_API_BASE,\n  DEFAULT_GENERATE_MAX_TOKENS,\n  DEFAULT_MAX_OUTPUT_TOKENS,\n  DEFAULT_REQUEST_TIMEOUT_MS,\n  DEFAULT_STREAM_IDLE_TIMEOUT_MS,\n  CommandCodeAdapter,\n  BILLING_ACCESS_TTL_MS,\n  projectSlugFromPath,\n  resolveAuthFileApiKey,\n} from './adapter.ts'\nexport {\n  KNOWN_EFFORTS,\n  KNOWN_IMAGE_MODELS,\n  KNOWN_THINKING_MODELS,\n  KNOWN_PLANS,\n  KNOWN_SUBSCRIPTION_PLANS,\n  KNOWN_DEALS,\n  KNOWN_PEAK_PRICING,\n  PLAN_LABELS,\n  PLAN_ORDER,\n  capabilityDescription,\n  compareByPlan,\n  dealLabel,\n  formatContext,\n  modelVisibleInPlan,\n  peakPricingLabel,\n  peakPricingState,\n  planLabel,\n  subscriptionPlanInfo,\n} from './capabilities.ts'\nexport type { CommandCodeAdapterDeps, CommandCodeConnectionOptions, CommandCodeUsageReport, ResolveAttachments } from './adapter.ts'\nexport type { CommandCodeBillingAccess } from './capabilities.ts'\nexport { applyCommands, commandDefinition } from './commands.ts'\nexport type { CommandCodeCommandDeps } from './commands.ts'\nexport { applyUsageRemote, CommandCodeUsageService } from './usage-remote.ts'\nexport type { CommandCodeUsageDeps, LoginFlowFacade } from './usage-remote.ts'\nexport { USAGE_REPORT_ENDPOINT, usageReportSchema } from './usage-wire.ts'\nexport type { CommandCodeAccountUsage, CommandCodeAccountsReport } from './usage-wire.ts'\nexport {\n  LOGIN_BEGIN_ENDPOINT,\n  LOGIN_STATUS_ENDPOINT,\n  LOGIN_CANCEL_ENDPOINT,\n  parseLoginStatus,\n  loginStatusSchema,\n} from './login-wire.ts'\nexport type {\n  CommandCodeLoginStatus,\n  CommandCodeLoginFailureReason,\n} from './login-wire.ts'\nexport {\n  LOGIN_TIMEOUT_MS,\n  LOGIN_START_PORT,\n  LOGIN_MAX_PORT_ATTEMPTS,\n  LOGIN_BODY_LIMIT_BYTES,\n  LOGIN_ALLOWED_ORIGINS,\n  buildCommandAuthUrl,\n  studioBaseForApiBase,\n  validateCommandApiKey,\n  CommandCodeLoginFlow,\n} from './login.ts'\nexport type {\n  CommandCodeLoginCredentials,\n  CommandCodeLoginFlowDeps,\n  ApiKeyValidation,\n} from './login.ts'\nexport { CommandCodeAccountPool, accountUsable, selectActiveAccount, matchModelRule, selectAccountForModel } from './accounts.ts'\nexport type { CommandCodeAccountConfig, CommandCodeAccountSlot, CommandCodeAccountState, CommandCodeModelAccountRule } from './accounts.ts'\nexport { CommandCodeSearchProvider, COMMANDCODE_SEARCH_PROVIDER_ID, DEFAULT_WEB_SEARCH_PROVIDER_ID, applyCommandCodeSearchSelection, commandCodeSearchSelection, selectCommandCodeSearchProvider } from './web-search.ts'\nexport type { CommandCodeSearchSelection } from './web-search.ts'\nexport type { CommandCodeSearchProviderDeps } from './web-search.ts'\nexport { ACTIVE_ACCOUNT_AUTO, LANG_AUTO, applyCommandCodeTuiSettings, buildCommandCodeTuiSection } from './tui-settings.ts'\nexport type {\n  CommandCodeTuiSettingsDeps,\n  TuiSettingsField,\n  TuiSettingsFieldOption,\n  TuiSettingsFieldWrite,\n  TuiSettingsGroup,\n  TuiSettingsSection,\n  TuiSettingsSectionsService,\n} from './tui-settings.ts'\n\nexport const name = 'llm-commandcode'\nexport const inject = ['llm']\n\nconst NS = 'llm-commandcode'\nconst DEFAULT_API_KEY_ENV = 'COMMANDCODE_API_KEY'\n\n/** The single provider route this plugin owns. */\nexport const PROVIDER = 'commandcode'\n/** Default models cache path (mirrors the pi plugin's on-disk cache). */\nexport const DEFAULT_MODELS_CACHE_PATH = join(homedir(), '.commandcode', 'models-cache.json')\n\n/**\n * Plugin config, validated by the same-named schemastery schema and doubling\n * as the `llm-commandcode` settings-section shape. Every field is optional:\n * a missing API key resolves through {@link Config.apiKeyEnv} at each request\n * (the web Models page writes it), with the official Command Code CLI auth\n * file (`~/.commandcode/auth.json`) as the last fallback.\n */\nexport interface Config {\n  /** Credential reference (environment-variable name) resolved per request; defaults to `COMMANDCODE_API_KEY`. */\n  apiKeyEnv?: string\n  /** Literal API key override (composition config only); takes precedence over `apiKeyEnv`. */\n  apiKey?: string\n  /** API base; defaults to the public Command Code Provider API. */\n  apiBase?: string\n  /** Working directory reported to the API; defaults to the process cwd. */\n  workingDir?: string\n  /** Model catalog cache path; defaults to `~/.commandcode/models-cache.json`. */\n  modelsCachePath?: string\n  /** Milliseconds to wait for the generate response's first byte; defaults to 60s. */\n  requestTimeoutMs?: number\n  /** Milliseconds a stream may stall before being treated as a dead connection; defaults to 300s. */\n  streamIdleTimeoutMs?: number\n  /**\n   * Whether the model picker hides models above the account's subscription\n   * tier; defaults to true. The filter fails open (unknown plan, billing\n   * endpoint failure, or a positive on-demand credit balance all keep the\n   * full catalog visible). Set false to always list every model.\n   */\n  filterModelsByPlan?: boolean\n  /**\n   * Visible-model allowlist: catalog model ids shown in pickers. Empty or\n   * unset means \"show everything\". Persisted by the settings page's model\n   * filter card; applies after the subscription-tier filter.\n   */\n  visibleModels?: string[]\n  /**\n   * Per-model visibility overrides from the terminal settings page's checkbox\n   * list, keyed by catalog id (`true` = listed, `false` = hidden). An id here\n   * decides that model on its own; an id absent here follows `visibleModels`.\n   * dsh-TUI keys a staged edit by the field's path, so the checkboxes need one\n   * path per model — a map — because a boolean field cannot express \"this id\n   * is a member of the array\".\n   */\n  modelVisibility?: Record<string, boolean>\n  /**\n   * Extra accounts for multi-account rotation. The top-level\n   * `apiKey`/`apiKeyEnv` (plus the CLI auth file) always form the first\n   * (`default`) account; each entry here adds one more. When a request is\n   * rejected pre-stream with 429 (usage window exhausted) or 401, the next\n   * account's key retried transparently; when every account is exhausted the\n   * request fails with a `RATE_LIMIT` error naming the earliest window\n   * reset. Entries without `apiKey` or `apiKeyEnv` are ignored.\n   */\n  accounts?: CommandCodeAccountConfig[]\n  /**\n   * Manually selected active account: a slot id — `default`, or an extra\n   * account's credential reference (e.g. `COMMANDCODE_API_KEY_2`). The\n   * selected account serves whenever it is usable; an unknown id or an\n   * exhausted selected account falls back to the first usable slot (automatic\n   * rotation still applies). Unset means \"first usable account\".\n   */\n  activeAccount?: string\n  /**\n   * Model → account routing rules. Each rule lists catalog model ids to an\n   * account slot id (`default`, or an extra account's credential reference).\n   * When a request's model is in a rule's list and the routed account is\n   * usable, that account serves — before the manual {@link activeAccount} and\n   * the passive rotation order. A routed account that is exhausted or invalid\n   * falls back to the normal selection, so the router is a hint, never a hard\n   * gate. The first matching rule wins.\n   */\n  modelAccountRules?: CommandCodeModelAccountRule[]\n  /**\n   * Whether to use Command Code as the backend for dsh's model-facing\n   * `web_search` tool. When enabled, the plugin registers a `commandcode`\n   * search provider on `ctx.web` AND selects `commandcode` in the web seam\n   * (so it wins over the shipped `deepseek-official` or a sibling search\n   * plugin's pin), using the SAME Command Code API key/base as chat. When\n   * disabled, the selection is handed back to whichever backend was there\n   * before — turning it off never forces the factory default, so a sibling\n   * search plugin (e.g. modsearch) keeps working (issue #26). The rewrite\n   * rides dsh's internal `searchProviderId`, which is read per search call,\n   * so a setting change lands on the next search without a restart.\n   * Defaults to true.\n   */\n  webSearch?: boolean\n  /**\n   * Language override for the `/commandcode` Host-side command's user-facing\n   * copy. Host commands cannot read the client's `ctx.locale`, so this is\n   * the explicit knob: `'zh'` or `'en'`. Unset means the command reads\n   * `LC_ALL`/`LANG` from the launching shell, falling back to `'zh'`. The\n   * web settings page is unaffected — it follows the browser's language\n   * preference on its own. Two surfaces, two independent locales. The\n   * declared type is `string` (the schemastery `pattern` cannot narrow\n   * literal types); an unknown value is treated as \"unset\" by\n   * `pickCommandLocale`.\n   */\n  lang?: string\n}\n\nexport const Config: z<Config> = z.object({\n  apiKeyEnv: z.string().role('credential-ref').default(DEFAULT_API_KEY_ENV),\n  // `role('secret')` is load-bearing, not decoration: a literal key is the one\n  // credential path this plugin cannot keep out of a settings document (the\n  // page writes through the credentials seam instead), so the harness must\n  // strip it from every descriptor read (`settings.describe()` runs with\n  // `redactSecrets: true`). Without the role the literal rides back to the\n  // browser verbatim — including on a remote-Host setup, where that is another\n  // machine. Same declaration as the official providers' `apiKey` field.\n  apiKey: z.string().role('secret'),\n  apiBase: z.string(),\n  workingDir: z.string(),\n  modelsCachePath: z.string(),\n  requestTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS),\n  streamIdleTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS),\n  filterModelsByPlan: z.boolean(),\n  visibleModels: z.array(z.string()),\n  /**\n   * Per-model visibility overrides for the terminal settings page's checkbox\n   * list, keyed by catalog id. dsh-TUI addresses a staged edit by its field\n   * PATH, so two checkboxes sharing one path would overwrite each other's\n   * draft and the section's last model would decide every write; a map gives\n   * each checkbox a path of its own. An id listed here wins over\n   * {@link visibleModels}; ids absent here keep following it.\n   */\n  modelVisibility: z.dict(z.boolean()),\n  webSearch: z.boolean().default(true),\n  accounts: z.array(z.object({\n    label: z.string(),\n    apiKeyEnv: z.string().role('credential-ref'),\n    /** Literal key for one extra slot; see the top-level `apiKey` secret note. */\n    apiKey: z.string().role('secret'),\n  })),\n  activeAccount: z.string(),\n  modelAccountRules: z.array(z.object({\n    models: z.array(z.string()),\n    account: z.string(),\n  })),\n  lang: z.string().pattern(/^(zh|en)$/).default('zh' as const),\n})\n\n/** One resolution's complete request facts: connection plus credential reference. */\nexport interface ResolvedCommandCodeOptions extends CommandCodeConnectionOptions {\n  apiKeyEnv: CredentialRef\n}\n\n/**\n * The one explicit resolve step from raw config to validated connection\n * facts. Programmatic construction may bypass Schemastery normalization, so\n * every default is re-judged here — for the composition entry at load and for\n * each settings snapshot at its first use.\n */\nexport function resolveAdapterOptions(config: Config): ResolvedCommandCodeOptions {\n  return {\n    apiKeyEnv: credentialRef(config.apiKeyEnv ?? DEFAULT_API_KEY_ENV),\n    apiBase: config.apiBase ?? DEFAULT_API_BASE,\n    workingDir: config.workingDir ?? process.cwd(),\n    modelsCachePath: config.modelsCachePath ?? DEFAULT_MODELS_CACHE_PATH,\n    requestTimeoutMs: config.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS,\n    streamIdleTimeoutMs: config.streamIdleTimeoutMs ?? DEFAULT_STREAM_IDLE_TIMEOUT_MS,\n    filterModelsByPlan: config.filterModelsByPlan ?? true,\n    visibleModels: Array.isArray(config.visibleModels)\n      ? config.visibleModels.filter((id) => typeof id === 'string' && id !== '')\n      : undefined,\n    // Only real booleans survive: a hand-edited document can carry anything,\n    // and a malformed flag must fall back to the array rather than hide a\n    // model. An all-empty map is the same as no map.\n    modelVisibility: readModelVisibility(config.modelVisibility),\n  }\n}\n\n/**\n * Per-model visibility overrides, cleaned for the adapter. Programmatic\n * construction may bypass Schemastery normalization, so a non-object or a\n * non-boolean entry is dropped here instead of reaching the picker filter.\n * @param raw - The `modelVisibility` value from any config source.\n * @returns A frozen id → boolean map, or undefined when nothing is set.\n */\nfunction readModelVisibility(raw: unknown): Readonly<Record<string, boolean>> | undefined {\n  if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) return undefined\n  const entries = Object.entries(raw).filter(\n    (entry): entry is [string, boolean] => entry[0] !== '' && typeof entry[1] === 'boolean',\n  )\n  return entries.length === 0 ? undefined : Object.fromEntries(entries)\n}\n\nexport function apply(ctx: Context, config: Config): void {\n  let current: () => Config = () => config\n  let lastRaw: Config | undefined\n  let lastGood: ResolvedCommandCodeOptions | undefined\n  const options = (): ResolvedCommandCodeOptions => {\n    const raw = current()\n    if (raw === lastRaw && lastGood !== undefined) return lastGood\n    const next = resolveAdapterOptions(raw)\n    lastRaw = raw\n    lastGood = next\n    return next\n  }\n  options()\n\n  // The account slots, rebuilt from the live config on every resolution so\n  // a settings-page accounts change reaches the very next request. The\n  // top-level apiKey/apiKeyEnv (+ the CLI auth file) form the default\n  // account; each config.accounts entry adds one more.\n  const slots = (): CommandCodeAccountSlot[] => {\n    const raw = current()\n    const list: CommandCodeAccountSlot[] = [{\n      id: 'default',\n      label: 'Default',\n      ref: credentialRef(raw.apiKeyEnv ?? DEFAULT_API_KEY_ENV),\n      literal: raw.apiKey,\n      allowAuthFile: true,\n    }]\n    for (const [index, account] of (raw.accounts ?? []).entries()) {\n      const refName = typeof account.apiKeyEnv === 'string' && account.apiKeyEnv.trim() !== ''\n        ? account.apiKeyEnv.trim()\n        : undefined\n      const literal = typeof account.apiKey === 'string' && account.apiKey !== '' ? account.apiKey : undefined\n      if (refName === undefined && literal === undefined) continue\n      list.push({\n        // Slot ids must survive account-list edits: an extra's id is its\n        // credential reference (stable across reorders/removals), falling\n        // back to the positional id only for literal-only composition\n        // entries, which no settings document can name anyway.\n        id: refName ?? `account-${index + 2}`,\n        label: typeof account.label === 'string' && account.label.trim() !== ''\n          ? account.label.trim()\n          : `Account ${index + 2}`,\n        ref: refName === undefined ? undefined : credentialRef(refName),\n        literal,\n        allowAuthFile: false,\n      })\n    }\n    return list\n  }\n\n  // The manually selected account (settings page / config), re-read per\n  // resolution like every other settings-backed fact.\n  const preferredId = (): string | undefined => {\n    const raw = current().activeAccount\n    return typeof raw === 'string' && raw.trim() !== '' ? raw.trim() : undefined\n  }\n\n  const resolveRef = async (ref: ReturnType<typeof credentialRef>): Promise<string | undefined> => {\n    const credentials = ctx.get('credentials')\n    if (credentials !== undefined) {\n      // The credentials seam layers the process environment, the\n      // provider-managed store, and `.env` files itself — a miss here is\n      // genuinely unconfigured, not \"not in the store\".\n      const hit = await credentials.resolve(ref)\n      return hit?.value\n    }\n    const ambient = launchEnvironmentOf(ctx).get(ref)\n    return ambient !== undefined && ambient.value.length > 0 ? ambient.value : undefined\n  }\n\n  // The multi-account pool: passive rotation only — a key is marked when a\n  // request using it is actually rejected (429/401), and the marks are\n  // re-checked against the live window limits only once every account is\n  // marked, so the steady state costs zero extra API calls.\n  // Explicit annotations break the pool↔adapter inference cycle (the pool's\n  // probe calls the adapter; the adapter's rotation hook calls the pool).\n  const pool: CommandCodeAccountPool = new CommandCodeAccountPool({\n    slots,\n    resolveRef,\n    authFileKey: resolveAuthFileApiKey,\n    // The adapter reference is assigned right below; the probe runs only at\n    // request time, never during plugin startup.\n    probeWindow: (apiKey: string) => adapter.probeFiveHourWindow(apiKey),\n    preferredId,\n    // Model → account routing rules, re-read per resolution like every\n    // settings-backed fact.\n    modelAccountRules: (): readonly CommandCodeModelAccountRule[] => current().modelAccountRules ?? [],\n  })\n\n  const resolveApiKey = async (connection: ResolvedCommandCodeOptions, model?: string): Promise<string> => {\n    const resolved = await pool.resolveKey(model === undefined ? {} : { model })\n    if (resolved !== undefined) {\n      return assertUsableApiKey(resolved.key, 'llm-commandcode', resolved.slot.ref ?? `${resolved.slot.label} (config.apiKey)`)\n    }\n    const ref = connection.apiKeyEnv\n    throw new LlmError(\n      `llm-commandcode: no API key for provider route \"${PROVIDER}\"; store ${ref} through the`\n      + ' credentials service (the web Models page writes it), export it in the launching'\n      + ' environment, set config.apiKey, or run `command-code login` to write'\n      + ' ~/.commandcode/auth.json',\n      'MISSING_CREDENTIAL',\n    )\n  }\n\n  const adapter: CommandCodeAdapter<ResolvedCommandCodeOptions> = new CommandCodeAdapter({\n    options,\n    resolveApiKey,\n    // Pre-stream 429/401: mark the rejected key and hand the adapter the next\n    // account's key. When every account is exhausted the pool throws the\n    // RATE_LIMIT/INVALID_CREDENTIAL error that names the earliest reset —\n    // that error, not the raw 429, is what the caller sees.\n    rotateApiKey: async (rejectedKey: string, rejection: 'rate-limit' | 'invalid-credential', _connection: ResolvedCommandCodeOptions, model?: string): Promise<string | undefined> => {\n      pool.markRejected(rejectedKey, rejection)\n      // Exclude the just-rejected key from probe-revival: a probe clearing its\n      // window must not re-offer the same key within this request (the\n      // adapter refuses already-tried keys); the next request picks it up.\n      // The model rides along so model-routing rules pick the next account\n      // for the same model.\n      const resolved = await pool.resolveKey(\n        model === undefined ? { exclude: rejectedKey } : { exclude: rejectedKey, model },\n      )\n      // Normalize like the initial resolution does: the pool keys its state\n      // by the resolved key, so the adapter must send (and report back) the\n      // same normalized form or the marks would miss.\n      return resolved === undefined\n        ? undefined\n        : assertUsableApiKey(resolved.key, 'llm-commandcode', resolved.slot.ref ?? `${resolved.slot.label} (config.apiKey)`)\n    },\n    // The durable attachment service carries image bytes referenced by\n    // ImageBlock; resolved lazily only when a request actually has images.\n    resolveAttachments: () => {\n      const attachments = ctx.get('attachments')\n      return attachments === undefined ? undefined : attachments\n    },\n  })\n  // The Models page card: a configurable provider with a settings address.\n  // settingsPath [] means the whole `llm-commandcode` section configures it.\n  ctx.llm.registerConfigurableProviders([\n    { provider: PROVIDER, displayName: 'Command Code', settingsNs: NS, settingsPath: [] },\n  ])\n  // The live route: this is what makes models requestable under `commandcode`.\n  ctx.llm.registerAdapter([PROVIDER], adapter)\n\n  // Per-account usage for the /commandcode dashboard and the settings\n  // page's account card: every pool account (configured or not) gets one\n  // entry, each fetched with its own key so plan/credit facts never mix.\n  const usageReports = async (): Promise<CommandCodeAccountsReport> => {\n    // describeAccounts (not deduped) so two slots sharing one credential are\n    // both reported as configured; the active badge follows the deduped\n    // serving selection.\n    const described = await pool.describeAccounts()\n    const byId = new Map(described.map((account) => [account.slot.id, account]))\n    const active = selectActiveAccount(await pool.resolvedAccounts(), preferredId())\n    const entries = await Promise.all(slots().map(async (slot) => {\n      const account = byId.get(slot.id)\n      let report: CommandCodeUsageReport\n      if (account === undefined) {\n        report = { failures: [] }\n      } else {\n        try {\n          report = await adapter.getUsage(account.key)\n        } catch (error: unknown) {\n          report = { failures: [error instanceof Error ? error.message : String(error)] }\n        }\n      }\n      const state = account?.state\n      // The mark mirrors servability: a usable account (never marked, or a\n      // cooldown whose reset passed) shows no mark; a cooldown without a\n      // known reset still shows \"rate-limit\" (it is not serving).\n      const usable = accountUsable(state)\n      return {\n        id: slot.id,\n        label: slot.label,\n        configured: account !== undefined,\n        active: account !== undefined && active?.slot.id === slot.id,\n        mark: usable ? '' : state?.kind === 'disabled' ? 'invalid-credential' : 'rate-limit',\n        cooldownUntil: !usable && state?.kind === 'cooldown' ? state.until : 0,\n        report,\n      }\n    }))\n    return { accounts: entries }\n  }\n\n  // The /commandcode usage command rides the optional `commands` service: a\n  // child fiber injects it, so it registers whenever the profile mounts\n  // dsh-commands and the fiber simply never activates when it does not.\n  // The command runs Host-side and has no access to the client's locale\n  // service, so its language is resolved here from `Config.lang` (explicit\n  // override) and the launching shell's `LC_ALL`/`LANG` (inferred default);\n  // resolved per invocation so a settings change reaches the next command\n  // run without a restart.\n  const commandLocale = (): LocaleId => pickCommandLocale(current().lang)\n  ctx.inject(['commands'], (commandCtx) => {\n    applyCommands(commandCtx, { adapter, reports: usageReports, getLocale: commandLocale })\n  })\n\n  // The settings page's account card: getUsage exposed to the browser through\n  // the Typert Gateway (`commandcode/report`). Rides the optional `typert`\n  // registry service, so profiles without the web stack never activate it.\n  // The same service also exposes the browser-login flow: the Host binds a\n  // loopback callback server (the official `command-code login` dance) and\n  // stores the delivered key through the credentials seam under the same\n  // reference the default slot resolves — no restart, no settings document.\n  const loginFlow = new CommandCodeLoginFlow({\n    apiBase: () => options().apiBase,\n    storeKey: async ({ apiKey }: CommandCodeLoginCredentials): Promise<void> => {\n      const ref = credentialRef(current().apiKeyEnv ?? DEFAULT_API_KEY_ENV)\n      const credentials = ctx.get('credentials')\n      if (credentials === undefined) {\n        throw new Error('the credentials service is unavailable in this profile; paste the key manually')\n      }\n      await credentials.set(ref, apiKey)\n    },\n  })\n  ctx.effect(() => () => loginFlow.dispose(), 'dsh-commandcode-provider: login flow')\n  // The full model catalog for the settings page's model editors (the\n  // routing-rule editor and the visible-models filter): served Host-side\n  // from the adapter's cached/fetched catalog (sorted for picking), so the\n  // browser never calls the Command Code API directly. Unfiltered, so an\n  // editor never loses its own options — e.g. a rule can route a GOAT-only\n  // model while the picker (plan-filtered + allowlisted) hides it. Each\n  // entry carries its plan-tier key so the editors can group under tier\n  // headings without importing the Host's capability snapshot.\n  const catalogForEditors = async (): Promise<CommandCodeCatalog> => {\n    const models = await adapter.listModels(PROVIDER, { unfiltered: true })\n    return {\n      models: models.map((model) => {\n        const tier = KNOWN_PLANS[model.id]\n        return {\n          id: model.id,\n          name: model.name.replace(/\\s*\\(CC\\)$/, ''),\n          ...(tier === undefined ? {} : { tier }),\n        }\n      }),\n    }\n  }\n  applyUsageRemote(ctx, { adapter, reports: usageReports, login: loginFlow, listModels: catalogForEditors })\n\n  // Web search over the Command Code Provider API, exposed through the web\n  // capability seam (`ctx.web`). Rides the optional `web` service: a child\n  // fiber injects it, so the provider registers whenever the profile mounts\n  // the web stack and the fiber never activates when it does not (profiles\n  // without web remain an LLM-provider-only plugin). It reuses the SAME\n  // credential chain as the model adapter (pool.resolveKey → env → auth file)\n  // and the same apiBase, so DSH's model-facing web_search tool needs no\n  // separate key or endpoint config — a Command Code key works as-is.\n  //\n  // Whether the `commandcode` provider WINS over the shipped `deepseek-official`\n  // (or a sibling search plugin's pin, e.g. modsearch) is controlled by\n  // `Config.webSearch` (default on). The web seam has no public runtime\n  // selector, so the plugin writes its private `searchProviderId` field (read\n  // per call) via `applyCommandCodeSearchSelection`. A settings change lands\n  // on the next search without a restart. See src/web-search.ts for why this\n  // runtime write is safe and what it depends on.\n  //\n  // The tracked selection remembers whichever backend was displaced, so\n  // turning the toggle off hands the selection back to it (issue #26) — the\n  // disable path never forces the factory default. Disposing the fiber (the\n  // plugin unloads) restores it the same way: without that, the stale\n  // `commandcode` pin would outlive its unregistered provider and every\n  // search would fail with WEB_PROVIDER_CONFIGURED_MISSING.\n  const searchSelection = commandCodeSearchSelection()\n  const applySearchSelection = (enabled: boolean): void => {\n    if (webRuntime !== undefined) {\n      applyCommandCodeSearchSelection(webRuntime, searchSelection, enabled)\n    }\n  }\n  let webRuntime: WebRuntime | undefined\n  ctx.inject(['web'], (webCtx) => {\n    webRuntime = webCtx.web\n    webCtx.web.registerSearchProvider(new CommandCodeSearchProvider({\n      resolveKey: async () => {\n        const resolved = await pool.resolveKey()\n        return resolved === undefined ? undefined : resolved.key\n      },\n      apiBase: () => options().apiBase,\n    }))\n    // Apply the selection at boot too, so a profile WITHOUT the manual\n    // `searchProvider: commandcode` cordis patch still routes web search to\n    // Command Code once this plugin loads (default `webSearch` on).\n    applySearchSelection(current().webSearch ?? true)\n    // The fiber's disposer restores the displaced backend the same way the\n    // toggle-off path does (`webCtx.effect` registers the inner function as\n    // the fiber's teardown; a bare `return` from the inject callback would\n    // not). Without this, the stale `commandcode` pin would outlive its\n    // unregistered provider and every search would fail with\n    // WEB_PROVIDER_CONFIGURED_MISSING.\n    webCtx.effect(() => () => {\n      webRuntime = undefined\n      applyCommandCodeSearchSelection(webCtx.web, searchSelection, false)\n    }, 'dsh-commandcode-provider: web search selection')\n  })\n\n  // The terminal front door (dsh-TUI) settings page. dsh-TUI owns its own\n  // settings screen and only asks plugins to DECLARE what is editable, so\n  // without this a TUI-only user has no way to enter the API key — the web\n  // Models page is the only other surface that writes it, and dsh-TUI's\n  // `/provider` wizard manages its own `llm-pi-ai` routes exclusively\n  // (issue #28). The seam is an optional service, exactly like `commands`\n  // and `web`: on a profile without dsh-TUI the fiber never activates, and\n  // the plugin stays a plain LLM-provider bundle. The API-key field is a\n  // secret field, so the literal goes to the credentials seam and never into\n  // a settings document.\n  let refreshTuiSettings: (() => void) | undefined\n  ctx.inject(['tuiSettingsSections'], (tuiCtx) => {\n    refreshTuiSettings = applyCommandCodeTuiSettings(tuiCtx, {\n      ns: NS,\n      // Read per registration, so a `Config.apiKeyEnv` change re-targets the\n      // key field instead of leaving it writing to the previous reference.\n      apiKeyRef: () => current().apiKeyEnv ?? DEFAULT_API_KEY_ENV,\n      // The account slots behind the active-account selector. The section is\n      // re-registered when this list changes (the refresh call below), since\n      // the host renders a fixed option list per declaration.\n      accountSlots: () => slots().map((slot) => ({ id: slot.id, label: slot.label })),\n      // The model allowlist is read LIVE on every toggle: a checkbox judges\n      // its inherited state against the current document, not against\n      // whatever the declaration happened to be registered with. The override\n      // map is read here too, so an id this build's catalog does not place\n      // still gets a row of its own.\n      visibleModels: () => options().visibleModels ?? [],\n      modelVisibility: () => options().modelVisibility,\n    })\n    tuiCtx.effect(() => () => {\n      refreshTuiSettings = undefined\n    }, 'dsh-commandcode-provider: tui settings handle')\n  })\n\n  // Settings became an optional service in dsh 0.1.2. Register the section\n  // through its provider when present; profiles without settings continue to\n  // use the composition entry captured by `current` above.\n  ctx.inject(['settings'], (settingsCtx) => {\n    settingsCtx.settings.installSection(ctx, NS, Config, config, {\n      setSource: (source) => {\n        current = source\n      },\n      // Re-apply the web search selection on every settings change so the\n      // `webSearch` toggle reaches the web seam's next search without a\n      // restart. The tracked state remembers the displaced backend (issue\n      // #26), so flipping the toggle is a handoff, not an overwrite. The\n      // adapter's own facts are resolved per request, so nothing else needs\n      // registration-level action here.\n      //\n      // The dsh-TUI section is refreshed from the same hook: its key field\n      // follows `apiKeyEnv` and its account selector follows `accounts`, and\n      // both are frozen into the declaration the host renders. The refresh is\n      // a no-op unless one of those facts actually moved, so ordinary writes\n      // (the key itself, the model filters) never churn the screen.\n      onChange: () => {\n        applySearchSelection(current().webSearch ?? true)\n        refreshTuiSettings?.()\n      },\n    })\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,MAAa,qBAAqB;;AAoGlC,SAAS,WAAW,IAAoB;CACtC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,eAAe;AACrC;;;;;;;AAQA,SAAgB,cAAc,OAAqD;CACjF,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI,MAAM,SAAS,YAAY,OAAO,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,MAAM;CAC7E,OAAO;AACT;;;;;;;AAQA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,SAAS,SAAS,QAAQ,YAAY,cAAc,QAAQ,KAAK,CAAC;CACxE,IAAI,gBAAgB,KAAA,GAAW;EAC7B,MAAM,YAAY,OAAO,MAAM,YAAY,QAAQ,KAAK,OAAO,WAAW;EAC1E,IAAI,cAAc,KAAA,GAAW,OAAO;CACtC;CACA,OAAO,OAAO;AAChB;;;;;AAMA,SAAgB,eACd,OACA,OACyC;CACzC,IAAI,UAAU,MAAM,UAAU,KAAA,KAAa,MAAM,WAAW,GAAG,OAAO,KAAA;CACtE,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,OAAO,SAAS,KAAK,GAAG,OAAO;AAG5C;;;;;;;AAQA,SAAgB,sBACd,UACA,OACA,OAC6B;CAC7B,MAAM,OAAO,eAAe,OAAO,KAAK;CACxC,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;CAC/B,OAAO,SAAS,MAAM,YAAY,QAAQ,KAAK,OAAO,KAAK,WAAW,cAAc,QAAQ,KAAK,CAAC;AACpG;;;;;;AAOA,IAAa,yBAAb,MAAoC;CAGL;;CAD7B,yBAA0B,IAAI,IAAqC;CACnE,YAAY,MAAmD;EAAlC,KAAA,OAAA;CAAmC;;;;;;CAOhE,MAAM,mBAA+C;EACnD,MAAM,MAAyB,CAAC;EAChC,MAAM,uBAAO,IAAI,IAAY;EAC7B,KAAK,MAAM,QAAQ,KAAK,KAAK,MAAM,GAAG;GACpC,MAAM,MAAM,MAAM,KAAK,eAAe,IAAI;GAC1C,IAAI,QAAQ,KAAA,KAAa,KAAK,IAAI,GAAG,GAAG;GACxC,KAAK,IAAI,GAAG;GACZ,IAAI,KAAK;IAAE;IAAM;IAAK,OAAO,KAAK,OAAO,IAAI,GAAG;GAAE,CAAC;EACrD;EACA,OAAO;CACT;;;;;;;CAQA,MAAM,mBAA+C;EACnD,MAAM,MAAyB,CAAC;EAChC,KAAK,MAAM,QAAQ,KAAK,KAAK,MAAM,GAAG;GACpC,MAAM,MAAM,MAAM,KAAK,eAAe,IAAI;GAC1C,IAAI,QAAQ,KAAA,GAAW;GACvB,IAAI,KAAK;IAAE;IAAM;IAAK,OAAO,KAAK,OAAO,IAAI,GAAG;GAAE,CAAC;EACrD;EACA,OAAO;CACT;;;;;;;;;;;;;;;;;;CAmBA,MAAM,WAAW,SAAoH;EACnI,MAAM,WAAW,MAAM,KAAK,iBAAiB;EAC7C,IAAI,SAAS,WAAW,GACtB;EAEF,MAAM,SAAS,sBAAsB,UAAU,SAAS,SAAS,IAAI,KAAK,KAAK,oBAAoB,CAAC;EACpG,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,KAAK,MAAM;EACjD,MAAM,YAAY,KAAK,KAAK,cAAc;EAC1C,MAAM,SAAS,oBAAoB,UAAU,SAAS;EACtD,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,KAAK,MAAM;EAMjD,MAAM,QAAQ,IAAI,SAAS,IAAI,OAAO,YAAY;GAChD,IAAI,QAAQ,OAAO,SAAS,YAAY;GACxC,IAAI,SAAS,YAAY,KAAA,KAAa,QAAQ,QAAQ,QAAQ,SAAS;GACvE,IAAI;GACJ,IAAI;IACF,QAAQ,MAAM,KAAK,KAAK,YAAY,QAAQ,GAAG;GACjD,QAAQ;IACN;GACF;GACA,IAAI,UAAU,KAAA,GAAW;GACzB,IAAI,CAAC,MAAM,UACT,KAAK,OAAO,OAAO,QAAQ,GAAG;QAE9B,KAAK,OAAO,IAAI,QAAQ,KAAK;IAC3B,MAAM;IACN,QAAQ,QAAQ,OAAO,UAAU;IACjC,OAAO,MAAM;GACf,CAAC;EAEL,CAAC,CAAC;EAMF,MAAM,SAAS,MAAM,KAAK,iBAAiB;EAC3C,MAAM,UAAU,oBAAoB,QAAQ,SAAS;EACrD,IAAI,YAAY,KAAA,GAAW,OAAO,KAAK,KAAK,OAAO;EAGnD,IADiB,OAAO,QAAQ,YAAY,QAAQ,OAAO,SAAS,UACzD,CAAC,CAAC,WAAW,OAAO,QAI7B,MAAM,IAAI,SACR,2DAA2D,OAAO,OAAO,qGAE5D,OAAO,OAAO,4EAE3B,oBACF;EAEF,MAAM,SAAS,OACZ,KAAK,YAAY,QAAQ,KAAK,CAAC,CAC/B,QAAQ,UAA4C,UAAU,KAAA,KAAa,MAAM,SAAS,cAAc,MAAM,QAAQ,CAAC,CAAC,CACxH,KAAK,UAAU,MAAM,KAAK;EAC7B,MAAM,WAAW,OAAO,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI;EAQ3D,MAAM,OAAO,WAAW,IAAI,KAAK,IAAI,KAAM,WAAW,KAAK,IAAI,CAAC,IAAI;EACpE,MAAM,IAAI,SACR,wBAAwB,OAAO,OAAO,+DACjC,WAAW,IAAI,mCAAmC,WAAW,QAAQ,MAAM,MAC5E,iFACU,OAAO,OAAO,4BACvB,WAAW,IAAI,aAAa,WAAW,QAAQ,MAAM,MACtD,6BACJ,cACA,OAAO,KAAK,QAAA,MAA6B,EAAE,sBAAsB,KAAK,IAAI,KAAA,CAC5E;CACF;;;;;;;CAQA,aAAa,QAAgB,WAAmC;EAC9D,IAAI,cAAc,sBAChB,KAAK,OAAO,IAAI,QAAQ;GAAE,MAAM;GAAY,QAAQ;GAAyB,OAAO;EAAE,CAAC;OAEvF,KAAK,OAAO,IAAI,QAAQ;GAAE,MAAM;GAAW,QAAQ;GAAsB,OAAO;EAAE,CAAC;CAEvF;;;;;;;;;;;;;;;CAgBA,MAAc,eAAe,MAA2D;EACtF,IAAI,KAAK,YAAY,KAAA,GAAW;GAC9B,MAAM,UAAU,qBAAqB,KAAK,OAAO;GACjD,IAAI,YAAY,KAAA,GAAW,OAAO;EACpC;EACA,IAAI,KAAK,QAAQ,KAAA,GAAW;GAC1B,MAAM,MAAM,MAAM,KAAK,KAAK,WAAW,KAAK,GAAG;GAC/C,IAAI,QAAQ,KAAA,GAAW;IACrB,MAAM,WAAW,qBAAqB,GAAG;IACzC,IAAI,aAAa,KAAA,GAAW,OAAO;GACrC;EACF;EACA,IAAI,KAAK,eAAe;GACtB,MAAM,WAAW,KAAK,KAAK,YAAY;GACvC,IAAI,aAAa,KAAA,GAAW;IAC1B,MAAM,UAAU,qBAAqB,QAAQ;IAC7C,IAAI,YAAY,KAAA,GAAW,OAAO;GACpC;EACF;CAEF;;CAGA,KAAa,SAAyE;EACpF,OAAO;GAAE,KAAK,QAAQ;GAAK,MAAM,QAAQ;EAAK;CAChD;AACF;;;;;;;AAQA,SAAS,qBAAqB,OAAmC;CAC/D,MAAM,UAAU,MAAM,KAAK;CAC3B,OAAO,YAAY,KAAK,KAAA,IAAY;AACtC;;;;;;;;;;;;;;;;;;;;;;;;AClYA,MAAa,gBAA6D;CAiCxE,oBAAoB;EAAC;EAAO;EAAU;CAAO;CAC7C,yBAAyB;EAAC;EAAO;EAAU;CAAO;CAClD,oBAAoB;EAAC;EAAO;EAAU;CAAO;CAC7C,sBAAsB;EAAC;EAAO;EAAU;CAAO;CAC/C,oBAAoB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC5D,kBAAkB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC1D,mBAAmB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC3D,mBAAmB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC3D,iBAAiB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CACzD,qBAAqB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC7D,mBAAmB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAI3D,mCAAmC;EAAC;EAAO;EAAQ;CAAK;CAIxD,gCAAgC;EAAC;EAAO;EAAQ;CAAK;CACrD,8BAA8B,CAAC,QAAQ,KAAK;CAC5C,yCAAyC,CAAC,QAAQ,KAAK;CACvD,4BAA4B,CAAC,QAAQ,KAAK;CAC1C,gCAAgC;EAAC;EAAO;EAAU;CAAM;CACxD,2BAA2B;EAAC;EAAO;EAAU;CAAM;CACnD,gCAAgC;EAAC;EAAO;EAAU;CAAM;CACxD,2BAA2B;EAAC;EAAO;EAAU;CAAM;CACnD,2BAA2B;EAAC;EAAO;EAAU;CAAM;CACnD,iBAAiB;EAAC;EAAO;EAAU;EAAQ;CAAO;CAClD,WAAW;EAAC;EAAO;EAAU;EAAQ;CAAO;CAC5C,gBAAgB;EAAC;EAAO;EAAU;CAAM;CACxC,WAAW;EAAC;EAAO;EAAU;EAAQ;CAAO;CAC5C,gBAAgB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CACxD,eAAe;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CACvD,iBAAiB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAIzD,sBAAsB;EAAC;EAAO;EAAQ;CAAK;CAG3C,2BAA2B;EAAC;EAAO;EAAU;CAAM;CACnD,qBAAqB,CAAC,QAAQ,OAAO;CACrC,uBAAuB;EAAC;EAAO;EAAU;CAAM;CAC/C,gBAAgB;EAAC;EAAO;EAAU;CAAM;CACxC,gBAAgB;EAAC;EAAO;EAAU;EAAQ;CAAO;CACjD,sBAAsB;EAAC;EAAO;EAAQ;CAAK;CAC3C,mBAAmB,CAAC,QAAQ,KAAK;CACjC,mBAAmB;EAAC;EAAO;EAAQ;CAAK;CAIxC,uBAAuB;EAAC;EAAO;EAAU;EAAQ;CAAO;CACxD,uBAAuB;EAAC;EAAO;EAAU;EAAQ;CAAO;CACxD,mCAAmC;EAAC;EAAO;EAAU;EAAQ;CAAO;CAGpE,uBAAuB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC/D,mCAAmC;EAAC;EAAO;EAAU;EAAQ;CAAO;CAEpE,eAAe;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CASvD,wBAAwB;EAAC;EAAO;EAAU;CAAM;AAClD;;;;;;;;;;;;;;;;AAiBA,MAAa,qCAA0C,IAAI,IAAI;CAC7D;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CACA;CACA;AACF,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCD,MAAa,wCAA6C,IAAI,IAAI;CAChE;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CAGA;AACF,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BD,MAAa,cAAgD;CAE3D,0BAA0B;CAC1B,0BAA0B;CAC1B,wBAAwB;CACxB,4BAA4B;CAC5B,qBAAqB;CACrB,sBAAsB;CACtB,oBAAoB;CACpB,qBAAqB;CACrB,oBAAoB;CACpB,sBAAsB;CACtB,oBAAoB;CAEpB,yBAAyB;CAGzB,mCAAmC;CAKnC,gCAAgC;CAChC,8BAA8B;CAC9B,yCAAyC;CACzC,4BAA4B;CAC5B,gBAAgB;CAGhB,4BAA4B;CAI5B,yCAAyC;CAGzC,mCAAmC;CACnC,mCAAmC;CAEnC,wBAAwB;CACxB,wBAAwB;CACxB,6BAA6B;CAC7B,uCAAuC;CACvC,sBAAsB;CACtB,qCAAqC;CACrC,8BAA8B;CAC9B,0BAA0B;CAC1B,0BAA0B;CAC1B,oBAAoB;CACpB,uBAAuB;CACvB,4BAA4B;CAC5B,kCAAkC;CAClC,gBAAgB;CAChB,oBAAoB;CACpB,wBAAwB;CACxB,sBAAsB;CACtB,iBAAiB;CACjB,mBAAmB;CACnB,mBAAmB;CACnB,wBAAwB;CACxB,mBAAmB;CAEnB,2BAA2B;CAG3B,2BAA2B;CAC3B,eAAe;CACf,uBAAuB;CAGvB,uBAAuB;CACvB,gBAAgB;CAEhB,6BAA6B;CAC7B,qBAAqB;CACrB,mBAAmB;CACnB,gCAAgC;CAChC,2BAA2B;CAC3B,gCAAgC;CAChC,2BAA2B;CAC3B,iBAAiB;CACjB,WAAW;CACX,gBAAgB;CAChB,WAAW;CACX,iBAAiB;CACjB,uBAAuB;CAEvB,oBAAoB;CACpB,kBAAkB;CAClB,mBAAmB;CACnB,mBAAmB;CACnB,iBAAiB;CAGjB,eAAe;CACf,qBAAqB;AACvB;;AAGA,MAAa,cAAgD;CAC3D,IAAI;CACJ,MAAM;CACN,KAAK;CACL,UAAU;CACV,KAAK;AACP;;;;;AAMA,MAAa,aAA+C;CAC1D,IAAI;CACJ,MAAM;CACN,KAAK;CACL,UAAU;CACV,KAAK;AACP;;;;;;;AAQA,SAAgB,YAAY,SAA0B;CACpD,OAAO,YAAY,QAAQ,EAAE,SAAS;AACxC;;;;;;AAOA,SAAgB,cACd,GACA,GACQ;CACR,MAAM,YAAY,OAAO,YAAY,EAAE,EAAE,CAAC,IAAI,OAAO,YAAY,EAAE,EAAE,CAAC;CACtE,IAAI,cAAc,GAAG,OAAO;CAC5B,MAAM,KAAK,WAAW,YAAY,EAAE,OAAO,OAAO,OAAO;CACzD,MAAM,KAAK,WAAW,YAAY,EAAE,OAAO,OAAO,OAAO;CACzD,IAAI,OAAO,IAAI,OAAO,KAAK;CAC3B,MAAM,WAAW,EAAE,KAAK,cAAc,EAAE,IAAI;CAC5C,IAAI,aAAa,GAAG,OAAO;CAC3B,OAAO,EAAE,GAAG,cAAc,EAAE,EAAE;AAChC;;;;;;;;;;;;;AAcA,MAAa,2BAAmH;CAC9H,iBAAiB;EAAE,MAAM;EAAM,gBAAgB;EAAI,YAAY;CAAE;CACjE,mBAAmB;EAAE,MAAM;EAAQ,gBAAgB;EAAI,YAAY;CAAE;CACrE,kBAAkB;EAAE,MAAM;EAAO,gBAAgB;EAAI,YAAY;CAAE;CACnE,qBAAqB;EAAE,MAAM;EAAO,gBAAgB;EAAI,YAAY;CAAE;CACtE,uBAAuB;EAAE,MAAM;EAAY,gBAAgB;EAAI,YAAY;CAAE;CAC7E,kBAAkB;EAAE,MAAM;EAAO,gBAAgB;EAAK,YAAY;CAAE;CACpE,oBAAoB;EAAE,MAAM;EAAS,gBAAgB;EAAK,YAAY;CAAE;CACxE,aAAa;EAAE,MAAM;EAAa,gBAAgB;EAAI,YAAY;CAAE;AACtE;;AAGA,MAAM,6BAA6B,OAAO,KAAK,wBAAwB,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM;;;;;;;;AAS3G,SAAgB,qBAAqB,QAA0F;CAC7H,MAAM,aAAa,OAAO,YAAY,CAAC,CAAC,QAAQ,MAAM,GAAG;CACzD,MAAM,SAAS,2BAA2B,MAAM,cAAc,WAAW,WAAW,SAAS,CAAC;CAC9F,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY,yBAAyB;AACrE;;;;;;;;AAyBA,SAAgB,mBAAmB,SAAiB,QAAuD;CACzG,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,OAAO,kBAAkB,GAAG,OAAO;CACvC,IAAI,OAAO,eAAe,KAAA,KAAa,CAAC,OAAO,SAAS,OAAO,UAAU,GAAG,OAAO;CACnF,MAAM,OAAO,YAAY;CACzB,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,MAAM,SAAS,WAAW;CAC1B,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,OAAO,UAAU,OAAO;AAC1B;AA2BA,MAAa,cAAmD;CAI9D,wBAAwB,EAAE,OAAO,UAAU;CAC3C,wBAAwB,EAAE,OAAO,UAAU;CAC3C,oBAAoB,EAAE,OAAO,UAAU;CAOvC,8BAA8B;EAAE,OAAO;EAAQ,MAAM;CAAK;CAK1D,4BAA4B;EAAE,OAAO;EAAQ,MAAM;CAAK;CAIxD,yCAAyC;EAAE,OAAO;EAAQ,MAAM;CAAK;AACvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,MAAa,qCAA0C,IAAI,IAAI;CAC7D;CACA;CACA;CAIA;AACF,CAAC;;;;;AAMD,MAAM,mBAA6D,CACjE,CAAC,GAAG,CAAC,GACL,CAAC,GAAG,EAAE,CACR;;;;;;;;AASA,SAAgB,iBACd,SACA,MAAc,KAAK,IAAI,GACU;CACjC,IAAI,CAAC,mBAAmB,IAAI,OAAO,GAAG,OAAO,KAAA;CAC7C,MAAM,KAAK,IAAI,KAAK,GAAG;CACvB,MAAM,MAAM,GAAG,UAAU;CACzB,IAAI,QAAQ,KAAK,QAAQ,GAAG,OAAO;CACnC,MAAM,OAAO,GAAG,YAAY;CAE5B,OADe,iBAAiB,MAAM,CAAC,OAAO,SAAS,QAAQ,SAAS,OAAO,GACnE,IAAI,SAAS;AAC3B;;;;;;;;AASA,SAAgB,iBACd,SACA,MAAc,KAAK,IAAI,GACH;CACpB,MAAM,QAAQ,iBAAiB,SAAS,GAAG;CAC3C,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,OAAO,UAAU,SAAS,SAAS;AACrC;;;;;AAUA,SAAgB,UAAU,SAAqC;CAC7D,MAAM,OAAO,YAAY;CACzB,OAAO,SAAS,KAAA,IAAY,KAAA,IAAY,YAAY;AACtD;;;;;;;;AASA,SAAgB,UAAU,SAAiB,MAAc,KAAK,IAAI,GAAuB;CACvF,MAAM,OAAO,YAAY;CACzB,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;CAC/B,IAAI,KAAK,cAAc,KAAA,KAAa,OAAO,KAAK,MAAM,KAAK,SAAS,GAAG,OAAO,KAAA;CAC9E,OAAO,KAAK;AACd;;;;;;AAOA,SAAgB,cAAc,eAAuD;CACnF,IAAI,kBAAkB,KAAA,KAAa,CAAC,OAAO,SAAS,aAAa,KAAK,iBAAiB,GACrF;CAEF,IAAI,iBAAiB,KAAW;EAC9B,MAAM,IAAI,gBAAgB;EAG1B,MAAM,UAAU,KAAK,MAAM,IAAI,EAAE,IAAI;EACrC,OAAO,GAAG,OAAO,UAAU,OAAO,IAAI,UAAU,QAAQ,QAAQ,CAAC,EAAE;CACrE;CACA,IAAI,gBAAgB,KAAO,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC;CAClE,OAAO,GAAG,KAAK,MAAM,gBAAgB,GAAK,EAAE;AAC9C;;;;;;;;AASA,SAAgB,sBACd,SACA,eACA,MAAc,KAAK,IAAI,GACf;CACR,MAAM,QAAkB,CAAC;CACzB,MAAM,OAAO,UAAU,OAAO;CAC9B,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,MAAM,OAAO,UAAU,SAAS,GAAG;CACnC,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,MAAM,OAAO,iBAAiB,SAAS,GAAG;CAC1C,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,IAAI,mBAAmB,IAAI,OAAO,GAAG,MAAM,KAAK,OAAO;CACvD,MAAM,MAAM,cAAc,aAAa;CACvC,IAAI,QAAQ,KAAA,GAAW,MAAM,KAAK,GAAG;CACrC,OAAO,MAAM,KAAK,KAAK;AACzB;;;;;;;;;;;;;;;;;;;;;;;;ACnpBA,MAAa,2BAA2B;AACxC,MAAa,mBAAmB;AAChC,MAAa,8BAA8B;AAC3C,MAAa,4BAA4B;AACzC,MAAa,oBAAoB;;AAEjC,MAAa,wBAAwB;;AAWrC,MAAM,iBAAiB;;AAGvB,MAAM,wBAAwB;;;;;AAM9B,MAAM,+CAAoD,IAAI,IAAI;CAAC;CAAU;CAAY;AAAU,CAAC;;AAEpG,MAAa,6BAA6B;;AAE1C,MAAa,iCAAiC;AAC9C,MAAM,sBAAsB;AAM5B,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAAoC;CACvD,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAEA,SAAS,YAAY,OAAoC;CACvD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;AAEA,SAAS,aAAa,OAAqC;CACzD,OAAO,OAAO,UAAU,YAAY,QAAQ,KAAA;AAC9C;;AAGA,SAAS,eAAe,OAAwB;CAC9C,MAAM,WAAW,YAAY,KAAK;CAClC,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,WAAW,YAAY,KAAK;CAClC,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,SAAS,KAAK,MAAM,QAAQ;CAClC,OAAO,OAAO,MAAM,MAAM,IAAI,IAAI;AACpC;;;;;;AAOA,MAAM,gCAAgC;CACpC;CACA;CACA;AACF;AAEA,SAAS,wBAAwB,SAA0B;CACzD,MAAM,QAAQ,QAAQ,YAAY;CAClC,OAAO,8BAA8B,MAAM,WAAW,MAAM,SAAS,MAAM,CAAC;AAC9E;AAEA,SAAS,cAAc,OAAyC;CAC9D,IAAI,SAAS,KAAK,GAAG,OAAO;CAC5B,IAAI,OAAO,UAAU,UACnB,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,KAAK;EACxC,IAAI,SAAS,MAAM,GAAG,OAAO;CAC/B,QAAQ,CAER;CAEF,OAAO,CAAC;AACV;;AAiBA,MAAM,6BAA6B;;;;;;AAOnC,SAAS,eAAe,MAAwC;CAC9D,OACE,SAAS,KAAK,UAAU,KACxB,SAAS,KAAK,iBAAiB,KAC/B,MAAM,QAAQ,KAAK,QAAQ,KAC3B,KAAK,yBAAyB,KAAA;AAElC;;AAGA,SAAS,cAAc,MAAyC;CAC9D,OAAO,MAAM,QAAQ,KAAK,QAAQ,IAAI,KAAK,SAAS,QAAQ,SAAyB,OAAO,SAAS,QAAQ,IAAI,CAAC;AACpH;;AAGA,SAAS,gBAAgB,MAA+B,KAAkD;CACxG,IAAI,CAAC,IAAI,WAAW,IAAI,GAAG,OAAO,KAAA;CAClC,IAAI,OAAgB;CACpB,KAAK,MAAM,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG;EAChD,MAAM,UAAU,WAAW,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,GAAG;EACjE,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO,KAAA;EAC5B,OAAO,KAAK;CACd;CACA,OAAO,SAAS,IAAI,IAAI,OAAO,KAAA;AACjC;;;;;;;;AASA,SAAS,wBACP,MACA,OACqC;CAGrC,IAAI,SAAS,4BAA4B,OAAO,KAAA;CAChD,MAAM,aAAsC,CAAC;CAC7C,MAAM,2BAAW,IAAI,IAAY;CACjC,MAAM,eAA2B,CAAC;CAClC,IAAI,YAAY;CAEhB,KAAK,MAAM,OAAO;EAAC;EAAS;EAAS;CAAO,GAAY;EACtD,MAAM,WAAW,KAAK;EACtB,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG;EAC9B,MAAM,iBAA4C,CAAC;EACnD,KAAK,MAAM,UAAU,UAAU;GAC7B,IAAI,CAAC,SAAS,MAAM,GAAG;GACvB,eAAe,KAAK,qBAAqB,QAAQ,QAAQ,CAAC,CAAC;EAC7D;EACA,IAAI,eAAe,WAAW,GAAG;EACjC,YAAY;EAGZ,MAAM,QAAQ,eAAe,IAAI,aAAa;EAC9C,IAAI,QAAQ,SAAS,KAAK,MAAM,QAAQ,MAAM,KAAK,GAAG,SAAS,IAAI,IAAI;OAClE,IAAI,MAAM,SAAS,GACtB,aAAa,KAAK,MAAM,EAAE,CAAE,QAAQ,SAAS,MAAM,OAAO,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC;EAE1F,KAAK,MAAM,UAAU,gBAAgB;GACnC,MAAM,mBAAmB,SAAS,OAAO,UAAU,IAAI,OAAO,aAAa,CAAC;GAC5E,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,gBAAgB,GAC1D,IAAI,EAAE,QAAQ,aAAa,WAAW,QAAQ;EAElD;CACF;CACA,IAAI,CAAC,WAAW,OAAO,KAAA;CAGvB,KAAK,MAAM,SAAS,cAAc,KAAK,MAAM,QAAQ,OAAO,SAAS,IAAI,IAAI;CAE7E,MAAM,SAAkC;EAAE,MAAM;EAAU;CAAW;CACrE,IAAI,SAAS,OAAO,GAAG,OAAO,WAAW,CAAC,GAAG,QAAQ;CAGrD,IAAI,KAAK,yBAAyB,KAAA,GAAW,OAAO,uBAAuB,KAAK;CAChF,KAAK,MAAM,OAAO,CAAC,eAAe,OAAO,GACvC,IAAI,KAAK,SAAS,KAAA,GAAW,OAAO,OAAO,KAAK;CAElD,OAAO;AACT;;;;;;;;;AAUA,SAAS,qBAAqB,YAAqB,QAAQ,GAA4B;CACrF,IAAI,CAAC,SAAS,UAAU,GAAG,OAAO;EAAE,MAAM;EAAU,YAAY,CAAC;EAAG,sBAAsB;CAAK;CAC/F,IAAI,WAAW,SAAS,UAAU,OAAO;CAGzC,IAAI,MAAM,QAAQ,WAAW,IAAI,KAAK,WAAW,KAAK,SAAS,QAAQ,GACrE,OAAO;EAAE,GAAG;EAAY,MAAM;CAAS;CAGzC,IAAI,WAAW,SAAS,KAAA,KAAa,WAAW,SAAS,MAAM;EAC7D,IAAI,OAAO,WAAW,SAAS,YAAY,QAAQ,4BAA4B;GAC7E,MAAM,SAAS,gBAAgB,YAAY,WAAW,IAAI;GAC1D,IAAI,WAAW,KAAA,GAAW;IACxB,MAAM,EAAE,MAAM,MAAM,GAAG,SAAS;IAChC,OAAO,qBAAqB;KAAE,GAAG;KAAQ,GAAG;IAAK,GAAG,QAAQ,CAAC;GAC/D;EACF;EACA,IAAI,eAAe,UAAU,GAAG,OAAO;GAAE,GAAG;GAAY,MAAM;EAAS;EACvE,MAAM,SAAS,wBAAwB,YAAY,KAAK;EACxD,IAAI,WAAW,KAAA,GAAW,OAAO;EAIjC,IAAI,OAAO,WAAW,SAAS,UAAU,OAAO;GAAE,GAAG;GAAY,MAAM;EAAS;CAClF;CAEA,OAAO;EAAE,MAAM;EAAU,YAAY,CAAC;EAAG,sBAAsB;CAAK;AACtE;AAEA,SAAgB,oBAAoB,UAA0B;CAY5D,OAXa,SACV,YAAY,CAAC,CACb,QAAQ,YAAY,EAAE,CAAC,CACvB,QAAQ,eAAe,GAAG,CAAC,CAO3B,QAAQ,kBAAkB,EACnB,KAAK;AACjB;AAEA,SAAS,qBAAqB,MAAmC;CAC/D,IAAI,UAAU,KAAK,KAAK;CACxB,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,QAAQ,GAAG,OAAO,KAAA;CAChF,IAAI,QAAQ,WAAW,OAAO,GAAG,UAAU,QAAQ,MAAM,CAAC,CAAC,CAAC,KAAK;CACjE,IAAI,CAAC,WAAW,YAAY,UAAU,OAAO,KAAA;CAC7C,IAAI;EACF,OAAO,KAAK,MAAM,OAAO;CAC3B,QAAQ;EACN;CACF;AACF;;AAWA,SAAS,2BAA2B,OAAoC;CACtE,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,OAAO,YAAY,MAAM,IAAI;CACnC,IAAI,SAAS,OAAO,OAAO,YAAY,MAAM,GAAG;CAChD,IAAI,SAAS,SAAS,OAAO,YAAY,MAAM,MAAM;CACrD,OAAO,YAAY,MAAM,GAAG,KAAK,YAAY,MAAM,MAAM;AAC3D;;AAGA,SAAgB,wBAA4C;CAC1D,MAAM,WAAW,KAAK,QAAQ,GAAG,gBAAgB,WAAW;CAC5D,IAAI;EACF,IAAI,CAAC,WAAW,QAAQ,GAAG,OAAO,KAAA;EAClC,MAAM,SAAkB,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;EAClE,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,KAAA;EAC9B,MAAM,SAAS,YAAY,OAAO,MAAM,KAAK,YAAY,OAAO,WAAW;EAC3E,IAAI,QAAQ,OAAO;EAInB,OAFE,2BAA2B,OAAO,WAAW,KAC7C,2BAA2B,OAAO,eAAe;CAErD,QAAQ,CAER;AAEF;AAaA,SAAS,qBAAqB,OAAoC;CAChE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,WAAW,UAAU,CAAC,MAAM,QAAQ,MAAM,IAAI,GAC1E,MAAM,IAAI,SAAS,iDAAiD,yBAAyB;CAE/F,MAAM,SAA6B,CAAC;CACpC,KAAK,MAAM,SAAS,MAAM,MAAM;EAC9B,IAAI,CAAC,SAAS,KAAK,GAAG;EACtB,MAAM,KAAK,YAAY,MAAM,EAAE;EAC/B,MAAM,OAAO,YAAY,MAAM,IAAI;EACnC,MAAM,gBAAgB,YAAY,MAAM,cAAc;EACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,iBAAiB,GAAG;EAC1D,OAAO,KAAK;GACV;GACA;GACA,eAAe;GACf,WAAW,KAAK,IAAI,eAAe,yBAAyB;EAC9D,CAAC;CACH;CACA,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,SAAS,gDAAgD,yBAAyB;CAE9F,OAAO;AACT;AAEA,eAAe,gBAAgB,WAAgD;CAC7E,MAAM,SAAkB,KAAK,MAAM,MAAM,SAAS,WAAW,OAAO,CAAC;CACrE,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,YAAY,uBAAuB,CAAC,MAAM,QAAQ,OAAO,MAAM,GAC7F,MAAM,IAAI,MAAM,0BAA0B,WAAW;CAEvD,OAAO,OAAO;AAChB;AAEA,eAAe,iBAAiB,WAAmB,QAA2C;CAC5F,MAAM,MAAM,QAAQ,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CACnD,MAAM,MAAM,GAAG,UAAU,GAAG,QAAQ,IAAI;CACxC,IAAI;EACF,MAAM,UAAU,KAAK,GAAG,KAAK,UAAU;GAAE,SAAS;GAAqB;EAAO,GAAG,MAAM,CAAC,EAAE,KAAK;GAC7F,UAAU;GACV,MAAM;EACR,CAAC;EACD,MAAM,OAAO,KAAK,SAAS;CAC7B,UAAU;EACR,MAAM,GAAG,KAAK,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CACtD;AACF;;;;;;;;AAoBA,SAAS,gBAAgB,UAGvB;CACA,MAAM,0BAAU,IAAI,IAAY;CAChC,MAAM,wBAAQ,IAAI,IAAoB;CACtC,MAAM,4BAAY,IAAI,IAAY;CAClC,KAAK,MAAM,WAAW,UACpB,KAAK,MAAM,SAAS,QAAQ,SAAS;EACnC,IAAI,QAAQ,SAAS,eAAe,MAAM,SAAS,aAAa;GAC9D,QAAQ,IAAI,MAAM,EAAE;GACpB,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI;EAChC;EACA,IAAI,MAAM,SAAS,eAAe,UAAU,IAAI,MAAM,UAAU;CAClE;CAEF,OAAO;EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,OAAO,UAAU,IAAI,EAAE,CAAC,CAAC;EAAG;CAAM;AAC/E;;;;;;;;;;;AAYA,MAAM,+BAA+B;;;;;;;AAQrC,SAAS,gBAAgB,QAAkD;CACzE,MAAM,uBAAO,IAAI,IAAoB;CACrC,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,MAAM,QACf,IAAI,GAAG,UAAU,8BAA8B;EAC7C,KAAK,IAAI,IAAI,EAAE;EACf,MAAM,IAAI,EAAE;CACd;CAEF,IAAI,MAAM;CACV,KAAK,MAAM,MAAM,QAAQ;EACvB,IAAI,KAAK,IAAI,EAAE,GAAG;EAClB,IAAI,QAAQ,MAAM;EAClB,OAAO,MAAM,IAAI,KAAK,GAAG,QAAQ,MAAM;EACvC,KAAK,IAAI,IAAI,KAAK;EAClB,MAAM,IAAI,KAAK;CACjB;CACA,OAAO;AACT;AAEA,SAAS,UAAU,OAA6B;CAC9C,OAAO,MAAM,SAAS,UAAU,MAAM,SAAS,cAAc,MAAM,OAAO;AAC5E;;;;;;;AAuBA,SAAS,gBAAgB,OAAwE;CAC/F,MAAM,SAAmB,CAAC;CAC1B,MAAM,SAA+B,CAAC;CACtC,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,QAAQ,WAA0C;EACtD,KAAK,MAAM,UAAU,QAAQ;GAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,aAAa;IACzD,IAAI,OAAO,MAAM,OAAO,KAAK,OAAO,IAAI;IACxC;GACF;GACA,IAAI,OAAO,SAAS,SAAS;IAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,WAAW,YAAY,GAAG;KAC7C,KAAK,IAAI,OAAO,WAAW,YAAY;KACvC,OAAO,KAAK,OAAO,UAAU;IAC/B;IACA;GACF;GACA,IAAI,OAAO,SAAS,eAAe,KAAK,OAAO,OAAO;EACxD;CACF;CACA,KAAK,MAAM,OAAO;CAClB,OAAO;EAAE,MAAM,OAAO,KAAK,IAAI;EAAG;CAAO;AAC3C;;;;;;;AAQA,SAAS,sBAAsB,OAAgC;CAC7D,OAAO,MAAM,SAAS,MAAM,OAAO,SAAS,IAAI,6CAA6C;AAC/F;;AAGA,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;AAqB/B,SAAS,oBAAoB,OAAwB,YAA4B;CAC/E,MAAM,OAAO,GAAG,uBAAuB,IAAI,WAAW;CACtD,MAAM,QAAQ,MAAM,OAAO;CAC3B,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,MAAM,aAAa,GAAG,MAAM,MAAM,GAAG,MAAM,OAAO;CAClD,IAAI,MAAM,SAAS,KAAK,MAAM,UAAU,KAAK,MAAM,KAAK,SAAS,UAAU,GACzE,OAAO;CAGT,OAAO,GAAG,KAAK,GADD,MAAM,OAAO,SAAS,IAAI,GAAG,MAAM,OAAO,OAAO,aAAa,KAClD;AAC5B;AAEA,SAAS,gBAAgB,SAA2B;CAClD,MAAM,SAAS,WACb,OAAO,MACJ,MAAM,EAAE,SAAS,WAAY,EAAE,SAAS,iBAAiB,MAAM,EAAE,OAAO,CAC3E;CACF,OAAO,MAAM,QAAQ,OAAO;AAC9B;;;;;;;AAQA,eAAe,mBACb,KACA,WAC0F;CAC1F,MAAM,OAAO,MAAM,UAAU,GAAG;CAChC,OAAO;EACL,MAAM;EACN,QAAQ;GACN,MAAM;GACN,YAAY,IAAI;GAChB,MAAM,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,QAAQ;EAC3C;CACF;AACF;AAEA,eAAe,aACb,UACA,WACoB;CACpB,MAAM,MAAiB,CAAC;CACxB,MAAM,EAAE,KAAK,QAAQ,OAAO,cAAc,gBAAgB,QAAQ;CAGlE,MAAM,UAAU,gBAAgB,MAAM;CAQtC,MAAM,gBAA2B,CAAC;CAClC,MAAM,2BAA2B;EAC/B,KAAK,MAAM,WAAW,eAAe,IAAI,KAAK,OAAO;EACrD,cAAc,SAAS;CACzB;CAEA,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,QAAQ,SAAS,UAAU;EAE/B,IAAI,QAAQ,SAAS,UAAU,QAAQ,OAAO,SAAS,QAAQ;GAC7D,mBAAmB;GACnB,MAAM,QAAmB,CAAC;GAC1B,KAAK,MAAM,SAAS,QAAQ,SAAS;IACnC,IAAI,MAAM,SAAS,QAAQ,MAAM,KAAK;KAAE,MAAM;KAAQ,MAAM,MAAM;IAAK,CAAC;IACxE,IAAI,MAAM,SAAS,SAAS;KAI1B,IAAI,CAAC,WACH,MAAM,IAAI,SACR,uDACA,qBACF;KAEF,MAAM,KAAK,MAAM,mBAAmB,MAAM,YAAY,SAAS,CAAC;IAClE;GACF;GAOA,IAAI,MAAM,WAAW,GAAG;GACxB,IAAI,KAAK;IAAE,MAAM;IAAQ,SAAS;GAAM,CAAC;GACzC;EACF;EAEA,IAAI,QAAQ,SAAS,aAAa;GAChC,mBAAmB;GACnB,MAAM,QAAmB,CAAC;GAC1B,KAAK,MAAM,SAAS,QAAQ,SAC1B,IAAI,MAAM,SAAS,QACjB,MAAM,KAAK;IAAE,MAAM;IAAQ,MAAM,MAAM;GAAK,CAAC;QACxC,IAAI,MAAM,SAAS,aASxB,MAAM,KAAK;IAAE,MAAM;IAAa,MAAM,MAAM;GAAK,CAAC;QAC7C,IAAI,MAAM,SAAS,eAAe,OAAO,IAAI,MAAM,EAAE,GAC1D,MAAM,KAAK;IACT,MAAM;IACN,YAAY,QAAQ,IAAI,MAAM,EAAE,KAAK,MAAM;IAC3C,UAAU,MAAM;IAChB,OAAO,cAAc,MAAM,SAAS;GACtC,CAAC;GAGL,IAAI,MAAM,SAAS,GAAG,IAAI,KAAK;IAAE,MAAM;IAAa,SAAS;GAAM,CAAC;GACpE;EACF;EAGA,IAAI,QAAQ,SAAS,UAAU,QAAQ,OAAO,SAAS,QAAQ;GAC7D,MAAM,QAAQ,QAAQ,QAAQ;GAC9B,IAAI,CAAC,SAAS,MAAM,SAAS,iBAAiB,CAAC,OAAO,IAAI,MAAM,UAAU,GAAG;GAC7E,MAAM,QAAQ,gBAAgB,KAAK;GAGnC,MAAM,iBAAiB,QAAQ,IAAI,MAAM,UAAU,KAAK,MAAM;GAC9D,IAAI,KAAK;IACP,MAAM;IACN,SAAS,CACP;KACE,MAAM;KACN,YAAY;KAIZ,UAAU,UAAU,IAAI,MAAM,UAAU,KAAK;KAC7C,QAAQ,MAAM,UACV;MAAE,MAAM;MAAc,OAAO,sBAAsB,KAAK;KAAE,IAC1D;MAAE,MAAM;MAAQ,OAAO,sBAAsB,KAAK;KAAE;IAC1D,CACF;GACF,CAAC;GAID,IAAI,MAAM,OAAO,SAAS,GAAG;IAC3B,IAAI,CAAC,WACH,MAAM,IAAI,SACR,uDACA,qBACF;IAEF,MAAM,UAAqB,CAAC;KAAE,MAAM;KAAQ,MAAM,oBAAoB,OAAO,cAAc;IAAE,CAAC;IAC9F,KAAK,MAAM,cAAc,MAAM,QAC7B,QAAQ,KAAK,MAAM,mBAAmB,YAAY,SAAS,CAAC;IAE9D,cAAc,KAAK;KAAE,MAAM;KAAQ,SAAS;IAAQ,CAAC;GACvD;EACF;CACF;CACA,mBAAmB;CACnB,OAAO;AACT;;;;;AAMA,eAAe,cACb,KACA,WAC4D;CAC5D,MAAM,OAAO,MAAM,UAAU,GAAG;CAChC,OAAO;EACL,MAAM;EACN,WAAW,EACT,KAAK,QAAQ,IAAI,UAAU,UAAU,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,QAAQ,IAC1E;CACF;AACF;;;;;;;;;;;AAYA,eAAe,iBACb,UACA,WACoB;CACpB,MAAM,MAAiB,CAAC;CACxB,MAAM,EAAE,KAAK,WAAW,gBAAgB,QAAQ;CAIhD,MAAM,UAAU,gBAAgB,MAAM;CAQtC,MAAM,gBAA2B,CAAC;CAClC,MAAM,2BAA2B;EAC/B,KAAK,MAAM,WAAW,eAAe,IAAI,KAAK,OAAO;EACrD,cAAc,SAAS;CACzB;CAEA,KAAK,MAAM,WAAW,UAAU;EAG9B,IAAI,QAAQ,SAAS,UAAU;EAE/B,IAAI,QAAQ,SAAS,UAAU,QAAQ,OAAO,SAAS,QAAQ;GAC7D,mBAAmB;GACnB,MAAM,QAAmB,CAAC;GAC1B,KAAK,MAAM,SAAS,QAAQ,SAAS;IACnC,IAAI,MAAM,SAAS,QAAQ,MAAM,KAAK;KAAE,MAAM;KAAQ,MAAM,MAAM;IAAK,CAAC;IACxE,IAAI,MAAM,SAAS,SAAS;KAC1B,IAAI,CAAC,WACH,MAAM,IAAI,SACR,uDACA,qBACF;KAEF,MAAM,KAAK,MAAM,cAAc,MAAM,YAAY,SAAS,CAAC;IAC7D;GACF;GAIA,IAAI,MAAM,WAAW,GAAG;GAExB,IAAI,CADa,MAAM,MAAM,SAAU,KAA2B,SAAS,WAC/D,KAAK,MAAM,WAAW,GAChC,IAAI,KAAK;IAAE,MAAM;IAAQ,SAAU,MAAM,EAAE,CAAsB;GAAK,CAAC;QAIvE,IAAI,KAAK;IAAE,MAAM;IAAQ,SAAS;GAAM,CAAC;GAE3C;EACF;EAEA,IAAI,QAAQ,SAAS,aAAa;GAChC,mBAAmB;GACnB,MAAM,OAAO,QAAQ,QAClB,QAAQ,UAA4D,MAAM,SAAS,MAAM,CAAC,CAC1F,KAAK,UAAU,MAAM,IAAI,CAAC,CAC1B,KAAK,EAAE;GACV,MAAM,YAAY,QAAQ,QACvB,QAAQ,UAAiE,MAAM,SAAS,WAAW,CAAC,CACpG,KAAK,UAAU,MAAM,IAAI,CAAC,CAC1B,KAAK,EAAE;GACV,MAAM,YAAY,QAAQ,QACvB,QAAQ,UAAiE,MAAM,SAAS,eAAe,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC,CAC5H,KAAK,WAAW;IACf,IAAI,QAAQ,IAAI,MAAM,EAAE,KAAK,MAAM;IACnC,MAAM;IACN,UAAU;KACR,MAAM,MAAM;KACZ,WAAW,MAAM;IACnB;GACF,EAAE;GAEJ,IAAI,SAAS,MAAM,cAAc,MAAM,UAAU,WAAW,GAAG;GAC/D,MAAM,YAAqC;IACzC,MAAM;IACN,SAAS,SAAS,KAAK,OAAO;GAChC;GAGA,IAAI,cAAc,IAAI,UAAU,oBAAoB;GACpD,IAAI,UAAU,SAAS,GAAG,UAAU,aAAa;GACjD,IAAI,KAAK,SAAS;GAClB;EACF;EAGA,IAAI,QAAQ,SAAS,UAAU,QAAQ,OAAO,SAAS,QAAQ;GAC7D,MAAM,QAAQ,QAAQ,QAAQ;GAC9B,IAAI,CAAC,SAAS,MAAM,SAAS,iBAAiB,CAAC,OAAO,IAAI,MAAM,UAAU,GAAG;GAC7E,MAAM,QAAQ,gBAAgB,KAAK;GAGnC,MAAM,iBAAiB,QAAQ,IAAI,MAAM,UAAU,KAAK,MAAM;GAC9D,IAAI,KAAK;IACP,MAAM;IACN,cAAc;IACd,SAAS,sBAAsB,KAAK;GACtC,CAAC;GAGD,IAAI,MAAM,OAAO,SAAS,GAAG;IAC3B,IAAI,CAAC,WACH,MAAM,IAAI,SACR,uDACA,qBACF;IAEF,MAAM,UAAqB,CAAC;KAAE,MAAM;KAAQ,MAAM,oBAAoB,OAAO,cAAc;IAAE,CAAC;IAC9F,KAAK,MAAM,cAAc,MAAM,QAC7B,QAAQ,KAAK,MAAM,cAAc,YAAY,SAAS,CAAC;IAEzD,cAAc,KAAK;KAAE,MAAM;KAAQ,SAAS;IAAQ,CAAC;GACvD;EACF;CACF;CACA,mBAAmB;CACnB,OAAO;AACT;;AA8IA,MAAM,uBAAuB;;;;;AAuB7B,SAAS,iBAAiB,OAA0E;CAIlG,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,OAAO;EACL,YAAY,YAAY,MAAM,UAAU,KAAK;EAC7C,WAAW,YAAY,MAAM,SAAS,KAAK;EAC3C,aAAa,YAAY,MAAM,WAAW,KAAK;EAC/C,gBAAgB,YAAY,MAAM,cAAc,KAAK;EACrD,aAAa,YAAY,MAAM,WAAW,KAAK;EAC/C,eAAe,YAAY,MAAM,aAAa,KAAK;EACnD,gBAAgB,YAAY,MAAM,cAAc,KAAK;EACrD,cAAc,YAAY,MAAM,YAAY,KAAK;EACjD,aAAa,YAAY,MAAM,WAAW,KAAK;CACjD;AACF;;AAGA,SAAS,iBAAiB,OAAgD;CACxE,MAAM,QAAQ,SAAS,KAAK,IAAI,QAAQ,KAAA;CACxC,OAAO;EACL,MAAM,YAAY,OAAO,IAAI,KAAK;EAClC,KAAK,YAAY,OAAO,GAAG,KAAK;EAChC,UAAU,OAAO,aAAa;EAC9B,SAAS,YAAY,OAAO,OAAO,KAAK;CAC1C;AACF;;;;;AAMA,SAAS,kBAAkB,SAA8E;CACvG,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,MAAM,cAAc,SAAS,QAAQ,OAAO,IAAI,QAAQ,UAAU,KAAA;CAClE,MAAM,eAAe,SAAS,QAAQ,YAAY,IAAI,QAAQ,eAAe,KAAA;CAC7E,MAAM,WAAW,iBAAiB,KAAA,KAAa,SAAS,aAAa,QAAQ,IAAI,aAAa,WAAW,KAAA;CACzG,MAAM,SAAS,iBAAiB,KAAA,KAAa,SAAS,aAAa,MAAM,IAAI,aAAa,SAAS,KAAA;CACnG,IAAI,gBAAgB,KAAA,KAAa,aAAa,KAAA,KAAa,WAAW,KAAA,GAAW,OAAO,KAAA;CACxF,OAAO;EACL,gBAAgB,YAAY,aAAa,cAAc,KAAK;EAC5D,kBAAkB,YAAY,aAAa,gBAAgB,KAAK;EAChE,aAAa,YAAY,aAAa,WAAW,KAAK;EACtD,UAAU,iBAAiB,QAAQ;EACnC,QAAQ,iBAAiB,MAAM;CACjC;AACF;;;;;;AAOA,SAAS,qBAAqB,QAG5B;CACA,MAAM,aAAa,WAAW,KAAA,KAAa,SAAS,OAAO,IAAI,IAAI,OAAO,OAAO,KAAA;CACjF,MAAM,UAAU,WAAW,KAAA,KAAa,SAAS,OAAO,GAAG,IAAI,OAAO,MAAM,KAAA;CAC5E,OAAO;EACL,SAAS,eAAe,KAAA,IAAY,KAAA,IAAY;GAC9C,IAAI,YAAY,WAAW,EAAE,KAAK;GAClC,MAAM,YAAY,WAAW,IAAI,KAAK;GACtC,UAAU,YAAY,WAAW,QAAQ,KAAK;EAChD;EACA,OAAO,YAAY,KAAA,IAAY,KAAA,IAAY,YAAY,QAAQ,EAAE;CACnE;AACF;;;;;;AAOA,SAAS,qBACP,UACA,gBAC8B;CAI9B,IAAI,SAAS,WAAW,sBAAsB,OAAO,KAAA;CACrD,MAAM,QAAQ,eAAe,QAAQ,WAA6B,WAAW,KAAA,CAAS;CACtF,IAAI,MAAM,WAAW,wBAAwB,MAAM,OAAO,SAAS,SAAS,GAAG,GAC7E,OAAO;CAET,IAAI,MAAM,WAAW,wBAAwB,MAAM,OAAO,SAAS,QAAQ,GAAG,GAC5E,OAAO;CAET,IAAI,MAAM,WAAW,GAAG,OAAO;AAEjC;;AAqBA,eAAe,aACb,SACA,YACA,OACkC;CAClC,OAAO;EACL,QAAQ;GACN,YAAY,WAAW;GACvB,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;GAC1C,aAAa,GAAG,QAAQ,SAAS,GAAG,QAAQ,KAAK,YAAY,QAAQ;GACrE,WAAW,CAAC;GACZ,WAAW;GACX,eAAe;GACf,YAAY;GACZ,WAAW;GACX,eAAe,CAAC;EAClB;EACA,QAAQ;EACR,OAAO;EACP,QAAQ;EACR,QAAQ;GACN,OAAO,QAAQ;GACf,UAAU,MAAM,aAAa,QAAQ,UAAU,MAAM,SAAS;GAC9D,QAAQ,QAAQ,SAAS,CAAC,EAAA,CAAG,KAAK,UAAU;IAC1C,MAAM;IACN,MAAM,KAAK;IACX,aAAa,KAAK;IAClB,cAAc,qBAAqB,KAAK,UAAU;GACpD,EAAE;GACF,QAAQ,MAAM;GACd,YAAY,MAAM;GAClB,aAAa,QAAQ,eAAe;GACpC,QAAQ;GACR,GAAI,MAAM,kBAAkB,EAAE,kBAAkB,MAAM,gBAAgB,IAAI,CAAC;EAC7E;EACA,UAAU,WAAW;CACvB;AACF;;AAGA,eAAe,gBACb,SACA,OACkC;CAClC,MAAM,iBAAiB,CACrB,GAAI,MAAM,aAAa,CAAC;EAAE,MAAM;EAAU,SAAS,MAAM;CAAW,CAAC,IAAI,CAAC,GAC1E,GAAI,MAAM,iBAAiB,QAAQ,UAAU,MAAM,SAAS,CAC9D;CACA,MAAM,eAAe,QAAQ,SAAS,CAAC,EAAA,CAAG,KAAK,UAAU;EACvD,MAAM;EACN,UAAU;GACR,MAAM,KAAK;GACX,aAAa,KAAK;GAClB,YAAY,qBAAqB,KAAK,UAAU;EAClD;CACF,EAAE;CACF,OAAO;EACL,OAAO,QAAQ;EACf,UAAU;EACV,GAAI,YAAY,SAAS,IAAI,EAAE,OAAO,YAAY,IAAI,CAAC;EACvD,YAAY,MAAM;EAClB,aAAa,QAAQ,eAAe;EACpC,QAAQ;EACR,GAAI,MAAM,kBAAkB,EAAE,kBAAkB,MAAM,gBAAgB,IAAI,CAAC;CAC7E;AACF;;;;;;;;;;AAuBA,eAAe,gBACb,MACA,KACA,UACA,MACmH;CACnH,MAAM,EAAE,SAAS,YAAY,cAAc;CAC3C,MAAM,eAAe,IAAI,gBAAgB;CACzC,IAAI,kBAAkB;CACtB,MAAM,WAAW,aAAa,QAC1B,GAAG,WAAW,QAAQ,mBACtB,GAAG,WAAW,QAAQ;CAC1B,MAAM,eAAe,iBAAiB;EACpC,kBAAkB;EAClB,aAAa,MACX,IAAI,aACF,+BAA+B,SAAS,0BAA0B,WAAW,iBAAiB,KAC9F,cACF,CACF;CACF,GAAG,WAAW,gBAAgB;CAC9B,MAAM,sBAAsB;EAC1B,aAAa,MAAM,QAAQ,QAAQ,MAAM;CAC3C;CACA,IAAI,QAAQ,QAAQ;EAClB,IAAI,QAAQ,OAAO,SACjB,cAAc;OAEd,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;CAE1E;CACA,MAAM,gBAAgB;EACpB,aAAa,YAAY;EACzB,IAAI,QAAQ,QACV,QAAQ,OAAO,oBAAoB,SAAS,aAAa;CAE7D;CAEA,IAAI;CACJ,MAAM,UAAU,aAAa,QACzB;EACE,gBAAgB;EAChB,eAAe,UAAU;EACzB,0BAA0B;EAC1B,qBAAqB;EACrB,kBAAkB,oBAAoB,WAAW,UAAU;EAC3D,oBAAoB;EACpB,aAAa;EACb,GAAG,mBAAmB;CACxB,IACA;EACE,gBAAgB;EAChB,eAAe,UAAU;EACzB,QAAQ;EAIR,GAAG,mBAAmB;CACxB;CACJ,IAAI;EACF,WAAW,MAAM,UAAU,UAAU;GACnC,QAAQ;GACR;GACA,MAAM,KAAK,UAAU,IAAI;GACzB,QAAQ,aAAa;EACvB,CAAC;EACD,aAAa,YAAY;CAC3B,SAAS,OAAgB;EACvB,QAAQ;EACR,IAAI,QAAQ,QAAQ,SAClB,MAAM;EAER,IAAI,mBAAoB,iBAAiB,gBAAgB,MAAM,SAAS,gBACtE,MAAM,IAAI,SACR,+BAA+B,SAAS,0BAA0B,WAAW,iBAAiB,MACvF,WAAW,KAAK,EAAA,wBACI,WAAW,iBAAiB,+BACvD,WACA,EAAE,OAAO,MAAM,CACjB;EAOF,MAAM,IAAI,SACR,+BAA+B,SAAS,WAAW,WAAW,KAAK,EAAA,qDAEnE,aACA,EAAE,OAAO,MAAM,CACjB;CACF;CAEA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,UAAU,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;EACpD,QAAQ;EACR,MAAM,eAAe,kBAAkB,SAAS,QAAQ,IAAI,aAAa,CAAC;EAE1E,OAAO,iBAAiB,KAAA,IACpB;GAAE,QAAQ,SAAS;GAAQ;EAAQ,IACnC;GAAE,QAAQ,SAAS;GAAQ;GAAS;EAAa;CACvD;CACA,OAAO;EAAE;EAAU;CAAQ;AAC7B;;AAmBA,SAAS,uBAAuC;CAC9C,OAAO;EACL,WAAW;EACX,WAAW;EACX,aAAa;EACb,gBAAgB;EAChB,kBAAkB;EAClB,YAAY;EACZ,iBAAiB,CAAC;CACpB;AACF;AAEA,UAAU,UAAU,KAA6C;CAC/D,IAAI,IAAI,YAAY,GAAG;CACvB,MAAM;EACJ,MAAM;EACN,OAAO,IAAI;EACX,OAAO;GAAE,MAAM;GAAQ,MAAM,IAAI;EAAY;CAC/C;CACA,IAAI,YAAY;CAChB,IAAI,cAAc;AACpB;AAEA,UAAU,eAAe,KAA6C;CACpE,IAAI,IAAI,iBAAiB,GAAG;CAC5B,MAAM;EACJ,MAAM;EACN,OAAO,IAAI;EACX,OAAO;GAAE,MAAM;GAAa,MAAM,IAAI;EAAiB;CACzD;CACA,IAAI,iBAAiB;CACrB,IAAI,mBAAmB;AACzB;AAEA,UAAU,oBAAoB,KAA6C;CACzE,KAAK,MAAM,QAAQ,IAAI,iBAAiB;EACtC,MAAM,KAAK,KAAK,MAAM,WAAW;EACjC,MAAM,OAAO,KAAK,QAAQ;EAC1B,MAAM,OAAO,KAAK,aAAa;EAC/B,MAAM,QAAQ,IAAI;EAClB,IAAI,aAAa;EACjB,MAAM;GAAE,MAAM;GAAe;GAAO,WAAW;EAAY;EAC3D,MAAM;GAAE,MAAM;GAAmB;GAAO,IAAI,WAAW,EAAE;GAAG;GAAM,gBAAgB;EAAK;EACvF,MAAM;GACJ,MAAM;GACN;GACA,OAAO;IAAE,MAAM;IAAa,IAAI,WAAW,EAAE;IAAG;IAAM,WAAW;GAAK;EACxE;CACF;CACA,IAAI,gBAAgB,SAAS;AAC/B;AAEA,IAAa,qBAAb,cAA+G,WAAW;CAmB3F;CAlB7B,UAAsC,CAAC;CACvC;CACA;CAOA,gCAAiC,IAAI,IAAyE;CAC9G,wCAAyC,IAAI,IAA2D;CAMxG,gCAAiC,IAAI,IAA6C;CAElF,YAAY,MAAkD;EAC5D,MAAM;EADqB,KAAA,OAAA;EAE3B,KAAK,YAAY,KAAK,aAAa;EACnC,KAAK,qBAAqB,KAAK;CACjC;;;;;;;;CASA,aAAsB,UAAmC;EACvD,OAAO;GAAE,IAAI;GAAU,MAAM;EAAe;CAC9C;;;;;;;;;;;;;;;;;;CAmBA,oBAA6B,WAAwC;EACnE,OAAO,mBACL;GACE,MAAM;GACN,YAAY;GACZ,gBAAgB;IAAC;IAAkB;IAAc;IAAU;IAAW;GAAW;GACjF,SAAS;IAAE,gBAAgB;IAAK,YAAY;IAAoB,aAAa;GAAI;EACnF,GACA,8BACF;CACF;;CAGA,MAAc,YAAY,QAAmD;EAC3E,MAAM,EAAE,SAAS,oBAAoB,KAAK,KAAK,QAAQ;EACvD,IAAI;GACF,MAAM,WAAW,MAAM,KAAK,UAAU,GAAG,QAAQ,sBAAsB;IACrE,SAAS;KAAE,QAAQ;KAAoB,GAAG,mBAAmB;IAAE;IAC/D,QAAQ,UAAU,YAAY,QAAA,GAAyB;GACzD,CAAC;GACD,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,4BAA4B,SAAS,QAAQ;GAE/D,KAAK,UAAU,qBAAqB,MAAM,SAAS,KAAK,CAAC;GACzD,MAAM,iBAAiB,iBAAiB,KAAK,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;EAC7E,SAAS,OAAO;GACd,IAAI,QAAQ,SAAS,MAAM;GAK3B,KAAK,UAAU,MAAM,gBAAgB,eAAe,CAAC,CAAC,YAAY,KAAK,OAAO;EAChF;EACA,OAAO,KAAK;CACd;CAEA,MAAe,WACb,UACA,MACkC;EAClC,MAAM,UAAU,MAAM,KAAK,YAAY;EACvC,MAAM,UAAU,UAAoC;GAClD,MAAM,SAAS,mBAAmB,IAAI,MAAM,EAAE;GAC9C,OAAO;IACL;IACA,IAAI,MAAM;IACV,MAAM,GAAG,MAAM,KAAK;IAGpB,aAAa,sBAAsB,MAAM,IAAI,MAAM,aAAa;IAChE,iBAAiB,SAAU,CAAC,QAAQ,OAAO,IAAe,CAAC,MAAM;GACnE;EACF;EAGA,IAAI,MAAM,eAAe,MAAM,OAAO,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,aAAa;EAM5E,MAAM,SAAS,KAAK,KAAK,QAAQ,CAAC,CAAC,uBAAuB,QACtD,KAAA,IACA,MAAM,KAAK,kBAAkB;EAEjC,MAAM,UAAU,KAAK,KAAK,QAAQ,CAAC,CAAC;EACpC,MAAM,QAAQ,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,IACrD,IAAI,IAAI,QAAQ,QAAQ,OAAO,OAAO,OAAO,YAAY,OAAO,EAAE,CAAC,IACnE,KAAA;EAMJ,MAAM,YAAY,KAAK,KAAK,QAAQ,CAAC,CAAC;EACtC,OAAO,QACJ,QAAQ,UAAU,mBAAmB,MAAM,IAAI,MAAM,CAAC,CAAC,CACvD,QAAQ,UAAU;GACjB,MAAM,WAAW,YAAY,MAAM;GACnC,IAAI,OAAO,aAAa,WAAW,OAAO;GAC1C,OAAO,UAAU,KAAA,KAAa,MAAM,IAAI,MAAM,EAAE;EAClD,CAAC,CAAC,CACD,IAAI,MAAM,CAAC,CAIX,KAAK,aAAa;CACvB;CAEA,MAAe,aACb,UACA,OACA,QAC+B;EAC/B,MAAM,QACJ,KAAK,QAAQ,MAAM,MAAM,EAAE,OAAO,KAAK,MACtC,MAAM,KAAK,YAAY,MAAM,EAAA,CAAG,MAAM,MAAM,EAAE,OAAO,KAAK;EAE7D,MAAM,UAAU,cAAc;EAC9B,MAAM,SAAS,mBAAmB,IAAI,KAAK;EAC3C,OAAO;GACL;GACA,IAAI;GACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS;GACrC,aAAa,sBAAsB,OAAO,OAAO,aAAa;GAC9D,iBAAiB,SAAU,CAAC,QAAQ,OAAO,IAAe,CAAC,MAAM;GACjE,GAAI,QACA;IACE,SAAS,EAAE,eAAe,MAAM,cAAc;IAC9C,kBAAkB,KAAK,IAAI,MAAM,WAAW,2BAA2B;GACzE,IACA,CAAC;GAGL,GAAI,UACA,EACE,WAAW,EACT,SAAS,QAAQ,KAAK,YAAY;IAChC,IAAI,kBAAkB,MAAM;IAC5B,MAAM;GACR,EAAE,EACJ,EACF,IACA,CAAC;EACP;CACF;;CAGA,MAAc,eAAe,QAAkD;EAC7E,MAAM,aAAa,KAAK,KAAK,QAAQ;EAErC,OAAO;GACL,eAAe,UAFL,UAAW,MAAM,KAAK,KAAK,cAAc,UAAU;GAG7D,0BAA0B;GAC1B,qBAAqB;GACrB,GAAG,mBAAmB;EACxB;CACF;;;;;;;;CASA,MAAc,kBACZ,KACA,SAC+D;EAC/D,MAAM,WAAW,MAAM,KAAK,UAAU,KAAK;GACzC;GAEA,QAAQ,YAAY,QAAQ,iBAAiB;EAC/C,CAAC;EACD,IAAI,CAAC,SAAS,IAAI,OAAO,EAAE,QAAQ,SAAS,OAAO;EACnD,MAAM,SAAkB,MAAM,SAAS,KAAK;EAC5C,OAAO;GAAE,QAAQ,SAAS;GAAQ,GAAI,SAAS,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI,CAAC;EAAG;CACpF;;;;;;CAOA,MAAc,oBAAmE;EAC/E,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,KAAK,KAAK,cAAc,KAAK,KAAK,QAAQ,CAAC;EAC5D,QAAQ;GACN;EACF;EACA,MAAM,SAAS,KAAK,cAAc,IAAI,MAAM;EAC5C,IAAI,WAAW,KAAA,KAAa,KAAK,IAAI,IAAI,OAAO,KAAA,KAA4B,OAAO,OAAO;EAC1F,MAAM,WAAW,KAAK,sBAAsB,IAAI,MAAM;EACtD,IAAI,aAAa,KAAA,GAAW,OAAO;EACnC,MAAM,WAAW,KAAK,mBAAmB,MAAM,CAAC,CAC7C,MAAM,UAAU;GACf,KAAK,cAAc,IAAI,QAAQ;IAAE;IAAO,IAAI,KAAK,IAAI;GAAE,CAAC;GACxD,OAAO;EACT,CAAC,CAAC,CACD,cAAc;GACb,KAAK,sBAAsB,OAAO,MAAM;EAC1C,CAAC;EACH,KAAK,sBAAsB,IAAI,QAAQ,QAAQ;EAC/C,OAAO;CACT;;;;;;;;;;CAWA,MAAc,mBAAmB,QAA+D;EAC9F,IAAI;GACF,MAAM,aAAa,KAAK,KAAK,QAAQ;GACrC,MAAM,UAAU,MAAM,KAAK,eAAe,MAAM;GAChD,MAAM,OAAO,WAAW;GAExB,MAAM,UAAU,OAAO,UACpB,MAAM,KAAK,kBAAkB,GAAG,OAAO,QAAQ,OAAO,EAAA,CAAG;GAC5D,MAAM,SAAS,MAAM,QAAQ,eAAe;GAC5C,MAAM,UAAU,UAAU,SAAS,OAAO,GAAG,IAAI,OAAO,MAAM,KAAA;GAC9D,MAAM,QAAQ,YAAY,KAAA,IAAY,KAAA,IAAY,YAAY,QAAQ,EAAE;GACxE,MAAM,CAAC,cAAc,WAAW,MAAM,QAAQ,IAAI,CAChD,QAAQ,UAAU,KAAA,IACd,iCACA,sCAAsC,mBAAmB,KAAK,GAAG,GACrE,QAAQ,wBAAwB,CAClC,CAAC;GACD,MAAM,UAAU,gBAAgB,SAAS,aAAa,IAAI,IAAI,aAAa,OAAO,KAAA;GAClF,MAAM,cAAc,WAAW,SAAS,QAAQ,OAAO,IAAI,QAAQ,UAAU,KAAA;GAC7E,IAAI,YAAY,KAAA,KAAa,gBAAgB,KAAA,GAAW,OAAO,KAAA;GAC/D,IAAI;GACJ,IAAI,YAAY,KAAA,GAAW;IACzB,MAAM,SAAS,YAAY,QAAQ,MAAM;IACzC,IAAI,WAAW,KAAA,KAAa,6BAA6B,IAAI,MAAM,GAAG,SAAS,YAAY,QAAQ,MAAM;GAC3G,OACE,SAAS,YAAY,aAAa,MAAM;GAE1C,OAAO;IACL,YAAY,WAAW,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM,CAAC,EAAE;IAC7E,kBAAkB,YAAY,aAAa,gBAAgB,KAAK,MAAM,YAAY,aAAa,WAAW,KAAK;GACjH;EACF,QAAQ;GACN;EACF;CACF;;CAGA,wBAAgC,QAAoC;EAClE,MAAM,MAAM,KAAK,cAAc,IAAI,MAAM;EACzC,IAAI,QAAQ,KAAA,KAAa,KAAK,IAAI,IAAI,IAAI,MAAA,KAA6B,OAAO,KAAA;EAC9E,OAAO,IAAI,OAAO;CACpB;;CAGA,qBAA6B,QAAqC;EAChE,MAAM,MAAM,KAAK,cAAc,IAAI,MAAM;EACzC,IAAI,QAAQ,KAAA,KAAa,KAAK,IAAI,IAAI,IAAI,MAAA,KAA6B,OAAO,KAAA;EAC9E,OAAO,IAAI;CACb;CAEA,iBAAyB,QAAgB,QAAuB;EAC9D,KAAK,cAAc,IAAI,QAAQ;GAAE;GAAQ,IAAI,KAAK,IAAI;EAAE,CAAC;CAC3D;;;;;;;CAQA,gBAAwB,QAAqC;EAC3D,MAAM,SAAS,KAAK,KAAK,QAAQ,CAAC,CAAC;EACnC,IAAI,WAAW,SAAS,WAAW,UAAU,OAAO;EACpD,MAAM,SAAS,KAAK,qBAAqB,MAAM;EAC/C,IAAI,WAAW,KAAA,GAAW,OAAO,SAAS,QAAQ;EAClD,IAAI,KAAK,wBAAwB,MAAM,MAAM,gBAAgB;GAC3D,KAAK,iBAAiB,QAAQ,IAAI;GAClC,OAAO;EACT;EACA,OAAO;CACT;;;;;;;;;;;CAaA,MAAM,SAAS,QAAkD;EAE/D,MAAM,OADa,KAAK,KAAK,QACP,CAAC,CAAC;EACxB,MAAM,UAAU,MAAM,KAAK,eAAe,MAAM;EAChD,MAAM,WAAqB,CAAC;EAG5B,MAAM,iBAA4C,CAAC;EAEnD,MAAM,UAAU,OAAO,SAA+D;GACpF,IAAI;IACF,MAAM,EAAE,QAAQ,WAAW,MAAM,KAAK,kBAAkB,GAAG,OAAO,QAAQ,OAAO;IACjF,IAAI,WAAW,KAAA,GAAW;KACxB,SAAS,KAAK,GAAG,KAAK,SAAS,QAAQ;KACvC,eAAe,KAAK,MAAM;KAC1B;IACF;IACA,OAAO;GACT,SAAS,OAAgB;IACvB,SAAS,KAAK,GAAG,KAAK,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;IAClF,eAAe,KAAK,KAAA,CAAS;IAC7B;GACF;EACF;EAEA,MAAM,SAAiC,EAAE,SAAS;EAMlD,MAAM,EAAE,SAAS,UAAU,qBAAqB,MAD3B,QAAQ,eAAe,CACU;EACtD,IAAI,YAAY,KAAA,GAAW,OAAO,UAAU;EAC5C,MAAM,CAAC,OAAO,SAAS,gBAAgB,MAAM,QAAQ,IAAI;GACvD,QAAQ,sBAAsB;GAC9B,QAAQ,wBAAwB;GAChC,QAAQ,UAAU,KAAA,IACd,iCACA,sCAAsC,mBAAmB,KAAK,GAAG;EACvE,CAAC;EAGD,MAAM,SAAS,iBAAiB,KAAK;EACrC,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ;EAGzC,MAAM,SAAS,kBAAkB,OAAO;EACxC,IAAI,WAAW,KAAA,GAAW,OAAO,UAAU;EAK3C,MAAM,UAAU,iBAAiB,KAAA,KAAa,SAAS,aAAa,IAAI,IAAI,aAAa,OAAO,KAAA;EAChG,MAAM,cAAc,YAAY,KAAA,KAAa,SAAS,QAAQ,OAAO,IAAI,QAAQ,UAAU,KAAA;EAC3F,MAAM,SAAS,YAAY,SAAS,MAAM,KAAK,YAAY,aAAa,MAAM;EAC9E,IAAI,YAAY,KAAA,KAAa,WAAW,KAAA,GAAW;GACjD,MAAM,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM;GAC3E,OAAO,OAAO;IACZ,QAAQ,UAAU;IAClB,MAAM,MAAM,QAAQ,UAAU;IAC9B,QAAQ,YAAY,SAAS,MAAM,KAAK;IACxC,gBAAgB,MAAM,kBAAkB;IACxC,kBAAkB,eAAe,SAAS,gBAAgB;GAC5D;EACF;EAEA,MAAM,UAAU,qBAAqB,UAAU,cAAc;EAC7D,IAAI,YAAY,KAAA,GAAW,OAAO,UAAU;EAE5C,OAAO;CACT;;;;;;;;;CAUA,MAAM,oBAAoB,QAA6E;EACrG,IAAI;GACF,MAAM,aAAa,KAAK,KAAK,QAAQ;GACrC,MAAM,WAAW,MAAM,KAAK,UAAU,GAAG,WAAW,QAAQ,yBAAyB;IACnF,SAAS,MAAM,KAAK,eAAe,MAAM;IACzC,QAAQ,YAAY,QAAQ,iBAAiB;GAC/C,CAAC;GACD,IAAI,CAAC,SAAS,IAAI,OAAO,KAAA;GACzB,MAAM,SAAkB,MAAM,SAAS,KAAK;GAC5C,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,KAAA;GAC9B,MAAM,eAAe,SAAS,OAAO,YAAY,IAAI,OAAO,eAAe,KAAA;GAC3E,MAAM,WAAW,gBAAgB,SAAS,aAAa,QAAQ,IAAI,aAAa,WAAW,KAAA;GAC3F,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;GACnC,OAAO;IAAE,UAAU,SAAS,aAAa;IAAM,SAAS,YAAY,SAAS,OAAO,KAAK;GAAE;EAC7F,QAAQ;GACN;EACF;CACF;CAEA,OAAO,OAAO,SAAsD;EAClE,IAAI,QAAQ,MAAM,QAGhB,MAAM,IAAI,SAAS,wDAAwD,oBAAoB;EAEjG,MAAM,YAAY,QAAQ,SAAS,KAAK,eAAe;EAIvD,IAAI;EACJ,IAAI,WAAW;GAMb,IAAI,CAAC,mBAAmB,IAAI,QAAQ,KAAK,GACvC,MAAM,IAAI,SACR,uBAAuB,QAAQ,MAAM,4FAErC,qBACF;GAIF,MAAM,cAAc,KAAK,qBAAqB;GAC9C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,SACR,oEACA,qBACF;GAEF,aAAa,QAAQ,YAAY,UAAU,GAAG,CAAC,CAAC,MAAM,WAAW,OAAO,IAAI;EAC9E;EAEA,MAAM,aAAa,KAAK,KAAK,QAAQ;EAGrC,IAAI,SAAS,MAAM,KAAK,KAAK,cAAc,YAAY,QAAQ,KAAK;EAIpE,MAAM,WAAW,KAAK,QAAQ,MAAM,MAAM,EAAE,OAAO,QAAQ,KAAK,CAAC,EAAE,aAAA;EAEnE,MAAM,YAAY,KAAK,IACrB,QAAQ,aAAa,UACrB,UACA,2BACF;EAEA,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,cAAc,QAAQ;EACxC,MAAM,kBACJ,UAAU,WAAW,SAAS,WAAW,SAAS,MAAM,IAAI,SAAS,KAAA;EAEvE,MAAM,aAAa,CACjB,QAAQ,UAAU,IAClB,GAAG,QAAQ,SACR,QAAQ,MAAM,EAAE,SAAS,QAAQ,CAAC,CAClC,KAAK,MAAM,EAAE,QAAQ,IAAI,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CACnE,CAAC,CACE,OAAO,OAAO,CAAC,CACf,KAAK,MAAM;EAId,IAAI,WAAgC,KAAK,gBAAgB,MAAM;EAC/D,MAAM,YAAY,OAAO,WACvB,WAAW,QACP,aAAa,SAAS,YAAY;GAAE;GAAW;GAAiB;GAAY;EAAU,CAAC,IACvF,gBAAgB,SAAS;GAAE;GAAW;GAAiB;GAAY;EAAU,CAAC;EACpF,IAAI,OAAgC,MAAM,UAAU,QAAQ;EAS5D,MAAM,wBAAQ,IAAI,IAAY;EAC9B,MAAM,cAAmC;GAAE;GAAS;GAAY,WAAW,KAAK;EAAU;EAC1F,IAAI;EACJ,SAAS;GACP,MAAM,IAAI,MAAM;GAChB,MAAM,UAAU,MAAM,gBAAgB,aAAa,QAAQ,UAAU,IAAI;GACzE,IAAI,cAAc,SAAS;IACzB,YAAY;IACZ;GACF;GAKA,IACE,aAAa,YACV,uBAAuB,QAAQ,QAAQ,QAAQ,OAAO,GACzD;IACA,WAAW;IACX,KAAK,iBAAiB,QAAQ,IAAI;IAClC,OAAO,MAAM,UAAU,KAAK;IAC5B;GACF;GACA,MAAM,SAAS,KAAK,KAAK;GACzB,KACG,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAC3C,WAAW,KAAA,KACX,QAAQ,QAAQ,YAAY,QAC5B,MAAM,OAAO,uBAChB;IACA,MAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,WAAW,MAAM,eAAe,sBAAsB,YAAY,QAAQ,KAAK;IACzH,IAAI,SAAS,KAAA,KAAa,CAAC,MAAM,IAAI,IAAI,GAAG;KAC1C,SAAS;KACT;IACF;GACF;GACA,MAAM,kBAAkB,QAAQ,QAAQ,QAAQ,SAAS,QAAQ,YAAY;EAC/E;EACA,IAAI,cAAc,KAAA,GAGhB,MAAM,IAAI,SAAS,yDAAyD,WAAW;EAEzF,MAAM,EAAE,UAAU,YAAY;EAC9B,IAAI,CAAC,SAAS,MAAM;GAClB,QAAQ;GACR,MAAM,IAAI,SAAS,8CAA8C,yBAAyB;EAC5F;EAGA,MAAM,SAAS,SAAS,KAAK,UAAU;EACvC,MAAM,UAAU,IAAI,YAAY;EAChC,IAAI,SAAS;EAUb,IAAI;EACJ,IAAI,YAAY;EAChB,MAAM,gBAAgB;GACpB,IAAI,cAAc,KAAA,GAAW,aAAa,SAAS;GACnD,YAAY,iBAAiB;IAC3B,YAAY;IACZ,OAAY,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;GAC5C,GAAG,WAAW,mBAAmB;EACnC;EACA,MAAM,kBAAkB;GACtB,IAAI,cAAc,KAAA,GAAW;IAC3B,aAAa,SAAS;IACtB,YAAY,KAAA;GACd;EACF;EAEA,MAAM,MAAM,qBAAqB;EACjC,MAAM,UAAU,UAAkC,YAAY,KAAK,UAAU,KAAK;EAClF,IAAI;GACF,IAAI,WAAW;GACf,SAAS;IACP,IAAI;IACJ,QAAQ;IACR,IAAI;KACF,OAAO,MAAM,OAAO,KAAK;IAC3B,SAAS,OAAgB;KAGvB,IAAI,QAAQ,QAAQ,SAAS,MAAM;KACnC,MAAM,IAAI,SACR,gCAAgC,WAAW,QAAQ,yBAAyB,WAAW,KAAK,EAAA,6CAE5F,aACA,EAAE,OAAO,MAAM,CACjB;IACF,UAAU;KACR,UAAU;IACZ;IACA,MAAM,EAAE,MAAM,UAAU;IACxB,IAAI,MAAM;KAIR,IAAI,WACF,MAAM,IAAI,SACR,gCAAgC,WAAW,QAAQ,gBAAgB,WAAW,oBAAoB,6EAErE,WAAW,oBAAoB,sCAC5D,SACF;KAEF,IAAI,OAAO,KAAK,GAId,KAAK,MAAM,SAAS,OAAO,qBAAqB,MAAM,CAAC,GAAG;MACxD,MAAM;MACN,IAAI,MAAM,SAAS,UAAU,WAAW;KAC1C;KAEF;IACF;IACA,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;IAChD,MAAM,QAAQ,OAAO,MAAM,IAAI;IAC/B,SAAS,MAAM,IAAI,KAAK;IACxB,KAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,SAAS,OAAO,qBAAqB,IAAI,CAAC;KAChD,KAAK,MAAM,SAAS,QAAQ;MAC1B,MAAM;MACN,IAAI,MAAM,SAAS,UAAU,WAAW;KAC1C;IACF;IACA,IAAI,UAAU;GAChB;GACA,IAAI,CAAC,UAAU;IAGb,OAAO,UAAU,GAAG;IACpB,OAAO,eAAe,GAAG;IACzB,IAAI,aAAa,UAAU,OAAO,oBAAoB,GAAG;IACzD,IAAI,CAAC,IAAI,YACP,MAAM,IAAI,SAAS,uEAAuE,gBAAgB;IAE5G,MAAM;KAAE,MAAM;KAAU,QAAQ,EAAE,MAAM,OAAO;IAAE;GACnD;EACF,UAAU;GACR,UAAU;GACV,QAAQ;GACR,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;GAC3C,OAAO,YAAY;EACrB;CACF;AACF;;;;;;;;;;;AAYA,SAAS,kBAAkB,QAAgB,SAAiB,cAAiC;CAC3F,IAAI;CACJ,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,OAAO;EAC1C,IAAI,SAAS,MAAM,KAAK,SAAS,OAAO,KAAK,GAC3C,eAAe,YAAY,OAAO,MAAM,IAAI;CAEhD,QAAQ,CAER;CACA,MAAM,SAAS,gBAAgB,QAAQ;CACvC,IAAI,WAAW,KAIb,OAAO,IAAI,SACT,+BAA+B,OAAO,wMAGtC,sBACA,EAAE,QAAQ,IAAI,CAChB;CAEF,OAAO,IAAI,SACT,0BAA0B,SAAS,WAAW,QAAQ,WAAW,KAAK,KAAK,OAAO,GAAG,IAAI,QAAQ,MAAM,GAAG,GAAG,KAC7G,WAAW,MAAM,eAAe,uBAChC;EACE;EACA,GAAI,iBAAiB,KAAA,KAAa,eAAe,KAAK,gBAAA,MAClD,EAAE,sBAAsB,aAAa,IACrC,CAAC;CACP,CACF;AACF;;;;;AAOA,SAAS,eAAe,KAAqB,OAA+B;CAC1E,MAAM,SAAwB,CAAC;CAC/B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAE7B,QAAQ,MAAM,MAAd;EACE,KAAK,cAAc;GACjB,OAAO,KAAK,GAAG,eAAe,GAAG,CAAC;GAClC,IAAI,IAAI,YAAY,GAAG;IACrB,IAAI,YAAY,IAAI;IACpB,OAAO,KAAK;KAAE,MAAM;KAAe,OAAO,IAAI;KAAW,WAAW;IAAO,CAAC;GAC9E;GACA,MAAM,QAAQ,YAAY,MAAM,IAAI,KAAK;GACzC,IAAI,eAAe;GACnB,IAAI,aAAa;GACjB,OAAO,KAAK;IAAE,MAAM;IAAc,OAAO,IAAI;IAAW,MAAM;GAAM,CAAC;GACrE;EACF;EACA,KAAK,mBAAmB;GACtB,OAAO,KAAK,GAAG,UAAU,GAAG,CAAC;GAC7B,IAAI,IAAI,iBAAiB,GAAG;IAC1B,IAAI,iBAAiB,IAAI;IACzB,OAAO,KAAK;KAAE,MAAM;KAAe,OAAO,IAAI;KAAgB,WAAW;IAAY,CAAC;GACxF;GACA,MAAM,QAAQ,YAAY,MAAM,IAAI,KAAK;GACzC,IAAI,oBAAoB;GACxB,OAAO,KAAK;IAAE,MAAM;IAAmB,OAAO,IAAI;IAAgB,MAAM;GAAM,CAAC;GAC/E;EACF;EACA,KAAK;GACH,OAAO,KAAK,GAAG,UAAU,GAAG,CAAC;GAC7B;EACF,KAAK;GACH,OAAO,KAAK,GAAG,eAAe,GAAG,CAAC;GAClC;EACF,KAAK,aAAa;GAChB,OAAO,KAAK,GAAG,UAAU,GAAG,GAAG,GAAG,eAAe,GAAG,CAAC;GACrD,MAAM,KAAK,YAAY,MAAM,UAAU,KAAK,WAAW;GACvD,MAAM,OAAO,YAAY,MAAM,QAAQ,KAAK;GAC5C,MAAM,OAAO,KAAK,UAAU,cAAc,MAAM,SAAS,MAAM,QAAQ,MAAM,SAAS,CAAC;GACvF,MAAM,QAAQ,IAAI;GAClB,IAAI,aAAa;GACjB,OAAO,KACL;IAAE,MAAM;IAAe;IAAO,WAAW;GAAY,GACrD;IAAE,MAAM;IAAmB;IAAO,IAAI,WAAW,EAAE;IAAG;IAAM,gBAAgB;GAAK,GACjF;IACE,MAAM;IACN;IACA,OAAO;KAAE,MAAM;KAAa,IAAI,WAAW,EAAE;KAAG;KAAM,WAAW;IAAK;GACxE,CACF;GACA;EACF;EACA,KAAK,UAAU;GACb,OAAO,KAAK,GAAG,UAAU,GAAG,GAAG,GAAG,eAAe,GAAG,CAAC;GACrD,MAAM,QAAQ,SAAS,MAAM,UAAU,IAAI,MAAM,aAAa,KAAA;GAC9D,IAAI,OAAO;IACT,MAAM,UAAU,SAAS,MAAM,iBAAiB,IAAI,MAAM,oBAAoB,KAAA;IAC9E,MAAM,aAAa,YAAY,MAAM,WAAW,KAAK;IACrD,MAAM,YAAY,YAAY,SAAS,eAAe,KAAK;IAC3D,MAAM,aAAa,YAAY,SAAS,gBAAgB,KAAK;IAE7D,MAAM,aAAyB;KAC7B,aACE,YAAY,SAAS,aAAa,KAAK,KAAK,IAAI,GAAG,aAAa,YAAY,UAAU;KACxF,cAAc,YAAY,MAAM,YAAY,KAAK;KACjD,iBAAiB;KACjB,kBAAkB;IACpB;IACA,OAAO,KAAK;KAAE,MAAM;KAAS,OAAO;IAAW,CAAC;GAClD;GACA,OAAO,KAAK;IAAE,MAAM;IAAU,QAAQ,gBAAgB,MAAM,YAAY;GAAE,CAAC;GAC3E;EACF;EACA,KAAK,SAAS;GAUZ,MAAM,MAAM,SAAS,MAAM,KAAK,IAAI,MAAM,QAAQ,KAAA;GAClD,MAAM,SAAS,SAAS,MAAM,KAAK,IAC9B,YAAY,MAAM,MAAM,OAAO,KAAK,KAAK,UAAU,MAAM,KAAK,IAC9D,YAAY,MAAM,KAAK,KAAK,YAAY,MAAM,OAAO,KAAK;GAC/D,MAAM,aAAa,MAAM,YAAY,IAAI,UAAU,IAAI,KAAA;GACvD,MAAM,cAAc,MAAM,aAAa,IAAI,WAAW,IAAI,KAAA;GAC1D,MAAM,kBAAkB,eAAe,KAAA,MAAc,eAAe,OAAO,cAAc;GACzF,MAAM,WAAW,wBAAwB,MAAM;GAG/C,IAAI,EAFc,gBAAgB,SAC5B,eAAe,KAAA,IAAY,kBAAmB,gBAAgB,SAAS,CAAC,YAE5E,MAAM,IAAI,SACR,8BAA8B,UAC9B,yBACA,eAAe,KAAA,IAAY,EAAE,QAAQ,WAAW,IAAI,KAAA,CACtD;GAEF,MAAM,IAAI,SACR,8BAA8B,UAC9B,UACA,eAAe,KAAA,IAAY,EAAE,QAAQ,WAAW,IAAI,KAAA,CACtD;EACF;CACF;CACA,OAAO;AACT;;;;;;AAOA,SAAS,kBAAkB,KAAqB,OAA+B;CAC7E,MAAM,SAAwB,CAAC;CAC/B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,MAAM,UAAU,MAAM;CACtB,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,GAAG;EAGnD,IAAI,MAAM,UAAU,KAAA,GAClB,OAAO,KAAK;GAAE,MAAM;GAAS,OAAO,eAAe,MAAM,KAAK;EAAE,CAAC;EAEnE,OAAO;CACT;CACA,MAAM,SAAS,SAAS,QAAQ,EAAE,IAAI,QAAQ,KAAK,CAAC;CACpD,MAAM,QAAQ,SAAS,OAAO,KAAK,IAAI,OAAO,QAAQ,CAAC;CAEvD,MAAM,iBAAiB,YAAY,MAAM,SAAS,KAAK,YAAY,MAAM,iBAAiB,KAAK;CAC/F,IAAI,mBAAmB,IAAI;EACzB,OAAO,KAAK,GAAG,UAAU,GAAG,CAAC;EAC7B,IAAI,IAAI,iBAAiB,GAAG;GAC1B,IAAI,iBAAiB,IAAI;GACzB,OAAO,KAAK;IAAE,MAAM;IAAe,OAAO,IAAI;IAAgB,WAAW;GAAY,CAAC;EACxF;EACA,IAAI,oBAAoB;EACxB,OAAO,KAAK;GAAE,MAAM;GAAmB,OAAO,IAAI;GAAgB,MAAM;EAAe,CAAC;CAC1F;CAEA,MAAM,eAAe,YAAY,MAAM,OAAO,KAAK;CACnD,IAAI,iBAAiB,IAAI;EACvB,OAAO,KAAK,GAAG,eAAe,GAAG,CAAC;EAClC,IAAI,IAAI,YAAY,GAAG;GACrB,IAAI,YAAY,IAAI;GACpB,OAAO,KAAK;IAAE,MAAM;IAAe,OAAO,IAAI;IAAW,WAAW;GAAO,CAAC;EAC9E;EACA,IAAI,eAAe;EACnB,IAAI,aAAa;EACjB,OAAO,KAAK;GAAE,MAAM;GAAc,OAAO,IAAI;GAAW,MAAM;EAAa,CAAC;CAC9E;CAEA,IAAI,MAAM,QAAQ,MAAM,UAAU,GAAG;EACnC,IAAI,aAAa;EACjB,KAAK,MAAM,WAAW,MAAM,YAAY;GACtC,IAAI,CAAC,SAAS,OAAO,GAAG;GACxB,MAAM,YAAY,YAAY,QAAQ,KAAK,KAAK;GAChD,IAAI,WAAW,IAAI,gBAAgB,MAAM,SAAS,KAAK,UAAU,SAAS;GAC1E,MAAM,KAAK,SAAS,QAAQ,QAAQ,IAAI,QAAQ,WAAW,KAAA;GAC3D,MAAM,KAAK,YAAY,QAAQ,EAAE;GACjC,MAAM,OAAO,OAAO,KAAA,IAAY,KAAA,IAAY,YAAY,GAAG,IAAI;GAC/D,MAAM,WAAW,OAAO,KAAA,IACpB,KAAA,IACC,YAAY,GAAG,SAAS,MAAM,GAAG,cAAc,KAAA,IAAY,KAAK,KAAK,UAAU,GAAG,SAAS;GAChG,IAAI,CAAC,UAAU;IACb,WAAW;KACT,OAAO;KACP,MAAM,QAAQ;KACd,WAAW,YAAY;IACzB;IACA,IAAI,OAAO,KAAA,GAAW,SAAS,KAAK;IACpC,IAAI,gBAAgB,KAAK,QAAQ;GACnC,OAAO;IACL,IAAI,OAAO,KAAA,KAAa,SAAS,OAAO,KAAA,GAAW,SAAS,KAAK;IACjE,IAAI,SAAS,KAAA,KAAa,SAAS,SAAS,IAAI,SAAS,OAAO;IAChE,IAAI,aAAa,KAAA,GAAW,SAAS,aAAa;GACpD;EACF;CACF;CAEA,IAAI,OAAO,kBAAkB,KAAA,KAAa,OAAO,kBAAkB,MAAM;EACvE,OAAO,KAAK,GAAG,UAAU,GAAG,GAAG,GAAG,eAAe,GAAG,GAAG,GAAG,oBAAoB,GAAG,CAAC;EAClF,IAAI,MAAM,UAAU,KAAA,GAClB,OAAO,KAAK;GAAE,MAAM;GAAS,OAAO,eAAe,MAAM,KAAK;EAAE,CAAC;EAEnE,OAAO,KAAK;GAAE,MAAM;GAAU,QAAQ,gBAAgB,OAAO,aAAa;EAAE,CAAC;CAC/E;CACA,OAAO;AACT;;AAGA,SAAS,YAAY,KAAqB,UAA+B,OAA+B;CACtG,OAAO,aAAa,WAAW,kBAAkB,KAAK,KAAK,IAAI,eAAe,KAAK,KAAK;AAC1F;;;;;;;;;AAWA,SAAS,kBAAkB,OAAkC,MAAM,KAAK,IAAI,GAAuB;CACjG,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM,OAAO,KAAA;CAClD,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,YAAY,IAAI,OAAO,KAAA;CAC3B,MAAM,UAAU,OAAO,OAAO;CAC9B,IAAI,OAAO,SAAS,OAAO,KAAK,WAAW,GAAG;EAC5C,MAAM,KAAK,UAAU;EACrB,OAAO,OAAO,SAAS,EAAE,IAAI,KAAK,MAAM,EAAE,IAAI,KAAA;CAChD;CACA,MAAM,OAAO,KAAK,MAAM,OAAO;CAC/B,IAAI,CAAC,OAAO,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,GAAG,OAAO,GAAG;AAExD;;;;;;;AAQA,SAAS,gBAAgB,QAA+B;CACtD,IAAI,WAAW,gBAAgB,WAAW,cAAc,OAAO,EAAE,MAAM,aAAa;CACpF,IACE,WAAW,YACX,WAAW,gBACX,WAAW,gBACX,WAAW,qBAEX,OAAO,EAAE,MAAM,aAAa;CAE9B,OAAO,EAAE,MAAM,OAAO;AACxB;;;;;;;AAQA,SAAS,uBAAuB,QAAgB,SAA0B;CACxE,IAAI,WAAW,KAAK,OAAO;CAC3B,MAAM,QAAQ,QAAQ,YAAY;CAClC,IAAI,MAAM,SAAS,kBAAkB,GAAG,OAAO;CAC/C,IAAI,MAAM,SAAS,SAAS,KAAK,MAAM,SAAS,YAAY,GAAG,OAAO;CACtE,IAAI,MAAM,SAAS,8BAA8B,GAAG,OAAO;CAC3D,IAAI,MAAM,SAAS,2BAA2B,GAAG,OAAO;CACxD,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,OAAO;EAC1C,IAAI,SAAS,MAAM,GAAG;GACpB,MAAM,QAAQ,SAAS,OAAO,KAAK,IAAI,OAAO,QAAQ;GAEtD,KADa,YAAY,MAAM,IAAI,KAAK,YAAY,MAAM,IAAI,EAAA,EACpD,YAAY,MAAM,oBAAoB,OAAO;GACvD,MAAM,UAAU,YAAY,MAAM,OAAO,KAAK;GAC9C,IAAI,QAAQ,YAAY,CAAC,CAAC,SAAS,SAAS,KAAK,QAAQ,YAAY,CAAC,CAAC,SAAS,YAAY,GAAG,OAAO;EACxG;CACF,QAAQ,CAER;CACA,OAAO;AACT;;AAGA,SAAS,eAAe,OAA4B;CAClD,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;CAC1C,MAAM,eAAe,YAAY,OAAO,aAAa,KAAK;CAC1D,MAAM,eAAe,YAAY,OAAO,iBAAiB,KAAK;CAC9D,MAAM,cAAc,YAAY,OAAO,YAAY;CACnD,MAAM,gBAAgB,SAAS,OAAO,qBAAqB,IAAI,OAAO,wBAAwB,KAAA;CAC9F,MAAM,YAAY,YAAY,eAAe,aAAa,KAAK;CAC/D,MAAM,aAAa,YAAY,eAAe,2BAA2B,KAAK;CAE9E,MAAM,kBAAkB,aADE,SAAS,OAAO,yBAAyB,IAAI,OAAO,4BAA4B,KAAA,EAAA,EACnD,gBAAgB;CACvE,MAAM,WAAuB;EAC3B,aAAa,KAAK,IAAI,GAAG,eAAe,YAAY,UAAU;EAC9D;EACA,iBAAiB;CACnB;CACA,IAAI,aAAa,GAAG,SAAS,mBAAmB;CAChD,IAAI,oBAAoB,KAAA,GAAW,SAAS,kBAAkB;CAC9D,IAAI,gBAAgB,KAAA,GAAW,SAAS,cAAc;CACtD,OAAO;AACT;;;AC11EA,MAAa,qBAA8E;CACzF,IAAI;EACF,OAAO;EACP,cAAc;EACd,kBAAkB;EAClB,aAAa;EACb,wBAAwB;EACxB,eAAe;EACf,gBAAgB;EAChB,cAAc;EACd,mBACE;EACF,2BACE;EACF,gBACE;EACF,UAAU;EACV,kBAAkB;EAClB,aAAa;EACb,cAAc;EACd,UAAU;EACV,YAAY;EACZ,eAAe;EACf,aAAa;EACb,SAAS;EACT,eAAe;EACf,cAAc;EACd,YAAY;EACZ,eAAe;EACf,iBAAiB;EACjB,aAAa;EACb,iBAAiB;EACjB,QAAQ;EACR,WAAW;EACX,WACE;CAEJ;CACA,IAAI;EACF,OAAO;EACP,cAAc;EACd,kBAAkB;EAClB,aAAa;EACb,wBAAwB;EACxB,eAAe;EACf,gBAAgB;EAChB,cAAc;EACd,mBACE;EACF,2BACE;EACF,gBACE;EACF,UAAU;EACV,kBAAkB;EAClB,aAAa;EACb,cAAc;EACd,UAAU;EACV,YAAY;EACZ,eAAe;EACf,aAAa;EACb,SAAS;EACT,eAAe;EACf,cAAc;EACd,YAAY;EACZ,eAAe;EACf,iBAAiB;EACjB,aAAa;EACb,iBAAiB;EACjB,QAAQ;EACR,WAAW;EACX,WACE;CAGJ;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,kBACd,UACA,MAAoD,QAAQ,KAClD;CACV,IAAI,aAAa,QAAQ,aAAa,MAAM,OAAO;CAGnD,MAFY,IAAI,UAAU,IAAI,QAAQ,GAAA,CACtB,YAAY,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,QACvC,MAAM,OAAO;CACzB,OAAO;AACT;;AAGA,SAAgB,YAAY,QAAkB,KAAoC;CAChF,OAAO,mBAAmB,OAAO,CAAC,QAAQ,mBAAmB,GAAG,QAAQ;AAC1E;;;;ACtGA,SAAS,MAAM,OAAuB;CACpC,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC5B;;AAGA,SAAS,WAAW,OAAuB;CACzC,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC5B;;AAGA,SAAS,cAAc,OAAuB;CAC5C,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;CACrD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;CACrD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;CACrD,OAAO,OAAO,KAAK;AACrB;;;;;;AAOA,SAAS,gBAAgB,OAAuB;CAC9C,OAAO,OAAO,OAAO,MAAM,QAAQ,CAAC,CAAC,CAAC;AACxC;;AAGA,SAAS,WAAW,IAAoB;CACtC,IAAI,MAAM,GAAG,OAAO;CACpB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,eAAe;AACrC;;;;;AAMA,SAAS,IAAI,MAAc,KAAqB;CAC9C,IAAI,OAAO,GAAG,OAAO;CACrB,MAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,OAAO,GAAG,CAAC;CACjD,MAAM,SAAS,KAAK,MAAM,QAAQ,EAAE;CACpC,OAAO,IAAI,OAAO,MAAM,IAAI,IAAI,OAAO,KAAK,MAAM;AACpD;;AAOA,SAAS,UAAU,OAAgC,QAA0B;CAC3E,IAAI,MAAM,SAAS,sBAAsB,OAAO,YAAY,QAAQ,wBAAwB;CAC5F,IAAI,MAAM,gBAAgB,GACxB,OAAO,YAAY,QAAQ,eAAe,CAAC,CAAC,QAAQ,UAAU,WAAW,MAAM,aAAa,CAAC;CAE/F,IAAI,MAAM,SAAS,cAAc,OAAO,YAAY,QAAQ,gBAAgB;CAC5E,OAAO;AACT;;AAGA,SAAS,aAAa,QAAgC,QAAkB,OAAwB;CAC9F,MAAM,QAAkB,CAAC;CACzB,MAAM,UAAU,OAAO,UAAU,KAAK,OAAO,QAAQ,YAAY,OAAO,QAAQ,KAAK,KAAK;CAE1F,MAAM,KACJ,SAAS,YAAY,QAAQ,OAAO,CAAC,CAAC,QAAQ,aAAa,OAAO,GAClE,EACF;CAIA,IAAI,OAAO,YAAY,eACrB,MAAM,KAAK,YAAY,QAAQ,mBAAmB,GAAG,EAAE;MAClD,IAAI,OAAO,YAAY,uBAC5B,MAAM,KAAK,YAAY,QAAQ,2BAA2B,GAAG,EAAE;MAC1D,IAAI,OAAO,YAAY,WAC5B,MAAM,KAAK,YAAY,QAAQ,gBAAgB,GAAG,EAAE;CAGtD,IAAI,OAAO,QAAQ,OAAO,KAAK,SAAS,IAAI;EAC1C,MAAM,IAAI,OAAO;EACjB,MAAM,SAAS,EAAE,WAAW,MAAM,EAAE,WAAW,WAAW,KAAK,EAAE,OAAO,KAAK;EAC7E,MAAM,SAAS,EAAE,mBAAmB,IAChC,YAAY,QAAQ,kBAAkB,CAAC,CAAC,QAAQ,UAAU,IAAI,KAAK,EAAE,gBAAgB,CAAC,CAAC,mBAAmB,CAAC,IAC3G;EACJ,MAAM,KAAK,YAAY,QAAQ,UAAU,CAAC,CACvC,QAAQ,UAAU,EAAE,IAAI,CAAC,CACzB,QAAQ,YAAY,MAAM,CAAC,CAC3B,QAAQ,YAAY,MAAM,GAAG,EAAE;CACpC;CAEA,IAAI,OAAO,OAAO;EAChB,MAAM,IAAI,OAAO;EACjB,MAAM,KACJ,YAAY,QAAQ,aAAa,GACjC,YAAY,QAAQ,cAAc,CAAC,CAChC,QAAQ,OAAO,OAAO,EAAE,cAAc,CAAC,CAAC,CACxC,QAAQ,OAAO,OAAO,EAAE,WAAW,CAAC,CAAC,CACrC,QAAQ,OAAO,gBAAgB,EAAE,WAAW,CAAC,GAChD,YAAY,QAAQ,UAAU,CAAC,CAC5B,QAAQ,WAAW,MAAM,EAAE,SAAS,CAAC,CAAC,CACtC,QAAQ,aAAa,WAAW,EAAE,YAAY,CAAC,GAClD,YAAY,QAAQ,YAAY,CAAC,CAC9B,QAAQ,QAAQ,cAAc,EAAE,aAAa,CAAC,CAAC,CAC/C,QAAQ,SAAS,cAAc,EAAE,cAAc,CAAC,GACnD,EACF;CACF;CAEA,IAAI,OAAO,SAAS;EAClB,MAAM,IAAI,OAAO;EACjB,MAAM,aAAa,EAAE,iBAAiB,IAClC,IAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAqB,IAAA,CAAK,QAAQ,CAAC,EAAE,KACnF;EACJ,MAAM,KACJ,YAAY,QAAQ,eAAe,GACnC,YAAY,QAAQ,aAAa,CAAC,CAC/B,QAAQ,aAAa,WAAW,EAAE,cAAc,CAAC,CAAC,CAClD,QAAQ,eAAe,WAAW,EAAE,gBAAgB,CAAC,CAAC,CACtD,QAAQ,UAAU,WAAW,EAAE,WAAW,CAAC,GAC9C,YAAY,QAAQ,SAAS,CAAC,CAC3B,QAAQ,SAAS,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAC9E,QAAQ,SAAS,UAAU,GAC9B,IACA,YAAY,QAAQ,eAAe,GACnC,YAAY,QAAQ,cAAc,CAAC,CAChC,QAAQ,UAAU,WAAW,EAAE,SAAS,IAAI,CAAC,CAAC,CAC9C,QAAQ,SAAS,WAAW,EAAE,SAAS,GAAG,CAAC,CAAC,CAC5C,QAAQ,UAAU,EAAE,SAAS,WAAW,YAAY,QAAQ,iBAAiB,IAAI,EAAE,GACtF,YAAY,QAAQ,eAAe,CAAC,CACjC,QAAQ,SAAS,IAAI,EAAE,SAAS,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CACtD,QAAQ,UAAU,WAAW,EAAE,SAAS,OAAO,CAAC,GACnD,YAAY,QAAQ,YAAY,CAAC,CAC9B,QAAQ,UAAU,WAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAC5C,QAAQ,SAAS,WAAW,EAAE,OAAO,GAAG,CAAC,CAAC,CAC1C,QAAQ,UAAU,EAAE,OAAO,WAAW,YAAY,QAAQ,iBAAiB,IAAI,EAAE,GACpF,YAAY,QAAQ,eAAe,CAAC,CACjC,QAAQ,SAAS,IAAI,EAAE,OAAO,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,CAClD,QAAQ,UAAU,WAAW,EAAE,OAAO,OAAO,CAAC,GACjD,EACF;CACF;CAEA,IAAI,OAAO,SAAS,SAAS,GAC3B,MAAM,KAAK,YAAY,QAAQ,iBAAiB,CAAC,CAAC,QAAQ,UAAU,OAAO,SAAS,KAAK,IAAI,CAAC,GAAG,EAAE;CAErG,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,SAAS,CAAC,OAAO,SAC9C,MAAM,KAAK,YAAY,QAAQ,QAAQ,GAAG,EAAE;CAG9C,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,QAAQ;AAClC;;AAGA,SAAgB,kBACd,MACmB;CACnB,MAAM,EAAE,YAAY;CACpB,OAAO;EACL,MAAM;EACN,aAAa;EACb,OAAO,EAAE,MAAM,WAAW;EAC1B,SAAS,YAAY;GACnB,MAAM,SAAmB,KAAK,YAAY,KAAK;GAC/C,IAAI;IACF,IAAI,KAAK,YAAY,KAAA,GAAW;KAC9B,MAAM,EAAE,aAAa,MAAM,KAAK,QAAQ;KASxC,OAAO;MAAE,MAAM;MAAW,MART,SAAS,KAAK,UAAU;OACvC,MAAM,SAAS,GAAG,MAAM,SAAS,YAAY,QAAQ,aAAa,IAAI,KAAK,UAAU,OAAO,MAAM;OAClG,MAAM,QAAQ,YAAY,QAAQ,cAAc,CAAC,CAC9C,QAAQ,WAAW,MAAM,KAAK,CAAC,CAC/B,QAAQ,YAAY,MAAM;OAC7B,IAAI,CAAC,MAAM,YAAY,OAAO,GAAG,MAAM,MAAM,YAAY,QAAQ,cAAc;OAC/E,OAAO,aAAa,MAAM,QAAQ,QAAQ,KAAK;MACjD,CACuC,CAAC,CAAC,KAAK,OAAO,YAAY,QAAQ,kBAAkB,EAAE,KAAK;KAAE;IACtG;IAEA,OAAO;KAAE,MAAM;KAAW,MAAM,aAAa,MADxB,QAAQ,SAAS,GACe,MAAM;IAAE;GAC/D,SAAS,OAAgB;IACvB,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IACrE,OAAO;KACL,MAAM;KACN,MAAM,YAAY,QAAQ,WAAW,CAAC,CAAC,QAAQ,aAAa,OAAO;IACrE;GACF;EACF;CACF;AACF;;AAGA,SAAgB,cACd,KACA,MACM;CACN,IAAI,SAAS,SAAS,kBAAkB,IAAI,CAAC;AAC/C;;;;ACrOA,MAAa,iBAAiB;;AAG9B,MAAa,iBAAiB;;AAG9B,MAAa,mBAAmB;;;;;;;;;;;;;AA4BhC,SAAgB,sBAAsB,QAAmC;CACvE,MAAM,UAAU,UAAyB;EACvC,MAAM,IAAI,UAAU,GAAG,OAAO,WAAW,OAAO;CAClD;CACA,MAAM,UAAU,OAAgB,UAC9B,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAC/D,QACA,OAAO,KAAK;CAClB,MAAM,eAAe,QAAiC,KAAa,UACjE,OAAO,OAAO,SAAS,WAAW,OAAO,OAAiB,OAAO,KAAK;CACxE,MAAM,eAAe,QAAiC,KAAa,UACjE,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,OAAO,IAAc,IACpE,OAAO,OACP,OAAO,KAAK;CAClB,MAAM,gBAAgB,QAAiC,KAAa,UAClE,OAAO,OAAO,SAAS,YAAY,OAAO,OAAkB,OAAO,KAAK;CAC1E,OAAO;EAAE;EAAQ;EAAQ;EAAa;EAAa;CAAa;AAClE;;;;;;;;AASA,SAAgB,qBACd,UACA,QACA,YACA,QACsB;CACtB,OAAO;EACL,IAAI,GAAG,eAAe,GAAG;EACzB,SAAS;EACT,WAAW;EACX;EACA,YAAY,EAAE,MAAM,SAAS;EAC7B,YAAY,CAAC;EACb,QAAQ;GACN,MAAM;GACN;GACA;EACF;CACF;AACF;;;;ACzCA,MAAa,uBAAuB;;AAGpC,MAAa,wBAAwB;;;;;AAMrC,MAAM,EAAE,QAAA,UAAQ,QAAA,UAAQ,aAAA,eAAa,aAAa,iBAChD,sBAAsB,4BAA4B;;AAGpD,SAAS,YAAY,OAAgB,OAAkF;CACrH,MAAM,SAASA,SAAO,OAAO,KAAK;CAClC,OAAO;EACL,MAAM,YAAY,QAAQ,QAAQ,GAAG,MAAM,MAAM;EACjD,KAAK,YAAY,QAAQ,OAAO,GAAG,MAAM,KAAK;EAC9C,UAAU,aAAa,QAAQ,YAAY,GAAG,MAAM,UAAU;EAC9D,SAAS,YAAY,QAAQ,WAAW,GAAG,MAAM,SAAS;CAC5D;AACF;;;;;;AAOA,SAAS,iBAAiB,OAAwC;CAChE,MAAM,SAASA,SAAO,OAAO,QAAQ;CACrC,MAAM,WAAW,OAAO;CACxB,IAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,MAAM,UAAU,OAAO,UAAU,QAAQ,GAAG,SAAO,UAAU;CACtG,MAAM,SAAiC,EAAY,SAAqB;CAExE,IAAI,OAAO,YAAY,KAAA,GAAW;EAChC,MAAM,UAAU,OAAO;EAIvB,IAAI,YAAY,iBAAiB,YAAY,yBAAyB,YAAY,WAChF,OAAO,UAAU;OAEjB,SAAO,SAAS;CAEpB;CAEA,IAAI,OAAO,YAAY,KAAA,GAAW;EAChC,MAAM,UAAUA,SAAO,OAAO,SAAS,SAAS;EAChD,OAAO,UAAU;GACf,IAAIC,cAAY,SAAS,MAAM,YAAY;GAC3C,MAAMA,cAAY,SAAS,QAAQ,cAAc;GACjD,UAAUA,cAAY,SAAS,YAAY,kBAAkB;EAC/D;CACF;CAEA,IAAI,OAAO,UAAU,KAAA,GAAW;EAC9B,MAAM,QAAQD,SAAO,OAAO,OAAO,OAAO;EAC1C,OAAO,QAAQ;GACb,YAAY,YAAY,OAAO,cAAc,kBAAkB;GAC/D,WAAW,YAAY,OAAO,aAAa,iBAAiB;GAC5D,aAAa,YAAY,OAAO,eAAe,mBAAmB;GAClE,gBAAgB,YAAY,OAAO,kBAAkB,sBAAsB;GAC3E,aAAa,YAAY,OAAO,eAAe,mBAAmB;GAClE,eAAe,YAAY,OAAO,iBAAiB,qBAAqB;GACxE,gBAAgB,YAAY,OAAO,kBAAkB,sBAAsB;GAC3E,cAAc,YAAY,OAAO,gBAAgB,oBAAoB;GACrE,aAAaC,cAAY,OAAO,eAAe,mBAAmB;EACpE;CACF;CAEA,IAAI,OAAO,YAAY,KAAA,GAAW;EAChC,MAAM,UAAUD,SAAO,OAAO,SAAS,SAAS;EAChD,OAAO,UAAU;GACf,gBAAgB,YAAY,SAAS,kBAAkB,wBAAwB;GAC/E,kBAAkB,YAAY,SAAS,oBAAoB,0BAA0B;GACrF,aAAa,YAAY,SAAS,eAAe,qBAAqB;GACtE,UAAU,YAAY,QAAQ,UAAU,kBAAkB;GAC1D,QAAQ,YAAY,QAAQ,QAAQ,gBAAgB;EACtD;CACF;CAEA,IAAI,OAAO,SAAS,KAAA,GAAW;EAC7B,MAAM,OAAOA,SAAO,OAAO,MAAM,MAAM;EACvC,MAAM,UAAU,KAAK;EACrB,IAAI,YAAY,SAAS,OAAO,YAAY,YAAY,CAAC,OAAO,SAAS,OAAO,IAAI,SAAO,qBAAqB;EAChH,OAAO,OAAO;GACZ,QAAQC,cAAY,MAAM,UAAU,aAAa;GACjD,MAAMA,cAAY,MAAM,QAAQ,WAAW;GAC3C,QAAQA,cAAY,MAAM,UAAU,aAAa;GACjD,gBAAgB;GAChB,kBAAkB,YAAY,MAAM,oBAAoB,uBAAuB;EACjF;CACF;CAEA,OAAO;AACT;;AAGA,SAAS,kBAAkB,OAAyC;CAClE,MAAM,SAASD,SAAO,OAAO,SAAS;CACtC,OAAO;EACL,IAAIC,cAAY,QAAQ,MAAM,YAAY;EAC1C,OAAOA,cAAY,QAAQ,SAAS,eAAe;EACnD,YAAY,aAAa,QAAQ,cAAc,oBAAoB;EACnE,QAAQ,aAAa,QAAQ,UAAU,gBAAgB;EACvD,MAAMA,cAAY,QAAQ,QAAQ,cAAc;EAChD,eAAe,YAAY,QAAQ,iBAAiB,uBAAuB;EAC3E,QAAQ,iBAAiB,OAAO,MAAM;CACxC;AACF;;AAGA,SAAS,oBAAoB,OAA2C;CAEtE,MAAM,WADSD,SAAO,OAAO,QACP,CAAC,CAAC;CACxB,IAAI,MAAM,QAAQ,QAAQ,GACxB,OAAO,EAAE,UAAU,SAAS,IAAI,iBAAiB,EAAE;CAErD,OAAOE,SAAO,UAAU;AAC1B;;;;;;AAOA,MAAa,oBAA6D,EACxE,OAAO,oBACT;;AAgBA,MAAa,0BAA0B;CACrC,SAAS;CACT,MAAM;CACN,SAAS,CAAC;CAKV,OAAO;EAAE,UAAU,CAAC;EAAG,QAAQ,CAAC;EAAG,SAAS,CAAC;CAAE;CAC/C,aAAa,CAjBb,qBACE,uBACA,UACA,GAAG,qBAAqB,6BACxB,iBAaY,CAAuB;AACvC;;AAkCA,MAAa,kBAAkB;;;;;;AAO/B,MAAM,EACJ,QAAQ,eACR,aAAa,kBACX,sBAAsB,4BAA4B;;AAGtD,SAAS,kBAAkB,OAAyC;CAClE,MAAM,SAAS,cAAc,OAAO,OAAO;CAC3C,MAAM,QAAiC;EACrC,IAAI,cAAc,QAAQ,MAAM,UAAU;EAC1C,MAAM,cAAc,QAAQ,QAAQ,YAAY;CAClD;CAGA,IAAI,OAAO,SAAS,KAAA,GAClB,MAAM,OAAO,cAAc,QAAQ,QAAQ,YAAY;CAEzD,OAAO;AACT;;AAGA,SAAS,aAAa,OAAoC;CAExD,MAAM,SADS,cAAc,OAAO,QAChB,CAAC,CAAC;CACtB,IAAI,MAAM,QAAQ,MAAM,GACtB,OAAO,EAAE,QAAQ,OAAO,IAAI,iBAAiB,EAAE;CAEjD,MAAM,IAAI,UAAU,2CAA2C;AACjE;;;;;AAWA,MAAa,oBACX,qBACE,iBACA,UACA,GAAG,qBAAqB,sBACxB,EAZF,OAAO,aAYL,CACF;;;;ACxOF,MAAa,uBAAuB;AACpC,MAAa,wBAAwB;AACrC,MAAa,wBAAwB;AAErC,MAAM,UAAoD;CACxD;CAAU;CAAW;CAAe;CAAW;CAAe;CAAa;AAC7E;;;AAIA,MAAM,EAAE,QAAQ,QAAQ,gBACtB,sBAAsB,2BAA2B;;;;;;AAOnD,SAAgB,iBAAiB,OAAwC;CACvE,MAAM,SAAS,OAAO,OAAO,QAAQ;CACrC,MAAM,QAAQ,OAAO;CAGrB,IAAI,UAAU,UAAU,UAAU,aAAa,UAAU,aAAa,UAAU,UAAU;EACxF,MAAM,SAAiC,EAAE,MAAM;EAC/C,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;EAE3D,IAAI,OAAO,aAAa,KAAA,GACtB,OAAO,WAAW,YAAY,QAAQ,YAAY,UAAU;EAE9D,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;EAE3D,IAAI,OAAO,WAAW,KAAA,GAAW;GAC/B,MAAM,SAAS,OAAO;GACtB,IAAI,OAAO,WAAW,YAAY,QAAQ,SAAS,MAAuC,GACxF,OAAO,SAAS;QAEhB,OAAO,QAAQ;EAEnB;EACA,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;EAE3D,OAAO;CACT;CACA,OAAO,OAAO,OAAO;AACvB;;AAGA,MAAa,oBAA0D,EACrE,OAAO,iBACT;;AAGA,SAAS,gBAAgB,UAAkB,QAAsC;CAC/E,OAAO,qBACL,UACA,QACA,GAAG,eAAe,0BAClB,iBACF;AACF;;AAGA,MAAa,oBAAqD;CAChE,gBAAgB,sBAAsB,YAAY;CAClD,gBAAgB,uBAAuB,aAAa;CACpD,gBAAgB,uBAAuB,aAAa;AACtD;;;;;;;;;;AC3CA,IAAa,0BAAb,cACU,oBAAoB;CAC5B;CAEA,YAAY,KAAc,MAA+B;EACvD,MAAM,KAAK,oBAAoB,EAAE,WAAW,cAAc,CAAC;EAC3D,KAAK,OAAO;CACd;;;;;;;;;CAUA,MAAM,SAA6C;EACjD,IAAI,KAAK,KAAK,YAAY,KAAA,GAAW,OAAO,KAAK,KAAK,QAAQ;EAE9D,OAAO,EACL,UAAU,CAAC;GACT,IAAI;GACJ,OAAO;GACP,YAAY;GACZ,QAAQ;GACR,MAAM;GACN,eAAe;GACf,QAAA,MATiB,KAAK,KAAK,QAAQ,SAAS;EAU9C,CAAC,EACH;CACF;;;;;;;;CASA,MAAM,SAAsC;EAC1C,OAAO,KAAK,KAAK,aAAa,KAAK,EAAE,QAAQ,CAAC,EAAE;CAClD;;;;;;;CAQA,MAAM,aAA8C;EAElD,OADc,KAAK,aACR,CAAC,CAAC,MAAM;CACrB;;CAGA,MAAM,cAA+C;EACnD,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,EAAE,OAAO,OAAO;CACtD;;CAGA,MAAM,cAA+C;EACnD,KAAK,KAAK,OAAO,OAAO;EACxB,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,EAAE,OAAO,OAAO;CACtD;CAEA,eAAwC;EACtC,MAAM,QAAQ,KAAK,KAAK;EACxB,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,kEAAkE;EAEpF,OAAO;CACT;AACF;;;;;;AAOA,SAAgB,iBACd,KACA,MACM;CACN,IAAI,OAAO,CAAC,QAAQ,IAAI,cAAc;EACpC,IAAI,wBAAwB,WAAW,IAAI;EAM3C,MAAM,aALW,UAAU,OAKC,SAAS;GACnC,GAAG;GACH,aAAa;IAAC,GAAG,wBAAwB;IAAa;IAAmB,GAAG;GAAiB;EAC/F,CAAC;EAGD,UAAU,mBAAmB,KAAK,WAAW,GAAG,wCAAwC;CAC1F,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACvJA,MAAa,mBAAmB;;AAGhC,MAAa,mBAAmB;;AAGhC,MAAa,0BAA0B;;AAGvC,MAAa,yBAAyB;;AAGtC,MAAa,wBAA2C;CACtD;CACA;CACA;AACF;;AAGA,MAAM,mBAAmB;;AAyCzB,SAAgB,oBAAoB,SAAsE;CACxG,MAAM,WAAW,oBAAoB,QAAQ,KAAK;CAClD,OAAO,GAAG,QAAQ,aAAa,iBAAiB,YAAY,mBAAmB,QAAQ,EAAE,SAAS,mBAAmB,QAAQ,KAAK;AACpI;;AAGA,SAAgB,qBAAqB,SAAyB;CAC5D,IAAI,2CAA2C,KAAK,OAAO,GAAG,OAAO;CACrE,IAAI,+BAA+B,KAAK,OAAO,GAAG,OAAO;CACzD,OAAO;AACT;;;;;;AAOA,eAAsB,sBACpB,WACA,SACA,QAC2B;CAC3B,IAAI;EACF,MAAM,WAAW,MAAM,UAAU,GAAG,QAAQ,gBAAgB;GAC1D,QAAQ;GACR,SAAS;IAAE,gBAAgB;IAAoB,eAAe,UAAU;GAAS;EACnF,CAAC;EACD,IAAI,SAAS,WAAW,KAAK,OAAO;GAAE,OAAO;GAAO,OAAO;EAAc;EACzE,IAAI,SAAS,IAAI,OAAO,EAAE,OAAO,KAAK;EACtC,OAAO;GAAE,OAAO;GAAO,OAAO;EAAe;CAC/C,QAAQ;EACN,OAAO;GAAE,OAAO;GAAO,OAAO;EAAgB;CAChD;AACF;;AAGA,SAAS,mBAAmB,MAAgC;CAC1D,OAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,QAAQC,eAAgB;EAC9B,MAAM,KAAK,eAAe,QAAQ,KAAK,CAAC;EACxC,MAAM,KAAK,mBAAmB,MAAM,YAAY,QAAQ,IAAI,CAAC,CAAC;EAC9D,MAAM,OAAO,MAAM,WAAW;CAChC,CAAC;AACH;;AAGA,SAAS,sBAAsB,OAAgF;CAC7G,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,SAAS;CACf,OAAO,OAAO,OAAO,WAAW,YAAY,OAAO,WAAW,MACzD,OAAO,OAAO,UAAU,YACxB,OAAO,OAAO,WAAW,YACzB,OAAO,OAAO,aAAa,YAC3B,OAAO,OAAO,YAAY;AACjC;;;;;;AAOA,IAAa,uBAAb,MAAkC;CAChC;CACA,4BAA6B,IAAI,IAAgB;CAEjD,cAA8C,EAAE,OAAO,OAAO;CAC9D;CACA;;CAEA;;;;;;;;CAWA,aAAqB;CACrB,WAAmB;CAEnB,YAAY,MAAgC;EAC1C,KAAK,OAAO;CACd;;CAGA,SAAS,UAAkC;EACzC,KAAK,UAAU,IAAI,QAAQ;EAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;CAC7C;;CAGA,SAAiC;EAC/B,OAAO,KAAK;CACd;;;;;;CAOA,MAAM,QAAyC;EAC7C,IAAI,KAAK,UAAU,MAAM,IAAI,MAAM,8BAA8B;EAMjE,IAAI,KAAK,YAAY,UAAU,aAAa,KAAK,WAAW,KAAA,GAAW,OAAO,KAAK;EACnF,KAAK,SAAS;EACd,MAAM,UAAU,EAAE,KAAK;EAEvB,MAAM,OAAO,MAAM,KAAK,SAAS;EACjC,MAAM,gBAAgB,KAAK,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;EAIzF,MAAM,UAAU,IAAI,SAAsC,SAAS,WAAW;GAC5E,KAAK,SAAS;IAAE;IAAS;GAAO;EAClC,CAAC;EAED,MAAM,KAAK,WAAW,MAAM,aAAa;EAEzC,MAAM,UAAU,KAAK,YAAY;EACjC,KAAK,UAAU;GACb,OAAO;GACP,SAAS,oBAAoB;IAAE,YAAY,qBAAqB,OAAO;IAAG;IAAM,OAAO;GAAc,CAAC;EACxG,CAAC;EAGD,KAAK,QAAQ,iBAAiB;GAC5B,KAAK,SAAS;GACd,KAAK,UAAU;IACb,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;EACH,GAAG,KAAK,KAAK,aAAA,IAA6B;EAC1C,KAAK,MAAM,QAAQ;EAEnB,QAAa,MACV,gBAAgB,KAAK,SAAS,SAAS,WAAW,IAClD,YAAY,KAAK,SAAS,SAAS,OAAO,CAC7C;EACA,OAAO,KAAK;CACd;;CAGA,SAAe;EACb,IAAI,KAAK,YAAY,KAAK,YAAY,UAAU,WAAW;EAC3D,KAAK,SAAS;EACd,KAAK,UAAU;GAAE,OAAO;GAAU,QAAQ;EAAY,CAAC;CACzD;;CAGA,UAAgB;EACd,IAAI,KAAK,UAAU;EACnB,KAAK,WAAW;EAChB,MAAM,aAAa,KAAK,YAAY,UAAU;EAC9C,KAAK,SAAS;EACd,IAAI,YAAY,KAAK,UAAU;GAAE,OAAO;GAAU,QAAQ;EAAY,CAAC;CACzE;CAMA,cAA8B;EAE5B,QADY,OAAO,KAAK,KAAK,YAAY,aAAa,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAA;CAExF;CAEA,UAAkB,MAAoC;EACpD,KAAK,cAAc;EACnB,KAAK,MAAM,YAAY,CAAC,GAAG,KAAK,SAAS,GAAG,SAAS;CACvD;;CAGA,MAAc,WAA4B;EACxC,MAAM,YAAY,KAAK,KAAK,aAAA;EAC5B,MAAM,WAAW,KAAK,KAAK,mBAAA;EAC3B,KAAK,IAAI,QAAQ,GAAG,QAAQ,UAAU,SAAS,GAAG;GAChD,MAAM,YAAY,YAAY;GAC9B,IAAI,MAAM,mBAAmB,SAAS,GAAG,OAAO;EAClD;EACA,MAAM,IAAI,MAAM,iCAAiC,SAAS,+BAA+B,WAAW;CACtG;;;;;;CAOA,WAAmB,MAAc,eAAsC;EACrE,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,IAAI,UAAU;GACd,MAAM,SAASC,cAAkB,SAAS,aAAa,KAAK,eAAe,SAAS,UAAU,aAAa,CAAC;GAC5G,KAAK,SAAS;GACd,OAAO,KAAK,UAAU,UAAiC;IACrD,IAAI,KAAK,WAAW,QAAQ;IAC5B,KAAK,SAAS,KAAA;IACd,MAAM,SAAS,IAAI,iBACjB,SACA,oDAAoD,KAAK,IAAI,MAAM,QAAQ,MAAM,SACnF;IACA,IAAI,SAAS;KACX,UAAU;KACV,OAAO,MAAM;IACf,OACE,KAAK,QAAQ,OAAO,MAAM;GAE9B,CAAC;GACD,OAAO,OAAO,MAAM,mBAAmB;IACrC,IAAI,CAAC,SAAS;IACd,UAAU;IACV,QAAQ;GACV,CAAC;EACH,CAAC;CACH;;CAGA,eAAuB,SAA0B,UAA0B,eAA6B;EAItG,SAAS,UAAU,cAAc,OAAO;EACxC,SAAS,UAAU,+BAA+B,WAAW,QAAQ,QAAQ,MAAM,CAAC;EACpF,SAAS,UAAU,gCAAgC,eAAe;EAClE,SAAS,UAAU,gCAAgC,cAAc;EACjE,SAAS,UAAU,gBAAgB,kBAAkB;EACrD,MAAM,QAAQ,MAAc,SAAkC;GAC5D,SAAS,UAAU,IAAI;GACvB,SAAS,IAAI,KAAK,UAAU,IAAI,CAAC;EACnC;EACA,IAAI,QAAQ,WAAW,WAAW;GAChC,SAAS,UAAU,GAAG;GACtB,SAAS,IAAI;GACb;EACF;EAEA,KADa,QAAQ,KAAK,MAAM,GAAG,CAAC,CAAC,MAAM,SAC9B,aAAa;GACxB,KAAK,KAAK;IAAE,SAAS;IAAO,OAAO;GAAY,CAAC;GAChD;EACF;EACA,IAAI,QAAQ,WAAW,QAAQ;GAC7B,KAAK,KAAK;IAAE,SAAS;IAAO,OAAO;GAAgC,CAAC;GACpE;EACF;EAGA,IAAI,YAAY;EAChB,IAAI,OAAO;EACX,QAAQ,GAAG,SAAS,UAAkB;GACpC,aAAa,MAAM;GACnB,QAAQ,MAAM,SAAS;GACvB,IAAI,YAAA,KAAoC,QAAQ,QAAQ;EAC1D,CAAC;EACD,QAAQ,GAAG,aAAa;GAEtB,IAAI,QAAQ,WAAW;GACvB,IAAI;GACJ,IAAI;IACF,UAAU,KAAK,MAAM,IAAI;GAC3B,QAAQ;IACN,KAAK,KAAK;KAAE,SAAS;KAAO,OAAO;IAAe,CAAC;IACnD;GACF;GAQA,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,WAAW,SAAS;IACzE,MAAM,SAAS;IACf,IAAI,OAAO,UAAU,eAAe;KAClC,KAAK,KAAK;MAAE,SAAS;MAAO,OAAO;KAAsB,CAAC;KAC1D;IACF;IACA,MAAM,cAAc,OAAO,qBAAqB,OAAO;IACvD,KAAK,cAAc,MAAM,KAAK,EAAE,SAAS,KAAK,GAAG,IAAI,iBACnD,OAAO,UAAU,kBAAkB,WAAW,SAC9C,OAAO,gBAAgB,YAAY,gBAAgB,KAAK,cAAc,sBACxE,CAAC;IACD;GACF;GACA,IAAI,CAAC,sBAAsB,OAAO,GAAG;IACnC,KAAK,KAAK;KAAE,SAAS;KAAO,OAAO;IAA0B,CAAC;IAC9D;GACF;GACA,IAAI,QAAQ,UAAU,eAAe;IAGnC,KAAK,KAAK;KAAE,SAAS;KAAO,OAAO;IAAsB,CAAC;IAC1D;GACF;GACA,KAAK,cAAc,MAAM,KAAK,EAAE,SAAS,KAAK,GAAG,KAAA,GAAW,EAAE,GAAG,QAAQ,CAAC;EAC5E,CAAC;EACD,QAAQ,GAAG,eAAe,CAAC,CAAC;CAC9B;;CAGA,cACE,MACA,MACA,MACA,SACA,aACM;EACN,KAAK,MAAM,IAAI;EAEf,MAAM,SAAS,KAAK;EACpB,KAAK,SAAS;EACd,IAAI,WAAW,KAAA,GAAW;EAC1B,IAAI,YAAY,KAAA,GAAW,OAAO,OAAO,OAAO;OAC3C,IAAI,gBAAgB,KAAA,GAAW,OAAO,QAAQ,WAAW;CAChE;;;;;;;;;;;CAYA,MAAc,SAAS,SAAiB,aAAyD;EAC/F,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,MAAM,aAAa,MAAM,sBACvB,KAAK,KAAK,aAAa,OACvB,KAAK,YAAY,GACjB,YAAY,MACd;EACA,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,IAAI,CAAC,WAAW,OAAO;GACrB,MAAM,SAAwC,WAAW,UAAU,gBAC/D,gBACA,WAAW,UAAU,kBAAkB,YAAY;GACvD,KAAK,UAAU;IACb,OAAO;IACP;IACA,SAAS,6CAA6C,WAAW,MAAM;GACzE,CAAC;GACD;EACF;EAGA,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,IAAI;GACF,MAAM,KAAK,KAAK,SAAS,WAAW;EACtC,SAAS,OAAgB;GACvB,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;GAChC,KAAK,UAAU;IACb,OAAO;IACP,QAAQ;IACR,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAChE,CAAC;GACD;EACF;EACA,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,KAAK,WAAW;EAChB,KAAK,UAAU;GAAE,OAAO;GAAW,UAAU,YAAY;GAAU,SAAS,YAAY;EAAQ,CAAC;CACnG;;CAGA,YAAoB,SAA0B;EAC5C,OAAO,CAAC,KAAK,YAAY,KAAK,eAAe,WAAW,KAAK,YAAY,UAAU;CACrF;;CAGA,SAAiB,SAAiB,SAAwB;EACxD,IAAI,EAAE,mBAAmB,mBAAmB;EAC5C,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,KAAK,UAAU;GAAE,OAAO;GAAU,QAAQ,QAAQ;GAAQ,SAAS,QAAQ;EAAQ,CAAC;CACtF;CAEA,aAA2B;EACzB,IAAI,KAAK,UAAU,KAAA,GAAW;GAC5B,aAAa,KAAK,KAAK;GACvB,KAAK,QAAQ,KAAA;EACf;CACF;;CAGA,WAAyB;EACvB,KAAK,WAAW;EAChB,KAAK,QAAQ,MAAM;EACnB,KAAK,SAAS,KAAA;EACd,KAAK,SAAS,KAAA;CAChB;AACF;;AAGA,IAAM,mBAAN,cAA+B,MAAM;CACP;CAA5B,YAAY,QAAuD,SAAiB;EAClF,MAAM,OAAO;EADa,KAAA,SAAA;EAE1B,KAAK,OAAO;CACd;AACF;;AAGA,SAAS,WAAW,QAAoC;CACtD,OAAO,WAAW,KAAA,KAAa,sBAAsB,SAAS,MAAM,IAAI,SAAS;AACnF;;;;;;;;;;;;;;;;;;;;;;ACneA,MAAa,iCAAiC;;;;;;;;;;AAW9C,MAAa,iCAAiC;;;;;;;;;;;;;;;AAkC9C,SAAgB,gCAAgC,KAAiB,QAAqC;CACpG,IAAI;EACF,MAAM,QAAQ;EACd,MAAM,QAAQ,MAAM;EACpB,MAAM,mBAAmB,SAAS,iCAAiC;EACnE,OAAO;CACT,QAAQ;EACN;CACF;AACF;;AAmBA,SAAgB,6BAAyD;CACvE,OAAO;EAAE,OAAO;EAAO,WAAW,KAAA;CAAU;AAC9C;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,gCACd,KACA,OACA,QACM;CACN,IAAI;EACF,MAAM,QAAQ;EACd,IAAI,QAAQ;GACV,IAAI,MAAM,OAAO;IAEf,MAAM,mBAAmB;IACzB;GACF;GACA,MAAM,QAAQ,MAAM;GACpB,MAAM,YAAY,UAAA,gBAA2C,KAAA,IAAY;GACzE,MAAM,mBAAmB;GACzB,MAAM,QAAQ;GACd;EACF;EACA,IAAI,MAAM,OAAO;GACf,MAAM,QAAQ;GACd,MAAM,mBAAmB,MAAM;GAC/B;EACF;CAEF,QAAQ,CAER;AACF;;AAGA,MAAM,kBAAkB;AACxB,MAAM,kBAAkB;;AAExB,MAAM,sBAAsB;;AAG5B,MAAM,eAAe;;;;;AAgBrB,SAAS,gBAAgB,YAAwC;CAC/D,OAAO,eAAe,KAAA,IAClB,sBACA,KAAK,IAAI,iBAAiB,KAAK,IAAI,iBAAiB,KAAK,MAAM,UAAU,CAAC,CAAC;AACjF;;AAGA,SAAS,SAAS,QAAyF;CACzG,MAAM,MAAM,OAAO,KAAK,KAAK;CAC7B,IAAI,QAAQ,KAAA,KAAa,IAAI,WAAW,GAAG,OAAO,KAAA;CAClD,MAAM,QAAQ,OAAO,OAAO,KAAK;CACjC,MAAM,UAAU,OAAO,SAAS,KAAK;CACrC,OAAO;EACL;EACA,GAAG,UAAU,KAAA,KAAa,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC;EAC1D,GAAG,YAAY,KAAA,KAAa,QAAQ,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;CAClE;AACF;AAEA,SAAS,aAAa,OAAyB;CAC7C,OAAO,iBAAiB,gBAAgB,MAAM,SAAS;AACzD;;AAGA,SAAS,cAAc,QAAiC,UAA6B;CACnF,OAAO,IAAI,SAAS,mCAAmC,eAAe,EACpE,OAAO,QAAQ,YAAY,OAAO,OAAO,SAAS,SACpD,CAAC;AACH;AAEA,SAAS,eAAe,QAAuC;CAC7D,IAAI,QAAQ,YAAY,MAAM,MAAM,cAAc,QAAQ,KAAA,CAAS;AACrE;;;;;;;;AASA,IAAa,4BAAb,MAAoE;CAGrC;CAF7B,KAAc;CAEd,YAAY,MAAsD;EAArC,KAAA,OAAA;CAAsC;;CAGnE,YAAqB;EACnB,MAAM,OAAO,KAAK,KAAK,QAAQ;EAC/B,OAAO,KAAK,SAAS,KAAK,IAAI,SAAS,IAAI;CAC7C;CAEA,MAAM,OAAO,SAA2B,QAAgD;EACtF,eAAe,MAAM;EACrB,MAAM,UAAU,KAAK,KAAK,QAAQ;EAClC,IAAI,CAAC,IAAI,SAAS,OAAO,GACvB,MAAM,IAAI,SACR,qDAAqD,KAAK,UAAU,OAAO,EAAE,sBAC7E,oBACF;EAEF,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;EACxC,eAAe,MAAM;EACrB,MAAM,WAAW,GAAG,QAAQ,QAAQ,OAAO,EAAE,IAAI;EAEjD,MAAM,OAAO;GACX,OAAO,QAAQ;GACf,YAAY,gBAAgB,QAAQ,UAAU;EAChD;EAEA,IAAI;EACJ,IAAI;GACF,WAAW,OAAO,KAAK,KAAK,aAAa,MAAA,CAAO,UAAU;IACxD,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,eAAe,UAAU;KACzB,0BAA0B;KAC1B,qBAAqB;KACrB,GAAG,mBAAmB;IACxB;IACA,MAAM,KAAK,UAAU,IAAI;IACzB,GAAG,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;GAC1C,CAAC;EACH,SAAS,OAAgB;GACvB,IAAI,QAAQ,YAAY,QAAQ,aAAa,KAAK,GAAG,MAAM,cAAc,QAAQ,KAAK;GACtF,MAAM,IAAI,SACR,2CAA2C,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,KAChG,sBACA,EAAE,OAAO,MAAM,CACjB;EACF;EAEA,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,UAAU,wCAAwC,SAAS,OAAO;GACtE,IAAI;IACF,MAAM,SAAkB,MAAM,SAAS,KAAK;IAC5C,MAAM,SAAS,OAAO,WAAW,YAAY,WAAW,OACnD,QAAgC,QACjC,KAAA;IACJ,IAAI,OAAO,WAAW,YAAY,OAAO,SAAS,GAAG,WAAW,KAAK;SAChE,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;KACtD,MAAM,OAAQ,QAA+B;KAC7C,MAAM,QAAS,QAAkC;KACjD,IAAI,OAAO,SAAS,YAAY,OAAO,UAAU,UAC/C,WAAW,KAAK,OAAO,SAAS,WAAW,OAAO,KAAK,OAAO,SAAS,YAAY,OAAO,UAAU,WAAW,QAAQ,KAAK,OAAO,UAAU,WAAW,QAAQ;IAEpK;GACF,SAAS,OAAO;IACd,IAAI,QAAQ,YAAY,QAAQ,aAAa,KAAK,GAAG,MAAM,cAAc,QAAQ,KAAK;IAItF,MAAM,SAAQ,MADK,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE,EAAA,CAC9B,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG;IACtC,IAAI,UAAU,IAAI,WAAW,KAAK;GACpC;GACA,MAAM,IAAI,SAAS,SAAS,oBAAoB;EAClD;EAEA,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,SAAS,KAAK;EAChC,SAAS,OAAO;GACd,IAAI,QAAQ,YAAY,QAAQ,aAAa,KAAK,GAAG,MAAM,cAAc,QAAQ,KAAK;GACtF,MAAM,IAAI,SAAS,iEAAiE,sBAAsB,EAAE,OAAO,MAAM,CAAC;EAC5H;EAEA,MAAM,UAAW,SAAmC;EACpD,IAAI,CAAC,MAAM,QAAQ,OAAO,GACxB,MAAM,IAAI,SACR,8FACA,oBACF;EAGF,MAAM,UAA6B,CAAC;EACpC,MAAM,uBAAO,IAAI,IAAY;EAC7B,KAAK,MAAM,QAAQ,SAAS;GAC1B,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM;GAC/C,MAAM,SAAS,SAAS,IAA0D;GAClF,IAAI,WAAW,KAAA,KAAa,KAAK,IAAI,OAAO,GAAG,GAAG;GAClD,KAAK,IAAI,OAAO,GAAG;GACnB,QAAQ,KAAK,MAAM;EACrB;EAEA,OAAO;GAAE;GAAS,WAAW;EAAM;CACrC;CAEA,MAAc,WAAW,QAAkD;EACzE,IAAI;EACJ,IAAI;GACF,MAAM,MAAM,KAAK,KAAK,WAAW;EACnC,SAAS,OAAO;GACd,IAAI,QAAQ,YAAY,QAAQ,aAAa,KAAK,GAAG,MAAM,cAAc,QAAQ,KAAK;GAOtF,IAAI,iBAAiB,SAAS,OAAQ,MAAuB,SAAS,UAAU;IAC9E,MAAM,OAAQ,MAAuB;IACrC,IAAI,SAAS,sBAAsB,MAAM,IAAI,SAAS,MAAM,SAAS,mCAAmC,EAAE,OAAO,MAAM,CAAC;IACxH,IAAI,SAAS,wBAAwB,SAAS,cAC5C,MAAM,IAAI,SAAS,MAAM,SAAS,sBAAsB,EAAE,OAAO,MAAM,CAAC;GAE5E;GACA,MAAM,IAAI,SACR,yDAAyD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,KAC9G,sBACA,EAAE,OAAO,MAAM,CACjB;EACF;EACA,IAAI,QAAQ,KAAA,KAAa,IAAI,WAAW,GACtC,MAAM,IAAI,SACR,+PACA,iCACF;EAEF,OAAO;CACT;AACF;;;;ACtNA,MAAa,sBAAsB;;AAGnC,MAAa,YAAY;;AAGzB,MAAM,cAAgD;CACpD,IAAI;CACJ,MAAM;CACN,KAAK;CACL,UAAU;CACV,KAAK;AACP;;AAGA,MAAM,aAAgC;CAAC;CAAM;CAAQ;CAAO;CAAY;AAAK;;AAG7E,MAAM,iBAAiB;;;;;;;;;;;;AAyBvB,SAAgB,6BAAwD;CACtE,OAAO,OAAO,KAAK,WAAW,CAAC,CAC5B,KAAK,QAAQ;EACZ;EACA,MAAM,YAAY,OAAO;EACzB,MAAM,YAAY,EAAE;EACpB,MAAM,sBAAsB,EAAE;CAChC,EAAE,CAAC,CACF,MAAM,GAAG,MAAM;EACd,MAAM,YAAY,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI;EACpD,IAAI,cAAc,GAAG,OAAO;EAC5B,IAAI,EAAE,SAAS,EAAE,MAAM,OAAO,EAAE,OAAO,KAAK;EAC5C,OAAO,EAAE,GAAG,cAAc,EAAE,EAAE;CAChC,CAAC;AACL;;AAGA,SAAS,SAAS,MAAsB;CACtC,MAAM,OAAO,WAAW,QAAQ,IAAI;CACpC,OAAO,SAAS,KAAK,WAAW,SAAS;AAC3C;;AAGA,SAAS,UAAU,OAA0B;CAC3C,OAAO,MAAM,QAAQ,KAAK,IACtB,MAAM,QAAQ,OAAqB,OAAO,OAAO,YAAY,OAAO,EAAE,IACtE,CAAC;AACP;;;;;;;;;;;;;;AAkDA,SAAgB,2BACd,MACoB;CACpB,MAAM,MAAM,KAAK,UAAU;CAC3B,MAAM,QAAQ,KAAK,aAAa;CAChC,MAAM,WAAW,KAAK,gBAAgB,2BAAA,CAA4B;CAClE,MAAM,aAAa,QAAQ,KAAK,WAAW,OAAO,EAAE;CACpD,MAAM,QAAQ,IAAI,IAAI,UAAU;CAIhC,MAAM,SAAS,UAAU,KAAK,cAAc,CAAC;CAC7C,MAAM,YAAY,KAAK,kBAAkB,KAAK,CAAC;CAI/C,MAAM,SAAS,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;CAEjG,MAAM,aAAa,WAChB,QAAQ,SAAS,QAAQ,MAAM,WAAW,OAAO,SAAS,IAAI,CAAC,CAAC,CAChE,KAAK,UAAU;EACd,IAAI,UAAU;EACd,OAAO,GAAG,YAAY,SAAS,KAAK;EACpC,cAAc,EAAE,IAAI,GAAG,YAAY,SAAS,KAAK,KAAK;CACxD,EAAE;CAGJ,MAAM,WAAW,QAAQ,QAAQ,WAAW,SAAS,OAAO,IAAI,MAAM,WAAW,MAAM;CACvF,MAAM,aAAa,SAAS,SAAS,KAAK,OAAO,SAAS,IACtD,CAAC;EAAE,IAAI;EAAgB,OAAO;EAAgB,cAAc,EAAE,IAAI,OAAO;CAAE,CAAC,IAC5E,CAAC;;;;;;;;;;;;;;;;CAiBL,MAAM,cAAc,IAAY,MAAc,WAAqC;EACjF,MAAM,CAAC,mBAAmB,EAAE;EAC5B;EACA,MAAM;EACN,OAAO;EACP,GAAI,SAAS,KAAK,CAAC,IAAI,EAAE,KAAK;EAC9B,SAAS,UAAU;GACjB,IAAI,OAAO,UAAU,WAAW,OAAO,OAAO,KAAK;GAGnD,MAAM,SAAS,UAAU,KAAK,cAAc,CAAC;GAC7C,OAAO,OAAO,OAAO,WAAW,KAAK,OAAO,SAAS,EAAE,CAAC;EAC1D;EACA,QAAQ,SAAS;GACf,MAAM,KAAK,KAAK,KAAK,MAAM;GAI3B,MAAM,SAAS,UAAU,KAAK,cAAc,CAAC;GAE7C,OAAO,QADW,OAAO,WAAW,KAAK,OAAO,SAAS,EAAE,KACjC,EAAE,MAAM,QAAQ,IAAI;IAAE,MAAM;IAAO,OAAO;GAAG;EACzE;CACF;CAEA,OAAO;EACL,IAAI,KAAK;EACT,OAAO,KAAK,SAAS;EACrB,cAAc,EAAE,IAAI,oBAAoB;EACxC,QAAQ;GACN;IAAE,IAAI;IAAc,OAAO;IAAc,cAAc,EAAE,IAAI,KAAK;GAAE;GACpE;IAAE,IAAI;IAAU,OAAO;IAAU,cAAc,EAAE,IAAI,KAAK;GAAE;GAC5D,GAAG;GACH,GAAG;GACH;IAAE,IAAI;IAAY,OAAO;IAAY,cAAc,EAAE,IAAI,KAAK;GAAE;EAClE;EACA,QAAQ;GACN;IACE,MAAM,CAAC,QAAQ;IACf,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,SAAS;IAC7B,QAAQ,EAAE,IAAI;IACd,MAAM,qCAAqC,IAAI;IAC/C,kBAAkB,EAAE,IAAI,UAAU,IAAI,uBAAuB;GAC/D;GACA;IACE,MAAM,CAAC,SAAS;IAChB,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,SAAS;IAC7B,aAAa;IACb,MAAM;IACN,kBAAkB,EAAE,IAAI,qCAAqC;IAC7D,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,OAAO,YAAY,KAAK,EAAE,MAAM,QAAQ,IAAI;MAAE,MAAM;MAAO,OAAO;KAAQ;IAC5E;GACF;GACA;IACE,MAAM,CAAC,oBAAoB;IAC3B,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,WAAW;IAC/B,MAAM;IACN,kBAAkB,EAAE,IAAI,iCAAiC;IAGzD,SAAS,UAAW,UAAU,QAAQ,UAAU;IAChD,QAAQ,UAAU;KAAE,MAAM;KAAO,OAAO,KAAK,KAAK,MAAM;IAAO;GACjE;GACA,GAAG,QACA,QAAQ,WAAW,SAAS,OAAO,IAAI,MAAM,WAAW,MAAM,CAAC,CAC/D,KAAK,WAAW,WAAW,OAAO,IAAI,OAAO,MAAM,UAAU,OAAO,MAAM,CAAC;GAC9E,GAAG,SAAS,KAAK,WAAW,WAAW,OAAO,IAAI,OAAO,MAAM,cAAc,CAAC;GAC9E,GAAG,OAAO,KAAK,OAAO,WAAW,IAAI,sBAAsB,EAAE,GAAG,cAAc,CAAC;GAC/E;IACE,MAAM,CAAC,eAAe;IACtB,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,OAAO;IAC3B,MAAM;IACN,kBAAkB,EAAE,IAAI,iCAAiC;IACzD,SAAS,CACP;KACE,OAAO;KACP,OAAO;KACP,cAAc,EAAE,IAAI,YAAY;IAClC,GACA,GAAG,MAAM,KAAK,UAAU;KACtB,OAAO,KAAK;KACZ,OAAO,KAAK;KACZ,cAAc,EAAE,IAAI,KAAK,MAAM;IACjC,EAAE,CACJ;IACA,SAAS,UAAW,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,KAAK,QAAQ;IAC/E,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,OAAO,YAAY,MAAM,YAAA,SACrB,EAAE,MAAM,QAAQ,IAChB;MAAE,MAAM;MAAO,OAAO;KAAQ;IACpC;GACF;GACA;IACE,MAAM,CAAC,MAAM;IACb,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,OAAO;IAC3B,MAAM;IACN,kBAAkB,EAAE,IAAI,yCAAyC;IACjE,SAAS;KACP;MAAE,OAAO;MAAW,OAAO;MAA4B,cAAc,EAAE,IAAI,kBAAkB;KAAE;KAC/F;MAAE,OAAO;MAAM,OAAO;KAAK;KAC3B;MAAE,OAAO;MAAM,OAAO;KAAU;IAClC;IACA,SAAS,UAAW,UAAU,QAAQ,UAAU,OAAO,QAAQ;IAC/D,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,OAAO,YAAY,MAAM,YAAA,SACrB,EAAE,MAAM,QAAQ,IAChB;MAAE,MAAM;MAAO,OAAO;KAAQ;IACpC;GACF;EACF;CACF;AACF;;;;;;;;;;;;AAaA,SAAS,mBAAmB,KAAsD;CAChF,IAAI;CACJ,IAAI;EACF,YAAY,IAAI,IAAI,qBAAqB;CAC3C,QAAQ;EACN;CACF;CACA,IAAI,OAAO,cAAc,YAAY,cAAc,MAAM,OAAO,KAAA;CAChE,MAAM,WAAY,UAAqC;CACvD,IAAI,OAAO,aAAa,YAAY,OAAO,KAAA;CAC3C,OAAO,EACL,UAAW,SACR,KAAK,SAAS,EACnB;AACF;;;;;;;;;AAUA,SAAS,iBAAiB,SAAqC;CAC7D,MAAM,SAAS,QAAQ,OAAO,MAAM,UAAU,MAAM,KAAK,KAAK,GAAG,MAAM,eAAe;CACtF,OAAO,KAAK,UAAU;EACpB,QAAQ,QAAQ,OAAO,MAAM,UAAU,MAAM,WAAW,KAAA,CAAS,CAAC,EAAE,QAAQ,OAAO;EACnF,SAAS,QAAQ,SAAS,KAAK,WAAW,OAAO,KAAK,KAAK,CAAC;EAI5D,OAAO,QAAQ,OACZ,QAAQ,UAAU,MAAM,UAAU,cAAc,CAAC,CACjD,KAAK,UAAU,MAAM,KAAK;CAC/B,CAAC;AACH;;;;;;;;;;;AAYA,SAAgB,4BACd,KACA,MAC0B;CAC1B,MAAM,UAAU,mBAAmB,GAAG;CACtC,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,IAAI,WAAW;CACf,IAAI;CACJ,MAAM,gBAAsB;EAC1B,IAAI,UAAU;EACd,MAAM,UAAU,2BAA2B,IAAI;EAC/C,MAAM,YAAY,iBAAiB,OAAO;EAC1C,IAAI,SAAS,cAAc,WAAW;EAItC,SAAS,QAAQ;EACjB,UAAU,KAAA;EACV,IAAI;GACF,UAAU;IAAE;IAAW,SAAS,QAAQ,SAAS,OAAO;GAAE;EAC5D,SAAS,OAAgB;GAKvB,IAAI,QAAQ,KACV,qEACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEzD;EACF;CACF;CACA,QAAQ;CACR,IAAI,mBAAmB;EACrB,WAAW;EACX,SAAS,QAAQ;EACjB,UAAU,KAAA;CACZ,GAAG,gDAAgD;CACnD,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AClZA,MAAa,OAAO;AACpB,MAAa,SAAS,CAAC,KAAK;AAE5B,MAAM,KAAK;AACX,MAAM,sBAAsB;;AAG5B,MAAa,WAAW;;AAExB,MAAa,4BAA4B,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAsG5F,MAAa,SAAoB,EAAE,OAAO;CACxC,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,QAAQ,mBAAmB;CAQxE,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,QAAQ;CAChC,SAAS,EAAE,OAAO;CAClB,YAAY,EAAE,OAAO;CACrB,iBAAiB,EAAE,OAAO;CAC1B,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,kBAAkB;CAC1D,qBAAqB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,kBAAkB;CAC7D,oBAAoB,EAAE,QAAQ;CAC9B,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC;;;;;;;;;CASjC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,CAAC;CACnC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI;CACnC,UAAU,EAAE,MAAM,EAAE,OAAO;EACzB,OAAO,EAAE,OAAO;EAChB,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,gBAAgB;;EAE3C,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,QAAQ;CAClC,CAAC,CAAC;CACF,eAAe,EAAE,OAAO;CACxB,mBAAmB,EAAE,MAAM,EAAE,OAAO;EAClC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;EAC1B,SAAS,EAAE,OAAO;CACpB,CAAC,CAAC;CACF,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,IAAa;AAC7D,CAAC;;;;;;;AAaD,SAAgB,sBAAsB,QAA4C;CAChF,OAAO;EACL,WAAW,cAAc,OAAO,aAAa,mBAAmB;EAChE,SAAS,OAAO,WAAA;EAChB,YAAY,OAAO,cAAc,QAAQ,IAAI;EAC7C,iBAAiB,OAAO,mBAAmB;EAC3C,kBAAkB,OAAO,oBAAA;EACzB,qBAAqB,OAAO,uBAAA;EAC5B,oBAAoB,OAAO,sBAAsB;EACjD,eAAe,MAAM,QAAQ,OAAO,aAAa,IAC7C,OAAO,cAAc,QAAQ,OAAO,OAAO,OAAO,YAAY,OAAO,EAAE,IACvE,KAAA;EAIJ,iBAAiB,oBAAoB,OAAO,eAAe;CAC7D;AACF;;;;;;;;AASA,SAAS,oBAAoB,KAA6D;CACxF,IAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,GAAG,OAAO,KAAA;CAC1E,MAAM,UAAU,OAAO,QAAQ,GAAG,CAAC,CAAC,QACjC,UAAsC,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,SAChF;CACA,OAAO,QAAQ,WAAW,IAAI,KAAA,IAAY,OAAO,YAAY,OAAO;AACtE;AAEA,SAAgB,MAAM,KAAc,QAAsB;CACxD,IAAI,gBAA8B;CAClC,IAAI;CACJ,IAAI;CACJ,MAAM,gBAA4C;EAChD,MAAM,MAAM,QAAQ;EACpB,IAAI,QAAQ,WAAW,aAAa,KAAA,GAAW,OAAO;EACtD,MAAM,OAAO,sBAAsB,GAAG;EACtC,UAAU;EACV,WAAW;EACX,OAAO;CACT;CACA,QAAQ;CAMR,MAAM,cAAwC;EAC5C,MAAM,MAAM,QAAQ;EACpB,MAAM,OAAiC,CAAC;GACtC,IAAI;GACJ,OAAO;GACP,KAAK,cAAc,IAAI,aAAa,mBAAmB;GACvD,SAAS,IAAI;GACb,eAAe;EACjB,CAAC;EACD,KAAK,MAAM,CAAC,OAAO,aAAa,IAAI,YAAY,CAAC,EAAA,CAAG,QAAQ,GAAG;GAC7D,MAAM,UAAU,OAAO,QAAQ,cAAc,YAAY,QAAQ,UAAU,KAAK,MAAM,KAClF,QAAQ,UAAU,KAAK,IACvB,KAAA;GACJ,MAAM,UAAU,OAAO,QAAQ,WAAW,YAAY,QAAQ,WAAW,KAAK,QAAQ,SAAS,KAAA;GAC/F,IAAI,YAAY,KAAA,KAAa,YAAY,KAAA,GAAW;GACpD,KAAK,KAAK;IAKR,IAAI,WAAW,WAAW,QAAQ;IAClC,OAAO,OAAO,QAAQ,UAAU,YAAY,QAAQ,MAAM,KAAK,MAAM,KACjE,QAAQ,MAAM,KAAK,IACnB,WAAW,QAAQ;IACvB,KAAK,YAAY,KAAA,IAAY,KAAA,IAAY,cAAc,OAAO;IAC9D;IACA,eAAe;GACjB,CAAC;EACH;EACA,OAAO;CACT;CAIA,MAAM,oBAAwC;EAC5C,MAAM,MAAM,QAAQ,CAAC,CAAC;EACtB,OAAO,OAAO,QAAQ,YAAY,IAAI,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,KAAA;CACrE;CAEA,MAAM,aAAa,OAAO,QAAuE;EAC/F,MAAM,cAAc,IAAI,IAAI,aAAa;EACzC,IAAI,gBAAgB,KAAA,GAKlB,QAAO,MADW,YAAY,QAAQ,GAAG,EAAA,EAC7B;EAEd,MAAM,UAAU,oBAAoB,GAAG,CAAC,CAAC,IAAI,GAAG;EAChD,OAAO,YAAY,KAAA,KAAa,QAAQ,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAA;CAC7E;CAQA,MAAM,OAA+B,IAAI,uBAAuB;EAC9D;EACA;EACA,aAAa;EAGb,cAAc,WAAmB,QAAQ,oBAAoB,MAAM;EACnE;EAGA,yBAAiE,QAAQ,CAAC,CAAC,qBAAqB,CAAC;CACnG,CAAC;CAED,MAAM,gBAAgB,OAAO,YAAwC,UAAoC;EACvG,MAAM,WAAW,MAAM,KAAK,WAAW,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,CAAC;EAC3E,IAAI,aAAa,KAAA,GACf,OAAO,mBAAmB,SAAS,KAAK,mBAAmB,SAAS,KAAK,OAAO,GAAG,SAAS,KAAK,MAAM,iBAAiB;EAE1H,MAAM,MAAM,WAAW;EACvB,MAAM,IAAI,SACR,mDAAmD,SAAS,WAAW,IAAI,+LAI3E,oBACF;CACF;CAEA,MAAM,UAA0D,IAAI,mBAAmB;EACrF;EACA;EAKA,cAAc,OAAO,aAAqB,WAAgD,aAAyC,UAAgD;GACjL,KAAK,aAAa,aAAa,SAAS;GAMxC,MAAM,WAAW,MAAM,KAAK,WAC1B,UAAU,KAAA,IAAY,EAAE,SAAS,YAAY,IAAI;IAAE,SAAS;IAAa;GAAM,CACjF;GAIA,OAAO,aAAa,KAAA,IAChB,KAAA,IACA,mBAAmB,SAAS,KAAK,mBAAmB,SAAS,KAAK,OAAO,GAAG,SAAS,KAAK,MAAM,iBAAiB;EACvH;EAGA,0BAA0B;GACxB,MAAM,cAAc,IAAI,IAAI,aAAa;GACzC,OAAO,gBAAgB,KAAA,IAAY,KAAA,IAAY;EACjD;CACF,CAAC;CAGD,IAAI,IAAI,8BAA8B,CACpC;EAAE,UAAU;EAAU,aAAa;EAAgB,YAAY;EAAI,cAAc,CAAC;CAAE,CACtF,CAAC;CAED,IAAI,IAAI,gBAAgB,CAAC,QAAQ,GAAG,OAAO;CAK3C,MAAM,eAAe,YAAgD;EAInE,MAAM,YAAY,MAAM,KAAK,iBAAiB;EAC9C,MAAM,OAAO,IAAI,IAAI,UAAU,KAAK,YAAY,CAAC,QAAQ,KAAK,IAAI,OAAO,CAAC,CAAC;EAC3E,MAAM,SAAS,oBAAoB,MAAM,KAAK,iBAAiB,GAAG,YAAY,CAAC;EA4B/E,OAAO,EAAE,UAAU,MA3BG,QAAQ,IAAI,MAAM,CAAC,CAAC,IAAI,OAAO,SAAS;GAC5D,MAAM,UAAU,KAAK,IAAI,KAAK,EAAE;GAChC,IAAI;GACJ,IAAI,YAAY,KAAA,GACd,SAAS,EAAE,UAAU,CAAC,EAAE;QAExB,IAAI;IACF,SAAS,MAAM,QAAQ,SAAS,QAAQ,GAAG;GAC7C,SAAS,OAAgB;IACvB,SAAS,EAAE,UAAU,CAAC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;GAChF;GAEF,MAAM,QAAQ,SAAS;GAIvB,MAAM,SAAS,cAAc,KAAK;GAClC,OAAO;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,YAAY,YAAY,KAAA;IACxB,QAAQ,YAAY,KAAA,KAAa,QAAQ,KAAK,OAAO,KAAK;IAC1D,MAAM,SAAS,KAAK,OAAO,SAAS,aAAa,uBAAuB;IACxE,eAAe,CAAC,UAAU,OAAO,SAAS,aAAa,MAAM,QAAQ;IACrE;GACF;EACF,CAAC,CAAC,EACyB;CAC7B;CAUA,MAAM,sBAAgC,kBAAkB,QAAQ,CAAC,CAAC,IAAI;CACtE,IAAI,OAAO,CAAC,UAAU,IAAI,eAAe;EACvC,cAAc,YAAY;GAAE;GAAS,SAAS;GAAc,WAAW;EAAc,CAAC;CACxF,CAAC;CASD,MAAM,YAAY,IAAI,qBAAqB;EACzC,eAAe,QAAQ,CAAC,CAAC;EACzB,UAAU,OAAO,EAAE,aAAyD;GAC1E,MAAM,MAAM,cAAc,QAAQ,CAAC,CAAC,aAAa,mBAAmB;GACpE,MAAM,cAAc,IAAI,IAAI,aAAa;GACzC,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,gFAAgF;GAElG,MAAM,YAAY,IAAI,KAAK,MAAM;EACnC;CACF,CAAC;CACD,IAAI,mBAAmB,UAAU,QAAQ,GAAG,sCAAsC;CASlF,MAAM,oBAAoB,YAAyC;EAEjE,OAAO,EACL,SAAQ,MAFW,QAAQ,WAAW,UAAU,EAAE,YAAY,KAAK,CAAC,EAAA,CAErD,KAAK,UAAU;GAC5B,MAAM,OAAO,YAAY,MAAM;GAC/B,OAAO;IACL,IAAI,MAAM;IACV,MAAM,MAAM,KAAK,QAAQ,cAAc,EAAE;IACzC,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;GACvC;EACF,CAAC,EACH;CACF;CACA,iBAAiB,KAAK;EAAE;EAAS,SAAS;EAAc,OAAO;EAAW,YAAY;CAAkB,CAAC;CAyBzG,MAAM,kBAAkB,2BAA2B;CACnD,MAAM,wBAAwB,YAA2B;EACvD,IAAI,eAAe,KAAA,GACjB,gCAAgC,YAAY,iBAAiB,OAAO;CAExE;CACA,IAAI;CACJ,IAAI,OAAO,CAAC,KAAK,IAAI,WAAW;EAC9B,aAAa,OAAO;EACpB,OAAO,IAAI,uBAAuB,IAAI,0BAA0B;GAC9D,YAAY,YAAY;IACtB,MAAM,WAAW,MAAM,KAAK,WAAW;IACvC,OAAO,aAAa,KAAA,IAAY,KAAA,IAAY,SAAS;GACvD;GACA,eAAe,QAAQ,CAAC,CAAC;EAC3B,CAAC,CAAC;EAIF,qBAAqB,QAAQ,CAAC,CAAC,aAAa,IAAI;EAOhD,OAAO,mBAAmB;GACxB,aAAa,KAAA;GACb,gCAAgC,OAAO,KAAK,iBAAiB,KAAK;EACpE,GAAG,gDAAgD;CACrD,CAAC;CAYD,IAAI;CACJ,IAAI,OAAO,CAAC,qBAAqB,IAAI,WAAW;EAC9C,qBAAqB,4BAA4B,QAAQ;GACvD,IAAI;GAGJ,iBAAiB,QAAQ,CAAC,CAAC,aAAa;GAIxC,oBAAoB,MAAM,CAAC,CAAC,KAAK,UAAU;IAAE,IAAI,KAAK;IAAI,OAAO,KAAK;GAAM,EAAE;GAM9E,qBAAqB,QAAQ,CAAC,CAAC,iBAAiB,CAAC;GACjD,uBAAuB,QAAQ,CAAC,CAAC;EACnC,CAAC;EACD,OAAO,mBAAmB;GACxB,qBAAqB,KAAA;EACvB,GAAG,+CAA+C;CACpD,CAAC;CAKD,IAAI,OAAO,CAAC,UAAU,IAAI,gBAAgB;EACxC,YAAY,SAAS,eAAe,KAAK,IAAI,QAAQ,QAAQ;GAC3D,YAAY,WAAW;IACrB,UAAU;GACZ;GAaA,gBAAgB;IACd,qBAAqB,QAAQ,CAAC,CAAC,aAAa,IAAI;IAChD,qBAAqB;GACvB;EACF,CAAC;CACH,CAAC;AACH"}
\ No newline at end of file
+{"version":3,"file":"index.js","names":["record","record","stringField","reject","createNetServer","createHttpServer"],"sources":["../src/capabilities.ts","../src/model-prices.ts","../src/cost-facts.ts","../src/cost-projection.ts","../src/accounts.ts","../src/adapter.ts","../src/command-locales.ts","../src/commands.ts","../src/wire-shared.ts","../src/usage-wire.ts","../src/login-wire.ts","../src/usage-remote.ts","../src/login.ts","../src/web-search.ts","../src/tui-settings.ts","../src/index.ts"],"sourcesContent":["/**\n * Static capability snapshot for the Command Code provider: model →\n * reasoning-effort levels, vision/thinking flags, model → minimum plan tier,\n * subscription-plan labels, deals, and hourly (peak/off-peak) pricing.\n *\n * Everything in this module is synced from official sources (the command-code\n * CLI bundle's model table and the official plan/pricing/model docs — see the\n * dsh-commandcode-upstream skill for the exact extraction procedures), and\n * changes whenever an upstream CLI release reshuffles models/plans/prices.\n * Keeping the snapshot in its own module confines those frequent sync diffs\n * here: src/adapter.ts holds only the stable wire/runtime logic and imports\n * these tables + read helpers.\n *\n * Snapshot read helpers (planLabel, dealLabel, formatContext,\n * capabilityDescription, peakPricing*, compareByPlan, modelVisibleInPlan,\n * subscriptionPlanInfo, isFreeModel) live here too — they exist only to read\n * the tables, so a sync never has to touch src/adapter.ts.\n *\n * Ported from pi-commandcode-provider (MIT); originally part of src/adapter.ts\n * and split out so upstream syncs stay reviewable.\n */\n// ---------------------------------------------------------------------------\n// Static capability snapshot (from the official command-code@1.53.0 bundled\n// model catalog, dist/cli.mjs). The Provider API does not expose reasoning\n// metadata; models omitted here let Command Code choose their reasoning\n// depth, matching the official CLI.\n// ---------------------------------------------------------------------------\n\nexport const KNOWN_EFFORTS: Readonly<Record<string, readonly string[]>> = {\n  // Re-verified against the authoritative command-code@1.53.0 bundled model\n  // table (dist/cli.mjs, the provider effort map): exactly these models carry\n  // selectable efforts. Models marked 'reasoning:!0' without efforts\n  // (e.g. Tencent Hy3, GLM-5/5.1/5.2-Fast)\n  // think automatically and are absent here - the CLI omits\n  // 'reasoning_effort' for them, so the picker must not offer a selector. Do\n  // NOT add entries from the OAuth provider tables (anthropic/openai) - only\n  // the Provider-API table is authoritative for this plugin's route.\n  // `stealth/ox-alpha` (['low', 'high', 'max']) was removed in\n  // command-code@1.34.0 when its preview ended; its successor,\n  // `z-ai/glm-5.3-flash`, ships the same effort set.\n  // `tencent/hy4-preview` gained ['low', 'medium', 'high'] in\n  // command-code@1.38.0 (it previously thought automatically with no\n  // selectable levels).\n  // `moonshotai/Kimi-K3` gained ['low', 'high', 'max'] in command-code@1.39.3\n  // (it previously thought automatically with no selectable levels).\n  // `claude-fable-5-1` (Claude Fable 5.1, command-code@1.40.0) ships the same\n  // five-level effort set as its predecessor `claude-fable-5` and is served\n  // by the Provider API (the Provider/Max tier; see KNOWN_PLANS).\n  // command-code@1.41.0 added `Qwen/Qwen3.8-Max-0902` and command-code@1.43.0\n  // added `google/gemini-3.8-flash`; both carry effort sets matching their\n  // existing family members. command-code@1.45.0 added selectable\n  // ['low', 'medium', 'high', 'xhigh'] efforts for the Muse Spark family\n  // (1.1, 1.2, 1.2-contributor, 1.3, 1.3-contributor); they previously reasoned\n  // automatically with no selectable levels. command-code@1.48.0 added the\n  // `max` effort tier to Muse Spark 1.3 (previously ['low','medium','high',\n  // 'xhigh']); 1.3 and 1.3-contributor now ship different effort sets.\n  // command-code@1.49.0 added `gpt-6-astra` with the five-level effort set.\n  // command-code@1.51.0 briefly added `deepseek/deepseek-v4.1-flash-beta`\n  // (text+image, reasoning without selectable efforts, hidden behind a\n  // 2026-09-10 expiry gate); command-code@1.51.2 removed it from the bundle\n  // entirely, so no snapshot entry is needed.\n  'Qwen/Qwen3.8-Max': ['low', 'medium', 'xhigh'],\n  'Qwen/Qwen3.8-Max-0902': ['low', 'medium', 'xhigh'],\n  'Qwen/Qwen3.8-27B': ['low', 'medium', 'xhigh'],\n  'Qwen/Qwen3.8-Flash': ['low', 'medium', 'xhigh'],\n  'claude-fable-5-1': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-fable-5': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-opus-4-7': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-opus-4-8': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-opus-5': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-sonnet-4-6': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'claude-sonnet-5': ['low', 'medium', 'high', 'xhigh', 'max'],\n  // `deepseek/deepseek-v4-flash-fast` joined in command-code@1.39.0\n  // (\"Add DeepSeek V4 Flash Fast\"); 1.39.1 dropped `medium` for it, and\n  // the 1.39.2 table ships ['low', 'high', 'max'].\n  'deepseek/deepseek-v4-flash-fast': ['low', 'high', 'max'],\n  // command-code@1.53.0 added DeepSeek V4.1 Flash (\"Add new\n  // deepseek/deepseek-v4.1-flash model\"); the bundle ships\n  // ['low', 'high', 'max'] for it.\n  'deepseek/deepseek-v4.1-flash': ['low', 'high', 'max'],\n  'deepseek/deepseek-v4-flash': ['high', 'max'],\n  'deepseek/deepseek-v4-flash-vision-exp': ['high', 'max'],\n  'deepseek/deepseek-v4-pro': ['high', 'max'],\n  'google/gemini-3.1-flash-lite': ['low', 'medium', 'high'],\n  'google/gemini-3.5-flash': ['low', 'medium', 'high'],\n  'google/gemini-3.5-flash-lite': ['low', 'medium', 'high'],\n  'google/gemini-3.6-flash': ['low', 'medium', 'high'],\n  'google/gemini-3.7-flash': ['low', 'medium', 'high'],\n  'gpt-5.3-codex': ['low', 'medium', 'high', 'xhigh'],\n  'gpt-5.4': ['low', 'medium', 'high', 'xhigh'],\n  'gpt-5.4-mini': ['low', 'medium', 'high'],\n  'gpt-5.5': ['low', 'medium', 'high', 'xhigh'],\n  'gpt-5.6-luna': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'gpt-5.6-sol': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'gpt-5.6-terra': ['low', 'medium', 'high', 'xhigh', 'max'],\n  // `moonshotai/Kimi-K3` gained selectable ['low', 'high', 'max'] efforts in\n  // command-code@1.39.3 (\"Add low, high, and max reasoning effort support for\n  // Kimi K3\"); it previously reasoned automatically with no levels.\n  'moonshotai/Kimi-K3': ['low', 'high', 'max'],\n  // command-code@1.43.0 added Gemini 3.8 Flash with the same three-level\n  // effort set as the rest of the Gemini Flash family.\n  'google/gemini-3.8-flash': ['low', 'medium', 'high'],\n  'sakana/fugu-ultra': ['high', 'xhigh'],\n  'tencent/hy4-preview': ['low', 'medium', 'high'],\n  'xai/grok-4.5': ['low', 'medium', 'high'],\n  'xai/grok-4.6': ['low', 'medium', 'high', 'xhigh'],\n  'z-ai/glm-5.3-flash': ['low', 'high', 'max'],\n  'zai-org/GLM-5.2': ['high', 'max'],\n  'zai-org/GLM-5.3': ['low', 'high', 'max'],\n  // Muse Spark family (command-code@1.45.0: \"Reasoning levels for Muse\n  // Spark 1.3\") gained selectable ['low', 'medium', 'high', 'xhigh'] efforts\n  // — they previously reasoned automatically with no levels.\n  'meta/muse-spark-1.1': ['low', 'medium', 'high', 'xhigh'],\n  'meta/muse-spark-1.2': ['low', 'medium', 'high', 'xhigh'],\n  'meta/muse-spark-1.2-contributor': ['low', 'medium', 'high', 'xhigh'],\n  // command-code@1.48.0 added `max` to Muse Spark 1.3; 1.3-contributor keeps\n  // the four-level set.\n  'meta/muse-spark-1.3': ['low', 'medium', 'high', 'xhigh', 'max'],\n  'meta/muse-spark-1.3-contributor': ['low', 'medium', 'high', 'xhigh'],\n  // command-code@1.49.0 added GPT-6 Astra with the full five-level effort set.\n  'gpt-6-astra': ['low', 'medium', 'high', 'xhigh', 'max'],\n  // command-code@1.51.3 gave MiniMax M3 selectable ['low', 'medium', 'high']\n  // efforts (it previously reasoned automatically with no levels and lived in\n  // KNOWN_THINKING_MODELS; the hidden `minimax/minimax-m3-free` sibling gained\n  // the same set in the bundle). No CLI changelog entry exists for 1.51.1–1.51.3\n  // yet — this was read from the 1.51.3 bundled model table.\n  // command-code@1.52.0 added `inclusionai/ling-3.0-flash-sante:free` with\n  // automatic reasoning and no selectable efforts, so the effort map is\n  // unchanged by that release.\n  'MiniMaxAI/MiniMax-M3': ['low', 'medium', 'high'],\n}\n\n/**\n * Models whose Capabilities include Vision, per the official Command Code\n * model registry (`https://commandcode.ai/docs/reference/cli/models`, generated\n * from the same registry as `cmd --list-models` / the `/model` picker).\n *\n * The Provider API does not expose modality metadata, so this snapshot is the\n * source of truth for image-input gating. Command Code's own CLI falls back to\n * a client-side VISION side-call for text-only models; this adapter does not\n * reproduce that interactive feature, so images sent to a model outside this\n * list are refused loudly (`UNSUPPORTED_CONTENT`) instead of being dropped or\n * sent to a model that cannot read them.\n *\n * Keep in sync with the official registry when new models ship (see the\n * dsh-commandcode-upstream skill).\n */\nexport const KNOWN_IMAGE_MODELS: ReadonlySet<string> = new Set([\n  'MiniMaxAI/MiniMax-M3',\n  'Qwen/Qwen3.6-Plus',\n  'Qwen/Qwen3.7-Flash',\n  'Qwen/Qwen3.7-Plus',\n  'Qwen/Qwen3.8-27B',\n  'Qwen/Qwen3.8-Flash',\n  'Qwen/Qwen3.8-Max',\n  // command-code@1.41.0 added Qwen 3.8 Max 0902; Vision per the official\n  // registry (\"Text input, Vision, Reasoning\") and the CLI's\n  // inputModalities:[\"text\",\"image\"].\n  'Qwen/Qwen3.8-Max-0902',\n  'claude-fable-5-1',\n  'claude-fable-5',\n  'claude-haiku-4-5-20251001',\n  'claude-opus-4-7',\n  'claude-opus-4-8',\n  'claude-opus-5',\n  'claude-sonnet-4-6',\n  'claude-sonnet-5',\n  'deepseek/deepseek-v4-flash-vision-exp',\n  // command-code@1.53.0 added DeepSeek V4.1 Flash; Vision per the official\n  // registry (\"Text input, Vision, Reasoning\") and the CLI's\n  // inputModalities:[\"text\",\"image\"].\n  'deepseek/deepseek-v4.1-flash',\n  'google/gemini-3.1-flash-lite',\n  'google/gemini-3.5-flash',\n  'google/gemini-3.5-flash-lite',\n  'google/gemini-3.6-flash',\n  'google/gemini-3.7-flash',\n  // command-code@1.43.0 added Gemini 3.8 Flash; Vision per the official\n  // registry and the CLI's inputModalities:[\"text\",\"image\"].\n  'google/gemini-3.8-flash',\n  'gpt-5.3-codex',\n  'gpt-5.4',\n  'gpt-5.4-mini',\n  'gpt-5.5',\n  'gpt-5.6-luna',\n  'gpt-5.6-sol',\n  'gpt-5.6-terra',\n  // command-code@1.49.0 added GPT-6 Astra; Vision per the official registry\n  // and the CLI's inputModalities:[\"text\",\"image\"].\n  'gpt-6-astra',\n  // command-code@1.44.0 added Muse Spark 1.3 and its Contributor sibling;\n  // both are Vision per the official registry and the CLI's\n  // inputModalities:[\"text\",\"image\"].\n  'meta/muse-spark-1.1',\n  'meta/muse-spark-1.2',\n  'meta/muse-spark-1.2-contributor',\n  'meta/muse-spark-1.3',\n  'meta/muse-spark-1.3-contributor',\n  'moonshotai/Kimi-K2.5',\n  'moonshotai/Kimi-K2.6',\n  'moonshotai/Kimi-K2.7-Code',\n  'moonshotai/Kimi-K2.7-Code-Highspeed',\n  'moonshotai/Kimi-K3',\n  'sakana/fugu-ultra',\n  'stepfun/Step-3.7-Flash',\n  'thinkingmachines/inkling',\n  'thinkingmachines/inkling-small',\n  'xai/grok-4.5',\n  // command-code@1.47.0 marked Grok 4.6 vision-capable (it was text-only in\n  // 1.46.0); re-verified present in the 1.53.0 bundle's\n  // inputModalities:[\"text\",\"image\"] entries.\n  'xai/grok-4.6',\n  'xiaomi/mimo-v2.5',\n  'z-ai/glm-5.3-flash',\n])\n\n/**\n * Models the official CLI's model table (command-code@1.53.0) marks\n * `reasoning:!0` but defines no selectable `reasoning_effort` levels — they\n * think automatically, with Command Code driving the depth. This is the\n * authoritative \"thinks, effort not adjustable\" set: `KNOWN_EFFORTS` (which\n * mirrors the CLI's effort map exactly) stays the sole source for selectable\n * effort levels, and this snapshot is not surfaced in the picker's compact\n * description — it exists for programmatic consumers.\n *\n * Source: the command-code@1.53.0 bundled model table (dist/cli.mjs),\n * cross-checked with https://commandcode.ai/docs/reference/cli/models.\n * (`stealth/ox-alpha` left this set in command-code@1.32.1, which gave it\n * selectable `['low', 'high', 'max']` efforts; the preview then ended in\n * 1.34.0, removing the model from the catalog entirely. `tencent/hy4-preview`\n * joined this set in command-code@1.37.0 — reasoning:!0, no efforts, 1M\n * context, routed through OpenRouter — then gained selectable\n * `['low', 'medium', 'high']` efforts in command-code@1.38.0 and moved to\n * `KNOWN_EFFORTS`. `moonshotai/Kimi-K3` followed the same path in\n * command-code@1.39.3 — it gained `['low', 'high', 'max']` efforts and moved\n * to `KNOWN_EFFORTS`. command-code@1.42.0 added `meituan/LongCat-2.0:free`\n * (reasoning:!0, no efforts). command-code@1.45.0 gave the Muse Spark family\n * (1.1, 1.2, 1.2-contributor, 1.3, 1.3-contributor) selectable\n * `['low', 'medium', 'high', 'xhigh']` efforts — they moved to `KNOWN_EFFORTS`.\n * command-code@1.51.3 gave `MiniMaxAI/MiniMax-M3` selectable\n * `['low', 'medium', 'high']` efforts — it moved to `KNOWN_EFFORTS` too.\n * command-code@1.52.0 added `inclusionai/ling-3.0-flash-sante:free`\n * (reasoning:!0, no efforts).)\n * command-code@1.53.0 added `deepseek/deepseek-v4.1-flash` with selectable\n * ['low', 'high', 'max'] efforts, so it lives in `KNOWN_EFFORTS`, not here.)\n * Keep in sync via the dsh-commandcode-upstream skill.\n */\nexport const KNOWN_THINKING_MODELS: ReadonlySet<string> = new Set([\n  'Qwen/Qwen3.6-Max-Preview',\n  'Qwen/Qwen3.6-Plus',\n  'Qwen/Qwen3.7-Flash',\n  'Qwen/Qwen3.7-Max',\n  'Qwen/Qwen3.7-Plus',\n  'moonshotai/Kimi-K2.7-Code',\n  'moonshotai/Kimi-K2.7-Code-Highspeed',\n  'stepfun/Step-3.5-Flash',\n  'stepfun/Step-3.7-Flash',\n  'tencent/hy3-paid',\n  'nvidia/nemotron-3-ultra-550b-a55b',\n  'thinkingmachines/inkling',\n  'thinkingmachines/inkling-small',\n  'poolside/laguna-s-2.1-free',\n  // LongCat 2.0 (command-code@1.42.0, Meituan's trillion-parameter coding\n  // model, 1M context) is free and text-only, with automatic reasoning.\n  'meituan/LongCat-2.0:free',\n  // Ling 3.0 Flash Sante (command-code@1.52.0, 262K context, text-only) is\n  // free and reasons automatically with no selectable efforts.\n  'inclusionai/ling-3.0-flash-sante:free',\n])\n\n/**\n * The minimum subscription plan a model is included in, per the official plan\n * pages (`/docs/plans/go`, `/docs/plans/goat`, `/docs/plans/pro`, `/docs/plans/max`\n * and `/docs/resources/pricing-limits`). Each plan's model list is a superset of\n * the one below it: Go ⊂ GOAT ⊂ Pro ⊂ Provider/Max. Models absent from every\n * plan list (Claude Opus/Fable, Fugu Ultra) are Provider-tier.\n * `claude-fable-5-1` (Claude Fable 5.1, added in command-code@1.40.0) is\n * Provider/Max-tier exactly like `claude-fable-5` — its availability matrix on\n * the official plan/pricing pages grants individual-provider/max/ultra and\n * teams-pro only, and the CLI's plan-access map blocks it on Go/GOAT/Pro.\n * command-code@1.41.0 added `Qwen/Qwen3.8-Max-0902` (Go) and 1.42.0 added\n * `meituan/LongCat-2.0:free` (Go, free promo); command-code@1.43.0 added\n * `google/gemini-3.8-flash` (GOAT) and 1.44.0 added `meta/muse-spark-1.3`\n * (GOAT) plus its Contributor sibling (Go); command-code@1.52.0 added the\n * free `inclusionai/ling-3.0-flash-sante:free` (Go); command-code@1.53.0\n * added `deepseek/deepseek-v4.1-flash` (Go).\n *\n * The Provider API exposes no plan metadata, so this snapshot is the source of\n * truth for the picker's plan annotation — it answers \"which plan do I need to\n * actually use this model?\" at a glance. Plan labels use the official tier\n * names (`Go`, `GOAT`, `Pro`, `Provider`), with `Max` implying Provider.\n *\n * Keep in sync with the official plan pages when they change (see the\n * dsh-commandcode-upstream skill).\n */\nexport const KNOWN_PLANS: Readonly<Record<string, string>> = {\n  // --- Go (44) ---\n  'MiniMaxAI/MiniMax-M2.5': 'go',\n  'MiniMaxAI/MiniMax-M2.7': 'go',\n  'MiniMaxAI/MiniMax-M3': 'go',\n  'Qwen/Qwen3.6-Max-Preview': 'go',\n  'Qwen/Qwen3.6-Plus': 'go',\n  'Qwen/Qwen3.7-Flash': 'go',\n  'Qwen/Qwen3.7-Max': 'go',\n  'Qwen/Qwen3.7-Plus': 'go',\n  'Qwen/Qwen3.8-27B': 'go',\n  'Qwen/Qwen3.8-Flash': 'go',\n  'Qwen/Qwen3.8-Max': 'go',\n  // command-code@1.41.0 added Qwen 3.8 Max 0902; it sits on the Go plan page.\n  'Qwen/Qwen3.8-Max-0902': 'go',\n  // command-code@1.39.0 added DeepSeek V4 Flash Fast; it is a Go-tier model\n  // alongside the rest of the DeepSeek V4 family.\n  'deepseek/deepseek-v4-flash-fast': 'go',\n  // command-code@1.53.0 added DeepSeek V4.1 Flash (\"Add new\n  // deepseek/deepseek-v4.1-flash model\"); the pricing page's embedded\n  // availability grants it every plan including Go, and the Go/GOAT/Pro/Max\n  // plan pages all list it.\n  'deepseek/deepseek-v4.1-flash': 'go',\n  'deepseek/deepseek-v4-flash': 'go',\n  'deepseek/deepseek-v4-flash-vision-exp': 'go',\n  'deepseek/deepseek-v4-pro': 'go',\n  'gpt-5.6-luna': 'go',\n  // command-code@1.42.0 added Meituan's LongCat 2.0 as a free Go-tier model\n  // (\"LongCat 2.0 free model\" — 100% off while it lasts, every plan).\n  'meituan/LongCat-2.0:free': 'go',\n  // command-code@1.52.0 added Ling 3.0 Flash Sante as a free Go-tier model\n  // (\"free, up to 100 requests a day\", every plan) — the successor to the\n  // retired `inclusionai/ling-3.0-flash-free` promo.\n  'inclusionai/ling-3.0-flash-sante:free': 'go',\n  // command-code@1.44.0 added Muse Spark 1.3 Contributor on every plan\n  // including Go, like its 1.2 Contributor sibling.\n  'meta/muse-spark-1.2-contributor': 'go',\n  'meta/muse-spark-1.3-contributor': 'go',\n\n  'moonshotai/Kimi-K2.5': 'go',\n  'moonshotai/Kimi-K2.6': 'go',\n  'moonshotai/Kimi-K2.7-Code': 'go',\n  'moonshotai/Kimi-K2.7-Code-Highspeed': 'go',\n  'moonshotai/Kimi-K3': 'go',\n  'nvidia/nemotron-3-ultra-550b-a55b': 'go',\n  'poolside/laguna-s-2.1-free': 'go',\n  'stepfun/Step-3.5-Flash': 'go',\n  'stepfun/Step-3.7-Flash': 'go',\n  'tencent/hy3-paid': 'go',\n  'tencent/hy4-preview': 'go',\n  'thinkingmachines/inkling': 'go',\n  'thinkingmachines/inkling-small': 'go',\n  'xai/grok-4.5': 'go',\n  'xiaomi/mimo-v2.5': 'go',\n  'xiaomi/mimo-v2.5-pro': 'go',\n  'z-ai/glm-5.3-flash': 'go',\n  'zai-org/GLM-5': 'go',\n  'zai-org/GLM-5.1': 'go',\n  'zai-org/GLM-5.2': 'go',\n  'zai-org/GLM-5.2-Fast': 'go',\n  'zai-org/GLM-5.3': 'go',\n  // --- GOAT (6 more) ---\n  'google/gemini-3.7-flash': 'goat',\n  // command-code@1.43.0 added Gemini 3.8 Flash; the pricing page marks it\n  // \"Available on GOAT and above\", like the rest of the Gemini Flash family.\n  'google/gemini-3.8-flash': 'goat',\n  'gpt-5.6-sol': 'goat',\n  'meta/muse-spark-1.2': 'goat',\n  // command-code@1.44.0 added Muse Spark 1.3; the pricing page marks it\n  // \"Available on GOAT and above\", like the 1.2/1.1 models.\n  'meta/muse-spark-1.3': 'goat',\n  'xai/grok-4.6': 'goat',\n  // --- Pro (13 more) ---\n  'claude-haiku-4-5-20251001': 'pro',\n  'claude-sonnet-4-6': 'pro',\n  'claude-sonnet-5': 'pro',\n  'google/gemini-3.1-flash-lite': 'pro',\n  'google/gemini-3.5-flash': 'pro',\n  'google/gemini-3.5-flash-lite': 'pro',\n  'google/gemini-3.6-flash': 'pro',\n  'gpt-5.3-codex': 'pro',\n  'gpt-5.4': 'pro',\n  'gpt-5.4-mini': 'pro',\n  'gpt-5.5': 'pro',\n  'gpt-5.6-terra': 'pro',\n  'meta/muse-spark-1.1': 'pro',\n  // --- Provider / Max (7) ---\n  'claude-fable-5-1': 'provider',\n  'claude-fable-5': 'provider',\n  'claude-opus-4-7': 'provider',\n  'claude-opus-4-8': 'provider',\n  'claude-opus-5': 'provider',\n  // command-code@1.49.0 added GPT-6 Astra; per the pricing page it sits on\n  // Max (Provider/Max tier).\n  'gpt-6-astra': 'provider',\n  'sakana/fugu-ultra': 'provider',\n}\n\n/** Official display labels for each plan tier. */\nexport const PLAN_LABELS: Readonly<Record<string, string>> = {\n  go: 'Go',\n  goat: 'GOAT',\n  pro: 'Pro',\n  provider: 'Provider',\n  max: 'Max',\n}\n\n/**\n * Plan-tier sort weights, low to high. Models outside the snapshot (unknown\n * plans) sort after every known tier, keeping known models predictable.\n */\nexport const PLAN_ORDER: Readonly<Record<string, number>> = {\n  go: 0,\n  goat: 1,\n  pro: 2,\n  provider: 3,\n  max: 4,\n}\n\n/**\n * Whether a model is free (requests cost no credits), per the pricing page's\n * deals (`KNOWN_DEALS` `free: true`). Free models lead the picker regardless\n * of tier — they are usable by every account, so they are the best default\n * candidates.\n */\nexport function isFreeModel(modelId: string): boolean {\n  return KNOWN_DEALS[modelId]?.free === true\n}\n\n/**\n * Comparator for the model picker: free models first (zero credit cost, usable\n * by every account), then by plan tier (lowest first), then by model name,\n * then by id as a tiebreak. Models with no known plan sort last.\n */\nexport function compareByPlan(\n  a: { id: string; name: string },\n  b: { id: string; name: string },\n): number {\n  const freeDelta = Number(isFreeModel(b.id)) - Number(isFreeModel(a.id))\n  if (freeDelta !== 0) return freeDelta\n  const pa = PLAN_ORDER[KNOWN_PLANS[a.id] ?? ''] ?? Number.MAX_SAFE_INTEGER\n  const pb = PLAN_ORDER[KNOWN_PLANS[b.id] ?? ''] ?? Number.MAX_SAFE_INTEGER\n  if (pa !== pb) return pa - pb\n  const nameDiff = a.name.localeCompare(b.name)\n  if (nameDiff !== 0) return nameDiff\n  return a.id.localeCompare(b.id)\n}\n\n/**\n * Subscription plan table, synced from the official CLI bundle's plan maps\n * (located by the `\"individual-go\"` key in command-code@1.53.0 `dist/cli.mjs`,\n * re-verified unchanged through 1.53.0): subscription `planId`\n * prefix → display name and the plan's monthly credit total. This is the\n * account's own subscription (from `/alpha/billing/subscriptions`) — distinct\n * from {@link KNOWN_PLANS}, which maps catalog models to their minimum tier.\n *\n * `tierWeight` is plugin-added (not from the CLI maps): the plan's rank on\n * the {@link PLAN_ORDER} scale, used by the picker's plan filter\n * ({@link modelVisibleInPlan}) to hide models above the account's tier.\n */\nexport const KNOWN_SUBSCRIPTION_PLANS: Readonly<Record<string, { name: string; monthlyCredits: number; tierWeight: number }>> = {\n  'individual-go': { name: 'Go', monthlyCredits: 10, tierWeight: 0 },\n  'individual-goat': { name: 'GOAT', monthlyCredits: 70, tierWeight: 1 },\n  'individual-pro': { name: 'Pro', monthlyCredits: 30, tierWeight: 2 },\n  'individual-pro-v1': { name: 'Pro', monthlyCredits: 80, tierWeight: 2 },\n  'individual-provider': { name: 'Provider', monthlyCredits: 15, tierWeight: 3 },\n  'individual-max': { name: 'Max', monthlyCredits: 150, tierWeight: 4 },\n  'individual-ultra': { name: 'Ultra', monthlyCredits: 300, tierWeight: 4 },\n  'teams-pro': { name: 'Teams Pro', monthlyCredits: 40, tierWeight: 2 },\n}\n\n/** Plan-id prefixes, longest first — the CLI's prefix-match order. */\nconst SUBSCRIPTION_PLAN_PREFIXES = Object.keys(KNOWN_SUBSCRIPTION_PLANS).sort((a, b) => b.length - a.length)\n\n/**\n * Resolve a subscription `planId` (e.g. `individual-pro-v1`) to its display\n * name and monthly credit total, mirroring the CLI's `getPlanInfo`:\n * normalize (lowercase, `_` → `-`), then longest-prefix match so\n * `individual-pro-v1` wins over `individual-pro`. Unknown ids return\n * `undefined`.\n */\nexport function subscriptionPlanInfo(planId: string): { name: string; monthlyCredits: number; tierWeight: number } | undefined {\n  const normalized = planId.toLowerCase().replace(/_/g, '-')\n  const prefix = SUBSCRIPTION_PLAN_PREFIXES.find((candidate) => normalized.startsWith(candidate))\n  return prefix === undefined ? undefined : KNOWN_SUBSCRIPTION_PLANS[prefix]\n}\n\n/**\n * The billing facts the picker's plan filter needs, fetched by mirroring the\n * CLI's `createBilling` flow (whoami → orgId, then `/alpha/billing/subscriptions`\n * for the plan id and `/alpha/billing/credits` for the on-demand balances).\n */\nexport interface CommandCodeBillingAccess {\n  /** Account plan tier weight on the {@link PLAN_ORDER} scale; undefined when the plan is unknown. */\n  tierWeight: number | undefined\n  /**\n   * Purchased + free on-demand credit balance. The official access model\n   * (`evaluateModelAccess` in the CLI) allows every model when the account\n   * holds any on-demand credits — the plan gate only applies at zero balance.\n   */\n  onDemandCredits: number\n}\n\n/**\n * Whether the picker lists `modelId` for an account with the given billing\n * access. Fails open at every uncertainty: no billing data, an unknown plan,\n * a non-finite weight (corrupt billing fact), or a model outside\n * {@link KNOWN_PLANS} all keep the model visible — the server remains the\n * final gate (`403 MODEL_NOT_IN_PLAN`).\n */\nexport function modelVisibleInPlan(modelId: string, access: CommandCodeBillingAccess | undefined): boolean {\n  if (access === undefined) return true\n  if (access.onDemandCredits > 0) return true\n  if (access.tierWeight === undefined || !Number.isFinite(access.tierWeight)) return true\n  const tier = KNOWN_PLANS[modelId]\n  if (tier === undefined) return true\n  const weight = PLAN_ORDER[tier]\n  if (weight === undefined) return true\n  return weight <= access.tierWeight\n}\n\n/**\n * Active pricing deals per the official pricing page\n * (`/docs/resources/pricing-limits#deals`). Each entry records the model's\n * promotional label and — critically — when it expires, so the picker never\n * shows a stale discount after the plugin's snapshot has gone out of date.\n *\n * - `expiresAt` is an ISO timestamp. When it is in the past (checked at\n *   render time against `Date.now()`), the deal label is hidden until the\n *   snapshot is refreshed from the official page. `undefined` means\n *   \"no expiry\" (permanent).\n * - `free` marks models whose requests cost no credits (Laguna S 2.1), shown\n *   as a `FREE` badge; it degrades to a plain discount once the deal lapses.\n *\n * Keep in sync with the official pricing page when deals change (see the\n * dsh-commandcode-upstream skill).\n */\nexport interface KnownDeal {\n  /** Promotional label, e.g. \"50% off\" or \"2× usage\". */\n  label: string\n  /** Deal end date (ISO). `undefined` = permanent / no expiry. */\n  expiresAt?: string\n  /** Model is free (requests cost no credits). */\n  free?: boolean\n}\n\nexport const KNOWN_DEALS: Readonly<Record<string, KnownDeal>> = {\n  // Gemini 3.7 Flash's 50% off deal was retired from the official pricing\n  // page's #deals section (command-code@1.38.2 sync); the model now shows at\n  // full price.\n  'MiniMaxAI/MiniMax-M3': { label: '50% off' },\n  'xiaomi/mimo-v2.5-pro': { label: '99% off' },\n  'xiaomi/mimo-v2.5': { label: '98% off' },\n  // The MiniMax M3 / M2.7 FREE promo variants were retired in\n  // command-code@1.39.2 (\"Retire MiniMax free models\"): the official CLI hides\n  // them and the pricing page no longer lists them as free, so the free\n  // entries that shipped through 1.38.2 (with a 2026-09-05 expiry) are removed\n  // here rather than left to lapse on schedule. The paid MiniMax M3 / M2.7\n  // rows keep their own rates.\n  'poolside/laguna-s-2.1-free': { label: 'FREE', free: true },\n  // Meituan's LongCat 2.0 (command-code@1.42.0, \"LongCat 2.0 free model\") is\n  // 100% off while it lasts — a permanent-style deal (no fixed end date; the\n  // pricing page's DEAL block says \"Term: while it lasts\"). Free requests cost\n  // no credits on every plan, like Laguna S 2.1.\n  'meituan/LongCat-2.0:free': { label: 'FREE', free: true },\n  // Ling 3.0 Flash Sante (command-code@1.52.0) is free \"up to 100 requests a\n  // day\" while the promo lasts — a permanent-style deal (no fixed end date,\n  // like LongCat 2.0). Free requests cost no credits on every plan.\n  'inclusionai/ling-3.0-flash-sante:free': { label: 'FREE', free: true },\n}\n\n/**\n * Models with time-of-day (peak/off-peak) pricing, per the official pricing\n * page (`/docs/resources/pricing-limits`). Since 2026-08-16 16:00 UTC, DeepSeek\n * charges by the hour: peak hours are 01:00–04:00 and 06:00–10:00 UTC (7h per\n * weekday, full price) **Monday to Friday only**; the other 17 hours of a\n * weekday and every hour of Saturday/Sunday (UTC) are off-peak at half price.\n * The V4 Flash Vision (exp) variant (command-code@1.32.0) shares the V4 Flash\n * rates exactly — $0.15/$0.60 off-peak and $0.30/$1.20 peak, per the page's own\n * `timeOfDay` block, not merely 2× its own off-peak figures: a rate that is\n * internally consistent can still be the wrong row, which is why the vendored\n * price table (`./model-prices.ts`) is synced from the page and not hand-kept.\n * The picker shows the\n * *current* state as a compact\n * label (`Peak`/`Half`) matching the English noun style of the other markers\n * (`Image`, `FREE`), so a developer can tell at a glance whether calling the\n * model right now is cheap or expensive.\n *\n * Authoritative extraction: the pricing page embeds a model JSON array whose\n * hourly-priced entries carry a `timeOfDay` block\n * (`{ windows: \"01–04 & 06–10 UTC, Mon–Fri\", peakHoursPerDay: 7,\n * offPeakHoursPerDay: 17, peak: {...}, offPeak: {...} }`). Exactly four models\n * carry it: V4 Pro, V4 Flash, V4 Flash Vision (exp), and V4.1 Flash (added in\n * command-code@1.53.0 at $0.15/$0.60 off-peak, $0.30/$1.20 peak — the same\n * schedule as the other three).\n *\n * Extraction caution: the rendered HTML rows are a trap. Each annotation div\n * sits inside its OWN row's container, immediately before the NEXT row starts,\n * so flattening the page to text makes every annotation look like it belongs\n * to the model printed after it — that is how `deepseek/deepseek-v4-flash-fast`\n * was wrongly added here (its row is flat-priced at $0.28/$0.56/$0.07 and has\n * no `timeOfDay` block). Trust the embedded JSON's `timeOfDay` membership and\n * the 2× price relation, never the flat-text neighbor.\n *\n * Keep in sync with the official pricing page when the model set, the peak\n * windows, or the weekday rule change (see the dsh-commandcode-upstream skill).\n */\nexport const KNOWN_PEAK_PRICING: ReadonlySet<string> = new Set([\n  'deepseek/deepseek-v4-pro',\n  'deepseek/deepseek-v4-flash',\n  'deepseek/deepseek-v4-flash-vision-exp',\n  // command-code@1.53.0 added DeepSeek V4.1 Flash with the same `timeOfDay`\n  // block as the other DeepSeek models (off-peak $0.15/$0.60, peak\n  // $0.30/$1.20, 01–04 & 06–10 UTC Mon–Fri).\n  'deepseek/deepseek-v4.1-flash',\n])\n\n/**\n * Peak hours (UTC, hour-of-day range end-exclusive): 01–03 and 06–09.\n * Weekday-only — see `peakPricingState()`; weekends are fully off-peak.\n *\n * Exported because the vendored price table (`./model-prices.ts`) ships these\n * windows to the browser with the table itself: the composer prices a session\n * against the very schedule this snapshot knows rather than restating it, so\n * there is one place to update when the windows move.\n */\nexport const PEAK_HOUR_RANGES: ReadonlyArray<readonly [number, number]> = [\n  [1, 4],\n  [6, 10],\n]\n\n/**\n * Whether `now` (defaults to `Date.now()`) falls inside a peak-pricing window,\n * ignoring which model is asking. Peak rates apply Monday–Friday (UTC) only,\n * so a weekend timestamp is off-peak even inside {@link PEAK_HOUR_RANGES}.\n *\n * Model-independent on purpose: `peakPricingState()` adds the membership test\n * on top for the picker's label, while the price table selects peak rates from\n * a row's own `peak` block — so a model whose catalog id spelling differs from\n * the one in {@link KNOWN_PEAK_PRICING} still gets the right half of the day.\n */\nexport function isPeakPricingHour(now: number = Date.now()): boolean {\n  const at = new Date(now)\n  const day = at.getUTCDay()\n  if (day === 0 || day === 6) return false\n  const hour = at.getUTCHours()\n  return PEAK_HOUR_RANGES.some(([start, end]) => hour >= start && hour < end)\n}\n\n/**\n * Whether `now` (defaults to `Date.now()`) falls in a peak-pricing window for\n * time-of-day-priced models. Peak rates apply Monday–Friday (UTC) only: the\n * official rule charges Saturday and Sunday completely off-peak for all 24\n * hours, so a weekend timestamp is off-peak even inside `PEAK_HOUR_RANGES`.\n * `undefined` for models outside the snapshot.\n */\nexport function peakPricingState(\n  modelId: string,\n  now: number = Date.now(),\n): 'peak' | 'off-peak' | undefined {\n  if (!KNOWN_PEAK_PRICING.has(modelId)) return undefined\n  return isPeakPricingHour(now) ? 'peak' : 'off-peak'\n}\n\n/**\n * Compact label for the current peak/off-peak state: `Peak` (full price) or\n * `Half` (off-peak, half price). These English nouns match the picker's other\n * markers (`Go`, `Image`, `FREE`), and since they appear only on time-of-day\n * priced models they double as a \"priced by the hour\" signal. Returns undefined\n * for models without time-of-day pricing.\n */\nexport function peakPricingLabel(\n  modelId: string,\n  now: number = Date.now(),\n): string | undefined {\n  const state = peakPricingState(modelId, now)\n  if (state === undefined) return undefined\n  return state === 'peak' ? 'Peak' : 'Half'\n}\n\n// ---------------------------------------------------------------------------\n// Snapshot read helpers (kept with the tables: a model/plan/deal sync must\n// never touch src/adapter.ts)\n// ---------------------------------------------------------------------------\n/**\n * Official display label for a model's minimum plan, or undefined for models\n * outside the snapshot (e.g. future catalog additions).\n */\nexport function planLabel(modelId: string): string | undefined {\n  const plan = KNOWN_PLANS[modelId]\n  return plan === undefined ? undefined : PLAN_LABELS[plan]\n}\n\n/**\n * The active deal label for a model, or undefined when the model has no deal\n * or the deal has expired. Expiry is judged against `now` (defaults to\n * `Date.now()`), so a snapshot that has gone stale stops showing its discount\n * the moment the official end date passes — the user never believes a lapsed\n * deal is still live. Permanent deals (no `expiresAt`) never lapse.\n */\nexport function dealLabel(modelId: string, now: number = Date.now()): string | undefined {\n  const deal = KNOWN_DEALS[modelId]\n  if (deal === undefined) return undefined\n  if (deal.expiresAt !== undefined && now >= Date.parse(deal.expiresAt)) return undefined\n  return deal.label\n}\n\n/**\n * Compact human-readable context window, e.g. `1_000_000 -> \"1M\"`,\n * `256_000 -> \"256K\"`, `262_144 -> \"262K\"` (floor to the nearest K).\n * Returns undefined for unknown/absent sizes; values under 1K render raw.\n */\nexport function formatContext(contextWindow: number | undefined): string | undefined {\n  if (contextWindow === undefined || !Number.isFinite(contextWindow) || contextWindow <= 0) {\n    return undefined\n  }\n  if (contextWindow >= 1_000_000) {\n    const m = contextWindow / 1_000_000\n    // Round to one decimal only when it adds information: 1_048_576 -> \"1M\",\n    // 1_050_000 -> \"1.1M\".\n    const rounded = Math.round(m * 10) / 10\n    return `${Number.isInteger(rounded) ? rounded : rounded.toFixed(1)}M`\n  }\n  if (contextWindow < 1_000) return String(Math.floor(contextWindow))\n  return `${Math.floor(contextWindow / 1_000)}K`\n}\n\n/**\n * Compact one-line summary for the model picker: plan tier, then any active\n * deal (discount or FREE), then the current peak/off-peak state (`Peak`/`Half`)\n * for time-of-day-priced models, then `Image` for Vision-capable models, then\n * the context window. Text-only models simply omit the Image marker — \"Text\n * only\" adds nothing the picker needs to show.\n */\nexport function capabilityDescription(\n  modelId: string,\n  contextWindow?: number,\n  now: number = Date.now(),\n): string {\n  const parts: string[] = []\n  const plan = planLabel(modelId)\n  if (plan !== undefined) parts.push(plan)\n  const deal = dealLabel(modelId, now)\n  if (deal !== undefined) parts.push(deal)\n  const peak = peakPricingLabel(modelId, now)\n  if (peak !== undefined) parts.push(peak)\n  if (KNOWN_IMAGE_MODELS.has(modelId)) parts.push('Image')\n  const ctx = formatContext(contextWindow)\n  if (ctx !== undefined) parts.push(ctx)\n  return parts.join(' · ')\n}\n","/**\n * Vendored Command Code model prices: the per-token rates the official\n * pricing page publishes, which is what lets the composer price a session in\n * dollars.\n *\n * Source: the model array embedded in\n * https://commandcode.ai/docs/resources/pricing-limits, read out of its\n * Next.js flight payload. That payload is the only place the `timeOfDay` and\n * `contextTiers` blocks exist, so it is what the generator parses — but it is\n * NOT trusted on its own: the generator also reads the page's rendered table\n * and reports any rate where the two disagree. A figure can be internally\n * consistent and still be the wrong row (this table once carried\n * `0.22 → 0.44` for a model the page prices `0.15 → 0.30` — exactly the 2× the\n * peak/off-peak rule promises), so the cross-check exists to catch that class\n * of error rather than to restate the invariant. Every figure is USD per\n * 1,000,000 tokens, which the page confirms itself: its Go-plan estimate for\n * DeepSeek V4 Flash (800 in / 200 out on a $10 budget) resolves to the ~42K\n * requests the page states, and ~26K once its typical 50K cache reads are\n * priced at the cacheRead rate.\n *\n * Three buckets are always published (inputCost, outputCost, cacheReadCost);\n * cacheWriteCost is published for a minority of models. A model without the\n * key has UNPRICED cache-write tokens: never invent a multiplier for them, and\n * never fold them into the input rate. A published `0` is a different fact and\n * is kept as a real zero — see the note on the GPT rows below.\n *\n * Time-of-day models store a `peak` triplet only. The page repeats the flat\n * rates inside its own offPeak block, so the top-level rates ARE the off-peak\n * rates and only the peak override is worth keeping — the generator asserts\n * that equality and refuses to emit otherwise. Whether \"now\" counts as peak is\n * decided by `isPeakPricingHour()` in ./capabilities.ts, on the same\n * Monday-Friday UTC schedule the model picker labels.\n *\n * Context-tiered models carry every band, with inclusive prompt-token bounds\n * and an unbounded final band. The durable cost projection selects each\n * request's band from its input/cache buckets, never from session totals.\n *\n * Do not hand-edit the table below: run `node scripts/sync-model-prices.mjs`,\n * which re-reads the page, asserts the structure and the off-peak equality,\n * prints cross-check warnings for a human, and rewrites\n * only the rows. `--check` reports drift without writing (exit 1 on drift,\n * exit 2 when the page could not be read, so a network failure never reads as\n * \"up to date\"). Everything else in this file — this doc, the types, the slug\n * rules, the table builder — is written by hand and survives that rewrite.\n *\n * @module dsh-commandcode-provider/model-prices\n */\n\nimport type { CommandCodeModelPrice, CommandCodeModelRates, CommandCodePriceTable } from './usage-wire.ts'\nimport { KNOWN_PLANS, PEAK_HOUR_RANGES, isFreeModel } from './capabilities.ts'\n\n/**\n * One pricing-page row. `rates` is `[input, output, cacheRead, cacheWrite?]`\n * and `peak` is the `[input, output, cacheRead]` triplet charged inside the\n * peak windows. All figures are USD per 1,000,000 tokens.\n */\ninterface ModelPriceRow {\n  readonly id: string\n  readonly rates: readonly number[]\n  readonly peak?: readonly number[]\n  readonly contextTiers?: readonly { maxContext?: number; rates: readonly number[] }[]\n}\n\n/**\n * Every price row the page publishes, ordered by its own slug.\n *\n * Note on the GPT rows: `gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini` and\n * `gpt-5.5` carry a LITERAL `cacheWriteCost: 0` — a different fact from a\n * missing key, because `ratesOf()` keeps it and the readout then charges\n * cache writes at zero instead of reporting them unpriced. That is what the\n * page's JSON says; its rendered column shows `—` for exactly these four while\n * rendering a genuine zero as `$0.00` elsewhere, so the page contradicts\n * itself. The table stays faithful to the machine-readable source and the\n * discrepancy is recorded in AGENTS.md rather than papered over here.\n */\nconst MODEL_PRICE_ROWS: readonly ModelPriceRow[] = [\n  { id: 'claude-fable-5', rates: [10, 50, 1, 12.5] },\n  { id: 'claude-fable-5-1', rates: [10, 50, 0.25, 12.5] },\n  { id: 'claude-haiku-4-5', rates: [1, 5, 0.1, 1.25] },\n  { id: 'claude-opus-4-6', rates: [5, 25, 0.5, 6.25] },\n  { id: 'claude-opus-4-7', rates: [5, 25, 0.5, 6.25] },\n  { id: 'claude-opus-4-8', rates: [5, 25, 0.5, 6.25] },\n  { id: 'claude-opus-5', rates: [5, 25, 0.5, 6.25] },\n  { id: 'claude-sonnet-4-6', rates: [3, 15, 0.3, 3.75] },\n  { id: 'claude-sonnet-5', rates: [2, 10, 0.2, 2.5] },\n  { id: 'deepseek-v4-flash', rates: [0.15, 0.6, 0.003], peak: [0.3, 1.2, 0.006] },\n  { id: 'deepseek-v4-flash-fast', rates: [0.28, 0.56, 0.07] },\n  { id: 'deepseek-v4-flash-vision-exp', rates: [0.15, 0.6, 0.003], peak: [0.3, 1.2, 0.006] },\n  { id: 'deepseek-v4-pro', rates: [0.66, 1.98, 0.022], peak: [1.32, 3.96, 0.044] },\n  { id: 'deepseek-v4.1-flash', rates: [0.15, 0.6, 0.003], peak: [0.3, 1.2, 0.006] },\n  { id: 'fugu-ultra', rates: [5, 30, 0.5] },\n  { id: 'gemini-3.1-flash-lite', rates: [0.25, 1.5, 0.03] },\n  { id: 'gemini-3.5-flash', rates: [1.5, 9, 0.15] },\n  { id: 'gemini-3.5-flash-lite', rates: [0.3, 2.5, 0.03] },\n  { id: 'gemini-3.6-flash', rates: [1.5, 7.5, 0.15] },\n  { id: 'gemini-3.7-flash', rates: [1.5, 7.5, 0.15, 0.08334] },\n  { id: 'gemini-3.8-flash', rates: [1.5, 7.5, 0.15] },\n  { id: 'glm-5', rates: [1, 3.2, 0.2] },\n  { id: 'glm-5.1', rates: [1.4, 4.4, 0.26] },\n  { id: 'glm-5.2', rates: [1.4, 4.4, 0.26] },\n  { id: 'glm-5.2-fast', rates: [3, 10.25, 0.5] },\n  { id: 'glm-5.3', rates: [1.4, 4.4, 0.26] },\n  { id: 'glm-5.3-flash', rates: [0.15, 0.5, 0.03] },\n  { id: 'gpt-5.3-codex', rates: [2, 8, 0.5, 0] },\n  { id: 'gpt-5.4', rates: [2.5, 15, 0.25, 0] },\n  { id: 'gpt-5.4-mini', rates: [0.75, 4.5, 0.075, 0] },\n  { id: 'gpt-5.5', rates: [5, 30, 0.5, 0] },\n  { id: 'gpt-5.6-luna', rates: [0.2, 1.2, 0.02, 0.25], contextTiers: [{\"maxContext\":272000,\"rates\":[0.2,1.2,0.02,0.25]},{\"rates\":[0.4,1.8,0.04,0.5]}] },\n  { id: 'gpt-5.6-sol', rates: [5, 30, 0.5, 6.25], contextTiers: [{\"maxContext\":272000,\"rates\":[5,30,0.5,6.25]},{\"rates\":[10,45,1,12.5]}] },\n  { id: 'gpt-5.6-terra', rates: [2, 12, 0.2, 2.5], contextTiers: [{\"maxContext\":272000,\"rates\":[2,12,0.2,2.5]},{\"rates\":[4,18,0.4,5]}] },\n  { id: 'gpt-6-astra', rates: [10, 50, 1, 12.5], contextTiers: [{\"maxContext\":272000,\"rates\":[10,50,1,12.5]},{\"rates\":[20,75,2,25]}] },\n  { id: 'grok-4.5', rates: [2, 6, 0.5] },\n  { id: 'grok-4.6', rates: [2, 6, 0.5], contextTiers: [{\"maxContext\":200000,\"rates\":[2,6,0.5]},{\"rates\":[4,12,1]}] },\n  { id: 'inkling', rates: [1, 4.05, 0.17] },\n  { id: 'inkling-small', rates: [0.5, 1.2, 0.1] },\n  { id: 'kimi-k2.5', rates: [0.6, 3, 0.1] },\n  { id: 'kimi-k2.6', rates: [0.95, 4, 0.16] },\n  { id: 'kimi-k2.7-code', rates: [0.95, 4, 0.19] },\n  { id: 'kimi-k2.7-code-highspeed', rates: [1.9, 8, 0.38] },\n  { id: 'kimi-k3', rates: [3, 15, 0.3] },\n  { id: 'mimo-v2.5', rates: [0.14, 0.28, 0.0028] },\n  { id: 'mimo-v2.5-pro', rates: [0.435, 0.87, 0.0036] },\n  { id: 'minimax-m2.5', rates: [0.3, 1.2, 0.03] },\n  { id: 'minimax-m2.7', rates: [0.3, 1.2, 0.06] },\n  { id: 'minimax-m3', rates: [0.3, 1.2, 0.06] },\n  { id: 'muse-spark-1.1', rates: [1.25, 4.25, 0.15] },\n  { id: 'muse-spark-1.2', rates: [1.25, 4.25, 0.15] },\n  { id: 'muse-spark-1.2-contributor', rates: [0.1, 0.2, 0.002] },\n  { id: 'muse-spark-1.3', rates: [1.25, 4.25, 0.15] },\n  { id: 'muse-spark-1.3-contributor', rates: [0.1, 0.2, 0.002] },\n  { id: 'nemotron-3-ultra', rates: [0.6, 2.4, 0.12] },\n  { id: 'qwen-3.6-max', rates: [1.3, 7.8, 0.26, 1.63] },\n  { id: 'qwen-3.6-plus', rates: [0.5, 3, 0.1], contextTiers: [{\"maxContext\":256000,\"rates\":[0.5,3,0.1]},{\"rates\":[2,6,0.2]}] },\n  { id: 'qwen-3.7-flash', rates: [0.03, 0.13, 0.006, 0.038], contextTiers: [{\"maxContext\":32000,\"rates\":[0.03,0.13,0.006,0.038]},{\"maxContext\":256000,\"rates\":[0.1,0.4,0.02,0.125]},{\"rates\":[0.2,0.8,0.04,0.25]}] },\n  { id: 'qwen-3.7-max', rates: [2.5, 7.5, 0.5, 3.13] },\n  { id: 'qwen-3.7-plus', rates: [0.4, 1.6, 0.08, 0.5], contextTiers: [{\"maxContext\":256000,\"rates\":[0.4,1.6,0.08,0.5]},{\"rates\":[1.2,4.8,0.24,1.5]}] },\n  { id: 'qwen-3.8-27b', rates: [0.4, 3, 0.04] },\n  { id: 'qwen-3.8-flash', rates: [0.16, 0.47, 0.016] },\n  { id: 'qwen-3.8-max', rates: [2, 6, 0.25, 2.5] },\n  { id: 'qwen-3.8-max-0902', rates: [2, 6, 0.25] },\n  { id: 'step-3.5-flash', rates: [0.1, 0.3, 0.02] },\n  { id: 'step-3.7-flash', rates: [0.2, 1.15, 0.04] },\n  { id: 'tencent/hy3-paid', rates: [0.14, 0.58, 0.035] },\n  { id: 'tencent/hy4-preview', rates: [0.834, 2.501, 0.042] },\n]\n\n/**\n * Catalog ids no candidate rule can reach, because the page names the model\n * differently from the catalog. `tests/model-prices.test.ts` fails whenever a\n * catalog model has no price, so a new miss lands here as a visible decision\n * rather than a silently unpriced model.\n */\nconst PRICE_SLUG_OVERRIDES: Readonly<Record<string, string>> = {\n  // The page lists it by its short name; the catalog carries the full one.\n  'nvidia/nemotron-3-ultra-550b-a55b': 'nemotron-3-ultra',\n}\n\n/**\n * Plausible price slugs for one catalog model id, most specific first.\n *\n * The page normalizes to lowercase and usually drops the vendor segment, but\n * not consistently: `tencent/hy4-preview` keeps its prefix while\n * `Qwen/Qwen3.8-Max-0902` becomes `qwen-3.8-max-0902`, with a hyphen the\n * catalog id does not have. Generating candidates and taking the first that\n * exists in the vendored table absorbs that drift without a hand-maintained\n * map of seventy ids.\n */\nfunction priceSlugCandidates(modelId: string): string[] {\n  const lower = modelId.toLowerCase()\n  const bare = lower.includes('/') ? lower.slice(lower.indexOf('/') + 1) : lower\n  const out = new Set<string>()\n  const add = (slug: string): void => {\n    const hyphenated = slug.replace(/^([a-z]+)(\\d)/, '$1-$2')\n    out.add(slug)\n    out.add(hyphenated)\n    out.add(slug.replace(/-\\d{8}$/, ''))\n    out.add(slug.replace(/-(preview|latest)$/, ''))\n    out.add(hyphenated.replace(/-\\d{8}$/, ''))\n    out.add(hyphenated.replace(/-(preview|latest)$/, ''))\n  }\n  add(lower)\n  add(bare)\n  return [...out]\n}\n\n/** The pricing-page slug for one catalog model id, or undefined when unpriced. */\nfunction priceSlugFor(modelId: string, known: ReadonlySet<string>): string | undefined {\n  const override = PRICE_SLUG_OVERRIDES[modelId]\n  if (override !== undefined) return known.has(override) ? override : undefined\n  return priceSlugCandidates(modelId).find((slug) => known.has(slug))\n}\n\n/** Split a stored triplet/quadruplet into the wire rate shape. */\nfunction ratesOf(values: readonly number[]): CommandCodeModelRates {\n  // Indexed access is asserted rather than defaulted: the generator above only\n  // ever emits rows with the three published rates, so a short row is a broken\n  // table and must not silently become a free model.\n  const rates: CommandCodeModelRates = {\n    inputCost: values[0]!,\n    outputCost: values[1]!,\n    cacheReadCost: values[2]!,\n  }\n  if (values[3] !== undefined) rates.cacheWriteCost = values[3]\n  return rates\n}\n\n/** Build the full price row the browser prices a session with. */\nfunction wireRow(id: string, slug: string, row: ModelPriceRow): CommandCodeModelPrice {\n  const price: CommandCodeModelPrice = { id, slug, ...ratesOf(row.rates) }\n  if (row.peak !== undefined) price.peak = ratesOf(row.peak)\n  if (row.contextTiers !== undefined) price.contextTiers = row.contextTiers.map(tier => ({\n    ...ratesOf(tier.rates), ...(tier.maxContext === undefined ? {} : { maxContext: tier.maxContext }),\n  }))\n  return price\n}\n\n/**\n * Build the table the composer prices a session with.\n *\n * Rows are keyed by CATALOG id wherever the two namespaces reconcile, because\n * that is what a session reports, and every row also carries its page slug as a\n * second lookup key. Price rows no catalog model claims are served under the\n * slug alone, so drift in either direction still prices: a page rename the\n * catalog has not followed, or a model the catalog snapshot has not learned\n * yet. Free models are served explicitly at zero so the composer can say so\n * instead of showing nothing.\n *\n * The peak windows travel with the table, so the browser applies the very\n * schedule this snapshot knows instead of restating it.\n */\nexport function modelPriceTable(): CommandCodePriceTable {\n  const bySlug = new Map(MODEL_PRICE_ROWS.map((row) => [row.id, row]))\n  const known = new Set(bySlug.keys())\n  const models: CommandCodeModelPrice[] = []\n  const claimed = new Set<string>()\n\n  for (const catalogId of Object.keys(KNOWN_PLANS)) {\n    if (isFreeModel(catalogId) || catalogId.endsWith(':free')) {\n      models.push({ id: catalogId, slug: catalogId, inputCost: 0, outputCost: 0, cacheReadCost: 0, free: true })\n      continue\n    }\n    const slug = priceSlugFor(catalogId, known)\n    if (slug === undefined) continue\n    const row = bySlug.get(slug)\n    if (row === undefined) continue\n    claimed.add(slug)\n    models.push(wireRow(catalogId, slug, row))\n  }\n\n  for (const row of MODEL_PRICE_ROWS) {\n    if (claimed.has(row.id)) continue\n    models.push(wireRow(row.id, row.id, row))\n  }\n\n  return {\n    models,\n    peakHours: PEAK_HOUR_RANGES.map(([start, end]) => [start, end] as [number, number]),\n  }\n}\n\n","/** Shared, JSON-only billing facts. No Host or browser runtime imports. */\nimport type { CommandCodeModelPrice, CommandCodeModelRates, CommandCodePriceTable } from './usage-wire.ts'\n\nexport interface CostTokens {\n  uncachedInputTokens: number\n  outputTokens: number\n  cacheReadTokens: number\n  cacheWriteTokens: number\n}\n\n/** Requests with identical model/rates are folded into one group. */\nexport interface CostUsageGroup {\n  provider: string\n  model: string\n  at: number | null\n  contextTokens: number\n  tokens: CostTokens\n}\n\nexport interface SessionCostFacts {\n  pricingKey: number\n  groups: CostUsageGroup[]\n}\n\nexport const zeroCostTokens = (): CostTokens => ({ uncachedInputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 })\nexport const COST_TOKEN_KEYS = ['uncachedInputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens'] as const\n\nexport function peakHour(at: number, windows: ReadonlyArray<readonly [number, number]>): boolean {\n  const time = new Date(at)\n  return time.getUTCDay() !== 0 && time.getUTCDay() !== 6\n    && windows.some(([start, end]) => time.getUTCHours() >= start && time.getUTCHours() < end)\n}\n\n/**\n * All prompt billing buckets determine a request's band, never cumulative session input.\n *\n * A tiered model returns the matching band and does NOT then apply `peak`: the\n * page publishes those two dimensions independently, no row carries both today,\n * and the generator would report a tiered row on every sync — so the combination\n * becoming real is visible before it reaches a user. This ordering is a latent\n * choice, not a verified upstream rule.\n */\nexport function requestRates(price: CommandCodeModelPrice, at: number | null, contextTokens: number, table: CommandCodePriceTable): CommandCodeModelRates {\n  // The first band whose bound accepts the prompt. ORDER IS LOAD-BEARING, and\n  // both producers enforce it: the generator refuses non-ascending bounds or a\n  // bounded last band, and the wire parser rejects the same shapes — so a\n  // conforming table cannot present bands out of order, and this `find` cannot\n  // select a band a later one should have won.\n  const tier = price.contextTiers?.find(tier => tier.maxContext === undefined || contextTokens <= tier.maxContext)\n  if (tier !== undefined) return tier\n  return price.peak !== undefined && at !== null && peakHour(at, table.peakHours) ? price.peak : price\n}\n\n/** Cache version and wire guard: changing bands/rates must refold historical groups. */\nexport function pricingKey(table: CommandCodePriceTable): number {\n  const rates = (r: CommandCodeModelRates) => [r.inputCost, r.outputCost, r.cacheReadCost, r.cacheWriteCost ?? null]\n  const canonical = JSON.stringify(['commandCodeCost-v1', table.peakHours, table.models.map(p => [p.id, p.slug, p.free === true, rates(p), p.peak ? rates(p.peak) : null, p.contextTiers?.map(t => [t.maxContext ?? null, rates(t)]) ?? null])])\n  let hash = 2166136261\n  for (const c of canonical) hash = Math.imul(hash ^ c.charCodeAt(0), 16777619) >>> 0\n  return hash\n}\n\n/** Only safe to merge requests whose billing classification is identical. */\nexport function costGroupKey(group: CostUsageGroup, table: CommandCodePriceTable): string {\n  const price = table.models.find(p => p.id === group.model || p.slug === group.model)\n  return JSON.stringify([group.provider, group.model, price === undefined ? null : requestRates(price, group.at, group.contextTokens, table), group.at === null])\n}\n","/** Durable cost facts: mirrors token-meter's replacement/retry rules across v1/v2 logs. */\nimport type { Context } from '@deepseek-ai/cordis'\nimport { modelPriceTable } from './model-prices.ts'\nimport { COST_TOKEN_KEYS, costGroupKey, pricingKey, zeroCostTokens, type CostTokens, type CostUsageGroup, type SessionCostFacts } from './cost-facts.ts'\n\ninterface CostState {\n  selection: { provider: string; model: string } | null\n  at: number | null\n  last: { turn: number; step: number; group: CostUsageGroup } | null\n  facts: SessionCostFacts\n}\ninterface LogEvent { type: string; time: number; data: unknown }\nconst record = (v: unknown): Record<string, unknown> | undefined => typeof v === 'object' && v !== null && !Array.isArray(v) ? v as Record<string, unknown> : undefined\nconst finite = (v: unknown): v is number => typeof v === 'number' && Number.isFinite(v) && v >= 0\n\nfunction tokensOf(value: unknown): CostTokens | undefined {\n  const u = record(value)\n  if (!u || !finite(u.inputTokens) || !finite(u.outputTokens)) return undefined\n  if (u.cacheReadTokens !== undefined && !finite(u.cacheReadTokens) || u.cacheWriteTokens !== undefined && !finite(u.cacheWriteTokens)) return undefined\n  return { uncachedInputTokens: u.inputTokens, outputTokens: u.outputTokens, cacheReadTokens: u.cacheReadTokens as number ?? 0, cacheWriteTokens: u.cacheWriteTokens as number ?? 0 }\n}\n\n/** Current v2 settlements store the last usage in their stream; v1 stores chunk events. */\nfunction usageOf(type: string, data: Record<string, unknown>): CostTokens | undefined {\n  if (type === 'assistant/chunk') {\n    const chunk = record(data.chunk)\n    return chunk?.type === 'usage' ? tokensOf(chunk.usage) : undefined\n  }\n  if (type !== 'assistant/message' && type !== 'assistant/attempt') return undefined\n  const direct = tokensOf(data.usage)\n  if (direct !== undefined) return direct\n  if (!Array.isArray(data.stream)) return undefined\n  for (let i = data.stream.length - 1; i >= 0; i--) {\n    const item = record(data.stream[i])\n    const chunk = item?.type === 'chunk' ? record(item.chunk) : undefined\n    if (chunk?.type === 'usage') return tokensOf(chunk.usage)\n  }\n  return undefined\n}\n\nfunction parseState(value: unknown): CostState {\n  const s = record(value), facts = record(s?.facts)\n  if (!s || !facts || !finite(facts.pricingKey) || !Array.isArray(facts.groups)) throw new TypeError('invalid commandCodeCost state')\n  const group = (v: unknown): boolean => {\n    const g = record(v), t = record(g?.tokens)\n    return !!g && typeof g.provider === 'string' && typeof g.model === 'string' && (g.at === null || finite(g.at)) && finite(g.contextTokens) && !!t && COST_TOKEN_KEYS.every(k => finite(t[k]))\n  }\n  const sel = record(s.selection), last = record(s.last)\n  if (!(s.selection === null || sel && typeof sel.provider === 'string' && typeof sel.model === 'string')\n    || !(s.at === null || finite(s.at)) || !facts.groups.every(group)\n    || !(s.last === null || last && finite(last.turn) && finite(last.step) && group(last.group))) throw new TypeError('invalid commandCodeCost state')\n  return value as CostState\n}\n\n/** Optional registry uses only synchronous parse/view; no new runtime module is required. */\nexport function createCostProjection(table = modelPriceTable()) {\n  const version = pricingKey(table)\n  return {\n    key: 'commandCodeCost', stateVersion: version,\n    stateSchema: { parse: parseState },\n    init: (): CostState => ({ selection: null, at: null, last: null, facts: { pricingKey: version, groups: [] } }),\n    apply(state: CostState, event: LogEvent): CostState {\n      const data = record(event.data)\n      if (!data) return state\n      if (event.type === 'request/header') {\n        const config = record(record(data.header)?.config)\n        return { ...state, selection: config && typeof config.provider === 'string' && typeof config.model === 'string' ? { provider: config.provider, model: config.model } : null }\n      }\n      if (event.type === 'step/start' || event.type === 'llm/retry-started') return { ...state, at: finite(event.time) ? event.time : null, last: null }\n      const tokens = usageOf(event.type, data)\n      if (tokens === undefined || !finite(data.turn) || !finite(data.step)) return state\n      const previous = state.last?.turn === data.turn && state.last.step === data.step ? state.last.group : undefined\n      const group: CostUsageGroup = { provider: state.selection?.provider ?? '', model: state.selection?.model ?? '', at: state.at, contextTokens: tokens.uncachedInputTokens + tokens.cacheReadTokens + tokens.cacheWriteTokens, tokens }\n      if (previous && JSON.stringify(previous) === JSON.stringify(group)) return state\n      const groups = state.facts.groups.map(g => ({ ...g, tokens: { ...g.tokens } }))\n      if (previous) {\n        const old = groups.find(g => costGroupKey(g, table) === costGroupKey(previous, table))\n        if (old) for (const k of COST_TOKEN_KEYS) old.tokens[k] -= previous.tokens[k]\n      }\n      let target = groups.find(g => costGroupKey(g, table) === costGroupKey(group, table))\n      if (!target) { target = { ...group, tokens: zeroCostTokens() }; groups.push(target) }\n      for (const k of COST_TOKEN_KEYS) target.tokens[k] += tokens[k]\n      return { ...state, last: { turn: data.turn, step: data.step, group }, facts: { pricingKey: version, groups: groups.filter(g => COST_TOKEN_KEYS.some(k => g.tokens[k] > 0)) } }\n    },\n    wire: {\n      view: (state: CostState) => state.facts,\n      viewSchema: { parse(value: unknown): SessionCostFacts { return parseState({ selection: null, at: null, last: null, facts: value }).facts } },\n    },\n  }\n}\n\nexport function installCostProjection(ctx: Context): void {\n  ctx.inject(['sessionProjections'], c => {\n    const registry = c.get('sessionProjections') as { register(definition: ReturnType<typeof createCostProjection>): () => void } | undefined\n    if (typeof registry?.register === 'function') c.effect(() => registry.register(createCostProjection()), 'commandcode cost projection')\n  })\n}\n","/**\n * Multi-account pool for the Command Code provider (host side).\n *\n * One Command Code subscription (e.g. the Go plan's 5-hour window) is\n * metered; a user with several subscriptions wants a request that hits one\n * account's limit to continue on the next account without a visible failure.\n * This module owns that rotation:\n *\n *   - {@link CommandCodeAccountPool.resolveKey} hands out the first account\n *     whose key is not currently marked exhausted — or, when the request's\n *     model matches a {@link CommandCodeModelAccountRule} and that account is\n *     usable, the routed account — resolving each slot's key lazily (literal\n *     config key → credential seam → launch environment → the official CLI\n *     auth file for the default slot only).\n *   - {@link CommandCodeAccountPool.markRejected} records a 429 (rate limit,\n *     window unknown) or 401 (invalid key, disabled until the config changes)\n *     against the exact API key, so several slots sharing one key share one\n *     state.\n *   - When every account is marked, the pool probes each key's\n *     `/alpha/billing/credits` window limits (through the injected\n *     {@link CommandCodeAccountPoolDeps.probeWindow}): an account whose window\n *     no longer reports `exceeded` is revived, otherwise the pool throws a\n *     `RATE_LIMIT` error naming the earliest reset time.\n *\n * The pool is deliberately cordis-free (like the adapter): every host fact\n * arrives through injected thunks, so node tests can drive it directly.\n *\n * @module dsh-commandcode-provider/accounts\n */\n\nimport { LlmError } from '@deepseek-ai/dsh-llm'\nimport type { CredentialRef } from '@deepseek-ai/dsh-credentials'\n\n/**\n * Upper bound on the retry wait this pool attaches to the all-exhausted\n * `RATE_LIMIT` error. Must equal the `backoff.maxDelayMs` in the adapter's\n * `providerRetryPolicy` (which imports it from here): dsh-llm-retry honors a\n * provider-specified wait verbatim only at or below that cap — in normal mode\n * a LONGER attached wait makes the executor abandon the retry entirely\n * instead of falling back to local backoff, which would turn \"poll until the\n * window opens\" into \"fail now\".\n */\nexport const RETRY_MAX_DELAY_MS = 900_000\n\n/** One extra account's raw configuration (composition config or settings). */\nexport interface CommandCodeAccountConfig {\n  /** Display label shown in the usage dashboard and settings page. */\n  label?: string\n  /** Credential reference (environment-variable style name) holding this account's API key. */\n  apiKeyEnv?: string\n  /** Literal API key (composition config only; never stored in settings). */\n  apiKey?: string\n}\n\n/** One account slot after config normalization. */\nexport interface CommandCodeAccountSlot {\n  /** Stable id: `default` for the implicit first account, `account-N` for extras. */\n  id: string\n  /** Display label (user-provided or generated). */\n  label: string\n  /** Credential reference resolved through the seam; undefined for literal-only slots. */\n  ref?: CredentialRef | undefined\n  /** Literal key from composition config. */\n  literal?: string | undefined\n  /** Whether the official CLI auth file may back this slot (default slot only). */\n  allowAuthFile: boolean\n}\n\n/** Why a key stopped serving requests. */\nexport type AccountRejection = 'rate-limit' | 'invalid-credential'\n\n/** One key's rotation state. */\nexport interface CommandCodeAccountState {\n  kind:\n    /** Marked by a 429; the window's reset time is unknown until probed. */\n    | 'unknown'\n    /** Probed (or marked with a known reset): unusable until `until` (millis). */\n    | 'cooldown'\n    /** Marked by a 401: skipped until the stored credential changes. */\n    | 'disabled'\n  /** Human-readable reason for the mark (e.g. `rate limited (429)`). */\n  reason: string\n  /** Cooldown end in millis; 0 for the other kinds. */\n  until: number\n}\n\n/** A slot paired with its resolved key (both pool-internal and UI-facing). */\nexport interface ResolvedAccount {\n  slot: CommandCodeAccountSlot\n  key: string\n  /** The key's current rotation state; undefined means usable. */\n  state: CommandCodeAccountState | undefined\n}\n\n/** Five-hour window facts probed from `/alpha/billing/credits`. */\nexport interface FiveHourWindowProbe {\n  exceeded: boolean\n  resetAt: number\n}\n\n/** Everything the pool needs from the host; all seams are injected. */\nexport interface CommandCodeAccountPoolDeps {\n  /** The current account slots, re-read per resolution so settings changes apply live. */\n  slots(): readonly CommandCodeAccountSlot[]\n  /** Resolve one credential reference through the credentials service or the launch environment. */\n  resolveRef(ref: CredentialRef): Promise<string | undefined>\n  /** The official CLI auth-file key (`~/.commandcode/auth.json`); default slot only. */\n  authFileKey(): string | undefined\n  /** Probe one key's five-hour window; undefined when the probe itself failed. */\n  probeWindow(apiKey: string): Promise<FiveHourWindowProbe | undefined>\n  /**\n   * The manually selected account (a slot id, e.g. `default` or an extra's\n   * credential reference), re-read per resolution. The preferred account\n   * serves whenever it is usable; an unknown id or an exhausted preferred\n   * account falls back to the first usable slot.\n   */\n  preferredId?(): string | undefined\n  /**\n   * Model → account routing rules, re-read per resolution so settings changes\n   * apply live. Each rule lists catalog model ids (see\n   * {@link CommandCodeModelAccountRule}) to an account slot id. When the\n   * request's model matches a rule and that account is usable, it serves\n   * before the preferred/rotation selection; an unusable routed account falls\n   * back to the normal selection (the router is a hint, never a hard gate).\n   */\n  modelAccountRules?(): readonly CommandCodeModelAccountRule[]\n}\n\n/**\n * One \"route these models to that account\" rule. `models` lists catalog ids\n * (`deepseek/deepseek-v4-pro`, …); `account` is a slot id (`default` or an\n * extra account's credential reference). A request whose model id is in the\n * list routes to that account. The first matching rule in list order wins.\n */\nexport interface CommandCodeModelAccountRule {\n  /** Catalog model ids to match against the request's model. */\n  models: string[]\n  /** Account slot id to prefer for matching models. */\n  account: string\n}\n\n/** A labeled, human-readable clock reading for error messages. */\nfunction clockLabel(ms: number): string {\n  return new Date(ms).toLocaleString()\n}\n\n/**\n * Whether an account with this rotation state can serve a request right now.\n * `undefined` (never rejected) is usable; a cooldown becomes usable again\n * once its reset time passes; `unknown` (429, reset unprobed) and\n * `disabled` (401) are not.\n */\nexport function accountUsable(state: CommandCodeAccountState | undefined): boolean {\n  if (state === undefined) return true\n  if (state.kind === 'cooldown') return state.until > 0 && Date.now() >= state.until\n  return false\n}\n\n/**\n * Pick the account that should serve now: the manually preferred slot when it\n * is usable, otherwise the first usable account in rotation order; undefined\n * when no account is usable. Shared by the pool (request path) and the plugin\n * entry (the usage view's active badge) so both always agree.\n */\nexport function selectActiveAccount(\n  accounts: readonly ResolvedAccount[],\n  preferredId: string | undefined,\n): ResolvedAccount | undefined {\n  const usable = accounts.filter((account) => accountUsable(account.state))\n  if (preferredId !== undefined) {\n    const preferred = usable.find((account) => account.slot.id === preferredId)\n    if (preferred !== undefined) return preferred\n  }\n  return usable[0]\n}\n\n/**\n * The first routing rule whose model list contains the request's model id.\n * Undefined when no rule matches.\n */\nexport function matchModelRule(\n  model: string,\n  rules: readonly CommandCodeModelAccountRule[] | undefined,\n): CommandCodeModelAccountRule | undefined {\n  if (model === '' || rules === undefined || rules.length === 0) return undefined\n  for (const rule of rules) {\n    if (rule.models.includes(model)) return rule\n  }\n  return undefined\n}\n\n/**\n * The routed account for a request's model: the first usable account whose\n * slot id matches the first matching rule's target. Undefined when no rule\n * matches or the routed account is not usable (the caller then falls back to\n * the normal preferred/rotation selection).\n */\nexport function selectAccountForModel(\n  accounts: readonly ResolvedAccount[],\n  model: string,\n  rules: readonly CommandCodeModelAccountRule[] | undefined,\n): ResolvedAccount | undefined {\n  const rule = matchModelRule(model, rules)\n  if (rule === undefined) return undefined\n  return accounts.find((account) => account.slot.id === rule.account && accountUsable(account.state))\n}\n\n/**\n * The account pool. Rotation state is keyed by API key (never logged), so two\n * slots resolving to the same credential share one mark, and a key changed in\n * the credentials service starts with a clean slate.\n */\nexport class CommandCodeAccountPool {\n  /** Rotation state by API key. */\n  private readonly states = new Map<string, CommandCodeAccountState>()\n  constructor(private readonly deps: CommandCodeAccountPoolDeps) {}\n\n  /**\n   * Resolve every slot's key, deduplicated by key (first slot wins). Slots\n   * without any resolvable key are omitted — they still appear in the\n   * settings page as unconfigured, they just cannot serve requests.\n   */\n  async resolvedAccounts(): Promise<ResolvedAccount[]> {\n    const out: ResolvedAccount[] = []\n    const seen = new Set<string>()\n    for (const slot of this.deps.slots()) {\n      const key = await this.resolveSlotKey(slot)\n      if (key === undefined || seen.has(key)) continue\n      seen.add(key)\n      out.push({ slot, key, state: this.states.get(key) })\n    }\n    return out\n  }\n\n  /**\n   * Every slot paired with its resolved key and rotation state — NOT\n   * deduplicated: two slots sharing one credential both appear (the usage\n   * view reports them individually), while slots without any resolvable key\n   * are omitted. The serving path uses {@link resolvedAccounts} instead.\n   */\n  async describeAccounts(): Promise<ResolvedAccount[]> {\n    const out: ResolvedAccount[] = []\n    for (const slot of this.deps.slots()) {\n      const key = await this.resolveSlotKey(slot)\n      if (key === undefined) continue\n      out.push({ slot, key, state: this.states.get(key) })\n    }\n    return out\n  }\n\n  /**\n   * Hand out the key for a request: the model-routed account when the\n   * request's model matches a rule (and that account is usable), else the\n   * manually preferred account when usable, else the first usable account in\n   * rotation order. Returns `undefined` when no account resolves any key at\n   * all (the caller then reports the missing credential). Throws\n   * `RATE_LIMIT` — naming the earliest window reset — or\n   * `INVALID_CREDENTIAL` when accounts exist but none can serve.\n   *\n   * `options.model` is the request's model id; routing rules re-read per\n   * resolution, so a settings change applies live.\n   *\n   * `options.exclude` skips one key during the probe-revival pass: the\n   * rotation hook excludes the just-rejected key so a probe that clears its\n   * window cannot re-offer the same key within the same request (the adapter\n   * refuses already-tried keys; the next request picks the revived key up).\n   */\n  async resolveKey(options?: { exclude?: string; model?: string }): Promise<{ key: string; slot: CommandCodeAccountSlot } | undefined> {\n    const accounts = await this.resolvedAccounts()\n    if (accounts.length === 0) {\n      return undefined\n    }\n    const routed = selectAccountForModel(accounts, options?.model ?? '', this.deps.modelAccountRules?.())\n    if (routed !== undefined) return this.pick(routed)\n    const preferred = this.deps.preferredId?.()\n    const chosen = selectActiveAccount(accounts, preferred)\n    if (chosen !== undefined) return this.pick(chosen)\n\n    // Every key is marked: probe the real windows before giving up. Disabled\n    // (401) keys are not probed — an invalid key stays invalid. A throwing\n    // probe counts as \"unknown\" (like a failed probe): it must not turn the\n    // all-exhausted path into a raw rejection instead of RATE_LIMIT.\n    await Promise.all(accounts.map(async (account) => {\n      if (account.state?.kind === 'disabled') return\n      if (options?.exclude !== undefined && account.key === options.exclude) return\n      let probe: FiveHourWindowProbe | undefined\n      try {\n        probe = await this.deps.probeWindow(account.key)\n      } catch {\n        return\n      }\n      if (probe === undefined) return\n      if (!probe.exceeded) {\n        this.states.delete(account.key)\n      } else {\n        this.states.set(account.key, {\n          kind: 'cooldown',\n          reason: account.state?.reason ?? 'rate limited (429)',\n          until: probe.resetAt,\n        })\n      }\n    }))\n\n    // Re-resolve once: the probe pass above may have revived keys (fresh\n    // states), and both the revival check and the error classification read\n    // the same post-probe snapshot. (Each resolvedAccounts() re-runs the\n    // async seams, so two calls — not three — is the minimum here.)\n    const latest = await this.resolvedAccounts()\n    const revived = selectActiveAccount(latest, preferred)\n    if (revived !== undefined) return this.pick(revived)\n\n    const disabled = latest.filter((account) => account.state?.kind === 'disabled')\n    if (disabled.length === latest.length) {\n      // Bilingual: the harness UI renders this message verbatim inside its\n      // (already localized) retry/turn-error chrome, so both languages ride\n      // in one string — English first, then the Chinese reading.\n      throw new LlmError(\n        `llm-commandcode: every configured Command Code account (${latest.length}) was rejected with 401`\n          + ' — check the stored API keys (Models page / settings) or the auth file'\n          + `；已配置的 ${latest.length} 个 Command Code 账户密钥均被拒绝（401）`\n          + '——请在设置页检查存储的 API 密钥，或重新运行 command-code login',\n        'INVALID_CREDENTIAL',\n      )\n    }\n    const resets = latest\n      .map((account) => account.state)\n      .filter((state): state is CommandCodeAccountState => state !== undefined && state.kind === 'cooldown' && state.until > 0)\n      .map((state) => state.until)\n    const earliest = resets.length > 0 ? Math.min(...resets) : 0\n    // Hand dsh-llm-retry the exact wait until the earliest known reset so the\n    // retry policy sleeps through the window instead of polling at its\n    // backoff cadence. Capped at RETRY_MAX_DELAY_MS: the executor honors a\n    // provider wait verbatim only at or below the policy's maxDelayMs — a\n    // LONGER attached wait makes it abandon the retry entirely (normal mode),\n    // which would turn \"poll until the window opens\" into \"fail now\". Longer\n    // resets simply ride the capped local backoff and the probe revival.\n    const wait = earliest > 0 ? Math.max(1000, earliest - Date.now()) : 0\n    throw new LlmError(\n      `llm-commandcode: all ${latest.length} Command Code account(s) have exhausted their usage window`\n        + (earliest > 0 ? `; the earliest window resets at ${clockLabel(earliest)}` : '')\n        + ' — requests will succeed again after the reset (or add another account)'\n        + `；已用尽全部 ${latest.length} 个 Command Code 账户的用量窗口`\n        + (earliest > 0 ? `，最早的重置时间为 ${clockLabel(earliest)}` : '')\n        + '——窗口重置后请求会自动恢复（也可以添加更多账户）',\n      'RATE_LIMIT',\n      wait > 0 && wait <= RETRY_MAX_DELAY_MS ? { providerRetryAfterMs: wait } : undefined,\n    )\n  }\n\n  /**\n   * Record a rejection against one key. `rate-limit` (429) marks the key\n   * exhausted with an unknown reset (probed lazily at the next resolution\n   * once every account is marked); `invalid-credential` (401) disables the\n   * key until the stored credential changes.\n   */\n  markRejected(apiKey: string, rejection: AccountRejection): void {\n    if (rejection === 'invalid-credential') {\n      this.states.set(apiKey, { kind: 'disabled', reason: 'invalid API key (401)', until: 0 })\n    } else {\n      this.states.set(apiKey, { kind: 'unknown', reason: 'rate limited (429)', until: 0 })\n    }\n  }\n\n  /**\n   * One account's key: literal → credential seam → auth file (default slot).\n   *\n   * Every source is normalized here, at the single point where a slot's key\n   * enters the pool. The adapter sends the key through the harness's\n   * `assertUsableApiKey()`, which trims it — a stored key from the credentials\n   * seam, a `.env` line, or a shell export all pick up surrounding whitespace\n   * — and reports that trimmed form back to `markRejected()`. Returning the\n   * raw value would file every 429/401 mark under a key no later lookup can\n   * find: rotation would re-offer the same account, the account card would show\n   * no mark, and the usage endpoints would 401 while chat kept working.\n   * Normalizing once makes resolution, probing, marking, and the request path\n   * agree on one string.\n   */\n  private async resolveSlotKey(slot: CommandCodeAccountSlot): Promise<string | undefined> {\n    if (slot.literal !== undefined) {\n      const literal = normalizeResolvedKey(slot.literal)\n      if (literal !== undefined) return literal\n    }\n    if (slot.ref !== undefined) {\n      const hit = await this.deps.resolveRef(slot.ref)\n      if (hit !== undefined) {\n        const resolved = normalizeResolvedKey(hit)\n        if (resolved !== undefined) return resolved\n      }\n    }\n    if (slot.allowAuthFile) {\n      const fromFile = this.deps.authFileKey()\n      if (fromFile !== undefined) {\n        const fileKey = normalizeResolvedKey(fromFile)\n        if (fileKey !== undefined) return fileKey\n      }\n    }\n    return undefined\n  }\n\n  /** Hand out the chosen account's key. */\n  private pick(account: ResolvedAccount): { key: string; slot: CommandCodeAccountSlot } {\n    return { key: account.key, slot: account.slot }\n  }\n}\n\n/**\n * Normalize one resolved credential to the form every consumer sees. Trim\n * only: a blank-after-trim value means \"no key\" (the slot is omitted and the\n * caller reports `MISSING_CREDENTIAL`), while characters an HTTP header cannot\n * carry are left for `assertUsableApiKey()` to reject with its own message.\n */\nfunction normalizeResolvedKey(value: string): string | undefined {\n  const trimmed = value.trim()\n  return trimmed === '' ? undefined : trimmed\n}\n","/**\n * DeepSeek Harness LLM adapter for the Command Code Provider API.\n *\n * Ported from pi-commandcode-provider@0.5.1 (MIT). This is an unofficial,\n * community-maintained integration; you need your own Command Code account\n * and API key or subscription, and Command Code's terms apply.\n *\n * Wire protocol (reverse-engineered by the pi plugin, command-code@1.28.4;\n * re-verified against command-code@1.53.1 — endpoints, request shape, and\n * stream events unchanged):\n *   POST {apiBase}/alpha/generate\n *   body: { config, memory, taste, skills, params: { model, messages, tools,\n *          system, max_tokens, temperature, stream, reasoning_effort? }, threadId }\n *   SSE-ish JSONL events: text-delta | reasoning-start/delta/end | tool-call\n *                         | tool-result | finish | error\n *   Model catalog: GET {apiBase}/provider/v1/models -> { object: 'list', data: [...] }\n *\n * The adapter is deliberately free of cordis/schemastery: it receives a\n * per-request options thunk and an API-key resolver from the plugin entry\n * (src/index.ts), so a settings change reaches the very next request.\n */\n\nimport { existsSync, readFileSync } from 'node:fs'\nimport { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises'\nimport { homedir } from 'node:os'\nimport { dirname, join } from 'node:path'\nimport { randomUUID } from 'node:crypto'\n\nimport type { AttachmentStore, ImageAttachmentRef } from '@deepseek-ai/dsh-attachment'\n\nimport {\n  attributionHeaders,\n  LlmAdapter,\n  LlmError,\n  ReasoningEffortId,\n  ToolCallId,\n  errorChain,\n  resolveRetryPolicy,\n  type ResolvedRetryPolicy,\n  type ContentBlock,\n  type FinishReason,\n  type GenerateOptions,\n  type LlmModelInfo,\n  type LlmProviderInfo,\n  type LlmResolvedModelInfo,\n  type Message,\n  type StreamChunk,\n  type TokenUsage,\n} from '@deepseek-ai/dsh-llm'\nimport { RETRY_MAX_DELAY_MS } from './accounts.ts'\n\nimport {\n  KNOWN_EFFORTS,\n  KNOWN_IMAGE_MODELS,\n  capabilityDescription,\n  compareByPlan,\n  modelVisibleInPlan,\n  subscriptionPlanInfo,\n  type CommandCodeBillingAccess,\n} from './capabilities.ts'\n\n// ---------------------------------------------------------------------------\n// Request / connection defaults (protocol constants). The model/plan/deal\n// capability snapshot lives in ./capabilities.ts — the sync-only surface.\n// ---------------------------------------------------------------------------\nexport const COMMAND_CODE_CLI_VERSION = '1.53.1'\nexport const DEFAULT_API_BASE = 'https://api.commandcode.ai'\nexport const DEFAULT_GENERATE_MAX_TOKENS = 64_000\nexport const DEFAULT_MAX_OUTPUT_TOKENS = 65_536\nexport const MODELS_TIMEOUT_MS = 10_000\n/** How long the picker's plan-filter billing facts stay cached before refetching. */\nexport const BILLING_ACCESS_TTL_MS = 5 * 60_000\n/**\n * How long a learned CLI-only protocol preference stays cached per account.\n * After this TTL a request may probe Provider API again, so an upgraded Go\n * account can recover without a restart.\n */\nexport const PROTOCOL_CACHE_TTL_MS = 15 * 60_000\n/** Endpoint protocol selected for one generate call. */\ntype CommandCodeProtocol = 'cli' | 'openai'\n\n/** The entry-plan tier weight (`individual-go` in KNOWN_SUBSCRIPTION_PLANS). */\nconst GO_TIER_WEIGHT = 0\n\n/** Hard cap on account rotations within one request (one attempt per distinct key). */\nconst MAX_ACCOUNT_ROTATIONS = 16\n\n/**\n * Subscription statuses the CLI treats as live (`Mr` in command-code's\n * cli.mjs): the plan gate applies only under one of these.\n */\nconst ACTIVE_SUBSCRIPTION_STATUSES: ReadonlySet<string> = new Set(['active', 'trialing', 'past_due'])\n/** Head-of-request timeout: how long to wait for the first response byte. */\nexport const DEFAULT_REQUEST_TIMEOUT_MS = 60_000\n/** Stream idle timeout: a generation that stalls this long is a dead connection. */\nexport const DEFAULT_STREAM_IDLE_TIMEOUT_MS = 300_000\nconst MODEL_CACHE_VERSION = 1\n\n// ---------------------------------------------------------------------------\n// Small helpers (ported from converters.ts / models.ts)\n// ---------------------------------------------------------------------------\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction stringValue(value: unknown): string | undefined {\n  return typeof value === 'string' ? value : undefined\n}\n\nfunction numberValue(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined\n}\n\nfunction booleanValue(value: unknown): boolean | undefined {\n  return typeof value === 'boolean' ? value : undefined\n}\n\n/** Parse a billing-period timestamp (ISO string or millis) into millis; 0 when absent/invalid. */\nfunction periodEndValue(value: unknown): number {\n  const asNumber = numberValue(value)\n  if (asNumber !== undefined) return asNumber\n  const asString = stringValue(value)\n  if (asString === undefined) return 0\n  const parsed = Date.parse(asString)\n  return Number.isNaN(parsed) ? 0 : parsed\n}\n\n/**\n * Terminal stream-error markers from the official CLI (`Xw` in command-code's\n * cli.mjs): these always mean \"retrying cannot succeed\", so the adapter must\n * not classify them as transient server errors.\n */\nconst TERMINAL_STREAM_ERROR_MARKERS = [\n  'premium_credits_exhausted',\n  'model_not_in_plan',\n  'insufficient credits',\n]\n\nfunction hasTerminalStreamMarker(message: string): boolean {\n  const lower = message.toLowerCase()\n  return TERMINAL_STREAM_ERROR_MARKERS.some((marker) => lower.includes(marker))\n}\n\nfunction recordOrEmpty(value: unknown): Record<string, unknown> {\n  if (isRecord(value)) return value\n  if (typeof value === 'string') {\n    try {\n      const parsed: unknown = JSON.parse(value)\n      if (isRecord(parsed)) return parsed\n    } catch {\n      // Some providers stream incomplete JSON argument fragments.\n    }\n  }\n  return {}\n}\n\n// ---------------------------------------------------------------------------\n// Tool-schema normalization (issue #35)\n// The gateway validates every function schema's ROOT as an object schema and\n// rejects the whole request otherwise (`schema must be a JSON Schema of\n// type: \"object\", got type: null`). Tool schemas do not always come from\n// the harness's own typed builder, which always declares `type: 'object'`: a\n// third-party plugin or an MCP bridge can register a hand-written schema, and\n// a generator can emit a root `$ref`. Neither is this plugin's to correct, but\n// the request is the plugin's to send, so every schema leaving here is\n// normalized to the object root the provider requires. Only the root is\n// touched, and every path returns a copy: the harness may deep-freeze the\n// caller's schema.\n// ---------------------------------------------------------------------------\n\n/** How deep a root `$ref` / combinator chain is followed while normalizing. */\nconst SCHEMA_NORMALIZE_MAX_DEPTH = 4\n\n/**\n * Whether a type-less node is object-shaped enough to be one with the type\n * declared: `properties`/`required`/`additionalProperties` only make sense on\n * an object, and a schema carrying them was meant to be one.\n */\nfunction isObjectShaped(node: Record<string, unknown>): boolean {\n  return (\n    isRecord(node.properties) ||\n    isRecord(node.patternProperties) ||\n    Array.isArray(node.required) ||\n    node.additionalProperties !== undefined\n  )\n}\n\n/** The `required` names of one schema node, ignoring malformed entries. */\nfunction requiredNames(node: Record<string, unknown>): string[] {\n  return Array.isArray(node.required) ? node.required.filter((name): name is string => typeof name === 'string') : []\n}\n\n/** Resolve a local `#/...` pointer inside the schema that carried it. */\nfunction resolveLocalRef(root: Record<string, unknown>, ref: string): Record<string, unknown> | undefined {\n  if (!ref.startsWith('#/')) return undefined\n  let node: unknown = root\n  for (const rawSegment of ref.slice(2).split('/')) {\n    const segment = rawSegment.replace(/~1/g, '/').replace(/~0/g, '~')\n    if (!isRecord(node)) return undefined\n    node = node[segment]\n  }\n  return isRecord(node) ? node : undefined\n}\n\n/**\n * Flatten a type-less combinator node into one object schema, so the model\n * still sees the branch fields instead of an argument-free tool. `allOf`\n * branches must all hold, so their `required` entries are all kept; `anyOf` /\n * `oneOf` branches are alternatives, so only a name required by every branch\n * survives. Returns undefined when no branch describes an object.\n */\nfunction mergeCombinatorBranches(\n  node: Record<string, unknown>,\n  depth: number,\n): Record<string, unknown> | undefined {\n  // A plugin can hand over a self-referential schema object; the bound keeps\n  // the walk finite (JSON-parsed schemas are acyclic, JS ones need not be).\n  if (depth >= SCHEMA_NORMALIZE_MAX_DEPTH) return undefined\n  const properties: Record<string, unknown> = {}\n  const required = new Set<string>()\n  const alternatives: string[][] = []\n  let sawBranch = false\n\n  for (const key of ['allOf', 'anyOf', 'oneOf'] as const) {\n    const branches = node[key]\n    if (!Array.isArray(branches)) continue\n    const objectBranches: Record<string, unknown>[] = []\n    for (const branch of branches) {\n      if (!isRecord(branch)) continue\n      objectBranches.push(toolParametersSchema(branch, depth + 1))\n    }\n    if (objectBranches.length === 0) continue\n    sawBranch = true\n    // An `anyOf`/`oneOf` group contributes the intersection of its branches;\n    // an `allOf` group contributes the union.\n    const names = objectBranches.map(requiredNames)\n    if (key === 'allOf') for (const name of names.flat()) required.add(name)\n    else if (names.length > 0) {\n      alternatives.push(names[0]!.filter((name) => names.every((list) => list.includes(name))))\n    }\n    for (const branch of objectBranches) {\n      const branchProperties = isRecord(branch.properties) ? branch.properties : {}\n      for (const [name, schema] of Object.entries(branchProperties)) {\n        if (!(name in properties)) properties[name] = schema\n      }\n    }\n  }\n  if (!sawBranch) return undefined\n  // A name must satisfy every group, so each group's intersection joins the\n  // union: an allOf-required field and an anyOf-common field are both required.\n  for (const group of alternatives) for (const name of group) required.add(name)\n\n  const merged: Record<string, unknown> = { type: 'object', properties }\n  if (required.size > 0) merged.required = [...required]\n  // The merged schema is a superset of the alternatives it replaced, so it\n  // stays open unless the node itself closed it.\n  if (node.additionalProperties !== undefined) merged.additionalProperties = node.additionalProperties\n  for (const key of ['description', 'title'] as const) {\n    if (node[key] !== undefined) merged[key] = node[key]\n  }\n  return merged\n}\n\n/**\n * Normalize one tool's parameters schema to an object-rooted JSON Schema.\n * A schema that already declares an object root is passed through untouched;\n * a type-less object-shaped one gains the type; a root `$ref` or combinator is\n * resolved/merged; anything else (an array/scalar root, or no schema at all)\n * degrades to a permissive free-form object, because a request the provider\n * refuses helps no one and the tool's own description is still in the prompt.\n */\nfunction toolParametersSchema(parameters: unknown, depth = 0): Record<string, unknown> {\n  if (!isRecord(parameters)) return { type: 'object', properties: {}, additionalProperties: true }\n  if (parameters.type === 'object') return parameters\n  // `[\"object\", \"null\"]` is accepted by JSON Schema but not by the provider's\n  // validator, which compares the root `type` against the string \"object\".\n  if (Array.isArray(parameters.type) && parameters.type.includes('object')) {\n    return { ...parameters, type: 'object' }\n  }\n\n  if (parameters.type === undefined || parameters.type === null) {\n    if (typeof parameters.$ref === 'string' && depth < SCHEMA_NORMALIZE_MAX_DEPTH) {\n      const target = resolveLocalRef(parameters, parameters.$ref)\n      if (target !== undefined) {\n        const { $ref: _ref, ...rest } = parameters\n        return toolParametersSchema({ ...target, ...rest }, depth + 1)\n      }\n    }\n    if (isObjectShaped(parameters)) return { ...parameters, type: 'object' }\n    const merged = mergeCombinatorBranches(parameters, depth)\n    if (merged !== undefined) return merged\n    // A root `$ref` this plugin cannot resolve still gets the declared type:\n    // that is what the provider validates for, and an object is what every\n    // schema generator emits one for.\n    if (typeof parameters.$ref === 'string') return { ...parameters, type: 'object' }\n  }\n\n  return { type: 'object', properties: {}, additionalProperties: true }\n}\n\nexport function projectSlugFromPath(pathName: string): string {\n  const slug = pathName\n    .toLowerCase()\n    .replace(/^[a-z]:/i, '')\n    .replace(/[^a-z0-9]+/g, '-')\n    // Trim leading/trailing separators. This must stay linear: the classic\n    // `/^-+|-+$/` form is ambiguous — on `a<200k dashes>b` the unanchored\n    // `-+$` retries every start position, giving O(n^2) matching (CodeQL\n    // js/polynomial-redos). The negative lookbehind `(?<!-)` restricts `-+$`\n    // to the first dash of the trailing run, so only one start position is\n    // tried. Verified empirically: ~14.5s -> ~0ms on a 200k-dash input.\n    .replace(/^-+|(?<!-)-+$/g, '')\n  return slug || 'project'\n}\n\nfunction parseStreamEventLine(line: string): unknown | undefined {\n  let trimmed = line.trim()\n  if (!trimmed || trimmed.startsWith(':') || trimmed.startsWith('event:')) return undefined\n  if (trimmed.startsWith('data:')) trimmed = trimmed.slice(5).trim()\n  if (!trimmed || trimmed === '[DONE]') return undefined\n  try {\n    return JSON.parse(trimmed) as unknown\n  } catch {\n    return undefined\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Credential fallback from the official Command Code CLI auth file. Used as\n// the last fallback by the plugin entry, so a user who already logged in with\n// `command-code login` can reuse that credential. Only the official CLI's own\n// file is read — pi/OMP auth files are intentionally not scanned, so their\n// credentials and formats cannot surprise this adapter.\n// ---------------------------------------------------------------------------\n\n/** Extract the key from the CLI's nested credential records (`command-code`). */\nfunction apiKeyFromCredentialRecord(value: unknown): string | undefined {\n  if (!isRecord(value)) return undefined\n  const type = stringValue(value.type)\n  if (type === 'api') return stringValue(value.key)\n  if (type === 'oauth') return stringValue(value.access)\n  return stringValue(value.key) ?? stringValue(value.access)\n}\n\n/** Read a usable Command Code credential from the official CLI auth file. */\nexport function resolveAuthFileApiKey(): string | undefined {\n  const authPath = join(homedir(), '.commandcode', 'auth.json')\n  try {\n    if (!existsSync(authPath)) return undefined\n    const parsed: unknown = JSON.parse(readFileSync(authPath, 'utf-8'))\n    if (!isRecord(parsed)) return undefined\n    const direct = stringValue(parsed.apiKey) ?? stringValue(parsed.commandcode)\n    if (direct) return direct\n    const nested =\n      apiKeyFromCredentialRecord(parsed.commandcode) ??\n      apiKeyFromCredentialRecord(parsed['command-code'])\n    return nested\n  } catch {\n    // Ignore malformed or unreadable auth file.\n  }\n  return undefined\n}\n\n// ---------------------------------------------------------------------------\n// Model catalog discovery with on-disk cache fallback (ported from models.ts)\n// ---------------------------------------------------------------------------\n\ninterface CommandCodeModel {\n  id: string\n  name: string\n  contextWindow: number\n  maxTokens: number\n}\n\nfunction parseCatalogResponse(value: unknown): CommandCodeModel[] {\n  if (!isRecord(value) || value.object !== 'list' || !Array.isArray(value.data)) {\n    throw new LlmError('Unexpected Command Code models response shape', 'PROVIDER_PROTOCOL_ERROR')\n  }\n  const models: CommandCodeModel[] = []\n  for (const entry of value.data) {\n    if (!isRecord(entry)) continue\n    const id = stringValue(entry.id)\n    const name = stringValue(entry.name)\n    const contextLength = numberValue(entry.context_length)\n    if (!id || !name || !contextLength || contextLength <= 0) continue\n    models.push({\n      id,\n      name,\n      contextWindow: contextLength,\n      maxTokens: Math.min(contextLength, DEFAULT_MAX_OUTPUT_TOKENS),\n    })\n  }\n  if (models.length === 0) {\n    throw new LlmError('Command Code returned an empty model catalog', 'PROVIDER_PROTOCOL_ERROR')\n  }\n  return models\n}\n\nasync function readModelsCache(cachePath: string): Promise<CommandCodeModel[]> {\n  const parsed: unknown = JSON.parse(await readFile(cachePath, 'utf-8'))\n  if (!isRecord(parsed) || parsed.version !== MODEL_CACHE_VERSION || !Array.isArray(parsed.models)) {\n    throw new Error(`Invalid model cache at ${cachePath}`)\n  }\n  return parsed.models as CommandCodeModel[]\n}\n\nasync function writeModelsCache(cachePath: string, models: CommandCodeModel[]): Promise<void> {\n  await mkdir(dirname(cachePath), { recursive: true })\n  const tmp = `${cachePath}.${process.pid}.tmp`\n  try {\n    await writeFile(tmp, `${JSON.stringify({ version: MODEL_CACHE_VERSION, models }, null, 2)}\\n`, {\n      encoding: 'utf-8',\n      mode: 0o600,\n    })\n    await rename(tmp, cachePath)\n  } finally {\n    await rm(tmp, { force: true }).catch(() => undefined)\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Message conversion: harness Message[] -> Command Code wire messages.\n// Both transports replay historical reasoning. The CLI transport carries it as\n// a `reasoning` block inside the assistant message (the shape the official\n// CLI's `toWireMessages` emits), the Provider API transport as the\n// `reasoning_content` field, because DeepSeek's thinking-mode contract\n// requires the previous chain of thought to be passed back whenever tool calls\n// are in play (issue #34). Only tool calls with a paired tool result are\n// replayed on both transports.\n// ---------------------------------------------------------------------------\n\n/**\n * Collect the tool calls that have a paired tool result, plus each call's\n * name. The name map feeds the `toolName` of replayed tool results: some\n * backends (e.g. Google Gemini `functionResponse`) reject a result whose\n * function name is empty, so the real name must round-trip (the official\n * CLI does the same via its `tool_use_id -> toolName` map).\n */\nfunction pairedToolCalls(messages: readonly Message[]): {\n  ids: Set<string>\n  names: Map<string, string>\n} {\n  const callIds = new Set<string>()\n  const names = new Map<string, string>()\n  const resultIds = new Set<string>()\n  for (const message of messages) {\n    for (const block of message.content) {\n      if (message.role === 'assistant' && block.type === 'tool-call') {\n        callIds.add(block.id)\n        names.set(block.id, block.name)\n      }\n      if (block.type === 'tool-result') resultIds.add(block.toolCallId)\n    }\n  }\n  return { ids: new Set([...callIds].filter((id) => resultIds.has(id))), names }\n}\n\n/**\n * The Command Code gateway rejects tool call ids longer than 64 characters\n * (`input[N].call_id` must be `<= 64`, issue #23). Cross-provider histories\n * can carry longer ids — e.g. switching to Command Code mid-session after\n * another provider issued the call — so overlong paired ids are remapped to\n * short per-request aliases. Correlation only needs to hold within one\n * request (each call travels with its result in the same body), so a\n * sequential alias is enough: no durable state, no cross-request stability,\n * and the harness log keeps the original ids.\n */\nconst MAX_WIRE_TOOL_CALL_ID_LENGTH = 64\n\n/**\n * Map each paired tool-call id to its wire id: ids within the gateway limit\n * pass through verbatim, overlong ids get a collision-free `cc-<n>` alias.\n * Callers must resolve BOTH the tool-call and its paired tool-result through\n * the returned map so the pair stays correlated.\n */\nfunction wireToolCallIds(paired: ReadonlySet<string>): Map<string, string> {\n  const wire = new Map<string, string>()\n  const taken = new Set<string>()\n  for (const id of paired) {\n    if (id.length <= MAX_WIRE_TOOL_CALL_ID_LENGTH) {\n      wire.set(id, id)\n      taken.add(id)\n    }\n  }\n  let seq = 1\n  for (const id of paired) {\n    if (wire.has(id)) continue\n    let alias = `cc-${seq++}`\n    while (taken.has(alias)) alias = `cc-${seq++}`\n    wire.set(id, alias)\n    taken.add(alias)\n  }\n  return wire\n}\n\nfunction blockText(block: ContentBlock): string {\n  return block.type === 'text' || block.type === 'reasoning' ? block.text : ''\n}\n\n/**\n * One paired tool result as the wire needs it: its text and the images the\n * tool returned. Neither wire transport can carry an image inside a tool\n * result (`/provider/v1/chat/completions` forbids non-text `role: 'tool'`\n * content, and the CLI transport's own `tool-result` output is text-only), so\n * those images travel in a user message emitted right after the tool message —\n * the same shape `@deepseek-ai/dsh-llm-deepseek` uses (issue #30).\n */\ninterface ToolResultMedia {\n  /** Visible result text; `''` when the result carried images but no text. */\n  text: string\n  /** Nested image references, in block order, deduplicated by attachment id. */\n  images: ImageAttachmentRef[]\n}\n\n/**\n * Collect text and nested images of one tool result. The harness `read_image`\n * tool returns both, so dropping the image half is what made a tool-read image\n * invisible to a Vision model (issue #30). Deduplication keeps a result that\n * repeats one attachment from paying for the same pixels twice.\n */\nfunction toolResultMedia(block: Extract<ContentBlock, { type: 'tool-result' }>): ToolResultMedia {\n  const chunks: string[] = []\n  const images: ImageAttachmentRef[] = []\n  const seen = new Set<string>()\n  const walk = (blocks: readonly ContentBlock[]): void => {\n    for (const nested of blocks) {\n      if (nested.type === 'text' || nested.type === 'reasoning') {\n        if (nested.text) chunks.push(nested.text)\n        continue\n      }\n      if (nested.type === 'image') {\n        if (!seen.has(nested.attachment.attachmentId)) {\n          seen.add(nested.attachment.attachmentId)\n          images.push(nested.attachment)\n        }\n        continue\n      }\n      if (nested.type === 'tool-result') walk(nested.content)\n    }\n  }\n  walk(block.content)\n  return { text: chunks.join('\\n'), images }\n}\n\n/**\n * Result text for the wire's `role: 'tool'` message. A tool that returned only\n * an image (and possibly a nested image-only tool result) has no text at all,\n * and neither transport accepts an empty tool content string, so it gets a\n * descriptor pointing at the user message that follows with the pixels.\n */\nfunction toolResultTextForWire(media: ToolResultMedia): string {\n  return media.text || (media.images.length > 0 ? '(image returned; see the attached image)' : '')\n}\n\n/** Leading line of the user message that carries a tool result's images. */\nconst TOOL_RESULT_IMAGE_TEXT = 'Attached image(s) from tool result'\n\n/**\n * The model-visible note introducing the images carried out of one tool\n * result. Neither transport merges them back into the tool result, so this\n * line is what tells the model the image it is about to see belongs to the\n * tool it just ran rather than to the user; it also leads the part list,\n * because an image-first content array is what some gateways reject.\n *\n * The note names the tool call the image came out of, because a turn's\n * carriers are emitted as a group after the whole tool group (issue #33):\n * position alone would have to carry the association, and every `read_image`\n * result renders the same envelope text, so two parallel calls would produce\n * two identical notes. The id is the WIRE id — the one the model saw on the\n * `tool-call` it issued and on the tool message just above — so an overlong\n * cross-provider id is named by the alias that replaced it, not by the\n * harness-side id the model never saw.\n *\n * Count and pixel dimensions are appended when the tool's own text does not\n * already state them (a result that returns the image and nothing else).\n */\nfunction toolResultImageNote(media: ToolResultMedia, toolCallId: string): string {\n  const lead = `${TOOL_RESULT_IMAGE_TEXT} (${toolCallId}):`\n  const first = media.images[0]\n  if (first === undefined) return lead\n  const dimensions = `${first.width}x${first.height} px`\n  if (first.width <= 0 || first.height <= 0 || media.text.includes(dimensions)) {\n    return lead\n  }\n  const count = media.images.length > 1 ? `${media.images.length} images, ` : ''\n  return `${lead} ${count}${dimensions}`\n}\n\nfunction hasImageContent(message: Message): boolean {\n  const check = (blocks: readonly ContentBlock[]): boolean =>\n    blocks.some(\n      (b) => b.type === 'image' || (b.type === 'tool-result' && check(b.content)),\n    )\n  return check(message.content)\n}\n\n/**\n * Convert one image reference to the Command Code wire format, as the official\n * CLI does: `{ type: 'image', source: { type: 'base64', media_type, data } }`.\n * Bytes come from the durable attachment service; the media type is the one\n * verified at save time.\n */\nasync function imageToCommandCode(\n  ref: ImageAttachmentRef,\n  readImage: (ref: ImageAttachmentRef) => Promise<Uint8Array>,\n): Promise<{ type: 'image'; source: { type: 'base64'; media_type: string; data: string } }> {\n  const data = await readImage(ref)\n  return {\n    type: 'image',\n    source: {\n      type: 'base64',\n      media_type: ref.mediaType,\n      data: Buffer.from(data).toString('base64'),\n    },\n  }\n}\n\nasync function messagesToCC(\n  messages: readonly Message[],\n  readImage?: (ref: ImageAttachmentRef) => Promise<Uint8Array>,\n): Promise<unknown[]> {\n  const out: unknown[] = []\n  const { ids: paired, names: toolNames } = pairedToolCalls(messages)\n  // Remap cross-provider ids the gateway would reject (issue #23); the\n  // result side resolves through the same map so each pair stays correlated.\n  const wireIds = wireToolCallIds(paired)\n\n  // Tool-returned images ride as user messages after their tool result. The\n  // harness can emit several tool calls in one assistant turn, and the\n  // gateway expects an assistant's tool blocks to be answered consecutively:\n  // a user message interleaved between tool results breaks the pairing and\n  // the request is rejected. So image carriers are buffered and flushed only\n  // once the whole tool group (or the next non-tool message) has been emitted.\n  const pendingImages: unknown[] = []\n  const flushPendingImages = () => {\n    for (const message of pendingImages) out.push(message)\n    pendingImages.length = 0\n  }\n\n  for (const message of messages) {\n    if (message.role === 'system') continue // folded into params.system by the caller\n\n    if (message.role === 'user' && message.source.kind !== 'tool') {\n      flushPendingImages()\n      const parts: unknown[] = []\n      for (const block of message.content) {\n        if (block.type === 'text') parts.push({ type: 'text', text: block.text })\n        if (block.type === 'image') {\n          // The caller (stream) has already gated image input on model\n          // capability and attachment-service availability, so reaching this\n          // branch with no resolver is an internal contract violation.\n          if (!readImage) {\n            throw new LlmError(\n              'Image input requires the durable attachment service',\n              'UNSUPPORTED_CONTENT',\n            )\n          }\n          parts.push(await imageToCommandCode(block.attachment, readImage))\n        }\n      }\n      // A user message that converted to nothing carries no information, and\n      // an empty content array is a needless gateway-compat risk, so it is\n      // dropped — the same rule the Provider API converter applies below.\n      // (`dsh-llm-deepseek` instead pushes `content: ''`; skipping is the\n      // safer half of that divergence to keep.) The flush above has already\n      // run, so a pending image carrier is never dropped with it.\n      if (parts.length === 0) continue\n      out.push({ role: 'user', content: parts })\n      continue\n    }\n\n    if (message.role === 'assistant') {\n      flushPendingImages()\n      const parts: unknown[] = []\n      for (const block of message.content) {\n        if (block.type === 'text') {\n          parts.push({ type: 'text', text: block.text })\n        } else if (block.type === 'reasoning') {\n          // Replay the thinking block, exactly as the official CLI's\n          // `toWireMessages` does (command-code@1.53.1: a `thinking` block\n          // becomes `{ type: 'reasoning', text }`). This is not optional\n          // politeness: the gateway rebuilds the provider request from these\n          // blocks, and a DeepSeek thinking-mode assistant turn whose tool\n          // calls arrive without its reasoning is rejected with \"The\n          // `reasoning_content` in the thinking mode must be passed back to\n          // the API\" — which failed every tool-loop turn (issue #34).\n          parts.push({ type: 'reasoning', text: block.text })\n        } else if (block.type === 'tool-call' && paired.has(block.id)) {\n          parts.push({\n            type: 'tool-call',\n            toolCallId: wireIds.get(block.id) ?? block.id,\n            toolName: block.name,\n            input: recordOrEmpty(block.arguments),\n          })\n        }\n      }\n      if (parts.length > 0) out.push({ role: 'assistant', content: parts })\n      continue\n    }\n\n    // tool-result message (user role, single tool-result block)\n    if (message.role === 'user' && message.source.kind === 'tool') {\n      const block = message.content[0]\n      if (!block || block.type !== 'tool-result' || !paired.has(block.toolCallId)) continue\n      const media = toolResultMedia(block)\n      // Resolved once: the tool message and the carrier note below must name\n      // the same call, or the model cannot tie an image back to its result.\n      const wireToolCallId = wireIds.get(block.toolCallId) ?? block.toolCallId\n      out.push({\n        role: 'tool',\n        content: [\n          {\n            type: 'tool-result',\n            toolCallId: wireToolCallId,\n            // `paired` guarantees a call with this id exists, so the map\n            // always hits; `|| 'unknown'` also guards an empty call name\n            // (matches the official CLI's `?? \"unknown\"` fallback).\n            toolName: toolNames.get(block.toolCallId) || 'unknown',\n            output: block.isError\n              ? { type: 'error-text', value: toolResultTextForWire(media) }\n              : { type: 'text', value: toolResultTextForWire(media) },\n          },\n        ],\n      })\n      // Images a tool returned (e.g. `read_image`) cannot ride inside the\n      // tool result on this wire, so they follow it as a user message —\n      // otherwise a Vision model receives the metadata text and no pixels.\n      if (media.images.length > 0) {\n        if (!readImage) {\n          throw new LlmError(\n            'Image input requires the durable attachment service',\n            'UNSUPPORTED_CONTENT',\n          )\n        }\n        const carried: unknown[] = [{ type: 'text', text: toolResultImageNote(media, wireToolCallId) }]\n        for (const attachment of media.images) {\n          carried.push(await imageToCommandCode(attachment, readImage))\n        }\n        pendingImages.push({ role: 'user', content: carried })\n      }\n    }\n  }\n  flushPendingImages()\n  return out\n}\n\n/**\n * Convert one image reference to the OpenAI Chat Completions wire format:\n * `{ type: 'image_url', image_url: { url: 'data:...;base64,...' } }`.\n */\nasync function imageToOpenAI(\n  ref: ImageAttachmentRef,\n  readImage: (ref: ImageAttachmentRef) => Promise<Uint8Array>,\n): Promise<{ type: 'image_url'; image_url: { url: string } }> {\n  const data = await readImage(ref)\n  return {\n    type: 'image_url',\n    image_url: {\n      url: `data:${ref.mediaType};base64,${Buffer.from(data).toString('base64')}`,\n    },\n  }\n}\n\n/**\n * Convert harness messages to the OpenAI Chat Completions request shape.\n *\n * Unlike the Command Code CLI transport, this transport is the documented\n * Provider API surface. DeepSeek's thinking-mode contract requires historical\n * `reasoning_content` to be passed back whenever tools are in play, so this\n * converter intentionally DOES replay reasoning blocks as `reasoning_content`\n * on assistant messages. Only tool calls with a paired tool result are\n * replayed (same policy as the CLI path).\n */\nasync function messagesToOpenAI(\n  messages: readonly Message[],\n  readImage?: (ref: ImageAttachmentRef) => Promise<Uint8Array>,\n): Promise<unknown[]> {\n  const out: unknown[] = []\n  const { ids: paired } = pairedToolCalls(messages)\n  // Same overlong-id remap as the CLI transport (issue #23): OpenAI\n  // `tool_call_id` fields accept longer values, but the remap keeps both\n  // transports consistent and correlation only needs to hold per request.\n  const wireIds = wireToolCallIds(paired)\n\n  // Tool-returned images ride as user messages after their tool result. The\n  // harness can emit several tool calls in one assistant turn, and the\n  // gateway expects an assistant's tool blocks to be answered consecutively:\n  // a user message interleaved between tool results breaks the pairing and\n  // the request is rejected. So image carriers are buffered and flushed only\n  // once the whole tool group (or the next non-tool message) has been emitted.\n  const pendingImages: unknown[] = []\n  const flushPendingImages = () => {\n    for (const message of pendingImages) out.push(message)\n    pendingImages.length = 0\n  }\n\n  for (const message of messages) {\n    // System messages are folded into the single top-level system message by\n    // the caller, matching the existing adapter's conversation folding.\n    if (message.role === 'system') continue\n\n    if (message.role === 'user' && message.source.kind !== 'tool') {\n      flushPendingImages()\n      const parts: unknown[] = []\n      for (const block of message.content) {\n        if (block.type === 'text') parts.push({ type: 'text', text: block.text })\n        if (block.type === 'image') {\n          if (!readImage) {\n            throw new LlmError(\n              'Image input requires the durable attachment service',\n              'UNSUPPORTED_CONTENT',\n            )\n          }\n          parts.push(await imageToOpenAI(block.attachment, readImage))\n        }\n      }\n      // Same rule as the CLI converter: a converted-to-nothing user message is\n      // dropped rather than sent as an empty content array. The flush above\n      // already ran, so a pending image carrier survives this skip.\n      if (parts.length === 0) continue\n      const hasImage = parts.some((part) => (part as { type?: string }).type === 'image_url')\n      if (!hasImage && parts.length === 1) {\n        out.push({ role: 'user', content: (parts[0] as { text: string }).text })\n      } else {\n        // Preserve separate text/image parts rather than silently joining\n        // text blocks together.\n        out.push({ role: 'user', content: parts })\n      }\n      continue\n    }\n\n    if (message.role === 'assistant') {\n      flushPendingImages()\n      const text = message.content\n        .filter((block): block is Extract<ContentBlock, { type: 'text' }> => block.type === 'text')\n        .map((block) => block.text)\n        .join('')\n      const reasoning = message.content\n        .filter((block): block is Extract<ContentBlock, { type: 'reasoning' }> => block.type === 'reasoning')\n        .map((block) => block.text)\n        .join('')\n      const toolCalls = message.content\n        .filter((block): block is Extract<ContentBlock, { type: 'tool-call' }> => block.type === 'tool-call' && paired.has(block.id))\n        .map((block) => ({\n          id: wireIds.get(block.id) ?? block.id,\n          type: 'function' as const,\n          function: {\n            name: block.name,\n            arguments: block.arguments,\n          },\n        }))\n\n      if (text === '' && reasoning === '' && toolCalls.length === 0) continue\n      const assistant: Record<string, unknown> = {\n        role: 'assistant',\n        content: text === '' ? null : text,\n      }\n      // Chat Completions / DeepSeek thinking mode: replay historical reasoning\n      // so tool-calling loops can continue from the previous chain of thought.\n      if (reasoning !== '') assistant.reasoning_content = reasoning\n      if (toolCalls.length > 0) assistant.tool_calls = toolCalls\n      out.push(assistant)\n      continue\n    }\n\n    // tool-result message (user role, single tool-result block)\n    if (message.role === 'user' && message.source.kind === 'tool') {\n      const block = message.content[0]\n      if (!block || block.type !== 'tool-result' || !paired.has(block.toolCallId)) continue\n      const media = toolResultMedia(block)\n      // Resolved once: the tool message and the carrier note below must name\n      // the same call, or the model cannot tie an image back to its result.\n      const wireToolCallId = wireIds.get(block.toolCallId) ?? block.toolCallId\n      out.push({\n        role: 'tool',\n        tool_call_id: wireToolCallId,\n        content: toolResultTextForWire(media),\n      })\n      // Chat Completions allows no image part under `role: 'tool'`, so a\n      // tool-returned image (e.g. `read_image`) follows as a user message.\n      if (media.images.length > 0) {\n        if (!readImage) {\n          throw new LlmError(\n            'Image input requires the durable attachment service',\n            'UNSUPPORTED_CONTENT',\n          )\n        }\n        const carried: unknown[] = [{ type: 'text', text: toolResultImageNote(media, wireToolCallId) }]\n        for (const attachment of media.images) {\n          carried.push(await imageToOpenAI(attachment, readImage))\n        }\n        pendingImages.push({ role: 'user', content: carried })\n      }\n    }\n  }\n  flushPendingImages()\n  return out\n}\n\n// ---------------------------------------------------------------------------\n// Adapter\n// ---------------------------------------------------------------------------\n/** Connection facts resolved fresh per request by the plugin entry. */\nexport interface CommandCodeConnectionOptions {\n  /** API base; the Provider API lives under it (`/alpha/generate`, `/provider/v1/chat/completions`, `/provider/v1/models`). */\n  apiBase: string\n  /** Working directory reported to the API (project slug, config block). */\n  workingDir: string\n  /** Model catalog cache path. */\n  modelsCachePath: string\n  /**\n   * Milliseconds to wait for generate response headers / first byte (default 60s).\n   * Must not bound the subsequent body stream — long generations are gated by\n   * {@link streamIdleTimeoutMs} and the caller AbortSignal instead.\n   */\n  requestTimeoutMs: number\n  /** Milliseconds a stream may stall before it is treated as a dead connection (default 300s). */\n  streamIdleTimeoutMs: number\n  /**\n   * Whether the picker hides models above the account's subscription tier\n   * (default true). The filter fails open: unknown plan, billing-endpoint\n   * failure, a positive on-demand credit balance, or an unmapped model all\n   * keep the full catalog visible. Set false to always list every model.\n   */\n  filterModelsByPlan?: boolean\n  /**\n   * Visible-model allowlist: catalog model ids shown in pickers. Empty or\n   * unset means \"show everything\"; applies after the subscription-tier filter.\n   * The settings page persists it; the catalog endpoint serves the full\n   * catalog regardless so the page can always offer every model.\n   */\n  visibleModels?: string[] | undefined\n  /**\n   * Per-model visibility overrides, keyed by catalog id. Written by the\n   * terminal settings page, whose checkbox list gives every model its own\n   * boolean field: a field writes one value at one path, so membership in\n   * {@link visibleModels} cannot be expressed from there, while a flag can.\n   * An id present here decides that model on its own (true = listed, false =\n   * hidden); an id absent here follows {@link visibleModels} exactly as it did\n   * before, so composition configs and the web page are unaffected.\n   */\n  modelVisibility?: Readonly<Record<string, boolean>> | undefined\n  /**\n   * Optional protocol hint. `'auto'` (default) uses billing/cache plus\n   * Provider API fallback; `'cli'` forces `/alpha/generate`; `'openai'`\n   * prefers `/provider/v1/chat/completions` but still falls back to the CLI\n   * transport on `upgrade_required` (Go-plan keys have no Provider API\n   * access — failing outright would strand them). This is a\n   * connection-level test/operator seam and is intentionally not part of\n   * the plugin's user settings schema.\n   */\n  protocol?: 'auto' | CommandCodeProtocol\n}\n\n/**\n * Resolve the durable attachment service, or undefined when the host does not\n * provide one. Called lazily only when a request actually carries images, so a\n * text-only request never depends on the attachment seam.\n */\nexport type ResolveAttachments = () => AttachmentStore | undefined\n\n/** Everything the adapter needs beyond the request itself. */\nexport interface CommandCodeAdapterDeps<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions> {\n  /** Resolve the current connection facts (fresh per request, settings-aware). */\n  options: () => C\n  /**\n   * Resolve a usable API key for the given connection facts and the request's\n   * model id, or throw `MISSING_CREDENTIAL`. The model is optional: hosts\n   * without model-aware routing ignore it.\n   */\n  resolveApiKey: (connection: C, model?: string) => Promise<string>\n  /**\n   * Multi-account rotation hook: the request sent with `rejectedKey` was\n   * refused with 429 (`rate-limit`) or 401 (`invalid-credential`) before\n   * any response body streamed. The host marks that key and returns the next\n   * account's key to retry with, or `undefined` to surface the failure.\n   * Only pre-stream rejections rotate — a mid-stream failure never replays a\n   * partially consumed generation against another account.\n   */\n  rotateApiKey?: (rejectedKey: string, rejection: 'rate-limit' | 'invalid-credential', connection: C, model?: string) => Promise<string | undefined>\n  /** HTTP transport override (tests); defaults to the global `fetch`. */\n  fetchImpl?: typeof fetch\n  /** Resolve the optional durable attachment service for image input (tests); defaults to none. */\n  resolveAttachments?: ResolveAttachments\n}\n\n/** Account identity from `/alpha/whoami`. */\nexport interface CommandCodeAccount {\n  id: string\n  name: string\n  userName: string\n}\n\n/** Usage summary from `/alpha/usage/summary`. */\nexport interface CommandCodeUsage {\n  totalCount: number\n  totalCost: number\n  successRate: number\n  completedCount: number\n  failedCount: number\n  totalTokensIn: number\n  totalTokensOut: number\n  totalCredits: number\n  periodBasis: string\n}\n\n/** Credit/limit state from `/alpha/billing/credits`. */\nexport interface CommandCodeCredits {\n  monthlyCredits: number\n  purchasedCredits: number\n  freeCredits: number\n  /**\n   * Whether the endpoint actually published a monthly balance. The scalar\n   * above defaults to 0 for shape stability, which is a LIE about an omitted\n   * field — and a false \"0 left, fully consumed\" on the dashboard. Consumers\n   * that render the figure must check this first: an explicit `false` means\n   * \"not reported\", not \"nothing left\".\n   *\n   * Optional on purpose. `undefined` means the flag itself was never recorded —\n   * an older Host half, or a frame from before this field existed — and is read\n   * as \"assume reported\", which is the behavior that shipped. Only an explicit\n   * `false` from a Host that knows the balance was omitted suppresses the\n   * figure, so a cross-version pair does not lose a real balance.\n   */\n  monthlyReported?: boolean\n  purchasedReported?: boolean\n  freeReported?: boolean\n  /**\n   * Five-hour rolling window limits, absent when the endpoint reported no such\n   * window. Absence is NOT \"a window with no cap\": a reported window with\n   * `cap === 0` is uncapped spend, while an absent one was never reported at\n   * all, and only the un-reported case must keep a figure off the dashboard.\n   */\n  fiveHour?: { used: number; cap: number; exceeded: boolean; resetAt: number }\n  /** Weekly window limits; absent under the same rule as {@link fiveHour}. */\n  weekly?: { used: number; cap: number; exceeded: boolean; resetAt: number }\n}\n\n/** Subscription plan state from `/alpha/billing/subscriptions`. */\nexport interface CommandCodePlan {\n  /** Raw subscription plan id (e.g. `individual-pro`); empty when unreported. */\n  planId: string\n  /** Display name (e.g. `Pro`); falls back to the raw id for unknown plans. */\n  name: string\n  /** Raw subscription status (`active`, `trialing`, `past_due`, …); empty when unreported. */\n  status: string\n  /** The plan's monthly credit total per {@link KNOWN_SUBSCRIPTION_PLANS}; null for unknown plans. */\n  monthlyCredits: number | null\n  /** Billing period end in millis; 0 when the endpoint did not report one. */\n  currentPeriodEnd: number\n}\n\n/**\n * Why every account endpoint failed at once (the report then carries no data\n * at all, so the degraded per-endpoint view would hide the root cause behind\n * a generic \"partial data\" note). Undefined for partial failures.\n */\nexport type UsageBlockReason = 'invalid-key' | 'service-unavailable' | 'network'\n\n/** Account endpoints fetched by one `getUsage()` run (see the classification there). */\nconst USAGE_ENDPOINT_COUNT = 4\n\n/** Everything the usage endpoints report, fetched together. */\nexport interface CommandCodeUsageReport {\n  account?: CommandCodeAccount\n  usage?: CommandCodeUsage\n  credits?: CommandCodeCredits\n  plan?: CommandCodePlan\n  /** Endpoint failures degrade the report instead of failing it. */\n  failures: string[]\n  /**\n   * The single reason every endpoint failed, when they all did: `invalid-key`\n   * (every call rejected with 401 — the stored key is wrong or expired),\n   * `service-unavailable` (every call answered 5xx), or `network` (no HTTP\n   * response at all). Undefined when any endpoint succeeded.\n   */\n  blocked?: UsageBlockReason\n}\n\n/**\n * Parse one usage/summary payload into the report's usage section.\n * Returns undefined when the endpoint answered nothing usable.\n */\nfunction parseUsageTotals(usage: Record<string, unknown> | undefined): CommandCodeUsage | undefined {\n  // Note: `getUsage` always answers `usage` (200 with `{}` parses to zeros)\n  // — undefined here means the endpoint failed or answered non-JSON, which\n  // the caller already booked into `failures`.\n  if (usage === undefined) return undefined\n  return {\n    totalCount: numberValue(usage.totalCount) ?? 0,\n    totalCost: numberValue(usage.totalCost) ?? 0,\n    successRate: numberValue(usage.successRate) ?? 0,\n    completedCount: numberValue(usage.completedCount) ?? 0,\n    failedCount: numberValue(usage.failedCount) ?? 0,\n    totalTokensIn: numberValue(usage.totalTokensIn) ?? 0,\n    totalTokensOut: numberValue(usage.totalTokensOut) ?? 0,\n    totalCredits: numberValue(usage.totalCredits) ?? 0,\n    periodBasis: stringValue(usage.periodBasis) ?? 'billing-period',\n  }\n}\n\n/** Parse one window-limit block (`fiveHour` / `weekly`). */\n/**\n * Parse one window block into a window limit, or undefined when the endpoint\n * reported no such window.\n *\n * Returning undefined (rather than a zeroed window) is load-bearing: the panel\n * must not draw a quota row for a window the account never reported, and a\n * zeroed window is indistinguishable from a genuinely uncapped one.\n */\nfunction parseWindowLimit(value: unknown): CommandCodeCredits['fiveHour'] {\n  const block = isRecord(value) ? value : undefined\n  if (block === undefined) return undefined\n  return {\n    used: numberValue(block.used) ?? 0,\n    cap: numberValue(block.cap) ?? 0,\n    exceeded: block.exceeded === true,\n    resetAt: numberValue(block.resetAt) ?? 0,\n  }\n}\n\n/**\n * Parse one billing/credits payload into the report's credits section.\n * Returns undefined when the endpoint answered nothing usable.\n */\nfunction parseCreditLimits(credits: Record<string, unknown> | undefined): CommandCodeCredits | undefined {\n  if (credits === undefined) return undefined\n  const creditsData = isRecord(credits.credits) ? credits.credits : undefined\n  const windowLimits = isRecord(credits.windowLimits) ? credits.windowLimits : undefined\n  const fiveHour = windowLimits !== undefined && isRecord(windowLimits.fiveHour) ? windowLimits.fiveHour : undefined\n  const weekly = windowLimits !== undefined && isRecord(windowLimits.weekly) ? windowLimits.weekly : undefined\n  if (creditsData === undefined && fiveHour === undefined && weekly === undefined) return undefined\n  const parsed: CommandCodeCredits = {\n    monthlyCredits: numberValue(creditsData?.monthlyCredits) ?? 0,\n    purchasedCredits: numberValue(creditsData?.purchasedCredits) ?? 0,\n    freeCredits: numberValue(creditsData?.freeCredits) ?? 0,\n    // Recorded separately from the scalar: the panel must not report an\n    // omitted balance as a consumed one.\n    monthlyReported: numberValue(creditsData?.monthlyCredits) !== undefined,\n    purchasedReported: numberValue(creditsData?.purchasedCredits) !== undefined,\n    freeReported: numberValue(creditsData?.freeCredits) !== undefined,\n  }\n  // Optional members are only present when reported, never present-but-undefined\n  // (`exactOptionalPropertyTypes`), so an absent window cannot be mistaken for a\n  // parsed one with zeroed numbers.\n  const fiveHourLimit = parseWindowLimit(fiveHour)\n  const weeklyLimit = parseWindowLimit(weekly)\n  if (fiveHourLimit !== undefined) parsed.fiveHour = fiveHourLimit\n  if (weeklyLimit !== undefined) parsed.weekly = weeklyLimit\n  return parsed\n}\n\n/**\n * Parse the account identity from whoami plus the plan identity from the\n * subscriptions/credits payloads. Returns the org id for the subscriptions\n * query alongside, so getUsage fetches whoami first and the rest in parallel.\n */\nfunction parseAccountIdentity(whoami: Record<string, unknown> | undefined): {\n  account: CommandCodeAccount | undefined\n  orgId: string | undefined\n} {\n  const whoamiData = whoami !== undefined && isRecord(whoami.user) ? whoami.user : undefined\n  const orgData = whoami !== undefined && isRecord(whoami.org) ? whoami.org : undefined\n  return {\n    account: whoamiData === undefined ? undefined : {\n      id: stringValue(whoamiData.id) ?? '',\n      name: stringValue(whoamiData.name) ?? '',\n      userName: stringValue(whoamiData.userName) ?? '',\n    },\n    orgId: orgData === undefined ? undefined : stringValue(orgData.id),\n  }\n}\n\n/**\n * Classify a TOTAL failure: when every endpoint failed with one class of\n * error, the degraded per-endpoint view would hide the root cause behind\n * a generic \"partial data\" note — name it instead.\n */\nfunction classifyTotalFailure(\n  failures: readonly string[],\n  failedStatuses: ReadonlyArray<number | undefined>,\n): UsageBlockReason | undefined {\n  // Four endpoints are fetched (whoami, usage/summary, billing/credits,\n  // billing/subscriptions; the last may carry an orgId query, so the\n  // classification counts endpoints, not paths).\n  if (failures.length !== USAGE_ENDPOINT_COUNT) return undefined\n  const codes = failedStatuses.filter((status): status is number => status !== undefined)\n  if (codes.length === USAGE_ENDPOINT_COUNT && codes.every((code) => code === 401)) {\n    return 'invalid-key'\n  }\n  if (codes.length === USAGE_ENDPOINT_COUNT && codes.every((code) => code >= 500)) {\n    return 'service-unavailable'\n  }\n  if (codes.length === 0) return 'network'\n  return undefined\n}\n\n/**\n * The shared facts one generate call needs, computed once up front so the\n * body builders, the connect loop, and the stream pump below all read the\n * same snapshot instead of closing over `stream()` locals.\n */\ninterface GenerateCallFacts {\n  /** Resolved API key for the first attempt (rotation may replace it). */\n  apiKey: string\n  /** maxTokens cap for the request model (in-memory catalog, else default). */\n  maxTokens: number\n  /** Validated reasoning effort, or undefined when unset/unsupported. */\n  reasoningEffort: string | undefined\n  /** Folded system text (top-level system + system-role messages). */\n  systemText: string\n  /** Per-call image byte resolver; set only when the request carries images. */\n  readImage: ((ref: ImageAttachmentRef) => Promise<Uint8Array>) | undefined\n}\n\n/** Build the legacy CLI (`/alpha/generate`) request body for one call. */\nasync function buildCliBody(\n  options: GenerateOptions,\n  connection: CommandCodeConnectionOptions,\n  facts: Pick<GenerateCallFacts, 'maxTokens' | 'reasoningEffort' | 'systemText' | 'readImage'>,\n): Promise<Record<string, unknown>> {\n  return {\n    config: {\n      workingDir: connection.workingDir,\n      date: new Date().toISOString().split('T')[0],\n      environment: `${process.platform}-${process.arch}, Node.js ${process.version}`,\n      structure: [],\n      isGitRepo: false,\n      currentBranch: '',\n      mainBranch: '',\n      gitStatus: '',\n      recentCommits: [],\n    },\n    memory: null,\n    taste: null,\n    skills: null,\n    params: {\n      model: options.model,\n      messages: await messagesToCC(options.messages, facts.readImage),\n      tools: (options.tools ?? []).map((tool) => ({\n        type: 'function',\n        name: tool.name,\n        description: tool.description,\n        input_schema: toolParametersSchema(tool.parameters),\n      })),\n      system: facts.systemText,\n      max_tokens: facts.maxTokens,\n      temperature: options.temperature ?? 0.3,\n      stream: true,\n      ...(facts.reasoningEffort ? { reasoning_effort: facts.reasoningEffort } : {}),\n    },\n    threadId: randomUUID(),\n  }\n}\n\n/** Build the documented Provider Chat Completions request body for one call. */\nasync function buildOpenAIBody(\n  options: GenerateOptions,\n  facts: Pick<GenerateCallFacts, 'maxTokens' | 'reasoningEffort' | 'systemText' | 'readImage'>,\n): Promise<Record<string, unknown>> {\n  const openAiMessages = [\n    ...(facts.systemText ? [{ role: 'system', content: facts.systemText }] : []),\n    ...(await messagesToOpenAI(options.messages, facts.readImage)),\n  ]\n  const openAiTools = (options.tools ?? []).map((tool) => ({\n    type: 'function',\n    function: {\n      name: tool.name,\n      description: tool.description,\n      parameters: toolParametersSchema(tool.parameters),\n    },\n  }))\n  return {\n    model: options.model,\n    messages: openAiMessages,\n    ...(openAiTools.length > 0 ? { tools: openAiTools } : {}),\n    max_tokens: facts.maxTokens,\n    temperature: options.temperature ?? 0.3,\n    stream: true,\n    ...(facts.reasoningEffort ? { reasoning_effort: facts.reasoningEffort } : {}),\n  }\n}\n\n/**\n * One connect attempt's inputs: everything `connectGenerate` needs beyond\n * the per-attempt key and protocol. Passed explicitly (not closed over) so\n * the rotation loop's mutation of `protocol`/`body` stays visible at the\n * call site.\n */\ninterface GenerateConnectDeps {\n  options: GenerateOptions\n  connection: CommandCodeConnectionOptions\n  fetchImpl: typeof fetch\n}\n\n/**\n * One pre-stream connect attempt: POST the body and wait for response\n * headers only (`requestTimeoutMs` must never bound the body stream — see\n * the caller). Returns the live response plus its cleanup, or the rejection\n * facts for the rotation loop to classify. Every failure path cleans up\n * before returning or throwing; on success the caller-abort listener\n * outlives the connect phase (it aborts a stalled body read), so the\n * streaming tail calls cleanup.\n */\nasync function connectGenerate(\n  deps: GenerateConnectDeps,\n  key: string,\n  protocol: CommandCodeProtocol,\n  body: Record<string, unknown>,\n): Promise<{ response: Response; cleanup: () => void } | { status: number; errText: string; retryAfterMs?: number }> {\n  const { options, connection, fetchImpl } = deps\n  const connectAbort = new AbortController()\n  let connectTimedOut = false\n  const endpoint = protocol === 'cli'\n    ? `${connection.apiBase}/alpha/generate`\n    : `${connection.apiBase}/provider/v1/chat/completions`\n  const connectTimer = setTimeout(() => {\n    connectTimedOut = true\n    connectAbort.abort(\n      new DOMException(\n        `Command Code API request to ${endpoint} did not respond within ${connection.requestTimeoutMs}ms`,\n        'TimeoutError',\n      ),\n    )\n  }, connection.requestTimeoutMs)\n  const onCallerAbort = () => {\n    connectAbort.abort(options.signal?.reason)\n  }\n  if (options.signal) {\n    if (options.signal.aborted) {\n      onCallerAbort()\n    } else {\n      options.signal.addEventListener('abort', onCallerAbort, { once: true })\n    }\n  }\n  const cleanup = () => {\n    clearTimeout(connectTimer)\n    if (options.signal) {\n      options.signal.removeEventListener('abort', onCallerAbort)\n    }\n  }\n\n  let response: Response\n  const headers = protocol === 'cli'\n    ? {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${key}`,\n        'x-command-code-version': COMMAND_CODE_CLI_VERSION,\n        'x-cli-environment': 'production',\n        'x-project-slug': projectSlugFromPath(connection.workingDir),\n        'x-taste-learning': 'true',\n        'x-co-flag': 'false',\n        ...attributionHeaders(),\n      }\n    : {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${key}`,\n        Accept: 'text/event-stream',\n        // Deliberately no x-command-code-version / x-cli-environment:\n        // this is the documented OpenAI-format surface, not the CLI\n        // transport — do not \"fix\" these in.\n        ...attributionHeaders(),\n      }\n  try {\n    response = await fetchImpl(endpoint, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n      signal: connectAbort.signal,\n    })\n    clearTimeout(connectTimer)\n  } catch (error: unknown) {\n    cleanup()\n    if (options.signal?.aborted) {\n      throw error\n    }\n    if (connectTimedOut || (error instanceof DOMException && error.name === 'TimeoutError')) {\n      throw new LlmError(\n        `Command Code API request to ${endpoint} did not respond within ${connection.requestTimeoutMs}ms`\n        + `: ${errorChain(error)}`\n        + `；Command Code API 请求在 ${connection.requestTimeoutMs} 毫秒内未收到响应——通常是网络或代理问题，请检查后重试`,\n        'TIMEOUT',\n        { cause: error },\n      )\n    }\n    // fetch wraps every transport failure (DNS, refused connection, TLS,\n    // proxy, reset) in a bare `TypeError: fetch failed` whose actionable\n    // detail lives on `cause`. Include the full chain so the failure reason\n    // shown in the web UI (which renders only the message, not `cause`)\n    // names the real root cause instead of a generic wrapper.\n    throw new LlmError(\n      `Command Code API request to ${endpoint} failed: ${errorChain(error)}`\n      + '；Command Code API 请求连接失败——通常是网络或代理问题，请检查网络或代理设置后重试',\n      'TRANSPORT',\n      { cause: error },\n    )\n  }\n\n  if (!response.ok) {\n    const errText = await response.text().catch(() => '')\n    cleanup()\n    const retryAfterMs = parseRetryAfterMs(response.headers.get('retry-after'))\n    // exactOptionalPropertyTypes: the key must be absent, not undefined.\n    return retryAfterMs === undefined\n      ? { status: response.status, errText }\n      : { status: response.status, errText, retryAfterMs }\n  }\n  return { response, cleanup }\n}\n\n/**\n * The StreamChunk block-assembly state shared by both transport handlers:\n * at most one text block and one reasoning block are open at a time (same\n * assumption as the pi plugin).\n */\ninterface BlockAssembler {\n  nextIndex: number\n  textIndex: number\n  textContent: string\n  reasoningIndex: number\n  reasoningContent: string\n  sawContent: boolean\n  /** Buffered OpenAI tool-call fragments, flushed at finish. */\n  openAiToolCalls: Array<{ index: number; id?: string; name: string; arguments: string }>\n}\n\n/** Fresh block-assembly state for one stream. */\nfunction createBlockAssembler(): BlockAssembler {\n  return {\n    nextIndex: 0,\n    textIndex: -1,\n    textContent: '',\n    reasoningIndex: -1,\n    reasoningContent: '',\n    sawContent: false,\n    openAiToolCalls: [],\n  }\n}\n\nfunction* closeText(asm: BlockAssembler): Generator<StreamChunk> {\n  if (asm.textIndex < 0) return\n  yield {\n    type: 'block-end',\n    index: asm.textIndex,\n    block: { type: 'text', text: asm.textContent },\n  }\n  asm.textIndex = -1\n  asm.textContent = ''\n}\n\nfunction* closeReasoning(asm: BlockAssembler): Generator<StreamChunk> {\n  if (asm.reasoningIndex < 0) return\n  yield {\n    type: 'block-end',\n    index: asm.reasoningIndex,\n    block: { type: 'reasoning', text: asm.reasoningContent },\n  }\n  asm.reasoningIndex = -1\n  asm.reasoningContent = ''\n}\n\nfunction* emitOpenAiToolCalls(asm: BlockAssembler): Generator<StreamChunk> {\n  for (const call of asm.openAiToolCalls) {\n    const id = call.id ?? randomUUID()\n    const name = call.name ?? ''\n    const args = call.arguments || '{}'\n    const index = asm.nextIndex++\n    asm.sawContent = true\n    yield { type: 'block-start', index, blockType: 'tool-call' }\n    yield { type: 'tool-call-delta', index, id: ToolCallId(id), name, argumentsDelta: args }\n    yield {\n      type: 'block-end',\n      index,\n      block: { type: 'tool-call', id: ToolCallId(id), name, arguments: args },\n    }\n  }\n  asm.openAiToolCalls.length = 0\n}\n\nexport class CommandCodeAdapter<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions> extends LlmAdapter {\n  private catalog: CommandCodeModel[] = []\n  private readonly fetchImpl: typeof fetch\n  private readonly resolveAttachments: ResolveAttachments | undefined\n  // Billing facts are per account: with a multi-account pool each key has its\n  // own subscription tier, so the cache and the in-flight dedupe are keyed by\n  // the resolved API key (process-local only, never logged). Entries are\n  // small and bounded by the account count in practice; a changed key simply\n  // starts a fresh entry while the orphaned one goes cold (no eviction —\n  // transience is intentional, persistence would serve stale tiers).\n  private readonly billingAccess = new Map<string, { value: CommandCodeBillingAccess | undefined; at: number }>()\n  private readonly billingAccessInflight = new Map<string, Promise<CommandCodeBillingAccess | undefined>>()\n  // Protocol preference is per account: the Go plan is the only plan without\n  // Provider API access, and that fact is independent of model. A negative\n  // result (provider API rejected this key with upgrade_required) is cached so\n  // every request does not pay the double TTFT of probing then falling back.\n  // Same bounded-by-account-count note as above: no eviction by design.\n  private readonly protocolCache = new Map<string, { useCli: boolean; at: number }>()\n\n  constructor(private readonly deps: CommandCodeAdapterDeps<C>) {\n    super()\n    this.fetchImpl = deps.fetchImpl ?? fetch\n    this.resolveAttachments = deps.resolveAttachments\n  }\n\n  /**\n   * Display metadata for the picker's provider group header. The base class\n   * returns the raw route id (`commandcode`, all lowercase) as the name, which\n   * is what the model selector shows as this group's sticky title; return the\n   * proper display name instead, matching the Models settings page card (the\n   * configurable-provider `displayName`). The id must stay equal to the route.\n   */\n  override providerInfo(provider: string): LlmProviderInfo {\n    return { id: provider, name: 'Command Code' }\n  }\n\n  /**\n   * Near-unbounded retry for transient failures only (`mode: 'normal'` with\n   * an explicit 1000-attempt cap — opencode-style persistence without the\n   * unbounded loop): `RATE_LIMIT`/`SERVER`/`TIMEOUT`/`TRANSPORT`/\n   * `EMPTY_RESPONSE` retry up to 1000 times with waits doubling from 500 ms\n   * and capping at 15 minutes (±10% jitter), so an exhausted 5-hour window\n   * recovers in-session instead of failing after two tries. Permanent\n   * failures (an invalid key's `INVALID_CREDENTIAL`, `UNSUPPORTED_CONTENT`,\n   * plan rejections) are absent from the whitelist and surface immediately\n   * instead of looping. Waits the pool/adapter attach as\n   * `providerRetryAfterMs` are honored verbatim at or below the 15-minute\n   * cap and never attached above it (in normal mode a longer attached wait\n   * makes the executor abandon the retry outright — see RETRY_MAX_DELAY_MS).\n   *\n   * Captured once at route registration (dsh-llm snapshots this value), so a\n   * future config knob for it would apply on profile restart, not per request.\n   */\n  override providerRetryPolicy(_provider: string): ResolvedRetryPolicy {\n    return resolveRetryPolicy(\n      {\n        mode: 'normal',\n        maxRetries: 1000,\n        retryableCodes: ['EMPTY_RESPONSE', 'RATE_LIMIT', 'SERVER', 'TIMEOUT', 'TRANSPORT'],\n        backoff: { initialDelayMs: 500, maxDelayMs: RETRY_MAX_DELAY_MS, jitterRatio: 0.1 },\n      },\n      'llm-commandcode: retryPolicy',\n    )\n  }\n\n  /** Refresh the catalog (live fetch, cache fallback) and return it. */\n  private async loadCatalog(signal?: AbortSignal): Promise<CommandCodeModel[]> {\n    const { apiBase, modelsCachePath } = this.deps.options()\n    try {\n      const response = await this.fetchImpl(`${apiBase}/provider/v1/models`, {\n        headers: { accept: 'application/json', ...attributionHeaders() },\n        signal: signal ?? AbortSignal.timeout(MODELS_TIMEOUT_MS),\n      })\n      if (!response.ok) {\n        throw new Error(`models endpoint returned ${response.status}`)\n      }\n      this.catalog = parseCatalogResponse(await response.json())\n      await writeModelsCache(modelsCachePath, this.catalog).catch(() => undefined)\n    } catch (error) {\n      if (signal?.aborted) throw error\n      // A catalog refresh failure is a degradation, not a request failure:\n      // fall back to the last successful catalog on disk (or the in-memory\n      // one from an earlier successful load). The adapter still serves any\n      // model the user names; only the advisory selector loses entries.\n      this.catalog = await readModelsCache(modelsCachePath).catch(() => this.catalog)\n    }\n    return this.catalog\n  }\n\n  override async listModels(\n    provider: string,\n    opts?: { unfiltered?: boolean },\n  ): Promise<readonly LlmModelInfo[]> {\n    const catalog = await this.loadCatalog()\n    const toInfo = (model: (typeof catalog)[number]) => {\n      const vision = KNOWN_IMAGE_MODELS.has(model.id)\n      return {\n        provider,\n        id: model.id,\n        name: `${model.name} (CC)`,\n        // The picker renders `description` under the model name: plan tier,\n        // active deal, Image marker for Vision models, and context window.\n        description: capabilityDescription(model.id, model.contextWindow),\n        inputModalities: vision ? (['text', 'image'] as const) : (['text'] as const),\n      }\n    }\n    // Unfiltered: the settings page's catalog endpoint serves the full catalog\n    // so the filter editor can always offer every model.\n    if (opts?.unfiltered === true) return catalog.map(toInfo).sort(compareByPlan)\n    // Plan filter: hide models above the account's subscription tier. Fails\n    // open — a billing-fetch problem, an unknown plan, or a positive\n    // on-demand balance all keep the full catalog visible, and the server\n    // remains the final gate (403 MODEL_NOT_IN_PLAN). The catalog itself is\n    // never filtered: resolveModel still serves every model.\n    const access = this.deps.options().filterModelsByPlan === false\n      ? undefined\n      : await this.loadBillingAccess()\n    // Visible-model allowlist: empty/unset means \"show everything\".\n    const visible = this.deps.options().visibleModels\n    const allow = Array.isArray(visible) && visible.length > 0\n      ? new Set(visible.filter((id) => typeof id === 'string' && id !== ''))\n      : undefined\n    // Per-model overrides, written by the terminal settings page's checkboxes\n    // (its seam can only give each model its own boolean field, and a boolean\n    // cannot express \"this id is in the list\"). An explicit flag decides the\n    // model on its own; everything unflagged still follows the array above, so\n    // a composition-config allowlist and the web page keep working untouched.\n    const overrides = this.deps.options().modelVisibility\n    return catalog\n      .filter((model) => modelVisibleInPlan(model.id, access))\n      .filter((model) => {\n        const override = overrides?.[model.id]\n        if (typeof override === 'boolean') return override\n        return allow === undefined || allow.has(model.id)\n      })\n      .map(toInfo)\n      // The picker renders rows in the order returned: sort by plan tier\n      // (Go first, … Provider last) so the models a Go-plan user can actually\n      // use lead the list, then alphabetically within each tier.\n      .sort(compareByPlan)\n  }\n\n  override async resolveModel(\n    provider: string,\n    model: string,\n    signal?: AbortSignal,\n  ): Promise<LlmResolvedModelInfo> {\n    const entry =\n      this.catalog.find((m) => m.id === model) ??\n      (await this.loadCatalog(signal)).find((m) => m.id === model)\n\n    const efforts = KNOWN_EFFORTS[model]\n    const vision = KNOWN_IMAGE_MODELS.has(model)\n    return {\n      provider,\n      id: model,\n      name: entry ? `${entry.name} (CC)` : model,\n      description: capabilityDescription(model, entry?.contextWindow),\n      inputModalities: vision ? (['text', 'image'] as const) : (['text'] as const),\n      ...(entry\n        ? {\n            context: { contextWindow: entry.contextWindow },\n            defaultMaxTokens: Math.min(entry.maxTokens, DEFAULT_GENERATE_MAX_TOKENS),\n          }\n        : {}),\n      // Omit `reasoning` entirely for models without known effort support:\n      // the harness then treats the model as having no selectable efforts.\n      ...(efforts\n        ? {\n            reasoning: {\n              efforts: efforts.map((effort) => ({\n                id: ReasoningEffortId(effort),\n                name: effort,\n              })),\n            },\n          }\n        : {}),\n    }\n  }\n\n  /** The headers every authenticated account endpoint shares. */\n  private async accountHeaders(apiKey?: string): Promise<Record<string, string>> {\n    const connection = this.deps.options()\n    const key = apiKey ?? (await this.deps.resolveApiKey(connection))\n    return {\n      Authorization: `Bearer ${key}`,\n      'x-command-code-version': COMMAND_CODE_CLI_VERSION,\n      'x-cli-environment': 'production',\n      ...attributionHeaders(),\n    }\n  }\n\n  /**\n   * Fetch one account endpoint and parse its JSON body. Returns the HTTP\n   * status alongside the parsed record so each caller applies its own\n   * failure accounting: the billing probe fails open silently, the usage\n   * report books failures per endpoint. Non-2xx and non-record bodies come\n   * back without a record; only a transport throw propagates to the caller.\n   */\n  private async fetchEndpointJson(\n    url: string,\n    headers: Record<string, string>,\n  ): Promise<{ status: number; record?: Record<string, unknown> }> {\n    const response = await this.fetchImpl(url, {\n      headers,\n      // A hung account endpoint must not stall the picker / usage card forever.\n      signal: AbortSignal.timeout(MODELS_TIMEOUT_MS),\n    })\n    if (!response.ok) return { status: response.status }\n    const parsed: unknown = await response.json()\n    return { status: response.status, ...(isRecord(parsed) ? { record: parsed } : {}) }\n  }\n\n  /**\n   * The billing facts behind the picker's plan filter, cached for\n   * {@link BILLING_ACCESS_TTL_MS} and shared across concurrent callers.\n   * `undefined` means \"unknown — show everything\" (fail-open).\n   */\n  private async loadBillingAccess(): Promise<CommandCodeBillingAccess | undefined> {\n    let apiKey: string\n    try {\n      apiKey = await this.deps.resolveApiKey(this.deps.options())\n    } catch {\n      return undefined\n    }\n    const cached = this.billingAccess.get(apiKey)\n    if (cached !== undefined && Date.now() - cached.at < BILLING_ACCESS_TTL_MS) return cached.value\n    const existing = this.billingAccessInflight.get(apiKey)\n    if (existing !== undefined) return existing\n    const inflight = this.fetchBillingAccess(apiKey)\n      .then((value) => {\n        this.billingAccess.set(apiKey, { value, at: Date.now() })\n        return value\n      })\n      .finally(() => {\n        this.billingAccessInflight.delete(apiKey)\n      })\n    this.billingAccessInflight.set(apiKey, inflight)\n    return inflight\n  }\n\n  /**\n   * The billing facts behind the picker's plan filter, mirroring the CLI's\n   * `createBilling` flow: whoami yields the org id, then the subscriptions\n   * and credits endpoints answer in parallel. The plan id is honored only\n   * when the subscription reports an active-ish status (the CLI's rule); when\n   * the subscriptions endpoint fails entirely, `credits.planId` is the\n   * fallback (the CLI stamps plan identity from it too). Any failure resolves\n   * to `undefined` (fail-open) rather than breaking the picker.\n   */\n  private async fetchBillingAccess(apiKey: string): Promise<CommandCodeBillingAccess | undefined> {\n    try {\n      const connection = this.deps.options()\n      const headers = await this.accountHeaders(apiKey)\n      const base = connection.apiBase\n      // Billing probe fails open silently: any non-record is \"unknown\".\n      const getJson = async (path: string): Promise<Record<string, unknown> | undefined> =>\n        (await this.fetchEndpointJson(`${base}${path}`, headers)).record\n      const whoami = await getJson('/alpha/whoami')\n      const orgData = whoami && isRecord(whoami.org) ? whoami.org : undefined\n      const orgId = orgData === undefined ? undefined : stringValue(orgData.id)\n      const [subscription, credits] = await Promise.all([\n        getJson(orgId === undefined\n          ? '/alpha/billing/subscriptions'\n          : `/alpha/billing/subscriptions?orgId=${encodeURIComponent(orgId)}`),\n        getJson('/alpha/billing/credits'),\n      ])\n      const subData = subscription && isRecord(subscription.data) ? subscription.data : undefined\n      const creditsData = credits && isRecord(credits.credits) ? credits.credits : undefined\n      if (subData === undefined && creditsData === undefined) return undefined\n      let planId: string | undefined\n      if (subData !== undefined) {\n        const status = stringValue(subData.status)\n        if (status !== undefined && ACTIVE_SUBSCRIPTION_STATUSES.has(status)) planId = stringValue(subData.planId)\n      } else {\n        planId = stringValue(creditsData?.planId)\n      }\n      return {\n        tierWeight: planId === undefined ? undefined : subscriptionPlanInfo(planId)?.tierWeight,\n        onDemandCredits: (numberValue(creditsData?.purchasedCredits) ?? 0) + (numberValue(creditsData?.freeCredits) ?? 0),\n      }\n    } catch {\n      return undefined\n    }\n  }\n\n  /** Fresh cached billing tier weight for a key, or undefined when not known. */\n  private cachedBillingTierWeight(apiKey: string): number | undefined {\n    const hit = this.billingAccess.get(apiKey)\n    if (hit === undefined || Date.now() - hit.at >= BILLING_ACCESS_TTL_MS) return undefined\n    return hit.value?.tierWeight\n  }\n\n  /** Cached protocol decision for a key, or undefined when expired/unknown. */\n  private cachedProtocolUseCli(apiKey: string): boolean | undefined {\n    const hit = this.protocolCache.get(apiKey)\n    if (hit === undefined || Date.now() - hit.at >= PROTOCOL_CACHE_TTL_MS) return undefined\n    return hit.useCli\n  }\n\n  private rememberProtocol(apiKey: string, useCli: boolean): void {\n    this.protocolCache.set(apiKey, { useCli, at: Date.now() })\n  }\n\n  /**\n   * Choose the initial protocol for one request. A fresh protocol cache entry\n   * wins; otherwise a cached (not network-fetched) billing tier of Go is\n   * treated as CLI-only. Unknown accounts default to Provider API and fall\n   * back only after an `upgrade_required` rejection.\n   */\n  private resolveProtocol(apiKey: string): CommandCodeProtocol {\n    const forced = this.deps.options().protocol\n    if (forced === 'cli' || forced === 'openai') return forced\n    const cached = this.cachedProtocolUseCli(apiKey)\n    if (cached !== undefined) return cached ? 'cli' : 'openai'\n    if (this.cachedBillingTierWeight(apiKey) === GO_TIER_WEIGHT) {\n      this.rememberProtocol(apiKey, true)\n      return 'cli'\n    }\n    return 'openai'\n  }\n\n\n  /**\n   * Fetch account, usage, credit, and subscription state from the Command\n   * Code account endpoints (`/alpha/whoami`, `/alpha/usage/summary`,\n   * `/alpha/billing/credits`, `/alpha/billing/subscriptions`).\n   * Each endpoint degrades independently: a failed one lands in `failures`\n   * while the rest still report, so a transient outage never blanks the whole\n   * view. Requires a usable API key (throws `MISSING_CREDENTIAL` otherwise).\n   * Pass `apiKey` to report on a specific account of a multi-account pool;\n   * the default resolves the currently active account.\n   */\n  async getUsage(apiKey?: string): Promise<CommandCodeUsageReport> {\n    const connection = this.deps.options()\n    const base = connection.apiBase\n    const headers = await this.accountHeaders(apiKey)\n    const failures: string[] = []\n    // HTTP status per failed endpoint (undefined for transport failures), in\n    // failure order — the all-failed classification below reads it.\n    const failedStatuses: Array<number | undefined> = []\n\n    const getJson = async (path: string): Promise<Record<string, unknown> | undefined> => {\n      try {\n        const { status, record } = await this.fetchEndpointJson(`${base}${path}`, headers)\n        if (record === undefined) {\n          failures.push(`${path}: HTTP ${status}`)\n          failedStatuses.push(status)\n          return undefined\n        }\n        return record\n      } catch (error: unknown) {\n        failures.push(`${path}: ${error instanceof Error ? error.message : String(error)}`)\n        failedStatuses.push(undefined)\n        return undefined\n      }\n    }\n\n    const report: CommandCodeUsageReport = { failures }\n\n    // whoami first (account identity + the org id the subscriptions query\n    // needs); the other three endpoints are independent once headers exist,\n    // so they run in parallel instead of paying 4x the timeout serially.\n    const whoami = await getJson('/alpha/whoami')\n    const { account, orgId } = parseAccountIdentity(whoami)\n    if (account !== undefined) report.account = account\n    const [usage, credits, subscription] = await Promise.all([\n      getJson('/alpha/usage/summary'),\n      getJson('/alpha/billing/credits'),\n      getJson(orgId === undefined\n        ? '/alpha/billing/subscriptions'\n        : `/alpha/billing/subscriptions?orgId=${encodeURIComponent(orgId)}`),\n    ])\n\n    // usage/summary -> totals.\n    const totals = parseUsageTotals(usage)\n    if (totals !== undefined) report.usage = totals\n\n    // billing/credits -> credit + window limits.\n    const limits = parseCreditLimits(credits)\n    if (limits !== undefined) report.credits = limits\n\n    // billing/subscriptions -> plan identity + billing period. The credits\n    // response may also carry a planId; it is the fallback when the\n    // subscriptions endpoint fails.\n    const subData = subscription !== undefined && isRecord(subscription.data) ? subscription.data : undefined\n    const creditsData = credits !== undefined && isRecord(credits.credits) ? credits.credits : undefined\n    const planId = stringValue(subData?.planId) ?? stringValue(creditsData?.planId)\n    if (subData !== undefined || planId !== undefined) {\n      const info = planId === undefined ? undefined : subscriptionPlanInfo(planId)\n      report.plan = {\n        planId: planId ?? '',\n        name: info?.name ?? planId ?? '',\n        status: stringValue(subData?.status) ?? '',\n        monthlyCredits: info?.monthlyCredits ?? null,\n        currentPeriodEnd: periodEndValue(subData?.currentPeriodEnd),\n      }\n    }\n\n    const blocked = classifyTotalFailure(failures, failedStatuses)\n    if (blocked !== undefined) report.blocked = blocked\n\n    return report\n  }\n\n  /**\n   * Probe one account's five-hour window from `/alpha/billing/credits`. The\n   * multi-account pool calls this when every account is marked exhausted: an\n   * account whose window no longer reports `exceeded` is revived, and the\n   * `resetAt` values feed the \"earliest reset\" error message. Returns\n   * `undefined` when the probe itself failed (transport, non-200, or a\n   * payload without window limits) — a failed probe never changes pool state.\n   */\n  async probeFiveHourWindow(apiKey: string): Promise<{ exceeded: boolean; resetAt: number } | undefined> {\n    try {\n      const connection = this.deps.options()\n      const response = await this.fetchImpl(`${connection.apiBase}/alpha/billing/credits`, {\n        headers: await this.accountHeaders(apiKey),\n        signal: AbortSignal.timeout(MODELS_TIMEOUT_MS),\n      })\n      if (!response.ok) return undefined\n      const parsed: unknown = await response.json()\n      if (!isRecord(parsed)) return undefined\n      const windowLimits = isRecord(parsed.windowLimits) ? parsed.windowLimits : undefined\n      const fiveHour = windowLimits && isRecord(windowLimits.fiveHour) ? windowLimits.fiveHour : undefined\n      if (fiveHour === undefined) return undefined\n      return { exceeded: fiveHour.exceeded === true, resetAt: numberValue(fiveHour.resetAt) ?? 0 }\n    } catch {\n      return undefined\n    }\n  }\n\n  async *stream(options: GenerateOptions): AsyncIterable<StreamChunk> {\n    if (options.stop?.length) {\n      // The Command Code wire format has no documented stop field; refuse\n      // loudly instead of silently dropping a request field.\n      throw new LlmError('Command Code adapter does not support stop sequences', 'UNSUPPORTED_OPTION')\n    }\n    const hasImages = options.messages.some(hasImageContent)\n    // Per-call image byte resolver, set only when this request carries images.\n    // Local, not an instance field: concurrent streams must never read each\n    // other's resolver.\n    let readImage: ((ref: ImageAttachmentRef) => Promise<Uint8Array>) | undefined\n    if (hasImages) {\n      // Model-capability gate: only models the official registry lists with\n      // Vision accept images natively. Command Code's own CLI falls back to a\n      // client-side VISION side-call for text-only models; this adapter does\n      // not reproduce that interactive feature, so it refuses loudly instead\n      // of sending bytes to a model that cannot read them.\n      if (!KNOWN_IMAGE_MODELS.has(options.model)) {\n        throw new LlmError(\n          `Command Code model \"${options.model}\" does not support image input;`\n          + ' switch to a Vision-capable model (see the model registry)',\n          'UNSUPPORTED_CONTENT',\n        )\n      }\n      // Attachment seam: images arrive as durable references; resolving them\n      // requires the host's attachment service.\n      const attachments = this.resolveAttachments?.()\n      if (attachments === undefined) {\n        throw new LlmError(\n          'Command Code image input requires the durable attachment service',\n          'UNSUPPORTED_CONTENT',\n        )\n      }\n      readImage = (ref) => attachments.readImage(ref).then((stored) => stored.data)\n    }\n\n    const connection = this.deps.options()\n    // The model id reaches key resolution so hosts with model→account routing\n    // rules can pick the account that covers this model.\n    let apiKey = await this.deps.resolveApiKey(connection, options.model)\n    // Cap maxTokens from the in-memory catalog: it warms via listModels /\n    // resolveModel on picker paths, and a fresh-process catalog must not add\n    // a models fetch (and its failure modes) in front of every generate.\n    const modelMax = this.catalog.find((m) => m.id === options.model)?.maxTokens\n      ?? DEFAULT_MAX_OUTPUT_TOKENS\n    const maxTokens = Math.min(\n      options.maxTokens ?? modelMax,\n      modelMax,\n      DEFAULT_GENERATE_MAX_TOKENS,\n    )\n\n    const effort = options.reasoningEffort as string | undefined\n    const supported = KNOWN_EFFORTS[options.model]\n    const reasoningEffort =\n      effort && effort !== 'off' && supported?.includes(effort) ? effort : undefined\n\n    const systemText = [\n      options.system ?? '',\n      ...options.messages\n        .filter((m) => m.role === 'system')\n        .map((m) => m.content.map(blockText).filter(Boolean).join('\\n')),\n    ]\n      .filter(Boolean)\n      .join('\\n\\n')\n\n    // Endpoint protocol: billing/cache may know Go plan -> CLI; unknown\n    // accounts default to the documented Provider Chat Completions surface.\n    let protocol: CommandCodeProtocol = this.resolveProtocol(apiKey)\n    const buildBody = async (target: CommandCodeProtocol): Promise<Record<string, unknown>> =>\n      target === 'cli'\n        ? buildCliBody(options, connection, { maxTokens, reasoningEffort, systemText, readImage })\n        : buildOpenAIBody(options, { maxTokens, reasoningEffort, systemText, readImage })\n    let body: Record<string, unknown> = await buildBody(protocol)\n\n\n    // Account rotation loop: the first attempt uses the pool's active key; a\n    // pre-stream 429/401 rotates to the next account (at most one attempt per\n    // distinct key, hard-capped so a misbehaving hook cannot loop forever).\n    // requestTimeoutMs bounds the headers wait of EACH attempt (see\n    // connectGenerate); the body is account-independent, nothing has\n    // streamed yet, so the switch is invisible to the caller.\n    const tried = new Set<string>()\n    const connectDeps: GenerateConnectDeps = { options, connection, fetchImpl: this.fetchImpl }\n    let connected: { response: Response; cleanup: () => void } | undefined\n    for (;;) {\n      tried.add(apiKey)\n      const attempt = await connectGenerate(connectDeps, apiKey, protocol, body)\n      if ('response' in attempt) {\n        connected = attempt\n        break\n      }\n      // Provider API is the preferred surface for non-Go accounts. If the\n      // gateway says the key is on the Go plan (the only plan without API\n      // access), remember that and retry the same key through /alpha/generate\n      // without burning the double TTFT on every later request.\n      if (\n        protocol === 'openai'\n        && isUpgradeRequiredError(attempt.status, attempt.errText)\n      ) {\n        protocol = 'cli'\n        this.rememberProtocol(apiKey, true)\n        body = await buildBody('cli')\n        continue\n      }\n      const rotate = this.deps.rotateApiKey\n      if (\n        (attempt.status === 429 || attempt.status === 401)\n        && rotate !== undefined\n        && options.signal?.aborted !== true\n        && tried.size < MAX_ACCOUNT_ROTATIONS\n      ) {\n        const next = await rotate(apiKey, attempt.status === 429 ? 'rate-limit' : 'invalid-credential', connection, options.model)\n        if (next !== undefined && !tried.has(next)) {\n          apiKey = next\n          continue\n        }\n      }\n      throw generateHttpError(attempt.status, attempt.errText, attempt.retryAfterMs)\n    }\n    if (connected === undefined) {\n      // Unreachable: the loop only exits via `break` (connected set) or\n      // `throw` above. The guard keeps the narrowing explicit.\n      throw new LlmError('Command Code API connection failed without a response', 'TRANSPORT')\n    }\n    const { response, cleanup } = connected\n    if (!response.body) {\n      cleanup()\n      throw new LlmError('Command Code API returned no response body', 'PROVIDER_PROTOCOL_ERROR')\n    }\n\n    // --- SSE/JSONL event stream -> harness StreamChunk protocol ---\n    const reader = response.body.getReader()\n    const decoder = new TextDecoder()\n    let buffer = ''\n\n    // Stream idle watchdog: a generation that stalls this long has a dead\n    // connection (the API keeps the socket open between reasoning/text\n    // bursts). The default (300s) is deliberately generous: frontier\n    // reasoning models (xhigh/max effort) can legitimately stay silent for\n    // minutes while thinking, and the official CLI sets no idle cap at all —\n    // an aggressive cap turns long thinking into spurious TIMEOUTs and\n    // retries. reader.cancel() unblocks a pending read(), which the loop then\n    // turns into a TIMEOUT failure instead of hanging forever.\n    let idleTimer: ReturnType<typeof setTimeout> | undefined\n    let idleFired = false\n    const armIdle = () => {\n      if (idleTimer !== undefined) clearTimeout(idleTimer)\n      idleTimer = setTimeout(() => {\n        idleFired = true\n        void reader.cancel().catch(() => undefined)\n      }, connection.streamIdleTimeoutMs)\n    }\n    const clearIdle = () => {\n      if (idleTimer !== undefined) {\n        clearTimeout(idleTimer)\n        idleTimer = undefined\n      }\n    }\n\n    const asm = createBlockAssembler()\n    const handle = (event: unknown): StreamChunk[] => handleEvent(asm, protocol, event)\n    try {\n      let finished = false\n      for (;;) {\n        let read: ReadableStreamReadResult<Uint8Array>\n        armIdle()\n        try {\n          read = await reader.read()\n        } catch (error: unknown) {\n          // A mid-stream transport failure (connection reset, TLS teardown)\n          // surfaces here. Caller cancellation propagates as-is.\n          if (options.signal?.aborted) throw error\n          throw new LlmError(\n            `Command Code API stream from ${connection.apiBase} failed while reading: ${errorChain(error)}`\n            + '；Command Code API 流式响应中途断开——网络波动所致，重试通常可恢复',\n            'TRANSPORT',\n            { cause: error },\n          )\n        } finally {\n          clearIdle()\n        }\n        const { done, value } = read\n        if (done) {\n          // The idle watchdog cancels the reader to unblock a stalled read;\n          // cancel() resolves a pending read() as done, so a done here after\n          // the watchdog fired is a timeout, not a normal stream end.\n          if (idleFired) {\n            throw new LlmError(\n              `Command Code API stream from ${connection.apiBase} was idle for ${connection.streamIdleTimeoutMs}ms`\n              + ' (no events) and was treated as a dead connection'\n              + `；Command Code API 流式响应已 ${connection.streamIdleTimeoutMs} 毫秒无任何事件，被判定为死连接——长思考模型可在设置中调大流空闲超时`,\n              'TIMEOUT',\n            )\n          }\n          if (buffer.trim()) {\n            // The final line may lack its trailing newline: account its\n            // chunks exactly like the line loop (a trailing `finish` must\n            // set `finished`, or the tail below would emit a second one).\n            for (const chunk of handle(parseStreamEventLine(buffer))) {\n              yield chunk\n              if (chunk.type === 'finish') finished = true\n            }\n          }\n          break\n        }\n        buffer += decoder.decode(value, { stream: true })\n        const lines = buffer.split('\\n')\n        buffer = lines.pop() ?? ''\n        for (const line of lines) {\n          const chunks = handle(parseStreamEventLine(line))\n          for (const chunk of chunks) {\n            yield chunk\n            if (chunk.type === 'finish') finished = true\n          }\n        }\n        if (finished) break\n      }\n      if (!finished) {\n        // Stream ended without a finish event: close open blocks and\n        // terminate according to the adapter contract (usage, then finish).\n        yield* closeText(asm)\n        yield* closeReasoning(asm)\n        if (protocol === 'openai') yield* emitOpenAiToolCalls(asm)\n        if (!asm.sawContent) {\n          throw new LlmError('Command Code returned an empty response；Command Code 返回了空响应，重试通常可恢复', 'EMPTY_RESPONSE')\n        }\n        yield { type: 'finish', reason: { kind: 'stop' } }\n      }\n    } finally {\n      clearIdle()\n      cleanup()\n      await reader.cancel().catch(() => undefined)\n      reader.releaseLock()\n    }\n  }\n}\n\n/**\n * Map a pre-stream generate HTTP failure onto a stable LlmError. Command\n * Code folds several business rejections into 403 (plan limits, CLI version,\n * model access): prefer the machine-readable `error.code` when present; the\n * status alone cannot distinguish them. A 429's `Retry-After` rides along as\n * `providerRetryAfterMs` so dsh-llm-retry can wait exactly that long instead\n * of guessing at the backoff cadence — capped at RETRY_MAX_DELAY_MS, because\n * in normal mode a longer attached wait makes the executor abandon the retry\n * outright instead of falling back to local backoff.\n */\nfunction generateHttpError(status: number, errText: string, retryAfterMs?: number): LlmError {\n  let providerCode: string | undefined\n  try {\n    const parsed: unknown = JSON.parse(errText)\n    if (isRecord(parsed) && isRecord(parsed.error)) {\n      providerCode = stringValue(parsed.error.code)\n    }\n  } catch {\n    // Plain-text bodies: rely on the status mapping below.\n  }\n  const detail = providerCode ?? `HTTP ${status}`\n  if (status === 401) {\n    // An invalid or missing credential is a config problem, not a\n    // transport failure: retrying it identically cannot succeed. Bilingual —\n    // the harness UI renders this message verbatim in its retry chrome.\n    return new LlmError(\n      `Command Code API error 401 (${detail}): the API key is missing or invalid — check the`\n      + ' key stored for COMMANDCODE_API_KEY (Models page) or the auth file'\n      + '；Command Code API 返回 401：API 密钥缺失或无效——请在设置页检查 COMMANDCODE_API_KEY 存储的密钥，或检查 auth 文件',\n      'INVALID_CREDENTIAL',\n      { status: 401 },\n    )\n  }\n  return new LlmError(\n    `Command Code API error ${status}${detail === `HTTP ${status}` ? '' : ` (${detail})`}: ${errText.slice(0, 500)}`,\n    status === 429 ? 'RATE_LIMIT' : 'PROVIDER_HTTP_ERROR',\n    {\n      status,\n      ...(retryAfterMs !== undefined && retryAfterMs > 0 && retryAfterMs <= RETRY_MAX_DELAY_MS\n        ? { providerRetryAfterMs: retryAfterMs }\n        : {}),\n    },\n  )\n}\n\n\n/**\n * Handle one CLI-transport (`/alpha/generate`) stream event, appending\n * harness StreamChunks. Pure over the passed assembler — no stream() locals.\n */\nfunction handleCliEvent(asm: BlockAssembler, event: unknown): StreamChunk[] {\n  const chunks: StreamChunk[] = []\n  if (!isRecord(event)) return chunks\n\n  switch (event.type) {\n    case 'text-delta': {\n      chunks.push(...closeReasoning(asm))\n      if (asm.textIndex < 0) {\n        asm.textIndex = asm.nextIndex++\n        chunks.push({ type: 'block-start', index: asm.textIndex, blockType: 'text' })\n      }\n      const delta = stringValue(event.text) ?? ''\n      asm.textContent += delta\n      asm.sawContent = true\n      chunks.push({ type: 'text-delta', index: asm.textIndex, text: delta })\n      break\n    }\n    case 'reasoning-delta': {\n      chunks.push(...closeText(asm))\n      if (asm.reasoningIndex < 0) {\n        asm.reasoningIndex = asm.nextIndex++\n        chunks.push({ type: 'block-start', index: asm.reasoningIndex, blockType: 'reasoning' })\n      }\n      const delta = stringValue(event.text) ?? ''\n      asm.reasoningContent += delta\n      chunks.push({ type: 'reasoning-delta', index: asm.reasoningIndex, text: delta })\n      break\n    }\n    case 'reasoning-start':\n      chunks.push(...closeText(asm))\n      break\n    case 'reasoning-end':\n      chunks.push(...closeReasoning(asm))\n      break\n    case 'tool-call': {\n      chunks.push(...closeText(asm), ...closeReasoning(asm))\n      const id = stringValue(event.toolCallId) ?? randomUUID()\n      const name = stringValue(event.toolName) ?? ''\n      const args = JSON.stringify(recordOrEmpty(event.input ?? event.args ?? event.arguments))\n      const index = asm.nextIndex++\n      asm.sawContent = true\n      chunks.push(\n        { type: 'block-start', index, blockType: 'tool-call' },\n        { type: 'tool-call-delta', index, id: ToolCallId(id), name, argumentsDelta: args },\n        {\n          type: 'block-end',\n          index,\n          block: { type: 'tool-call', id: ToolCallId(id), name, arguments: args },\n        },\n      )\n      break\n    }\n    case 'finish': {\n      chunks.push(...closeText(asm), ...closeReasoning(asm))\n      const usage = isRecord(event.totalUsage) ? event.totalUsage : undefined\n      if (usage) {\n        const details = isRecord(usage.inputTokenDetails) ? usage.inputTokenDetails : undefined\n        const totalInput = numberValue(usage.inputTokens) ?? 0\n        const cacheRead = numberValue(details?.cacheReadTokens) ?? 0\n        const cacheWrite = numberValue(details?.cacheWriteTokens) ?? 0\n        // Harness TokenUsage counts are disjoint: uncached input only.\n        const tokenUsage: TokenUsage = {\n          inputTokens:\n            numberValue(details?.noCacheTokens) ?? Math.max(0, totalInput - cacheRead - cacheWrite),\n          outputTokens: numberValue(usage.outputTokens) ?? 0,\n          cacheReadTokens: cacheRead,\n          cacheWriteTokens: cacheWrite,\n        }\n        chunks.push({ type: 'usage', usage: tokenUsage })\n      }\n      chunks.push({ type: 'finish', reason: mapFinishReason(event.finishReason) })\n      break\n    }\n    case 'error': {\n      // Mirror the official CLI's stream-error classification\n      // (readStreamErrorEvent + isStreamErrorRetryable in command-code's\n      // cli.mjs): a stream error that is explicitly non-retryable, carries\n      // a terminal marker (quota/plan/credits), or reports a non-retryable\n      // HTTP status is a hard failure; anything else is a transient\n      // mid-stream drop that the harness's default retry policy should\n      // retry (SERVER is in the default retryable set, PROVIDER_STREAM_ERROR\n      // is not). Without this, a server-side blip that the official CLI\n      // silently recovers from fails the whole turn.\n      const err = isRecord(event.error) ? event.error : undefined\n      const detail = isRecord(event.error)\n        ? (stringValue(event.error.message) ?? JSON.stringify(event.error))\n        : (stringValue(event.error) ?? stringValue(event.message) ?? 'Stream error')\n      const statusCode = err ? numberValue(err.statusCode) : undefined\n      const isRetryable = err ? booleanValue(err.isRetryable) : undefined\n      const retryableStatus = statusCode !== undefined && (statusCode === 429 || statusCode >= 500)\n      const terminal = hasTerminalStreamMarker(detail)\n      const retryable = isRetryable === true\n        || (statusCode !== undefined ? retryableStatus : (isRetryable !== false && !terminal))\n      if (!retryable) {\n        throw new LlmError(\n          `Command Code stream error: ${detail}`,\n          'PROVIDER_STREAM_ERROR',\n          statusCode !== undefined ? { status: statusCode } : undefined,\n        )\n      }\n      throw new LlmError(\n        `Command Code stream error: ${detail}`,\n        'SERVER',\n        statusCode !== undefined ? { status: statusCode } : undefined,\n      )\n    }\n  }\n  return chunks\n}\n\n/**\n * Handle one OpenAI-transport (`/provider/v1/chat/completions`) SSE event.\n * Same assembler contract as {@link handleCliEvent}; tool-call fragments\n * buffer on the assembler and flush at finish.\n */\nfunction handleOpenAIEvent(asm: BlockAssembler, event: unknown): StreamChunk[] {\n  const chunks: StreamChunk[] = []\n  if (!isRecord(event)) return chunks\n  const choices = event.choices\n  if (!Array.isArray(choices) || choices.length === 0) {\n    // A standalone usage chunk (some OpenAI-compatible servers send it\n    // before [DONE]) still carries usage.\n    if (event.usage !== undefined) {\n      chunks.push({ type: 'usage', usage: mapOpenAIUsage(event.usage) })\n    }\n    return chunks\n  }\n  const choice = isRecord(choices[0]) ? choices[0] : {}\n  const delta = isRecord(choice.delta) ? choice.delta : {}\n\n  const reasoningDelta = stringValue(delta.reasoning) ?? stringValue(delta.reasoning_content) ?? ''\n  if (reasoningDelta !== '') {\n    chunks.push(...closeText(asm))\n    if (asm.reasoningIndex < 0) {\n      asm.reasoningIndex = asm.nextIndex++\n      chunks.push({ type: 'block-start', index: asm.reasoningIndex, blockType: 'reasoning' })\n    }\n    asm.reasoningContent += reasoningDelta\n    chunks.push({ type: 'reasoning-delta', index: asm.reasoningIndex, text: reasoningDelta })\n  }\n\n  const contentDelta = stringValue(delta.content) ?? ''\n  if (contentDelta !== '') {\n    chunks.push(...closeReasoning(asm))\n    if (asm.textIndex < 0) {\n      asm.textIndex = asm.nextIndex++\n      chunks.push({ type: 'block-start', index: asm.textIndex, blockType: 'text' })\n    }\n    asm.textContent += contentDelta\n    asm.sawContent = true\n    chunks.push({ type: 'text-delta', index: asm.textIndex, text: contentDelta })\n  }\n\n  if (Array.isArray(delta.tool_calls)) {\n    asm.sawContent = true\n    for (const rawCall of delta.tool_calls) {\n      if (!isRecord(rawCall)) continue\n      const callIndex = numberValue(rawCall.index) ?? 0\n      let existing = asm.openAiToolCalls.find((call) => call.index === callIndex)\n      const fn = isRecord(rawCall.function) ? rawCall.function : undefined\n      const id = stringValue(rawCall.id)\n      const name = fn === undefined ? undefined : stringValue(fn.name)\n      const argDelta = fn === undefined\n        ? undefined\n        : (stringValue(fn.arguments) ?? (fn.arguments === undefined ? '' : JSON.stringify(fn.arguments)))\n      if (!existing) {\n        existing = {\n          index: callIndex,\n          name: name ?? '',\n          arguments: argDelta ?? '',\n        }\n        if (id !== undefined) existing.id = id\n        asm.openAiToolCalls.push(existing)\n      } else {\n        if (id !== undefined && existing.id === undefined) existing.id = id\n        if (name !== undefined && existing.name === '') existing.name = name\n        if (argDelta !== undefined) existing.arguments += argDelta\n      }\n    }\n  }\n\n  if (choice.finish_reason !== undefined && choice.finish_reason !== null) {\n    chunks.push(...closeText(asm), ...closeReasoning(asm), ...emitOpenAiToolCalls(asm))\n    if (event.usage !== undefined) {\n      chunks.push({ type: 'usage', usage: mapOpenAIUsage(event.usage) })\n    }\n    chunks.push({ type: 'finish', reason: mapFinishReason(choice.finish_reason) })\n  }\n  return chunks\n}\n\n/** Dispatch one parsed stream event to the active transport's handler. */\nfunction handleEvent(asm: BlockAssembler, protocol: CommandCodeProtocol, event: unknown): StreamChunk[] {\n  return protocol === 'openai' ? handleOpenAIEvent(asm, event) : handleCliEvent(asm, event)\n}\n\n\n/**\n * Parse an HTTP `Retry-After` value (delay-seconds or an HTTP-date) into\n * milliseconds; undefined when absent or unparseable. An HTTP-date in the\n * past yields 0, which the caller drops (LlmError wants a positive delay).\n * A delay-seconds value whose millisecond product is not finite (e.g. `1e308`)\n * also yields undefined: LlmError validates its options and would otherwise\n * replace the provider failure with an internal construction error.\n */\nfunction parseRetryAfterMs(value: string | null | undefined, now = Date.now()): number | undefined {\n  if (value === undefined || value === null) return undefined\n  const trimmed = value.trim()\n  if (trimmed === '') return undefined\n  const seconds = Number(trimmed)\n  if (Number.isFinite(seconds) && seconds >= 0) {\n    const ms = seconds * 1000\n    return Number.isFinite(ms) ? Math.round(ms) : undefined\n  }\n  const date = Date.parse(trimmed)\n  if (!Number.isNaN(date)) return Math.max(0, date - now)\n  return undefined\n}\n\n/**\n * Map a stream finish reason onto the harness taxonomy. The two transports\n * spell tool-calls differently (`tool-calls` on the CLI transport,\n * `tool_calls` on the OpenAI transport) but share every other reason, so\n * one function serves both — a new reason cannot drift between them.\n */\nfunction mapFinishReason(reason: unknown): FinishReason {\n  if (reason === 'tool-calls' || reason === 'tool_calls') return { kind: 'tool-calls' }\n  if (\n    reason === 'length' ||\n    reason === 'max_tokens' ||\n    reason === 'max-tokens' ||\n    reason === 'max_output_tokens'\n  ) {\n    return { kind: 'max-tokens' }\n  }\n  return { kind: 'stop' }\n}\n\n/**\n * True when a Provider API pre-stream rejection is Command Code's Go-plan\n * gate (`upgrade_required`). Only this exact class of rejection should fall\n * back to the CLI /alpha/generate transport; other 4xx/5xx must surface as\n * ordinary errors so real account/model problems are not masked.\n */\nfunction isUpgradeRequiredError(status: number, errText: string): boolean {\n  if (status !== 403) return false\n  const lower = errText.toLowerCase()\n  if (lower.includes('upgrade_required')) return true\n  if (lower.includes('go plan') && lower.includes('api access')) return true\n  if (lower.includes('only plan without api access')) return true\n  if (lower.includes('upgrade to goat or higher')) return true\n  try {\n    const parsed: unknown = JSON.parse(errText)\n    if (isRecord(parsed)) {\n      const error = isRecord(parsed.error) ? parsed.error : parsed\n      const code = stringValue(error.code) ?? stringValue(error.type)\n      if (code?.toLowerCase() === 'upgrade_required') return true\n      const message = stringValue(error.message) ?? ''\n      if (message.toLowerCase().includes('go plan') && message.toLowerCase().includes('api access')) return true\n    }\n  } catch {\n    // Already handled via the plain-text substring checks above.\n  }\n  return false\n}\n\n/** Map an OpenAI Chat Completions usage payload to harness disjoint counts. */\nfunction mapOpenAIUsage(usage: unknown): TokenUsage {\n  const source = isRecord(usage) ? usage : {}\n  const promptTokens = numberValue(source.prompt_tokens) ?? 0\n  const outputTokens = numberValue(source.completion_tokens) ?? 0\n  const totalTokens = numberValue(source.total_tokens)\n  const promptDetails = isRecord(source.prompt_tokens_details) ? source.prompt_tokens_details : undefined\n  const cacheRead = numberValue(promptDetails?.cached_tokens) ?? 0\n  const cacheWrite = numberValue(promptDetails?.cache_creation_input_tokens) ?? 0\n  const completionDetails = isRecord(source.completion_tokens_details) ? source.completion_tokens_details : undefined\n  const reasoningTokens = numberValue(completionDetails?.reasoning_tokens)\n  const usageOut: TokenUsage = {\n    inputTokens: Math.max(0, promptTokens - cacheRead - cacheWrite),\n    outputTokens,\n    cacheReadTokens: cacheRead,\n  }\n  if (cacheWrite > 0) usageOut.cacheWriteTokens = cacheWrite\n  if (reasoningTokens !== undefined) usageOut.reasoningTokens = reasoningTokens\n  if (totalTokens !== undefined) usageOut.totalTokens = totalTokens\n  return usageOut\n}\n","/**\n * Locale copy for the `/commandcode` usage command and the friendly\n * image-gate error rewrite. Distinct from `./client/locales.ts` (the\n * settings-page namespace `settings.commandcode`): the command runs on the\n * Host and has no access to the client's `ctx.locale`, so the dictionaries\n * are exposed as plain constants for direct lookup; the resolver lives in\n * `pickCommandLocale()`. The image-gate wrapper also lives on the client\n * but is reached from a non-React path that has no `t` in scope, so the\n * same dictionaries serve both surfaces.\n *\n * zh is the source of truth for the key set; en must carry the exact same\n * keys — a mismatch is a compile error at the lookup site.\n */\n\n/** Active locale id recognized by the command and the image-gate wrapper. */\nexport type LocaleId = 'zh' | 'en'\n\n/** Dictionary keys used by the `/commandcode` command and the image-gate wrapper. */\nexport type CommandCodeCommandKey =\n  | 'title'                   // top heading of a single-account report\n  | 'accountTitle'            // per-account heading in the multi-account view\n  | 'accountSeparator'        // rule between accounts in the multi-account view\n  | 'activeBadge'             // \"currently serving\" badge\n  | 'invalidCredentialBadge'  // mark for an account whose key is invalid\n  | 'cooldownBadge'           // mark for an account in rate-limit cooldown\n  | 'rateLimitBadge'          // mark when the pool has marked a key rate-limited\n  | 'unconfigured'            // one-account row when the slot has no key\n  | 'blockedInvalidKey'       // top-of-report block when the whole account is 401\n  | 'blockedServiceUnavailable' // 5xx\n  | 'blockedNetwork'          // network unreachable\n  | 'planLine'                // \"  📦 套餐    {name}{status}{period}\"\n  | 'planPeriodSuffix'        // \" · 账期截止 {date}\" / \" · period ends {date}\"\n  | 'usageHeader'             // \"── 请求 ─────...\"\n  | 'requestsLine'            // \"  💬 请求    {n} 次 / 失败 {f}  成功率 {r}%\"\n  | 'costLine'                // \"  💰 花费    {money}  ({credits} credits)\"\n  | 'tokensLine'              // \"  🔤 Token   {in} 入 / {out} 出\"\n  | 'creditsHeader'           // \"── 信用 ─────...\"\n  | 'monthlyLine'             // \"  💳 月额度  {monthly}   (已购 {purchased} / 赠送 {free})\"\n  | 'barLine'                 // \"     └ {bar}  {pct}%\"\n  | 'windowsHeader'           // \"── 窗口用量 ─────...\"\n  | 'fiveHourLine'            // \"  ⏱ 5 小时  {used} / {cap}{warn}\"\n  | 'weeklyLine'              // \"  📅 每周    {used} / {cap}{warn}\"\n  | 'windowBarLine'           // \"     └ {bar}  重置 {when}\"\n  | 'exceededWarning'         // the trailing \"  ⚠️ 超限!\" / \"  ⚠️ exceeded!\"\n  | 'resetSuffix'             // \"重置 {when}\" (the suffix after the bar)\n  | 'partialFailures'         // \"⚠️  部分端点失败: {list}\"\n  | 'noData'                  // \"(no data — check your API key)\"\n  | 'errorText'               // \"Could not fetch Command Code usage: {message}\"\n  | 'imageGate'               // image-gate rejection rewrite (with {model})\n\nexport const commandcodeCommand: Record<LocaleId, Record<CommandCodeCommandKey, string>> = {\n  zh: {\n    title: '📊 Command Code 用量{account}',\n    accountTitle: '📊 {label}{badges}',\n    accountSeparator: '────────────────────',\n    activeBadge: '  ✅ 当前使用',\n    invalidCredentialBadge: '  ⛔ 密钥无效',\n    cooldownBadge: '  ⏳ 限额冷却中，重置 {when}',\n    rateLimitBadge: '  ⏳ 已达限额（等待窗口探测）',\n    unconfigured: '  (未配置 API 密钥)',\n    blockedInvalidKey:\n      '⛔ API 密钥无效或已过期 — 服务端拒绝了全部请求（401），请检查该账户的密钥配置',\n    blockedServiceUnavailable:\n      '⚠️ Command Code 服务暂时不可用（5xx），稍后重试',\n    blockedNetwork:\n      '⚠️ 无法连接 Command Code 服务 — 请检查网络或 API 地址',\n    planLine: '  📦 套餐    {name}{status}{period}',\n    planPeriodSuffix: ' · 账期截止 {date}',\n    usageHeader: '── 请求 ──────────────────────────────',\n    requestsLine: '  💬 请求    {n} 次 / 失败 {f}  成功率 {r}%',\n    costLine: '  💰 花费    {money}  ({credits} credits)',\n    tokensLine: '  🔤 Token   {in} 入 / {out} 出',\n    creditsHeader: '── 信用 ──────────────────────────────',\n    monthlyLine: '  💳 月额度  {monthly}   (已购 {purchased} / 赠送 {free})',\n    barLine: '     └ {bar}  {pct}%',\n    windowsHeader: '── 窗口用量 ──────────────────────────',\n    fiveHourLine: '  ⏱ 5 小时  {used} / {cap}{warn}',\n    weeklyLine: '  📅 每周    {used} / {cap}{warn}',\n    windowBarLine: '     └ {bar}  重置 {when}',\n    exceededWarning: '  ⚠️ 超限!',\n    resetSuffix: '重置 {when}',\n    partialFailures: '⚠️  部分端点失败: {list}',\n    noData: '（无数据 — 请检查 API 密钥）',\n    errorText: '获取 Command Code 用量失败：{message}',\n    imageGate:\n      '当前会话已包含图片，而模型 {model} 不支持图片输入；'\n      + '请选择支持图片的模型，或先移除会话中的图片。',\n  },\n  en: {\n    title: '📊 Command Code usage{account}',\n    accountTitle: '📊 {label}{badges}',\n    accountSeparator: '────────────────────',\n    activeBadge: '  ✅ active',\n    invalidCredentialBadge: '  ⛔ invalid key',\n    cooldownBadge: '  ⏳ cooling down, resets {when}',\n    rateLimitBadge: '  ⏳ rate-limited (waiting for window probe)',\n    unconfigured: '  (no API key configured)',\n    blockedInvalidKey:\n      '⛔ API key invalid or expired — the server rejected every request (401); check the key configured for this account',\n    blockedServiceUnavailable:\n      '⚠️ Command Code service temporarily unavailable (5xx); try again later',\n    blockedNetwork:\n      '⚠️ could not reach the Command Code service — check your network or the API base setting',\n    planLine: '  📦 Plan     {name}{status}{period}',\n    planPeriodSuffix: ' · period ends {date}',\n    usageHeader: '── Requests ──────────────────────────',\n    requestsLine: '  💬 Requests {n} / failed {f}  success rate {r}%',\n    costLine: '  💰 Spend    {money}  ({credits} credits)',\n    tokensLine: '  🔤 Tokens   {in} in / {out} out',\n    creditsHeader: '── Credits ───────────────────────────',\n    monthlyLine: '  💳 Monthly  {monthly}   (purchased {purchased} / free {free})',\n    barLine: '     └ {bar}  {pct}%',\n    windowsHeader: '── Window usage ──────────────────────',\n    fiveHourLine: '  ⏱ 5-hour   {used} / {cap}{warn}',\n    weeklyLine: '  📅 Weekly   {used} / {cap}{warn}',\n    windowBarLine: '     └ {bar}  resets {when}',\n    exceededWarning: '  ⚠️ exceeded!',\n    resetSuffix: 'resets {when}',\n    partialFailures: '⚠️  some endpoints failed: {list}',\n    noData: '(no data — check your API key)',\n    errorText: 'Could not fetch Command Code usage: {message}',\n    imageGate:\n      'This session already contains images, and model {model} does not accept'\n      + ' image input; please select an image-capable model, or remove the'\n      + ' images from the session first.',\n  },\n}\n\n/**\n * Resolve the active locale for a Host-side command run.\n *\n * Priority: explicit `override` (from `Config.lang`) → `LC_ALL` → `LANG` →\n * the conventional fallback (`'zh'`, matching the existing single-language\n * behavior so unconfigured deployments keep their current output).\n *\n * The values are matched on the leading tag only — `zh_CN.UTF-8`,\n * `zh-Hans`, `zh` all map to `'zh'`; everything starting with `en` maps to\n * `'en'`; anything else falls back to `'zh'` (a non-`en` shell that\n * already has Chinese in the terminal is the closest sensible default;\n * a Western shell that happens to be neither keeps the existing Chinese\n * output rather than swapping to half-translated English).\n */\nexport function pickCommandLocale(\n  override: string | undefined,\n  env: Readonly<Record<string, string | undefined>> = process.env as Record<string, string | undefined>,\n): LocaleId {\n  if (override === 'zh' || override === 'en') return override\n  const raw = env.LC_ALL ?? env.LANG ?? ''\n  const tag = raw.toLowerCase().split(/[._-]/)[0] ?? ''\n  if (tag === 'en') return 'en'\n  return 'zh'\n}\n\n/** Look up a key in the active locale, with an internal en fallback. */\nexport function commandCopy(locale: LocaleId, key: CommandCodeCommandKey): string {\n  return commandcodeCommand[locale][key] ?? commandcodeCommand.en[key] ?? key\n}\n","/**\n * `/commandcode` slash command — account usage dashboard.\n *\n *   /commandcode            show account, usage, and credit state\n *   /commandcode status     same as bare `/commandcode`\n *\n * Backed by the Command Code account endpoints the official CLI uses\n * (`/alpha/whoami`, `/alpha/usage/summary`, `/alpha/billing/credits`),\n * exposed through `CommandCodeAdapter.getUsage()`.\n *\n * The command is Host-side and has no access to the client's `ctx.locale`;\n * the active locale is resolved through `deps.getLocale()` (supplied by the\n * plugin entry from `Config.lang` and the shell's `LC_ALL`/`LANG`, defaulting\n * to `zh`). All user-facing copy lives in `./command-locales.ts`; a missing\n * key in one dictionary falls back to the `en` copy rather than dropping\n * text.\n *\n * @module dsh-commandcode-provider/commands\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\n// Type-only import that loads the module augmentation (`ctx.commands`).\nimport type { CommandDefinition } from '@deepseek-ai/dsh-commands'\nimport { CommandCodeAdapter } from './adapter.ts'\nimport type { CommandCodeConnectionOptions, CommandCodeUsageReport } from './adapter.ts'\nimport type { CommandCodeAccountUsage, CommandCodeAccountsReport } from './usage-wire.ts'\nimport { commandCopy, type LocaleId } from './command-locales.ts'\n\n/** Everything the command needs beyond the adapter itself. */\nexport interface CommandCodeCommandDeps<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions> {\n  /** The registered adapter (for getUsage / listModels). */\n  adapter: CommandCodeAdapter<C>\n  /**\n   * Multi-account report source (wired by the plugin entry). Absent in\n   * programmatic setups, the command falls back to a single\n   * `adapter.getUsage()` report.\n   */\n  reports?: () => Promise<CommandCodeAccountsReport>\n  /**\n   * Resolve the active locale for one command run. The plugin entry wires\n   * this from `Config.lang` and the shell's `LC_ALL`/`LANG`. Absent in\n   * programmatic setups (notably the existing test), the command renders\n   * with the default locale (`'zh'`) — historically the only language the\n   * command ever shipped in.\n   */\n  getLocale?: () => LocaleId\n}\n\n// ---------------------------------------------------------------------------\n// Number / time formatting (locale-independent; the locale only changes\n// the surrounding labels)\n// ---------------------------------------------------------------------------\n\n/** Format a dollar amount. */\nfunction money(value: number): string {\n  return `$${value.toFixed(4)}`\n}\n\n/** Format a dollar amount compactly (2 decimals). */\nfunction moneyShort(value: number): string {\n  return `$${value.toFixed(2)}`\n}\n\n/** Format a large token count compactly (1.9M style). */\nfunction tokensCompact(value: number): string {\n  if (value >= 1e9) return `${(value / 1e9).toFixed(1)}B`\n  if (value >= 1e6) return `${(value / 1e6).toFixed(1)}M`\n  if (value >= 1e3) return `${(value / 1e3).toFixed(1)}K`\n  return String(value)\n}\n\n/**\n * Format a success-rate percentage (already in percent units): at most two\n * decimals, trailing zeros trimmed — mirrors `formatSuccessRate` in\n * `./client/usage.ts`, which the settings card uses.\n */\nfunction successRateText(value: number): string {\n  return String(Number(value.toFixed(2)))\n}\n\n/** Format a millis timestamp as a local date; `n/a` when unset. */\nfunction resetLabel(ms: number): string {\n  if (ms <= 0) return 'n/a'\n  return new Date(ms).toLocaleString()\n}\n\n/**\n * A 10-cell horizontal bar: `██████████` for 100%, `███░░░░░░░` for ~33%.\n * Handles caps of 0 (no limit) and out-of-range values.\n */\nfunction bar(used: number, cap: number): string {\n  if (cap <= 0) return '—'\n  const ratio = Math.max(0, Math.min(1, used / cap))\n  const filled = Math.round(ratio * 10)\n  return '█'.repeat(filled) + '░'.repeat(10 - filled)\n}\n\n// ---------------------------------------------------------------------------\n// Report rendering\n// ---------------------------------------------------------------------------\n\n/** Render one account's rotation mark / cooldown as a short badge. */\nfunction markLabel(entry: CommandCodeAccountUsage, locale: LocaleId): string {\n  if (entry.mark === 'invalid-credential') return commandCopy(locale, 'invalidCredentialBadge')\n  if (entry.cooldownUntil > 0) {\n    return commandCopy(locale, 'cooldownBadge').replace('{when}', resetLabel(entry.cooldownUntil))\n  }\n  if (entry.mark === 'rate-limit') return commandCopy(locale, 'rateLimitBadge')\n  return ''\n}\n\n/** Render the usage report as a structured, aligned, bar-chart text view. */\nfunction renderReport(report: CommandCodeUsageReport, locale: LocaleId, title?: string): string {\n  const lines: string[] = []\n  const account = report.account ? ` (${report.account.userName || report.account.name})` : ''\n\n  lines.push(\n    title ?? commandCopy(locale, 'title').replace('{account}', account),\n    '',\n  )\n\n  // A total failure names its cause up front; the per-endpoint failure list\n  // at the bottom would bury it.\n  if (report.blocked === 'invalid-key') {\n    lines.push(commandCopy(locale, 'blockedInvalidKey'), '')\n  } else if (report.blocked === 'service-unavailable') {\n    lines.push(commandCopy(locale, 'blockedServiceUnavailable'), '')\n  } else if (report.blocked === 'network') {\n    lines.push(commandCopy(locale, 'blockedNetwork'), '')\n  }\n\n  if (report.plan && report.plan.name !== '') {\n    const p = report.plan\n    const status = p.status !== '' && p.status !== 'active' ? ` (${p.status})` : ''\n    const period = p.currentPeriodEnd > 0\n      ? commandCopy(locale, 'planPeriodSuffix').replace('{date}', new Date(p.currentPeriodEnd).toLocaleDateString())\n      : ''\n    lines.push(commandCopy(locale, 'planLine')\n      .replace('{name}', p.name)\n      .replace('{status}', status)\n      .replace('{period}', period), '')\n  }\n\n  if (report.usage) {\n    const u = report.usage\n    lines.push(\n      commandCopy(locale, 'usageHeader'),\n      commandCopy(locale, 'requestsLine')\n        .replace('{n}', String(u.completedCount))\n        .replace('{f}', String(u.failedCount))\n        .replace('{r}', successRateText(u.successRate)),\n      commandCopy(locale, 'costLine')\n        .replace('{money}', money(u.totalCost))\n        .replace('{credits}', moneyShort(u.totalCredits)),\n      commandCopy(locale, 'tokensLine')\n        .replace('{in}', tokensCompact(u.totalTokensIn))\n        .replace('{out}', tokensCompact(u.totalTokensOut)),\n      '',\n    )\n  }\n\n  if (report.credits) {\n    const c = report.credits\n    const balanceTotal = c.monthlyCredits + c.purchasedCredits\n    const ratioKnown = c.monthlyReported !== false && c.purchasedReported !== false && balanceTotal > 0\n    lines.push(\n      commandCopy(locale, 'creditsHeader'),\n      commandCopy(locale, 'monthlyLine')\n        .replace('{monthly}', (c.monthlyReported === false ? '—' : moneyShort(c.monthlyCredits)))\n        .replace('{purchased}', (c.purchasedReported === false ? '—' : moneyShort(c.purchasedCredits)))\n        .replace('{free}', (c.freeReported === false ? '—' : moneyShort(c.freeCredits))),\n      ...(ratioKnown ? [commandCopy(locale, 'barLine')\n        .replace('{bar}', bar(c.monthlyCredits, balanceTotal))\n        .replace('{pct}', ((c.monthlyCredits / balanceTotal) * 100).toFixed(0))] : []),\n      '',\n    )\n    // Only the windows the endpoint actually reported: an unlimited account\n    // reports none, and printing two zeroed rows for it would invent limits.\n    const windowLines: string[] = []\n    if (c.fiveHour !== undefined) {\n      windowLines.push(\n        commandCopy(locale, 'fiveHourLine')\n          .replace('{used}', moneyShort(c.fiveHour.used))\n          .replace('{cap}', moneyShort(c.fiveHour.cap))\n          .replace('{warn}', c.fiveHour.exceeded ? commandCopy(locale, 'exceededWarning') : ''),\n        commandCopy(locale, 'windowBarLine')\n          .replace('{bar}', bar(c.fiveHour.used, c.fiveHour.cap))\n          .replace('{when}', resetLabel(c.fiveHour.resetAt)),\n      )\n    }\n    if (c.weekly !== undefined) {\n      windowLines.push(\n        commandCopy(locale, 'weeklyLine')\n          .replace('{used}', moneyShort(c.weekly.used))\n          .replace('{cap}', moneyShort(c.weekly.cap))\n          .replace('{warn}', c.weekly.exceeded ? commandCopy(locale, 'exceededWarning') : ''),\n        commandCopy(locale, 'windowBarLine')\n          .replace('{bar}', bar(c.weekly.used, c.weekly.cap))\n          .replace('{when}', resetLabel(c.weekly.resetAt)),\n      )\n    }\n    if (windowLines.length > 0) lines.push(commandCopy(locale, 'windowsHeader'), ...windowLines, '')\n  }\n\n  if (report.failures.length > 0) {\n    lines.push(commandCopy(locale, 'partialFailures').replace('{list}', report.failures.join('; ')), '')\n  }\n  if (!report.account && !report.usage && !report.credits) {\n    lines.push(commandCopy(locale, 'noData'), '')\n  }\n\n  return lines.join('\\n').trimEnd()\n}\n\n/** The one registered `/commandcode` command. */\nexport function commandDefinition<C extends CommandCodeConnectionOptions>(\n  deps: CommandCodeCommandDeps<C>,\n): CommandDefinition {\n  const { adapter } = deps\n  return {\n    name: 'commandcode',\n    description: 'Command Code account usage dashboard',\n    input: { hint: '[status]' },\n    handler: async () => {\n      const locale: LocaleId = deps.getLocale?.() ?? 'zh'\n      try {\n        if (deps.reports !== undefined) {\n          const { accounts } = await deps.reports()\n          const sections = accounts.map((entry) => {\n            const badges = `${entry.active ? commandCopy(locale, 'activeBadge') : ''}${markLabel(entry, locale)}`\n            const title = commandCopy(locale, 'accountTitle')\n              .replace('{label}', entry.label)\n              .replace('{badges}', badges)\n            if (!entry.configured) return `${title}\\n\\n${commandCopy(locale, 'unconfigured')}`\n            return renderReport(entry.report, locale, title)\n          })\n          return { kind: 'success', text: sections.join(`\\n\\n${commandCopy(locale, 'accountSeparator')}\\n\\n`) }\n        }\n        const report = await adapter.getUsage()\n        return { kind: 'success', text: renderReport(report, locale) }\n      } catch (error: unknown) {\n        const message = error instanceof Error ? error.message : String(error)\n        return {\n          kind: 'error',\n          text: commandCopy(locale, 'errorText').replace('{message}', message),\n        }\n      }\n    },\n  }\n}\n\n/** Register the command on `ctx.commands` (called from the plugin entry). */\nexport function applyCommands<C extends CommandCodeConnectionOptions>(\n  ctx: Context,\n  deps: CommandCodeCommandDeps<C>,\n): void {\n  ctx.commands.register(commandDefinition(deps))\n}\n","/**\n * Shared boundary-validation and Remote-descriptor plumbing for the plugin's\n * hand-rolled Typert wire contracts (`commandcode/report`, `commandcode/models`,\n * `commandcode/login*`).\n *\n * Every Remote this plugin serves crosses the Typert Gateway with a strict\n * result schema: the Host half registers a descriptor against a Cordis service\n * (`src/usage-remote.ts`) and the browser half mounts the matching contribution\n * on `ctx.remote` (`src/client/index.ts`). The wire contract is deliberately\n * dependency-free so the client bundle can inline it — a pure-TS helper module\n * imported by the wire files keeps it that way while removing the schema\n * helpers and descriptor boilerplate they used to duplicate.\n *\n * @module dsh-commandcode-provider/wire-shared\n */\n\nimport type { InvocationDescriptor, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\n\n/** The npm package identity every contribution and descriptor claims. */\nexport const REMOTE_PACKAGE = '@mars-sea/dsh-commandcode-provider'\n\n/** The Cordis service key the Gateway resolves every Command Code Remote from. */\nexport const REMOTE_SERVICE = 'commandcodeUsage'\n\n/** The wire namespace all Command Code endpoints share. */\nexport const REMOTE_NAMESPACE = 'commandcode'\n\n/** The read/validate helpers one boundary codec needs. */\nexport interface BoundaryValidator {\n  /** Reject one boundary value with a field-naming error. */\n  reject(field: string): never\n  /** Narrow an unknown value to a plain record, or reject. */\n  record(value: unknown, field: string): Record<string, unknown>\n  /** Read one required string field (`field` is the dotted error label). */\n  stringField(source: Record<string, unknown>, key: string, field: string): string\n  /** Read one required finite number field (`field` is the dotted error label). */\n  numberField(source: Record<string, unknown>, key: string, field: string): number\n  /** Read one required boolean field (`field` is the dotted error label). */\n  booleanField(source: Record<string, unknown>, key: string, field: string): boolean\n}\n\n/**\n * Build the validator helpers one endpoint uses. `prefix` names the\n * endpoint in the rejection message (e.g. `commandcode/report result:`), so\n * each wire file keeps its own diagnostic phrasing while sharing the helper\n * bodies.\n *\n * The helpers return the reject call directly in the failure branch: since\n * `reject` is typed `never`, the ternary's union collapses to the success type\n * without relying on TypeScript's control-flow analysis of a never-returning\n * call (which only recognizes function declarations, not the destructured\n * arrow `reject` callers receive from this factory).\n */\nexport function makeBoundaryValidator(prefix: string): BoundaryValidator {\n  const reject = (field: string): never => {\n    throw new TypeError(`${prefix} invalid ${field}`)\n  }\n  const record = (value: unknown, field: string): Record<string, unknown> =>\n    typeof value === 'object' && value !== null && !Array.isArray(value)\n      ? value as Record<string, unknown>\n      : reject(field)\n  const stringField = (source: Record<string, unknown>, key: string, field: string): string =>\n    typeof source[key] === 'string' ? source[key] as string : reject(field)\n  const numberField = (source: Record<string, unknown>, key: string, field: string): number =>\n    typeof source[key] === 'number' && Number.isFinite(source[key] as number)\n      ? source[key] as number\n      : reject(field)\n  const booleanField = (source: Record<string, unknown>, key: string, field: string): boolean =>\n    typeof source[key] === 'boolean' ? source[key] as boolean : reject(field)\n  return { reject, record, stringField, numberField, booleanField }\n}\n\n/**\n * Build one strict invocation descriptor. Every Command Code Remote shares the\n * `commandcode` namespace, the `commandcodeUsage` service, and a strict\n * `mode: 'strict'` result — only the endpoint, method, result type symbol, and\n * schema differ — so the boilerplate lives here once and each endpoint supplies\n * only its own facts.\n */\nexport function makeRemoteDescriptor<Output>(\n  endpoint: string,\n  method: string,\n  typeSymbol: string,\n  schema: TypertSchema<Output>,\n): InvocationDescriptor {\n  return {\n    id: `${REMOTE_PACKAGE}#${endpoint}`,\n    service: REMOTE_SERVICE,\n    namespace: REMOTE_NAMESPACE,\n    method,\n    invocation: { kind: 'direct' },\n    parameters: [],\n    result: {\n      mode: 'strict',\n      typeSymbol,\n      schema,\n    },\n  }\n}","/**\n * Wire contract for the Command Code account-usage Remote\n * (`commandcode/report`).\n *\n * The settings page renders the same account/usage/credit facts the\n * `/commandcode` command prints, but the browser never holds the API key —\n * the report must be produced Host-side and cross the Connection RPC carrier.\n * The harness exposes plugin-defined Host methods through the Typert Gateway:\n * the Host half registers a strict invocation descriptor against a Cordis\n * service (`src/usage-remote.ts`), and the browser half mounts the matching\n * Remote contribution on `ctx.remote` (`src/client/index.ts`).\n *\n * This module is the single source both halves share: the result validator\n * (a hand-rolled {@link TypertSchema}, so neither half needs a schema library)\n * and the exact descriptor object, so the endpoint can never drift apart.\n * It is deliberately dependency-free — the client bundle inlines it, and only\n * `import type` edges leave it (erased at build). The boundary-validator\n * helpers and the descriptor boilerplate live in `./wire-shared.ts`, shared\n * with the login wire contract.\n *\n * @module dsh-commandcode-provider/usage-wire\n */\n\nimport type { CommandCodeCredits, CommandCodeUsageReport, UsageBlockReason } from './adapter.ts'\n\nexport type { CommandCodeUsageReport, UsageBlockReason }\nimport type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\nimport {\n  makeBoundaryValidator,\n  makeRemoteDescriptor,\n  REMOTE_PACKAGE,\n} from './wire-shared.ts'\n\n/** One account's usage entry in the multi-account report. */\nexport interface CommandCodeAccountUsage {\n  /** Stable slot id (`default`, `account-2`, …). */\n  id: string\n  /** Display label (user-provided or generated). */\n  label: string\n  /** Whether an API key resolved for this account. */\n  configured: boolean\n  /** Whether this account currently serves requests (first usable slot). */\n  active: boolean\n  /** Rotation mark: `''` (usable), `'rate-limit'`, or `'invalid-credential'`. */\n  mark: string\n  /** Known cooldown end in millis; 0 when unknown or not cooling down. */\n  cooldownUntil: number\n  /** The per-account report; `failures`-only when the fetch itself failed. */\n  report: CommandCodeUsageReport\n}\n\n/** The settings page's account card data: one entry per configured account. */\nexport interface CommandCodeAccountsReport {\n  accounts: CommandCodeAccountUsage[]\n}\n\n/** The npm package identity both contribution registrations claim. */\nexport const USAGE_REMOTE_PACKAGE = REMOTE_PACKAGE\n\n/** Canonical `<namespace>/<method>` endpoint of the usage report Remote. */\nexport const USAGE_REPORT_ENDPOINT = 'commandcode/report'\n\n/**\n * The shared read/validate helpers for the usage report endpoint, prefixed\n * so rejection messages name the offending boundary.\n */\nconst { reject, record, stringField, numberField, booleanField } =\n  makeBoundaryValidator('commandcode/report result:')\n\n/** Validate one window-limit block (`fiveHour` / `weekly`). */\n/**\n * Parse one quota window, or undefined when the frame carries no such window.\n *\n * The distinction is load-bearing at this boundary: an ABSENT window means the\n * billing endpoint reported none (an unlimited plan), while a present block with\n * `cap: 0` means uncapped spend that was really reported. Collapsing the two\n * would draw a zeroed quota row for an account that has no such limit.\n */\nfunction windowLimit(\n  value: unknown,\n  field: string,\n): { used: number; cap: number; exceeded: boolean; resetAt: number } | undefined {\n  if (value === undefined) return undefined\n  const source = record(value, field)\n  return {\n    used: numberField(source, 'used', `${field}.used`),\n    cap: numberField(source, 'cap', `${field}.cap`),\n    exceeded: booleanField(source, 'exceeded', `${field}.exceeded`),\n    resetAt: numberField(source, 'resetAt', `${field}.resetAt`),\n  }\n}\n\n/**\n * Parse one untrusted boundary value into a {@link CommandCodeUsageReport}.\n * Optional sections stay optional; every present field is shape-checked so a\n * malformed frame fails the boundary instead of rendering garbage.\n */\nfunction parseUsageReport(value: unknown): CommandCodeUsageReport {\n  const source = record(value, 'report')\n  const failures = source.failures\n  if (!Array.isArray(failures) || failures.some((entry) => typeof entry !== 'string')) reject('failures')\n  const report: CommandCodeUsageReport = { failures: failures as string[] }\n\n  if (source.blocked !== undefined) {\n    const blocked = source.blocked\n    // Positive check: TS's never-return control-flow analysis only recognizes\n    // function declarations, not the factory's destructured-arrow `reject`, so\n    // narrow `blocked` in the positive branch instead.\n    if (blocked === 'invalid-key' || blocked === 'service-unavailable' || blocked === 'network') {\n      report.blocked = blocked\n    } else {\n      reject('blocked')\n    }\n  }\n\n  if (source.account !== undefined) {\n    const account = record(source.account, 'account')\n    report.account = {\n      id: stringField(account, 'id', 'account.id'),\n      name: stringField(account, 'name', 'account.name'),\n      userName: stringField(account, 'userName', 'account.userName'),\n    }\n  }\n\n  if (source.usage !== undefined) {\n    const usage = record(source.usage, 'usage')\n    report.usage = {\n      totalCount: numberField(usage, 'totalCount', 'usage.totalCount'),\n      totalCost: numberField(usage, 'totalCost', 'usage.totalCost'),\n      successRate: numberField(usage, 'successRate', 'usage.successRate'),\n      completedCount: numberField(usage, 'completedCount', 'usage.completedCount'),\n      failedCount: numberField(usage, 'failedCount', 'usage.failedCount'),\n      totalTokensIn: numberField(usage, 'totalTokensIn', 'usage.totalTokensIn'),\n      totalTokensOut: numberField(usage, 'totalTokensOut', 'usage.totalTokensOut'),\n      totalCredits: numberField(usage, 'totalCredits', 'usage.totalCredits'),\n      periodBasis: stringField(usage, 'periodBasis', 'usage.periodBasis'),\n    }\n  }\n\n  if (source.credits !== undefined) {\n    const credits = record(source.credits, 'credits')\n    const parsed: CommandCodeCredits = {\n      monthlyCredits: numberField(credits, 'monthlyCredits', 'credits.monthlyCredits'),\n      purchasedCredits: numberField(credits, 'purchasedCredits', 'credits.purchasedCredits'),\n      freeCredits: numberField(credits, 'freeCredits', 'credits.freeCredits'),\n    }\n    // OPTIONAL on the wire: a Host half that predates this field serves the\n    // scalar 0 for an omitted balance, which cannot be told from a real zero.\n    // An explicit `false` therefore means \"not reported\" and the panel keeps the\n    // figure off the dashboard; an absent flag (an older Host) stays unset and\n    // is read as \"assume reported\", so a real balance is not lost cross-version.\n    // A PRESENT value must still be a boolean, so a malformed frame is rejected\n    // here rather than coerced.\n    if (credits.monthlyReported !== undefined) {\n      parsed.monthlyReported = booleanField(credits, 'monthlyReported', 'credits.monthlyReported')\n    }\n    for (const flag of ['purchasedReported', 'freeReported'] as const) {\n      if (credits[flag] !== undefined) parsed[flag] = booleanField(credits, flag, `credits.${flag}`)\n    }\n    // Absent means the endpoint reported no such window. The window parsers\n    // return undefined for an absent block, and an optional member is only set\n    // when it was really there.\n    const fiveHour = windowLimit(credits.fiveHour, 'credits.fiveHour')\n    const weekly = windowLimit(credits.weekly, 'credits.weekly')\n    if (fiveHour !== undefined) parsed.fiveHour = fiveHour\n    if (weekly !== undefined) parsed.weekly = weekly\n    report.credits = parsed\n  }\n\n  if (source.plan !== undefined) {\n    const plan = record(source.plan, 'plan')\n    const monthly = plan.monthlyCredits\n    if (monthly !== null && (typeof monthly !== 'number' || !Number.isFinite(monthly))) reject('plan.monthlyCredits')\n    report.plan = {\n      planId: stringField(plan, 'planId', 'plan.planId'),\n      name: stringField(plan, 'name', 'plan.name'),\n      status: stringField(plan, 'status', 'plan.status'),\n      monthlyCredits: monthly as number | null,\n      currentPeriodEnd: numberField(plan, 'currentPeriodEnd', 'plan.currentPeriodEnd'),\n    }\n  }\n\n  return report\n}\n\n/** Parse one untrusted boundary value into a {@link CommandCodeAccountUsage}. */\nfunction parseAccountUsage(value: unknown): CommandCodeAccountUsage {\n  const source = record(value, 'account')\n  return {\n    id: stringField(source, 'id', 'account.id'),\n    label: stringField(source, 'label', 'account.label'),\n    configured: booleanField(source, 'configured', 'account.configured'),\n    active: booleanField(source, 'active', 'account.active'),\n    mark: stringField(source, 'mark', 'account.mark'),\n    cooldownUntil: numberField(source, 'cooldownUntil', 'account.cooldownUntil'),\n    report: parseUsageReport(source.report),\n  }\n}\n\n/** Parse the wire result into a {@link CommandCodeAccountsReport}. */\nfunction parseAccountsReport(value: unknown): CommandCodeAccountsReport {\n  const source = record(value, 'result')\n  const accounts = source.accounts\n  if (Array.isArray(accounts)) {\n    return { accounts: accounts.map(parseAccountUsage) }\n  }\n  return reject('accounts')\n}\n\n/**\n * The strict result codec both halves attach to the descriptor. Hand-rolled:\n * the client bundle may not require a schema library, and `TypertSchema` is\n * deliberately minimal so one `parse` function satisfies it.\n */\nexport const usageReportSchema: TypertSchema<CommandCodeAccountsReport> = {\n  parse: parseAccountsReport,\n}\n\n/**\n * The one invocation descriptor, shared verbatim by the Host registration and\n * the Client mount. `service` names the Cordis key the Gateway resolves the\n * receiver from; `namespace`/`method` name the wire endpoint.\n */\nexport const USAGE_REPORT_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodeAccountsReport>(\n    USAGE_REPORT_ENDPOINT,\n    'report',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodeAccountsReport`,\n    usageReportSchema,\n  )\n\n/** The Host-face contribution registered on `ctx.typert`. */\nexport const USAGE_HOST_CONTRIBUTION = {\n  package: USAGE_REMOTE_PACKAGE,\n  face: 'host' as const,\n  schemas: [],\n  // 0.1.2's Typert registry requires every Host contribution to carry its\n  // reflection model. This hand-written Remote deliberately has no generated\n  // reflection exports, so use the official empty-model form rather than a\n  // cast that leaves registry inspection with `model: undefined`.\n  model: { services: [], events: [], objects: [] },\n  invocations: [USAGE_REPORT_DESCRIPTOR],\n}\n\n/** The Client-face contribution mounted on `ctx.remote`. */\nexport const USAGE_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [USAGE_REPORT_DESCRIPTOR],\n}\n\n// ---------------------------------------------------------------------------\n// Model catalog Remote (`commandcode/models`)\n// ---------------------------------------------------------------------------\n\n/** One catalog entry the settings page's model editors offer. */\nexport interface CommandCodeCatalogModel {\n  /** Catalog model id (e.g. `deepseek/deepseek-v4-pro`). */\n  id: string\n  /** Display name from the catalog. */\n  name: string\n  /**\n   * Minimum plan-tier key for this model (a `KNOWN_PLANS` value: `go`,\n   * `goat`, `pro`, `provider`, `max`), or undefined for models outside the\n   * snapshot. The settings page groups the model-editor dropdowns under\n   * tier headings from this — the browser cannot import the Host's\n   * capability snapshot, so the Host stamps it per entry.\n   */\n  tier?: string\n}\n\n/** The model-catalog Remote result: the full catalog, sorted for picking. */\nexport interface CommandCodeCatalog {\n  models: CommandCodeCatalogModel[]\n}\n\n/** Canonical `<namespace>/<method>` endpoint of the model-catalog Remote. */\nexport const MODELS_ENDPOINT = 'commandcode/models'\n\n/**\n * The shared read/validate helpers for the model-catalog endpoint — a\n * separate instance so catalog boundary errors name `commandcode/models`,\n * not the report endpoint.\n */\nconst {\n  record: catalogRecord,\n  stringField: catalogString,\n} = makeBoundaryValidator('commandcode/models result:')\n\n/** Parse one untrusted boundary value into a {@link CommandCodeCatalogModel}. */\nfunction parseCatalogModel(value: unknown): CommandCodeCatalogModel {\n  const source = catalogRecord(value, 'model')\n  const model: CommandCodeCatalogModel = {\n    id: catalogString(source, 'id', 'model.id'),\n    name: catalogString(source, 'name', 'model.name'),\n  }\n  // Tier is optional on the wire (older Hosts predate it); a present\n  // non-string is a contract violation, not a silent drop.\n  if (source.tier !== undefined) {\n    model.tier = catalogString(source, 'tier', 'model.tier')\n  }\n  return model\n}\n\n/** Parse the wire result into a {@link CommandCodeCatalog}. */\nfunction parseCatalog(value: unknown): CommandCodeCatalog {\n  const source = catalogRecord(value, 'result')\n  const models = source.models\n  if (Array.isArray(models)) {\n    return { models: models.map(parseCatalogModel) }\n  }\n  throw new TypeError('commandcode/models result: invalid models')\n}\n\n/** The strict result codec for the model-catalog Remote. */\nexport const modelsSchema: TypertSchema<CommandCodeCatalog> = {\n  parse: parseCatalog,\n}\n\n/**\n * The model-catalog invocation descriptor, sharing the same `commandcodeUsage`\n * service and `commandcode` namespace as the usage report.\n */\nexport const MODELS_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodeCatalog>(\n    MODELS_ENDPOINT,\n    'models',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodeCatalog`,\n    modelsSchema,\n  )\n\n/** The Client-face contribution for the model-catalog endpoint. */\nexport const MODELS_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [MODELS_DESCRIPTOR],\n}\n\n// ---------------------------------------------------------------------------\n// Model price table Remote (`commandcode/prices`)\n// ---------------------------------------------------------------------------\n\n/**\n * One model's per-token rates, in USD per 1,000,000 tokens — the unit the\n * official pricing page publishes in.\n */\nexport interface CommandCodeModelRates {\n  /** Uncached (billed) input tokens. */\n  inputCost: number\n  /** Completion tokens. */\n  outputCost: number\n  /** Input tokens served from the provider's cache. */\n  cacheReadCost: number\n  /**\n   * Input tokens written into the provider's cache. Present for a minority of\n   * models — the page publishes no cache-write rate for the rest, whose\n   * cache-write tokens are therefore UNPRICED. Do not substitute a multiple of\n   * the input rate for a missing value.\n   */\n  cacheWriteCost?: number\n}\n\n/** One whole-request context band; maxContext is inclusive, absent on the last band. */\nexport interface CommandCodeContextTier extends CommandCodeModelRates {\n  maxContext?: number\n}\n\n/** One model's rates plus the peak-hour override for time-of-day models. */\nexport interface CommandCodeModelPrice extends CommandCodeModelRates {\n  /**\n   * Lookup key: the catalog model id when a catalog model maps to this row,\n   * otherwise the pricing page's own slug. A session reports catalog ids, so\n   * this is the primary key the browser looks up by.\n   */\n  id: string\n  /** The pricing page's slug for this row — the secondary lookup key. */\n  slug: string\n  /**\n   * Rates charged inside the peak windows. The row's own top-level rates are\n   * the off-peak rates, so a row WITH this block is time-of-day priced and a\n   * row without it is flat-priced.\n   */\n  peak?: CommandCodeModelRates\n  contextTiers?: CommandCodeContextTier[]\n  /**\n   * Whether the model costs nothing on every plan right now (a free deal or a\n   * `:free` catalog variant). Served explicitly at zero rates so a surface can\n   * say \"free\" rather than showing nothing.\n   */\n  free?: boolean\n}\n\n/** The price-table Remote result: every known model's rates. */\nexport interface CommandCodePriceTable {\n  /**\n   * Every priced model, keyed by {@link CommandCodeModelPrice.id} (catalog id\n   * first, pricing slug as the fallback) and carrying its slug as a second\n   * lookup key. A model absent from this list has no known price and must\n   * render no cost at all rather than a guess.\n   */\n  models: CommandCodeModelPrice[]\n  /**\n   * Peak-pricing windows as `[startHour, endHour)` in UTC, end-exclusive,\n   * applying Monday–Friday only. Shipped with the table so the browser prices\n   * against the Host snapshot's schedule instead of restating it.\n   */\n  peakHours: Array<[number, number]>\n}\n\n/** Canonical `<namespace>/<method>` endpoint of the price-table Remote. */\nexport const PRICES_ENDPOINT = 'commandcode/prices'\n\n/**\n * The shared read/validate helpers for the price-table endpoint — its own\n * instance so price boundary errors name `commandcode/prices`.\n */\nconst {\n  reject: priceReject,\n  record: priceRecord,\n  stringField: priceString,\n  numberField: priceNumber,\n  booleanField: priceBoolean,\n} = makeBoundaryValidator('commandcode/prices result:')\n\n/** Parse one rate block (`rates`, or a model's `peak` override). */\nfunction parseRates(source: Record<string, unknown>, field: string): CommandCodeModelRates {\n  const rates: CommandCodeModelRates = {\n    inputCost: priceNumber(source, 'inputCost', `${field}.inputCost`),\n    outputCost: priceNumber(source, 'outputCost', `${field}.outputCost`),\n    cacheReadCost: priceNumber(source, 'cacheReadCost', `${field}.cacheReadCost`),\n  }\n  // Optional on the wire: only a minority of models publish a cache-write\n  // rate, and a present non-number is a contract violation rather than a\n  // silent zero.\n  if (source.cacheWriteCost !== undefined) {\n    rates.cacheWriteCost = priceNumber(source, 'cacheWriteCost', `${field}.cacheWriteCost`)\n  }\n  return rates\n}\n\n/** Parse one untrusted boundary value into a {@link CommandCodeModelPrice}. */\nfunction parseModelPrice(value: unknown): CommandCodeModelPrice {\n  const source = priceRecord(value, 'model')\n  const price: CommandCodeModelPrice = {\n    id: priceString(source, 'id', 'model.id'),\n    slug: priceString(source, 'slug', 'model.slug'),\n    ...parseRates(source, 'model'),\n  }\n  if (source.peak !== undefined) price.peak = parseRates(priceRecord(source.peak, 'model.peak'), 'model.peak')\n  if (source.contextTiers !== undefined) {\n    if (!Array.isArray(source.contextTiers) || source.contextTiers.length === 0) priceReject('contextTiers')\n    let previous = 0\n    price.contextTiers = (source.contextTiers as unknown[]).map((value, index, tiers) => {\n      const tier = priceRecord(value, 'contextTier')\n      const out: CommandCodeContextTier = parseRates(tier, 'contextTier')\n      if (tier.maxContext !== undefined) {\n        const max = priceNumber(tier, 'maxContext', 'contextTier.maxContext')\n        if (!Number.isSafeInteger(max) || max <= previous || index === tiers.length - 1) priceReject('contextTier.maxContext')\n        previous = max\n        out.maxContext = max\n      } else if (index !== tiers.length - 1) priceReject('contextTier.maxContext')\n      return out\n    })\n  }\n  if (source.free !== undefined) price.free = priceBoolean(source, 'free', 'model.free')\n  return price\n}\n\n/** Parse the wire result into a {@link CommandCodePriceTable}. */\nfunction parsePriceTable(value: unknown): CommandCodePriceTable {\n  const source = priceRecord(value, 'result')\n  const models = source.models\n  if (!Array.isArray(models)) priceReject('models')\n  const peakHours = source.peakHours\n  if (!Array.isArray(peakHours)) priceReject('peakHours')\n  return {\n    models: (models as unknown[]).map(parseModelPrice),\n    peakHours: (peakHours as unknown[]).map((window) => {\n      if (!Array.isArray(window) || window.length !== 2) priceReject('peakHours[]')\n      const [start, end] = window as [unknown, unknown]\n      if (typeof start !== 'number' || typeof end !== 'number') priceReject('peakHours[]')\n      return [start, end] as [number, number]\n    }),\n  }\n}\n\n/** The strict result codec for the price-table Remote. */\nexport const pricesSchema: TypertSchema<CommandCodePriceTable> = {\n  parse: parsePriceTable,\n}\n\n/**\n * The price-table invocation descriptor, sharing the same `commandcodeUsage`\n * service and `commandcode` namespace as the report and catalog endpoints.\n */\nexport const PRICES_DESCRIPTOR: InvocationDescriptor =\n  makeRemoteDescriptor<CommandCodePriceTable>(\n    PRICES_ENDPOINT,\n    'prices',\n    `${USAGE_REMOTE_PACKAGE}#CommandCodePriceTable`,\n    pricesSchema,\n  )\n\n/** The Client-face contribution for the price-table endpoint. */\nexport const PRICES_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: USAGE_REMOTE_PACKAGE,\n  descriptors: [PRICES_DESCRIPTOR],\n}","/**\n * Wire contract for the Command Code login Remote endpoints\n * (`commandcode/loginBegin`, `commandcode/loginStatus`,\n * `commandcode/loginCancel`).\n *\n * The settings page can start a browser login against the official Command\n * Code Studio (the same loopback flow `command-code login` performs) instead\n * of pasting an API key. The loopback server must live in the Host half — it\n * binds a local port and receives the key — so the page drives it through the\n * Typert Gateway exactly like the usage report.\n *\n * This module is the single source both halves share, deliberately\n * dependency-free (`import type` edges only): the strict status validator the\n * client trusts, the three descriptors both halves register, and the two\n * contribution objects. The state shape mirrors the Host-only flow machine in\n * `src/login.ts` as plain JSON.\n *\n * @module dsh-commandcode-provider/login-wire\n */\n\nimport type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'\nimport {\n  makeBoundaryValidator,\n  makeRemoteDescriptor,\n  REMOTE_PACKAGE,\n} from './wire-shared.ts'\n\n/** Why a login attempt ended in `failed` (stable across versions for copy). */\nexport type CommandCodeLoginFailureReason =\n  /** The Studio page reported the authorization was denied by the user. */\n  | 'denied'\n  /** No callback arrived within the flow's timeout window. */\n  | 'timeout'\n  /** The delivered key failed `/alpha/whoami` validation (401). */\n  | 'invalid-key'\n  /** The validation request could not reach the API. */\n  | 'network'\n  /** The key could not be stored (credentials seam unavailable). */\n  | 'unavailable'\n  /** The attempt was cancelled by the user or torn down with the plugin. */\n  | 'cancelled'\n  /** Anything else. */\n  | 'error'\n\n/** One login attempt's full state face, as carried over the wire. */\nexport interface CommandCodeLoginStatus {\n  /**\n   * `idle` — no attempt; `waiting` — the loopback server is up and the\n   * Studio URL is live; `success` — the key validated and was stored;\n   * `failed` — see `reason`/`message`.\n   */\n  state: 'idle' | 'waiting' | 'success' | 'failed'\n  /** The Studio authorization URL while `waiting`. */\n  authUrl?: string\n  /** The account display name reported by the Studio, on `success`. */\n  userName?: string\n  /** The key's label from the Studio, on `success`. */\n  keyName?: string\n  /** Why the attempt failed, when `failed`. */\n  reason?: CommandCodeLoginFailureReason\n  /** Human-readable failure detail, when `failed` (secondary to `reason`). */\n  message?: string\n}\n\n/** The canonical endpoint paths of the three login Remotes. */\nexport const LOGIN_BEGIN_ENDPOINT = 'commandcode/loginBegin'\nexport const LOGIN_STATUS_ENDPOINT = 'commandcode/loginStatus'\nexport const LOGIN_CANCEL_ENDPOINT = 'commandcode/loginCancel'\n\nconst REASONS: readonly CommandCodeLoginFailureReason[] = [\n  'denied', 'timeout', 'invalid-key', 'network', 'unavailable', 'cancelled', 'error',\n]\n\n/** The shared read/validate helpers, prefixed with the login endpoint so\n * rejection messages name the offending boundary. */\nconst { reject, record, stringField } =\n  makeBoundaryValidator('commandcode/login result:')\n\n/**\n * Parse one untrusted boundary value into a {@link CommandCodeLoginStatus}.\n * Every field is shape-checked so a malformed frame fails the boundary\n * instead of leaking into the page.\n */\nexport function parseLoginStatus(value: unknown): CommandCodeLoginStatus {\n  const source = record(value, 'status')\n  const state = source.state\n  // The factory's destructured-arrow `reject` is typed never-returning but\n  // TS narrows it only in the positive branch — assign inside the guard.\n  if (state === 'idle' || state === 'waiting' || state === 'success' || state === 'failed') {\n    const status: CommandCodeLoginStatus = { state }\n    if (source.authUrl !== undefined) {\n      status.authUrl = stringField(source, 'authUrl', 'authUrl')\n    }\n    if (source.userName !== undefined) {\n      status.userName = stringField(source, 'userName', 'userName')\n    }\n    if (source.keyName !== undefined) {\n      status.keyName = stringField(source, 'keyName', 'keyName')\n    }\n    if (source.reason !== undefined) {\n      const reason = source.reason\n      if (typeof reason === 'string' && REASONS.includes(reason as CommandCodeLoginFailureReason)) {\n        status.reason = reason as CommandCodeLoginFailureReason\n      } else {\n        reject('reason')\n      }\n    }\n    if (source.message !== undefined) {\n      status.message = stringField(source, 'message', 'message')\n    }\n    return status\n  }\n  return reject('state')\n}\n\n/** The strict result codec shared by all three login endpoints. */\nexport const loginStatusSchema: TypertSchema<CommandCodeLoginStatus> = {\n  parse: parseLoginStatus,\n}\n\n/** Build one login invocation descriptor (uniform result, no parameters). */\nfunction loginDescriptor(endpoint: string, method: string): InvocationDescriptor {\n  return makeRemoteDescriptor<CommandCodeLoginStatus>(\n    endpoint,\n    method,\n    `${REMOTE_PACKAGE}#CommandCodeLoginStatus`,\n    loginStatusSchema,\n  )\n}\n\n/** The three login descriptors, shared verbatim by Host registration and Client mount. */\nexport const LOGIN_DESCRIPTORS: readonly InvocationDescriptor[] = [\n  loginDescriptor(LOGIN_BEGIN_ENDPOINT, 'loginBegin'),\n  loginDescriptor(LOGIN_STATUS_ENDPOINT, 'loginStatus'),\n  loginDescriptor(LOGIN_CANCEL_ENDPOINT, 'loginCancel'),\n]\n\n/** The Host-face contribution fragment registered on `ctx.typert`. */\nexport const LOGIN_HOST_CONTRIBUTION = {\n  package: REMOTE_PACKAGE,\n  face: 'host' as const,\n  schemas: [],\n  invocations: LOGIN_DESCRIPTORS,\n}\n\n/** The Client-face contribution fragment mounted on `ctx.remote`. */\nexport const LOGIN_REMOTE_CONTRIBUTION: TypertRemoteContribution = {\n  package: REMOTE_PACKAGE,\n  descriptors: LOGIN_DESCRIPTORS,\n}\n","/**\n * Host half of the account-usage Remote (`commandcode/report`).\n *\n * The settings page's account card needs the same report the `/commandcode`\n * command prints, but the browser never holds the API key — the fetch must\n * run Host-side. This module exposes `adapter.getUsage()` through the Typert\n * Gateway: a `TypertRemoteService` provides the receiver the Gateway resolves,\n * and the shared strict descriptor (`src/usage-wire.ts`) is registered on the\n * `typert` registry so the Gateway claims the `commandcode/report` endpoint.\n *\n * The whole wiring rides an optional `ctx.inject(['typert'], ...)` fiber: a\n * profile without the web stack (no Typert registry, no Gateway) simply never\n * activates it, exactly like the `/commandcode` command rides `commands`.\n *\n * @module dsh-commandcode-provider/usage-remote\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\nimport { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol'\nimport type { CommandCodeAdapter, CommandCodeConnectionOptions } from './adapter.ts'\nimport { USAGE_HOST_CONTRIBUTION } from './usage-wire.ts'\nimport { MODELS_DESCRIPTOR } from './usage-wire.ts'\nimport { PRICES_DESCRIPTOR } from './usage-wire.ts'\nimport type { CommandCodeAccountsReport, CommandCodeCatalog, CommandCodePriceTable } from './usage-wire.ts'\nimport { modelPriceTable } from './model-prices.ts'\nimport { LOGIN_DESCRIPTORS } from './login-wire.ts'\nimport type { CommandCodeLoginStatus } from './login-wire.ts'\n\n/**\n * The browser-login face the usage service exposes (`commandcode/login*`).\n * Backed by the Host-half {@link !CommandCodeLoginFlow} when the plugin entry\n * wired one; absent, `status`/`cancel` degrade to the idle status while\n * `begin` rejects with a plain message (so the page's manual paste path\n * stays the fallback instead of hanging).\n */\nexport interface LoginFlowFacade {\n  /** Start (or rejoin) an attempt; rejects when it cannot start at all. */\n  begin(): Promise<CommandCodeLoginStatus>\n  /** The current attempt's status. */\n  status(): CommandCodeLoginStatus\n  /** Cancel a waiting attempt. */\n  cancel(): void\n}\n\n/** Everything the usage service needs beyond its Cordis context. */\nexport interface CommandCodeUsageDeps<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions> {\n  /** The registered adapter (for getUsage). */\n  adapter: CommandCodeAdapter<C>\n  /**\n   * Multi-account report source (wired by the plugin entry). Absent in\n   * programmatic setups, the service falls back to a single default-account\n   * entry around `adapter.getUsage()`.\n   */\n  reports?: () => Promise<CommandCodeAccountsReport>\n  /**\n   * Model-catalog source for the settings page's model editors (the\n   * routing-rule editor and the visible-models filter; wired by the plugin\n   * entry). Absent, the `models` endpoint answers an empty list — the page's\n   * editors degrade to the empty state.\n   */\n  listModels?: () => Promise<CommandCodeCatalog>\n  /**\n   * Price-table source for the composer's session-cost figure. Defaults to the\n   * vendored snapshot, so the endpoint can never silently serve an empty table\n   * — an unpriced cost is the failure this feature is meant to remove. Override\n   * only to stub it in a test.\n   */\n  prices?: () => CommandCodePriceTable\n  /**\n   * The browser-login flow (wired by the plugin entry). Absent means the\n   * login endpoints answer `idle` / reject with a plain message — the page's\n   * manual paste path stays the fallback.\n   */\n  login?: LoginFlowFacade\n}\n\n/**\n * The registry method surface this module uses. `Context['typert']` is typed\n * as the read-only `TypertRegistryContract`; contribution registration lives\n * on the concrete registry service, so the cast is spelled out once here.\n * The contribution is the combined one built below (report + models + login\n * endpoints), so the type is structural rather than tied to the\n * single-endpoint `USAGE_HOST_CONTRIBUTION` shape.\n */\ninterface TypertContributionRegistry {\n  register(contribution: {\n    package: string\n    face: 'host'\n    schemas: unknown[]\n    model: { services: unknown[]; events: unknown[]; objects: unknown[] }\n    invocations: unknown[]\n  }): () => void | Promise<void>\n}\n\n/**\n * The Remote receiver: a Cordis service the Gateway resolves by key\n * (`commandcodeUsage`) and binds to the wire namespace (`commandcode`). The\n * base class stamps the `typertRemote` binding the Gateway validates on every\n * dispatch; no decorators are needed because the descriptor is registered\n * explicitly (strict path) rather than discovered from source markers.\n */\nexport class CommandCodeUsageService<C extends CommandCodeConnectionOptions = CommandCodeConnectionOptions>\n  extends TypertRemoteService {\n  private readonly deps: CommandCodeUsageDeps<C>\n\n  constructor(ctx: Context, deps: CommandCodeUsageDeps<C>) {\n    super(ctx, 'commandcodeUsage', { namespace: 'commandcode' })\n    this.deps = deps\n  }\n\n  /**\n   * Account, usage, and credit state for the settings page's account card —\n   * one entry per pool account when the plugin entry wired `reports`, a\n   * single default-account entry otherwise. Degrades per endpoint like the\n   * `/commandcode` command (failures land in `report.failures`); throws\n   * `MISSING_CREDENTIAL` when no key resolves, which the Gateway folds into\n   * the failure branch the page renders as a hint.\n   */\n  async report(): Promise<CommandCodeAccountsReport> {\n    if (this.deps.reports !== undefined) return this.deps.reports()\n    const report = await this.deps.adapter.getUsage()\n    return {\n      accounts: [{\n        id: 'default',\n        label: 'Default',\n        configured: true,\n        active: true,\n        mark: '',\n        cooldownUntil: 0,\n        report,\n      }],\n    }\n  }\n\n  /**\n   * The full model catalog for the settings page's model editors (the\n   * routing-rule editor and the visible-models filter). The browser never\n   * calls the Command Code API directly — the Host serves the catalog\n   * (already fetched/cached by the adapter) so models can be picked from\n   * the live list instead of typed by hand.\n   */\n  async models(): Promise<CommandCodeCatalog> {\n    return this.deps.listModels?.() ?? { models: [] }\n  }\n\n  /**\n   * The model price table the composer prices an in-progress session with.\n   * Static vendored data (the official pricing page's rates), served Host-side\n   * so the browser bundle never carries a copy that could drift from the\n   * snapshot, and so a price update reaches an open page without a rebuild.\n   */\n  async prices(): Promise<CommandCodePriceTable> {\n    return (this.deps.prices ?? modelPriceTable)()\n  }\n\n  /**\n   * Start (or rejoin) a browser-login attempt and return its fresh status —\n   * `waiting` carrying the Studio URL. Rejects when the flow cannot start\n   * (no free loopback port, disposed plugin); the Gateway folds the throw\n   * into the failure branch the page renders.\n   */\n  async loginBegin(): Promise<CommandCodeLoginStatus> {\n    const login = this.requireLogin()\n    return login.begin()\n  }\n\n  /** Poll a login attempt's status. */\n  async loginStatus(): Promise<CommandCodeLoginStatus> {\n    return this.deps.login?.status() ?? { state: 'idle' }\n  }\n\n  /** Cancel a waiting attempt; returns the post-cancel status. */\n  async loginCancel(): Promise<CommandCodeLoginStatus> {\n    this.deps.login?.cancel()\n    return this.deps.login?.status() ?? { state: 'idle' }\n  }\n\n  private requireLogin(): LoginFlowFacade {\n    const login = this.deps.login\n    if (login === undefined) {\n      throw new Error('login flow is not wired in this setup; paste the API key instead')\n    }\n    return login\n  }\n}\n\n/**\n * Provide the usage service and register its Remote descriptor. The registry\n * contribution is tied to this fiber's lifetime: the registry's own\n * `register()` effect would otherwise outlive the plugin.\n */\nexport function applyUsageRemote<C extends CommandCodeConnectionOptions>(\n  ctx: Context,\n  deps: CommandCodeUsageDeps<C>,\n): void {\n  ctx.inject(['typert'], (remoteCtx) => {\n    new CommandCodeUsageService(remoteCtx, deps)\n    const registry = remoteCtx.typert as unknown as TypertContributionRegistry\n    // One registration carries the report endpoint, the models endpoint, and\n    // the login endpoints: the descriptors are unique per endpoint, and a\n    // single contribution keeps the Host's registry bookkeeping (and the\n    // Client mount) 1:1.\n    const unregister = registry.register({\n      ...USAGE_HOST_CONTRIBUTION,\n      invocations: [...USAGE_HOST_CONTRIBUTION.invocations, MODELS_DESCRIPTOR, PRICES_DESCRIPTOR, ...LOGIN_DESCRIPTORS],\n    })\n    // The registry's own effect would outlive this fiber; withdraw the\n    // contribution when the plugin unloads.\n    remoteCtx.effect(() => () => void unregister(), 'dsh-commandcode-provider: usage remote')\n  })\n}\n","/**\n * Host half of the Command Code browser login (the loopback flow).\n *\n * Mirrors what the official `command-code login` CLI command performs\n * (reverse-engineered from `command-code@1.32.1`, `createAuthFlowController`\n * + `createAuthServer` in its bundle):\n *\n * 1. Bind a temporary HTTP server on `127.0.0.1`, first available port from\n *    5959 upward (10 attempts).\n * 2. Generate a random state token and open\n *    `{studio}/studio/auth/cli?callback=http://localhost:{port}/callback&state={state}`.\n * 3. After the user signs in, the Studio page POSTs the credentials JSON\n *    `{ apiKey, state, userId, userName, keyName }` to the loopback callback —\n *    no OAuth code exchange, the page holds the final API key.\n * 4. The delivered key is validated against `GET {apiBase}/alpha/whoami`\n *    before anything is stored.\n *\n * Server behaviour is mirrored exactly: POST-only `/callback`, a 10 KB body\n * cap, JSON responses (`{success:true}` / `{success:false,error}`), CORS for\n * the Studio origins only, and state-token equality as the anti-forgery\n * check. One deliberate hardening over the CLI build: the CORS origin is\n * echoed only when it is allowlisted (the CLI falls back to the first\n * origin), which browsers treat identically.\n *\n * Storage stays out of this module: the plugin entry supplies\n * {@link CommandCodeLoginFlowDeps.storeKey}, which writes through the dsh\n * credentials seam so the next request resolves the new key with no restart.\n * Everything external (fetch, ports, randomness, timing) is injectable for\n * node tests; the tests drive a real loopback server end to end.\n *\n * @module dsh-commandcode-provider/login\n */\n\nimport { createServer as createHttpServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http'\nimport { createServer as createNetServer } from 'node:net'\nimport { randomBytes } from 'node:crypto'\nimport { DEFAULT_API_BASE } from './adapter.ts'\nimport type { CommandCodeLoginFailureReason, CommandCodeLoginStatus } from './login-wire.ts'\n\n/** Give up on the browser after this long without a callback (mirrors the CLI). */\nexport const LOGIN_TIMEOUT_MS = 120_000\n\n/** First local port the flow tries (mirrors the CLI). */\nexport const LOGIN_START_PORT = 5959\n\n/** How many consecutive ports to try from {@link LOGIN_START_PORT}. */\nexport const LOGIN_MAX_PORT_ATTEMPTS = 10\n\n/** Reject callback bodies larger than this (mirrors the CLI). */\nexport const LOGIN_BODY_LIMIT_BYTES = 10_000\n\n/** The Studio origins allowed to POST credentials to the loopback server. */\nexport const LOGIN_ALLOWED_ORIGINS: readonly string[] = [\n  'http://localhost:3000',\n  'https://staging.commandcode.ai',\n  'https://commandcode.ai',\n]\n\n/** The Studio route that performs the browser-side login. */\nconst STUDIO_AUTH_PATH = '/studio/auth/cli'\n\n/** Credentials as delivered by the Studio's callback POST. */\nexport interface CommandCodeLoginCredentials {\n  apiKey: string\n  userId: string\n  userName: string\n  keyName: string\n}\n\n/** Outcome of validating a delivered key against `/alpha/whoami`. */\nexport type ApiKeyValidation =\n  | { valid: true }\n  | { valid: false; error: 'invalid_key' | 'server_error' | 'network_error' }\n\nexport interface CommandCodeLoginFlowDeps {\n  /**\n   * The Provider API base used for `/alpha/whoami` validation; also selects\n   * the matching Studio base (staging api → staging studio). A thunk is fine:\n   * it is re-read when each attempt starts, so a settings change reaches the\n   * next login. Defaults to the public API base.\n   */\n  apiBase?: string | (() => string | undefined)\n  /** Attempt timeout in millis; defaults to {@link LOGIN_TIMEOUT_MS}. */\n  timeoutMs?: number\n  /** First port to try; defaults to {@link LOGIN_START_PORT}. */\n  startPort?: number\n  /** Consecutive-port attempts; defaults to {@link LOGIN_MAX_PORT_ATTEMPTS}. */\n  maxPortAttempts?: number\n  /** Validation fetch seam; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n  /** Randomness seam; defaults to `node:crypto` randomBytes(32) base64url. */\n  randomToken?: (byteLength: number) => string\n  /**\n   * Receives the validated credentials after a successful login. Rejecting\n   * fails the attempt with `unavailable`.\n   */\n  storeKey(credentials: CommandCodeLoginCredentials): Promise<void>\n}\n\n/** Compose the Studio authorization URL (pure, exported for tests). */\nexport function buildCommandAuthUrl(options: { studioBase: string; port: number; state: string }): string {\n  const callback = `http://localhost:${options.port}/callback`\n  return `${options.studioBase}${STUDIO_AUTH_PATH}?callback=${encodeURIComponent(callback)}&state=${encodeURIComponent(options.state)}`\n}\n\n/** Map an API base onto the Studio base the CLI pairs it with. */\nexport function studioBaseForApiBase(apiBase: string): string {\n  if (/^https:\\/\\/staging-api\\.commandcode\\.ai/i.test(apiBase)) return 'https://staging.commandcode.ai'\n  if (/^http:\\/\\/localhost(:\\d+)?$/i.test(apiBase)) return 'http://localhost:3000'\n  return 'https://commandcode.ai'\n}\n\n/**\n * Validate one candidate key against `/alpha/whoami` (pure, exported for\n * tests). Mirrors the CLI's verdicts: 401 → invalid_key, other non-OK →\n * server_error, transport failure → network_error.\n */\nexport async function validateCommandApiKey(\n  fetchImpl: typeof fetch,\n  apiBase: string,\n  apiKey: string,\n): Promise<ApiKeyValidation> {\n  try {\n    const response = await fetchImpl(`${apiBase}/alpha/whoami`, {\n      method: 'GET',\n      headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${apiKey}` },\n    })\n    if (response.status === 401) return { valid: false, error: 'invalid_key' }\n    if (response.ok) return { valid: true }\n    return { valid: false, error: 'server_error' }\n  } catch {\n    return { valid: false, error: 'network_error' }\n  }\n}\n\n/** Whether one loopback port is free right now. */\nfunction checkPortAvailable(port: number): Promise<boolean> {\n  return new Promise((resolve) => {\n    const probe = createNetServer()\n    probe.once('error', () => resolve(false))\n    probe.once('listening', () => probe.close(() => resolve(true)))\n    probe.listen(port, '127.0.0.1')\n  })\n}\n\n/** Whether a callback body carries every credential field the CLI requires. */\nfunction isCallbackCredentials(value: unknown): value is CommandCodeLoginCredentials & Record<string, unknown> {\n  if (typeof value !== 'object' || value === null) return false\n  const record = value as Record<string, unknown>\n  return typeof record.apiKey === 'string' && record.apiKey !== ''\n    && typeof record.state === 'string'\n    && typeof record.userId === 'string'\n    && typeof record.userName === 'string'\n    && typeof record.keyName === 'string'\n}\n\n/**\n * One browser-login attempt machine. Single-flight by design: `begin()` while\n * waiting returns the live attempt's status instead of starting a second one;\n * a terminal state makes the next `begin()` start fresh.\n */\nexport class CommandCodeLoginFlow {\n  private readonly deps: CommandCodeLoginFlowDeps\n  private readonly listeners = new Set<() => void>()\n\n  private statusValue: CommandCodeLoginStatus = { state: 'idle' }\n  private server: Server | undefined\n  private timer: ReturnType<typeof setTimeout> | undefined\n  /** Settle hooks of the live attempt's callback promise. */\n  private settle: {\n    resolve(credentials: CommandCodeLoginCredentials): void\n    reject(failure: LoginSettleError): void\n  } | undefined\n  /**\n   * Attempt generation. A delivered callback keeps validating the key\n   * asynchronously (`complete()`), and that window is open to a cancel or a\n   * fresh `begin()`; the generation lets a late completion recognize that it\n   * no longer owns the status face and stop instead of storing a credential\n   * the user cancelled and flipping the page back to success.\n   */\n  private attemptSeq = 0\n  private disposed = false\n\n  constructor(deps: CommandCodeLoginFlowDeps) {\n    this.deps = deps\n  }\n\n  /** Subscribe to state transitions. @returns the disposer. */\n  onChange(listener: () => void): () => void {\n    this.listeners.add(listener)\n    return () => this.listeners.delete(listener)\n  }\n\n  /** The current attempt's status face. */\n  status(): CommandCodeLoginStatus {\n    return this.statusValue\n  }\n\n  /**\n   * Start an attempt (or rejoin the live one) and resolve with its status —\n   * `waiting` carrying the Studio URL once the loopback server is up.\n   * Rejects only when the flow cannot start at all (no free port, disposed).\n   */\n  async begin(): Promise<CommandCodeLoginStatus> {\n    if (this.disposed) throw new Error('login flow has been disposed')\n    // Rejoin only a live attempt. A `waiting` status whose server is already\n    // torn down means the callback was consumed and the key is being\n    // validated: that attempt can no longer receive anything, so handing its\n    // dead authUrl back would give the user a link to a closed port. Starting\n    // fresh retires it (the generation check below drops its late completion).\n    if (this.statusValue.state === 'waiting' && this.server !== undefined) return this.statusValue\n    this.teardown()\n    const attempt = ++this.attemptSeq\n\n    const port = await this.findPort()\n    const expectedState = this.deps.randomToken?.(32) ?? randomBytes(32).toString('base64url')\n\n    // The attempt settles exactly once: fulfilled with delivered credentials,\n    // rejected with a tagged failure the mapping below turns into copy.\n    const settled = new Promise<CommandCodeLoginCredentials>((resolve, reject) => {\n      this.settle = { resolve, reject }\n    })\n    // A bind failure must surface before the attempt reports `waiting`.\n    await this.bindServer(port, expectedState)\n\n    const apiBase = this.readApiBase()\n    this.setStatus({\n      state: 'waiting',\n      authUrl: buildCommandAuthUrl({ studioBase: studioBaseForApiBase(apiBase), port, state: expectedState }),\n    })\n\n    // Watchdog mirrors the CLI's 2-minute window.\n    this.timer = setTimeout(() => {\n      this.teardown()\n      this.setStatus({\n        state: 'failed',\n        reason: 'timeout',\n        message: 'No browser callback arrived within the login window.',\n      })\n    }, this.deps.timeoutMs ?? LOGIN_TIMEOUT_MS)\n    this.timer.unref?.()\n\n    void settled.then(\n      (credentials) => this.complete(attempt, credentials),\n      (failure) => this.failFrom(attempt, failure),\n    )\n    return this.statusValue\n  }\n\n  /** Cancel a waiting attempt; terminal states are untouched. */\n  cancel(): void {\n    if (this.disposed || this.statusValue.state !== 'waiting') return\n    this.teardown()\n    this.setStatus({ state: 'failed', reason: 'cancelled' })\n  }\n\n  /** Stop everything; a waiting attempt ends cancelled. Idempotent. */\n  dispose(): void {\n    if (this.disposed) return\n    this.disposed = true\n    const wasWaiting = this.statusValue.state === 'waiting'\n    this.teardown()\n    if (wasWaiting) this.setStatus({ state: 'failed', reason: 'cancelled' })\n  }\n\n  // -----------------------------------------------------------------------\n  // Internals\n  // -----------------------------------------------------------------------\n\n  private readApiBase(): string {\n    const raw = typeof this.deps.apiBase === 'function' ? this.deps.apiBase() : this.deps.apiBase\n    return raw ?? DEFAULT_API_BASE\n  }\n\n  private setStatus(next: CommandCodeLoginStatus): void {\n    this.statusValue = next\n    for (const listener of [...this.listeners]) listener()\n  }\n\n  /** First free port among the consecutive candidates. */\n  private async findPort(): Promise<number> {\n    const startPort = this.deps.startPort ?? LOGIN_START_PORT\n    const attempts = this.deps.maxPortAttempts ?? LOGIN_MAX_PORT_ATTEMPTS\n    for (let index = 0; index < attempts; index += 1) {\n      const candidate = startPort + index\n      if (await checkPortAvailable(candidate)) return candidate\n    }\n    throw new Error(`No available port found after ${attempts} attempts starting from port ${startPort}`)\n  }\n\n  /**\n   * Bind the attempt's loopback server, resolving when the port is live.\n   * Pre-bind failures reject (surfacing from `begin()`); a later server error\n   * settles the live attempt as a tagged failure instead.\n   */\n  private bindServer(port: number, expectedState: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n      let binding = true\n      const server = createHttpServer((request, response) => this.handleCallback(request, response, expectedState))\n      this.server = server\n      server.once('error', (error: NodeJS.ErrnoException) => {\n        if (this.server !== server) return\n        this.server = undefined\n        const tagged = new LoginSettleError(\n          'error',\n          `Could not bind the login callback server on port ${port}: ${error.code ?? error.message}`,\n        )\n        if (binding) {\n          binding = false\n          reject(tagged)\n        } else {\n          this.settle?.reject(tagged)\n        }\n      })\n      server.listen(port, '127.0.0.1', () => {\n        if (!binding) return\n        binding = false\n        resolve()\n      })\n    })\n  }\n\n  /** One request against the attempt's callback endpoint (CLI-mirrored). */\n  private handleCallback(request: IncomingMessage, response: ServerResponse, expectedState: string): void {\n    // One-shot responses: the server dies with the attempt, and a client\n    // pooling the connection would otherwise race its next request against\n    // the close.\n    response.setHeader('Connection', 'close')\n    response.setHeader('Access-Control-Allow-Origin', corsOrigin(request.headers.origin))\n    response.setHeader('Access-Control-Allow-Methods', 'POST, OPTIONS')\n    response.setHeader('Access-Control-Allow-Headers', 'Content-Type')\n    response.setHeader('Content-Type', 'application/json')\n    const json = (code: number, body: Record<string, unknown>) => {\n      response.writeHead(code)\n      response.end(JSON.stringify(body))\n    }\n    if (request.method === 'OPTIONS') {\n      response.writeHead(204)\n      response.end()\n      return\n    }\n    const path = request.url?.split('?')[0] ?? '/'\n    if (path !== '/callback') {\n      json(404, { success: false, error: 'Not found' })\n      return\n    }\n    if (request.method !== 'POST') {\n      json(405, { success: false, error: 'Method not allowed. Use POST.' })\n      return\n    }\n    // The cap is on wire bytes, not JS string length: multibyte bodies\n    // (CJK/emoji) would otherwise pass ~1.5-2x the limit before tripping it.\n    let bodyBytes = 0\n    let body = ''\n    request.on('data', (chunk: Buffer) => {\n      bodyBytes += chunk.length\n      body += chunk.toString()\n      if (bodyBytes > LOGIN_BODY_LIMIT_BYTES) request.destroy()\n    })\n    request.on('end', () => {\n      // A destroyed (over-limit) request never processes its partial body.\n      if (request.destroyed) return\n      let payload: unknown\n      try {\n        payload = JSON.parse(body)\n      } catch {\n        json(400, { success: false, error: 'Invalid JSON' })\n        return\n      }\n      // The Studio reports a denied authorization as an error object. The\n      // state token is checked FIRST, exactly as the CLI does: a denial is\n      // terminal, so an unauthenticated caller that could reach this branch\n      // without a state match could kill a live login from any web page (the\n      // POST rides as a CORS simple request, which the browser sends\n      // regardless of our origin allowlist). Only the holder of the state this\n      // attempt generated may end it.\n      if (typeof payload === 'object' && payload !== null && 'error' in payload) {\n        const denial = payload as Record<string, unknown>\n        if (denial.state !== expectedState) {\n          json(403, { success: false, error: 'Invalid state token' })\n          return\n        }\n        const description = denial.error_description ?? denial.error\n        this.settleAttempt(json, 200, { success: true }, new LoginSettleError(\n          denial.error === 'access_denied' ? 'denied' : 'error',\n          typeof description === 'string' && description !== '' ? description : 'Authorization failed',\n        ))\n        return\n      }\n      if (!isCallbackCredentials(payload)) {\n        json(400, { success: false, error: 'Missing required fields' })\n        return\n      }\n      if (payload.state !== expectedState) {\n        // Not terminal: a stale tab replaying an old state must not kill the\n        // live attempt — answer 403 and keep waiting (the CLI does the same).\n        json(403, { success: false, error: 'Invalid state token' })\n        return\n      }\n      this.settleAttempt(json, 200, { success: true }, undefined, { ...payload })\n    })\n    request.on('error', () => {})\n  }\n\n  /** Answer a decisive callback, stop listening, and settle the attempt. */\n  private settleAttempt(\n    json: (code: number, body: Record<string, unknown>) => void,\n    code: number,\n    body: Record<string, unknown>,\n    failure?: LoginSettleError,\n    credentials?: CommandCodeLoginCredentials,\n  ): void {\n    json(code, body)\n    // Capture the settle hooks BEFORE teardown clears them.\n    const settle = this.settle\n    this.teardown()\n    if (settle === undefined) return\n    if (failure !== undefined) settle.reject(failure)\n    else if (credentials !== undefined) settle.resolve(credentials)\n  }\n\n  /**\n   * Post-validation completion: whoami check, then hand-off to storage.\n   *\n   * Every step re-checks {@link ownsAttempt} first: the whoami round-trip and\n   * the credential write are awaits, and the user may cancel (or start another\n   * attempt) while one is in flight. A completion that no longer owns the\n   * attempt must not write the key or publish a status — otherwise cancel\n   * would report \"cancelled\" while the credential landed anyway, and the page\n   * would silently flip to success.\n   */\n  private async complete(attempt: number, credentials: CommandCodeLoginCredentials): Promise<void> {\n    if (!this.ownsAttempt(attempt)) return\n    const validation = await validateCommandApiKey(\n      this.deps.fetchImpl ?? fetch,\n      this.readApiBase(),\n      credentials.apiKey,\n    )\n    if (!this.ownsAttempt(attempt)) return\n    if (!validation.valid) {\n      const reason: CommandCodeLoginFailureReason = validation.error === 'invalid_key'\n        ? 'invalid-key'\n        : validation.error === 'network_error' ? 'network' : 'error'\n      this.setStatus({\n        state: 'failed',\n        reason,\n        message: `/alpha/whoami rejected the delivered key (${validation.error}).`,\n      })\n      return\n    }\n    // Last gate before the side effect: a cancel that arrived during the\n    // whoami check must win over storing the key.\n    if (!this.ownsAttempt(attempt)) return\n    try {\n      await this.deps.storeKey(credentials)\n    } catch (error: unknown) {\n      if (!this.ownsAttempt(attempt)) return\n      this.setStatus({\n        state: 'failed',\n        reason: 'unavailable',\n        message: error instanceof Error ? error.message : String(error),\n      })\n      return\n    }\n    if (!this.ownsAttempt(attempt)) return\n    this.clearTimer()\n    this.setStatus({ state: 'success', userName: credentials.userName, keyName: credentials.keyName })\n  }\n\n  /** Whether one attempt still owns the status face (not cancelled, replaced, or disposed). */\n  private ownsAttempt(attempt: number): boolean {\n    return !this.disposed && this.attemptSeq === attempt && this.statusValue.state === 'waiting'\n  }\n\n  /** Map a tagged settle rejection onto the status face. */\n  private failFrom(attempt: number, failure: unknown): void {\n    if (!(failure instanceof LoginSettleError)) return\n    if (!this.ownsAttempt(attempt)) return\n    this.setStatus({ state: 'failed', reason: failure.reason, message: failure.message })\n  }\n\n  private clearTimer(): void {\n    if (this.timer !== undefined) {\n      clearTimeout(this.timer)\n      this.timer = undefined\n    }\n  }\n\n  /** Close the server and watchdog without touching the published status. */\n  private teardown(): void {\n    this.clearTimer()\n    this.server?.close()\n    this.server = undefined\n    this.settle = undefined\n  }\n}\n\n/** A tagged settle failure carrying the stable copy reason. */\nclass LoginSettleError extends Error {\n  constructor(public readonly reason: CommandCodeLoginFailureReason, message: string) {\n    super(message)\n    this.name = 'LoginSettleError'\n  }\n}\n\n/** Echo the Origin header only when the Studio allowlist contains it. */\nfunction corsOrigin(origin: string | undefined): string {\n  return origin !== undefined && LOGIN_ALLOWED_ORIGINS.includes(origin) ? origin : ''\n}\n","/**\n * dsh-commandcode-provider — Command Code web search provider over `ctx.web`.\n *\n * The official Command Code CLI ships a built-in `web_search` tool that POSTs\n * `{ query, numResults, allowedDomains?, blockedDomains? }` to\n * `{apiBase}/alpha/web-search` and reads `{ results: [{ title, url, snippet }] }`\n * back. It authenticates with the SAME `Authorization: Bearer <key>` header and\n * `x-command-code-version` the model adapter uses, so this provider reuses the\n * plugin's existing credential chain (`COMMANDCODE_API_KEY` → credentials seam →\n * `~/.commandcode/auth.json`) — no separate DeepSeek key, no extra endpoint.\n *\n * This mirrors the host-side `@deepseek-ai/dsh-web-search-deepseek` provider in\n * shape: a cordis-free class registered into the web seam, resolving its key per\n * search, mapping each server-side result to the harness's normalized\n * `WebSearchSource`. The web seam owns `maxResults` truncation.\n *\n * @module dsh-commandcode-provider/web-search\n */\n\nimport { WebError, type WebSearchProvider, type WebSearchRequest, type WebSearchResult, type WebSearchSource } from '@deepseek-ai/dsh-web'\nimport type { WebRuntime } from '@deepseek-ai/dsh-web'\nimport { attributionHeaders, type HarnessError } from '@deepseek-ai/dsh-llm'\nimport { COMMAND_CODE_CLI_VERSION } from './adapter.ts'\n\n/** Stable id this provider registers under in `ctx.web`. */\nexport const COMMANDCODE_SEARCH_PROVIDER_ID = 'commandcode'\n\n/**\n * The factory-declared search provider id dsh ships by default (from\n * `dsh-base`'s cordis patch `web.config.searchProvider`). Kept as a\n * documented reference only: disabling this plugin's `webSearch` toggle\n * restores the previously selected backend (see\n * {@link applyCommandCodeSearchSelection}) — it never forces this default,\n * because forcing it is what used to silence sibling search plugins such as\n * modsearch even with Command Code search turned off (issue #26).\n */\nexport const DEFAULT_WEB_SEARCH_PROVIDER_ID = 'deepseek-official'\n\n/**\n * A structurally-typed view of `WebRuntime`'s private selection field.\n *\n * `searchProviderId` is declared `private readonly` on the class, but the\n * compiled runtime property is a plain writable field read per search call\n * (`web.search()` reads `this.searchProviderId` on every invocation). dsh\n * offers no public API to change the selected search provider at runtime, so\n * this seam mutates the instance field directly. That is a deliberate, bounded\n * dependency on the runtime shape: if dsh ever makes the field `#private` or\n * caches it in a closure, this write silently stops applying and the plugin\n * falls back to its provider remaining registered-but-unselected (the boot-time\n * `searchProvider: commandcode` cordis patch is the durable alternative).\n */\ninterface WebRuntimeSearchField {\n  /** The selected search provider id; read per call by `search()`. */\n  searchProviderId: string | undefined\n}\n\n/**\n * Point the web seam's search selection at this plugin's provider (`commandcode`).\n * Sets the runtime field; the next search call honours it because `search()`\n * re-reads `searchProviderId` each time. Returns the prior id (or undefined).\n * Never throws: a hardened/frozen runtime shape must not break the\n * settings-save path that calls this — the provider simply stays\n * registered-but-unselected (the boot-time `searchProvider: commandcode`\n * cordis patch is the durable alternative).\n *\n * @deprecated Prefer {@link applyCommandCodeSearchSelection}: this overload\n * always overwrites the displaced backend with the factory default on\n * disable, so turning Command Code search off silences whichever provider\n * was selected before (e.g. modsearch) instead of restoring it (issue #26).\n */\nexport function selectCommandCodeSearchProvider(web: WebRuntime, enable: boolean): string | undefined {\n  try {\n    const field = web as unknown as WebRuntimeSearchField\n    const prior = field.searchProviderId\n    field.searchProviderId = enable ? COMMANDCODE_SEARCH_PROVIDER_ID : DEFAULT_WEB_SEARCH_PROVIDER_ID\n    return prior\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Tracked web-search selection state for one mounted `WebRuntime`.\n *\n * `owner` marks whether this plugin currently owns the selection (i.e. it\n * wrote `commandcode` and has not given it back yet). `displaced` is the\n * backend id the plugin displaced when it took over — restored when the\n * toggle turns off or the plugin unloads. `undefined` means \"nothing was\n * configured, leave auto-select\" and must round-trip untouched: writing the\n * factory default instead would still override a sibling plugin's own\n * constructor-time pin.\n */\nexport interface CommandCodeSearchSelection {\n  owner: boolean\n  displaced: string | undefined\n}\n\n/** Fresh selection state: the plugin starts out not owning the selection. */\nexport function commandCodeSearchSelection(): CommandCodeSearchSelection {\n  return { owner: false, displaced: undefined }\n}\n\n/**\n * Reach one end of the `webSearch` toggle without trampling sibling search\n * providers (issue #26).\n *\n * - Enabling writes `commandcode` and remembers whatever it displaced. When\n *   the plugin already owns the selection (e.g. a settings save while still\n *   on), the original `displaced` value is kept — the field currently holds\n *   our own id, which must never be mistaken for the user's backend.\n * - Disabling hands the selection back to the remembered backend. When the\n *   state holds no memory (a fresh boot straight into `webSearch: false`),\n *   the field is left alone: the runtime's current value — a sibling's\n *   cordis pin such as `searchProvider: modsearch`, or unset for\n *   auto-select — already says what the user wants.\n * - When the field already reads `commandcode` at first touch (e.g. a\n *   surviving runtime the plugin did not set, or a manual\n *   `searchProvider: commandcode` pin), `displaced` stays undefined so the\n *   later disable is a no-op rather than a guess at the factory default.\n *\n * Never throws: like the low-level rewrite, a hardened runtime shape degrades\n * to registered-but-unselected.\n */\nexport function applyCommandCodeSearchSelection(\n  web: WebRuntime,\n  state: CommandCodeSearchSelection,\n  enable: boolean,\n): void {\n  try {\n    const field = web as unknown as WebRuntimeSearchField\n    if (enable) {\n      if (state.owner) {\n        // Still on across a re-apply: re-assert without forgetting whom we displaced.\n        field.searchProviderId = COMMANDCODE_SEARCH_PROVIDER_ID\n        return\n      }\n      const prior = field.searchProviderId\n      state.displaced = prior === COMMANDCODE_SEARCH_PROVIDER_ID ? undefined : prior\n      field.searchProviderId = COMMANDCODE_SEARCH_PROVIDER_ID\n      state.owner = true\n      return\n    }\n    if (state.owner) {\n      state.owner = false\n      field.searchProviderId = state.displaced\n      return\n    }\n    // Off without ever having taken over: nothing of ours to give back.\n  } catch {\n    // Hardened/frozen runtime: stay registered-but-unselected.\n  }\n}\n\n/** Command Code's lower/upper bound on `numResults` (from the CLI's `web_search` schema). */\nconst MIN_NUM_RESULTS = 1\nconst MAX_NUM_RESULTS = 10\n/** CLI default when the caller sets no result cap. */\nconst DEFAULT_NUM_RESULTS = 5\n\n/** The endpoint the search POST goes to; `{apiBase}` is prepended. */\nconst SEARCH_ROUTE = '/alpha/web-search'\n\n/** Per-request facts the provider needs, all injected so the class stays cordis-free and testable. */\nexport interface CommandCodeSearchProviderDeps {\n  /** Resolve one usable Command Code key (credential seam → env → auth file), or undefined when none. */\n  resolveKey(): Promise<string | undefined>\n  /** The API base host (defaults to `https://api.commandcode.ai`). */\n  apiBase(): string\n  /** Injectable fetch for tests; defaults to the global fetch. */\n  fetchImpl?: typeof fetch\n}\n\n/**\n * Clamp a DSH `maxResults` bound into Command Code's 1–10 range, applying the\n * CLI default of 5 when the caller supplied none.\n */\nfunction clampNumResults(maxResults: number | undefined): number {\n  return maxResults === undefined\n    ? DEFAULT_NUM_RESULTS\n    : Math.max(MIN_NUM_RESULTS, Math.min(MAX_NUM_RESULTS, Math.round(maxResults)))\n}\n\n/** Build a `WebSearchSource` from one raw `{ title, url, snippet }` result, omitting empty optional fields. */\nfunction toSource(result: { url?: string; title?: string; snippet?: string }): WebSearchSource | undefined {\n  const url = result.url?.trim()\n  if (url === undefined || url.length === 0) return undefined\n  const title = result.title?.trim()\n  const snippet = result.snippet?.trim()\n  return {\n    url,\n    ...title !== undefined && title.length > 0 ? { title } : {},\n    ...snippet !== undefined && snippet.length > 0 ? { snippet } : {},\n  }\n}\n\nfunction isAbortError(error: unknown): boolean {\n  return error instanceof DOMException && error.name === 'AbortError'\n}\n\n/** Build the provider's stable cancellation error while retaining the caller's reason. */\nfunction searchAborted(signal: AbortSignal | undefined, fallback: unknown): WebError {\n  return new WebError('Command Code web search aborted', 'WEB_ABORTED', {\n    cause: signal?.aborted === true ? signal.reason : fallback,\n  })\n}\n\nfunction throwIfAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted === true) throw searchAborted(signal, undefined)\n}\n\n/**\n * A `ctx.web` search provider backed by the Command Code Provider API. Reuses\n * the plugin's credential chain and `apiBase`, so search \"just works\" with the\n * existing key — the model-facing `web_search` tool needs no separate\n * configuration. Selection between multiple search providers is the web seam's\n * job (pin `searchProvider: commandcode` if ambiguous).\n */\nexport class CommandCodeSearchProvider implements WebSearchProvider {\n  readonly id = COMMANDCODE_SEARCH_PROVIDER_ID\n\n  constructor(private readonly deps: CommandCodeSearchProviderDeps) {}\n\n  /** Cheap local check; must not make network calls. Presence of a parseable base is enough. */\n  available(): boolean {\n    const base = this.deps.apiBase()\n    return base.length > 0 && URL.canParse(base)\n  }\n\n  async search(request: WebSearchRequest, signal?: AbortSignal): Promise<WebSearchResult> {\n    throwIfAborted(signal)\n    const apiBase = this.deps.apiBase()\n    if (!URL.canParse(apiBase)) {\n      throw new WebError(\n        `Command Code web search is misconfigured: apiBase ${JSON.stringify(apiBase)} is not a valid URL`,\n        'WEB_PROVIDER_ERROR',\n      )\n    }\n    const key = await this.resolveKey(signal)\n    throwIfAborted(signal)\n    const endpoint = `${apiBase.replace(/\\/$/, '')}${SEARCH_ROUTE}`\n\n    const body = {\n      query: request.query,\n      numResults: clampNumResults(request.maxResults),\n    }\n\n    let response: Response\n    try {\n      response = await (this.deps.fetchImpl ?? fetch)(endpoint, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Authorization: `Bearer ${key}`,\n          'x-command-code-version': COMMAND_CODE_CLI_VERSION,\n          'x-cli-environment': 'production',\n          ...attributionHeaders(),\n        },\n        body: JSON.stringify(body),\n        ...signal !== undefined ? { signal } : {},\n      })\n    } catch (error: unknown) {\n      if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error)\n      throw new WebError(\n        `Command Code web search request failed: ${error instanceof Error ? error.message : String(error)}`,\n        'WEB_PROVIDER_ERROR',\n        { cause: error },\n      )\n    }\n\n    if (!response.ok) {\n      let message = `Command Code web search failed (HTTP ${response.status})`\n      try {\n        const parsed: unknown = await response.json()\n        const detail = typeof parsed === 'object' && parsed !== null\n          ? (parsed as { error?: unknown })?.error\n          : undefined\n        if (typeof detail === 'string' && detail.length > 0) message += `: ${detail}`\n        else if (typeof detail === 'object' && detail !== null) {\n          const code = (detail as { code?: unknown })?.code\n          const inner = (detail as { message?: unknown })?.message\n          if (typeof code === 'string' || typeof inner === 'string') {\n            message += `: ${typeof code === 'string' ? code : ''}${typeof code === 'string' && typeof inner === 'string' ? ' — ' : ''}${typeof inner === 'string' ? inner : ''}`\n          }\n        }\n      } catch (error) {\n        if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error)\n        // Non-JSON error bodies (proxy/gateway HTML): keep a truncated slice\n        // so the status line still says something actionable.\n        const text = await response.text().catch(() => '')\n        const slice = text.trim().slice(0, 200)\n        if (slice !== '') message += `: ${slice}`\n      }\n      throw new WebError(message, 'WEB_PROVIDER_ERROR')\n    }\n\n    let payload: unknown\n    try {\n      payload = await response.json()\n    } catch (error) {\n      if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error)\n      throw new WebError('Command Code web search returned an unparseable response body', 'WEB_PROVIDER_ERROR', { cause: error })\n    }\n\n    const results = (payload as { results?: unknown })?.results\n    if (!Array.isArray(results)) {\n      throw new WebError(\n        'Command Code web search returned no results array (the server may have rejected the query)',\n        'WEB_PROVIDER_ERROR',\n      )\n    }\n\n    const sources: WebSearchSource[] = []\n    const seen = new Set<string>()\n    for (const item of results) {\n      if (typeof item !== 'object' || item === null) continue\n      const source = toSource(item as { url?: string; title?: string; snippet?: string })\n      if (source === undefined || seen.has(source.url)) continue\n      seen.add(source.url)\n      sources.push(source)\n    }\n\n    return { sources, truncated: false }\n  }\n\n  private async resolveKey(signal: AbortSignal | undefined): Promise<string> {\n    let key: string | undefined\n    try {\n      key = await this.deps.resolveKey()\n    } catch (error) {\n      if (signal?.aborted === true || isAbortError(error)) throw searchAborted(signal, error)\n      // Preserve the plugin's structured credential/usage taxonomy so the web\n      // tool surfaces the real cause (e.g. every account exhausted, key\n      // invalid) instead of a generic provider failure. The actionable\n      // \"no key configured\" case maps to WEB_PROVIDER_CREDENTIAL_MISSING;\n      // real rejection causes (INVALID_CREDENTIAL / RATE_LIMIT) keep their\n      // message but ride the provider-error code the tool understands.\n      if (error instanceof Error && typeof (error as HarnessError).code === 'string') {\n        const code = (error as HarnessError).code\n        if (code === 'MISSING_CREDENTIAL') throw new WebError(error.message, 'WEB_PROVIDER_CREDENTIAL_MISSING', { cause: error })\n        if (code === 'INVALID_CREDENTIAL' || code === 'RATE_LIMIT') {\n          throw new WebError(error.message, 'WEB_PROVIDER_ERROR', { cause: error })\n        }\n      }\n      throw new WebError(\n        `Command Code web search credential resolution failed: ${error instanceof Error ? error.message : String(error)}`,\n        'WEB_PROVIDER_ERROR',\n        { cause: error },\n      )\n    }\n    if (key === undefined || key.length === 0) {\n      throw new WebError(\n        'Command Code web search has no API key; store COMMANDCODE_API_KEY through the credentials service (the web Models page writes it), export it in the launching environment, set config.apiKey, or run `command-code login` to write ~/.commandcode/auth.json',\n        'WEB_PROVIDER_CREDENTIAL_MISSING',\n      )\n    }\n    return key\n  }\n}\n","/**\n * dsh-TUI settings section (`tuiSettingsSections`).\n *\n * The terminal front door (dsh-TUI) owns its settings screen and asks plugins\n * only to DECLARE what is editable: a section over the plugin's own settings\n * namespace, which the screen renders and writes through the dsh settings\n * service. Without such a declaration a TUI-only user cannot enter the Command\n * Code API key at all — the web Models page is the only surface that writes\n * it, and dsh-TUI's own `/provider` wizard manages its `llm-pi-ai` routes\n * exclusively (issue #28).\n *\n * The seam is third-party, so this module carries LOCAL structural types\n * instead of importing `@deepseek-harness-tui/dsh-tui`: the plugin keeps zero\n * dependency on a terminal front door it may never meet, and an unmeet seam\n * degrades to \"no section\" rather than to a failed import. Registration rides\n * `ctx.inject(['tuiSettingsSections'], …)` in the plugin entry, so a profile\n * without dsh-TUI never activates the fiber — the same optional-service shape\n * `commands`, `web` and `typert` already use.\n *\n * The API-key field is a **secret** field: dsh-TUI keeps the literal out of\n * the settings document and writes the draft through the credentials seam\n * under the declared reference — the same guarantee the web card provides.\n * The reference must not collide with a host-owned one; dsh-TUI rejects\n * `DEEPSEEK_*`/`DSH_*` refs from plugin sections, and this plugin's default\n * (`COMMANDCODE_API_KEY`) is its own namespace.\n *\n * The model allowlist is a **checkbox per catalog model**, grouped by plan\n * tier — the terminal counterpart of the web page's searchable dropdown, and\n * the reason this page does not ask anyone to type 60+ model ids from memory.\n * dsh-TUI's seam has no multi-select kind (only `text | number | boolean |\n * select`) and no array element path a checkbox could own, so each model is\n * its own `boolean` field that WRITES THE WHOLE ARRAY through its `parse`:\n * the seam lets a field's write carry any value, which is what makes a\n * per-model checkbox express set membership. Two rules keep that honest.\n * (1) `parse` reads the allowlist LIVE through its thunk instead of the value\n * the field was built with, and rebuilds the array from THAT: the screen\n * stages several toggles into one save, so a captured base would let two\n * quick toggles resurrect each other's stale list. (2) An empty allowlist\n * means \"show every model\" to the adapter, so the checkboxes render the\n * EFFECTIVE set — unset shows everything checked, and checking a box only\n * records an explicit list once something is excluded.\n *\n * @module dsh-commandcode-provider/tui-settings\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\n\nimport {\n  KNOWN_PLANS,\n  capabilityDescription,\n  isFreeModel,\n} from './capabilities.ts'\n\n/** Provider-owned translations for one title, label, or hint. */\nexport interface TuiLocalizedText {\n  readonly zh?: string\n  readonly en?: string\n}\n\n/** Control kinds the dsh-TUI settings screen knows how to render. */\nexport type TuiSettingsFieldKind = 'text' | 'number' | 'boolean' | 'select'\n\n/** One choice of an options-bearing field. */\nexport interface TuiSettingsFieldOption {\n  /** Stored value. */\n  readonly value: string\n  /** Display label (English; also the fallback). */\n  readonly label: string\n  /** Provider-owned translations for the label. */\n  readonly descriptions?: TuiLocalizedText\n}\n\n/** The write one field's draft stages when the section is saved. */\nexport type TuiSettingsFieldWrite =\n  | { readonly kind: 'set'; readonly value: unknown }\n  | { readonly kind: 'clear' }\n\n/** One editable field inside a section. */\nexport interface TuiSettingsField {\n  /** Key path from the section root, in the settings service's `mutate` vocabulary. */\n  readonly path: readonly string[]\n  /** Short field label (English; also the fallback). */\n  readonly label: string\n  /** Provider-owned translations for the label. */\n  readonly descriptions?: TuiLocalizedText\n  /** Optional one-line help rendered under the field. */\n  readonly hint?: string\n  /** Provider-owned translations for the hint. */\n  readonly hintDescriptions?: TuiLocalizedText\n  /** Optional group id; grouped fields render on that group's subpage. */\n  readonly group?: string\n  readonly kind: TuiSettingsFieldKind\n  /**\n   * Choices for an options-bearing field. A `text` field that carries options\n   * is the TUI's own \"preset plus custom value\" shape: `←`/`→` cycle the\n   * presets while Enter opens the text editor.\n   */\n  readonly options?: readonly TuiSettingsFieldOption[]\n  /** Input placeholder for `kind: 'text' | 'number'`. */\n  readonly placeholder?: string\n  /**\n   * Credential control: the literal never rides the settings document — the\n   * draft starts blank on every open, a blank draft writes nothing, and a\n   * typed draft writes through the credentials seam under `ref`.\n   */\n  readonly secret?: { readonly ref: string }\n  /** Render a stored value as draft text. */\n  readonly format?: (value: unknown) => string\n  /** The write a draft text stages; `undefined` marks the draft invalid. */\n  readonly parse?: (text: string) => TuiSettingsFieldWrite | undefined\n}\n\n/** Optional navigation group inside one section. */\nexport interface TuiSettingsGroup {\n  /** Stable identifier, unique inside the section. */\n  readonly id: string\n  /** Group title (English; also the fallback). */\n  readonly title: string\n  /** Provider-owned translations for the title. */\n  readonly descriptions?: TuiLocalizedText\n}\n\n/** One plugin's section inside the dsh-TUI settings screen. */\nexport interface TuiSettingsSection {\n  /** Settings namespace this section edits. */\n  readonly ns: string\n  /** Section title (English; also the fallback). */\n  readonly title: string\n  /** Provider-owned translations for the title. */\n  readonly descriptions?: TuiLocalizedText\n  /** Optional navigation groups, in display order. */\n  readonly groups?: readonly TuiSettingsGroup[]\n  /** Editable fields, in display order. */\n  readonly fields: readonly TuiSettingsField[]\n}\n\n/** The slice of the `tuiSettingsSections` service this module uses. */\nexport interface TuiSettingsSectionsService {\n  /** Declare a section; the returned disposer withdraws it. */\n  register(section: TuiSettingsSection): () => void\n}\n\n/** The selector value meaning \"no pinned account — follow rotation order\". */\nexport const ACTIVE_ACCOUNT_AUTO = 'auto'\n\n/** The selector value meaning \"no language override — follow the shell locale\". */\nexport const LANG_AUTO = 'auto'\n\n/** Tier display names, mirroring the web dropdown's headings (`model-select.ts`). */\nconst TIER_TITLES: Readonly<Record<string, string>> = {\n  go: 'Go',\n  goat: 'GOAT',\n  pro: 'Pro',\n  provider: 'Provider',\n  max: 'Max',\n}\n\n/** Tiers in picker order; a model outside this set joins the \"Other\" group. */\nconst TIER_ORDER: readonly string[] = ['go', 'goat', 'pro', 'provider', 'max']\n\n/** The group holding models this build's catalog does not know. */\nconst OTHER_GROUP_ID = 'models-other'\n\n/** One catalog model offered as a checkbox. */\nexport interface TuiModelChoice {\n  /** Catalog model id, e.g. `deepseek/deepseek-v4-pro`. */\n  readonly id: string\n  /** Minimum plan tier key from `KNOWN_PLANS`. */\n  readonly tier: string\n  /** Whether the model is currently free, so it leads its group. */\n  readonly free: boolean\n  /** Footer hint for the focused row: plan tier · deal · peak · `Image`. */\n  readonly hint: string\n}\n\n/**\n * Every model this build knows, in checkbox order: plan tier (Go first), then\n * free before paid inside a tier, then by id.\n *\n * The list is the static capability snapshot rather than a live catalog read\n * on purpose — a settings page must draw synchronously, and the snapshot is\n * synced from the same upstream table the picker's tier headings come from.\n * A model added upstream after this build still reaches the user: an empty\n * allowlist shows everything, and a model named in the allowlist but absent\n * here is rendered by the \"Other\" group instead of disappearing.\n */\nexport function commandCodeTuiModelChoices(): readonly TuiModelChoice[] {\n  return Object.keys(KNOWN_PLANS)\n    .map((id) => ({\n      id,\n      tier: KNOWN_PLANS[id] ?? '',\n      free: isFreeModel(id),\n      hint: capabilityDescription(id),\n    }))\n    .sort((a, b) => {\n      const tierDelta = tierRank(a.tier) - tierRank(b.tier)\n      if (tierDelta !== 0) return tierDelta\n      if (a.free !== b.free) return a.free ? -1 : 1\n      return a.id.localeCompare(b.id)\n    })\n}\n\n/** Sort rank of a tier key; unknown tiers trail every known one. */\nfunction tierRank(tier: string): number {\n  const rank = TIER_ORDER.indexOf(tier)\n  return rank === -1 ? TIER_ORDER.length : rank\n}\n\n/** The stored allowlist as a clean id list (non-strings and blanks dropped). */\nfunction storedIds(value: unknown): string[] {\n  return Array.isArray(value)\n    ? value.filter((id): id is string => typeof id === 'string' && id !== '')\n    : []\n}\n\n/** Everything the section needs from the plugin entry. */\nexport interface CommandCodeTuiSettingsDeps {\n  /** The plugin's settings namespace (`llm-commandcode`). */\n  ns: string\n  /** Section title; defaults to `Command Code`. */\n  title?: string\n  /**\n   * The credential reference the API-key field writes through, read per\n   * registration so a `Config.apiKeyEnv` change re-targets the field instead\n   * of silently writing to the old reference.\n   */\n  apiKeyRef: () => string\n  /**\n   * Account slots for the active-account selector, in rotation order, read\n   * per registration. A changed list re-registers the section (see\n   * {@link applyCommandCodeTuiSettings}).\n   */\n  accountSlots: () => readonly { id: string; label: string }[]\n  /**\n   * The stored model allowlist, read LIVE at save time. A checkbox judges its\n   * inherited state against this, so it must be read when the write runs, not\n   * captured when the section was registered. An empty list means \"every model\n   * is visible\" (the adapter's rule).\n   */\n  visibleModels: () => readonly string[]\n  /**\n   * The per-model override map the checkboxes write, read per registration so\n   * ids this build's catalog does not know still get a row of their own. Same\n   * live-read rule as {@link visibleModels}.\n   */\n  modelVisibility?: () => Readonly<Record<string, boolean>> | undefined\n  /** The models to offer as checkboxes; defaults to the static snapshot. */\n  modelChoices?: () => readonly TuiModelChoice[]\n}\n\n/**\n * Build the section descriptor. Pure, so tests can pin the exact fields\n * without a dsh-TUI host.\n *\n * Field choices worth keeping: the two option-bearing fields (`activeAccount`,\n * `lang`) are `text` + `options` rather than `select`, because a `select`\n * cannot express \"unset\" — cycling only ever lands on a declared option, so a\n * `select` would strand the user on a pinned value with no way back to\n * automatic. The `auto` sentinel plus a `parse` that clears the path keeps the\n * unset state reachable. `filterModelsByPlan` formats its EFFECTIVE default\n * (unset means true at the adapter), so a fresh install reads true instead of\n * the screen's \"(empty)\".\n */\nexport function buildCommandCodeTuiSection(\n  deps: CommandCodeTuiSettingsDeps,\n): TuiSettingsSection {\n  const ref = deps.apiKeyRef()\n  const slots = deps.accountSlots()\n  const choices = (deps.modelChoices ?? commandCodeTuiModelChoices)()\n  const catalogIds = choices.map((choice) => choice.id)\n  const known = new Set(catalogIds)\n  // An empty allowlist means \"show every model\" at the adapter, so an\n  // unchecked-for-no-reason model reads as visible. The stored facts are read\n  // live by each field, never captured here.\n  const stored = storedIds(deps.visibleModels())\n  const overrides = deps.modelVisibility?.() ?? {}\n  // Models this build's catalog cannot place (retired or renamed upstream, or\n  // added after this snapshot) plus stored-but-unknown ids. They get their own\n  // group so they stay visible and switchable instead of silently sticking.\n  const extras = [...new Set([...stored, ...Object.keys(overrides)])].filter((id) => !known.has(id))\n\n  const tierGroups = TIER_ORDER\n    .filter((tier) => choices.some((choice) => choice.tier === tier))\n    .map((tier) => ({\n      id: `models-${tier}`,\n      title: `${TIER_TITLES[tier] ?? tier} models`,\n      descriptions: { zh: `${TIER_TITLES[tier] ?? tier} 模型` },\n    }))\n  // Models this snapshot cannot place (a tier added upstream) share the group\n  // with the stored-but-unknown allowlist entries.\n  const unranked = choices.filter((choice) => tierRank(choice.tier) === TIER_ORDER.length)\n  const otherGroup = unranked.length > 0 || extras.length > 0\n    ? [{ id: OTHER_GROUP_ID, title: 'Other models', descriptions: { zh: '其他模型' } }]\n    : []\n\n  /**\n   * One checkbox: a boolean at a path of its OWN (`modelVisibility.<id>`).\n   *\n   * The path must be unique per model. dsh-TUI keys a staged draft by the\n   * field's path (`fieldKey`), so N checkboxes sharing `visibleModels` share\n   * ONE draft: every one of them then parses that same draft on save, all N\n   * write ops address the same path, and only the LAST field's op survives —\n   * which silently rewrote the allowlist from the last catalog model instead\n   * of the one that was toggled. A per-model key is what makes a checkbox\n   * express one model's state.\n   *\n   * An override equal to what the array already says is written as a CLEAR, so\n   * toggling a model back to its inherited state leaves no residue and the\n   * document stays minimal.\n   */\n  const modelField = (id: string, hint: string, group: string): TuiSettingsField => ({\n    path: ['modelVisibility', id],\n    group,\n    kind: 'boolean',\n    label: id,\n    ...(hint === '' ? {} : { hint }),\n    format: (value) => {\n      if (typeof value === 'boolean') return String(value)\n      // No override: the model follows the array allowlist, where empty or\n      // unset means \"everything is visible\".\n      const listed = storedIds(deps.visibleModels())\n      return String(listed.length === 0 || listed.includes(id))\n    },\n    parse: (text) => {\n      const on = text.trim() === 'true'\n      // Read the array LIVE, not at registration time: the screen stages a\n      // toggle and saves it later, and the inherited state must be judged\n      // against what the document holds when the write runs.\n      const listed = storedIds(deps.visibleModels())\n      const inherited = listed.length === 0 || listed.includes(id)\n      return on === inherited ? { kind: 'clear' } : { kind: 'set', value: on }\n    },\n  })\n\n  return {\n    ns: deps.ns,\n    title: deps.title ?? 'Command Code',\n    descriptions: { zh: 'Command Code（非官方）' },\n    groups: [\n      { id: 'connection', title: 'Connection', descriptions: { zh: '连接' } },\n      { id: 'models', title: 'Models', descriptions: { zh: '模型' } },\n      ...tierGroups,\n      ...otherGroup,\n      { id: 'advanced', title: 'Advanced', descriptions: { zh: '高级' } },\n    ],\n    fields: [\n      {\n        path: ['apiKey'],\n        group: 'connection',\n        kind: 'text',\n        label: 'API key',\n        descriptions: { zh: 'API 密钥' },\n        secret: { ref },\n        hint: `Stored in the credential store as ${ref}, never in settings.yaml.`,\n        hintDescriptions: { zh: `保存在凭据库（${ref}），不会写入 settings.yaml。` },\n      },\n      {\n        path: ['apiBase'],\n        group: 'connection',\n        kind: 'text',\n        label: 'API base',\n        descriptions: { zh: 'API 地址' },\n        placeholder: 'https://api.commandcode.ai',\n        hint: 'Leave empty for the public Command Code Provider API.',\n        hintDescriptions: { zh: '留空即使用官方 Command Code Provider API。' },\n        parse: (text) => {\n          const trimmed = text.trim()\n          return trimmed === '' ? { kind: 'clear' } : { kind: 'set', value: trimmed }\n        },\n      },\n      {\n        path: ['filterModelsByPlan'],\n        group: 'models',\n        kind: 'boolean',\n        label: 'Hide out-of-plan models',\n        descriptions: { zh: '隐藏套餐外的模型' },\n        hint: 'Keeps models above your subscription tier out of the picker. Fails open.',\n        hintDescriptions: { zh: '在选择器里隐藏超出当前订阅档位的模型；判断不出来时全部显示。' },\n        // Unset means \"filter\" at the adapter, so render the effective default\n        // rather than letting the raw boolean format report an empty value.\n        format: (value) => (value === false ? 'false' : 'true'),\n        parse: (text) => ({ kind: 'set', value: text.trim() === 'true' }),\n      },\n      ...choices\n        .filter((choice) => tierRank(choice.tier) !== TIER_ORDER.length)\n        .map((choice) => modelField(choice.id, choice.hint, `models-${choice.tier}`)),\n      ...unranked.map((choice) => modelField(choice.id, choice.hint, OTHER_GROUP_ID)),\n      ...extras.map((id) => modelField(id, capabilityDescription(id), OTHER_GROUP_ID)),\n      {\n        path: ['activeAccount'],\n        group: 'advanced',\n        kind: 'text',\n        label: 'Active account',\n        descriptions: { zh: '当前账号' },\n        hint: 'A pinned account id, or auto to follow the rotation order.',\n        hintDescriptions: { zh: '固定使用某个账号的 id；auto 表示按轮换顺序自动选择。' },\n        options: [\n          {\n            value: ACTIVE_ACCOUNT_AUTO,\n            label: 'Automatic (rotation order)',\n            descriptions: { zh: '自动（按轮换顺序）' },\n          },\n          ...slots.map((slot) => ({\n            value: slot.id,\n            label: slot.label,\n            descriptions: { zh: slot.label },\n          })),\n        ],\n        format: (value) => (typeof value === 'string' && value.trim() !== '' ? value : ACTIVE_ACCOUNT_AUTO),\n        parse: (text) => {\n          const trimmed = text.trim()\n          return trimmed === '' || trimmed === ACTIVE_ACCOUNT_AUTO\n            ? { kind: 'clear' }\n            : { kind: 'set', value: trimmed }\n        },\n      },\n      {\n        path: ['lang'],\n        group: 'advanced',\n        kind: 'text',\n        label: 'Command language',\n        descriptions: { zh: '命令语言' },\n        hint: 'Language of the /commandcode dashboard; auto follows the shell locale.',\n        hintDescriptions: { zh: '/commandcode 用量面板的语言；auto 跟随终端 locale。' },\n        options: [\n          { value: LANG_AUTO, label: 'Automatic (shell locale)', descriptions: { zh: '自动（跟随终端 locale）' } },\n          { value: 'zh', label: '中文' },\n          { value: 'en', label: 'English' },\n        ],\n        format: (value) => (value === 'zh' || value === 'en' ? value : LANG_AUTO),\n        parse: (text) => {\n          const trimmed = text.trim()\n          return trimmed === '' || trimmed === LANG_AUTO\n            ? { kind: 'clear' }\n            : { kind: 'set', value: trimmed }\n        },\n      },\n    ],\n  }\n}\n\n/**\n * The `tuiSettingsSections` service, read defensively.\n *\n * The service name is declared by dsh-TUI's own module augmentation, which\n * this package deliberately does not import, so the typed `Context` has no\n * such property. The read goes through the REFLECTIVE `ctx.get` rather than a\n * bare property access: cordis refuses a property read for a service the fiber\n * never declared in `inject` (`cannot get property … without inject`), and an\n * unmeet seam must degrade to \"no section\" instead of throwing out of the\n * plugin's boot.\n */\nfunction tuiSettingsService(ctx: Context): TuiSettingsSectionsService | undefined {\n  let candidate: unknown\n  try {\n    candidate = ctx.get('tuiSettingsSections')\n  } catch {\n    return undefined\n  }\n  if (typeof candidate !== 'object' || candidate === null) return undefined\n  const register = (candidate as { register?: unknown }).register\n  if (typeof register !== 'function') return undefined\n  return {\n    register: (register as (section: TuiSettingsSection) => () => void)\n      .bind(candidate) as TuiSettingsSectionsService['register'],\n  }\n}\n\n/**\n * Identity of everything in the section that can change at runtime: the\n * credential reference behind the API-key field, the account slots behind the\n * active-account selector, and the stored-but-unknown allowlist entries that\n * get a checkbox of their own. Re-registration is skipped while this matches,\n * so ordinary settings writes never churn the screen's section list — the\n * checkboxes themselves read their state live and need no re-declaration.\n */\nfunction sectionSignature(section: TuiSettingsSection): string {\n  const active = section.fields.find((field) => field.path.join('.') === 'activeAccount')\n  return JSON.stringify({\n    secret: section.fields.find((field) => field.secret !== undefined)?.secret?.ref ?? '',\n    options: active?.options?.map((option) => option.value) ?? [],\n    // Only this group's membership can change the field LIST: every catalog\n    // checkbox reads its own state live, so an ordinary toggle needs no\n    // re-declaration.\n    other: section.fields\n      .filter((field) => field.group === OTHER_GROUP_ID)\n      .map((field) => field.label),\n  })\n}\n\n/**\n * Register the Command Code section on a dsh-TUI host.\n *\n * @param ctx - the context of an activated `tuiSettingsSections` injection.\n * @param deps - plugin-owned facts the section reads.\n * @returns a refresh function that re-registers the section when a fact it\n *   renders changed (the plugin entry calls it from its settings `onChange`\n *   hook), or `undefined` when the seam is unusable. The returned function is\n *   inert after the fiber is torn down.\n */\nexport function applyCommandCodeTuiSettings(\n  ctx: Context,\n  deps: CommandCodeTuiSettingsDeps,\n): (() => void) | undefined {\n  const service = tuiSettingsService(ctx)\n  if (service === undefined) return undefined\n  let disposed = false\n  let current: { signature: string; dispose: () => void } | undefined\n  const refresh = (): void => {\n    if (disposed) return\n    const section = buildCommandCodeTuiSection(deps)\n    const signature = sectionSignature(section)\n    if (current?.signature === signature) return\n    // Withdraw before re-declaring: dsh-TUI keeps one section per namespace,\n    // so a second register would otherwise be refused (or shadow the first,\n    // depending on the host build) instead of replacing it.\n    current?.dispose()\n    current = undefined\n    try {\n      current = { signature, dispose: service.register(section) }\n    } catch (error: unknown) {\n      // A host that rejects the declaration (a shadow-mode capability policy,\n      // a future contract change) must not take the plugin down with it: the\n      // terminal simply keeps no Command Code page, and the web page plus\n      // settings.yaml stay the fallback.\n      ctx.logger?.warn(\n        `llm-commandcode: could not register the dsh-TUI settings section: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n      )\n    }\n  }\n  refresh()\n  ctx.effect(() => () => {\n    disposed = true\n    current?.dispose()\n    current = undefined\n  }, 'dsh-commandcode-provider: tui settings section')\n  return refresh\n}\n","/**\n * dsh-commandcode-provider — DeepSeek Harness LLM provider plugin for Command\n * Code (unofficial; ported from pi-commandcode-provider@0.5.1).\n *\n * Registers the `commandcode` provider route on `ctx.llm` and declares it in\n * the configurable-provider directory, so the web Models page shows a\n * \"Command Code\" card with an API-key field and the model picker lists the\n * live Command Code model catalog. Connection facts resolve per request over\n * the optional `llm-commandcode` user-settings section and the credential\n * seam, so a changed key, endpoint, or cache path reaches the next request\n * without a restart.\n *\n * ```yaml\n * - id: llm-commandcode\n *   name: \"@mars-sea/dsh-commandcode-provider\"\n *   config:\n *     apiKeyEnv: COMMANDCODE_API_KEY\n * ```\n *\n * The `name` is the full package specifier as installed in the profile's\n * node_modules: the loader imports it as a module, and pnpm links packages by\n * their true (scoped) name — a bare `dsh-commandcode-provider` fails to\n * resolve (ERR_MODULE_NOT_FOUND) and crashes the app on boot. The value must\n * be quoted in YAML: an unquoted scalar starting with `@` fails to parse.\n *\n * @module dsh-commandcode-provider\n */\n\nimport { installCostProjection } from './cost-projection.ts'\nimport { homedir } from 'node:os'\nimport { join } from 'node:path'\n\nimport type { Context } from '@deepseek-ai/cordis'\nimport type { WebRuntime } from '@deepseek-ai/dsh-web'\nimport z from '@deepseek-ai/schemastery'\nimport { MAX_TIMER_DELAY_MS } from '@deepseek-ai/dsh-timeout'\nimport { assertUsableApiKey, LlmError } from '@deepseek-ai/dsh-llm'\nimport { credentialRef, type CredentialRef } from '@deepseek-ai/dsh-credentials'\nimport { launchEnvironmentOf } from '@deepseek-ai/dsh-launch-environment'\nimport type {} from '@deepseek-ai/dsh-settings'\nimport { CommandCodeAdapter, DEFAULT_API_BASE, resolveAuthFileApiKey } from './adapter.ts'\nimport { DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_STREAM_IDLE_TIMEOUT_MS } from './adapter.ts'\nimport type { CommandCodeConnectionOptions, CommandCodeUsageReport } from './adapter.ts'\nimport { CommandCodeAccountPool, accountUsable, selectActiveAccount } from './accounts.ts'\nimport type { CommandCodeAccountConfig, CommandCodeAccountSlot, CommandCodeModelAccountRule } from './accounts.ts'\nimport { applyCommands } from './commands.ts'\nimport { applyUsageRemote } from './usage-remote.ts'\nimport type { CommandCodeAccountsReport, CommandCodeCatalog } from './usage-wire.ts'\nimport { CommandCodeLoginFlow } from './login.ts'\nimport type { CommandCodeLoginCredentials } from './login.ts'\nimport { pickCommandLocale, type LocaleId } from './command-locales.ts'\nimport { CommandCodeSearchProvider, applyCommandCodeSearchSelection, commandCodeSearchSelection } from './web-search.ts'\nimport { applyCommandCodeTuiSettings } from './tui-settings.ts'\nimport { KNOWN_PLANS } from './capabilities.ts'\n\nexport {\n  COMMAND_CODE_CLI_VERSION,\n  DEFAULT_API_BASE,\n  DEFAULT_GENERATE_MAX_TOKENS,\n  DEFAULT_MAX_OUTPUT_TOKENS,\n  DEFAULT_REQUEST_TIMEOUT_MS,\n  DEFAULT_STREAM_IDLE_TIMEOUT_MS,\n  CommandCodeAdapter,\n  BILLING_ACCESS_TTL_MS,\n  projectSlugFromPath,\n  resolveAuthFileApiKey,\n} from './adapter.ts'\nexport {\n  KNOWN_EFFORTS,\n  KNOWN_IMAGE_MODELS,\n  KNOWN_THINKING_MODELS,\n  KNOWN_PLANS,\n  KNOWN_SUBSCRIPTION_PLANS,\n  KNOWN_DEALS,\n  KNOWN_PEAK_PRICING,\n  PLAN_LABELS,\n  PLAN_ORDER,\n  capabilityDescription,\n  compareByPlan,\n  dealLabel,\n  formatContext,\n  modelVisibleInPlan,\n  peakPricingLabel,\n  peakPricingState,\n  planLabel,\n  subscriptionPlanInfo,\n} from './capabilities.ts'\nexport type { CommandCodeAdapterDeps, CommandCodeConnectionOptions, CommandCodeUsageReport, ResolveAttachments } from './adapter.ts'\nexport type { CommandCodeBillingAccess } from './capabilities.ts'\nexport { applyCommands, commandDefinition } from './commands.ts'\nexport type { CommandCodeCommandDeps } from './commands.ts'\nexport { applyUsageRemote, CommandCodeUsageService } from './usage-remote.ts'\nexport type { CommandCodeUsageDeps, LoginFlowFacade } from './usage-remote.ts'\nexport { USAGE_REPORT_ENDPOINT, usageReportSchema } from './usage-wire.ts'\nexport type { CommandCodeAccountUsage, CommandCodeAccountsReport } from './usage-wire.ts'\nexport {\n  LOGIN_BEGIN_ENDPOINT,\n  LOGIN_STATUS_ENDPOINT,\n  LOGIN_CANCEL_ENDPOINT,\n  parseLoginStatus,\n  loginStatusSchema,\n} from './login-wire.ts'\nexport type {\n  CommandCodeLoginStatus,\n  CommandCodeLoginFailureReason,\n} from './login-wire.ts'\nexport {\n  LOGIN_TIMEOUT_MS,\n  LOGIN_START_PORT,\n  LOGIN_MAX_PORT_ATTEMPTS,\n  LOGIN_BODY_LIMIT_BYTES,\n  LOGIN_ALLOWED_ORIGINS,\n  buildCommandAuthUrl,\n  studioBaseForApiBase,\n  validateCommandApiKey,\n  CommandCodeLoginFlow,\n} from './login.ts'\nexport type {\n  CommandCodeLoginCredentials,\n  CommandCodeLoginFlowDeps,\n  ApiKeyValidation,\n} from './login.ts'\nexport { CommandCodeAccountPool, accountUsable, selectActiveAccount, matchModelRule, selectAccountForModel } from './accounts.ts'\nexport type { CommandCodeAccountConfig, CommandCodeAccountSlot, CommandCodeAccountState, CommandCodeModelAccountRule } from './accounts.ts'\nexport { CommandCodeSearchProvider, COMMANDCODE_SEARCH_PROVIDER_ID, DEFAULT_WEB_SEARCH_PROVIDER_ID, applyCommandCodeSearchSelection, commandCodeSearchSelection, selectCommandCodeSearchProvider } from './web-search.ts'\nexport type { CommandCodeSearchSelection } from './web-search.ts'\nexport type { CommandCodeSearchProviderDeps } from './web-search.ts'\nexport { ACTIVE_ACCOUNT_AUTO, LANG_AUTO, applyCommandCodeTuiSettings, buildCommandCodeTuiSection } from './tui-settings.ts'\nexport type {\n  CommandCodeTuiSettingsDeps,\n  TuiSettingsField,\n  TuiSettingsFieldOption,\n  TuiSettingsFieldWrite,\n  TuiSettingsGroup,\n  TuiSettingsSection,\n  TuiSettingsSectionsService,\n} from './tui-settings.ts'\n\nexport const name = 'llm-commandcode'\nexport const inject = ['llm']\n\nconst NS = 'llm-commandcode'\nconst DEFAULT_API_KEY_ENV = 'COMMANDCODE_API_KEY'\n\n/** The single provider route this plugin owns. */\nexport const PROVIDER = 'commandcode'\n/** Default models cache path (mirrors the pi plugin's on-disk cache). */\nexport const DEFAULT_MODELS_CACHE_PATH = join(homedir(), '.commandcode', 'models-cache.json')\n\n/**\n * Plugin config, validated by the same-named schemastery schema and doubling\n * as the `llm-commandcode` settings-section shape. Every field is optional:\n * a missing API key resolves through {@link Config.apiKeyEnv} at each request\n * (the web Models page writes it), with the official Command Code CLI auth\n * file (`~/.commandcode/auth.json`) as the last fallback.\n */\nexport interface Config {\n  /** Credential reference (environment-variable name) resolved per request; defaults to `COMMANDCODE_API_KEY`. */\n  apiKeyEnv?: string\n  /** Literal API key override (composition config only); takes precedence over `apiKeyEnv`. */\n  apiKey?: string\n  /** API base; defaults to the public Command Code Provider API. */\n  apiBase?: string\n  /** Working directory reported to the API; defaults to the process cwd. */\n  workingDir?: string\n  /** Model catalog cache path; defaults to `~/.commandcode/models-cache.json`. */\n  modelsCachePath?: string\n  /** Milliseconds to wait for the generate response's first byte; defaults to 60s. */\n  requestTimeoutMs?: number\n  /** Milliseconds a stream may stall before being treated as a dead connection; defaults to 300s. */\n  streamIdleTimeoutMs?: number\n  /**\n   * Whether the model picker hides models above the account's subscription\n   * tier; defaults to true. The filter fails open (unknown plan, billing\n   * endpoint failure, or a positive on-demand credit balance all keep the\n   * full catalog visible). Set false to always list every model.\n   */\n  filterModelsByPlan?: boolean\n  /**\n   * Visible-model allowlist: catalog model ids shown in pickers. Empty or\n   * unset means \"show everything\". Persisted by the settings page's model\n   * filter card; applies after the subscription-tier filter.\n   */\n  visibleModels?: string[]\n  /**\n   * Per-model visibility overrides from the terminal settings page's checkbox\n   * list, keyed by catalog id (`true` = listed, `false` = hidden). An id here\n   * decides that model on its own; an id absent here follows `visibleModels`.\n   * dsh-TUI keys a staged edit by the field's path, so the checkboxes need one\n   * path per model — a map — because a boolean field cannot express \"this id\n   * is a member of the array\".\n   */\n  modelVisibility?: Record<string, boolean>\n  /**\n   * Extra accounts for multi-account rotation. The top-level\n   * `apiKey`/`apiKeyEnv` (plus the CLI auth file) always form the first\n   * (`default`) account; each entry here adds one more. When a request is\n   * rejected pre-stream with 429 (usage window exhausted) or 401, the next\n   * account's key retried transparently; when every account is exhausted the\n   * request fails with a `RATE_LIMIT` error naming the earliest window\n   * reset. Entries without `apiKey` or `apiKeyEnv` are ignored.\n   */\n  accounts?: CommandCodeAccountConfig[]\n  /**\n   * Manually selected active account: a slot id — `default`, or an extra\n   * account's credential reference (e.g. `COMMANDCODE_API_KEY_2`). The\n   * selected account serves whenever it is usable; an unknown id or an\n   * exhausted selected account falls back to the first usable slot (automatic\n   * rotation still applies). Unset means \"first usable account\".\n   */\n  activeAccount?: string\n  /**\n   * Model → account routing rules. Each rule lists catalog model ids to an\n   * account slot id (`default`, or an extra account's credential reference).\n   * When a request's model is in a rule's list and the routed account is\n   * usable, that account serves — before the manual {@link activeAccount} and\n   * the passive rotation order. A routed account that is exhausted or invalid\n   * falls back to the normal selection, so the router is a hint, never a hard\n   * gate. The first matching rule wins.\n   */\n  modelAccountRules?: CommandCodeModelAccountRule[]\n  /**\n   * Whether to use Command Code as the backend for dsh's model-facing\n   * `web_search` tool. When enabled, the plugin registers a `commandcode`\n   * search provider on `ctx.web` AND selects `commandcode` in the web seam\n   * (so it wins over the shipped `deepseek-official` or a sibling search\n   * plugin's pin), using the SAME Command Code API key/base as chat. When\n   * disabled, the selection is handed back to whichever backend was there\n   * before — turning it off never forces the factory default, so a sibling\n   * search plugin (e.g. modsearch) keeps working (issue #26). The rewrite\n   * rides dsh's internal `searchProviderId`, which is read per search call,\n   * so a setting change lands on the next search without a restart.\n   * Defaults to true.\n   */\n  webSearch?: boolean\n  /**\n   * Language override for the `/commandcode` Host-side command's user-facing\n   * copy. Host commands cannot read the client's `ctx.locale`, so this is\n   * the explicit knob: `'zh'` or `'en'`. Unset means the command reads\n   * `LC_ALL`/`LANG` from the launching shell, falling back to `'zh'`. The\n   * web settings page is unaffected — it follows the browser's language\n   * preference on its own. Two surfaces, two independent locales. The\n   * declared type is `string` (the schemastery `pattern` cannot narrow\n   * literal types); an unknown value is treated as \"unset\" by\n   * `pickCommandLocale`.\n   */\n  lang?: string\n}\n\nexport const Config: z<Config> = z.object({\n  apiKeyEnv: z.string().role('credential-ref').default(DEFAULT_API_KEY_ENV),\n  // `role('secret')` is load-bearing, not decoration: a literal key is the one\n  // credential path this plugin cannot keep out of a settings document (the\n  // page writes through the credentials seam instead), so the harness must\n  // strip it from every descriptor read (`settings.describe()` runs with\n  // `redactSecrets: true`). Without the role the literal rides back to the\n  // browser verbatim — including on a remote-Host setup, where that is another\n  // machine. Same declaration as the official providers' `apiKey` field.\n  apiKey: z.string().role('secret'),\n  apiBase: z.string(),\n  workingDir: z.string(),\n  modelsCachePath: z.string(),\n  requestTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS),\n  streamIdleTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS),\n  filterModelsByPlan: z.boolean(),\n  visibleModels: z.array(z.string()),\n  /**\n   * Per-model visibility overrides for the terminal settings page's checkbox\n   * list, keyed by catalog id. dsh-TUI addresses a staged edit by its field\n   * PATH, so two checkboxes sharing one path would overwrite each other's\n   * draft and the section's last model would decide every write; a map gives\n   * each checkbox a path of its own. An id listed here wins over\n   * {@link visibleModels}; ids absent here keep following it.\n   */\n  modelVisibility: z.dict(z.boolean()),\n  webSearch: z.boolean().default(true),\n  accounts: z.array(z.object({\n    label: z.string(),\n    apiKeyEnv: z.string().role('credential-ref'),\n    /** Literal key for one extra slot; see the top-level `apiKey` secret note. */\n    apiKey: z.string().role('secret'),\n  })),\n  activeAccount: z.string(),\n  modelAccountRules: z.array(z.object({\n    models: z.array(z.string()),\n    account: z.string(),\n  })),\n  lang: z.string().pattern(/^(zh|en)$/).default('zh' as const),\n})\n\n/** One resolution's complete request facts: connection plus credential reference. */\nexport interface ResolvedCommandCodeOptions extends CommandCodeConnectionOptions {\n  apiKeyEnv: CredentialRef\n}\n\n/**\n * The one explicit resolve step from raw config to validated connection\n * facts. Programmatic construction may bypass Schemastery normalization, so\n * every default is re-judged here — for the composition entry at load and for\n * each settings snapshot at its first use.\n */\nexport function resolveAdapterOptions(config: Config): ResolvedCommandCodeOptions {\n  return {\n    apiKeyEnv: credentialRef(config.apiKeyEnv ?? DEFAULT_API_KEY_ENV),\n    apiBase: config.apiBase ?? DEFAULT_API_BASE,\n    workingDir: config.workingDir ?? process.cwd(),\n    modelsCachePath: config.modelsCachePath ?? DEFAULT_MODELS_CACHE_PATH,\n    requestTimeoutMs: config.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS,\n    streamIdleTimeoutMs: config.streamIdleTimeoutMs ?? DEFAULT_STREAM_IDLE_TIMEOUT_MS,\n    filterModelsByPlan: config.filterModelsByPlan ?? true,\n    visibleModels: Array.isArray(config.visibleModels)\n      ? config.visibleModels.filter((id) => typeof id === 'string' && id !== '')\n      : undefined,\n    // Only real booleans survive: a hand-edited document can carry anything,\n    // and a malformed flag must fall back to the array rather than hide a\n    // model. An all-empty map is the same as no map.\n    modelVisibility: readModelVisibility(config.modelVisibility),\n  }\n}\n\n/**\n * Per-model visibility overrides, cleaned for the adapter. Programmatic\n * construction may bypass Schemastery normalization, so a non-object or a\n * non-boolean entry is dropped here instead of reaching the picker filter.\n * @param raw - The `modelVisibility` value from any config source.\n * @returns A frozen id → boolean map, or undefined when nothing is set.\n */\nfunction readModelVisibility(raw: unknown): Readonly<Record<string, boolean>> | undefined {\n  if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) return undefined\n  const entries = Object.entries(raw).filter(\n    (entry): entry is [string, boolean] => entry[0] !== '' && typeof entry[1] === 'boolean',\n  )\n  return entries.length === 0 ? undefined : Object.fromEntries(entries)\n}\n\nexport function apply(ctx: Context, config: Config): void {\n  installCostProjection(ctx)\n  let current: () => Config = () => config\n  let lastRaw: Config | undefined\n  let lastGood: ResolvedCommandCodeOptions | undefined\n  const options = (): ResolvedCommandCodeOptions => {\n    const raw = current()\n    if (raw === lastRaw && lastGood !== undefined) return lastGood\n    const next = resolveAdapterOptions(raw)\n    lastRaw = raw\n    lastGood = next\n    return next\n  }\n  options()\n\n  // The account slots, rebuilt from the live config on every resolution so\n  // a settings-page accounts change reaches the very next request. The\n  // top-level apiKey/apiKeyEnv (+ the CLI auth file) form the default\n  // account; each config.accounts entry adds one more.\n  const slots = (): CommandCodeAccountSlot[] => {\n    const raw = current()\n    const list: CommandCodeAccountSlot[] = [{\n      id: 'default',\n      label: 'Default',\n      ref: credentialRef(raw.apiKeyEnv ?? DEFAULT_API_KEY_ENV),\n      literal: raw.apiKey,\n      allowAuthFile: true,\n    }]\n    for (const [index, account] of (raw.accounts ?? []).entries()) {\n      const refName = typeof account.apiKeyEnv === 'string' && account.apiKeyEnv.trim() !== ''\n        ? account.apiKeyEnv.trim()\n        : undefined\n      const literal = typeof account.apiKey === 'string' && account.apiKey !== '' ? account.apiKey : undefined\n      if (refName === undefined && literal === undefined) continue\n      list.push({\n        // Slot ids must survive account-list edits: an extra's id is its\n        // credential reference (stable across reorders/removals), falling\n        // back to the positional id only for literal-only composition\n        // entries, which no settings document can name anyway.\n        id: refName ?? `account-${index + 2}`,\n        label: typeof account.label === 'string' && account.label.trim() !== ''\n          ? account.label.trim()\n          : `Account ${index + 2}`,\n        ref: refName === undefined ? undefined : credentialRef(refName),\n        literal,\n        allowAuthFile: false,\n      })\n    }\n    return list\n  }\n\n  // The manually selected account (settings page / config), re-read per\n  // resolution like every other settings-backed fact.\n  const preferredId = (): string | undefined => {\n    const raw = current().activeAccount\n    return typeof raw === 'string' && raw.trim() !== '' ? raw.trim() : undefined\n  }\n\n  const resolveRef = async (ref: ReturnType<typeof credentialRef>): Promise<string | undefined> => {\n    const credentials = ctx.get('credentials')\n    if (credentials !== undefined) {\n      // The credentials seam layers the process environment, the\n      // provider-managed store, and `.env` files itself — a miss here is\n      // genuinely unconfigured, not \"not in the store\".\n      const hit = await credentials.resolve(ref)\n      return hit?.value\n    }\n    const ambient = launchEnvironmentOf(ctx).get(ref)\n    return ambient !== undefined && ambient.value.length > 0 ? ambient.value : undefined\n  }\n\n  // The multi-account pool: passive rotation only — a key is marked when a\n  // request using it is actually rejected (429/401), and the marks are\n  // re-checked against the live window limits only once every account is\n  // marked, so the steady state costs zero extra API calls.\n  // Explicit annotations break the pool↔adapter inference cycle (the pool's\n  // probe calls the adapter; the adapter's rotation hook calls the pool).\n  const pool: CommandCodeAccountPool = new CommandCodeAccountPool({\n    slots,\n    resolveRef,\n    authFileKey: resolveAuthFileApiKey,\n    // The adapter reference is assigned right below; the probe runs only at\n    // request time, never during plugin startup.\n    probeWindow: (apiKey: string) => adapter.probeFiveHourWindow(apiKey),\n    preferredId,\n    // Model → account routing rules, re-read per resolution like every\n    // settings-backed fact.\n    modelAccountRules: (): readonly CommandCodeModelAccountRule[] => current().modelAccountRules ?? [],\n  })\n\n  const resolveApiKey = async (connection: ResolvedCommandCodeOptions, model?: string): Promise<string> => {\n    const resolved = await pool.resolveKey(model === undefined ? {} : { model })\n    if (resolved !== undefined) {\n      return assertUsableApiKey(resolved.key, 'llm-commandcode', resolved.slot.ref ?? `${resolved.slot.label} (config.apiKey)`)\n    }\n    const ref = connection.apiKeyEnv\n    throw new LlmError(\n      `llm-commandcode: no API key for provider route \"${PROVIDER}\"; store ${ref} through the`\n      + ' credentials service (the web Models page writes it), export it in the launching'\n      + ' environment, set config.apiKey, or run `command-code login` to write'\n      + ' ~/.commandcode/auth.json',\n      'MISSING_CREDENTIAL',\n    )\n  }\n\n  const adapter: CommandCodeAdapter<ResolvedCommandCodeOptions> = new CommandCodeAdapter({\n    options,\n    resolveApiKey,\n    // Pre-stream 429/401: mark the rejected key and hand the adapter the next\n    // account's key. When every account is exhausted the pool throws the\n    // RATE_LIMIT/INVALID_CREDENTIAL error that names the earliest reset —\n    // that error, not the raw 429, is what the caller sees.\n    rotateApiKey: async (rejectedKey: string, rejection: 'rate-limit' | 'invalid-credential', _connection: ResolvedCommandCodeOptions, model?: string): Promise<string | undefined> => {\n      pool.markRejected(rejectedKey, rejection)\n      // Exclude the just-rejected key from probe-revival: a probe clearing its\n      // window must not re-offer the same key within this request (the\n      // adapter refuses already-tried keys); the next request picks it up.\n      // The model rides along so model-routing rules pick the next account\n      // for the same model.\n      const resolved = await pool.resolveKey(\n        model === undefined ? { exclude: rejectedKey } : { exclude: rejectedKey, model },\n      )\n      // Normalize like the initial resolution does: the pool keys its state\n      // by the resolved key, so the adapter must send (and report back) the\n      // same normalized form or the marks would miss.\n      return resolved === undefined\n        ? undefined\n        : assertUsableApiKey(resolved.key, 'llm-commandcode', resolved.slot.ref ?? `${resolved.slot.label} (config.apiKey)`)\n    },\n    // The durable attachment service carries image bytes referenced by\n    // ImageBlock; resolved lazily only when a request actually has images.\n    resolveAttachments: () => {\n      const attachments = ctx.get('attachments')\n      return attachments === undefined ? undefined : attachments\n    },\n  })\n  // The Models page card: a configurable provider with a settings address.\n  // settingsPath [] means the whole `llm-commandcode` section configures it.\n  ctx.llm.registerConfigurableProviders([\n    { provider: PROVIDER, displayName: 'Command Code', settingsNs: NS, settingsPath: [] },\n  ])\n  // The live route: this is what makes models requestable under `commandcode`.\n  ctx.llm.registerAdapter([PROVIDER], adapter)\n\n  // Per-account usage for the /commandcode dashboard and the settings\n  // page's account card: every pool account (configured or not) gets one\n  // entry, each fetched with its own key so plan/credit facts never mix.\n  const usageReports = async (): Promise<CommandCodeAccountsReport> => {\n    // describeAccounts (not deduped) so two slots sharing one credential are\n    // both reported as configured; the active badge follows the deduped\n    // serving selection.\n    const described = await pool.describeAccounts()\n    const byId = new Map(described.map((account) => [account.slot.id, account]))\n    const active = selectActiveAccount(await pool.resolvedAccounts(), preferredId())\n    const entries = await Promise.all(slots().map(async (slot) => {\n      const account = byId.get(slot.id)\n      let report: CommandCodeUsageReport\n      if (account === undefined) {\n        report = { failures: [] }\n      } else {\n        try {\n          report = await adapter.getUsage(account.key)\n        } catch (error: unknown) {\n          report = { failures: [error instanceof Error ? error.message : String(error)] }\n        }\n      }\n      const state = account?.state\n      // The mark mirrors servability: a usable account (never marked, or a\n      // cooldown whose reset passed) shows no mark; a cooldown without a\n      // known reset still shows \"rate-limit\" (it is not serving).\n      const usable = accountUsable(state)\n      return {\n        id: slot.id,\n        label: slot.label,\n        configured: account !== undefined,\n        active: account !== undefined && active?.slot.id === slot.id,\n        mark: usable ? '' : state?.kind === 'disabled' ? 'invalid-credential' : 'rate-limit',\n        cooldownUntil: !usable && state?.kind === 'cooldown' ? state.until : 0,\n        report,\n      }\n    }))\n    return { accounts: entries }\n  }\n\n  // The /commandcode usage command rides the optional `commands` service: a\n  // child fiber injects it, so it registers whenever the profile mounts\n  // dsh-commands and the fiber simply never activates when it does not.\n  // The command runs Host-side and has no access to the client's locale\n  // service, so its language is resolved here from `Config.lang` (explicit\n  // override) and the launching shell's `LC_ALL`/`LANG` (inferred default);\n  // resolved per invocation so a settings change reaches the next command\n  // run without a restart.\n  const commandLocale = (): LocaleId => pickCommandLocale(current().lang)\n  ctx.inject(['commands'], (commandCtx) => {\n    applyCommands(commandCtx, { adapter, reports: usageReports, getLocale: commandLocale })\n  })\n\n  // The settings page's account card: getUsage exposed to the browser through\n  // the Typert Gateway (`commandcode/report`). Rides the optional `typert`\n  // registry service, so profiles without the web stack never activate it.\n  // The same service also exposes the browser-login flow: the Host binds a\n  // loopback callback server (the official `command-code login` dance) and\n  // stores the delivered key through the credentials seam under the same\n  // reference the default slot resolves — no restart, no settings document.\n  const loginFlow = new CommandCodeLoginFlow({\n    apiBase: () => options().apiBase,\n    storeKey: async ({ apiKey }: CommandCodeLoginCredentials): Promise<void> => {\n      const ref = credentialRef(current().apiKeyEnv ?? DEFAULT_API_KEY_ENV)\n      const credentials = ctx.get('credentials')\n      if (credentials === undefined) {\n        throw new Error('the credentials service is unavailable in this profile; paste the key manually')\n      }\n      await credentials.set(ref, apiKey)\n    },\n  })\n  ctx.effect(() => () => loginFlow.dispose(), 'dsh-commandcode-provider: login flow')\n  // The full model catalog for the settings page's model editors (the\n  // routing-rule editor and the visible-models filter): served Host-side\n  // from the adapter's cached/fetched catalog (sorted for picking), so the\n  // browser never calls the Command Code API directly. Unfiltered, so an\n  // editor never loses its own options — e.g. a rule can route a GOAT-only\n  // model while the picker (plan-filtered + allowlisted) hides it. Each\n  // entry carries its plan-tier key so the editors can group under tier\n  // headings without importing the Host's capability snapshot.\n  const catalogForEditors = async (): Promise<CommandCodeCatalog> => {\n    const models = await adapter.listModels(PROVIDER, { unfiltered: true })\n    return {\n      models: models.map((model) => {\n        const tier = KNOWN_PLANS[model.id]\n        return {\n          id: model.id,\n          name: model.name.replace(/\\s*\\(CC\\)$/, ''),\n          ...(tier === undefined ? {} : { tier }),\n        }\n      }),\n    }\n  }\n  applyUsageRemote(ctx, { adapter, reports: usageReports, login: loginFlow, listModels: catalogForEditors })\n\n  // Web search over the Command Code Provider API, exposed through the web\n  // capability seam (`ctx.web`). Rides the optional `web` service: a child\n  // fiber injects it, so the provider registers whenever the profile mounts\n  // the web stack and the fiber never activates when it does not (profiles\n  // without web remain an LLM-provider-only plugin). It reuses the SAME\n  // credential chain as the model adapter (pool.resolveKey → env → auth file)\n  // and the same apiBase, so DSH's model-facing web_search tool needs no\n  // separate key or endpoint config — a Command Code key works as-is.\n  //\n  // Whether the `commandcode` provider WINS over the shipped `deepseek-official`\n  // (or a sibling search plugin's pin, e.g. modsearch) is controlled by\n  // `Config.webSearch` (default on). The web seam has no public runtime\n  // selector, so the plugin writes its private `searchProviderId` field (read\n  // per call) via `applyCommandCodeSearchSelection`. A settings change lands\n  // on the next search without a restart. See src/web-search.ts for why this\n  // runtime write is safe and what it depends on.\n  //\n  // The tracked selection remembers whichever backend was displaced, so\n  // turning the toggle off hands the selection back to it (issue #26) — the\n  // disable path never forces the factory default. Disposing the fiber (the\n  // plugin unloads) restores it the same way: without that, the stale\n  // `commandcode` pin would outlive its unregistered provider and every\n  // search would fail with WEB_PROVIDER_CONFIGURED_MISSING.\n  const searchSelection = commandCodeSearchSelection()\n  const applySearchSelection = (enabled: boolean): void => {\n    if (webRuntime !== undefined) {\n      applyCommandCodeSearchSelection(webRuntime, searchSelection, enabled)\n    }\n  }\n  let webRuntime: WebRuntime | undefined\n  ctx.inject(['web'], (webCtx) => {\n    webRuntime = webCtx.web\n    webCtx.web.registerSearchProvider(new CommandCodeSearchProvider({\n      resolveKey: async () => {\n        const resolved = await pool.resolveKey()\n        return resolved === undefined ? undefined : resolved.key\n      },\n      apiBase: () => options().apiBase,\n    }))\n    // Apply the selection at boot too, so a profile WITHOUT the manual\n    // `searchProvider: commandcode` cordis patch still routes web search to\n    // Command Code once this plugin loads (default `webSearch` on).\n    applySearchSelection(current().webSearch ?? true)\n    // The fiber's disposer restores the displaced backend the same way the\n    // toggle-off path does (`webCtx.effect` registers the inner function as\n    // the fiber's teardown; a bare `return` from the inject callback would\n    // not). Without this, the stale `commandcode` pin would outlive its\n    // unregistered provider and every search would fail with\n    // WEB_PROVIDER_CONFIGURED_MISSING.\n    webCtx.effect(() => () => {\n      webRuntime = undefined\n      applyCommandCodeSearchSelection(webCtx.web, searchSelection, false)\n    }, 'dsh-commandcode-provider: web search selection')\n  })\n\n  // The terminal front door (dsh-TUI) settings page. dsh-TUI owns its own\n  // settings screen and only asks plugins to DECLARE what is editable, so\n  // without this a TUI-only user has no way to enter the API key — the web\n  // Models page is the only other surface that writes it, and dsh-TUI's\n  // `/provider` wizard manages its own `llm-pi-ai` routes exclusively\n  // (issue #28). The seam is an optional service, exactly like `commands`\n  // and `web`: on a profile without dsh-TUI the fiber never activates, and\n  // the plugin stays a plain LLM-provider bundle. The API-key field is a\n  // secret field, so the literal goes to the credentials seam and never into\n  // a settings document.\n  let refreshTuiSettings: (() => void) | undefined\n  ctx.inject(['tuiSettingsSections'], (tuiCtx) => {\n    refreshTuiSettings = applyCommandCodeTuiSettings(tuiCtx, {\n      ns: NS,\n      // Read per registration, so a `Config.apiKeyEnv` change re-targets the\n      // key field instead of leaving it writing to the previous reference.\n      apiKeyRef: () => current().apiKeyEnv ?? DEFAULT_API_KEY_ENV,\n      // The account slots behind the active-account selector. The section is\n      // re-registered when this list changes (the refresh call below), since\n      // the host renders a fixed option list per declaration.\n      accountSlots: () => slots().map((slot) => ({ id: slot.id, label: slot.label })),\n      // The model allowlist is read LIVE on every toggle: a checkbox judges\n      // its inherited state against the current document, not against\n      // whatever the declaration happened to be registered with. The override\n      // map is read here too, so an id this build's catalog does not place\n      // still gets a row of its own.\n      visibleModels: () => options().visibleModels ?? [],\n      modelVisibility: () => options().modelVisibility,\n    })\n    tuiCtx.effect(() => () => {\n      refreshTuiSettings = undefined\n    }, 'dsh-commandcode-provider: tui settings handle')\n  })\n\n  // Settings became an optional service in dsh 0.1.2. Register the section\n  // through its provider when present; profiles without settings continue to\n  // use the composition entry captured by `current` above.\n  ctx.inject(['settings'], (settingsCtx) => {\n    settingsCtx.settings.installSection(ctx, NS, Config, config, {\n      setSource: (source) => {\n        current = source\n      },\n      // Re-apply the web search selection on every settings change so the\n      // `webSearch` toggle reaches the web seam's next search without a\n      // restart. The tracked state remembers the displaced backend (issue\n      // #26), so flipping the toggle is a handoff, not an overwrite. The\n      // adapter's own facts are resolved per request, so nothing else needs\n      // registration-level action here.\n      //\n      // The dsh-TUI section is refreshed from the same hook: its key field\n      // follows `apiKeyEnv` and its account selector follows `accounts`, and\n      // both are frozen into the declaration the host renders. The refresh is\n      // a no-op unless one of those facts actually moved, so ordinary writes\n      // (the key itself, the model filters) never churn the screen.\n      onChange: () => {\n        applySearchSelection(current().webSearch ?? true)\n        refreshTuiSettings?.()\n      },\n    })\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAa,gBAA6D;CAiCxE,oBAAoB;EAAC;EAAO;EAAU;CAAO;CAC7C,yBAAyB;EAAC;EAAO;EAAU;CAAO;CAClD,oBAAoB;EAAC;EAAO;EAAU;CAAO;CAC7C,sBAAsB;EAAC;EAAO;EAAU;CAAO;CAC/C,oBAAoB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC5D,kBAAkB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC1D,mBAAmB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC3D,mBAAmB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC3D,iBAAiB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CACzD,qBAAqB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC7D,mBAAmB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAI3D,mCAAmC;EAAC;EAAO;EAAQ;CAAK;CAIxD,gCAAgC;EAAC;EAAO;EAAQ;CAAK;CACrD,8BAA8B,CAAC,QAAQ,KAAK;CAC5C,yCAAyC,CAAC,QAAQ,KAAK;CACvD,4BAA4B,CAAC,QAAQ,KAAK;CAC1C,gCAAgC;EAAC;EAAO;EAAU;CAAM;CACxD,2BAA2B;EAAC;EAAO;EAAU;CAAM;CACnD,gCAAgC;EAAC;EAAO;EAAU;CAAM;CACxD,2BAA2B;EAAC;EAAO;EAAU;CAAM;CACnD,2BAA2B;EAAC;EAAO;EAAU;CAAM;CACnD,iBAAiB;EAAC;EAAO;EAAU;EAAQ;CAAO;CAClD,WAAW;EAAC;EAAO;EAAU;EAAQ;CAAO;CAC5C,gBAAgB;EAAC;EAAO;EAAU;CAAM;CACxC,WAAW;EAAC;EAAO;EAAU;EAAQ;CAAO;CAC5C,gBAAgB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CACxD,eAAe;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CACvD,iBAAiB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAIzD,sBAAsB;EAAC;EAAO;EAAQ;CAAK;CAG3C,2BAA2B;EAAC;EAAO;EAAU;CAAM;CACnD,qBAAqB,CAAC,QAAQ,OAAO;CACrC,uBAAuB;EAAC;EAAO;EAAU;CAAM;CAC/C,gBAAgB;EAAC;EAAO;EAAU;CAAM;CACxC,gBAAgB;EAAC;EAAO;EAAU;EAAQ;CAAO;CACjD,sBAAsB;EAAC;EAAO;EAAQ;CAAK;CAC3C,mBAAmB,CAAC,QAAQ,KAAK;CACjC,mBAAmB;EAAC;EAAO;EAAQ;CAAK;CAIxC,uBAAuB;EAAC;EAAO;EAAU;EAAQ;CAAO;CACxD,uBAAuB;EAAC;EAAO;EAAU;EAAQ;CAAO;CACxD,mCAAmC;EAAC;EAAO;EAAU;EAAQ;CAAO;CAGpE,uBAAuB;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CAC/D,mCAAmC;EAAC;EAAO;EAAU;EAAQ;CAAO;CAEpE,eAAe;EAAC;EAAO;EAAU;EAAQ;EAAS;CAAK;CASvD,wBAAwB;EAAC;EAAO;EAAU;CAAM;AAClD;;;;;;;;;;;;;;;;AAiBA,MAAa,qCAA0C,IAAI,IAAI;CAC7D;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CACA;CACA;AACF,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCD,MAAa,wCAA6C,IAAI,IAAI;CAChE;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CAGA;AACF,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BD,MAAa,cAAgD;CAE3D,0BAA0B;CAC1B,0BAA0B;CAC1B,wBAAwB;CACxB,4BAA4B;CAC5B,qBAAqB;CACrB,sBAAsB;CACtB,oBAAoB;CACpB,qBAAqB;CACrB,oBAAoB;CACpB,sBAAsB;CACtB,oBAAoB;CAEpB,yBAAyB;CAGzB,mCAAmC;CAKnC,gCAAgC;CAChC,8BAA8B;CAC9B,yCAAyC;CACzC,4BAA4B;CAC5B,gBAAgB;CAGhB,4BAA4B;CAI5B,yCAAyC;CAGzC,mCAAmC;CACnC,mCAAmC;CAEnC,wBAAwB;CACxB,wBAAwB;CACxB,6BAA6B;CAC7B,uCAAuC;CACvC,sBAAsB;CACtB,qCAAqC;CACrC,8BAA8B;CAC9B,0BAA0B;CAC1B,0BAA0B;CAC1B,oBAAoB;CACpB,uBAAuB;CACvB,4BAA4B;CAC5B,kCAAkC;CAClC,gBAAgB;CAChB,oBAAoB;CACpB,wBAAwB;CACxB,sBAAsB;CACtB,iBAAiB;CACjB,mBAAmB;CACnB,mBAAmB;CACnB,wBAAwB;CACxB,mBAAmB;CAEnB,2BAA2B;CAG3B,2BAA2B;CAC3B,eAAe;CACf,uBAAuB;CAGvB,uBAAuB;CACvB,gBAAgB;CAEhB,6BAA6B;CAC7B,qBAAqB;CACrB,mBAAmB;CACnB,gCAAgC;CAChC,2BAA2B;CAC3B,gCAAgC;CAChC,2BAA2B;CAC3B,iBAAiB;CACjB,WAAW;CACX,gBAAgB;CAChB,WAAW;CACX,iBAAiB;CACjB,uBAAuB;CAEvB,oBAAoB;CACpB,kBAAkB;CAClB,mBAAmB;CACnB,mBAAmB;CACnB,iBAAiB;CAGjB,eAAe;CACf,qBAAqB;AACvB;;AAGA,MAAa,cAAgD;CAC3D,IAAI;CACJ,MAAM;CACN,KAAK;CACL,UAAU;CACV,KAAK;AACP;;;;;AAMA,MAAa,aAA+C;CAC1D,IAAI;CACJ,MAAM;CACN,KAAK;CACL,UAAU;CACV,KAAK;AACP;;;;;;;AAQA,SAAgB,YAAY,SAA0B;CACpD,OAAO,YAAY,QAAQ,EAAE,SAAS;AACxC;;;;;;AAOA,SAAgB,cACd,GACA,GACQ;CACR,MAAM,YAAY,OAAO,YAAY,EAAE,EAAE,CAAC,IAAI,OAAO,YAAY,EAAE,EAAE,CAAC;CACtE,IAAI,cAAc,GAAG,OAAO;CAC5B,MAAM,KAAK,WAAW,YAAY,EAAE,OAAO,OAAO,OAAO;CACzD,MAAM,KAAK,WAAW,YAAY,EAAE,OAAO,OAAO,OAAO;CACzD,IAAI,OAAO,IAAI,OAAO,KAAK;CAC3B,MAAM,WAAW,EAAE,KAAK,cAAc,EAAE,IAAI;CAC5C,IAAI,aAAa,GAAG,OAAO;CAC3B,OAAO,EAAE,GAAG,cAAc,EAAE,EAAE;AAChC;;;;;;;;;;;;;AAcA,MAAa,2BAAmH;CAC9H,iBAAiB;EAAE,MAAM;EAAM,gBAAgB;EAAI,YAAY;CAAE;CACjE,mBAAmB;EAAE,MAAM;EAAQ,gBAAgB;EAAI,YAAY;CAAE;CACrE,kBAAkB;EAAE,MAAM;EAAO,gBAAgB;EAAI,YAAY;CAAE;CACnE,qBAAqB;EAAE,MAAM;EAAO,gBAAgB;EAAI,YAAY;CAAE;CACtE,uBAAuB;EAAE,MAAM;EAAY,gBAAgB;EAAI,YAAY;CAAE;CAC7E,kBAAkB;EAAE,MAAM;EAAO,gBAAgB;EAAK,YAAY;CAAE;CACpE,oBAAoB;EAAE,MAAM;EAAS,gBAAgB;EAAK,YAAY;CAAE;CACxE,aAAa;EAAE,MAAM;EAAa,gBAAgB;EAAI,YAAY;CAAE;AACtE;;AAGA,MAAM,6BAA6B,OAAO,KAAK,wBAAwB,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM;;;;;;;;AAS3G,SAAgB,qBAAqB,QAA0F;CAC7H,MAAM,aAAa,OAAO,YAAY,CAAC,CAAC,QAAQ,MAAM,GAAG;CACzD,MAAM,SAAS,2BAA2B,MAAM,cAAc,WAAW,WAAW,SAAS,CAAC;CAC9F,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY,yBAAyB;AACrE;;;;;;;;AAyBA,SAAgB,mBAAmB,SAAiB,QAAuD;CACzG,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,OAAO,kBAAkB,GAAG,OAAO;CACvC,IAAI,OAAO,eAAe,KAAA,KAAa,CAAC,OAAO,SAAS,OAAO,UAAU,GAAG,OAAO;CACnF,MAAM,OAAO,YAAY;CACzB,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,MAAM,SAAS,WAAW;CAC1B,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,OAAO,UAAU,OAAO;AAC1B;AA2BA,MAAa,cAAmD;CAI9D,wBAAwB,EAAE,OAAO,UAAU;CAC3C,wBAAwB,EAAE,OAAO,UAAU;CAC3C,oBAAoB,EAAE,OAAO,UAAU;CAOvC,8BAA8B;EAAE,OAAO;EAAQ,MAAM;CAAK;CAK1D,4BAA4B;EAAE,OAAO;EAAQ,MAAM;CAAK;CAIxD,yCAAyC;EAAE,OAAO;EAAQ,MAAM;CAAK;AACvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,MAAa,qCAA0C,IAAI,IAAI;CAC7D;CACA;CACA;CAIA;AACF,CAAC;;;;;;;;;;AAWD,MAAa,mBAA6D,CACxE,CAAC,GAAG,CAAC,GACL,CAAC,GAAG,EAAE,CACR;;;;;;;;;;;AAYA,SAAgB,kBAAkB,MAAc,KAAK,IAAI,GAAY;CACnE,MAAM,KAAK,IAAI,KAAK,GAAG;CACvB,MAAM,MAAM,GAAG,UAAU;CACzB,IAAI,QAAQ,KAAK,QAAQ,GAAG,OAAO;CACnC,MAAM,OAAO,GAAG,YAAY;CAC5B,OAAO,iBAAiB,MAAM,CAAC,OAAO,SAAS,QAAQ,SAAS,OAAO,GAAG;AAC5E;;;;;;;;AASA,SAAgB,iBACd,SACA,MAAc,KAAK,IAAI,GACU;CACjC,IAAI,CAAC,mBAAmB,IAAI,OAAO,GAAG,OAAO,KAAA;CAC7C,OAAO,kBAAkB,GAAG,IAAI,SAAS;AAC3C;;;;;;;;AASA,SAAgB,iBACd,SACA,MAAc,KAAK,IAAI,GACH;CACpB,MAAM,QAAQ,iBAAiB,SAAS,GAAG;CAC3C,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,OAAO,UAAU,SAAS,SAAS;AACrC;;;;;AAUA,SAAgB,UAAU,SAAqC;CAC7D,MAAM,OAAO,YAAY;CACzB,OAAO,SAAS,KAAA,IAAY,KAAA,IAAY,YAAY;AACtD;;;;;;;;AASA,SAAgB,UAAU,SAAiB,MAAc,KAAK,IAAI,GAAuB;CACvF,MAAM,OAAO,YAAY;CACzB,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;CAC/B,IAAI,KAAK,cAAc,KAAA,KAAa,OAAO,KAAK,MAAM,KAAK,SAAS,GAAG,OAAO,KAAA;CAC9E,OAAO,KAAK;AACd;;;;;;AAOA,SAAgB,cAAc,eAAuD;CACnF,IAAI,kBAAkB,KAAA,KAAa,CAAC,OAAO,SAAS,aAAa,KAAK,iBAAiB,GACrF;CAEF,IAAI,iBAAiB,KAAW;EAC9B,MAAM,IAAI,gBAAgB;EAG1B,MAAM,UAAU,KAAK,MAAM,IAAI,EAAE,IAAI;EACrC,OAAO,GAAG,OAAO,UAAU,OAAO,IAAI,UAAU,QAAQ,QAAQ,CAAC,EAAE;CACrE;CACA,IAAI,gBAAgB,KAAO,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC;CAClE,OAAO,GAAG,KAAK,MAAM,gBAAgB,GAAK,EAAE;AAC9C;;;;;;;;AASA,SAAgB,sBACd,SACA,eACA,MAAc,KAAK,IAAI,GACf;CACR,MAAM,QAAkB,CAAC;CACzB,MAAM,OAAO,UAAU,OAAO;CAC9B,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,MAAM,OAAO,UAAU,SAAS,GAAG;CACnC,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,MAAM,OAAO,iBAAiB,SAAS,GAAG;CAC1C,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,IAAI,mBAAmB,IAAI,OAAO,GAAG,MAAM,KAAK,OAAO;CACvD,MAAM,MAAM,cAAc,aAAa;CACvC,IAAI,QAAQ,KAAA,GAAW,MAAM,KAAK,GAAG;CACrC,OAAO,MAAM,KAAK,KAAK;AACzB;;;;;;;;;;;;;;;AC9pBA,MAAM,mBAA6C;CACjD;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAI;GAAI;GAAG;EAAI;CAAE;CACjD;EAAE,IAAI;EAAoB,OAAO;GAAC;GAAI;GAAI;GAAM;EAAI;CAAE;CACtD;EAAE,IAAI;EAAoB,OAAO;GAAC;GAAG;GAAG;GAAK;EAAI;CAAE;CACnD;EAAE,IAAI;EAAmB,OAAO;GAAC;GAAG;GAAI;GAAK;EAAI;CAAE;CACnD;EAAE,IAAI;EAAmB,OAAO;GAAC;GAAG;GAAI;GAAK;EAAI;CAAE;CACnD;EAAE,IAAI;EAAmB,OAAO;GAAC;GAAG;GAAI;GAAK;EAAI;CAAE;CACnD;EAAE,IAAI;EAAiB,OAAO;GAAC;GAAG;GAAI;GAAK;EAAI;CAAE;CACjD;EAAE,IAAI;EAAqB,OAAO;GAAC;GAAG;GAAI;GAAK;EAAI;CAAE;CACrD;EAAE,IAAI;EAAmB,OAAO;GAAC;GAAG;GAAI;GAAK;EAAG;CAAE;CAClD;EAAE,IAAI;EAAqB,OAAO;GAAC;GAAM;GAAK;EAAK;EAAG,MAAM;GAAC;GAAK;GAAK;EAAK;CAAE;CAC9E;EAAE,IAAI;EAA0B,OAAO;GAAC;GAAM;GAAM;EAAI;CAAE;CAC1D;EAAE,IAAI;EAAgC,OAAO;GAAC;GAAM;GAAK;EAAK;EAAG,MAAM;GAAC;GAAK;GAAK;EAAK;CAAE;CACzF;EAAE,IAAI;EAAmB,OAAO;GAAC;GAAM;GAAM;EAAK;EAAG,MAAM;GAAC;GAAM;GAAM;EAAK;CAAE;CAC/E;EAAE,IAAI;EAAuB,OAAO;GAAC;GAAM;GAAK;EAAK;EAAG,MAAM;GAAC;GAAK;GAAK;EAAK;CAAE;CAChF;EAAE,IAAI;EAAc,OAAO;GAAC;GAAG;GAAI;EAAG;CAAE;CACxC;EAAE,IAAI;EAAyB,OAAO;GAAC;GAAM;GAAK;EAAI;CAAE;CACxD;EAAE,IAAI;EAAoB,OAAO;GAAC;GAAK;GAAG;EAAI;CAAE;CAChD;EAAE,IAAI;EAAyB,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CACvD;EAAE,IAAI;EAAoB,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CAClD;EAAE,IAAI;EAAoB,OAAO;GAAC;GAAK;GAAK;GAAM;EAAO;CAAE;CAC3D;EAAE,IAAI;EAAoB,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CAClD;EAAE,IAAI;EAAS,OAAO;GAAC;GAAG;GAAK;EAAG;CAAE;CACpC;EAAE,IAAI;EAAW,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CACzC;EAAE,IAAI;EAAW,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CACzC;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAG;GAAO;EAAG;CAAE;CAC7C;EAAE,IAAI;EAAW,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CACzC;EAAE,IAAI;EAAiB,OAAO;GAAC;GAAM;GAAK;EAAI;CAAE;CAChD;EAAE,IAAI;EAAiB,OAAO;GAAC;GAAG;GAAG;GAAK;EAAC;CAAE;CAC7C;EAAE,IAAI;EAAW,OAAO;GAAC;GAAK;GAAI;GAAM;EAAC;CAAE;CAC3C;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAM;GAAK;GAAO;EAAC;CAAE;CACnD;EAAE,IAAI;EAAW,OAAO;GAAC;GAAG;GAAI;GAAK;EAAC;CAAE;CACxC;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAK;GAAK;GAAM;EAAI;EAAG,cAAc,CAAC;GAAC,cAAa;GAAO,SAAQ;IAAC;IAAI;IAAI;IAAK;GAAI;EAAC,GAAE,EAAC,SAAQ;GAAC;GAAI;GAAI;GAAK;EAAG,EAAC,CAAC;CAAE;CACpJ;EAAE,IAAI;EAAe,OAAO;GAAC;GAAG;GAAI;GAAK;EAAI;EAAG,cAAc,CAAC;GAAC,cAAa;GAAO,SAAQ;IAAC;IAAE;IAAG;IAAI;GAAI;EAAC,GAAE,EAAC,SAAQ;GAAC;GAAG;GAAG;GAAE;EAAI,EAAC,CAAC;CAAE;CACvI;EAAE,IAAI;EAAiB,OAAO;GAAC;GAAG;GAAI;GAAK;EAAG;EAAG,cAAc,CAAC;GAAC,cAAa;GAAO,SAAQ;IAAC;IAAE;IAAG;IAAI;GAAG;EAAC,GAAE,EAAC,SAAQ;GAAC;GAAE;GAAG;GAAI;EAAC,EAAC,CAAC;CAAE;CACrI;EAAE,IAAI;EAAe,OAAO;GAAC;GAAI;GAAI;GAAG;EAAI;EAAG,cAAc,CAAC;GAAC,cAAa;GAAO,SAAQ;IAAC;IAAG;IAAG;IAAE;GAAI;EAAC,GAAE,EAAC,SAAQ;GAAC;GAAG;GAAG;GAAE;EAAE,EAAC,CAAC;CAAE;CACnI;EAAE,IAAI;EAAY,OAAO;GAAC;GAAG;GAAG;EAAG;CAAE;CACrC;EAAE,IAAI;EAAY,OAAO;GAAC;GAAG;GAAG;EAAG;EAAG,cAAc,CAAC;GAAC,cAAa;GAAO,SAAQ;IAAC;IAAE;IAAE;GAAG;EAAC,GAAE,EAAC,SAAQ;GAAC;GAAE;GAAG;EAAC,EAAC,CAAC;CAAE;CACjH;EAAE,IAAI;EAAW,OAAO;GAAC;GAAG;GAAM;EAAI;CAAE;CACxC;EAAE,IAAI;EAAiB,OAAO;GAAC;GAAK;GAAK;EAAG;CAAE;CAC9C;EAAE,IAAI;EAAa,OAAO;GAAC;GAAK;GAAG;EAAG;CAAE;CACxC;EAAE,IAAI;EAAa,OAAO;GAAC;GAAM;GAAG;EAAI;CAAE;CAC1C;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAM;GAAG;EAAI;CAAE;CAC/C;EAAE,IAAI;EAA4B,OAAO;GAAC;GAAK;GAAG;EAAI;CAAE;CACxD;EAAE,IAAI;EAAW,OAAO;GAAC;GAAG;GAAI;EAAG;CAAE;CACrC;EAAE,IAAI;EAAa,OAAO;GAAC;GAAM;GAAM;EAAM;CAAE;CAC/C;EAAE,IAAI;EAAiB,OAAO;GAAC;GAAO;GAAM;EAAM;CAAE;CACpD;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CAC9C;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CAC9C;EAAE,IAAI;EAAc,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CAC5C;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAM;GAAM;EAAI;CAAE;CAClD;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAM;GAAM;EAAI;CAAE;CAClD;EAAE,IAAI;EAA8B,OAAO;GAAC;GAAK;GAAK;EAAK;CAAE;CAC7D;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAM;GAAM;EAAI;CAAE;CAClD;EAAE,IAAI;EAA8B,OAAO;GAAC;GAAK;GAAK;EAAK;CAAE;CAC7D;EAAE,IAAI;EAAoB,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CAClD;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAK;GAAK;GAAM;EAAI;CAAE;CACpD;EAAE,IAAI;EAAiB,OAAO;GAAC;GAAK;GAAG;EAAG;EAAG,cAAc,CAAC;GAAC,cAAa;GAAO,SAAQ;IAAC;IAAI;IAAE;GAAG;EAAC,GAAE,EAAC,SAAQ;GAAC;GAAE;GAAE;EAAG,EAAC,CAAC;CAAE;CAC3H;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAM;GAAM;GAAO;EAAK;EAAG,cAAc;GAAC;IAAC,cAAa;IAAM,SAAQ;KAAC;KAAK;KAAK;KAAM;IAAK;GAAC;GAAE;IAAC,cAAa;IAAO,SAAQ;KAAC;KAAI;KAAI;KAAK;IAAK;GAAC;GAAE,EAAC,SAAQ;IAAC;IAAI;IAAI;IAAK;GAAI,EAAC;EAAC;CAAE;CACjN;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAK;GAAK;GAAK;EAAI;CAAE;CACnD;EAAE,IAAI;EAAiB,OAAO;GAAC;GAAK;GAAK;GAAM;EAAG;EAAG,cAAc,CAAC;GAAC,cAAa;GAAO,SAAQ;IAAC;IAAI;IAAI;IAAK;GAAG;EAAC,GAAE,EAAC,SAAQ;GAAC;GAAI;GAAI;GAAK;EAAG,EAAC,CAAC;CAAE;CACnJ;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAK;GAAG;EAAI;CAAE;CAC5C;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAM;GAAM;EAAK;CAAE;CACnD;EAAE,IAAI;EAAgB,OAAO;GAAC;GAAG;GAAG;GAAM;EAAG;CAAE;CAC/C;EAAE,IAAI;EAAqB,OAAO;GAAC;GAAG;GAAG;EAAI;CAAE;CAC/C;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAK;GAAK;EAAI;CAAE;CAChD;EAAE,IAAI;EAAkB,OAAO;GAAC;GAAK;GAAM;EAAI;CAAE;CACjD;EAAE,IAAI;EAAoB,OAAO;GAAC;GAAM;GAAM;EAAK;CAAE;CACrD;EAAE,IAAI;EAAuB,OAAO;GAAC;GAAO;GAAO;EAAK;CAAE;AAC5D;;;;;;;AAQA,MAAM,uBAAyD,EAE7D,qCAAqC,mBACvC;;;;;;;;;;;AAYA,SAAS,oBAAoB,SAA2B;CACtD,MAAM,QAAQ,QAAQ,YAAY;CAClC,MAAM,OAAO,MAAM,SAAS,GAAG,IAAI,MAAM,MAAM,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI;CACzE,MAAM,sBAAM,IAAI,IAAY;CAC5B,MAAM,OAAO,SAAuB;EAClC,MAAM,aAAa,KAAK,QAAQ,iBAAiB,OAAO;EACxD,IAAI,IAAI,IAAI;EACZ,IAAI,IAAI,UAAU;EAClB,IAAI,IAAI,KAAK,QAAQ,WAAW,EAAE,CAAC;EACnC,IAAI,IAAI,KAAK,QAAQ,sBAAsB,EAAE,CAAC;EAC9C,IAAI,IAAI,WAAW,QAAQ,WAAW,EAAE,CAAC;EACzC,IAAI,IAAI,WAAW,QAAQ,sBAAsB,EAAE,CAAC;CACtD;CACA,IAAI,KAAK;CACT,IAAI,IAAI;CACR,OAAO,CAAC,GAAG,GAAG;AAChB;;AAGA,SAAS,aAAa,SAAiB,OAAgD;CACrF,MAAM,WAAW,qBAAqB;CACtC,IAAI,aAAa,KAAA,GAAW,OAAO,MAAM,IAAI,QAAQ,IAAI,WAAW,KAAA;CACpE,OAAO,oBAAoB,OAAO,CAAC,CAAC,MAAM,SAAS,MAAM,IAAI,IAAI,CAAC;AACpE;;AAGA,SAAS,QAAQ,QAAkD;CAIjE,MAAM,QAA+B;EACnC,WAAW,OAAO;EAClB,YAAY,OAAO;EACnB,eAAe,OAAO;CACxB;CACA,IAAI,OAAO,OAAO,KAAA,GAAW,MAAM,iBAAiB,OAAO;CAC3D,OAAO;AACT;;AAGA,SAAS,QAAQ,IAAY,MAAc,KAA2C;CACpF,MAAM,QAA+B;EAAE;EAAI;EAAM,GAAG,QAAQ,IAAI,KAAK;CAAE;CACvE,IAAI,IAAI,SAAS,KAAA,GAAW,MAAM,OAAO,QAAQ,IAAI,IAAI;CACzD,IAAI,IAAI,iBAAiB,KAAA,GAAW,MAAM,eAAe,IAAI,aAAa,KAAI,UAAS;EACrF,GAAG,QAAQ,KAAK,KAAK;EAAG,GAAI,KAAK,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,KAAK,WAAW;CACjG,EAAE;CACF,OAAO;AACT;;;;;;;;;;;;;;;AAgBA,SAAgB,kBAAyC;CACvD,MAAM,SAAS,IAAI,IAAI,iBAAiB,KAAK,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;CACnE,MAAM,QAAQ,IAAI,IAAI,OAAO,KAAK,CAAC;CACnC,MAAM,SAAkC,CAAC;CACzC,MAAM,0BAAU,IAAI,IAAY;CAEhC,KAAK,MAAM,aAAa,OAAO,KAAK,WAAW,GAAG;EAChD,IAAI,YAAY,SAAS,KAAK,UAAU,SAAS,OAAO,GAAG;GACzD,OAAO,KAAK;IAAE,IAAI;IAAW,MAAM;IAAW,WAAW;IAAG,YAAY;IAAG,eAAe;IAAG,MAAM;GAAK,CAAC;GACzG;EACF;EACA,MAAM,OAAO,aAAa,WAAW,KAAK;EAC1C,IAAI,SAAS,KAAA,GAAW;EACxB,MAAM,MAAM,OAAO,IAAI,IAAI;EAC3B,IAAI,QAAQ,KAAA,GAAW;EACvB,QAAQ,IAAI,IAAI;EAChB,OAAO,KAAK,QAAQ,WAAW,MAAM,GAAG,CAAC;CAC3C;CAEA,KAAK,MAAM,OAAO,kBAAkB;EAClC,IAAI,QAAQ,IAAI,IAAI,EAAE,GAAG;EACzB,OAAO,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC;CAC1C;CAEA,OAAO;EACL;EACA,WAAW,iBAAiB,KAAK,CAAC,OAAO,SAAS,CAAC,OAAO,GAAG,CAAqB;CACpF;AACF;;;AC1OA,MAAa,wBAAoC;CAAE,qBAAqB;CAAG,cAAc;CAAG,iBAAiB;CAAG,kBAAkB;AAAE;AACpI,MAAa,kBAAkB;CAAC;CAAuB;CAAgB;CAAmB;AAAkB;AAE5G,SAAgB,SAAS,IAAY,SAA4D;CAC/F,MAAM,OAAO,IAAI,KAAK,EAAE;CACxB,OAAO,KAAK,UAAU,MAAM,KAAK,KAAK,UAAU,MAAM,KACjD,QAAQ,MAAM,CAAC,OAAO,SAAS,KAAK,YAAY,KAAK,SAAS,KAAK,YAAY,IAAI,GAAG;AAC7F;;;;;;;;;;AAWA,SAAgB,aAAa,OAA8B,IAAmB,eAAuB,OAAqD;CAMxJ,MAAM,OAAO,MAAM,cAAc,MAAK,SAAQ,KAAK,eAAe,KAAA,KAAa,iBAAiB,KAAK,UAAU;CAC/G,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,OAAO,MAAM,SAAS,KAAA,KAAa,OAAO,QAAQ,SAAS,IAAI,MAAM,SAAS,IAAI,MAAM,OAAO;AACjG;;AAGA,SAAgB,WAAW,OAAsC;CAC/D,MAAM,SAAS,MAA6B;EAAC,EAAE;EAAW,EAAE;EAAY,EAAE;EAAe,EAAE,kBAAkB;CAAI;CACjH,MAAM,YAAY,KAAK,UAAU;EAAC;EAAsB,MAAM;EAAW,MAAM,OAAO,KAAI,MAAK;GAAC,EAAE;GAAI,EAAE;GAAM,EAAE,SAAS;GAAM,MAAM,CAAC;GAAG,EAAE,OAAO,MAAM,EAAE,IAAI,IAAI;GAAM,EAAE,cAAc,KAAI,MAAK,CAAC,EAAE,cAAc,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK;EAAI,CAAC;CAAC,CAAC;CAC7O,IAAI,OAAO;CACX,KAAK,MAAM,KAAK,WAAW,OAAO,KAAK,KAAK,OAAO,EAAE,WAAW,CAAC,GAAG,QAAQ,MAAM;CAClF,OAAO;AACT;;AAGA,SAAgB,aAAa,OAAuB,OAAsC;CACxF,MAAM,QAAQ,MAAM,OAAO,MAAK,MAAK,EAAE,OAAO,MAAM,SAAS,EAAE,SAAS,MAAM,KAAK;CACnF,OAAO,KAAK,UAAU;EAAC,MAAM;EAAU,MAAM;EAAO,UAAU,KAAA,IAAY,OAAO,aAAa,OAAO,MAAM,IAAI,MAAM,eAAe,KAAK;EAAG,MAAM,OAAO;CAAI,CAAC;AAChK;;;ACtDA,MAAMA,YAAU,MAAoD,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,IAA+B,KAAA;AAC9J,MAAM,UAAU,MAA4B,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,KAAK,KAAK;AAEhG,SAAS,SAAS,OAAwC;CACxD,MAAM,IAAIA,SAAO,KAAK;CACtB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,KAAA;CACpE,IAAI,EAAE,oBAAoB,KAAA,KAAa,CAAC,OAAO,EAAE,eAAe,KAAK,EAAE,qBAAqB,KAAA,KAAa,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,KAAA;CAC7I,OAAO;EAAE,qBAAqB,EAAE;EAAa,cAAc,EAAE;EAAc,iBAAiB,EAAE,mBAA6B;EAAG,kBAAkB,EAAE,oBAA8B;CAAE;AACpL;;AAGA,SAAS,QAAQ,MAAc,MAAuD;CACpF,IAAI,SAAS,mBAAmB;EAC9B,MAAM,QAAQA,SAAO,KAAK,KAAK;EAC/B,OAAO,OAAO,SAAS,UAAU,SAAS,MAAM,KAAK,IAAI,KAAA;CAC3D;CACA,IAAI,SAAS,uBAAuB,SAAS,qBAAqB,OAAO,KAAA;CACzE,MAAM,SAAS,SAAS,KAAK,KAAK;CAClC,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,CAAC,MAAM,QAAQ,KAAK,MAAM,GAAG,OAAO,KAAA;CACxC,KAAK,IAAI,IAAI,KAAK,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK;EAChD,MAAM,OAAOA,SAAO,KAAK,OAAO,EAAE;EAClC,MAAM,QAAQ,MAAM,SAAS,UAAUA,SAAO,KAAK,KAAK,IAAI,KAAA;EAC5D,IAAI,OAAO,SAAS,SAAS,OAAO,SAAS,MAAM,KAAK;CAC1D;AAEF;AAEA,SAAS,WAAW,OAA2B;CAC7C,MAAM,IAAIA,SAAO,KAAK,GAAG,QAAQA,SAAO,GAAG,KAAK;CAChD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,MAAM,UAAU,KAAK,CAAC,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,IAAI,UAAU,+BAA+B;CAClI,MAAM,SAAS,MAAwB;EACrC,MAAM,IAAIA,SAAO,CAAC,GAAG,IAAIA,SAAO,GAAG,MAAM;EACzC,OAAO,CAAC,CAAC,KAAK,OAAO,EAAE,aAAa,YAAY,OAAO,EAAE,UAAU,aAAa,EAAE,OAAO,QAAQ,OAAO,EAAE,EAAE,MAAM,OAAO,EAAE,aAAa,KAAK,CAAC,CAAC,KAAK,gBAAgB,OAAM,MAAK,OAAO,EAAE,EAAE,CAAC;CAC7L;CACA,MAAM,MAAMA,SAAO,EAAE,SAAS,GAAG,OAAOA,SAAO,EAAE,IAAI;CACrD,IAAI,EAAE,EAAE,cAAc,QAAQ,OAAO,OAAO,IAAI,aAAa,YAAY,OAAO,IAAI,UAAU,aACzF,EAAE,EAAE,OAAO,QAAQ,OAAO,EAAE,EAAE,MAAM,CAAC,MAAM,OAAO,MAAM,KAAK,KAC7D,EAAE,EAAE,SAAS,QAAQ,QAAQ,OAAO,KAAK,IAAI,KAAK,OAAO,KAAK,IAAI,KAAK,MAAM,KAAK,KAAK,IAAI,MAAM,IAAI,UAAU,+BAA+B;CACnJ,OAAO;AACT;;AAGA,SAAgB,qBAAqB,QAAQ,gBAAgB,GAAG;CAC9D,MAAM,UAAU,WAAW,KAAK;CAChC,OAAO;EACL,KAAK;EAAmB,cAAc;EACtC,aAAa,EAAE,OAAO,WAAW;EACjC,aAAwB;GAAE,WAAW;GAAM,IAAI;GAAM,MAAM;GAAM,OAAO;IAAE,YAAY;IAAS,QAAQ,CAAC;GAAE;EAAE;EAC5G,MAAM,OAAkB,OAA4B;GAClD,MAAM,OAAOA,SAAO,MAAM,IAAI;GAC9B,IAAI,CAAC,MAAM,OAAO;GAClB,IAAI,MAAM,SAAS,kBAAkB;IACnC,MAAM,SAASA,SAAOA,SAAO,KAAK,MAAM,CAAC,EAAE,MAAM;IACjD,OAAO;KAAE,GAAG;KAAO,WAAW,UAAU,OAAO,OAAO,aAAa,YAAY,OAAO,OAAO,UAAU,WAAW;MAAE,UAAU,OAAO;MAAU,OAAO,OAAO;KAAM,IAAI;IAAK;GAC9K;GACA,IAAI,MAAM,SAAS,gBAAgB,MAAM,SAAS,qBAAqB,OAAO;IAAE,GAAG;IAAO,IAAI,OAAO,MAAM,IAAI,IAAI,MAAM,OAAO;IAAM,MAAM;GAAK;GACjJ,MAAM,SAAS,QAAQ,MAAM,MAAM,IAAI;GACvC,IAAI,WAAW,KAAA,KAAa,CAAC,OAAO,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,GAAG,OAAO;GAC7E,MAAM,WAAW,MAAM,MAAM,SAAS,KAAK,QAAQ,MAAM,KAAK,SAAS,KAAK,OAAO,MAAM,KAAK,QAAQ,KAAA;GACtG,MAAM,QAAwB;IAAE,UAAU,MAAM,WAAW,YAAY;IAAI,OAAO,MAAM,WAAW,SAAS;IAAI,IAAI,MAAM;IAAI,eAAe,OAAO,sBAAsB,OAAO,kBAAkB,OAAO;IAAkB;GAAO;GACnO,IAAI,YAAY,KAAK,UAAU,QAAQ,MAAM,KAAK,UAAU,KAAK,GAAG,OAAO;GAC3E,MAAM,SAAS,MAAM,MAAM,OAAO,KAAI,OAAM;IAAE,GAAG;IAAG,QAAQ,EAAE,GAAG,EAAE,OAAO;GAAE,EAAE;GAC9E,IAAI,UAAU;IACZ,MAAM,MAAM,OAAO,MAAK,MAAK,aAAa,GAAG,KAAK,MAAM,aAAa,UAAU,KAAK,CAAC;IACrF,IAAI,KAAK,KAAK,MAAM,KAAK,iBAAiB,IAAI,OAAO,MAAM,SAAS,OAAO;GAC7E;GACA,IAAI,SAAS,OAAO,MAAK,MAAK,aAAa,GAAG,KAAK,MAAM,aAAa,OAAO,KAAK,CAAC;GACnF,IAAI,CAAC,QAAQ;IAAE,SAAS;KAAE,GAAG;KAAO,QAAQ,eAAe;IAAE;IAAG,OAAO,KAAK,MAAM;GAAE;GACpF,KAAK,MAAM,KAAK,iBAAiB,OAAO,OAAO,MAAM,OAAO;GAC5D,OAAO;IAAE,GAAG;IAAO,MAAM;KAAE,MAAM,KAAK;KAAM,MAAM,KAAK;KAAM;IAAM;IAAG,OAAO;KAAE,YAAY;KAAS,QAAQ,OAAO,QAAO,MAAK,gBAAgB,MAAK,MAAK,EAAE,OAAO,KAAK,CAAC,CAAC;IAAE;GAAE;EAC/K;EACA,MAAM;GACJ,OAAO,UAAqB,MAAM;GAClC,YAAY,EAAE,MAAM,OAAkC;IAAE,OAAO,WAAW;KAAE,WAAW;KAAM,IAAI;KAAM,MAAM;KAAM,OAAO;IAAM,CAAC,CAAC,CAAC;GAAM,EAAE;EAC7I;CACF;AACF;AAEA,SAAgB,sBAAsB,KAAoB;CACxD,IAAI,OAAO,CAAC,oBAAoB,IAAG,MAAK;EACtC,MAAM,WAAW,EAAE,IAAI,oBAAoB;EAC3C,IAAI,OAAO,UAAU,aAAa,YAAY,EAAE,aAAa,SAAS,SAAS,qBAAqB,CAAC,GAAG,6BAA6B;CACvI,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACtDA,MAAa,qBAAqB;;AAoGlC,SAAS,WAAW,IAAoB;CACtC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,eAAe;AACrC;;;;;;;AAQA,SAAgB,cAAc,OAAqD;CACjF,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI,MAAM,SAAS,YAAY,OAAO,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,MAAM;CAC7E,OAAO;AACT;;;;;;;AAQA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,SAAS,SAAS,QAAQ,YAAY,cAAc,QAAQ,KAAK,CAAC;CACxE,IAAI,gBAAgB,KAAA,GAAW;EAC7B,MAAM,YAAY,OAAO,MAAM,YAAY,QAAQ,KAAK,OAAO,WAAW;EAC1E,IAAI,cAAc,KAAA,GAAW,OAAO;CACtC;CACA,OAAO,OAAO;AAChB;;;;;AAMA,SAAgB,eACd,OACA,OACyC;CACzC,IAAI,UAAU,MAAM,UAAU,KAAA,KAAa,MAAM,WAAW,GAAG,OAAO,KAAA;CACtE,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,OAAO,SAAS,KAAK,GAAG,OAAO;AAG5C;;;;;;;AAQA,SAAgB,sBACd,UACA,OACA,OAC6B;CAC7B,MAAM,OAAO,eAAe,OAAO,KAAK;CACxC,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;CAC/B,OAAO,SAAS,MAAM,YAAY,QAAQ,KAAK,OAAO,KAAK,WAAW,cAAc,QAAQ,KAAK,CAAC;AACpG;;;;;;AAOA,IAAa,yBAAb,MAAoC;CAGL;;CAD7B,yBAA0B,IAAI,IAAqC;CACnE,YAAY,MAAmD;EAAlC,KAAA,OAAA;CAAmC;;;;;;CAOhE,MAAM,mBAA+C;EACnD,MAAM,MAAyB,CAAC;EAChC,MAAM,uBAAO,IAAI,IAAY;EAC7B,KAAK,MAAM,QAAQ,KAAK,KAAK,MAAM,GAAG;GACpC,MAAM,MAAM,MAAM,KAAK,eAAe,IAAI;GAC1C,IAAI,QAAQ,KAAA,KAAa,KAAK,IAAI,GAAG,GAAG;GACxC,KAAK,IAAI,GAAG;GACZ,IAAI,KAAK;IAAE;IAAM;IAAK,OAAO,KAAK,OAAO,IAAI,GAAG;GAAE,CAAC;EACrD;EACA,OAAO;CACT;;;;;;;CAQA,MAAM,mBAA+C;EACnD,MAAM,MAAyB,CAAC;EAChC,KAAK,MAAM,QAAQ,KAAK,KAAK,MAAM,GAAG;GACpC,MAAM,MAAM,MAAM,KAAK,eAAe,IAAI;GAC1C,IAAI,QAAQ,KAAA,GAAW;GACvB,IAAI,KAAK;IAAE;IAAM;IAAK,OAAO,KAAK,OAAO,IAAI,GAAG;GAAE,CAAC;EACrD;EACA,OAAO;CACT;;;;;;;;;;;;;;;;;;CAmBA,MAAM,WAAW,SAAoH;EACnI,MAAM,WAAW,MAAM,KAAK,iBAAiB;EAC7C,IAAI,SAAS,WAAW,GACtB;EAEF,MAAM,SAAS,sBAAsB,UAAU,SAAS,SAAS,IAAI,KAAK,KAAK,oBAAoB,CAAC;EACpG,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,KAAK,MAAM;EACjD,MAAM,YAAY,KAAK,KAAK,cAAc;EAC1C,MAAM,SAAS,oBAAoB,UAAU,SAAS;EACtD,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,KAAK,MAAM;EAMjD,MAAM,QAAQ,IAAI,SAAS,IAAI,OAAO,YAAY;GAChD,IAAI,QAAQ,OAAO,SAAS,YAAY;GACxC,IAAI,SAAS,YAAY,KAAA,KAAa,QAAQ,QAAQ,QAAQ,SAAS;GACvE,IAAI;GACJ,IAAI;IACF,QAAQ,MAAM,KAAK,KAAK,YAAY,QAAQ,GAAG;GACjD,QAAQ;IACN;GACF;GACA,IAAI,UAAU,KAAA,GAAW;GACzB,IAAI,CAAC,MAAM,UACT,KAAK,OAAO,OAAO,QAAQ,GAAG;QAE9B,KAAK,OAAO,IAAI,QAAQ,KAAK;IAC3B,MAAM;IACN,QAAQ,QAAQ,OAAO,UAAU;IACjC,OAAO,MAAM;GACf,CAAC;EAEL,CAAC,CAAC;EAMF,MAAM,SAAS,MAAM,KAAK,iBAAiB;EAC3C,MAAM,UAAU,oBAAoB,QAAQ,SAAS;EACrD,IAAI,YAAY,KAAA,GAAW,OAAO,KAAK,KAAK,OAAO;EAGnD,IADiB,OAAO,QAAQ,YAAY,QAAQ,OAAO,SAAS,UACzD,CAAC,CAAC,WAAW,OAAO,QAI7B,MAAM,IAAI,SACR,2DAA2D,OAAO,OAAO,qGAE5D,OAAO,OAAO,4EAE3B,oBACF;EAEF,MAAM,SAAS,OACZ,KAAK,YAAY,QAAQ,KAAK,CAAC,CAC/B,QAAQ,UAA4C,UAAU,KAAA,KAAa,MAAM,SAAS,cAAc,MAAM,QAAQ,CAAC,CAAC,CACxH,KAAK,UAAU,MAAM,KAAK;EAC7B,MAAM,WAAW,OAAO,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI;EAQ3D,MAAM,OAAO,WAAW,IAAI,KAAK,IAAI,KAAM,WAAW,KAAK,IAAI,CAAC,IAAI;EACpE,MAAM,IAAI,SACR,wBAAwB,OAAO,OAAO,+DACjC,WAAW,IAAI,mCAAmC,WAAW,QAAQ,MAAM,MAC5E,iFACU,OAAO,OAAO,4BACvB,WAAW,IAAI,aAAa,WAAW,QAAQ,MAAM,MACtD,6BACJ,cACA,OAAO,KAAK,QAAA,MAA6B,EAAE,sBAAsB,KAAK,IAAI,KAAA,CAC5E;CACF;;;;;;;CAQA,aAAa,QAAgB,WAAmC;EAC9D,IAAI,cAAc,sBAChB,KAAK,OAAO,IAAI,QAAQ;GAAE,MAAM;GAAY,QAAQ;GAAyB,OAAO;EAAE,CAAC;OAEvF,KAAK,OAAO,IAAI,QAAQ;GAAE,MAAM;GAAW,QAAQ;GAAsB,OAAO;EAAE,CAAC;CAEvF;;;;;;;;;;;;;;;CAgBA,MAAc,eAAe,MAA2D;EACtF,IAAI,KAAK,YAAY,KAAA,GAAW;GAC9B,MAAM,UAAU,qBAAqB,KAAK,OAAO;GACjD,IAAI,YAAY,KAAA,GAAW,OAAO;EACpC;EACA,IAAI,KAAK,QAAQ,KAAA,GAAW;GAC1B,MAAM,MAAM,MAAM,KAAK,KAAK,WAAW,KAAK,GAAG;GAC/C,IAAI,QAAQ,KAAA,GAAW;IACrB,MAAM,WAAW,qBAAqB,GAAG;IACzC,IAAI,aAAa,KAAA,GAAW,OAAO;GACrC;EACF;EACA,IAAI,KAAK,eAAe;GACtB,MAAM,WAAW,KAAK,KAAK,YAAY;GACvC,IAAI,aAAa,KAAA,GAAW;IAC1B,MAAM,UAAU,qBAAqB,QAAQ;IAC7C,IAAI,YAAY,KAAA,GAAW,OAAO;GACpC;EACF;CAEF;;CAGA,KAAa,SAAyE;EACpF,OAAO;GAAE,KAAK,QAAQ;GAAK,MAAM,QAAQ;EAAK;CAChD;AACF;;;;;;;AAQA,SAAS,qBAAqB,OAAmC;CAC/D,MAAM,UAAU,MAAM,KAAK;CAC3B,OAAO,YAAY,KAAK,KAAA,IAAY;AACtC;;;;;;;;;;;;;;;;;;;;;;;;AC7VA,MAAa,2BAA2B;AACxC,MAAa,mBAAmB;AAChC,MAAa,8BAA8B;AAC3C,MAAa,4BAA4B;AACzC,MAAa,oBAAoB;;AAEjC,MAAa,wBAAwB;;AAWrC,MAAM,iBAAiB;;AAGvB,MAAM,wBAAwB;;;;;AAM9B,MAAM,+CAAoD,IAAI,IAAI;CAAC;CAAU;CAAY;AAAU,CAAC;;AAEpG,MAAa,6BAA6B;;AAE1C,MAAa,iCAAiC;AAC9C,MAAM,sBAAsB;AAM5B,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAAoC;CACvD,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAEA,SAAS,YAAY,OAAoC;CACvD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;AAEA,SAAS,aAAa,OAAqC;CACzD,OAAO,OAAO,UAAU,YAAY,QAAQ,KAAA;AAC9C;;AAGA,SAAS,eAAe,OAAwB;CAC9C,MAAM,WAAW,YAAY,KAAK;CAClC,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,WAAW,YAAY,KAAK;CAClC,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,SAAS,KAAK,MAAM,QAAQ;CAClC,OAAO,OAAO,MAAM,MAAM,IAAI,IAAI;AACpC;;;;;;AAOA,MAAM,gCAAgC;CACpC;CACA;CACA;AACF;AAEA,SAAS,wBAAwB,SAA0B;CACzD,MAAM,QAAQ,QAAQ,YAAY;CAClC,OAAO,8BAA8B,MAAM,WAAW,MAAM,SAAS,MAAM,CAAC;AAC9E;AAEA,SAAS,cAAc,OAAyC;CAC9D,IAAI,SAAS,KAAK,GAAG,OAAO;CAC5B,IAAI,OAAO,UAAU,UACnB,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,KAAK;EACxC,IAAI,SAAS,MAAM,GAAG,OAAO;CAC/B,QAAQ,CAER;CAEF,OAAO,CAAC;AACV;;AAiBA,MAAM,6BAA6B;;;;;;AAOnC,SAAS,eAAe,MAAwC;CAC9D,OACE,SAAS,KAAK,UAAU,KACxB,SAAS,KAAK,iBAAiB,KAC/B,MAAM,QAAQ,KAAK,QAAQ,KAC3B,KAAK,yBAAyB,KAAA;AAElC;;AAGA,SAAS,cAAc,MAAyC;CAC9D,OAAO,MAAM,QAAQ,KAAK,QAAQ,IAAI,KAAK,SAAS,QAAQ,SAAyB,OAAO,SAAS,QAAQ,IAAI,CAAC;AACpH;;AAGA,SAAS,gBAAgB,MAA+B,KAAkD;CACxG,IAAI,CAAC,IAAI,WAAW,IAAI,GAAG,OAAO,KAAA;CAClC,IAAI,OAAgB;CACpB,KAAK,MAAM,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG;EAChD,MAAM,UAAU,WAAW,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,GAAG;EACjE,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO,KAAA;EAC5B,OAAO,KAAK;CACd;CACA,OAAO,SAAS,IAAI,IAAI,OAAO,KAAA;AACjC;;;;;;;;AASA,SAAS,wBACP,MACA,OACqC;CAGrC,IAAI,SAAS,4BAA4B,OAAO,KAAA;CAChD,MAAM,aAAsC,CAAC;CAC7C,MAAM,2BAAW,IAAI,IAAY;CACjC,MAAM,eAA2B,CAAC;CAClC,IAAI,YAAY;CAEhB,KAAK,MAAM,OAAO;EAAC;EAAS;EAAS;CAAO,GAAY;EACtD,MAAM,WAAW,KAAK;EACtB,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG;EAC9B,MAAM,iBAA4C,CAAC;EACnD,KAAK,MAAM,UAAU,UAAU;GAC7B,IAAI,CAAC,SAAS,MAAM,GAAG;GACvB,eAAe,KAAK,qBAAqB,QAAQ,QAAQ,CAAC,CAAC;EAC7D;EACA,IAAI,eAAe,WAAW,GAAG;EACjC,YAAY;EAGZ,MAAM,QAAQ,eAAe,IAAI,aAAa;EAC9C,IAAI,QAAQ,SAAS,KAAK,MAAM,QAAQ,MAAM,KAAK,GAAG,SAAS,IAAI,IAAI;OAClE,IAAI,MAAM,SAAS,GACtB,aAAa,KAAK,MAAM,EAAE,CAAE,QAAQ,SAAS,MAAM,OAAO,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC;EAE1F,KAAK,MAAM,UAAU,gBAAgB;GACnC,MAAM,mBAAmB,SAAS,OAAO,UAAU,IAAI,OAAO,aAAa,CAAC;GAC5E,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,gBAAgB,GAC1D,IAAI,EAAE,QAAQ,aAAa,WAAW,QAAQ;EAElD;CACF;CACA,IAAI,CAAC,WAAW,OAAO,KAAA;CAGvB,KAAK,MAAM,SAAS,cAAc,KAAK,MAAM,QAAQ,OAAO,SAAS,IAAI,IAAI;CAE7E,MAAM,SAAkC;EAAE,MAAM;EAAU;CAAW;CACrE,IAAI,SAAS,OAAO,GAAG,OAAO,WAAW,CAAC,GAAG,QAAQ;CAGrD,IAAI,KAAK,yBAAyB,KAAA,GAAW,OAAO,uBAAuB,KAAK;CAChF,KAAK,MAAM,OAAO,CAAC,eAAe,OAAO,GACvC,IAAI,KAAK,SAAS,KAAA,GAAW,OAAO,OAAO,KAAK;CAElD,OAAO;AACT;;;;;;;;;AAUA,SAAS,qBAAqB,YAAqB,QAAQ,GAA4B;CACrF,IAAI,CAAC,SAAS,UAAU,GAAG,OAAO;EAAE,MAAM;EAAU,YAAY,CAAC;EAAG,sBAAsB;CAAK;CAC/F,IAAI,WAAW,SAAS,UAAU,OAAO;CAGzC,IAAI,MAAM,QAAQ,WAAW,IAAI,KAAK,WAAW,KAAK,SAAS,QAAQ,GACrE,OAAO;EAAE,GAAG;EAAY,MAAM;CAAS;CAGzC,IAAI,WAAW,SAAS,KAAA,KAAa,WAAW,SAAS,MAAM;EAC7D,IAAI,OAAO,WAAW,SAAS,YAAY,QAAQ,4BAA4B;GAC7E,MAAM,SAAS,gBAAgB,YAAY,WAAW,IAAI;GAC1D,IAAI,WAAW,KAAA,GAAW;IACxB,MAAM,EAAE,MAAM,MAAM,GAAG,SAAS;IAChC,OAAO,qBAAqB;KAAE,GAAG;KAAQ,GAAG;IAAK,GAAG,QAAQ,CAAC;GAC/D;EACF;EACA,IAAI,eAAe,UAAU,GAAG,OAAO;GAAE,GAAG;GAAY,MAAM;EAAS;EACvE,MAAM,SAAS,wBAAwB,YAAY,KAAK;EACxD,IAAI,WAAW,KAAA,GAAW,OAAO;EAIjC,IAAI,OAAO,WAAW,SAAS,UAAU,OAAO;GAAE,GAAG;GAAY,MAAM;EAAS;CAClF;CAEA,OAAO;EAAE,MAAM;EAAU,YAAY,CAAC;EAAG,sBAAsB;CAAK;AACtE;AAEA,SAAgB,oBAAoB,UAA0B;CAY5D,OAXa,SACV,YAAY,CAAC,CACb,QAAQ,YAAY,EAAE,CAAC,CACvB,QAAQ,eAAe,GAAG,CAAC,CAO3B,QAAQ,kBAAkB,EACnB,KAAK;AACjB;AAEA,SAAS,qBAAqB,MAAmC;CAC/D,IAAI,UAAU,KAAK,KAAK;CACxB,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,QAAQ,GAAG,OAAO,KAAA;CAChF,IAAI,QAAQ,WAAW,OAAO,GAAG,UAAU,QAAQ,MAAM,CAAC,CAAC,CAAC,KAAK;CACjE,IAAI,CAAC,WAAW,YAAY,UAAU,OAAO,KAAA;CAC7C,IAAI;EACF,OAAO,KAAK,MAAM,OAAO;CAC3B,QAAQ;EACN;CACF;AACF;;AAWA,SAAS,2BAA2B,OAAoC;CACtE,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,OAAO,YAAY,MAAM,IAAI;CACnC,IAAI,SAAS,OAAO,OAAO,YAAY,MAAM,GAAG;CAChD,IAAI,SAAS,SAAS,OAAO,YAAY,MAAM,MAAM;CACrD,OAAO,YAAY,MAAM,GAAG,KAAK,YAAY,MAAM,MAAM;AAC3D;;AAGA,SAAgB,wBAA4C;CAC1D,MAAM,WAAW,KAAK,QAAQ,GAAG,gBAAgB,WAAW;CAC5D,IAAI;EACF,IAAI,CAAC,WAAW,QAAQ,GAAG,OAAO,KAAA;EAClC,MAAM,SAAkB,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;EAClE,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,KAAA;EAC9B,MAAM,SAAS,YAAY,OAAO,MAAM,KAAK,YAAY,OAAO,WAAW;EAC3E,IAAI,QAAQ,OAAO;EAInB,OAFE,2BAA2B,OAAO,WAAW,KAC7C,2BAA2B,OAAO,eAAe;CAErD,QAAQ,CAER;AAEF;AAaA,SAAS,qBAAqB,OAAoC;CAChE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,WAAW,UAAU,CAAC,MAAM,QAAQ,MAAM,IAAI,GAC1E,MAAM,IAAI,SAAS,iDAAiD,yBAAyB;CAE/F,MAAM,SAA6B,CAAC;CACpC,KAAK,MAAM,SAAS,MAAM,MAAM;EAC9B,IAAI,CAAC,SAAS,KAAK,GAAG;EACtB,MAAM,KAAK,YAAY,MAAM,EAAE;EAC/B,MAAM,OAAO,YAAY,MAAM,IAAI;EACnC,MAAM,gBAAgB,YAAY,MAAM,cAAc;EACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,iBAAiB,GAAG;EAC1D,OAAO,KAAK;GACV;GACA;GACA,eAAe;GACf,WAAW,KAAK,IAAI,eAAe,yBAAyB;EAC9D,CAAC;CACH;CACA,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,SAAS,gDAAgD,yBAAyB;CAE9F,OAAO;AACT;AAEA,eAAe,gBAAgB,WAAgD;CAC7E,MAAM,SAAkB,KAAK,MAAM,MAAM,SAAS,WAAW,OAAO,CAAC;CACrE,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,YAAY,uBAAuB,CAAC,MAAM,QAAQ,OAAO,MAAM,GAC7F,MAAM,IAAI,MAAM,0BAA0B,WAAW;CAEvD,OAAO,OAAO;AAChB;AAEA,eAAe,iBAAiB,WAAmB,QAA2C;CAC5F,MAAM,MAAM,QAAQ,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CACnD,MAAM,MAAM,GAAG,UAAU,GAAG,QAAQ,IAAI;CACxC,IAAI;EACF,MAAM,UAAU,KAAK,GAAG,KAAK,UAAU;GAAE,SAAS;GAAqB;EAAO,GAAG,MAAM,CAAC,EAAE,KAAK;GAC7F,UAAU;GACV,MAAM;EACR,CAAC;EACD,MAAM,OAAO,KAAK,SAAS;CAC7B,UAAU;EACR,MAAM,GAAG,KAAK,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CACtD;AACF;;;;;;;;AAoBA,SAAS,gBAAgB,UAGvB;CACA,MAAM,0BAAU,IAAI,IAAY;CAChC,MAAM,wBAAQ,IAAI,IAAoB;CACtC,MAAM,4BAAY,IAAI,IAAY;CAClC,KAAK,MAAM,WAAW,UACpB,KAAK,MAAM,SAAS,QAAQ,SAAS;EACnC,IAAI,QAAQ,SAAS,eAAe,MAAM,SAAS,aAAa;GAC9D,QAAQ,IAAI,MAAM,EAAE;GACpB,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI;EAChC;EACA,IAAI,MAAM,SAAS,eAAe,UAAU,IAAI,MAAM,UAAU;CAClE;CAEF,OAAO;EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,OAAO,UAAU,IAAI,EAAE,CAAC,CAAC;EAAG;CAAM;AAC/E;;;;;;;;;;;AAYA,MAAM,+BAA+B;;;;;;;AAQrC,SAAS,gBAAgB,QAAkD;CACzE,MAAM,uBAAO,IAAI,IAAoB;CACrC,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,MAAM,QACf,IAAI,GAAG,UAAU,8BAA8B;EAC7C,KAAK,IAAI,IAAI,EAAE;EACf,MAAM,IAAI,EAAE;CACd;CAEF,IAAI,MAAM;CACV,KAAK,MAAM,MAAM,QAAQ;EACvB,IAAI,KAAK,IAAI,EAAE,GAAG;EAClB,IAAI,QAAQ,MAAM;EAClB,OAAO,MAAM,IAAI,KAAK,GAAG,QAAQ,MAAM;EACvC,KAAK,IAAI,IAAI,KAAK;EAClB,MAAM,IAAI,KAAK;CACjB;CACA,OAAO;AACT;AAEA,SAAS,UAAU,OAA6B;CAC9C,OAAO,MAAM,SAAS,UAAU,MAAM,SAAS,cAAc,MAAM,OAAO;AAC5E;;;;;;;AAuBA,SAAS,gBAAgB,OAAwE;CAC/F,MAAM,SAAmB,CAAC;CAC1B,MAAM,SAA+B,CAAC;CACtC,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,QAAQ,WAA0C;EACtD,KAAK,MAAM,UAAU,QAAQ;GAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,aAAa;IACzD,IAAI,OAAO,MAAM,OAAO,KAAK,OAAO,IAAI;IACxC;GACF;GACA,IAAI,OAAO,SAAS,SAAS;IAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,WAAW,YAAY,GAAG;KAC7C,KAAK,IAAI,OAAO,WAAW,YAAY;KACvC,OAAO,KAAK,OAAO,UAAU;IAC/B;IACA;GACF;GACA,IAAI,OAAO,SAAS,eAAe,KAAK,OAAO,OAAO;EACxD;CACF;CACA,KAAK,MAAM,OAAO;CAClB,OAAO;EAAE,MAAM,OAAO,KAAK,IAAI;EAAG;CAAO;AAC3C;;;;;;;AAQA,SAAS,sBAAsB,OAAgC;CAC7D,OAAO,MAAM,SAAS,MAAM,OAAO,SAAS,IAAI,6CAA6C;AAC/F;;AAGA,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;AAqB/B,SAAS,oBAAoB,OAAwB,YAA4B;CAC/E,MAAM,OAAO,GAAG,uBAAuB,IAAI,WAAW;CACtD,MAAM,QAAQ,MAAM,OAAO;CAC3B,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,MAAM,aAAa,GAAG,MAAM,MAAM,GAAG,MAAM,OAAO;CAClD,IAAI,MAAM,SAAS,KAAK,MAAM,UAAU,KAAK,MAAM,KAAK,SAAS,UAAU,GACzE,OAAO;CAGT,OAAO,GAAG,KAAK,GADD,MAAM,OAAO,SAAS,IAAI,GAAG,MAAM,OAAO,OAAO,aAAa,KAClD;AAC5B;AAEA,SAAS,gBAAgB,SAA2B;CAClD,MAAM,SAAS,WACb,OAAO,MACJ,MAAM,EAAE,SAAS,WAAY,EAAE,SAAS,iBAAiB,MAAM,EAAE,OAAO,CAC3E;CACF,OAAO,MAAM,QAAQ,OAAO;AAC9B;;;;;;;AAQA,eAAe,mBACb,KACA,WAC0F;CAC1F,MAAM,OAAO,MAAM,UAAU,GAAG;CAChC,OAAO;EACL,MAAM;EACN,QAAQ;GACN,MAAM;GACN,YAAY,IAAI;GAChB,MAAM,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,QAAQ;EAC3C;CACF;AACF;AAEA,eAAe,aACb,UACA,WACoB;CACpB,MAAM,MAAiB,CAAC;CACxB,MAAM,EAAE,KAAK,QAAQ,OAAO,cAAc,gBAAgB,QAAQ;CAGlE,MAAM,UAAU,gBAAgB,MAAM;CAQtC,MAAM,gBAA2B,CAAC;CAClC,MAAM,2BAA2B;EAC/B,KAAK,MAAM,WAAW,eAAe,IAAI,KAAK,OAAO;EACrD,cAAc,SAAS;CACzB;CAEA,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,QAAQ,SAAS,UAAU;EAE/B,IAAI,QAAQ,SAAS,UAAU,QAAQ,OAAO,SAAS,QAAQ;GAC7D,mBAAmB;GACnB,MAAM,QAAmB,CAAC;GAC1B,KAAK,MAAM,SAAS,QAAQ,SAAS;IACnC,IAAI,MAAM,SAAS,QAAQ,MAAM,KAAK;KAAE,MAAM;KAAQ,MAAM,MAAM;IAAK,CAAC;IACxE,IAAI,MAAM,SAAS,SAAS;KAI1B,IAAI,CAAC,WACH,MAAM,IAAI,SACR,uDACA,qBACF;KAEF,MAAM,KAAK,MAAM,mBAAmB,MAAM,YAAY,SAAS,CAAC;IAClE;GACF;GAOA,IAAI,MAAM,WAAW,GAAG;GACxB,IAAI,KAAK;IAAE,MAAM;IAAQ,SAAS;GAAM,CAAC;GACzC;EACF;EAEA,IAAI,QAAQ,SAAS,aAAa;GAChC,mBAAmB;GACnB,MAAM,QAAmB,CAAC;GAC1B,KAAK,MAAM,SAAS,QAAQ,SAC1B,IAAI,MAAM,SAAS,QACjB,MAAM,KAAK;IAAE,MAAM;IAAQ,MAAM,MAAM;GAAK,CAAC;QACxC,IAAI,MAAM,SAAS,aASxB,MAAM,KAAK;IAAE,MAAM;IAAa,MAAM,MAAM;GAAK,CAAC;QAC7C,IAAI,MAAM,SAAS,eAAe,OAAO,IAAI,MAAM,EAAE,GAC1D,MAAM,KAAK;IACT,MAAM;IACN,YAAY,QAAQ,IAAI,MAAM,EAAE,KAAK,MAAM;IAC3C,UAAU,MAAM;IAChB,OAAO,cAAc,MAAM,SAAS;GACtC,CAAC;GAGL,IAAI,MAAM,SAAS,GAAG,IAAI,KAAK;IAAE,MAAM;IAAa,SAAS;GAAM,CAAC;GACpE;EACF;EAGA,IAAI,QAAQ,SAAS,UAAU,QAAQ,OAAO,SAAS,QAAQ;GAC7D,MAAM,QAAQ,QAAQ,QAAQ;GAC9B,IAAI,CAAC,SAAS,MAAM,SAAS,iBAAiB,CAAC,OAAO,IAAI,MAAM,UAAU,GAAG;GAC7E,MAAM,QAAQ,gBAAgB,KAAK;GAGnC,MAAM,iBAAiB,QAAQ,IAAI,MAAM,UAAU,KAAK,MAAM;GAC9D,IAAI,KAAK;IACP,MAAM;IACN,SAAS,CACP;KACE,MAAM;KACN,YAAY;KAIZ,UAAU,UAAU,IAAI,MAAM,UAAU,KAAK;KAC7C,QAAQ,MAAM,UACV;MAAE,MAAM;MAAc,OAAO,sBAAsB,KAAK;KAAE,IAC1D;MAAE,MAAM;MAAQ,OAAO,sBAAsB,KAAK;KAAE;IAC1D,CACF;GACF,CAAC;GAID,IAAI,MAAM,OAAO,SAAS,GAAG;IAC3B,IAAI,CAAC,WACH,MAAM,IAAI,SACR,uDACA,qBACF;IAEF,MAAM,UAAqB,CAAC;KAAE,MAAM;KAAQ,MAAM,oBAAoB,OAAO,cAAc;IAAE,CAAC;IAC9F,KAAK,MAAM,cAAc,MAAM,QAC7B,QAAQ,KAAK,MAAM,mBAAmB,YAAY,SAAS,CAAC;IAE9D,cAAc,KAAK;KAAE,MAAM;KAAQ,SAAS;IAAQ,CAAC;GACvD;EACF;CACF;CACA,mBAAmB;CACnB,OAAO;AACT;;;;;AAMA,eAAe,cACb,KACA,WAC4D;CAC5D,MAAM,OAAO,MAAM,UAAU,GAAG;CAChC,OAAO;EACL,MAAM;EACN,WAAW,EACT,KAAK,QAAQ,IAAI,UAAU,UAAU,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,QAAQ,IAC1E;CACF;AACF;;;;;;;;;;;AAYA,eAAe,iBACb,UACA,WACoB;CACpB,MAAM,MAAiB,CAAC;CACxB,MAAM,EAAE,KAAK,WAAW,gBAAgB,QAAQ;CAIhD,MAAM,UAAU,gBAAgB,MAAM;CAQtC,MAAM,gBAA2B,CAAC;CAClC,MAAM,2BAA2B;EAC/B,KAAK,MAAM,WAAW,eAAe,IAAI,KAAK,OAAO;EACrD,cAAc,SAAS;CACzB;CAEA,KAAK,MAAM,WAAW,UAAU;EAG9B,IAAI,QAAQ,SAAS,UAAU;EAE/B,IAAI,QAAQ,SAAS,UAAU,QAAQ,OAAO,SAAS,QAAQ;GAC7D,mBAAmB;GACnB,MAAM,QAAmB,CAAC;GAC1B,KAAK,MAAM,SAAS,QAAQ,SAAS;IACnC,IAAI,MAAM,SAAS,QAAQ,MAAM,KAAK;KAAE,MAAM;KAAQ,MAAM,MAAM;IAAK,CAAC;IACxE,IAAI,MAAM,SAAS,SAAS;KAC1B,IAAI,CAAC,WACH,MAAM,IAAI,SACR,uDACA,qBACF;KAEF,MAAM,KAAK,MAAM,cAAc,MAAM,YAAY,SAAS,CAAC;IAC7D;GACF;GAIA,IAAI,MAAM,WAAW,GAAG;GAExB,IAAI,CADa,MAAM,MAAM,SAAU,KAA2B,SAAS,WAC/D,KAAK,MAAM,WAAW,GAChC,IAAI,KAAK;IAAE,MAAM;IAAQ,SAAU,MAAM,EAAE,CAAsB;GAAK,CAAC;QAIvE,IAAI,KAAK;IAAE,MAAM;IAAQ,SAAS;GAAM,CAAC;GAE3C;EACF;EAEA,IAAI,QAAQ,SAAS,aAAa;GAChC,mBAAmB;GACnB,MAAM,OAAO,QAAQ,QAClB,QAAQ,UAA4D,MAAM,SAAS,MAAM,CAAC,CAC1F,KAAK,UAAU,MAAM,IAAI,CAAC,CAC1B,KAAK,EAAE;GACV,MAAM,YAAY,QAAQ,QACvB,QAAQ,UAAiE,MAAM,SAAS,WAAW,CAAC,CACpG,KAAK,UAAU,MAAM,IAAI,CAAC,CAC1B,KAAK,EAAE;GACV,MAAM,YAAY,QAAQ,QACvB,QAAQ,UAAiE,MAAM,SAAS,eAAe,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC,CAC5H,KAAK,WAAW;IACf,IAAI,QAAQ,IAAI,MAAM,EAAE,KAAK,MAAM;IACnC,MAAM;IACN,UAAU;KACR,MAAM,MAAM;KACZ,WAAW,MAAM;IACnB;GACF,EAAE;GAEJ,IAAI,SAAS,MAAM,cAAc,MAAM,UAAU,WAAW,GAAG;GAC/D,MAAM,YAAqC;IACzC,MAAM;IACN,SAAS,SAAS,KAAK,OAAO;GAChC;GAGA,IAAI,cAAc,IAAI,UAAU,oBAAoB;GACpD,IAAI,UAAU,SAAS,GAAG,UAAU,aAAa;GACjD,IAAI,KAAK,SAAS;GAClB;EACF;EAGA,IAAI,QAAQ,SAAS,UAAU,QAAQ,OAAO,SAAS,QAAQ;GAC7D,MAAM,QAAQ,QAAQ,QAAQ;GAC9B,IAAI,CAAC,SAAS,MAAM,SAAS,iBAAiB,CAAC,OAAO,IAAI,MAAM,UAAU,GAAG;GAC7E,MAAM,QAAQ,gBAAgB,KAAK;GAGnC,MAAM,iBAAiB,QAAQ,IAAI,MAAM,UAAU,KAAK,MAAM;GAC9D,IAAI,KAAK;IACP,MAAM;IACN,cAAc;IACd,SAAS,sBAAsB,KAAK;GACtC,CAAC;GAGD,IAAI,MAAM,OAAO,SAAS,GAAG;IAC3B,IAAI,CAAC,WACH,MAAM,IAAI,SACR,uDACA,qBACF;IAEF,MAAM,UAAqB,CAAC;KAAE,MAAM;KAAQ,MAAM,oBAAoB,OAAO,cAAc;IAAE,CAAC;IAC9F,KAAK,MAAM,cAAc,MAAM,QAC7B,QAAQ,KAAK,MAAM,cAAc,YAAY,SAAS,CAAC;IAEzD,cAAc,KAAK;KAAE,MAAM;KAAQ,SAAS;IAAQ,CAAC;GACvD;EACF;CACF;CACA,mBAAmB;CACnB,OAAO;AACT;;AAmKA,MAAM,uBAAuB;;;;;AAuB7B,SAAS,iBAAiB,OAA0E;CAIlG,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,OAAO;EACL,YAAY,YAAY,MAAM,UAAU,KAAK;EAC7C,WAAW,YAAY,MAAM,SAAS,KAAK;EAC3C,aAAa,YAAY,MAAM,WAAW,KAAK;EAC/C,gBAAgB,YAAY,MAAM,cAAc,KAAK;EACrD,aAAa,YAAY,MAAM,WAAW,KAAK;EAC/C,eAAe,YAAY,MAAM,aAAa,KAAK;EACnD,gBAAgB,YAAY,MAAM,cAAc,KAAK;EACrD,cAAc,YAAY,MAAM,YAAY,KAAK;EACjD,aAAa,YAAY,MAAM,WAAW,KAAK;CACjD;AACF;;;;;;;;;;AAWA,SAAS,iBAAiB,OAAgD;CACxE,MAAM,QAAQ,SAAS,KAAK,IAAI,QAAQ,KAAA;CACxC,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,OAAO;EACL,MAAM,YAAY,MAAM,IAAI,KAAK;EACjC,KAAK,YAAY,MAAM,GAAG,KAAK;EAC/B,UAAU,MAAM,aAAa;EAC7B,SAAS,YAAY,MAAM,OAAO,KAAK;CACzC;AACF;;;;;AAMA,SAAS,kBAAkB,SAA8E;CACvG,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,MAAM,cAAc,SAAS,QAAQ,OAAO,IAAI,QAAQ,UAAU,KAAA;CAClE,MAAM,eAAe,SAAS,QAAQ,YAAY,IAAI,QAAQ,eAAe,KAAA;CAC7E,MAAM,WAAW,iBAAiB,KAAA,KAAa,SAAS,aAAa,QAAQ,IAAI,aAAa,WAAW,KAAA;CACzG,MAAM,SAAS,iBAAiB,KAAA,KAAa,SAAS,aAAa,MAAM,IAAI,aAAa,SAAS,KAAA;CACnG,IAAI,gBAAgB,KAAA,KAAa,aAAa,KAAA,KAAa,WAAW,KAAA,GAAW,OAAO,KAAA;CACxF,MAAM,SAA6B;EACjC,gBAAgB,YAAY,aAAa,cAAc,KAAK;EAC5D,kBAAkB,YAAY,aAAa,gBAAgB,KAAK;EAChE,aAAa,YAAY,aAAa,WAAW,KAAK;EAGtD,iBAAiB,YAAY,aAAa,cAAc,MAAM,KAAA;EAC9D,mBAAmB,YAAY,aAAa,gBAAgB,MAAM,KAAA;EAClE,cAAc,YAAY,aAAa,WAAW,MAAM,KAAA;CAC1D;CAIA,MAAM,gBAAgB,iBAAiB,QAAQ;CAC/C,MAAM,cAAc,iBAAiB,MAAM;CAC3C,IAAI,kBAAkB,KAAA,GAAW,OAAO,WAAW;CACnD,IAAI,gBAAgB,KAAA,GAAW,OAAO,SAAS;CAC/C,OAAO;AACT;;;;;;AAOA,SAAS,qBAAqB,QAG5B;CACA,MAAM,aAAa,WAAW,KAAA,KAAa,SAAS,OAAO,IAAI,IAAI,OAAO,OAAO,KAAA;CACjF,MAAM,UAAU,WAAW,KAAA,KAAa,SAAS,OAAO,GAAG,IAAI,OAAO,MAAM,KAAA;CAC5E,OAAO;EACL,SAAS,eAAe,KAAA,IAAY,KAAA,IAAY;GAC9C,IAAI,YAAY,WAAW,EAAE,KAAK;GAClC,MAAM,YAAY,WAAW,IAAI,KAAK;GACtC,UAAU,YAAY,WAAW,QAAQ,KAAK;EAChD;EACA,OAAO,YAAY,KAAA,IAAY,KAAA,IAAY,YAAY,QAAQ,EAAE;CACnE;AACF;;;;;;AAOA,SAAS,qBACP,UACA,gBAC8B;CAI9B,IAAI,SAAS,WAAW,sBAAsB,OAAO,KAAA;CACrD,MAAM,QAAQ,eAAe,QAAQ,WAA6B,WAAW,KAAA,CAAS;CACtF,IAAI,MAAM,WAAW,wBAAwB,MAAM,OAAO,SAAS,SAAS,GAAG,GAC7E,OAAO;CAET,IAAI,MAAM,WAAW,wBAAwB,MAAM,OAAO,SAAS,QAAQ,GAAG,GAC5E,OAAO;CAET,IAAI,MAAM,WAAW,GAAG,OAAO;AAEjC;;AAqBA,eAAe,aACb,SACA,YACA,OACkC;CAClC,OAAO;EACL,QAAQ;GACN,YAAY,WAAW;GACvB,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;GAC1C,aAAa,GAAG,QAAQ,SAAS,GAAG,QAAQ,KAAK,YAAY,QAAQ;GACrE,WAAW,CAAC;GACZ,WAAW;GACX,eAAe;GACf,YAAY;GACZ,WAAW;GACX,eAAe,CAAC;EAClB;EACA,QAAQ;EACR,OAAO;EACP,QAAQ;EACR,QAAQ;GACN,OAAO,QAAQ;GACf,UAAU,MAAM,aAAa,QAAQ,UAAU,MAAM,SAAS;GAC9D,QAAQ,QAAQ,SAAS,CAAC,EAAA,CAAG,KAAK,UAAU;IAC1C,MAAM;IACN,MAAM,KAAK;IACX,aAAa,KAAK;IAClB,cAAc,qBAAqB,KAAK,UAAU;GACpD,EAAE;GACF,QAAQ,MAAM;GACd,YAAY,MAAM;GAClB,aAAa,QAAQ,eAAe;GACpC,QAAQ;GACR,GAAI,MAAM,kBAAkB,EAAE,kBAAkB,MAAM,gBAAgB,IAAI,CAAC;EAC7E;EACA,UAAU,WAAW;CACvB;AACF;;AAGA,eAAe,gBACb,SACA,OACkC;CAClC,MAAM,iBAAiB,CACrB,GAAI,MAAM,aAAa,CAAC;EAAE,MAAM;EAAU,SAAS,MAAM;CAAW,CAAC,IAAI,CAAC,GAC1E,GAAI,MAAM,iBAAiB,QAAQ,UAAU,MAAM,SAAS,CAC9D;CACA,MAAM,eAAe,QAAQ,SAAS,CAAC,EAAA,CAAG,KAAK,UAAU;EACvD,MAAM;EACN,UAAU;GACR,MAAM,KAAK;GACX,aAAa,KAAK;GAClB,YAAY,qBAAqB,KAAK,UAAU;EAClD;CACF,EAAE;CACF,OAAO;EACL,OAAO,QAAQ;EACf,UAAU;EACV,GAAI,YAAY,SAAS,IAAI,EAAE,OAAO,YAAY,IAAI,CAAC;EACvD,YAAY,MAAM;EAClB,aAAa,QAAQ,eAAe;EACpC,QAAQ;EACR,GAAI,MAAM,kBAAkB,EAAE,kBAAkB,MAAM,gBAAgB,IAAI,CAAC;CAC7E;AACF;;;;;;;;;;AAuBA,eAAe,gBACb,MACA,KACA,UACA,MACmH;CACnH,MAAM,EAAE,SAAS,YAAY,cAAc;CAC3C,MAAM,eAAe,IAAI,gBAAgB;CACzC,IAAI,kBAAkB;CACtB,MAAM,WAAW,aAAa,QAC1B,GAAG,WAAW,QAAQ,mBACtB,GAAG,WAAW,QAAQ;CAC1B,MAAM,eAAe,iBAAiB;EACpC,kBAAkB;EAClB,aAAa,MACX,IAAI,aACF,+BAA+B,SAAS,0BAA0B,WAAW,iBAAiB,KAC9F,cACF,CACF;CACF,GAAG,WAAW,gBAAgB;CAC9B,MAAM,sBAAsB;EAC1B,aAAa,MAAM,QAAQ,QAAQ,MAAM;CAC3C;CACA,IAAI,QAAQ,QAAQ;EAClB,IAAI,QAAQ,OAAO,SACjB,cAAc;OAEd,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;CAE1E;CACA,MAAM,gBAAgB;EACpB,aAAa,YAAY;EACzB,IAAI,QAAQ,QACV,QAAQ,OAAO,oBAAoB,SAAS,aAAa;CAE7D;CAEA,IAAI;CACJ,MAAM,UAAU,aAAa,QACzB;EACE,gBAAgB;EAChB,eAAe,UAAU;EACzB,0BAA0B;EAC1B,qBAAqB;EACrB,kBAAkB,oBAAoB,WAAW,UAAU;EAC3D,oBAAoB;EACpB,aAAa;EACb,GAAG,mBAAmB;CACxB,IACA;EACE,gBAAgB;EAChB,eAAe,UAAU;EACzB,QAAQ;EAIR,GAAG,mBAAmB;CACxB;CACJ,IAAI;EACF,WAAW,MAAM,UAAU,UAAU;GACnC,QAAQ;GACR;GACA,MAAM,KAAK,UAAU,IAAI;GACzB,QAAQ,aAAa;EACvB,CAAC;EACD,aAAa,YAAY;CAC3B,SAAS,OAAgB;EACvB,QAAQ;EACR,IAAI,QAAQ,QAAQ,SAClB,MAAM;EAER,IAAI,mBAAoB,iBAAiB,gBAAgB,MAAM,SAAS,gBACtE,MAAM,IAAI,SACR,+BAA+B,SAAS,0BAA0B,WAAW,iBAAiB,MACvF,WAAW,KAAK,EAAA,wBACI,WAAW,iBAAiB,+BACvD,WACA,EAAE,OAAO,MAAM,CACjB;EAOF,MAAM,IAAI,SACR,+BAA+B,SAAS,WAAW,WAAW,KAAK,EAAA,qDAEnE,aACA,EAAE,OAAO,MAAM,CACjB;CACF;CAEA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,UAAU,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;EACpD,QAAQ;EACR,MAAM,eAAe,kBAAkB,SAAS,QAAQ,IAAI,aAAa,CAAC;EAE1E,OAAO,iBAAiB,KAAA,IACpB;GAAE,QAAQ,SAAS;GAAQ;EAAQ,IACnC;GAAE,QAAQ,SAAS;GAAQ;GAAS;EAAa;CACvD;CACA,OAAO;EAAE;EAAU;CAAQ;AAC7B;;AAmBA,SAAS,uBAAuC;CAC9C,OAAO;EACL,WAAW;EACX,WAAW;EACX,aAAa;EACb,gBAAgB;EAChB,kBAAkB;EAClB,YAAY;EACZ,iBAAiB,CAAC;CACpB;AACF;AAEA,UAAU,UAAU,KAA6C;CAC/D,IAAI,IAAI,YAAY,GAAG;CACvB,MAAM;EACJ,MAAM;EACN,OAAO,IAAI;EACX,OAAO;GAAE,MAAM;GAAQ,MAAM,IAAI;EAAY;CAC/C;CACA,IAAI,YAAY;CAChB,IAAI,cAAc;AACpB;AAEA,UAAU,eAAe,KAA6C;CACpE,IAAI,IAAI,iBAAiB,GAAG;CAC5B,MAAM;EACJ,MAAM;EACN,OAAO,IAAI;EACX,OAAO;GAAE,MAAM;GAAa,MAAM,IAAI;EAAiB;CACzD;CACA,IAAI,iBAAiB;CACrB,IAAI,mBAAmB;AACzB;AAEA,UAAU,oBAAoB,KAA6C;CACzE,KAAK,MAAM,QAAQ,IAAI,iBAAiB;EACtC,MAAM,KAAK,KAAK,MAAM,WAAW;EACjC,MAAM,OAAO,KAAK,QAAQ;EAC1B,MAAM,OAAO,KAAK,aAAa;EAC/B,MAAM,QAAQ,IAAI;EAClB,IAAI,aAAa;EACjB,MAAM;GAAE,MAAM;GAAe;GAAO,WAAW;EAAY;EAC3D,MAAM;GAAE,MAAM;GAAmB;GAAO,IAAI,WAAW,EAAE;GAAG;GAAM,gBAAgB;EAAK;EACvF,MAAM;GACJ,MAAM;GACN;GACA,OAAO;IAAE,MAAM;IAAa,IAAI,WAAW,EAAE;IAAG;IAAM,WAAW;GAAK;EACxE;CACF;CACA,IAAI,gBAAgB,SAAS;AAC/B;AAEA,IAAa,qBAAb,cAA+G,WAAW;CAmB3F;CAlB7B,UAAsC,CAAC;CACvC;CACA;CAOA,gCAAiC,IAAI,IAAyE;CAC9G,wCAAyC,IAAI,IAA2D;CAMxG,gCAAiC,IAAI,IAA6C;CAElF,YAAY,MAAkD;EAC5D,MAAM;EADqB,KAAA,OAAA;EAE3B,KAAK,YAAY,KAAK,aAAa;EACnC,KAAK,qBAAqB,KAAK;CACjC;;;;;;;;CASA,aAAsB,UAAmC;EACvD,OAAO;GAAE,IAAI;GAAU,MAAM;EAAe;CAC9C;;;;;;;;;;;;;;;;;;CAmBA,oBAA6B,WAAwC;EACnE,OAAO,mBACL;GACE,MAAM;GACN,YAAY;GACZ,gBAAgB;IAAC;IAAkB;IAAc;IAAU;IAAW;GAAW;GACjF,SAAS;IAAE,gBAAgB;IAAK,YAAY;IAAoB,aAAa;GAAI;EACnF,GACA,8BACF;CACF;;CAGA,MAAc,YAAY,QAAmD;EAC3E,MAAM,EAAE,SAAS,oBAAoB,KAAK,KAAK,QAAQ;EACvD,IAAI;GACF,MAAM,WAAW,MAAM,KAAK,UAAU,GAAG,QAAQ,sBAAsB;IACrE,SAAS;KAAE,QAAQ;KAAoB,GAAG,mBAAmB;IAAE;IAC/D,QAAQ,UAAU,YAAY,QAAA,GAAyB;GACzD,CAAC;GACD,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,4BAA4B,SAAS,QAAQ;GAE/D,KAAK,UAAU,qBAAqB,MAAM,SAAS,KAAK,CAAC;GACzD,MAAM,iBAAiB,iBAAiB,KAAK,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;EAC7E,SAAS,OAAO;GACd,IAAI,QAAQ,SAAS,MAAM;GAK3B,KAAK,UAAU,MAAM,gBAAgB,eAAe,CAAC,CAAC,YAAY,KAAK,OAAO;EAChF;EACA,OAAO,KAAK;CACd;CAEA,MAAe,WACb,UACA,MACkC;EAClC,MAAM,UAAU,MAAM,KAAK,YAAY;EACvC,MAAM,UAAU,UAAoC;GAClD,MAAM,SAAS,mBAAmB,IAAI,MAAM,EAAE;GAC9C,OAAO;IACL;IACA,IAAI,MAAM;IACV,MAAM,GAAG,MAAM,KAAK;IAGpB,aAAa,sBAAsB,MAAM,IAAI,MAAM,aAAa;IAChE,iBAAiB,SAAU,CAAC,QAAQ,OAAO,IAAe,CAAC,MAAM;GACnE;EACF;EAGA,IAAI,MAAM,eAAe,MAAM,OAAO,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,aAAa;EAM5E,MAAM,SAAS,KAAK,KAAK,QAAQ,CAAC,CAAC,uBAAuB,QACtD,KAAA,IACA,MAAM,KAAK,kBAAkB;EAEjC,MAAM,UAAU,KAAK,KAAK,QAAQ,CAAC,CAAC;EACpC,MAAM,QAAQ,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,IACrD,IAAI,IAAI,QAAQ,QAAQ,OAAO,OAAO,OAAO,YAAY,OAAO,EAAE,CAAC,IACnE,KAAA;EAMJ,MAAM,YAAY,KAAK,KAAK,QAAQ,CAAC,CAAC;EACtC,OAAO,QACJ,QAAQ,UAAU,mBAAmB,MAAM,IAAI,MAAM,CAAC,CAAC,CACvD,QAAQ,UAAU;GACjB,MAAM,WAAW,YAAY,MAAM;GACnC,IAAI,OAAO,aAAa,WAAW,OAAO;GAC1C,OAAO,UAAU,KAAA,KAAa,MAAM,IAAI,MAAM,EAAE;EAClD,CAAC,CAAC,CACD,IAAI,MAAM,CAAC,CAIX,KAAK,aAAa;CACvB;CAEA,MAAe,aACb,UACA,OACA,QAC+B;EAC/B,MAAM,QACJ,KAAK,QAAQ,MAAM,MAAM,EAAE,OAAO,KAAK,MACtC,MAAM,KAAK,YAAY,MAAM,EAAA,CAAG,MAAM,MAAM,EAAE,OAAO,KAAK;EAE7D,MAAM,UAAU,cAAc;EAC9B,MAAM,SAAS,mBAAmB,IAAI,KAAK;EAC3C,OAAO;GACL;GACA,IAAI;GACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS;GACrC,aAAa,sBAAsB,OAAO,OAAO,aAAa;GAC9D,iBAAiB,SAAU,CAAC,QAAQ,OAAO,IAAe,CAAC,MAAM;GACjE,GAAI,QACA;IACE,SAAS,EAAE,eAAe,MAAM,cAAc;IAC9C,kBAAkB,KAAK,IAAI,MAAM,WAAW,2BAA2B;GACzE,IACA,CAAC;GAGL,GAAI,UACA,EACE,WAAW,EACT,SAAS,QAAQ,KAAK,YAAY;IAChC,IAAI,kBAAkB,MAAM;IAC5B,MAAM;GACR,EAAE,EACJ,EACF,IACA,CAAC;EACP;CACF;;CAGA,MAAc,eAAe,QAAkD;EAC7E,MAAM,aAAa,KAAK,KAAK,QAAQ;EAErC,OAAO;GACL,eAAe,UAFL,UAAW,MAAM,KAAK,KAAK,cAAc,UAAU;GAG7D,0BAA0B;GAC1B,qBAAqB;GACrB,GAAG,mBAAmB;EACxB;CACF;;;;;;;;CASA,MAAc,kBACZ,KACA,SAC+D;EAC/D,MAAM,WAAW,MAAM,KAAK,UAAU,KAAK;GACzC;GAEA,QAAQ,YAAY,QAAQ,iBAAiB;EAC/C,CAAC;EACD,IAAI,CAAC,SAAS,IAAI,OAAO,EAAE,QAAQ,SAAS,OAAO;EACnD,MAAM,SAAkB,MAAM,SAAS,KAAK;EAC5C,OAAO;GAAE,QAAQ,SAAS;GAAQ,GAAI,SAAS,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI,CAAC;EAAG;CACpF;;;;;;CAOA,MAAc,oBAAmE;EAC/E,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,KAAK,KAAK,cAAc,KAAK,KAAK,QAAQ,CAAC;EAC5D,QAAQ;GACN;EACF;EACA,MAAM,SAAS,KAAK,cAAc,IAAI,MAAM;EAC5C,IAAI,WAAW,KAAA,KAAa,KAAK,IAAI,IAAI,OAAO,KAAA,KAA4B,OAAO,OAAO;EAC1F,MAAM,WAAW,KAAK,sBAAsB,IAAI,MAAM;EACtD,IAAI,aAAa,KAAA,GAAW,OAAO;EACnC,MAAM,WAAW,KAAK,mBAAmB,MAAM,CAAC,CAC7C,MAAM,UAAU;GACf,KAAK,cAAc,IAAI,QAAQ;IAAE;IAAO,IAAI,KAAK,IAAI;GAAE,CAAC;GACxD,OAAO;EACT,CAAC,CAAC,CACD,cAAc;GACb,KAAK,sBAAsB,OAAO,MAAM;EAC1C,CAAC;EACH,KAAK,sBAAsB,IAAI,QAAQ,QAAQ;EAC/C,OAAO;CACT;;;;;;;;;;CAWA,MAAc,mBAAmB,QAA+D;EAC9F,IAAI;GACF,MAAM,aAAa,KAAK,KAAK,QAAQ;GACrC,MAAM,UAAU,MAAM,KAAK,eAAe,MAAM;GAChD,MAAM,OAAO,WAAW;GAExB,MAAM,UAAU,OAAO,UACpB,MAAM,KAAK,kBAAkB,GAAG,OAAO,QAAQ,OAAO,EAAA,CAAG;GAC5D,MAAM,SAAS,MAAM,QAAQ,eAAe;GAC5C,MAAM,UAAU,UAAU,SAAS,OAAO,GAAG,IAAI,OAAO,MAAM,KAAA;GAC9D,MAAM,QAAQ,YAAY,KAAA,IAAY,KAAA,IAAY,YAAY,QAAQ,EAAE;GACxE,MAAM,CAAC,cAAc,WAAW,MAAM,QAAQ,IAAI,CAChD,QAAQ,UAAU,KAAA,IACd,iCACA,sCAAsC,mBAAmB,KAAK,GAAG,GACrE,QAAQ,wBAAwB,CAClC,CAAC;GACD,MAAM,UAAU,gBAAgB,SAAS,aAAa,IAAI,IAAI,aAAa,OAAO,KAAA;GAClF,MAAM,cAAc,WAAW,SAAS,QAAQ,OAAO,IAAI,QAAQ,UAAU,KAAA;GAC7E,IAAI,YAAY,KAAA,KAAa,gBAAgB,KAAA,GAAW,OAAO,KAAA;GAC/D,IAAI;GACJ,IAAI,YAAY,KAAA,GAAW;IACzB,MAAM,SAAS,YAAY,QAAQ,MAAM;IACzC,IAAI,WAAW,KAAA,KAAa,6BAA6B,IAAI,MAAM,GAAG,SAAS,YAAY,QAAQ,MAAM;GAC3G,OACE,SAAS,YAAY,aAAa,MAAM;GAE1C,OAAO;IACL,YAAY,WAAW,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM,CAAC,EAAE;IAC7E,kBAAkB,YAAY,aAAa,gBAAgB,KAAK,MAAM,YAAY,aAAa,WAAW,KAAK;GACjH;EACF,QAAQ;GACN;EACF;CACF;;CAGA,wBAAgC,QAAoC;EAClE,MAAM,MAAM,KAAK,cAAc,IAAI,MAAM;EACzC,IAAI,QAAQ,KAAA,KAAa,KAAK,IAAI,IAAI,IAAI,MAAA,KAA6B,OAAO,KAAA;EAC9E,OAAO,IAAI,OAAO;CACpB;;CAGA,qBAA6B,QAAqC;EAChE,MAAM,MAAM,KAAK,cAAc,IAAI,MAAM;EACzC,IAAI,QAAQ,KAAA,KAAa,KAAK,IAAI,IAAI,IAAI,MAAA,KAA6B,OAAO,KAAA;EAC9E,OAAO,IAAI;CACb;CAEA,iBAAyB,QAAgB,QAAuB;EAC9D,KAAK,cAAc,IAAI,QAAQ;GAAE;GAAQ,IAAI,KAAK,IAAI;EAAE,CAAC;CAC3D;;;;;;;CAQA,gBAAwB,QAAqC;EAC3D,MAAM,SAAS,KAAK,KAAK,QAAQ,CAAC,CAAC;EACnC,IAAI,WAAW,SAAS,WAAW,UAAU,OAAO;EACpD,MAAM,SAAS,KAAK,qBAAqB,MAAM;EAC/C,IAAI,WAAW,KAAA,GAAW,OAAO,SAAS,QAAQ;EAClD,IAAI,KAAK,wBAAwB,MAAM,MAAM,gBAAgB;GAC3D,KAAK,iBAAiB,QAAQ,IAAI;GAClC,OAAO;EACT;EACA,OAAO;CACT;;;;;;;;;;;CAaA,MAAM,SAAS,QAAkD;EAE/D,MAAM,OADa,KAAK,KAAK,QACP,CAAC,CAAC;EACxB,MAAM,UAAU,MAAM,KAAK,eAAe,MAAM;EAChD,MAAM,WAAqB,CAAC;EAG5B,MAAM,iBAA4C,CAAC;EAEnD,MAAM,UAAU,OAAO,SAA+D;GACpF,IAAI;IACF,MAAM,EAAE,QAAQ,WAAW,MAAM,KAAK,kBAAkB,GAAG,OAAO,QAAQ,OAAO;IACjF,IAAI,WAAW,KAAA,GAAW;KACxB,SAAS,KAAK,GAAG,KAAK,SAAS,QAAQ;KACvC,eAAe,KAAK,MAAM;KAC1B;IACF;IACA,OAAO;GACT,SAAS,OAAgB;IACvB,SAAS,KAAK,GAAG,KAAK,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;IAClF,eAAe,KAAK,KAAA,CAAS;IAC7B;GACF;EACF;EAEA,MAAM,SAAiC,EAAE,SAAS;EAMlD,MAAM,EAAE,SAAS,UAAU,qBAAqB,MAD3B,QAAQ,eAAe,CACU;EACtD,IAAI,YAAY,KAAA,GAAW,OAAO,UAAU;EAC5C,MAAM,CAAC,OAAO,SAAS,gBAAgB,MAAM,QAAQ,IAAI;GACvD,QAAQ,sBAAsB;GAC9B,QAAQ,wBAAwB;GAChC,QAAQ,UAAU,KAAA,IACd,iCACA,sCAAsC,mBAAmB,KAAK,GAAG;EACvE,CAAC;EAGD,MAAM,SAAS,iBAAiB,KAAK;EACrC,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ;EAGzC,MAAM,SAAS,kBAAkB,OAAO;EACxC,IAAI,WAAW,KAAA,GAAW,OAAO,UAAU;EAK3C,MAAM,UAAU,iBAAiB,KAAA,KAAa,SAAS,aAAa,IAAI,IAAI,aAAa,OAAO,KAAA;EAChG,MAAM,cAAc,YAAY,KAAA,KAAa,SAAS,QAAQ,OAAO,IAAI,QAAQ,UAAU,KAAA;EAC3F,MAAM,SAAS,YAAY,SAAS,MAAM,KAAK,YAAY,aAAa,MAAM;EAC9E,IAAI,YAAY,KAAA,KAAa,WAAW,KAAA,GAAW;GACjD,MAAM,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM;GAC3E,OAAO,OAAO;IACZ,QAAQ,UAAU;IAClB,MAAM,MAAM,QAAQ,UAAU;IAC9B,QAAQ,YAAY,SAAS,MAAM,KAAK;IACxC,gBAAgB,MAAM,kBAAkB;IACxC,kBAAkB,eAAe,SAAS,gBAAgB;GAC5D;EACF;EAEA,MAAM,UAAU,qBAAqB,UAAU,cAAc;EAC7D,IAAI,YAAY,KAAA,GAAW,OAAO,UAAU;EAE5C,OAAO;CACT;;;;;;;;;CAUA,MAAM,oBAAoB,QAA6E;EACrG,IAAI;GACF,MAAM,aAAa,KAAK,KAAK,QAAQ;GACrC,MAAM,WAAW,MAAM,KAAK,UAAU,GAAG,WAAW,QAAQ,yBAAyB;IACnF,SAAS,MAAM,KAAK,eAAe,MAAM;IACzC,QAAQ,YAAY,QAAQ,iBAAiB;GAC/C,CAAC;GACD,IAAI,CAAC,SAAS,IAAI,OAAO,KAAA;GACzB,MAAM,SAAkB,MAAM,SAAS,KAAK;GAC5C,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,KAAA;GAC9B,MAAM,eAAe,SAAS,OAAO,YAAY,IAAI,OAAO,eAAe,KAAA;GAC3E,MAAM,WAAW,gBAAgB,SAAS,aAAa,QAAQ,IAAI,aAAa,WAAW,KAAA;GAC3F,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;GACnC,OAAO;IAAE,UAAU,SAAS,aAAa;IAAM,SAAS,YAAY,SAAS,OAAO,KAAK;GAAE;EAC7F,QAAQ;GACN;EACF;CACF;CAEA,OAAO,OAAO,SAAsD;EAClE,IAAI,QAAQ,MAAM,QAGhB,MAAM,IAAI,SAAS,wDAAwD,oBAAoB;EAEjG,MAAM,YAAY,QAAQ,SAAS,KAAK,eAAe;EAIvD,IAAI;EACJ,IAAI,WAAW;GAMb,IAAI,CAAC,mBAAmB,IAAI,QAAQ,KAAK,GACvC,MAAM,IAAI,SACR,uBAAuB,QAAQ,MAAM,4FAErC,qBACF;GAIF,MAAM,cAAc,KAAK,qBAAqB;GAC9C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,SACR,oEACA,qBACF;GAEF,aAAa,QAAQ,YAAY,UAAU,GAAG,CAAC,CAAC,MAAM,WAAW,OAAO,IAAI;EAC9E;EAEA,MAAM,aAAa,KAAK,KAAK,QAAQ;EAGrC,IAAI,SAAS,MAAM,KAAK,KAAK,cAAc,YAAY,QAAQ,KAAK;EAIpE,MAAM,WAAW,KAAK,QAAQ,MAAM,MAAM,EAAE,OAAO,QAAQ,KAAK,CAAC,EAAE,aAAA;EAEnE,MAAM,YAAY,KAAK,IACrB,QAAQ,aAAa,UACrB,UACA,2BACF;EAEA,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,cAAc,QAAQ;EACxC,MAAM,kBACJ,UAAU,WAAW,SAAS,WAAW,SAAS,MAAM,IAAI,SAAS,KAAA;EAEvE,MAAM,aAAa,CACjB,QAAQ,UAAU,IAClB,GAAG,QAAQ,SACR,QAAQ,MAAM,EAAE,SAAS,QAAQ,CAAC,CAClC,KAAK,MAAM,EAAE,QAAQ,IAAI,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CACnE,CAAC,CACE,OAAO,OAAO,CAAC,CACf,KAAK,MAAM;EAId,IAAI,WAAgC,KAAK,gBAAgB,MAAM;EAC/D,MAAM,YAAY,OAAO,WACvB,WAAW,QACP,aAAa,SAAS,YAAY;GAAE;GAAW;GAAiB;GAAY;EAAU,CAAC,IACvF,gBAAgB,SAAS;GAAE;GAAW;GAAiB;GAAY;EAAU,CAAC;EACpF,IAAI,OAAgC,MAAM,UAAU,QAAQ;EAS5D,MAAM,wBAAQ,IAAI,IAAY;EAC9B,MAAM,cAAmC;GAAE;GAAS;GAAY,WAAW,KAAK;EAAU;EAC1F,IAAI;EACJ,SAAS;GACP,MAAM,IAAI,MAAM;GAChB,MAAM,UAAU,MAAM,gBAAgB,aAAa,QAAQ,UAAU,IAAI;GACzE,IAAI,cAAc,SAAS;IACzB,YAAY;IACZ;GACF;GAKA,IACE,aAAa,YACV,uBAAuB,QAAQ,QAAQ,QAAQ,OAAO,GACzD;IACA,WAAW;IACX,KAAK,iBAAiB,QAAQ,IAAI;IAClC,OAAO,MAAM,UAAU,KAAK;IAC5B;GACF;GACA,MAAM,SAAS,KAAK,KAAK;GACzB,KACG,QAAQ,WAAW,OAAO,QAAQ,WAAW,QAC3C,WAAW,KAAA,KACX,QAAQ,QAAQ,YAAY,QAC5B,MAAM,OAAO,uBAChB;IACA,MAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,WAAW,MAAM,eAAe,sBAAsB,YAAY,QAAQ,KAAK;IACzH,IAAI,SAAS,KAAA,KAAa,CAAC,MAAM,IAAI,IAAI,GAAG;KAC1C,SAAS;KACT;IACF;GACF;GACA,MAAM,kBAAkB,QAAQ,QAAQ,QAAQ,SAAS,QAAQ,YAAY;EAC/E;EACA,IAAI,cAAc,KAAA,GAGhB,MAAM,IAAI,SAAS,yDAAyD,WAAW;EAEzF,MAAM,EAAE,UAAU,YAAY;EAC9B,IAAI,CAAC,SAAS,MAAM;GAClB,QAAQ;GACR,MAAM,IAAI,SAAS,8CAA8C,yBAAyB;EAC5F;EAGA,MAAM,SAAS,SAAS,KAAK,UAAU;EACvC,MAAM,UAAU,IAAI,YAAY;EAChC,IAAI,SAAS;EAUb,IAAI;EACJ,IAAI,YAAY;EAChB,MAAM,gBAAgB;GACpB,IAAI,cAAc,KAAA,GAAW,aAAa,SAAS;GACnD,YAAY,iBAAiB;IAC3B,YAAY;IACZ,OAAY,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;GAC5C,GAAG,WAAW,mBAAmB;EACnC;EACA,MAAM,kBAAkB;GACtB,IAAI,cAAc,KAAA,GAAW;IAC3B,aAAa,SAAS;IACtB,YAAY,KAAA;GACd;EACF;EAEA,MAAM,MAAM,qBAAqB;EACjC,MAAM,UAAU,UAAkC,YAAY,KAAK,UAAU,KAAK;EAClF,IAAI;GACF,IAAI,WAAW;GACf,SAAS;IACP,IAAI;IACJ,QAAQ;IACR,IAAI;KACF,OAAO,MAAM,OAAO,KAAK;IAC3B,SAAS,OAAgB;KAGvB,IAAI,QAAQ,QAAQ,SAAS,MAAM;KACnC,MAAM,IAAI,SACR,gCAAgC,WAAW,QAAQ,yBAAyB,WAAW,KAAK,EAAA,6CAE5F,aACA,EAAE,OAAO,MAAM,CACjB;IACF,UAAU;KACR,UAAU;IACZ;IACA,MAAM,EAAE,MAAM,UAAU;IACxB,IAAI,MAAM;KAIR,IAAI,WACF,MAAM,IAAI,SACR,gCAAgC,WAAW,QAAQ,gBAAgB,WAAW,oBAAoB,6EAErE,WAAW,oBAAoB,sCAC5D,SACF;KAEF,IAAI,OAAO,KAAK,GAId,KAAK,MAAM,SAAS,OAAO,qBAAqB,MAAM,CAAC,GAAG;MACxD,MAAM;MACN,IAAI,MAAM,SAAS,UAAU,WAAW;KAC1C;KAEF;IACF;IACA,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;IAChD,MAAM,QAAQ,OAAO,MAAM,IAAI;IAC/B,SAAS,MAAM,IAAI,KAAK;IACxB,KAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,SAAS,OAAO,qBAAqB,IAAI,CAAC;KAChD,KAAK,MAAM,SAAS,QAAQ;MAC1B,MAAM;MACN,IAAI,MAAM,SAAS,UAAU,WAAW;KAC1C;IACF;IACA,IAAI,UAAU;GAChB;GACA,IAAI,CAAC,UAAU;IAGb,OAAO,UAAU,GAAG;IACpB,OAAO,eAAe,GAAG;IACzB,IAAI,aAAa,UAAU,OAAO,oBAAoB,GAAG;IACzD,IAAI,CAAC,IAAI,YACP,MAAM,IAAI,SAAS,uEAAuE,gBAAgB;IAE5G,MAAM;KAAE,MAAM;KAAU,QAAQ,EAAE,MAAM,OAAO;IAAE;GACnD;EACF,UAAU;GACR,UAAU;GACV,QAAQ;GACR,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;GAC3C,OAAO,YAAY;EACrB;CACF;AACF;;;;;;;;;;;AAYA,SAAS,kBAAkB,QAAgB,SAAiB,cAAiC;CAC3F,IAAI;CACJ,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,OAAO;EAC1C,IAAI,SAAS,MAAM,KAAK,SAAS,OAAO,KAAK,GAC3C,eAAe,YAAY,OAAO,MAAM,IAAI;CAEhD,QAAQ,CAER;CACA,MAAM,SAAS,gBAAgB,QAAQ;CACvC,IAAI,WAAW,KAIb,OAAO,IAAI,SACT,+BAA+B,OAAO,wMAGtC,sBACA,EAAE,QAAQ,IAAI,CAChB;CAEF,OAAO,IAAI,SACT,0BAA0B,SAAS,WAAW,QAAQ,WAAW,KAAK,KAAK,OAAO,GAAG,IAAI,QAAQ,MAAM,GAAG,GAAG,KAC7G,WAAW,MAAM,eAAe,uBAChC;EACE;EACA,GAAI,iBAAiB,KAAA,KAAa,eAAe,KAAK,gBAAA,MAClD,EAAE,sBAAsB,aAAa,IACrC,CAAC;CACP,CACF;AACF;;;;;AAOA,SAAS,eAAe,KAAqB,OAA+B;CAC1E,MAAM,SAAwB,CAAC;CAC/B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAE7B,QAAQ,MAAM,MAAd;EACE,KAAK,cAAc;GACjB,OAAO,KAAK,GAAG,eAAe,GAAG,CAAC;GAClC,IAAI,IAAI,YAAY,GAAG;IACrB,IAAI,YAAY,IAAI;IACpB,OAAO,KAAK;KAAE,MAAM;KAAe,OAAO,IAAI;KAAW,WAAW;IAAO,CAAC;GAC9E;GACA,MAAM,QAAQ,YAAY,MAAM,IAAI,KAAK;GACzC,IAAI,eAAe;GACnB,IAAI,aAAa;GACjB,OAAO,KAAK;IAAE,MAAM;IAAc,OAAO,IAAI;IAAW,MAAM;GAAM,CAAC;GACrE;EACF;EACA,KAAK,mBAAmB;GACtB,OAAO,KAAK,GAAG,UAAU,GAAG,CAAC;GAC7B,IAAI,IAAI,iBAAiB,GAAG;IAC1B,IAAI,iBAAiB,IAAI;IACzB,OAAO,KAAK;KAAE,MAAM;KAAe,OAAO,IAAI;KAAgB,WAAW;IAAY,CAAC;GACxF;GACA,MAAM,QAAQ,YAAY,MAAM,IAAI,KAAK;GACzC,IAAI,oBAAoB;GACxB,OAAO,KAAK;IAAE,MAAM;IAAmB,OAAO,IAAI;IAAgB,MAAM;GAAM,CAAC;GAC/E;EACF;EACA,KAAK;GACH,OAAO,KAAK,GAAG,UAAU,GAAG,CAAC;GAC7B;EACF,KAAK;GACH,OAAO,KAAK,GAAG,eAAe,GAAG,CAAC;GAClC;EACF,KAAK,aAAa;GAChB,OAAO,KAAK,GAAG,UAAU,GAAG,GAAG,GAAG,eAAe,GAAG,CAAC;GACrD,MAAM,KAAK,YAAY,MAAM,UAAU,KAAK,WAAW;GACvD,MAAM,OAAO,YAAY,MAAM,QAAQ,KAAK;GAC5C,MAAM,OAAO,KAAK,UAAU,cAAc,MAAM,SAAS,MAAM,QAAQ,MAAM,SAAS,CAAC;GACvF,MAAM,QAAQ,IAAI;GAClB,IAAI,aAAa;GACjB,OAAO,KACL;IAAE,MAAM;IAAe;IAAO,WAAW;GAAY,GACrD;IAAE,MAAM;IAAmB;IAAO,IAAI,WAAW,EAAE;IAAG;IAAM,gBAAgB;GAAK,GACjF;IACE,MAAM;IACN;IACA,OAAO;KAAE,MAAM;KAAa,IAAI,WAAW,EAAE;KAAG;KAAM,WAAW;IAAK;GACxE,CACF;GACA;EACF;EACA,KAAK,UAAU;GACb,OAAO,KAAK,GAAG,UAAU,GAAG,GAAG,GAAG,eAAe,GAAG,CAAC;GACrD,MAAM,QAAQ,SAAS,MAAM,UAAU,IAAI,MAAM,aAAa,KAAA;GAC9D,IAAI,OAAO;IACT,MAAM,UAAU,SAAS,MAAM,iBAAiB,IAAI,MAAM,oBAAoB,KAAA;IAC9E,MAAM,aAAa,YAAY,MAAM,WAAW,KAAK;IACrD,MAAM,YAAY,YAAY,SAAS,eAAe,KAAK;IAC3D,MAAM,aAAa,YAAY,SAAS,gBAAgB,KAAK;IAE7D,MAAM,aAAyB;KAC7B,aACE,YAAY,SAAS,aAAa,KAAK,KAAK,IAAI,GAAG,aAAa,YAAY,UAAU;KACxF,cAAc,YAAY,MAAM,YAAY,KAAK;KACjD,iBAAiB;KACjB,kBAAkB;IACpB;IACA,OAAO,KAAK;KAAE,MAAM;KAAS,OAAO;IAAW,CAAC;GAClD;GACA,OAAO,KAAK;IAAE,MAAM;IAAU,QAAQ,gBAAgB,MAAM,YAAY;GAAE,CAAC;GAC3E;EACF;EACA,KAAK,SAAS;GAUZ,MAAM,MAAM,SAAS,MAAM,KAAK,IAAI,MAAM,QAAQ,KAAA;GAClD,MAAM,SAAS,SAAS,MAAM,KAAK,IAC9B,YAAY,MAAM,MAAM,OAAO,KAAK,KAAK,UAAU,MAAM,KAAK,IAC9D,YAAY,MAAM,KAAK,KAAK,YAAY,MAAM,OAAO,KAAK;GAC/D,MAAM,aAAa,MAAM,YAAY,IAAI,UAAU,IAAI,KAAA;GACvD,MAAM,cAAc,MAAM,aAAa,IAAI,WAAW,IAAI,KAAA;GAC1D,MAAM,kBAAkB,eAAe,KAAA,MAAc,eAAe,OAAO,cAAc;GACzF,MAAM,WAAW,wBAAwB,MAAM;GAG/C,IAAI,EAFc,gBAAgB,SAC5B,eAAe,KAAA,IAAY,kBAAmB,gBAAgB,SAAS,CAAC,YAE5E,MAAM,IAAI,SACR,8BAA8B,UAC9B,yBACA,eAAe,KAAA,IAAY,EAAE,QAAQ,WAAW,IAAI,KAAA,CACtD;GAEF,MAAM,IAAI,SACR,8BAA8B,UAC9B,UACA,eAAe,KAAA,IAAY,EAAE,QAAQ,WAAW,IAAI,KAAA,CACtD;EACF;CACF;CACA,OAAO;AACT;;;;;;AAOA,SAAS,kBAAkB,KAAqB,OAA+B;CAC7E,MAAM,SAAwB,CAAC;CAC/B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,MAAM,UAAU,MAAM;CACtB,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,GAAG;EAGnD,IAAI,MAAM,UAAU,KAAA,GAClB,OAAO,KAAK;GAAE,MAAM;GAAS,OAAO,eAAe,MAAM,KAAK;EAAE,CAAC;EAEnE,OAAO;CACT;CACA,MAAM,SAAS,SAAS,QAAQ,EAAE,IAAI,QAAQ,KAAK,CAAC;CACpD,MAAM,QAAQ,SAAS,OAAO,KAAK,IAAI,OAAO,QAAQ,CAAC;CAEvD,MAAM,iBAAiB,YAAY,MAAM,SAAS,KAAK,YAAY,MAAM,iBAAiB,KAAK;CAC/F,IAAI,mBAAmB,IAAI;EACzB,OAAO,KAAK,GAAG,UAAU,GAAG,CAAC;EAC7B,IAAI,IAAI,iBAAiB,GAAG;GAC1B,IAAI,iBAAiB,IAAI;GACzB,OAAO,KAAK;IAAE,MAAM;IAAe,OAAO,IAAI;IAAgB,WAAW;GAAY,CAAC;EACxF;EACA,IAAI,oBAAoB;EACxB,OAAO,KAAK;GAAE,MAAM;GAAmB,OAAO,IAAI;GAAgB,MAAM;EAAe,CAAC;CAC1F;CAEA,MAAM,eAAe,YAAY,MAAM,OAAO,KAAK;CACnD,IAAI,iBAAiB,IAAI;EACvB,OAAO,KAAK,GAAG,eAAe,GAAG,CAAC;EAClC,IAAI,IAAI,YAAY,GAAG;GACrB,IAAI,YAAY,IAAI;GACpB,OAAO,KAAK;IAAE,MAAM;IAAe,OAAO,IAAI;IAAW,WAAW;GAAO,CAAC;EAC9E;EACA,IAAI,eAAe;EACnB,IAAI,aAAa;EACjB,OAAO,KAAK;GAAE,MAAM;GAAc,OAAO,IAAI;GAAW,MAAM;EAAa,CAAC;CAC9E;CAEA,IAAI,MAAM,QAAQ,MAAM,UAAU,GAAG;EACnC,IAAI,aAAa;EACjB,KAAK,MAAM,WAAW,MAAM,YAAY;GACtC,IAAI,CAAC,SAAS,OAAO,GAAG;GACxB,MAAM,YAAY,YAAY,QAAQ,KAAK,KAAK;GAChD,IAAI,WAAW,IAAI,gBAAgB,MAAM,SAAS,KAAK,UAAU,SAAS;GAC1E,MAAM,KAAK,SAAS,QAAQ,QAAQ,IAAI,QAAQ,WAAW,KAAA;GAC3D,MAAM,KAAK,YAAY,QAAQ,EAAE;GACjC,MAAM,OAAO,OAAO,KAAA,IAAY,KAAA,IAAY,YAAY,GAAG,IAAI;GAC/D,MAAM,WAAW,OAAO,KAAA,IACpB,KAAA,IACC,YAAY,GAAG,SAAS,MAAM,GAAG,cAAc,KAAA,IAAY,KAAK,KAAK,UAAU,GAAG,SAAS;GAChG,IAAI,CAAC,UAAU;IACb,WAAW;KACT,OAAO;KACP,MAAM,QAAQ;KACd,WAAW,YAAY;IACzB;IACA,IAAI,OAAO,KAAA,GAAW,SAAS,KAAK;IACpC,IAAI,gBAAgB,KAAK,QAAQ;GACnC,OAAO;IACL,IAAI,OAAO,KAAA,KAAa,SAAS,OAAO,KAAA,GAAW,SAAS,KAAK;IACjE,IAAI,SAAS,KAAA,KAAa,SAAS,SAAS,IAAI,SAAS,OAAO;IAChE,IAAI,aAAa,KAAA,GAAW,SAAS,aAAa;GACpD;EACF;CACF;CAEA,IAAI,OAAO,kBAAkB,KAAA,KAAa,OAAO,kBAAkB,MAAM;EACvE,OAAO,KAAK,GAAG,UAAU,GAAG,GAAG,GAAG,eAAe,GAAG,GAAG,GAAG,oBAAoB,GAAG,CAAC;EAClF,IAAI,MAAM,UAAU,KAAA,GAClB,OAAO,KAAK;GAAE,MAAM;GAAS,OAAO,eAAe,MAAM,KAAK;EAAE,CAAC;EAEnE,OAAO,KAAK;GAAE,MAAM;GAAU,QAAQ,gBAAgB,OAAO,aAAa;EAAE,CAAC;CAC/E;CACA,OAAO;AACT;;AAGA,SAAS,YAAY,KAAqB,UAA+B,OAA+B;CACtG,OAAO,aAAa,WAAW,kBAAkB,KAAK,KAAK,IAAI,eAAe,KAAK,KAAK;AAC1F;;;;;;;;;AAWA,SAAS,kBAAkB,OAAkC,MAAM,KAAK,IAAI,GAAuB;CACjG,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM,OAAO,KAAA;CAClD,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,YAAY,IAAI,OAAO,KAAA;CAC3B,MAAM,UAAU,OAAO,OAAO;CAC9B,IAAI,OAAO,SAAS,OAAO,KAAK,WAAW,GAAG;EAC5C,MAAM,KAAK,UAAU;EACrB,OAAO,OAAO,SAAS,EAAE,IAAI,KAAK,MAAM,EAAE,IAAI,KAAA;CAChD;CACA,MAAM,OAAO,KAAK,MAAM,OAAO;CAC/B,IAAI,CAAC,OAAO,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,GAAG,OAAO,GAAG;AAExD;;;;;;;AAQA,SAAS,gBAAgB,QAA+B;CACtD,IAAI,WAAW,gBAAgB,WAAW,cAAc,OAAO,EAAE,MAAM,aAAa;CACpF,IACE,WAAW,YACX,WAAW,gBACX,WAAW,gBACX,WAAW,qBAEX,OAAO,EAAE,MAAM,aAAa;CAE9B,OAAO,EAAE,MAAM,OAAO;AACxB;;;;;;;AAQA,SAAS,uBAAuB,QAAgB,SAA0B;CACxE,IAAI,WAAW,KAAK,OAAO;CAC3B,MAAM,QAAQ,QAAQ,YAAY;CAClC,IAAI,MAAM,SAAS,kBAAkB,GAAG,OAAO;CAC/C,IAAI,MAAM,SAAS,SAAS,KAAK,MAAM,SAAS,YAAY,GAAG,OAAO;CACtE,IAAI,MAAM,SAAS,8BAA8B,GAAG,OAAO;CAC3D,IAAI,MAAM,SAAS,2BAA2B,GAAG,OAAO;CACxD,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,OAAO;EAC1C,IAAI,SAAS,MAAM,GAAG;GACpB,MAAM,QAAQ,SAAS,OAAO,KAAK,IAAI,OAAO,QAAQ;GAEtD,KADa,YAAY,MAAM,IAAI,KAAK,YAAY,MAAM,IAAI,EAAA,EACpD,YAAY,MAAM,oBAAoB,OAAO;GACvD,MAAM,UAAU,YAAY,MAAM,OAAO,KAAK;GAC9C,IAAI,QAAQ,YAAY,CAAC,CAAC,SAAS,SAAS,KAAK,QAAQ,YAAY,CAAC,CAAC,SAAS,YAAY,GAAG,OAAO;EACxG;CACF,QAAQ,CAER;CACA,OAAO;AACT;;AAGA,SAAS,eAAe,OAA4B;CAClD,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;CAC1C,MAAM,eAAe,YAAY,OAAO,aAAa,KAAK;CAC1D,MAAM,eAAe,YAAY,OAAO,iBAAiB,KAAK;CAC9D,MAAM,cAAc,YAAY,OAAO,YAAY;CACnD,MAAM,gBAAgB,SAAS,OAAO,qBAAqB,IAAI,OAAO,wBAAwB,KAAA;CAC9F,MAAM,YAAY,YAAY,eAAe,aAAa,KAAK;CAC/D,MAAM,aAAa,YAAY,eAAe,2BAA2B,KAAK;CAE9E,MAAM,kBAAkB,aADE,SAAS,OAAO,yBAAyB,IAAI,OAAO,4BAA4B,KAAA,EAAA,EACnD,gBAAgB;CACvE,MAAM,WAAuB;EAC3B,aAAa,KAAK,IAAI,GAAG,eAAe,YAAY,UAAU;EAC9D;EACA,iBAAiB;CACnB;CACA,IAAI,aAAa,GAAG,SAAS,mBAAmB;CAChD,IAAI,oBAAoB,KAAA,GAAW,SAAS,kBAAkB;CAC9D,IAAI,gBAAgB,KAAA,GAAW,SAAS,cAAc;CACtD,OAAO;AACT;;;ACn4EA,MAAa,qBAA8E;CACzF,IAAI;EACF,OAAO;EACP,cAAc;EACd,kBAAkB;EAClB,aAAa;EACb,wBAAwB;EACxB,eAAe;EACf,gBAAgB;EAChB,cAAc;EACd,mBACE;EACF,2BACE;EACF,gBACE;EACF,UAAU;EACV,kBAAkB;EAClB,aAAa;EACb,cAAc;EACd,UAAU;EACV,YAAY;EACZ,eAAe;EACf,aAAa;EACb,SAAS;EACT,eAAe;EACf,cAAc;EACd,YAAY;EACZ,eAAe;EACf,iBAAiB;EACjB,aAAa;EACb,iBAAiB;EACjB,QAAQ;EACR,WAAW;EACX,WACE;CAEJ;CACA,IAAI;EACF,OAAO;EACP,cAAc;EACd,kBAAkB;EAClB,aAAa;EACb,wBAAwB;EACxB,eAAe;EACf,gBAAgB;EAChB,cAAc;EACd,mBACE;EACF,2BACE;EACF,gBACE;EACF,UAAU;EACV,kBAAkB;EAClB,aAAa;EACb,cAAc;EACd,UAAU;EACV,YAAY;EACZ,eAAe;EACf,aAAa;EACb,SAAS;EACT,eAAe;EACf,cAAc;EACd,YAAY;EACZ,eAAe;EACf,iBAAiB;EACjB,aAAa;EACb,iBAAiB;EACjB,QAAQ;EACR,WAAW;EACX,WACE;CAGJ;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,kBACd,UACA,MAAoD,QAAQ,KAClD;CACV,IAAI,aAAa,QAAQ,aAAa,MAAM,OAAO;CAGnD,MAFY,IAAI,UAAU,IAAI,QAAQ,GAAA,CACtB,YAAY,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,QACvC,MAAM,OAAO;CACzB,OAAO;AACT;;AAGA,SAAgB,YAAY,QAAkB,KAAoC;CAChF,OAAO,mBAAmB,OAAO,CAAC,QAAQ,mBAAmB,GAAG,QAAQ;AAC1E;;;;ACtGA,SAAS,MAAM,OAAuB;CACpC,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC5B;;AAGA,SAAS,WAAW,OAAuB;CACzC,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC5B;;AAGA,SAAS,cAAc,OAAuB;CAC5C,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;CACrD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;CACrD,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ,IAAA,CAAK,QAAQ,CAAC,EAAE;CACrD,OAAO,OAAO,KAAK;AACrB;;;;;;AAOA,SAAS,gBAAgB,OAAuB;CAC9C,OAAO,OAAO,OAAO,MAAM,QAAQ,CAAC,CAAC,CAAC;AACxC;;AAGA,SAAS,WAAW,IAAoB;CACtC,IAAI,MAAM,GAAG,OAAO;CACpB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,eAAe;AACrC;;;;;AAMA,SAAS,IAAI,MAAc,KAAqB;CAC9C,IAAI,OAAO,GAAG,OAAO;CACrB,MAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,OAAO,GAAG,CAAC;CACjD,MAAM,SAAS,KAAK,MAAM,QAAQ,EAAE;CACpC,OAAO,IAAI,OAAO,MAAM,IAAI,IAAI,OAAO,KAAK,MAAM;AACpD;;AAOA,SAAS,UAAU,OAAgC,QAA0B;CAC3E,IAAI,MAAM,SAAS,sBAAsB,OAAO,YAAY,QAAQ,wBAAwB;CAC5F,IAAI,MAAM,gBAAgB,GACxB,OAAO,YAAY,QAAQ,eAAe,CAAC,CAAC,QAAQ,UAAU,WAAW,MAAM,aAAa,CAAC;CAE/F,IAAI,MAAM,SAAS,cAAc,OAAO,YAAY,QAAQ,gBAAgB;CAC5E,OAAO;AACT;;AAGA,SAAS,aAAa,QAAgC,QAAkB,OAAwB;CAC9F,MAAM,QAAkB,CAAC;CACzB,MAAM,UAAU,OAAO,UAAU,KAAK,OAAO,QAAQ,YAAY,OAAO,QAAQ,KAAK,KAAK;CAE1F,MAAM,KACJ,SAAS,YAAY,QAAQ,OAAO,CAAC,CAAC,QAAQ,aAAa,OAAO,GAClE,EACF;CAIA,IAAI,OAAO,YAAY,eACrB,MAAM,KAAK,YAAY,QAAQ,mBAAmB,GAAG,EAAE;MAClD,IAAI,OAAO,YAAY,uBAC5B,MAAM,KAAK,YAAY,QAAQ,2BAA2B,GAAG,EAAE;MAC1D,IAAI,OAAO,YAAY,WAC5B,MAAM,KAAK,YAAY,QAAQ,gBAAgB,GAAG,EAAE;CAGtD,IAAI,OAAO,QAAQ,OAAO,KAAK,SAAS,IAAI;EAC1C,MAAM,IAAI,OAAO;EACjB,MAAM,SAAS,EAAE,WAAW,MAAM,EAAE,WAAW,WAAW,KAAK,EAAE,OAAO,KAAK;EAC7E,MAAM,SAAS,EAAE,mBAAmB,IAChC,YAAY,QAAQ,kBAAkB,CAAC,CAAC,QAAQ,UAAU,IAAI,KAAK,EAAE,gBAAgB,CAAC,CAAC,mBAAmB,CAAC,IAC3G;EACJ,MAAM,KAAK,YAAY,QAAQ,UAAU,CAAC,CACvC,QAAQ,UAAU,EAAE,IAAI,CAAC,CACzB,QAAQ,YAAY,MAAM,CAAC,CAC3B,QAAQ,YAAY,MAAM,GAAG,EAAE;CACpC;CAEA,IAAI,OAAO,OAAO;EAChB,MAAM,IAAI,OAAO;EACjB,MAAM,KACJ,YAAY,QAAQ,aAAa,GACjC,YAAY,QAAQ,cAAc,CAAC,CAChC,QAAQ,OAAO,OAAO,EAAE,cAAc,CAAC,CAAC,CACxC,QAAQ,OAAO,OAAO,EAAE,WAAW,CAAC,CAAC,CACrC,QAAQ,OAAO,gBAAgB,EAAE,WAAW,CAAC,GAChD,YAAY,QAAQ,UAAU,CAAC,CAC5B,QAAQ,WAAW,MAAM,EAAE,SAAS,CAAC,CAAC,CACtC,QAAQ,aAAa,WAAW,EAAE,YAAY,CAAC,GAClD,YAAY,QAAQ,YAAY,CAAC,CAC9B,QAAQ,QAAQ,cAAc,EAAE,aAAa,CAAC,CAAC,CAC/C,QAAQ,SAAS,cAAc,EAAE,cAAc,CAAC,GACnD,EACF;CACF;CAEA,IAAI,OAAO,SAAS;EAClB,MAAM,IAAI,OAAO;EACjB,MAAM,eAAe,EAAE,iBAAiB,EAAE;EAC1C,MAAM,aAAa,EAAE,oBAAoB,SAAS,EAAE,sBAAsB,SAAS,eAAe;EAClG,MAAM,KACJ,YAAY,QAAQ,eAAe,GACnC,YAAY,QAAQ,aAAa,CAAC,CAC/B,QAAQ,aAAc,EAAE,oBAAoB,QAAQ,MAAM,WAAW,EAAE,cAAc,CAAE,CAAC,CACxF,QAAQ,eAAgB,EAAE,sBAAsB,QAAQ,MAAM,WAAW,EAAE,gBAAgB,CAAE,CAAC,CAC9F,QAAQ,UAAW,EAAE,iBAAiB,QAAQ,MAAM,WAAW,EAAE,WAAW,CAAE,GACjF,GAAI,aAAa,CAAC,YAAY,QAAQ,SAAS,CAAC,CAC7C,QAAQ,SAAS,IAAI,EAAE,gBAAgB,YAAY,CAAC,CAAC,CACrD,QAAQ,UAAW,EAAE,iBAAiB,eAAgB,IAAA,CAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAC9E,EACF;EAGA,MAAM,cAAwB,CAAC;EAC/B,IAAI,EAAE,aAAa,KAAA,GACjB,YAAY,KACV,YAAY,QAAQ,cAAc,CAAC,CAChC,QAAQ,UAAU,WAAW,EAAE,SAAS,IAAI,CAAC,CAAC,CAC9C,QAAQ,SAAS,WAAW,EAAE,SAAS,GAAG,CAAC,CAAC,CAC5C,QAAQ,UAAU,EAAE,SAAS,WAAW,YAAY,QAAQ,iBAAiB,IAAI,EAAE,GACtF,YAAY,QAAQ,eAAe,CAAC,CACjC,QAAQ,SAAS,IAAI,EAAE,SAAS,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CACtD,QAAQ,UAAU,WAAW,EAAE,SAAS,OAAO,CAAC,CACrD;EAEF,IAAI,EAAE,WAAW,KAAA,GACf,YAAY,KACV,YAAY,QAAQ,YAAY,CAAC,CAC9B,QAAQ,UAAU,WAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAC5C,QAAQ,SAAS,WAAW,EAAE,OAAO,GAAG,CAAC,CAAC,CAC1C,QAAQ,UAAU,EAAE,OAAO,WAAW,YAAY,QAAQ,iBAAiB,IAAI,EAAE,GACpF,YAAY,QAAQ,eAAe,CAAC,CACjC,QAAQ,SAAS,IAAI,EAAE,OAAO,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,CAClD,QAAQ,UAAU,WAAW,EAAE,OAAO,OAAO,CAAC,CACnD;EAEF,IAAI,YAAY,SAAS,GAAG,MAAM,KAAK,YAAY,QAAQ,eAAe,GAAG,GAAG,aAAa,EAAE;CACjG;CAEA,IAAI,OAAO,SAAS,SAAS,GAC3B,MAAM,KAAK,YAAY,QAAQ,iBAAiB,CAAC,CAAC,QAAQ,UAAU,OAAO,SAAS,KAAK,IAAI,CAAC,GAAG,EAAE;CAErG,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,SAAS,CAAC,OAAO,SAC9C,MAAM,KAAK,YAAY,QAAQ,QAAQ,GAAG,EAAE;CAG9C,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,QAAQ;AAClC;;AAGA,SAAgB,kBACd,MACmB;CACnB,MAAM,EAAE,YAAY;CACpB,OAAO;EACL,MAAM;EACN,aAAa;EACb,OAAO,EAAE,MAAM,WAAW;EAC1B,SAAS,YAAY;GACnB,MAAM,SAAmB,KAAK,YAAY,KAAK;GAC/C,IAAI;IACF,IAAI,KAAK,YAAY,KAAA,GAAW;KAC9B,MAAM,EAAE,aAAa,MAAM,KAAK,QAAQ;KASxC,OAAO;MAAE,MAAM;MAAW,MART,SAAS,KAAK,UAAU;OACvC,MAAM,SAAS,GAAG,MAAM,SAAS,YAAY,QAAQ,aAAa,IAAI,KAAK,UAAU,OAAO,MAAM;OAClG,MAAM,QAAQ,YAAY,QAAQ,cAAc,CAAC,CAC9C,QAAQ,WAAW,MAAM,KAAK,CAAC,CAC/B,QAAQ,YAAY,MAAM;OAC7B,IAAI,CAAC,MAAM,YAAY,OAAO,GAAG,MAAM,MAAM,YAAY,QAAQ,cAAc;OAC/E,OAAO,aAAa,MAAM,QAAQ,QAAQ,KAAK;MACjD,CACuC,CAAC,CAAC,KAAK,OAAO,YAAY,QAAQ,kBAAkB,EAAE,KAAK;KAAE;IACtG;IAEA,OAAO;KAAE,MAAM;KAAW,MAAM,aAAa,MADxB,QAAQ,SAAS,GACe,MAAM;IAAE;GAC/D,SAAS,OAAgB;IACvB,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IACrE,OAAO;KACL,MAAM;KACN,MAAM,YAAY,QAAQ,WAAW,CAAC,CAAC,QAAQ,aAAa,OAAO;IACrE;GACF;EACF;CACF;AACF;;AAGA,SAAgB,cACd,KACA,MACM;CACN,IAAI,SAAS,SAAS,kBAAkB,IAAI,CAAC;AAC/C;;;;AC9OA,MAAa,iBAAiB;;AAG9B,MAAa,iBAAiB;;AAG9B,MAAa,mBAAmB;;;;;;;;;;;;;AA4BhC,SAAgB,sBAAsB,QAAmC;CACvE,MAAM,UAAU,UAAyB;EACvC,MAAM,IAAI,UAAU,GAAG,OAAO,WAAW,OAAO;CAClD;CACA,MAAM,UAAU,OAAgB,UAC9B,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAC/D,QACA,OAAO,KAAK;CAClB,MAAM,eAAe,QAAiC,KAAa,UACjE,OAAO,OAAO,SAAS,WAAW,OAAO,OAAiB,OAAO,KAAK;CACxE,MAAM,eAAe,QAAiC,KAAa,UACjE,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,OAAO,IAAc,IACpE,OAAO,OACP,OAAO,KAAK;CAClB,MAAM,gBAAgB,QAAiC,KAAa,UAClE,OAAO,OAAO,SAAS,YAAY,OAAO,OAAkB,OAAO,KAAK;CAC1E,OAAO;EAAE;EAAQ;EAAQ;EAAa;EAAa;CAAa;AAClE;;;;;;;;AASA,SAAgB,qBACd,UACA,QACA,YACA,QACsB;CACtB,OAAO;EACL,IAAI,GAAG,eAAe,GAAG;EACzB,SAAS;EACT,WAAW;EACX;EACA,YAAY,EAAE,MAAM,SAAS;EAC7B,YAAY,CAAC;EACb,QAAQ;GACN,MAAM;GACN;GACA;EACF;CACF;AACF;;;;ACzCA,MAAa,uBAAuB;;AAGpC,MAAa,wBAAwB;;;;;AAMrC,MAAM,EAAE,QAAA,UAAQ,QAAA,UAAQ,aAAA,eAAa,aAAa,iBAChD,sBAAsB,4BAA4B;;;;;;;;;;AAWpD,SAAS,YACP,OACA,OAC+E;CAC/E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,MAAM,SAASC,SAAO,OAAO,KAAK;CAClC,OAAO;EACL,MAAM,YAAY,QAAQ,QAAQ,GAAG,MAAM,MAAM;EACjD,KAAK,YAAY,QAAQ,OAAO,GAAG,MAAM,KAAK;EAC9C,UAAU,aAAa,QAAQ,YAAY,GAAG,MAAM,UAAU;EAC9D,SAAS,YAAY,QAAQ,WAAW,GAAG,MAAM,SAAS;CAC5D;AACF;;;;;;AAOA,SAAS,iBAAiB,OAAwC;CAChE,MAAM,SAASA,SAAO,OAAO,QAAQ;CACrC,MAAM,WAAW,OAAO;CACxB,IAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,MAAM,UAAU,OAAO,UAAU,QAAQ,GAAG,SAAO,UAAU;CACtG,MAAM,SAAiC,EAAY,SAAqB;CAExE,IAAI,OAAO,YAAY,KAAA,GAAW;EAChC,MAAM,UAAU,OAAO;EAIvB,IAAI,YAAY,iBAAiB,YAAY,yBAAyB,YAAY,WAChF,OAAO,UAAU;OAEjB,SAAO,SAAS;CAEpB;CAEA,IAAI,OAAO,YAAY,KAAA,GAAW;EAChC,MAAM,UAAUA,SAAO,OAAO,SAAS,SAAS;EAChD,OAAO,UAAU;GACf,IAAIC,cAAY,SAAS,MAAM,YAAY;GAC3C,MAAMA,cAAY,SAAS,QAAQ,cAAc;GACjD,UAAUA,cAAY,SAAS,YAAY,kBAAkB;EAC/D;CACF;CAEA,IAAI,OAAO,UAAU,KAAA,GAAW;EAC9B,MAAM,QAAQD,SAAO,OAAO,OAAO,OAAO;EAC1C,OAAO,QAAQ;GACb,YAAY,YAAY,OAAO,cAAc,kBAAkB;GAC/D,WAAW,YAAY,OAAO,aAAa,iBAAiB;GAC5D,aAAa,YAAY,OAAO,eAAe,mBAAmB;GAClE,gBAAgB,YAAY,OAAO,kBAAkB,sBAAsB;GAC3E,aAAa,YAAY,OAAO,eAAe,mBAAmB;GAClE,eAAe,YAAY,OAAO,iBAAiB,qBAAqB;GACxE,gBAAgB,YAAY,OAAO,kBAAkB,sBAAsB;GAC3E,cAAc,YAAY,OAAO,gBAAgB,oBAAoB;GACrE,aAAaC,cAAY,OAAO,eAAe,mBAAmB;EACpE;CACF;CAEA,IAAI,OAAO,YAAY,KAAA,GAAW;EAChC,MAAM,UAAUD,SAAO,OAAO,SAAS,SAAS;EAChD,MAAM,SAA6B;GACjC,gBAAgB,YAAY,SAAS,kBAAkB,wBAAwB;GAC/E,kBAAkB,YAAY,SAAS,oBAAoB,0BAA0B;GACrF,aAAa,YAAY,SAAS,eAAe,qBAAqB;EACxE;EAQA,IAAI,QAAQ,oBAAoB,KAAA,GAC9B,OAAO,kBAAkB,aAAa,SAAS,mBAAmB,yBAAyB;EAE7F,KAAK,MAAM,QAAQ,CAAC,qBAAqB,cAAc,GACrD,IAAI,QAAQ,UAAU,KAAA,GAAW,OAAO,QAAQ,aAAa,SAAS,MAAM,WAAW,MAAM;EAK/F,MAAM,WAAW,YAAY,QAAQ,UAAU,kBAAkB;EACjE,MAAM,SAAS,YAAY,QAAQ,QAAQ,gBAAgB;EAC3D,IAAI,aAAa,KAAA,GAAW,OAAO,WAAW;EAC9C,IAAI,WAAW,KAAA,GAAW,OAAO,SAAS;EAC1C,OAAO,UAAU;CACnB;CAEA,IAAI,OAAO,SAAS,KAAA,GAAW;EAC7B,MAAM,OAAOA,SAAO,OAAO,MAAM,MAAM;EACvC,MAAM,UAAU,KAAK;EACrB,IAAI,YAAY,SAAS,OAAO,YAAY,YAAY,CAAC,OAAO,SAAS,OAAO,IAAI,SAAO,qBAAqB;EAChH,OAAO,OAAO;GACZ,QAAQC,cAAY,MAAM,UAAU,aAAa;GACjD,MAAMA,cAAY,MAAM,QAAQ,WAAW;GAC3C,QAAQA,cAAY,MAAM,UAAU,aAAa;GACjD,gBAAgB;GAChB,kBAAkB,YAAY,MAAM,oBAAoB,uBAAuB;EACjF;CACF;CAEA,OAAO;AACT;;AAGA,SAAS,kBAAkB,OAAyC;CAClE,MAAM,SAASD,SAAO,OAAO,SAAS;CACtC,OAAO;EACL,IAAIC,cAAY,QAAQ,MAAM,YAAY;EAC1C,OAAOA,cAAY,QAAQ,SAAS,eAAe;EACnD,YAAY,aAAa,QAAQ,cAAc,oBAAoB;EACnE,QAAQ,aAAa,QAAQ,UAAU,gBAAgB;EACvD,MAAMA,cAAY,QAAQ,QAAQ,cAAc;EAChD,eAAe,YAAY,QAAQ,iBAAiB,uBAAuB;EAC3E,QAAQ,iBAAiB,OAAO,MAAM;CACxC;AACF;;AAGA,SAAS,oBAAoB,OAA2C;CAEtE,MAAM,WADSD,SAAO,OAAO,QACP,CAAC,CAAC;CACxB,IAAI,MAAM,QAAQ,QAAQ,GACxB,OAAO,EAAE,UAAU,SAAS,IAAI,iBAAiB,EAAE;CAErD,OAAOE,SAAO,UAAU;AAC1B;;;;;;AAOA,MAAa,oBAA6D,EACxE,OAAO,oBACT;;AAgBA,MAAa,0BAA0B;CACrC,SAAS;CACT,MAAM;CACN,SAAS,CAAC;CAKV,OAAO;EAAE,UAAU,CAAC;EAAG,QAAQ,CAAC;EAAG,SAAS,CAAC;CAAE;CAC/C,aAAa,CAjBb,qBACE,uBACA,UACA,GAAG,qBAAqB,6BACxB,iBAaY,CAAuB;AACvC;;AAkCA,MAAa,kBAAkB;;;;;;AAO/B,MAAM,EACJ,QAAQ,eACR,aAAa,kBACX,sBAAsB,4BAA4B;;AAGtD,SAAS,kBAAkB,OAAyC;CAClE,MAAM,SAAS,cAAc,OAAO,OAAO;CAC3C,MAAM,QAAiC;EACrC,IAAI,cAAc,QAAQ,MAAM,UAAU;EAC1C,MAAM,cAAc,QAAQ,QAAQ,YAAY;CAClD;CAGA,IAAI,OAAO,SAAS,KAAA,GAClB,MAAM,OAAO,cAAc,QAAQ,QAAQ,YAAY;CAEzD,OAAO;AACT;;AAGA,SAAS,aAAa,OAAoC;CAExD,MAAM,SADS,cAAc,OAAO,QAChB,CAAC,CAAC;CACtB,IAAI,MAAM,QAAQ,MAAM,GACtB,OAAO,EAAE,QAAQ,OAAO,IAAI,iBAAiB,EAAE;CAEjD,MAAM,IAAI,UAAU,2CAA2C;AACjE;;;;;AAWA,MAAa,oBACX,qBACE,iBACA,UACA,GAAG,qBAAqB,sBACxB,EAZF,OAAO,aAYL,CACF;;AAgFF,MAAa,kBAAkB;;;;;AAM/B,MAAM,EACJ,QAAQ,aACR,QAAQ,aACR,aAAa,aACb,aAAa,aACb,cAAc,iBACZ,sBAAsB,4BAA4B;;AAGtD,SAAS,WAAW,QAAiC,OAAsC;CACzF,MAAM,QAA+B;EACnC,WAAW,YAAY,QAAQ,aAAa,GAAG,MAAM,WAAW;EAChE,YAAY,YAAY,QAAQ,cAAc,GAAG,MAAM,YAAY;EACnE,eAAe,YAAY,QAAQ,iBAAiB,GAAG,MAAM,eAAe;CAC9E;CAIA,IAAI,OAAO,mBAAmB,KAAA,GAC5B,MAAM,iBAAiB,YAAY,QAAQ,kBAAkB,GAAG,MAAM,gBAAgB;CAExF,OAAO;AACT;;AAGA,SAAS,gBAAgB,OAAuC;CAC9D,MAAM,SAAS,YAAY,OAAO,OAAO;CACzC,MAAM,QAA+B;EACnC,IAAI,YAAY,QAAQ,MAAM,UAAU;EACxC,MAAM,YAAY,QAAQ,QAAQ,YAAY;EAC9C,GAAG,WAAW,QAAQ,OAAO;CAC/B;CACA,IAAI,OAAO,SAAS,KAAA,GAAW,MAAM,OAAO,WAAW,YAAY,OAAO,MAAM,YAAY,GAAG,YAAY;CAC3G,IAAI,OAAO,iBAAiB,KAAA,GAAW;EACrC,IAAI,CAAC,MAAM,QAAQ,OAAO,YAAY,KAAK,OAAO,aAAa,WAAW,GAAG,YAAY,cAAc;EACvG,IAAI,WAAW;EACf,MAAM,eAAgB,OAAO,aAA2B,KAAK,OAAO,OAAO,UAAU;GACnF,MAAM,OAAO,YAAY,OAAO,aAAa;GAC7C,MAAM,MAA8B,WAAW,MAAM,aAAa;GAClE,IAAI,KAAK,eAAe,KAAA,GAAW;IACjC,MAAM,MAAM,YAAY,MAAM,cAAc,wBAAwB;IACpE,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,OAAO,YAAY,UAAU,MAAM,SAAS,GAAG,YAAY,wBAAwB;IACrH,WAAW;IACX,IAAI,aAAa;GACnB,OAAO,IAAI,UAAU,MAAM,SAAS,GAAG,YAAY,wBAAwB;GAC3E,OAAO;EACT,CAAC;CACH;CACA,IAAI,OAAO,SAAS,KAAA,GAAW,MAAM,OAAO,aAAa,QAAQ,QAAQ,YAAY;CACrF,OAAO;AACT;;AAGA,SAAS,gBAAgB,OAAuC;CAC9D,MAAM,SAAS,YAAY,OAAO,QAAQ;CAC1C,MAAM,SAAS,OAAO;CACtB,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG,YAAY,QAAQ;CAChD,MAAM,YAAY,OAAO;CACzB,IAAI,CAAC,MAAM,QAAQ,SAAS,GAAG,YAAY,WAAW;CACtD,OAAO;EACL,QAAS,OAAqB,IAAI,eAAe;EACjD,WAAY,UAAwB,KAAK,WAAW;GAClD,IAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAAG,YAAY,aAAa;GAC5E,MAAM,CAAC,OAAO,OAAO;GACrB,IAAI,OAAO,UAAU,YAAY,OAAO,QAAQ,UAAU,YAAY,aAAa;GACnF,OAAO,CAAC,OAAO,GAAG;EACpB,CAAC;CACH;AACF;;;;;AAWA,MAAa,oBACX,qBACE,iBACA,UACA,GAAG,qBAAqB,yBACxB,EAZF,OAAO,gBAYL,CACF;;;;AClbF,MAAa,uBAAuB;AACpC,MAAa,wBAAwB;AACrC,MAAa,wBAAwB;AAErC,MAAM,UAAoD;CACxD;CAAU;CAAW;CAAe;CAAW;CAAe;CAAa;AAC7E;;;AAIA,MAAM,EAAE,QAAQ,QAAQ,gBACtB,sBAAsB,2BAA2B;;;;;;AAOnD,SAAgB,iBAAiB,OAAwC;CACvE,MAAM,SAAS,OAAO,OAAO,QAAQ;CACrC,MAAM,QAAQ,OAAO;CAGrB,IAAI,UAAU,UAAU,UAAU,aAAa,UAAU,aAAa,UAAU,UAAU;EACxF,MAAM,SAAiC,EAAE,MAAM;EAC/C,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;EAE3D,IAAI,OAAO,aAAa,KAAA,GACtB,OAAO,WAAW,YAAY,QAAQ,YAAY,UAAU;EAE9D,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;EAE3D,IAAI,OAAO,WAAW,KAAA,GAAW;GAC/B,MAAM,SAAS,OAAO;GACtB,IAAI,OAAO,WAAW,YAAY,QAAQ,SAAS,MAAuC,GACxF,OAAO,SAAS;QAEhB,OAAO,QAAQ;EAEnB;EACA,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,UAAU,YAAY,QAAQ,WAAW,SAAS;EAE3D,OAAO;CACT;CACA,OAAO,OAAO,OAAO;AACvB;;AAGA,MAAa,oBAA0D,EACrE,OAAO,iBACT;;AAGA,SAAS,gBAAgB,UAAkB,QAAsC;CAC/E,OAAO,qBACL,UACA,QACA,GAAG,eAAe,0BAClB,iBACF;AACF;;AAGA,MAAa,oBAAqD;CAChE,gBAAgB,sBAAsB,YAAY;CAClD,gBAAgB,uBAAuB,aAAa;CACpD,gBAAgB,uBAAuB,aAAa;AACtD;;;;;;;;;;AClCA,IAAa,0BAAb,cACU,oBAAoB;CAC5B;CAEA,YAAY,KAAc,MAA+B;EACvD,MAAM,KAAK,oBAAoB,EAAE,WAAW,cAAc,CAAC;EAC3D,KAAK,OAAO;CACd;;;;;;;;;CAUA,MAAM,SAA6C;EACjD,IAAI,KAAK,KAAK,YAAY,KAAA,GAAW,OAAO,KAAK,KAAK,QAAQ;EAE9D,OAAO,EACL,UAAU,CAAC;GACT,IAAI;GACJ,OAAO;GACP,YAAY;GACZ,QAAQ;GACR,MAAM;GACN,eAAe;GACf,QAAA,MATiB,KAAK,KAAK,QAAQ,SAAS;EAU9C,CAAC,EACH;CACF;;;;;;;;CASA,MAAM,SAAsC;EAC1C,OAAO,KAAK,KAAK,aAAa,KAAK,EAAE,QAAQ,CAAC,EAAE;CAClD;;;;;;;CAQA,MAAM,SAAyC;EAC7C,QAAQ,KAAK,KAAK,UAAU,gBAAA,CAAiB;CAC/C;;;;;;;CAQA,MAAM,aAA8C;EAElD,OADc,KAAK,aACR,CAAC,CAAC,MAAM;CACrB;;CAGA,MAAM,cAA+C;EACnD,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,EAAE,OAAO,OAAO;CACtD;;CAGA,MAAM,cAA+C;EACnD,KAAK,KAAK,OAAO,OAAO;EACxB,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,EAAE,OAAO,OAAO;CACtD;CAEA,eAAwC;EACtC,MAAM,QAAQ,KAAK,KAAK;EACxB,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,kEAAkE;EAEpF,OAAO;CACT;AACF;;;;;;AAOA,SAAgB,iBACd,KACA,MACM;CACN,IAAI,OAAO,CAAC,QAAQ,IAAI,cAAc;EACpC,IAAI,wBAAwB,WAAW,IAAI;EAM3C,MAAM,aALW,UAAU,OAKC,SAAS;GACnC,GAAG;GACH,aAAa;IAAC,GAAG,wBAAwB;IAAa;IAAmB;IAAmB,GAAG;GAAiB;EAClH,CAAC;EAGD,UAAU,mBAAmB,KAAK,WAAW,GAAG,wCAAwC;CAC1F,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC1KA,MAAa,mBAAmB;;AAGhC,MAAa,mBAAmB;;AAGhC,MAAa,0BAA0B;;AAGvC,MAAa,yBAAyB;;AAGtC,MAAa,wBAA2C;CACtD;CACA;CACA;AACF;;AAGA,MAAM,mBAAmB;;AAyCzB,SAAgB,oBAAoB,SAAsE;CACxG,MAAM,WAAW,oBAAoB,QAAQ,KAAK;CAClD,OAAO,GAAG,QAAQ,aAAa,iBAAiB,YAAY,mBAAmB,QAAQ,EAAE,SAAS,mBAAmB,QAAQ,KAAK;AACpI;;AAGA,SAAgB,qBAAqB,SAAyB;CAC5D,IAAI,2CAA2C,KAAK,OAAO,GAAG,OAAO;CACrE,IAAI,+BAA+B,KAAK,OAAO,GAAG,OAAO;CACzD,OAAO;AACT;;;;;;AAOA,eAAsB,sBACpB,WACA,SACA,QAC2B;CAC3B,IAAI;EACF,MAAM,WAAW,MAAM,UAAU,GAAG,QAAQ,gBAAgB;GAC1D,QAAQ;GACR,SAAS;IAAE,gBAAgB;IAAoB,eAAe,UAAU;GAAS;EACnF,CAAC;EACD,IAAI,SAAS,WAAW,KAAK,OAAO;GAAE,OAAO;GAAO,OAAO;EAAc;EACzE,IAAI,SAAS,IAAI,OAAO,EAAE,OAAO,KAAK;EACtC,OAAO;GAAE,OAAO;GAAO,OAAO;EAAe;CAC/C,QAAQ;EACN,OAAO;GAAE,OAAO;GAAO,OAAO;EAAgB;CAChD;AACF;;AAGA,SAAS,mBAAmB,MAAgC;CAC1D,OAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,QAAQC,eAAgB;EAC9B,MAAM,KAAK,eAAe,QAAQ,KAAK,CAAC;EACxC,MAAM,KAAK,mBAAmB,MAAM,YAAY,QAAQ,IAAI,CAAC,CAAC;EAC9D,MAAM,OAAO,MAAM,WAAW;CAChC,CAAC;AACH;;AAGA,SAAS,sBAAsB,OAAgF;CAC7G,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,SAAS;CACf,OAAO,OAAO,OAAO,WAAW,YAAY,OAAO,WAAW,MACzD,OAAO,OAAO,UAAU,YACxB,OAAO,OAAO,WAAW,YACzB,OAAO,OAAO,aAAa,YAC3B,OAAO,OAAO,YAAY;AACjC;;;;;;AAOA,IAAa,uBAAb,MAAkC;CAChC;CACA,4BAA6B,IAAI,IAAgB;CAEjD,cAA8C,EAAE,OAAO,OAAO;CAC9D;CACA;;CAEA;;;;;;;;CAWA,aAAqB;CACrB,WAAmB;CAEnB,YAAY,MAAgC;EAC1C,KAAK,OAAO;CACd;;CAGA,SAAS,UAAkC;EACzC,KAAK,UAAU,IAAI,QAAQ;EAC3B,aAAa,KAAK,UAAU,OAAO,QAAQ;CAC7C;;CAGA,SAAiC;EAC/B,OAAO,KAAK;CACd;;;;;;CAOA,MAAM,QAAyC;EAC7C,IAAI,KAAK,UAAU,MAAM,IAAI,MAAM,8BAA8B;EAMjE,IAAI,KAAK,YAAY,UAAU,aAAa,KAAK,WAAW,KAAA,GAAW,OAAO,KAAK;EACnF,KAAK,SAAS;EACd,MAAM,UAAU,EAAE,KAAK;EAEvB,MAAM,OAAO,MAAM,KAAK,SAAS;EACjC,MAAM,gBAAgB,KAAK,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;EAIzF,MAAM,UAAU,IAAI,SAAsC,SAAS,WAAW;GAC5E,KAAK,SAAS;IAAE;IAAS;GAAO;EAClC,CAAC;EAED,MAAM,KAAK,WAAW,MAAM,aAAa;EAEzC,MAAM,UAAU,KAAK,YAAY;EACjC,KAAK,UAAU;GACb,OAAO;GACP,SAAS,oBAAoB;IAAE,YAAY,qBAAqB,OAAO;IAAG;IAAM,OAAO;GAAc,CAAC;EACxG,CAAC;EAGD,KAAK,QAAQ,iBAAiB;GAC5B,KAAK,SAAS;GACd,KAAK,UAAU;IACb,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;EACH,GAAG,KAAK,KAAK,aAAA,IAA6B;EAC1C,KAAK,MAAM,QAAQ;EAEnB,QAAa,MACV,gBAAgB,KAAK,SAAS,SAAS,WAAW,IAClD,YAAY,KAAK,SAAS,SAAS,OAAO,CAC7C;EACA,OAAO,KAAK;CACd;;CAGA,SAAe;EACb,IAAI,KAAK,YAAY,KAAK,YAAY,UAAU,WAAW;EAC3D,KAAK,SAAS;EACd,KAAK,UAAU;GAAE,OAAO;GAAU,QAAQ;EAAY,CAAC;CACzD;;CAGA,UAAgB;EACd,IAAI,KAAK,UAAU;EACnB,KAAK,WAAW;EAChB,MAAM,aAAa,KAAK,YAAY,UAAU;EAC9C,KAAK,SAAS;EACd,IAAI,YAAY,KAAK,UAAU;GAAE,OAAO;GAAU,QAAQ;EAAY,CAAC;CACzE;CAMA,cAA8B;EAE5B,QADY,OAAO,KAAK,KAAK,YAAY,aAAa,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAA;CAExF;CAEA,UAAkB,MAAoC;EACpD,KAAK,cAAc;EACnB,KAAK,MAAM,YAAY,CAAC,GAAG,KAAK,SAAS,GAAG,SAAS;CACvD;;CAGA,MAAc,WAA4B;EACxC,MAAM,YAAY,KAAK,KAAK,aAAA;EAC5B,MAAM,WAAW,KAAK,KAAK,mBAAA;EAC3B,KAAK,IAAI,QAAQ,GAAG,QAAQ,UAAU,SAAS,GAAG;GAChD,MAAM,YAAY,YAAY;GAC9B,IAAI,MAAM,mBAAmB,SAAS,GAAG,OAAO;EAClD;EACA,MAAM,IAAI,MAAM,iCAAiC,SAAS,+BAA+B,WAAW;CACtG;;;;;;CAOA,WAAmB,MAAc,eAAsC;EACrE,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,IAAI,UAAU;GACd,MAAM,SAASC,cAAkB,SAAS,aAAa,KAAK,eAAe,SAAS,UAAU,aAAa,CAAC;GAC5G,KAAK,SAAS;GACd,OAAO,KAAK,UAAU,UAAiC;IACrD,IAAI,KAAK,WAAW,QAAQ;IAC5B,KAAK,SAAS,KAAA;IACd,MAAM,SAAS,IAAI,iBACjB,SACA,oDAAoD,KAAK,IAAI,MAAM,QAAQ,MAAM,SACnF;IACA,IAAI,SAAS;KACX,UAAU;KACV,OAAO,MAAM;IACf,OACE,KAAK,QAAQ,OAAO,MAAM;GAE9B,CAAC;GACD,OAAO,OAAO,MAAM,mBAAmB;IACrC,IAAI,CAAC,SAAS;IACd,UAAU;IACV,QAAQ;GACV,CAAC;EACH,CAAC;CACH;;CAGA,eAAuB,SAA0B,UAA0B,eAA6B;EAItG,SAAS,UAAU,cAAc,OAAO;EACxC,SAAS,UAAU,+BAA+B,WAAW,QAAQ,QAAQ,MAAM,CAAC;EACpF,SAAS,UAAU,gCAAgC,eAAe;EAClE,SAAS,UAAU,gCAAgC,cAAc;EACjE,SAAS,UAAU,gBAAgB,kBAAkB;EACrD,MAAM,QAAQ,MAAc,SAAkC;GAC5D,SAAS,UAAU,IAAI;GACvB,SAAS,IAAI,KAAK,UAAU,IAAI,CAAC;EACnC;EACA,IAAI,QAAQ,WAAW,WAAW;GAChC,SAAS,UAAU,GAAG;GACtB,SAAS,IAAI;GACb;EACF;EAEA,KADa,QAAQ,KAAK,MAAM,GAAG,CAAC,CAAC,MAAM,SAC9B,aAAa;GACxB,KAAK,KAAK;IAAE,SAAS;IAAO,OAAO;GAAY,CAAC;GAChD;EACF;EACA,IAAI,QAAQ,WAAW,QAAQ;GAC7B,KAAK,KAAK;IAAE,SAAS;IAAO,OAAO;GAAgC,CAAC;GACpE;EACF;EAGA,IAAI,YAAY;EAChB,IAAI,OAAO;EACX,QAAQ,GAAG,SAAS,UAAkB;GACpC,aAAa,MAAM;GACnB,QAAQ,MAAM,SAAS;GACvB,IAAI,YAAA,KAAoC,QAAQ,QAAQ;EAC1D,CAAC;EACD,QAAQ,GAAG,aAAa;GAEtB,IAAI,QAAQ,WAAW;GACvB,IAAI;GACJ,IAAI;IACF,UAAU,KAAK,MAAM,IAAI;GAC3B,QAAQ;IACN,KAAK,KAAK;KAAE,SAAS;KAAO,OAAO;IAAe,CAAC;IACnD;GACF;GAQA,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,WAAW,SAAS;IACzE,MAAM,SAAS;IACf,IAAI,OAAO,UAAU,eAAe;KAClC,KAAK,KAAK;MAAE,SAAS;MAAO,OAAO;KAAsB,CAAC;KAC1D;IACF;IACA,MAAM,cAAc,OAAO,qBAAqB,OAAO;IACvD,KAAK,cAAc,MAAM,KAAK,EAAE,SAAS,KAAK,GAAG,IAAI,iBACnD,OAAO,UAAU,kBAAkB,WAAW,SAC9C,OAAO,gBAAgB,YAAY,gBAAgB,KAAK,cAAc,sBACxE,CAAC;IACD;GACF;GACA,IAAI,CAAC,sBAAsB,OAAO,GAAG;IACnC,KAAK,KAAK;KAAE,SAAS;KAAO,OAAO;IAA0B,CAAC;IAC9D;GACF;GACA,IAAI,QAAQ,UAAU,eAAe;IAGnC,KAAK,KAAK;KAAE,SAAS;KAAO,OAAO;IAAsB,CAAC;IAC1D;GACF;GACA,KAAK,cAAc,MAAM,KAAK,EAAE,SAAS,KAAK,GAAG,KAAA,GAAW,EAAE,GAAG,QAAQ,CAAC;EAC5E,CAAC;EACD,QAAQ,GAAG,eAAe,CAAC,CAAC;CAC9B;;CAGA,cACE,MACA,MACA,MACA,SACA,aACM;EACN,KAAK,MAAM,IAAI;EAEf,MAAM,SAAS,KAAK;EACpB,KAAK,SAAS;EACd,IAAI,WAAW,KAAA,GAAW;EAC1B,IAAI,YAAY,KAAA,GAAW,OAAO,OAAO,OAAO;OAC3C,IAAI,gBAAgB,KAAA,GAAW,OAAO,QAAQ,WAAW;CAChE;;;;;;;;;;;CAYA,MAAc,SAAS,SAAiB,aAAyD;EAC/F,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,MAAM,aAAa,MAAM,sBACvB,KAAK,KAAK,aAAa,OACvB,KAAK,YAAY,GACjB,YAAY,MACd;EACA,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,IAAI,CAAC,WAAW,OAAO;GACrB,MAAM,SAAwC,WAAW,UAAU,gBAC/D,gBACA,WAAW,UAAU,kBAAkB,YAAY;GACvD,KAAK,UAAU;IACb,OAAO;IACP;IACA,SAAS,6CAA6C,WAAW,MAAM;GACzE,CAAC;GACD;EACF;EAGA,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,IAAI;GACF,MAAM,KAAK,KAAK,SAAS,WAAW;EACtC,SAAS,OAAgB;GACvB,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;GAChC,KAAK,UAAU;IACb,OAAO;IACP,QAAQ;IACR,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAChE,CAAC;GACD;EACF;EACA,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,KAAK,WAAW;EAChB,KAAK,UAAU;GAAE,OAAO;GAAW,UAAU,YAAY;GAAU,SAAS,YAAY;EAAQ,CAAC;CACnG;;CAGA,YAAoB,SAA0B;EAC5C,OAAO,CAAC,KAAK,YAAY,KAAK,eAAe,WAAW,KAAK,YAAY,UAAU;CACrF;;CAGA,SAAiB,SAAiB,SAAwB;EACxD,IAAI,EAAE,mBAAmB,mBAAmB;EAC5C,IAAI,CAAC,KAAK,YAAY,OAAO,GAAG;EAChC,KAAK,UAAU;GAAE,OAAO;GAAU,QAAQ,QAAQ;GAAQ,SAAS,QAAQ;EAAQ,CAAC;CACtF;CAEA,aAA2B;EACzB,IAAI,KAAK,UAAU,KAAA,GAAW;GAC5B,aAAa,KAAK,KAAK;GACvB,KAAK,QAAQ,KAAA;EACf;CACF;;CAGA,WAAyB;EACvB,KAAK,WAAW;EAChB,KAAK,QAAQ,MAAM;EACnB,KAAK,SAAS,KAAA;EACd,KAAK,SAAS,KAAA;CAChB;AACF;;AAGA,IAAM,mBAAN,cAA+B,MAAM;CACP;CAA5B,YAAY,QAAuD,SAAiB;EAClF,MAAM,OAAO;EADa,KAAA,SAAA;EAE1B,KAAK,OAAO;CACd;AACF;;AAGA,SAAS,WAAW,QAAoC;CACtD,OAAO,WAAW,KAAA,KAAa,sBAAsB,SAAS,MAAM,IAAI,SAAS;AACnF;;;;;;;;;;;;;;;;;;;;;;ACneA,MAAa,iCAAiC;;;;;;;;;;AAW9C,MAAa,iCAAiC;;;;;;;;;;;;;;;AAkC9C,SAAgB,gCAAgC,KAAiB,QAAqC;CACpG,IAAI;EACF,MAAM,QAAQ;EACd,MAAM,QAAQ,MAAM;EACpB,MAAM,mBAAmB,SAAS,iCAAiC;EACnE,OAAO;CACT,QAAQ;EACN;CACF;AACF;;AAmBA,SAAgB,6BAAyD;CACvE,OAAO;EAAE,OAAO;EAAO,WAAW,KAAA;CAAU;AAC9C;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,gCACd,KACA,OACA,QACM;CACN,IAAI;EACF,MAAM,QAAQ;EACd,IAAI,QAAQ;GACV,IAAI,MAAM,OAAO;IAEf,MAAM,mBAAmB;IACzB;GACF;GACA,MAAM,QAAQ,MAAM;GACpB,MAAM,YAAY,UAAA,gBAA2C,KAAA,IAAY;GACzE,MAAM,mBAAmB;GACzB,MAAM,QAAQ;GACd;EACF;EACA,IAAI,MAAM,OAAO;GACf,MAAM,QAAQ;GACd,MAAM,mBAAmB,MAAM;GAC/B;EACF;CAEF,QAAQ,CAER;AACF;;AAGA,MAAM,kBAAkB;AACxB,MAAM,kBAAkB;;AAExB,MAAM,sBAAsB;;AAG5B,MAAM,eAAe;;;;;AAgBrB,SAAS,gBAAgB,YAAwC;CAC/D,OAAO,eAAe,KAAA,IAClB,sBACA,KAAK,IAAI,iBAAiB,KAAK,IAAI,iBAAiB,KAAK,MAAM,UAAU,CAAC,CAAC;AACjF;;AAGA,SAAS,SAAS,QAAyF;CACzG,MAAM,MAAM,OAAO,KAAK,KAAK;CAC7B,IAAI,QAAQ,KAAA,KAAa,IAAI,WAAW,GAAG,OAAO,KAAA;CAClD,MAAM,QAAQ,OAAO,OAAO,KAAK;CACjC,MAAM,UAAU,OAAO,SAAS,KAAK;CACrC,OAAO;EACL;EACA,GAAG,UAAU,KAAA,KAAa,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC;EAC1D,GAAG,YAAY,KAAA,KAAa,QAAQ,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;CAClE;AACF;AAEA,SAAS,aAAa,OAAyB;CAC7C,OAAO,iBAAiB,gBAAgB,MAAM,SAAS;AACzD;;AAGA,SAAS,cAAc,QAAiC,UAA6B;CACnF,OAAO,IAAI,SAAS,mCAAmC,eAAe,EACpE,OAAO,QAAQ,YAAY,OAAO,OAAO,SAAS,SACpD,CAAC;AACH;AAEA,SAAS,eAAe,QAAuC;CAC7D,IAAI,QAAQ,YAAY,MAAM,MAAM,cAAc,QAAQ,KAAA,CAAS;AACrE;;;;;;;;AASA,IAAa,4BAAb,MAAoE;CAGrC;CAF7B,KAAc;CAEd,YAAY,MAAsD;EAArC,KAAA,OAAA;CAAsC;;CAGnE,YAAqB;EACnB,MAAM,OAAO,KAAK,KAAK,QAAQ;EAC/B,OAAO,KAAK,SAAS,KAAK,IAAI,SAAS,IAAI;CAC7C;CAEA,MAAM,OAAO,SAA2B,QAAgD;EACtF,eAAe,MAAM;EACrB,MAAM,UAAU,KAAK,KAAK,QAAQ;EAClC,IAAI,CAAC,IAAI,SAAS,OAAO,GACvB,MAAM,IAAI,SACR,qDAAqD,KAAK,UAAU,OAAO,EAAE,sBAC7E,oBACF;EAEF,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;EACxC,eAAe,MAAM;EACrB,MAAM,WAAW,GAAG,QAAQ,QAAQ,OAAO,EAAE,IAAI;EAEjD,MAAM,OAAO;GACX,OAAO,QAAQ;GACf,YAAY,gBAAgB,QAAQ,UAAU;EAChD;EAEA,IAAI;EACJ,IAAI;GACF,WAAW,OAAO,KAAK,KAAK,aAAa,MAAA,CAAO,UAAU;IACxD,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,eAAe,UAAU;KACzB,0BAA0B;KAC1B,qBAAqB;KACrB,GAAG,mBAAmB;IACxB;IACA,MAAM,KAAK,UAAU,IAAI;IACzB,GAAG,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;GAC1C,CAAC;EACH,SAAS,OAAgB;GACvB,IAAI,QAAQ,YAAY,QAAQ,aAAa,KAAK,GAAG,MAAM,cAAc,QAAQ,KAAK;GACtF,MAAM,IAAI,SACR,2CAA2C,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,KAChG,sBACA,EAAE,OAAO,MAAM,CACjB;EACF;EAEA,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,UAAU,wCAAwC,SAAS,OAAO;GACtE,IAAI;IACF,MAAM,SAAkB,MAAM,SAAS,KAAK;IAC5C,MAAM,SAAS,OAAO,WAAW,YAAY,WAAW,OACnD,QAAgC,QACjC,KAAA;IACJ,IAAI,OAAO,WAAW,YAAY,OAAO,SAAS,GAAG,WAAW,KAAK;SAChE,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;KACtD,MAAM,OAAQ,QAA+B;KAC7C,MAAM,QAAS,QAAkC;KACjD,IAAI,OAAO,SAAS,YAAY,OAAO,UAAU,UAC/C,WAAW,KAAK,OAAO,SAAS,WAAW,OAAO,KAAK,OAAO,SAAS,YAAY,OAAO,UAAU,WAAW,QAAQ,KAAK,OAAO,UAAU,WAAW,QAAQ;IAEpK;GACF,SAAS,OAAO;IACd,IAAI,QAAQ,YAAY,QAAQ,aAAa,KAAK,GAAG,MAAM,cAAc,QAAQ,KAAK;IAItF,MAAM,SAAQ,MADK,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE,EAAA,CAC9B,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG;IACtC,IAAI,UAAU,IAAI,WAAW,KAAK;GACpC;GACA,MAAM,IAAI,SAAS,SAAS,oBAAoB;EAClD;EAEA,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,SAAS,KAAK;EAChC,SAAS,OAAO;GACd,IAAI,QAAQ,YAAY,QAAQ,aAAa,KAAK,GAAG,MAAM,cAAc,QAAQ,KAAK;GACtF,MAAM,IAAI,SAAS,iEAAiE,sBAAsB,EAAE,OAAO,MAAM,CAAC;EAC5H;EAEA,MAAM,UAAW,SAAmC;EACpD,IAAI,CAAC,MAAM,QAAQ,OAAO,GACxB,MAAM,IAAI,SACR,8FACA,oBACF;EAGF,MAAM,UAA6B,CAAC;EACpC,MAAM,uBAAO,IAAI,IAAY;EAC7B,KAAK,MAAM,QAAQ,SAAS;GAC1B,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM;GAC/C,MAAM,SAAS,SAAS,IAA0D;GAClF,IAAI,WAAW,KAAA,KAAa,KAAK,IAAI,OAAO,GAAG,GAAG;GAClD,KAAK,IAAI,OAAO,GAAG;GACnB,QAAQ,KAAK,MAAM;EACrB;EAEA,OAAO;GAAE;GAAS,WAAW;EAAM;CACrC;CAEA,MAAc,WAAW,QAAkD;EACzE,IAAI;EACJ,IAAI;GACF,MAAM,MAAM,KAAK,KAAK,WAAW;EACnC,SAAS,OAAO;GACd,IAAI,QAAQ,YAAY,QAAQ,aAAa,KAAK,GAAG,MAAM,cAAc,QAAQ,KAAK;GAOtF,IAAI,iBAAiB,SAAS,OAAQ,MAAuB,SAAS,UAAU;IAC9E,MAAM,OAAQ,MAAuB;IACrC,IAAI,SAAS,sBAAsB,MAAM,IAAI,SAAS,MAAM,SAAS,mCAAmC,EAAE,OAAO,MAAM,CAAC;IACxH,IAAI,SAAS,wBAAwB,SAAS,cAC5C,MAAM,IAAI,SAAS,MAAM,SAAS,sBAAsB,EAAE,OAAO,MAAM,CAAC;GAE5E;GACA,MAAM,IAAI,SACR,yDAAyD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,KAC9G,sBACA,EAAE,OAAO,MAAM,CACjB;EACF;EACA,IAAI,QAAQ,KAAA,KAAa,IAAI,WAAW,GACtC,MAAM,IAAI,SACR,+PACA,iCACF;EAEF,OAAO;CACT;AACF;;;;ACtNA,MAAa,sBAAsB;;AAGnC,MAAa,YAAY;;AAGzB,MAAM,cAAgD;CACpD,IAAI;CACJ,MAAM;CACN,KAAK;CACL,UAAU;CACV,KAAK;AACP;;AAGA,MAAM,aAAgC;CAAC;CAAM;CAAQ;CAAO;CAAY;AAAK;;AAG7E,MAAM,iBAAiB;;;;;;;;;;;;AAyBvB,SAAgB,6BAAwD;CACtE,OAAO,OAAO,KAAK,WAAW,CAAC,CAC5B,KAAK,QAAQ;EACZ;EACA,MAAM,YAAY,OAAO;EACzB,MAAM,YAAY,EAAE;EACpB,MAAM,sBAAsB,EAAE;CAChC,EAAE,CAAC,CACF,MAAM,GAAG,MAAM;EACd,MAAM,YAAY,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI;EACpD,IAAI,cAAc,GAAG,OAAO;EAC5B,IAAI,EAAE,SAAS,EAAE,MAAM,OAAO,EAAE,OAAO,KAAK;EAC5C,OAAO,EAAE,GAAG,cAAc,EAAE,EAAE;CAChC,CAAC;AACL;;AAGA,SAAS,SAAS,MAAsB;CACtC,MAAM,OAAO,WAAW,QAAQ,IAAI;CACpC,OAAO,SAAS,KAAK,WAAW,SAAS;AAC3C;;AAGA,SAAS,UAAU,OAA0B;CAC3C,OAAO,MAAM,QAAQ,KAAK,IACtB,MAAM,QAAQ,OAAqB,OAAO,OAAO,YAAY,OAAO,EAAE,IACtE,CAAC;AACP;;;;;;;;;;;;;;AAkDA,SAAgB,2BACd,MACoB;CACpB,MAAM,MAAM,KAAK,UAAU;CAC3B,MAAM,QAAQ,KAAK,aAAa;CAChC,MAAM,WAAW,KAAK,gBAAgB,2BAAA,CAA4B;CAClE,MAAM,aAAa,QAAQ,KAAK,WAAW,OAAO,EAAE;CACpD,MAAM,QAAQ,IAAI,IAAI,UAAU;CAIhC,MAAM,SAAS,UAAU,KAAK,cAAc,CAAC;CAC7C,MAAM,YAAY,KAAK,kBAAkB,KAAK,CAAC;CAI/C,MAAM,SAAS,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;CAEjG,MAAM,aAAa,WAChB,QAAQ,SAAS,QAAQ,MAAM,WAAW,OAAO,SAAS,IAAI,CAAC,CAAC,CAChE,KAAK,UAAU;EACd,IAAI,UAAU;EACd,OAAO,GAAG,YAAY,SAAS,KAAK;EACpC,cAAc,EAAE,IAAI,GAAG,YAAY,SAAS,KAAK,KAAK;CACxD,EAAE;CAGJ,MAAM,WAAW,QAAQ,QAAQ,WAAW,SAAS,OAAO,IAAI,MAAM,WAAW,MAAM;CACvF,MAAM,aAAa,SAAS,SAAS,KAAK,OAAO,SAAS,IACtD,CAAC;EAAE,IAAI;EAAgB,OAAO;EAAgB,cAAc,EAAE,IAAI,OAAO;CAAE,CAAC,IAC5E,CAAC;;;;;;;;;;;;;;;;CAiBL,MAAM,cAAc,IAAY,MAAc,WAAqC;EACjF,MAAM,CAAC,mBAAmB,EAAE;EAC5B;EACA,MAAM;EACN,OAAO;EACP,GAAI,SAAS,KAAK,CAAC,IAAI,EAAE,KAAK;EAC9B,SAAS,UAAU;GACjB,IAAI,OAAO,UAAU,WAAW,OAAO,OAAO,KAAK;GAGnD,MAAM,SAAS,UAAU,KAAK,cAAc,CAAC;GAC7C,OAAO,OAAO,OAAO,WAAW,KAAK,OAAO,SAAS,EAAE,CAAC;EAC1D;EACA,QAAQ,SAAS;GACf,MAAM,KAAK,KAAK,KAAK,MAAM;GAI3B,MAAM,SAAS,UAAU,KAAK,cAAc,CAAC;GAE7C,OAAO,QADW,OAAO,WAAW,KAAK,OAAO,SAAS,EAAE,KACjC,EAAE,MAAM,QAAQ,IAAI;IAAE,MAAM;IAAO,OAAO;GAAG;EACzE;CACF;CAEA,OAAO;EACL,IAAI,KAAK;EACT,OAAO,KAAK,SAAS;EACrB,cAAc,EAAE,IAAI,oBAAoB;EACxC,QAAQ;GACN;IAAE,IAAI;IAAc,OAAO;IAAc,cAAc,EAAE,IAAI,KAAK;GAAE;GACpE;IAAE,IAAI;IAAU,OAAO;IAAU,cAAc,EAAE,IAAI,KAAK;GAAE;GAC5D,GAAG;GACH,GAAG;GACH;IAAE,IAAI;IAAY,OAAO;IAAY,cAAc,EAAE,IAAI,KAAK;GAAE;EAClE;EACA,QAAQ;GACN;IACE,MAAM,CAAC,QAAQ;IACf,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,SAAS;IAC7B,QAAQ,EAAE,IAAI;IACd,MAAM,qCAAqC,IAAI;IAC/C,kBAAkB,EAAE,IAAI,UAAU,IAAI,uBAAuB;GAC/D;GACA;IACE,MAAM,CAAC,SAAS;IAChB,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,SAAS;IAC7B,aAAa;IACb,MAAM;IACN,kBAAkB,EAAE,IAAI,qCAAqC;IAC7D,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,OAAO,YAAY,KAAK,EAAE,MAAM,QAAQ,IAAI;MAAE,MAAM;MAAO,OAAO;KAAQ;IAC5E;GACF;GACA;IACE,MAAM,CAAC,oBAAoB;IAC3B,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,WAAW;IAC/B,MAAM;IACN,kBAAkB,EAAE,IAAI,iCAAiC;IAGzD,SAAS,UAAW,UAAU,QAAQ,UAAU;IAChD,QAAQ,UAAU;KAAE,MAAM;KAAO,OAAO,KAAK,KAAK,MAAM;IAAO;GACjE;GACA,GAAG,QACA,QAAQ,WAAW,SAAS,OAAO,IAAI,MAAM,WAAW,MAAM,CAAC,CAC/D,KAAK,WAAW,WAAW,OAAO,IAAI,OAAO,MAAM,UAAU,OAAO,MAAM,CAAC;GAC9E,GAAG,SAAS,KAAK,WAAW,WAAW,OAAO,IAAI,OAAO,MAAM,cAAc,CAAC;GAC9E,GAAG,OAAO,KAAK,OAAO,WAAW,IAAI,sBAAsB,EAAE,GAAG,cAAc,CAAC;GAC/E;IACE,MAAM,CAAC,eAAe;IACtB,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,OAAO;IAC3B,MAAM;IACN,kBAAkB,EAAE,IAAI,iCAAiC;IACzD,SAAS,CACP;KACE,OAAO;KACP,OAAO;KACP,cAAc,EAAE,IAAI,YAAY;IAClC,GACA,GAAG,MAAM,KAAK,UAAU;KACtB,OAAO,KAAK;KACZ,OAAO,KAAK;KACZ,cAAc,EAAE,IAAI,KAAK,MAAM;IACjC,EAAE,CACJ;IACA,SAAS,UAAW,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,KAAK,QAAQ;IAC/E,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,OAAO,YAAY,MAAM,YAAA,SACrB,EAAE,MAAM,QAAQ,IAChB;MAAE,MAAM;MAAO,OAAO;KAAQ;IACpC;GACF;GACA;IACE,MAAM,CAAC,MAAM;IACb,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc,EAAE,IAAI,OAAO;IAC3B,MAAM;IACN,kBAAkB,EAAE,IAAI,yCAAyC;IACjE,SAAS;KACP;MAAE,OAAO;MAAW,OAAO;MAA4B,cAAc,EAAE,IAAI,kBAAkB;KAAE;KAC/F;MAAE,OAAO;MAAM,OAAO;KAAK;KAC3B;MAAE,OAAO;MAAM,OAAO;KAAU;IAClC;IACA,SAAS,UAAW,UAAU,QAAQ,UAAU,OAAO,QAAQ;IAC/D,QAAQ,SAAS;KACf,MAAM,UAAU,KAAK,KAAK;KAC1B,OAAO,YAAY,MAAM,YAAA,SACrB,EAAE,MAAM,QAAQ,IAChB;MAAE,MAAM;MAAO,OAAO;KAAQ;IACpC;GACF;EACF;CACF;AACF;;;;;;;;;;;;AAaA,SAAS,mBAAmB,KAAsD;CAChF,IAAI;CACJ,IAAI;EACF,YAAY,IAAI,IAAI,qBAAqB;CAC3C,QAAQ;EACN;CACF;CACA,IAAI,OAAO,cAAc,YAAY,cAAc,MAAM,OAAO,KAAA;CAChE,MAAM,WAAY,UAAqC;CACvD,IAAI,OAAO,aAAa,YAAY,OAAO,KAAA;CAC3C,OAAO,EACL,UAAW,SACR,KAAK,SAAS,EACnB;AACF;;;;;;;;;AAUA,SAAS,iBAAiB,SAAqC;CAC7D,MAAM,SAAS,QAAQ,OAAO,MAAM,UAAU,MAAM,KAAK,KAAK,GAAG,MAAM,eAAe;CACtF,OAAO,KAAK,UAAU;EACpB,QAAQ,QAAQ,OAAO,MAAM,UAAU,MAAM,WAAW,KAAA,CAAS,CAAC,EAAE,QAAQ,OAAO;EACnF,SAAS,QAAQ,SAAS,KAAK,WAAW,OAAO,KAAK,KAAK,CAAC;EAI5D,OAAO,QAAQ,OACZ,QAAQ,UAAU,MAAM,UAAU,cAAc,CAAC,CACjD,KAAK,UAAU,MAAM,KAAK;CAC/B,CAAC;AACH;;;;;;;;;;;AAYA,SAAgB,4BACd,KACA,MAC0B;CAC1B,MAAM,UAAU,mBAAmB,GAAG;CACtC,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,IAAI,WAAW;CACf,IAAI;CACJ,MAAM,gBAAsB;EAC1B,IAAI,UAAU;EACd,MAAM,UAAU,2BAA2B,IAAI;EAC/C,MAAM,YAAY,iBAAiB,OAAO;EAC1C,IAAI,SAAS,cAAc,WAAW;EAItC,SAAS,QAAQ;EACjB,UAAU,KAAA;EACV,IAAI;GACF,UAAU;IAAE;IAAW,SAAS,QAAQ,SAAS,OAAO;GAAE;EAC5D,SAAS,OAAgB;GAKvB,IAAI,QAAQ,KACV,qEACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEzD;EACF;CACF;CACA,QAAQ;CACR,IAAI,mBAAmB;EACrB,WAAW;EACX,SAAS,QAAQ;EACjB,UAAU,KAAA;CACZ,GAAG,gDAAgD;CACnD,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACjZA,MAAa,OAAO;AACpB,MAAa,SAAS,CAAC,KAAK;AAE5B,MAAM,KAAK;AACX,MAAM,sBAAsB;;AAG5B,MAAa,WAAW;;AAExB,MAAa,4BAA4B,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAsG5F,MAAa,SAAoB,EAAE,OAAO;CACxC,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,QAAQ,mBAAmB;CAQxE,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,QAAQ;CAChC,SAAS,EAAE,OAAO;CAClB,YAAY,EAAE,OAAO;CACrB,iBAAiB,EAAE,OAAO;CAC1B,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,kBAAkB;CAC1D,qBAAqB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,kBAAkB;CAC7D,oBAAoB,EAAE,QAAQ;CAC9B,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC;;;;;;;;;CASjC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,CAAC;CACnC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI;CACnC,UAAU,EAAE,MAAM,EAAE,OAAO;EACzB,OAAO,EAAE,OAAO;EAChB,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,gBAAgB;;EAE3C,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,QAAQ;CAClC,CAAC,CAAC;CACF,eAAe,EAAE,OAAO;CACxB,mBAAmB,EAAE,MAAM,EAAE,OAAO;EAClC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;EAC1B,SAAS,EAAE,OAAO;CACpB,CAAC,CAAC;CACF,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,IAAa;AAC7D,CAAC;;;;;;;AAaD,SAAgB,sBAAsB,QAA4C;CAChF,OAAO;EACL,WAAW,cAAc,OAAO,aAAa,mBAAmB;EAChE,SAAS,OAAO,WAAA;EAChB,YAAY,OAAO,cAAc,QAAQ,IAAI;EAC7C,iBAAiB,OAAO,mBAAmB;EAC3C,kBAAkB,OAAO,oBAAA;EACzB,qBAAqB,OAAO,uBAAA;EAC5B,oBAAoB,OAAO,sBAAsB;EACjD,eAAe,MAAM,QAAQ,OAAO,aAAa,IAC7C,OAAO,cAAc,QAAQ,OAAO,OAAO,OAAO,YAAY,OAAO,EAAE,IACvE,KAAA;EAIJ,iBAAiB,oBAAoB,OAAO,eAAe;CAC7D;AACF;;;;;;;;AASA,SAAS,oBAAoB,KAA6D;CACxF,IAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,GAAG,OAAO,KAAA;CAC1E,MAAM,UAAU,OAAO,QAAQ,GAAG,CAAC,CAAC,QACjC,UAAsC,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,SAChF;CACA,OAAO,QAAQ,WAAW,IAAI,KAAA,IAAY,OAAO,YAAY,OAAO;AACtE;AAEA,SAAgB,MAAM,KAAc,QAAsB;CACxD,sBAAsB,GAAG;CACzB,IAAI,gBAA8B;CAClC,IAAI;CACJ,IAAI;CACJ,MAAM,gBAA4C;EAChD,MAAM,MAAM,QAAQ;EACpB,IAAI,QAAQ,WAAW,aAAa,KAAA,GAAW,OAAO;EACtD,MAAM,OAAO,sBAAsB,GAAG;EACtC,UAAU;EACV,WAAW;EACX,OAAO;CACT;CACA,QAAQ;CAMR,MAAM,cAAwC;EAC5C,MAAM,MAAM,QAAQ;EACpB,MAAM,OAAiC,CAAC;GACtC,IAAI;GACJ,OAAO;GACP,KAAK,cAAc,IAAI,aAAa,mBAAmB;GACvD,SAAS,IAAI;GACb,eAAe;EACjB,CAAC;EACD,KAAK,MAAM,CAAC,OAAO,aAAa,IAAI,YAAY,CAAC,EAAA,CAAG,QAAQ,GAAG;GAC7D,MAAM,UAAU,OAAO,QAAQ,cAAc,YAAY,QAAQ,UAAU,KAAK,MAAM,KAClF,QAAQ,UAAU,KAAK,IACvB,KAAA;GACJ,MAAM,UAAU,OAAO,QAAQ,WAAW,YAAY,QAAQ,WAAW,KAAK,QAAQ,SAAS,KAAA;GAC/F,IAAI,YAAY,KAAA,KAAa,YAAY,KAAA,GAAW;GACpD,KAAK,KAAK;IAKR,IAAI,WAAW,WAAW,QAAQ;IAClC,OAAO,OAAO,QAAQ,UAAU,YAAY,QAAQ,MAAM,KAAK,MAAM,KACjE,QAAQ,MAAM,KAAK,IACnB,WAAW,QAAQ;IACvB,KAAK,YAAY,KAAA,IAAY,KAAA,IAAY,cAAc,OAAO;IAC9D;IACA,eAAe;GACjB,CAAC;EACH;EACA,OAAO;CACT;CAIA,MAAM,oBAAwC;EAC5C,MAAM,MAAM,QAAQ,CAAC,CAAC;EACtB,OAAO,OAAO,QAAQ,YAAY,IAAI,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,KAAA;CACrE;CAEA,MAAM,aAAa,OAAO,QAAuE;EAC/F,MAAM,cAAc,IAAI,IAAI,aAAa;EACzC,IAAI,gBAAgB,KAAA,GAKlB,QAAO,MADW,YAAY,QAAQ,GAAG,EAAA,EAC7B;EAEd,MAAM,UAAU,oBAAoB,GAAG,CAAC,CAAC,IAAI,GAAG;EAChD,OAAO,YAAY,KAAA,KAAa,QAAQ,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAA;CAC7E;CAQA,MAAM,OAA+B,IAAI,uBAAuB;EAC9D;EACA;EACA,aAAa;EAGb,cAAc,WAAmB,QAAQ,oBAAoB,MAAM;EACnE;EAGA,yBAAiE,QAAQ,CAAC,CAAC,qBAAqB,CAAC;CACnG,CAAC;CAED,MAAM,gBAAgB,OAAO,YAAwC,UAAoC;EACvG,MAAM,WAAW,MAAM,KAAK,WAAW,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,CAAC;EAC3E,IAAI,aAAa,KAAA,GACf,OAAO,mBAAmB,SAAS,KAAK,mBAAmB,SAAS,KAAK,OAAO,GAAG,SAAS,KAAK,MAAM,iBAAiB;EAE1H,MAAM,MAAM,WAAW;EACvB,MAAM,IAAI,SACR,mDAAmD,SAAS,WAAW,IAAI,+LAI3E,oBACF;CACF;CAEA,MAAM,UAA0D,IAAI,mBAAmB;EACrF;EACA;EAKA,cAAc,OAAO,aAAqB,WAAgD,aAAyC,UAAgD;GACjL,KAAK,aAAa,aAAa,SAAS;GAMxC,MAAM,WAAW,MAAM,KAAK,WAC1B,UAAU,KAAA,IAAY,EAAE,SAAS,YAAY,IAAI;IAAE,SAAS;IAAa;GAAM,CACjF;GAIA,OAAO,aAAa,KAAA,IAChB,KAAA,IACA,mBAAmB,SAAS,KAAK,mBAAmB,SAAS,KAAK,OAAO,GAAG,SAAS,KAAK,MAAM,iBAAiB;EACvH;EAGA,0BAA0B;GACxB,MAAM,cAAc,IAAI,IAAI,aAAa;GACzC,OAAO,gBAAgB,KAAA,IAAY,KAAA,IAAY;EACjD;CACF,CAAC;CAGD,IAAI,IAAI,8BAA8B,CACpC;EAAE,UAAU;EAAU,aAAa;EAAgB,YAAY;EAAI,cAAc,CAAC;CAAE,CACtF,CAAC;CAED,IAAI,IAAI,gBAAgB,CAAC,QAAQ,GAAG,OAAO;CAK3C,MAAM,eAAe,YAAgD;EAInE,MAAM,YAAY,MAAM,KAAK,iBAAiB;EAC9C,MAAM,OAAO,IAAI,IAAI,UAAU,KAAK,YAAY,CAAC,QAAQ,KAAK,IAAI,OAAO,CAAC,CAAC;EAC3E,MAAM,SAAS,oBAAoB,MAAM,KAAK,iBAAiB,GAAG,YAAY,CAAC;EA4B/E,OAAO,EAAE,UAAU,MA3BG,QAAQ,IAAI,MAAM,CAAC,CAAC,IAAI,OAAO,SAAS;GAC5D,MAAM,UAAU,KAAK,IAAI,KAAK,EAAE;GAChC,IAAI;GACJ,IAAI,YAAY,KAAA,GACd,SAAS,EAAE,UAAU,CAAC,EAAE;QAExB,IAAI;IACF,SAAS,MAAM,QAAQ,SAAS,QAAQ,GAAG;GAC7C,SAAS,OAAgB;IACvB,SAAS,EAAE,UAAU,CAAC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;GAChF;GAEF,MAAM,QAAQ,SAAS;GAIvB,MAAM,SAAS,cAAc,KAAK;GAClC,OAAO;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,YAAY,YAAY,KAAA;IACxB,QAAQ,YAAY,KAAA,KAAa,QAAQ,KAAK,OAAO,KAAK;IAC1D,MAAM,SAAS,KAAK,OAAO,SAAS,aAAa,uBAAuB;IACxE,eAAe,CAAC,UAAU,OAAO,SAAS,aAAa,MAAM,QAAQ;IACrE;GACF;EACF,CAAC,CAAC,EACyB;CAC7B;CAUA,MAAM,sBAAgC,kBAAkB,QAAQ,CAAC,CAAC,IAAI;CACtE,IAAI,OAAO,CAAC,UAAU,IAAI,eAAe;EACvC,cAAc,YAAY;GAAE;GAAS,SAAS;GAAc,WAAW;EAAc,CAAC;CACxF,CAAC;CASD,MAAM,YAAY,IAAI,qBAAqB;EACzC,eAAe,QAAQ,CAAC,CAAC;EACzB,UAAU,OAAO,EAAE,aAAyD;GAC1E,MAAM,MAAM,cAAc,QAAQ,CAAC,CAAC,aAAa,mBAAmB;GACpE,MAAM,cAAc,IAAI,IAAI,aAAa;GACzC,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,gFAAgF;GAElG,MAAM,YAAY,IAAI,KAAK,MAAM;EACnC;CACF,CAAC;CACD,IAAI,mBAAmB,UAAU,QAAQ,GAAG,sCAAsC;CASlF,MAAM,oBAAoB,YAAyC;EAEjE,OAAO,EACL,SAAQ,MAFW,QAAQ,WAAW,UAAU,EAAE,YAAY,KAAK,CAAC,EAAA,CAErD,KAAK,UAAU;GAC5B,MAAM,OAAO,YAAY,MAAM;GAC/B,OAAO;IACL,IAAI,MAAM;IACV,MAAM,MAAM,KAAK,QAAQ,cAAc,EAAE;IACzC,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;GACvC;EACF,CAAC,EACH;CACF;CACA,iBAAiB,KAAK;EAAE;EAAS,SAAS;EAAc,OAAO;EAAW,YAAY;CAAkB,CAAC;CAyBzG,MAAM,kBAAkB,2BAA2B;CACnD,MAAM,wBAAwB,YAA2B;EACvD,IAAI,eAAe,KAAA,GACjB,gCAAgC,YAAY,iBAAiB,OAAO;CAExE;CACA,IAAI;CACJ,IAAI,OAAO,CAAC,KAAK,IAAI,WAAW;EAC9B,aAAa,OAAO;EACpB,OAAO,IAAI,uBAAuB,IAAI,0BAA0B;GAC9D,YAAY,YAAY;IACtB,MAAM,WAAW,MAAM,KAAK,WAAW;IACvC,OAAO,aAAa,KAAA,IAAY,KAAA,IAAY,SAAS;GACvD;GACA,eAAe,QAAQ,CAAC,CAAC;EAC3B,CAAC,CAAC;EAIF,qBAAqB,QAAQ,CAAC,CAAC,aAAa,IAAI;EAOhD,OAAO,mBAAmB;GACxB,aAAa,KAAA;GACb,gCAAgC,OAAO,KAAK,iBAAiB,KAAK;EACpE,GAAG,gDAAgD;CACrD,CAAC;CAYD,IAAI;CACJ,IAAI,OAAO,CAAC,qBAAqB,IAAI,WAAW;EAC9C,qBAAqB,4BAA4B,QAAQ;GACvD,IAAI;GAGJ,iBAAiB,QAAQ,CAAC,CAAC,aAAa;GAIxC,oBAAoB,MAAM,CAAC,CAAC,KAAK,UAAU;IAAE,IAAI,KAAK;IAAI,OAAO,KAAK;GAAM,EAAE;GAM9E,qBAAqB,QAAQ,CAAC,CAAC,iBAAiB,CAAC;GACjD,uBAAuB,QAAQ,CAAC,CAAC;EACnC,CAAC;EACD,OAAO,mBAAmB;GACxB,qBAAqB,KAAA;EACvB,GAAG,+CAA+C;CACpD,CAAC;CAKD,IAAI,OAAO,CAAC,UAAU,IAAI,gBAAgB;EACxC,YAAY,SAAS,eAAe,KAAK,IAAI,QAAQ,QAAQ;GAC3D,YAAY,WAAW;IACrB,UAAU;GACZ;GAaA,gBAAgB;IACd,qBAAqB,QAAQ,CAAC,CAAC,aAAa,IAAI;IAChD,qBAAqB;GACvB;EACF,CAAC;CACH,CAAC;AACH"}
\ No newline at end of file
diff --git a/node_modules b/node_modules
new file mode 120000
index 0000000..8755364
--- /dev/null
+++ b/node_modules
@@ -0,0 +1 @@
+/Users/mars-sea/Development/dsh-commandcode-provider/node_modules
\ No newline at end of file
diff --git a/scripts/sync-model-prices.mjs b/scripts/sync-model-prices.mjs
new file mode 100644
index 0000000..9e67fb8
--- /dev/null
+++ b/scripts/sync-model-prices.mjs
@@ -0,0 +1,313 @@
+#!/usr/bin/env node
+/**
+ * Rewrite the vendored price rows in `src/model-prices.ts` from the official
+ * pricing page.
+ *
+ * The page is the only source of truth for per-token rates, and it publishes
+ * them twice: as an embedded model JSON array (the `timeOfDay` / `contextTiers`
+ * blocks live here and nowhere else) and as rendered HTML rows. This script
+ * reads the JSON — never the rendered column text — and then asserts the two
+ * agree for the rows it rewrites, because a rate that is internally consistent
+ * (`0.22 → 0.44` is exactly the 2× the page promises) can still be the wrong
+ * row. That is not hypothetical: `deepseek-v4-flash-vision-exp` shipped at
+ * `$0.22/$0.66` when the page says `$0.15/$0.60`, and only a cross-check
+ * against the second source catches that class of error.
+ *
+ * Usage:
+ *   node scripts/sync-model-prices.mjs           # rewrite the rows
+ *   node scripts/sync-model-prices.mjs --check   # exit 1 if they would change
+ *
+ * `--check` is offline-safe in the sense that it reports a fetch failure
+ * distinctly from a mismatch, so it can run in CI wherever the network is
+ * available without silently passing when the page is unreachable.
+ *
+ * Everything except the `MODEL_PRICE_ROWS` array is hand-written and survives a
+ * rewrite: the module docstring, the types, the slug rules, and the table
+ * builder. Only that one array's literal rows are regenerated.
+ */
+
+import { readFile, writeFile } from 'node:fs/promises'
+import { fileURLToPath } from 'node:url'
+import { dirname, join } from 'node:path'
+
+const PRICING_URL = 'https://commandcode.ai/docs/resources/pricing-limits'
+const REPO_ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
+const TARGET = join(REPO_ROOT, 'src', 'model-prices.ts')
+
+/** `--check` reports drift instead of rewriting. */
+const CHECK_ONLY = process.argv.includes('--check')
+
+/**
+ * Round a rate to the precision the page publishes. The page's own figures
+ * carry up to 8 decimals (`0.08334`, `0.0028`), and JSON round-tripping can
+ * introduce float noise (`0.0030000000000000001`), so every rate is normalized
+ * through `Number(x.toPrecision(12))` before it is written.
+ *
+ * @param {unknown} value - raw JSON number.
+ * @returns {number} the normalized rate.
+ */
+function rate(value) {
+  if (typeof value !== 'number' || !Number.isFinite(value)) {
+    throw new Error(`not a finite rate: ${JSON.stringify(value)}`)
+  }
+  return Number(value.toPrecision(12))
+}
+
+/**
+ * Pull the page's embedded model records out of its Next.js flight payload.
+ *
+ * The payload escapes its JSON as a string literal, so the document text holds
+ * `\"id\":\"gpt-5.4\"` while the records themselves are plain objects. A global
+ * unescape followed by a bare `JSON.parse` over brace-balanced spans is brittle
+ * against nested braces, so each record is extracted with a real string-aware
+ * scanner instead.
+ *
+ * @param {string} html - the fetched document.
+ * @returns {Array<Record<string, unknown>>} the model records, in page order.
+ */
+function extractModelRecords(html) {
+  const unescaped = html.replace(/\\"/g, '"').replace(/\\\\/g, '\\')
+  const records = []
+  const marker = '{"id":"'
+  let at = unescaped.indexOf(marker)
+  while (at !== -1) {
+    const end = scanObject(unescaped, at)
+    if (end === -1) break
+    const span = unescaped.slice(at, end)
+    try {
+      const parsed = JSON.parse(span)
+      // The page carries several JSON shapes; a model record is the one with
+      // rates. Everything else in the payload is skipped.
+      if (typeof parsed?.inputCost === 'number' && typeof parsed?.outputCost === 'number') {
+        records.push(parsed)
+      }
+    } catch {
+      // Not a standalone record (a truncated or nested span): skip it. A real
+      // parse failure surfaces later as a missing row.
+    }
+    at = unescaped.indexOf(marker, at + 1)
+  }
+  return records
+}
+
+/**
+ * Find the index just past the object that starts at `start`, honoring nested
+ * objects/arrays and string escapes.
+ *
+ * @param {string} text - the document text.
+ * @param {number} start - index of the opening `{`.
+ * @returns {number} the index after the matching `}`, or -1 when unbalanced.
+ */
+function scanObject(text, start) {
+  let depth = 0
+  let inString = false
+  let escaped = false
+  for (let i = start; i < text.length; i += 1) {
+    const ch = text[i]
+    if (inString) {
+      if (escaped) escaped = false
+      else if (ch === '\\') escaped = true
+      else if (ch === '"') inString = false
+      continue
+    }
+    if (ch === '"') inString = true
+    else if (ch === '{') depth += 1
+    else if (ch === '}') {
+      depth -= 1
+      if (depth === 0) return i + 1
+    }
+  }
+  return -1
+}
+
+/**
+ * Read the rendered rates out of the page's HTML table as a second opinion.
+ *
+ * The rendered row is `<name> | <context> | $in | $out | $cacheRead | $cacheWrite | …`,
+ * and the first numeric quadruplet after the model's display name is the
+ * off-peak band (the page's own note says the shown rates are the base band,
+ * with peak called out in the annotation). Only rows whose slug can be matched
+ * are compared; a row the HTML does not expose is simply not cross-checked.
+ *
+ * @param {string} html - the fetched document.
+ * @returns {Map<string, number[]>} display-name → [in, out, cacheRead].
+ */
+function renderedRates(html) {
+  const found = new Map()
+  const rows = html.split(/<tr[\s>]/).slice(1)
+  for (const row of rows) {
+    const cells = [...row.matchAll(/<td[^>]*>([\s\S]*?)<\/td>/g)].map((m) =>
+      m[1].replace(/<[^>]*>/g, ' ').replace(/&[a-z]+;/gi, ' ').replace(/\s+/g, ' ').trim(),
+    )
+    if (cells.length < 5) continue
+    const name = cells[0]
+    const money = cells.slice(1).map((cell) => {
+      const m = cell.match(/\$([0-9]+(?:\.[0-9]+)?)/)
+      return m === null ? undefined : Number(m[1])
+    })
+    const triplet = money.filter((value) => value !== undefined).slice(0, 3)
+    if (triplet.length === 3 && name !== '') found.set(name.toLowerCase(), triplet)
+  }
+  return found
+}
+
+/**
+ * Build the declarative rows the module embeds.
+ *
+ * @param {Array<Record<string, unknown>>} records - model records from the page.
+ * @param {Map<string, number[]>} rendered - the HTML cross-check.
+ * @returns {Array<{ id: string, rates: number[], peak?: number[] }>} the rows.
+ */
+function buildRows(records, rendered) {
+  const rows = []
+  const seen = new Set()
+  const problems = []
+  for (const record of records) {
+    const id = record.id
+    if (typeof id !== 'string' || id === '' || seen.has(id)) continue
+    seen.add(id)
+    const rates = [rate(record.inputCost), rate(record.outputCost), rate(record.cacheReadCost)]
+    if (record.cacheWriteCost !== undefined) rates.push(rate(record.cacheWriteCost))
+    /** @type {{ id: string, rates: number[], peak?: number[] }} */
+    const row = { id, rates }
+
+    const timeOfDay = record.timeOfDay
+    if (timeOfDay !== undefined && typeof timeOfDay === 'object') {
+      const offPeak = timeOfDay.offPeak
+      const peak = timeOfDay.peak
+      if (peak === undefined || typeof peak !== 'object') {
+        throw new Error(`${id}: timeOfDay without a peak block — the page changed shape`)
+      }
+      // The page duplicates its base rates into `offPeak`. Keeping only the
+      // peak override is sound ONLY while that equality holds, so assert it.
+      if (offPeak !== undefined) {
+        const same =
+          rate(offPeak.inputCost) === rates[0] &&
+          rate(offPeak.outputCost) === rates[1] &&
+          rate(offPeak.cacheReadCost) === rates[2]
+        if (!same) {
+          throw new Error(
+            `${id}: timeOfDay.offPeak (${JSON.stringify(offPeak)}) no longer equals the base rates ` +
+              `(${JSON.stringify(rates.slice(0, 3))}); the table must store the off-peak half explicitly`,
+          )
+        }
+      }
+      const peakRates = [rate(peak.inputCost), rate(peak.outputCost), rate(peak.cacheReadCost)]
+      // Peak is the expensive half; a non-increasing override means the two
+      // blocks were swapped or the page redefined the windows.
+      for (let i = 0; i < 3; i += 1) {
+        if (peakRates[i] < rates[i]) {
+          throw new Error(`${id}: peak rate is below the off-peak rate (${peakRates[i]} < ${rates[i]})`)
+        }
+      }
+      row.peak = peakRates
+    }
+
+    if (record.contextTiers !== undefined) {
+      if (!Array.isArray(record.contextTiers) || record.contextTiers.length === 0) throw new Error(`${id}: invalid contextTiers`)
+      let previous = 0
+      row.contextTiers = record.contextTiers.map((tier, index, tiers) => {
+        const rates = [rate(tier.inputCost), rate(tier.outputCost), rate(tier.cacheReadCost)]
+        if (tier.cacheWriteCost !== undefined) rates.push(rate(tier.cacheWriteCost))
+        if (tier.maxContext === undefined) {
+          if (index !== tiers.length - 1) throw new Error(`${id}: only the last context tier can be unbounded`)
+          return { rates }
+        }
+        const maxContext = tier.maxContext
+        if (!Number.isSafeInteger(maxContext) || maxContext <= previous || index === tiers.length - 1) throw new Error(`${id}: invalid context tier boundary`)
+        previous = maxContext
+        return { maxContext, rates }
+      })
+    }
+
+    // Second opinion: the rendered row must agree with the embedded JSON.
+    const name = typeof record.name === 'string' ? record.name.toLowerCase() : ''
+    const htmlRow = rendered.get(name)
+    if (htmlRow !== undefined) {
+      for (let i = 0; i < 3; i += 1) {
+        if (htmlRow[i] !== rates[i]) {
+          problems.push(
+            `  ! ${id}: embedded JSON says ${rates[i]} at index ${i}, the rendered table says ${htmlRow[i]}`,
+          )
+        }
+      }
+    }
+    rows.push(row)
+  }
+  rows.sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0))
+  return { rows, problems }
+}
+
+/** Render the rows as the TypeScript literal the module embeds. */
+function renderRows(rows) {
+  return rows
+    .map((row) => {
+      const rates = row.rates.join(', ')
+      const peak = row.peak === undefined ? '' : `, peak: [${row.peak.join(', ')}]`
+      const tiers = row.contextTiers === undefined ? '' : `, contextTiers: ${JSON.stringify(row.contextTiers)}`
+      return `  { id: '${row.id}', rates: [${rates}]${peak}${tiers} },`
+    })
+    .join('\n')
+}
+
+/**
+ * Replace the `MODEL_PRICE_ROWS` array literal in place, leaving every other
+ * byte of the module untouched.
+ *
+ * @param {string} source - current module text.
+ * @param {string} body - the new rows.
+ * @returns {string} the rewritten module text.
+ */
+function replaceRows(source, body) {
+  const anchor = 'const MODEL_PRICE_ROWS: readonly ModelPriceRow[] = ['
+  const start = source.indexOf(anchor)
+  if (start === -1) throw new Error('MODEL_PRICE_ROWS declaration not found')
+  // Anchor on the full declaration: a bare `indexOf('[')` finds the `[]` in the
+  // type annotation, not the literal's opening bracket.
+  const open = start + anchor.length - 1
+  // The array closes at the first `]` that starts a line, which is the literal's
+  // own terminator (no row contains a bracketed multi-line value).
+  const close = source.indexOf('\n]', open)
+  if (close === -1) throw new Error('MODEL_PRICE_ROWS array not found')
+  // Keep the header, the `[`, the `\n]`, and the rest of the module; replace
+  // only the rows between them.
+  return `${source.slice(0, open + 1)}\n${body}\n]${source.slice(close + 2)}`
+}
+
+async function main() {
+  const response = await fetch(PRICING_URL, { redirect: 'follow' })
+  if (!response.ok) {
+    console.error(`fetch failed: HTTP ${response.status} from ${PRICING_URL}`)
+    process.exit(2)
+  }
+  const html = await response.text()
+  const records = extractModelRecords(html)
+  if (records.length < 50) {
+    console.error(`only ${records.length} model records found — the page shape changed; refusing to rewrite`)
+    process.exit(2)
+  }
+  const { rows, problems } = buildRows(records, renderedRates(html))
+  const body = renderRows(rows)
+  const source = await readFile(TARGET, 'utf8')
+  const next = replaceRows(source, body)
+
+  if (problems.length > 0) {
+    console.warn('cross-checks that need a human look:')
+    for (const line of problems) console.warn(line)
+  }
+
+  if (next === source) {
+    console.log(`model prices are up to date (${rows.length} rows)`)
+    return
+  }
+  if (CHECK_ONLY) {
+    console.error(`model prices are STALE: ${rows.length} rows fetched from the page differ`)
+    process.exit(1)
+  }
+  await writeFile(TARGET, next)
+  const before = source.split('\n').length
+  const after = next.split('\n').length
+  console.log(`rewrote ${rows.length} rows in src/model-prices.ts (${before} -> ${after} lines)`)
+}
+
+await main()
diff --git a/src/adapter.ts b/src/adapter.ts
index 8437664..33130b3 100644
--- a/src/adapter.ts
+++ b/src/adapter.ts
@@ -1010,10 +1010,31 @@ export interface CommandCodeCredits {
   monthlyCredits: number
   purchasedCredits: number
   freeCredits: number
-  /** Five-hour rolling window limits. */
-  fiveHour: { used: number; cap: number; exceeded: boolean; resetAt: number }
-  /** Weekly window limits. */
-  weekly: { used: number; cap: number; exceeded: boolean; resetAt: number }
+  /**
+   * Whether the endpoint actually published a monthly balance. The scalar
+   * above defaults to 0 for shape stability, which is a LIE about an omitted
+   * field — and a false "0 left, fully consumed" on the dashboard. Consumers
+   * that render the figure must check this first: an explicit `false` means
+   * "not reported", not "nothing left".
+   *
+   * Optional on purpose. `undefined` means the flag itself was never recorded —
+   * an older Host half, or a frame from before this field existed — and is read
+   * as "assume reported", which is the behavior that shipped. Only an explicit
+   * `false` from a Host that knows the balance was omitted suppresses the
+   * figure, so a cross-version pair does not lose a real balance.
+   */
+  monthlyReported?: boolean
+  purchasedReported?: boolean
+  freeReported?: boolean
+  /**
+   * Five-hour rolling window limits, absent when the endpoint reported no such
+   * window. Absence is NOT "a window with no cap": a reported window with
+   * `cap === 0` is uncapped spend, while an absent one was never reported at
+   * all, and only the un-reported case must keep a figure off the dashboard.
+   */
+  fiveHour?: { used: number; cap: number; exceeded: boolean; resetAt: number }
+  /** Weekly window limits; absent under the same rule as {@link fiveHour}. */
+  weekly?: { used: number; cap: number; exceeded: boolean; resetAt: number }
 }
 
 /** Subscription plan state from `/alpha/billing/subscriptions`. */
@@ -1080,13 +1101,22 @@ function parseUsageTotals(usage: Record<string, unknown> | undefined): CommandCo
 }
 
 /** Parse one window-limit block (`fiveHour` / `weekly`). */
+/**
+ * Parse one window block into a window limit, or undefined when the endpoint
+ * reported no such window.
+ *
+ * Returning undefined (rather than a zeroed window) is load-bearing: the panel
+ * must not draw a quota row for a window the account never reported, and a
+ * zeroed window is indistinguishable from a genuinely uncapped one.
+ */
 function parseWindowLimit(value: unknown): CommandCodeCredits['fiveHour'] {
   const block = isRecord(value) ? value : undefined
+  if (block === undefined) return undefined
   return {
-    used: numberValue(block?.used) ?? 0,
-    cap: numberValue(block?.cap) ?? 0,
-    exceeded: block?.exceeded === true,
-    resetAt: numberValue(block?.resetAt) ?? 0,
+    used: numberValue(block.used) ?? 0,
+    cap: numberValue(block.cap) ?? 0,
+    exceeded: block.exceeded === true,
+    resetAt: numberValue(block.resetAt) ?? 0,
   }
 }
 
@@ -1101,13 +1131,24 @@ function parseCreditLimits(credits: Record<string, unknown> | undefined): Comman
   const fiveHour = windowLimits !== undefined && isRecord(windowLimits.fiveHour) ? windowLimits.fiveHour : undefined
   const weekly = windowLimits !== undefined && isRecord(windowLimits.weekly) ? windowLimits.weekly : undefined
   if (creditsData === undefined && fiveHour === undefined && weekly === undefined) return undefined
-  return {
+  const parsed: CommandCodeCredits = {
     monthlyCredits: numberValue(creditsData?.monthlyCredits) ?? 0,
     purchasedCredits: numberValue(creditsData?.purchasedCredits) ?? 0,
     freeCredits: numberValue(creditsData?.freeCredits) ?? 0,
-    fiveHour: parseWindowLimit(fiveHour),
-    weekly: parseWindowLimit(weekly),
-  }
+    // Recorded separately from the scalar: the panel must not report an
+    // omitted balance as a consumed one.
+    monthlyReported: numberValue(creditsData?.monthlyCredits) !== undefined,
+    purchasedReported: numberValue(creditsData?.purchasedCredits) !== undefined,
+    freeReported: numberValue(creditsData?.freeCredits) !== undefined,
+  }
+  // Optional members are only present when reported, never present-but-undefined
+  // (`exactOptionalPropertyTypes`), so an absent window cannot be mistaken for a
+  // parsed one with zeroed numbers.
+  const fiveHourLimit = parseWindowLimit(fiveHour)
+  const weeklyLimit = parseWindowLimit(weekly)
+  if (fiveHourLimit !== undefined) parsed.fiveHour = fiveHourLimit
+  if (weeklyLimit !== undefined) parsed.weekly = weeklyLimit
+  return parsed
 }
 
 /**
diff --git a/src/capabilities.ts b/src/capabilities.ts
index a5fe986..83058b6 100644
--- a/src/capabilities.ts
+++ b/src/capabilities.ts
@@ -571,8 +571,11 @@ export const KNOWN_DEALS: Readonly<Record<string, KnownDeal>> = {
  * weekday, full price) **Monday to Friday only**; the other 17 hours of a
  * weekday and every hour of Saturday/Sunday (UTC) are off-peak at half price.
  * The V4 Flash Vision (exp) variant (command-code@1.32.0) shares the V4 Flash
- * windows and peak prices ($0.44/$1.32) — each row's hover annotation states
- * exactly 2× that row's displayed off-peak prices. The picker shows the
+ * rates exactly — $0.15/$0.60 off-peak and $0.30/$1.20 peak, per the page's own
+ * `timeOfDay` block, not merely 2× its own off-peak figures: a rate that is
+ * internally consistent can still be the wrong row, which is why the vendored
+ * price table (`./model-prices.ts`) is synced from the page and not hand-kept.
+ * The picker shows the
  * *current* state as a compact
  * label (`Peak`/`Half`) matching the English noun style of the other markers
  * (`Image`, `FREE`), so a developer can tell at a glance whether calling the
@@ -610,12 +613,35 @@ export const KNOWN_PEAK_PRICING: ReadonlySet<string> = new Set([
 /**
  * Peak hours (UTC, hour-of-day range end-exclusive): 01–03 and 06–09.
  * Weekday-only — see `peakPricingState()`; weekends are fully off-peak.
+ *
+ * Exported because the vendored price table (`./model-prices.ts`) ships these
+ * windows to the browser with the table itself: the composer prices a session
+ * against the very schedule this snapshot knows rather than restating it, so
+ * there is one place to update when the windows move.
  */
-const PEAK_HOUR_RANGES: ReadonlyArray<readonly [number, number]> = [
+export const PEAK_HOUR_RANGES: ReadonlyArray<readonly [number, number]> = [
   [1, 4],
   [6, 10],
 ]
 
+/**
+ * Whether `now` (defaults to `Date.now()`) falls inside a peak-pricing window,
+ * ignoring which model is asking. Peak rates apply Monday–Friday (UTC) only,
+ * so a weekend timestamp is off-peak even inside {@link PEAK_HOUR_RANGES}.
+ *
+ * Model-independent on purpose: `peakPricingState()` adds the membership test
+ * on top for the picker's label, while the price table selects peak rates from
+ * a row's own `peak` block — so a model whose catalog id spelling differs from
+ * the one in {@link KNOWN_PEAK_PRICING} still gets the right half of the day.
+ */
+export function isPeakPricingHour(now: number = Date.now()): boolean {
+  const at = new Date(now)
+  const day = at.getUTCDay()
+  if (day === 0 || day === 6) return false
+  const hour = at.getUTCHours()
+  return PEAK_HOUR_RANGES.some(([start, end]) => hour >= start && hour < end)
+}
+
 /**
  * Whether `now` (defaults to `Date.now()`) falls in a peak-pricing window for
  * time-of-day-priced models. Peak rates apply Monday–Friday (UTC) only: the
@@ -628,12 +654,7 @@ export function peakPricingState(
   now: number = Date.now(),
 ): 'peak' | 'off-peak' | undefined {
   if (!KNOWN_PEAK_PRICING.has(modelId)) return undefined
-  const at = new Date(now)
-  const day = at.getUTCDay()
-  if (day === 0 || day === 6) return 'off-peak'
-  const hour = at.getUTCHours()
-  const inPeak = PEAK_HOUR_RANGES.some(([start, end]) => hour >= start && hour < end)
-  return inPeak ? 'peak' : 'off-peak'
+  return isPeakPricingHour(now) ? 'peak' : 'off-peak'
 }
 
 /**
diff --git a/src/client/index.ts b/src/client/index.ts
index c2de67b..01d2884 100644
--- a/src/client/index.ts
+++ b/src/client/index.ts
@@ -35,12 +35,23 @@ import { CommandCodeSettingsController, COMMANDCODE_NS, type SettingsPageState }
 import type { HostDescriptionSource, SettingsPageApi } from './settings.ts'
 import { adaptLegacyCredentials, type LegacyCredentialsApi } from './legacy-credentials.ts'
 import { CommandCodeUsageController, type UsagePageState, type UsageRemote } from './usage.ts'
+import { CommandCodePricesController, type SessionCostPricesState } from './prices.ts'
 import { CommandCodeLoginController, type LoginPageState, type LoginRemote } from './login.ts'
-import { USAGE_REMOTE_CONTRIBUTION, MODELS_REMOTE_CONTRIBUTION } from '../usage-wire.ts'
+import { USAGE_REMOTE_CONTRIBUTION, MODELS_REMOTE_CONTRIBUTION, PRICES_REMOTE_CONTRIBUTION } from '../usage-wire.ts'
 import { LOGIN_REMOTE_CONTRIBUTION } from '../login-wire.ts'
 import type { TypertRemoteContribution } from '@deepseek-ai/dsh-typert-protocol'
 import { CommandCodeSettingsPage } from './section.tsx'
 import { CommandCodeProviderCard } from './card.tsx'
+import { CommandCodePanel, CommandCodeFooterEntry } from './panel-view.tsx'
+import type { PanelInjected } from './panel-view.tsx'
+import { CommandCodeSessionCost } from './session-cost-view.tsx'
+import type { SessionCostInjected } from './session-cost-view.tsx'
+import { startPanelAutoRefresh } from './panel.ts'
+import { PANEL_CSS, PANEL_CSS_ID } from './panel-styles.ts'
+// Type-only: pulls in the SlotMap merge for the composer dock
+// (`./session-cost-slots.ts`). The sidebar-foot / center-column merge rides the
+// `./panel-view.tsx` value import above, which imports `./panel-slots.ts`.
+import type {} from './session-cost-slots.ts'
 import { zh, en } from './locales.ts'
 
 export { isImageSessionRejection, withFriendlyImageError } from './sessions.ts'
@@ -185,6 +196,54 @@ function injectPageCss(): void {
   document.head.appendChild(tag)
 }
 
+/**
+ * Install the plans & quota panel's stylesheet and return its disposer, for
+ * `ctx.effect` to own. Keyed by its own `data-plugin-css` id, so the injection
+ * is idempotent even if a second surface asks for it later.
+ */
+function injectPanelCss(): () => void {
+  if (typeof document === 'undefined') return () => {}
+  if (document.querySelector(`style[data-plugin-css="${PANEL_CSS_ID}"]`) !== null) return () => {}
+  const tag = document.createElement('style')
+  tag.dataset.plugin = '@mars-sea/dsh-commandcode-provider'
+  tag.dataset.pluginCss = PANEL_CSS_ID
+  tag.textContent = PANEL_CSS
+  document.head.appendChild(tag)
+  return () => {
+    tag.remove()
+  }
+}
+
+/**
+ * Plans & quota panel id. It is the layout's `MainPanelId`: one string shared
+ * by the `sidebar.footer.action` card and the `main` slot cell, so the card
+ * selects this panel and nothing else. `dsh-client-ui-layout` is not a
+ * dependency of this bundle (its type is only a brand over `string`), so the
+ * brand is applied at the call site instead of importing the package.
+ */
+const PANEL_ID = 'commandcode-panel'
+
+/**
+ * The composer figure's entry id in `conversation.composer.dock`. Its own id,
+ * not the shipped `stats` cell's: reusing `stats` would REPLACE the tokens /
+ * cache-hit / throughput readout rather than inject into it, and that readout
+ * is the harness's to format (see `./session-cost-display.ts`).
+ */
+const SESSION_COST_ID = 'commandcode-session-cost'
+
+/**
+ * The one shot of the `layout` service this plugin needs, declared
+ * structurally for the same reason as {@link PANEL_ID}: importing the package
+ * would make the browser resolve a client module this bundle never calls.
+ * Reached through the reflective `ctx.get('layout')`, never a bare `ctx.layout`
+ * property — cordis throws `cannot get property … without inject` for an
+ * undeclared service, and declaring `layout` statically would park the whole
+ * client fiber (settings page included) on a service some profiles never mount.
+ */
+interface LayoutSelectionSeam {
+  selectPanel(id: string): void
+}
+
 /** Connection fields retained by pre-0.1.2 clients and absent from the current transport handle. */
 interface LegacyConnectionLike extends ConnectionLike {
   api?: ConnectionLike['api'] & { credentials?: LegacyCredentialsApi }
@@ -264,22 +323,28 @@ function applyClientSurfaces(
   )
 
   // The account-usage card + login panel: mount the shared Remote contribution
-  // (one mount carries every endpoint this plugin serves — report and login —
-  // so the Client's bookkeeping stays 1:1 with the Host's single registry
-  // registration), then resolve the `remote.commandcode` namespace through a
-  // scoped inject. Cordis only serves services a fiber declares in `inject`,
-  // and the namespace service exists only after the mount — a static inject
-  // would deadlock the plugin (the mounter would wait for its own mount), so
-  // the inject is registered dynamically once the mount lands. A Host half
-  // that predates the Remote fails the calls instead, and the surfaces render
-  // their error branches.
+  // (one mount carries every endpoint this plugin serves — report, catalog,
+  // price table, and login — so the Client's bookkeeping stays 1:1 with the
+  // Host's single registry registration), then resolve the
+  // `remote.commandcode` namespace through a scoped inject. Cordis only serves
+  // services a fiber declares in `inject`, and the namespace service exists
+  // only after the mount — a static inject would deadlock the plugin (the
+  // mounter would wait for its own mount), so the inject is registered
+  // dynamically once the mount lands. A Host half that predates the Remote
+  // fails the calls instead, and the surfaces render their error branches.
   let usageNamespace: (typeof ctx.remote)['commandcode'] | undefined
   let usageMountError: string | undefined
+  // Declared here, constructed below once the Remote seam exists: the mount
+  // effect underneath calls `ensure()` from its inject callback, which cordis
+  // runs synchronously while the mount promise settles — before the
+  // controller's own `const` below would have been initialized.
+  let pricesController: CommandCodePricesController | undefined
   const contribution: TypertRemoteContribution = {
     package: USAGE_REMOTE_CONTRIBUTION.package,
     descriptors: [
       ...USAGE_REMOTE_CONTRIBUTION.descriptors,
       ...MODELS_REMOTE_CONTRIBUTION.descriptors,
+      ...PRICES_REMOTE_CONTRIBUTION.descriptors,
       ...LOGIN_REMOTE_CONTRIBUTION.descriptors,
     ],
   }
@@ -296,6 +361,11 @@ function applyClientSurfaces(
         usageNamespace = namespaceCtx.remote.commandcode
         // The catalog Remote is live now; (re)fetch it for the model editors.
         controller.refreshCatalog()
+        // ...and the price table, which the composer's cost readout needs. This
+        // is its only trigger: `ensure()` is idempotent, so a readout already on
+        // screen simply starts pricing when the table lands, and asking earlier
+        // could only fail (the namespace did not exist yet).
+        pricesController?.reload()
         namespaceCtx.effect(() => () => {
           usageNamespace = undefined
         }, 'dsh-commandcode-provider: usage namespace')
@@ -326,6 +396,20 @@ function applyClientSurfaces(
       }
       return namespace.models()
     },
+    prices: async () => {
+      const namespace = usageNamespace
+      if (namespace === undefined) {
+        return { ok: false, error: { message: usageMountError ?? 'commandcode/prices remote is not mounted' } }
+      }
+      const call = namespace.prices
+      // A Host half older than the price table mounts no such descriptor, so
+      // the namespace member is genuinely missing. Report it as a failure the
+      // readout treats as permanent rather than throwing.
+      if (typeof call !== 'function') {
+        return { ok: false, error: { message: 'the Host serves no commandcode/prices endpoint', permanent: true } }
+      }
+      return call.call(namespace)
+    },
   }
   // Wire the catalog Remote into the settings controller's models seam so the
   // model editors can fetch the catalog once the mount lands.
@@ -335,6 +419,14 @@ function applyClientSurfaces(
   const usageStore = createSnapshotStore<UsagePageState>(usageController.state())
   usageController.subscribe(() => usageStore.set(usageController.state()))
 
+  // The composer's session-cost readout prices a session from a static table,
+  // so its controller is a one-shot cache rather than a poll: it fetches once
+  // the namespace is live and never again.
+  pricesController = new CommandCodePricesController(usageRemote)
+  ctx.effect(() => () => pricesController?.dispose(), 'dsh-commandcode-provider: price table')
+  const pricesStore = createSnapshotStore<SessionCostPricesState>(pricesController.state())
+  pricesController.subscribe(() => pricesStore.set(pricesController.state()))
+
   // The login panel: same namespace, three endpoints; the key never crosses
   // to the browser — the Host validates and stores it through the credentials
   // seam, and a landed login re-reads the credential badges + usage card.
@@ -441,6 +533,147 @@ function applyClientSurfaces(
       cancelLogin: () => void loginController.cancel(),
     }),
   }, CommandCodeProviderCard))
+
+  // The plans & quota panel: a footer card pinned at the bottom of the
+  // sidebar, on top of the Settings seat, that opens a dashboard in the
+  // center column.
+  //
+  // Two registrations, one navigation entry. `sidebar.footer.action` is the
+  // list the sidebar shell renders in its foot area directly above the
+  // Settings seat (`footArea` = `footerActions` then `settingsArea`), which is
+  // what puts this card at the bottom of the column rather than at the top
+  // with the global panel icons of `sidebar.panellist`. The layout's keyed
+  // `main` slot holds the panel the card opens — `ctx.layout.selectPanel(id)`
+  // resolves the id against that registry and throws when no cell occupies it,
+  // so BOTH are required, and BOTH need the `inject` face below (an entry
+  // without one receives none of the panel's data; see the `hooks` → `useX`
+  // rule in panel-view.tsx).
+  //
+  // Unlike a `sidebar.panellist` row, the shell renders NO chrome around a
+  // footer action: our component is the button, it owns the label (so a title
+  // carrying live quota needs no re-registration — that dance exists only
+  // because the shell caches a panellist entry's label), and it selects the
+  // panel itself through the `open` action below.
+  //
+  // Neither registration declares a `locale` namespace: the panel is English by
+  // construction, from `./panel-copy.ts`, not by locale lookup. That is a
+  // deliberate limitation, not an oversight — the two quota labels are the
+  // surface's whole point and the copy is reviewed as one block.
+  //
+  // Version reality, measured across 0.1.1-rc.2 … 0.1.5-rc.2 (see AGENTS.md):
+  // `sidebar.footer.action` and `conversation.composer.dock` exist and RENDER in
+  // every one of those releases, while the layout's keyed `main` slot and its
+  // `selectPanel` arrive in 0.1.5 (alpha.2 and rc.1 respectively). So the three
+  // slots do NOT share a version floor, and the honest boundary is the layout
+  // seam: without `selectPanel` the card would register, render, and do nothing
+  // when clicked — a dead button. The footer registration is therefore gated on
+  // the `layout` service, which arrives with the same package that owns `main`.
+  //
+  // The dashboard cell itself needs no such gate: registering a cell for a
+  // declaration that never arrives is a no-op by construction (the callback only
+  // runs while the declaration is live), so on an older engine it simply never
+  // registers. Only the always-declared footer seat needed an explicit guard.
+  //
+  // Shape notes:
+  //   * The stylesheet gets its own `ctx.effect` rather than riding an `inject`
+  //     callback's return value, so the tag's lifetime is the plugin fiber's and
+  //     is unaffected by a slot declaration collapsing and re-declaring.
+  //   * Each registration is guarded so a failure in one surface cannot abort
+  //     `applyClientSurfaces` and take the OTHER surfaces down with it —
+  //     `slots.inject` rethrows a callback failure synchronously once the
+  //     declaration exists. The renderer contains a *render* crash by abdicating
+  //     the entry with no visible error, so a failure that leaves nothing on
+  //     screen must at least be loud in the console.
+  const panelFace = (): PanelInjected => ({
+    hooks: { commandCodeUsage: usageStore, commandCodeSettings: store },
+    refresh: () => { pricesController?.ensure(); void usageController.refresh() },
+    // The Host resolves every credential source, including CLI auth and literals.
+    // A browser credential-reference lookup cannot determine availability.
+    startAutoRefresh: () => startPanelAutoRefresh(usageController, () => true),
+    // `layout` is read reflectively AT CLICK TIME, never captured at setup:
+    // ui-layout is not a dependency of this bundle (its types are not imported
+    // and its client module is never resolved), so a static `inject` would park
+    // the whole client fiber — settings page included — on a service another
+    // profile may never mount. The footer registration is gated on that same
+    // seam, so by the time this runs the method exists; the guard stays as the
+    // last line of defence against a layout that renames it.
+    open: () => {
+      const layout = ctx.get('layout') as LayoutSelectionSeam | undefined
+      if (typeof layout?.selectPanel === 'function') layout.selectPanel(PANEL_ID)
+    },
+  })
+
+  ctx.effect(() => injectPanelCss(), 'dsh-commandcode-provider: panel styles')
+
+  try {
+    ctx.slots.inject('main', () => ctx.slots.register(
+      { name: 'main', key: PANEL_ID, inject: panelFace },
+      CommandCodePanel,
+    ))
+  } catch (error: unknown) {
+    console.error('[dsh-commandcode-provider] could not register the plans & quota panel:', error)
+  }
+
+  // The footer card is registered only where the layout can actually open the
+  // panel behind it. `ctx.inject(['layout'], …)` runs its body when that service
+  // is live and re-runs it if the service is replaced, mirroring how the Remote
+  // namespace is mounted — so a profile without ui-layout (the TUI, a headless
+  // client) never registers the card, and a pre-0.1.5 engine that mounts a
+  // layout lacking `selectPanel` is filtered out by the explicit capability
+  // check below. Without this gate the card would render and silently do
+  // nothing on click, which is worse than not being there.
+  ctx.inject(['layout'], (layoutCtx) => {
+    const layout = layoutCtx.get('layout') as LayoutSelectionSeam | undefined
+    if (typeof layout?.selectPanel !== 'function') return
+    try {
+      layoutCtx.slots.inject('sidebar.footer.action', () => layoutCtx.slots.register(
+        // `order` is the only control over position inside a list slot, and the
+        // renderer sorts ascending. ui-cordis's footer chip registers at the
+        // default 0, so 1 sorts after it — but any sibling passing an order ≥ 1
+        // lands between this card and Settings, so "directly above Settings" is
+        // a preference, not a guarantee.
+        { name: 'sidebar.footer.action', id: PANEL_ID, order: 1, inject: panelFace },
+        CommandCodeFooterEntry,
+      ))
+    } catch (error: unknown) {
+      console.error('[dsh-commandcode-provider] could not register the sidebar footer card:', error)
+    }
+  })
+
+  // The composer's session-cost figure: an entry in the dock below the input
+  // that renders NO surface of its own. The cost is injected into the harness's
+  // own token-usage UI — the amount as the last item of the shipped pill's text
+  // run, the breakdown as rows inside the usage dialog that pill opens (see
+  // `./session-cost-display.ts`).
+  //
+  // The entry exists for its SEATS, not for a surface: `useProjection` is a
+  // standard prop the composer hands every dock occupant, so this registration
+  // is the only way to read the session's token accounting. Its id must stay
+  // distinct from the shipped `stats` cell's, because registering under an
+  // existing id REPLACES that cell rather than extending it.
+  //
+  // It carries only the price-table hook: the token buckets and the model
+  // selection arrive from the composer itself as standard dock props
+  // (`useProjection`), which the owner supplies to every occupant.
+  //
+  // No `locale` namespace and no `t` seat: the figure is English by
+  // construction, from `./session-cost.ts`. dsh builds before 0.1.5 have no
+  // `conversation.composer.dock`, so this registration silently does not happen
+  // there — as does the injection itself, whose DOM anchors are 0.1.5 markup.
+  const sessionCostFace = (): SessionCostInjected => ({
+    hooks: { commandCodePrices: pricesStore },
+  })
+
+  try {
+    ctx.slots.inject('conversation.composer.dock', () => ctx.slots.register(
+      // No `order`: the entry renders nothing, so its position among the dock's
+      // rows cannot matter — the sort only ever decides what a reader sees.
+      { name: 'conversation.composer.dock', id: SESSION_COST_ID, inject: sessionCostFace },
+      CommandCodeSessionCost,
+    ))
+  } catch (error: unknown) {
+    console.error('[dsh-commandcode-provider] could not register the composer session-cost readout:', error)
+  }
 }
 
 export const inject: readonly string[] = [
diff --git a/src/client/panel-copy.ts b/src/client/panel-copy.ts
new file mode 100644
index 0000000..90137e3
--- /dev/null
+++ b/src/client/panel-copy.ts
@@ -0,0 +1,139 @@
+/**
+ * English copy for the Command Code **plans & quota panel** (the sidebar
+ * footer card and the center-column dashboard it opens).
+ *
+ * Deliberately NOT part of the `settings.commandcode` locale namespace: that
+ * namespace follows the harness's active language, and this surface is
+ * specified to read in English regardless of it. Keeping the strings out of
+ * the locale registry is what makes that a fact rather than a preference —
+ * there is no dictionary lookup that could resolve to Chinese.
+ *
+ * The settings page keeps its own bilingual `settings.commandcode` namespace
+ * (see `./locales.ts`); the two never mix.
+ *
+ * @module dsh-commandcode-provider/client/panel-copy
+ */
+
+/**
+ * The plans & quota panel key set. `zh` in the settings namespace is the
+ * source of truth there; here English is the only locale, so this union is
+ * the key set.
+ */
+export type PanelKey =
+  /** Footer card title and panel heading. */
+  | 'nav'
+  /** Panel sub-heading under the title. */
+  | 'subtitle'
+  /** Refresh button / in-flight label. */
+  | 'refresh'
+  | 'refreshing'
+  /** First-paint fetch. */
+  | 'loading'
+  /** No credential at all: how to get one. */
+  | 'noKey'
+  | 'noKeyHint'
+  /** Report section headings. */
+  | 'plan'
+  | 'credits'
+  | 'limits'
+  | 'usage'
+  /** Monthly credit state and its tiles. */
+  | 'monthly'
+  | 'monthlyLimit'
+  | 'monthlyUsed'
+  | 'remaining'
+  | 'purchased'
+  | 'free'
+  /** Usage-window rows (long labels in the dashboard, short in the footer). */
+  | 'fiveHour'
+  | 'weekly'
+  | 'fiveHourShort'
+  | 'weeklyShort'
+  | 'windowUnlimited'
+  | 'exceeded'
+  | 'exhausted'
+  | 'resets'
+  /** Usage tiles. */
+  | 'requests'
+  | 'failed'
+  | 'successRate'
+  | 'spend'
+  | 'tokens'
+  | 'tokensIn'
+  | 'tokensOut'
+  /** Meta line. */
+  | 'periodEnds'
+  | 'updated'
+  | 'partial'
+  /** Rotation state on an account. */
+  | 'active'
+  | 'coolingDown'
+  | 'invalidKey'
+  /** Footer-card plan fallbacks. */
+  | 'unconfigured'
+  | 'unavailable'
+  /** Whole-report failures (mirrors the settings card's blocked taxonomy). */
+  | 'errorInvalidKey'
+  | 'errorInvalidKeyHint'
+  | 'errorServiceUnavailable'
+  | 'errorServiceUnavailableHint'
+  | 'errorNetwork'
+  | 'errorNetworkHint'
+  /** A fetch that failed for any other reason. */
+  | 'errorGeneric'
+
+/** The panel's literal string table. */
+export const PANEL_COPY: Record<PanelKey, string> = {
+  nav: 'Command Code',
+  subtitle: 'Plans, credits and quota windows',
+  refresh: 'Refresh',
+  refreshing: 'Refreshing…',
+  loading: 'Loading account usage…',
+  noKey: 'No API key configured',
+  noKeyHint: 'Paste a key — or sign in — under Settings → Command Code, then refresh.',
+  plan: 'Plan',
+  credits: 'Credits',
+  limits: 'Quota windows',
+  usage: 'Usage',
+  monthly: 'Monthly',
+  monthlyLimit: 'Monthly limit',
+  monthlyUsed: 'Monthly used',
+  remaining: 'Remaining',
+  purchased: 'Purchased',
+  free: 'Free',
+  fiveHour: '5-hour window',
+  weekly: 'Weekly window',
+  fiveHourShort: '5-hour',
+  weeklyShort: 'Weekly',
+  windowUnlimited: 'unlimited',
+  exceeded: 'Exceeded',
+  exhausted: 'Used up',
+  resets: 'Resets',
+  requests: 'Requests',
+  failed: 'failed',
+  successRate: 'Success rate',
+  spend: 'Spend',
+  tokens: 'Tokens',
+  tokensIn: 'in',
+  tokensOut: 'out',
+  periodEnds: 'Period ends',
+  updated: 'Updated',
+  partial: 'Some endpoint data unavailable',
+  active: 'Active',
+  coolingDown: 'Cooling down',
+  invalidKey: 'Invalid key',
+  unconfigured: 'Not configured',
+  unavailable: 'No data',
+  errorInvalidKey: 'API key invalid or expired',
+  errorInvalidKeyHint: 'The server rejected every request (401). Check the key for this account, or generate a new one in the commandcode.ai console.',
+  errorServiceUnavailable: 'The Command Code service is temporarily unavailable',
+  errorServiceUnavailableHint: 'The server returned errors (5xx). Try Refresh again in a moment.',
+  errorNetwork: 'Could not reach the Command Code service',
+  errorNetworkHint: 'No request reached the server. Check your network connection or the API base setting.',
+  errorGeneric: 'Could not fetch account usage',
+}
+
+/** Look up one panel string. The fallback key keeps a bad call visible, never blank. */
+export function panelText(key: PanelKey): string {
+  return PANEL_COPY[key] ?? key
+}
diff --git a/src/client/panel-slots.ts b/src/client/panel-slots.ts
new file mode 100644
index 0000000..46a0bd6
--- /dev/null
+++ b/src/client/panel-slots.ts
@@ -0,0 +1,47 @@
+/**
+ * Slot contracts the plans & quota panel registers into.
+ *
+ * Neither slot belongs to this plugin: `sidebar.footer.action` is declared by
+ * `@deepseek-ai/dsh-client-ui-sidebar` and `main` by
+ * `@deepseek-ai/dsh-client-ui-layout`. Neither package is a dependency of this
+ * bundle (the panel only needs their *shapes* at compile time, and neither
+ * ships a client module the browser would have to resolve), so — exactly as
+ * `card.tsx` does for `settings.models.provider-card` — the declarations are
+ * re-stated here and merged into the framework's `SlotMap`.
+ *
+ * The re-statement must stay structurally identical to upstream's. That is the
+ * point of the merge: the registration site typechecks against the real
+ * contract (kind, scope, owner props, inject face), so an upstream change that
+ * invalidates this panel is a compile error here rather than a silent
+ * mis-registration at runtime. A future dsh that ships either declaration to
+ * the client through some other path would collide at compile time — which is
+ * the intended alarm, and why this file exists instead of a local cast.
+ *
+ * @module dsh-commandcode-provider/client/panel-slots
+ */
+
+import type { SidebarFooterActionOwnerProps } from './panel-view.ts'
+
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+  interface SlotMap {
+    /**
+     * The layout's central panel, selected by the footer entry's id. The
+     * reserved `conversation` key hosts the Conversation; the panel this
+     * plugin contributes occupies `commandcode-panel` and receives no Session
+     * binding. Its owner props are empty — a global panel is root-scoped
+     * chrome, so clipboard, zoom, and user selection stay the browser's.
+     */
+    'main': { kind: 'keyed'; scope: 'root' }
+    /**
+     * The sidebar-foot action list, rendered inside the foot area directly
+     * ABOVE the Settings seat (`footArea` renders `footerActions` then
+     * `settingsArea`). Registering here is what pins a row to the bottom of
+     * the sidebar on top of Settings — unlike `sidebar.panellist`, whose rows
+     * render as global panel icons at the very top of the column.
+     *
+     * The shell wraps nothing: the entry owns its whole surface and receives
+     * only the column fold state.
+     */
+    'sidebar.footer.action': { kind: 'list'; scope: 'root'; owner: SidebarFooterActionOwnerProps }
+  }
+}
diff --git a/src/client/panel-styles.ts b/src/client/panel-styles.ts
new file mode 100644
index 0000000..c34e08a
--- /dev/null
+++ b/src/client/panel-styles.ts
@@ -0,0 +1,144 @@
+/**
+ * Stylesheet for the Command Code plans & quota panel (the sidebar footer card
+ * and the dashboard it opens).
+ *
+ * Returned as a string rather than injected here so the modules stay free of
+ * DOM side effects at import time — the client entry installs it once, keyed
+ * by the same `data-plugin-css` attribute the settings-page stylesheet uses,
+ * and removes it again when the plugin's fiber unwinds.
+ *
+ * Every colour comes from a harness theme alias with a neutral fallback, so
+ * the panel follows the active theme (light/dark and any brand pack) without
+ * hardcoded values. Classes are `ccp-` prefixed to stay clear of the settings
+ * page's `cc-` set.
+ *
+ * @module dsh-commandcode-provider/client/panel-styles
+ */
+
+/**
+ * Stylesheet id (the `data-plugin-css` value that makes injection idempotent).
+ *
+ * The package prefix must match the one the settings-page stylesheet uses
+ * (`injectPageCss` in `./index.ts`) and this package's real name: an id is the
+ * injection's identity, so a stale fork prefix would let a second copy of the
+ * plugin inject the same rules twice and would misreport the owner in the DOM.
+ */
+export const PANEL_CSS_ID = '@mars-sea/dsh-commandcode-provider/CommandCodePanel.module.css'
+
+/** The panel stylesheet. */
+export const PANEL_CSS = `
+/* ------------------------------------------------- sidebar footer card */
+/* The shell's foot area renders this list ABOVE the Settings seat, so the card
+   is the sidebar's bottom-most content. The shell supplies no chrome: the entry
+   is the button. It is deliberately quiet — a surface that sits beside Settings
+   should read as part of the column, not as a call to action — with one hover
+   step and a hairline border.
+
+   The shell's container is a flex ROW whose occupants (this card and ui-cordis's
+   footer chip) each declare a full-width line and shrink-proof flex, so as a row
+   it would overflow the column. Both were written for a full-width line, which
+   is exactly what a column gives them. Matched by the CSS-module class STEM —
+   never a hashed name — so a dsh that renames it degrades to the shell's own
+   row rather than breaking. */
+[class*="_footerActions"]{flex-direction:column}
+.ccp-foot{box-sizing:border-box;flex:0 0 auto;width:100%;min-width:0;font:inherit;color:var(--dsw-alias-label-secondary);text-align:left;cursor:pointer;background:0 0;border:1px solid transparent;border-radius:10px;flex-direction:column;gap:6px;margin:0 0 4px;padding:8px;display:flex}
+.ccp-foot:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover);border-color:var(--dsw-alias-border-l2)}
+.ccp-foot:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}
+.ccp-footTop{align-items:center;gap:8px;min-width:0;display:flex}
+.ccp-footName{white-space:nowrap;text-overflow:ellipsis;color:var(--dsw-alias-label-primary);min-width:0;overflow:hidden;font-size:13px;font-weight:500;line-height:20px}
+/* One block per quota window: a head line carrying the window's own spend and
+   limit, then the FULL-WIDTH bar under it. Stacking the two lets the card show
+   the dollar figures — the reason this surface exists — without squeezing the
+   bar into what is left beside them. Mirrors the dashboard's own window block. */
+.ccp-footRow{flex-direction:column;gap:4px;min-width:0;display:flex}
+.ccp-footHead{align-items:baseline;gap:8px;min-width:0;display:flex}
+.ccp-footLabel{flex:1;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px}
+.ccp-footAmount{flex:none;color:var(--dsw-alias-label-secondary);font-size:11px;line-height:16px;font-variant-numeric:tabular-nums;white-space:nowrap}
+/* The card's markup must stay PHRASING content — it renders inside the shell's
+   own button — so these bars are spans, not divs. That makes display:block
+   load-bearing on BOTH: an inline box ignores width and height outright, so
+   without it the 5px track still painted (a flex item is blockified by its
+   container) while the fill collapsed to 0x0 and the bar showed no usage. */
+.ccp-footBar{display:block;background:var(--dsw-alias-bg-layer-2);border-radius:999px;height:5px;overflow:hidden}
+.ccp-footFill{display:block;background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}
+.ccp-footFillWarn{background:var(--dsw-alias-state-error-primary)}
+.ccp-footPct{flex:none;width:34px;color:var(--dsw-alias-label-secondary);text-align:right;font-size:11px;line-height:16px;font-variant-numeric:tabular-nums}
+
+/* The 56px rail: one icon button on the shell's own rail geometry (36px cell),
+   so the collapsed column keeps a single 18px glyph like its siblings. */
+.ccp-railButton{box-sizing:border-box;width:36px;height:36px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:1px solid transparent;border-radius:8px;flex:none;justify-content:center;align-items:center;margin:0 0 4px;padding:0;display:inline-flex}
+.ccp-railButton:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover)}
+.ccp-railButton:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}
+
+/* The ring glyph. Sized entirely by its own width/height attribute, so the
+   footer row, the rail button and the dashboard can each ask for their own. */
+.ccp-glyph{flex:none;justify-content:center;align-items:center;display:inline-flex;color:var(--dsw-alias-brand-primary)}
+
+/* ------------------------------------------------------------ dashboard */
+/* The center column in the layout frame: fill it, scroll the content column,
+   and cap the reading width like the harness's own panels. */
+.ccp-main{background:var(--dsw-alias-bg-layer-1);width:100%;height:100%;overflow:auto;display:block}
+.ccp-mainInner{max-width:760px;margin:0 auto;padding:24px 20px 40px;flex-direction:column;gap:14px;display:flex;color:var(--dsw-alias-label-primary)}
+.ccp-header{align-items:center;gap:10px;display:flex;flex-wrap:wrap}
+.ccp-headerText{flex-direction:column;gap:2px;display:flex;min-width:0}
+.ccp-title{margin:0;font-size:18px;font-weight:600;line-height:1.4}
+.ccp-subtitle{margin:0;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}
+.ccp-spacer{flex:1}
+.ccp-meta{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;font-variant-numeric:tabular-nums}
+.ccp-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
+
+/* Notices: the no-key guidance, a blocked report, and a stale-data error. */
+.ccp-notice{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;padding:12px 14px;flex-direction:column;gap:4px;display:flex}
+.ccp-noticeError{border-color:var(--dsw-alias-state-error-primary)}
+.ccp-noticeTitle{margin:0;font-size:13px;font-weight:600;line-height:1.5}
+.ccp-noticeError .ccp-noticeTitle{color:var(--dsw-alias-state-error-primary)}
+.ccp-noticeHint{margin:0;color:var(--dsw-alias-label-secondary);font-size:12px;line-height:1.55}
+.ccp-noticeDetail{margin:0;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;word-break:break-word}
+
+.ccp-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:14px;padding:16px 18px;flex-direction:column;gap:16px;display:flex}
+.ccp-cardHead{align-items:center;gap:10px;display:flex;flex-wrap:wrap}
+.ccp-avatar{flex:none;width:28px;height:28px;color:var(--dsw-alias-brand-primary);background:var(--dsw-alias-bg-module-platform);border-radius:50%;justify-content:center;align-items:center;font-size:12px;font-weight:600;line-height:1;display:inline-flex}
+.ccp-cardIdentity{flex-direction:column;gap:1px;min-width:0;display:flex}
+.ccp-cardTitle{font-size:13px;font-weight:600;line-height:1.4}
+.ccp-cardOwner{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.4;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:220px}
+.ccp-block{flex-direction:column;gap:8px;display:flex}
+.ccp-blockTitle{margin:0;color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:600;line-height:1.5;text-transform:uppercase;letter-spacing:.04em}
+.ccp-planRow{align-items:center;gap:8px;display:flex;flex-wrap:wrap}
+.ccp-fieldLabel{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}
+.ccp-planName{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:600;line-height:1.5}
+
+/* Stat tiles: the monthly credits and the usage totals share one grid. */
+.ccp-tiles{display:grid;grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:8px}
+.ccp-tile{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);border-radius:8px;padding:8px 10px;flex-direction:column;gap:2px;display:flex;min-width:0}
+.ccp-tileLabel{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5}
+.ccp-tileValue{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4;font-variant-numeric:tabular-nums}
+.ccp-tileSub{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:1.5;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+
+/* Quota bars: the monthly bar and the two windows stack in one column, each a
+   label row plus the track. */
+.ccp-windows{flex-direction:column;gap:14px;display:flex}
+.ccp-window{flex-direction:column;gap:6px;display:flex}
+.ccp-windowHead{align-items:baseline;gap:8px;display:flex}
+.ccp-windowLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:500;line-height:1.5}
+.ccp-windowValue{color:var(--dsw-alias-label-secondary);font-size:12px;line-height:1.5;font-variant-numeric:tabular-nums;white-space:nowrap}
+.ccp-windowPct{color:var(--dsw-alias-label-primary);min-width:38px;text-align:right;font-size:12px;font-weight:600;line-height:1.5;font-variant-numeric:tabular-nums}
+.ccp-warnTag{white-space:nowrap;background:var(--dsw-alias-state-warn-tertiary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warn-primary,var(--dsw-alias-label-secondary));border-radius:999px;padding:0 8px;font-size:11px;font-weight:600;line-height:17px}
+.ccp-bar{overflow:hidden;background:var(--dsw-alias-bg-layer-1);border-radius:999px;height:8px}
+.ccp-barFill{background:var(--dsw-alias-brand-primary);border-radius:999px;height:100%;transition:width .3s ease}
+.ccp-barFillWarn{background:var(--dsw-alias-state-error-primary)}
+.ccp-windowReset{color:var(--dsw-alias-label-tertiary);margin:0;font-size:11px;line-height:1.5}
+
+/* Badges. */
+.ccp-badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-brand-primary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:600;line-height:17px}
+.ccp-badgeError{background:transparent;color:var(--dsw-alias-state-error-primary)}
+.ccp-badgeWarn{background:var(--dsw-alias-state-warn-tertiary,var(--dsw-alias-bg-module-platform));color:var(--dsw-alias-state-warn-primary,var(--dsw-alias-label-secondary))}
+.ccp-badgeMuted{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px;max-width:220px;overflow:hidden;text-overflow:ellipsis}
+
+/* Account switch: plain buttons, like the settings page's usage carousel. */
+.ccp-tabs{flex-wrap:wrap;gap:6px;display:flex}
+.ccp-tab{align-items:center;font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:2px 10px;font-size:12px;line-height:18px;display:inline-flex;gap:6px}
+.ccp-tab:hover:not(.ccp-tabActive){color:var(--dsw-alias-label-primary)}
+.ccp-tabActive{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-brand-primary)}
+
+@media (prefers-reduced-motion:reduce){.ccp-footFill,.ccp-barFill{transition:none}}
+`
diff --git a/src/client/panel-view.tsx b/src/client/panel-view.tsx
new file mode 100644
index 0000000..9c084e3
--- /dev/null
+++ b/src/client/panel-view.tsx
@@ -0,0 +1,471 @@
+/**
+ * React components for the Command Code plans & quota panel (browser half):
+ * the sidebar footer card and the dashboard it opens in the center column.
+ *
+ * Both render one {@link PanelView} projected by `./panel.ts` — no fact is
+ * derived here. Strings arrive as keys into `view.text`, and every one of them
+ * is English, because the view is built from `./panel-copy.ts` rather than the
+ * harness `ctx.locale` namespace (which follows the user's language and would
+ * render this panel in Chinese on a Chinese harness — the thing this surface
+ * exists to avoid).
+ *
+ * The footer card is the panel's home: the sidebar shell renders it in the foot
+ * area directly above the Settings seat, so each quota window's own spend and
+ * limit — the 5-hour and the weekly one — are on screen without opening
+ * anything. Clicking it selects the `main` panel this file also renders — and
+ * unlike a `sidebar.panellist` row, whose button chrome and label the SHELL
+ * owns, this entry owns its whole surface and therefore calls `open()` itself.
+ *
+ * Styles ride the stylesheet `./panel-styles.ts` returns, injected once by
+ * the client entry; classes are `ccp-` prefixed to stay clear of the settings
+ * page's `cc-` set.
+ *
+ * @module dsh-commandcode-provider/client/panel-view
+ */
+
+import { useEffect, useState } from 'react'
+import { Button } from '@deepseek-ai/dsh-client-ui-primitives'
+import type { SnapshotStore } from './snapshot-store.ts'
+import type { UsagePageState } from './usage.ts'
+import type { SettingsPageState } from './settings.ts'
+import { buildPanelView } from './panel.ts'
+import type { PanelAccountView, PanelStatView, PanelView, PanelWindowView } from './panel.ts'
+import type { PanelKey } from './panel-copy.ts'
+// SlotMap merge for `main` / `sidebar.footer.action` (load-bearing: the slots
+// this file's components register into are typed only by that augmentation).
+import './panel-slots.ts'
+
+/**
+ * Owner share of the sidebar-foot action hole: the shell renders the foot area
+ * and hands each action only the column fold state. There is no button chrome
+ * and no `label` seat — the entry is the whole surface.
+ */
+export interface SidebarFooterActionOwnerProps {
+  /** Whether the sidebar renders wide content (false = 56px rail). */
+  wide: boolean
+}
+
+/**
+ * The injected face both panel slots carry. Bound by the client entry so the
+ * components stay unaware of the settings controller, the login controller,
+ * the layout service and the module-level auto-refresh loop.
+ *
+ * NOTE the split from {@link PanelComponentProps}: this is the face the
+ * registration's `inject` factory RETURNS, and the renderer does not hand it to
+ * the component verbatim. `bindInjectSources` destructures the `hooks`
+ * compartment OUT of the face and re-exposes each member as a `use<Name>` prop
+ * (`commandCodeUsage` → `useCommandCodeUsage`). A component that reads
+ * `props.hooks.*` therefore finds `undefined` at runtime and crashes on render
+ * — which the slot renderer contains by ABDICATING the entry, so the surface
+ * vanishes with no visible error. Read the `useX` seats instead.
+ */
+export interface PanelInjected {
+  hooks: {
+    commandCodeUsage: SnapshotStore<UsagePageState>
+    commandCodeSettings: SnapshotStore<SettingsPageState>
+  }
+  /** Fetch the report now (the dashboard's Refresh action). */
+  refresh(): void
+  /** Start the shared background poll for this mount; returns its disposer. */
+  startAutoRefresh(): () => void
+  /** Select this panel in the center column (`ctx.layout.selectPanel`). */
+  open(): void
+}
+
+/**
+ * The props a panel component actually receives: the bound `useX` seats (what
+ * {@link PanelInjected}'s `hooks` compartment becomes), the pass-through
+ * actions, and no raw `hooks` key.
+ *
+ * `buildPanelView` is cheap (one pass over the account list) and recomputing it
+ * per notification is what keeps a store update from ever rendering a stale
+ * quota, so the selector is deliberately the whole snapshot.
+ */
+export interface PanelComponentProps {
+  useCommandCodeUsage<T>(selector: (state: UsagePageState) => T): T
+  useCommandCodeSettings<T>(selector: (state: SettingsPageState) => T): T
+  refresh(): void
+  startAutoRefresh(): () => void
+  open(): void
+}
+
+/** Props of the sidebar footer card: the panel face plus the shell's fold state. */
+export interface CommandCodeFooterEntryProps extends PanelComponentProps, SidebarFooterActionOwnerProps {}
+
+/** The panel's view, recomputed from both seats on every notification. */
+function usePanelView(props: PanelComponentProps): PanelView {
+  const usage = props.useCommandCodeUsage((state) => state)
+  const settings = props.useCommandCodeSettings((state) => state)
+  return buildPanelView({
+    usage,
+    apiKeyConfigured: settings.anyAccountConfigured,
+    removingIds: settings.accountsRemoving,
+  })
+}
+
+/**
+ * The quota ring. One glyph serves the rail button, the footer card's top row
+ * and the dashboard header: a faint track plus an arc whose sweep is the
+ * consumption, drawn from 12 o'clock. Circumference 2πr = 45.55 at r = 7.25.
+ */
+function Ring({ percent, warn, size }: { percent: number; warn: boolean; size: number }) {
+  const clamped = Math.min(100, Math.max(0, percent))
+  const circumference = 45.55
+  // Rounded to three decimals: the raw product lands on floats like
+  // 34.162499999999994, which is a needless DOM diff churn.
+  const dashoffset = Math.round(circumference * (1 - clamped / 100) * 1000) / 1000
+  return (
+    <span className="ccp-glyph" aria-hidden="true">
+      <svg viewBox="0 0 20 20" width={size} height={size} focusable="false">
+        <circle cx="10" cy="10" r="7.25" fill="none" stroke="currentColor" strokeWidth="1.5" opacity="0.4" />
+        <circle
+          cx="10"
+          cy="10"
+          r="7.25"
+          fill="none"
+          stroke={warn ? 'var(--dsw-alias-state-error-primary)' : 'currentColor'}
+          strokeWidth="2.5"
+          strokeLinecap="round"
+          strokeDasharray={String(circumference)}
+          strokeDashoffset={String(dashoffset)}
+          transform="rotate(-90 10 10)"
+        />
+      </svg>
+    </span>
+  )
+}
+
+/** One labelled bar. `compact` drops the reset line; the footer draws its own. */
+function QuotaBar({ label, value, percent, barPercent, warn, resetsAt, resetsLabel }: {
+  label: string
+  value: string
+  percent: string
+  barPercent: number
+  warn: string
+  resetsAt: string
+  resetsLabel: string
+}) {
+  const clamped = Math.min(100, Math.max(0, barPercent))
+  return (
+    <div className="ccp-window">
+      <div className="ccp-windowHead">
+        <span className="ccp-windowLabel">{label}</span>
+        {warn !== '' ? <span className="ccp-warnTag">{warn}</span> : null}
+        <span className="ccp-spacer" />
+        {value !== '' ? <span className="ccp-windowValue">{value}</span> : null}
+        <span className="ccp-windowPct">{percent}</span>
+      </div>
+      <div className="ccp-bar" role="progressbar" aria-label={label} aria-valuemin={0} aria-valuemax={100} aria-valuenow={clamped}>
+        <div className={warn !== '' ? 'ccp-barFill ccp-barFillWarn' : 'ccp-barFill'} style={{ width: `${clamped}%` }} />
+      </div>
+      {resetsAt !== '' ? <p className="ccp-windowReset">{resetsLabel} {resetsAt}</p> : null}
+    </div>
+  )
+}
+
+/** A labelled figure. */
+function Tile({ label, value, sub }: { label: string; value: string; sub?: string }) {
+  return (
+    <div className="ccp-tile">
+      <span className="ccp-tileLabel">{label}</span>
+      <span className="ccp-tileValue">{value}</span>
+      {sub !== undefined && sub !== '' ? <span className="ccp-tileSub">{sub}</span> : null}
+    </div>
+  )
+}
+
+/** One usage tile. */
+function StatTile({ stat, label }: { stat: PanelStatView; label: string }) {
+  return <Tile label={label} value={stat.value} sub={stat.sub} />
+}
+
+/** The rotation/credential badge line for one account. */
+function markText(account: PanelAccountView, text: (key: PanelKey) => string): string {
+  if (account.mark === undefined) return ''
+  if (account.mark === 'coolingDown' && account.cooldownUntil !== '') {
+    return `${text('coolingDown')} · ${account.cooldownUntil}`
+  }
+  return text(account.mark)
+}
+
+/** `Default account` → `D`; used for the card's monogram chip. */
+function initial(label: string): string {
+  const trimmed = label.trim()
+  return trimmed === '' ? '?' : trimmed[0]!.toUpperCase()
+}
+
+/**
+ * One account's full report: the monthly limit/usage bar, the two quota
+ * windows, then the credit and usage totals.
+ */
+function AccountCard({ account, view }: { account: PanelAccountView; view: PanelView }) {
+  const text = (key: PanelKey): string => view.text[key] ?? key
+  const mark = markText(account, text)
+  const monthly = account.monthly
+
+  return (
+    <section className="ccp-card" aria-label={account.label}>
+      <header className="ccp-cardHead">
+        <span className="ccp-avatar" aria-hidden="true">{initial(account.label)}</span>
+        <span className="ccp-cardIdentity">
+          <span className="ccp-cardTitle">{account.label}</span>
+          {account.owner !== '' ? <span className="ccp-cardOwner">{account.owner}</span> : null}
+        </span>
+        <span className="ccp-spacer" />
+        {account.planName !== '' ? <span className="ccp-badge">{account.planName}</span> : null}
+        {account.planStatus !== '' ? <span className="ccp-badge ccp-badgeWarn">{account.planStatus}</span> : null}
+        {mark !== '' ? (
+          <span className={account.mark === 'invalidKey' ? 'ccp-badge ccp-badgeError' : 'ccp-badgeMuted'}>{mark}</span>
+        ) : null}
+        {account.periodEnds !== '' ? (
+          <span className="ccp-meta">{text('periodEnds')} {account.periodEnds}</span>
+        ) : null}
+      </header>
+
+      {account.unconfigured ? <p className="ccp-hint">{text('unconfigured')}</p> : null}
+
+      {monthly !== undefined && monthly.known ? (
+        <QuotaBar
+          label={text('monthly')}
+          value={`${monthly.used} / ${monthly.limit}`}
+          percent={`${monthly.percent}%`}
+          barPercent={monthly.barPercent}
+          warn={monthly.exhausted ? text('exhausted') : ''}
+          resetsAt=""
+          resetsLabel=""
+        />
+      ) : (
+        <div className="ccp-planRow">
+          {/* The plan is a fact the card already shows in its header badge; what
+              is missing here is the RATIO, so the row names the plan whenever
+              the report carries one and falls back to a placeholder only when
+              the report itself is silent. */}
+          <span className="ccp-fieldLabel">{text('plan')}</span>
+          <span className="ccp-planName">{account.planName !== '' ? account.planName : text('unavailable')}</span>
+        </div>
+      )}
+
+      {/* A balance the billing endpoint DID report, so a card without a ratio
+          still states something true instead of nothing. */}
+      {monthly !== undefined && monthly.remaining !== '—' ? (
+        <div className="ccp-planRow">
+          <span className="ccp-fieldLabel">{text('remaining')}</span>
+          <span className="ccp-planName">{monthly.remaining}</span>
+        </div>
+      ) : null}
+
+      {account.windows.length > 0 ? (
+        <div className="ccp-windows">
+          {account.windows.map((window: PanelWindowView) => (
+            <QuotaBar
+              key={window.label}
+              label={text(window.label)}
+              value={window.value}
+              percent={window.capped ? `${window.percent}%` : text('windowUnlimited')}
+              barPercent={window.barPercent}
+              warn={window.exceeded ? text('exceeded') : ''}
+              resetsAt={window.resetsAt}
+              resetsLabel={text('resets')}
+            />
+          ))}
+        </div>
+      ) : null}
+
+      {monthly !== undefined ? (
+        <div className="ccp-block">
+          <h4 className="ccp-blockTitle">{text('credits')}</h4>
+          <div className="ccp-tiles">
+            <Tile label={text('monthlyLimit')} value={monthly.limit} />
+            <Tile label={text('monthlyUsed')} value={monthly.used} />
+            <Tile label={text('remaining')} value={monthly.remaining} />
+            <Tile label={text('purchased')} value={monthly.purchased} />
+            <Tile label={text('free')} value={monthly.free} />
+          </div>
+        </div>
+      ) : null}
+
+      {account.stats.length > 0 ? (
+        <div className="ccp-block">
+          <h4 className="ccp-blockTitle">{text('usage')}</h4>
+          <div className="ccp-tiles">
+            {account.stats.map((stat) => (
+              <StatTile key={stat.label} stat={stat} label={text(stat.label)} />
+            ))}
+          </div>
+        </div>
+      ) : null}
+    </section>
+  )
+}
+
+/**
+ * The center-column dashboard, registered into the layout's keyed `main` slot
+ * under the same id the footer card selects, so the two are one navigation
+ * entry: the card shows the plan, the monthly bar and the quota window; the
+ * panel shows everything, including the per-account breakdown.
+ */
+export function CommandCodePanel(props: PanelComponentProps) {
+  const view = usePanelView(props)
+  const text = (key: PanelKey): string => view.text[key] ?? key
+  const [selectedId, setSelectedId] = useState<string | undefined>(undefined)
+
+  const startAutoRefresh = props.startAutoRefresh
+  useEffect(() => startAutoRefresh(), [startAutoRefresh])
+
+  const accounts = view.accounts
+  const selected = accounts.find((account) => account.id === selectedId)
+    ?? view.selected
+    ?? accounts[0]
+
+  return (
+    <div className="ccp-main" role="region" aria-label={text('nav')}>
+      <div className="ccp-mainInner">
+        <header className="ccp-header">
+          <div className="ccp-headerText">
+            <h2 className="ccp-title">{text('nav')}</h2>
+            <p className="ccp-subtitle">{text('subtitle')}</p>
+          </div>
+          <span className="ccp-spacer" />
+          {view.updatedAt !== '' ? <span className="ccp-meta">{text('updated')} {view.updatedAt}</span> : null}
+          <Button
+            variant="ghost"
+            size="sm"
+            disabled={view.loading}
+            onClick={() => props.refresh()}
+          >
+            {view.loading ? text('refreshing') : text('refresh')}
+          </Button>
+        </header>
+
+        {view.noKey ? (
+          <div className="ccp-notice">
+            <p className="ccp-noticeTitle">{text('noKey')}</p>
+            <p className="ccp-noticeHint">{text('noKeyHint')}</p>
+          </div>
+        ) : null}
+
+        {view.failure !== undefined ? (
+          <div className="ccp-notice ccp-noticeError" role="alert">
+            <p className="ccp-noticeTitle">{text(view.failure.title)}</p>
+            <p className="ccp-noticeHint">{text(view.failure.hint)}</p>
+            {view.failure.detail !== '' ? <p className="ccp-noticeDetail">{view.failure.detail}</p> : null}
+          </div>
+        ) : null}
+
+        {!view.noKey && view.failure === undefined && accounts.length === 0 && view.loading ? (
+          <p className="ccp-hint">{text('loading')}</p>
+        ) : null}
+
+        {view.staleError !== undefined && view.staleError !== '' ? (
+          <p className="ccp-hint" role="status">{text('errorGeneric')} — {view.staleError}</p>
+        ) : null}
+
+        {accounts.length > 1 ? (
+          <div className="ccp-tabs" role="tablist" aria-label={text('nav')}>
+            {accounts.map((account) => (
+              <button
+                key={account.id}
+                type="button"
+                role="tab"
+                aria-selected={selected?.id === account.id}
+                className={selected?.id === account.id ? 'ccp-tab ccp-tabActive' : 'ccp-tab'}
+                onClick={() => setSelectedId(account.id)}
+              >
+                {account.label}
+              </button>
+            ))}
+          </div>
+        ) : null}
+
+        {selected !== undefined ? <AccountCard account={selected} view={view} /> : null}
+
+        {view.partial !== undefined ? <p className="ccp-hint">{text(view.partial)}</p> : null}
+      </div>
+    </div>
+  )
+}
+
+/**
+ * The sidebar footer card, registered into `sidebar.footer.action` — the list
+ * the shell renders in the sidebar's foot area directly ABOVE the Settings
+ * seat, so the panel reads as a bottom-pinned sibling of Settings rather than
+ * a global panel icon at the top of the column.
+ *
+ * The shell wraps nothing here, so this component owns the surface: the
+ * button, its chrome and its accessible name. In the expanded column it draws
+ * the title row, then one block per quota window (5-hour, then weekly) — the
+ * window's own spend and limit (`$1.32 / $6.00`), its percentage and its bar —
+ * and nothing else: the card's figures are the two windows the account runs
+ * into, so the period total stays in the tooltip rather than taking a third
+ * line. In the 56px rail it collapses to a 36px icon button carrying the ring,
+ * matching the shell's own rail geometry. `wide` comes from the shell as an
+ * owner prop — unlike the old `sidebar.panellist` row, this slot really does
+ * supply it.
+ */
+export function CommandCodeFooterEntry(props: CommandCodeFooterEntryProps) {
+  const view = usePanelView(props)
+
+  const startAutoRefresh = props.startAutoRefresh
+  useEffect(() => startAutoRefresh(), [startAutoRefresh])
+
+  const text = (key: PanelKey): string => view.text[key] ?? key
+  // The ring tracks the tightest window — the 5-hour one whenever it is capped,
+  // which is the limit an account actually runs into first. `footerBars` is
+  // ordered that way, so the leading bar is the headline.
+  const headline = view.footerBars[0]
+  // The tooltip doubles as the accessible name; it always begins with the
+  // visible title, so the label the user reads is contained in the name.
+  const title = view.footTitle
+
+  if (!props.wide) {
+    return (
+      <button
+        type="button"
+        className="ccp-railButton"
+        aria-label={title}
+        title={title}
+        onClick={() => props.open()}
+      >
+        <Ring percent={headline?.barPercent ?? 0} warn={headline?.warn ?? false} size={18} />
+      </button>
+    )
+  }
+
+  return (
+    <button
+      type="button"
+      className="ccp-foot"
+      aria-label={title}
+      title={title}
+      onClick={() => props.open()}
+    >
+      <span className="ccp-footTop">
+        <Ring percent={headline?.barPercent ?? 0} warn={headline?.warn ?? false} size={16} />
+        <span className="ccp-footName">{text('nav')}</span>
+        <span className="ccp-spacer" />
+        {view.status !== '' ? (
+          <span className="ccp-badgeMuted">{view.status}</span>
+        ) : view.planName !== text('nav') ? (
+          <span className="ccp-badge">{view.planName}</span>
+        ) : null}
+      </span>
+
+      {view.footerBars.map((bar) => (
+        <span className="ccp-footRow" key={bar.label}>
+          <span className="ccp-footHead">
+            <span className="ccp-footLabel">{text(bar.label)}</span>
+            <span className="ccp-spacer" />
+            {bar.detail !== '' ? <span className="ccp-footAmount">{bar.detail}</span> : null}
+            <span className="ccp-footPct">{bar.percent}</span>
+          </span>
+          <span className="ccp-footBar">
+            <span
+              className={bar.warn ? 'ccp-footFill ccp-footFillWarn' : 'ccp-footFill'}
+              style={{ width: `${bar.barPercent}%` }}
+            />
+          </span>
+        </span>
+      ))}
+    </button>
+  )
+}
diff --git a/src/client/panel.ts b/src/client/panel.ts
new file mode 100644
index 0000000..e4c42a0
--- /dev/null
+++ b/src/client/panel.ts
@@ -0,0 +1,609 @@
+/**
+ * View layer for the Command Code plans & quota panel (the sidebar footer card
+ * and the dashboard it opens in the center column).
+ *
+ * Deliberately JSX-free and React-free, mirroring `./settings.ts` and
+ * `./usage.ts`: it turns the shared usage snapshot into one presentation
+ * tree that both React components render, and it owns the one shared side
+ * effect (the throttled background refresh that keeps the sidebar card
+ * current). Node tests drive everything here without a DOM.
+ *
+ * Every displayed string is decided here, as a `PanelKey` plus a `text`
+ * record resolved from `./panel-copy.ts` — so the components carry no
+ * formatting, pluralization, or copy of their own, and the panel cannot
+ * regress into the harness locale (see that module for why it is English-only).
+ *
+ * @module dsh-commandcode-provider/client/panel
+ */
+
+import type { CommandCodeUsageReport } from '../adapter.ts'
+import type { CommandCodeAccountUsage } from '../usage-wire.ts'
+import type { UsagePageState } from './usage.ts'
+import {
+  formatMoney,
+  formatMoneyExact,
+  formatSuccessRate,
+  formatTokensCompact,
+} from './usage.ts'
+import { panelText, PANEL_COPY } from './panel-copy.ts'
+import type { PanelKey } from './panel-copy.ts'
+
+/** One quota window (5-hour or weekly) in display form. */
+export interface PanelWindowView {
+  /** Row-label key into the view's `text` record. */
+  label: PanelKey
+  /** `used / cap`, or just `used` when the window is uncapped. */
+  value: string
+  /** The window reports a cap, so `percent` is meaningful. */
+  capped: boolean
+  /** Percentage actually consumed (may exceed 100 when over the cap). */
+  percent: number
+  /** Fill width for the bar, clamped to [0, 100]. */
+  barPercent: number
+  /** Window is over its cap. */
+  exceeded: boolean
+  /** Local reset time, empty when the endpoint reported none. */
+  resetsAt: string
+}
+
+/**
+ * Monthly credit state, derived exactly the way the official CLI derives it
+ * (`getCreditDepletionPct` in `command-code/dist/cli.mjs`): the plan's credit
+ * total is the LIMIT, and the billing endpoint's `credits.monthlyCredits` is
+ * the REMAINING balance, so consumption is `limit - remaining`. The CLI's own
+ * wording for the same two numbers is `Plan: N% used, X credits left`.
+ *
+ * Purchased and free credits are separate balances that extend what an account
+ * can spend, so they are reported as their own tiles rather than folded into
+ * the limit.
+ */
+export interface PanelMonthlyView {
+  /**
+   * A ratio is meaningful — the plan published a credit total AND the billing
+   * endpoint published the balance left of it. When false the view draws no
+   * bar: a percentage needs both halves, and inventing either one is how a
+   * failed billing call turns into a confident "100% used".
+   */
+  known: boolean
+  /** Plan credit total for the period (the limit); a dash when unreported. */
+  limit: string
+  /** Consumed this period (`limit - remaining`); a dash until both are known. */
+  used: string
+  /** Credits still available; a dash when the balance was not reported. */
+  remaining: string
+  /** Purchased top-up balance. */
+  purchased: string
+  /** Promotional balance. */
+  free: string
+  /** Consumption as a percentage of the limit; 0 when there is no ratio. */
+  percent: number
+  /** Fill width for the bar, clamped to [0, 100]. */
+  barPercent: number
+  /** The plan's credits are used up. */
+  exhausted: boolean
+  /** Billing period end, local date; empty when unreported. */
+  periodEnds: string
+}
+
+/** One compact bar in the sidebar footer card. */
+export interface PanelFooterBar {
+  /** Row label key (short forms: `Monthly`, `5-hour`, `Weekly`). */
+  label: PanelKey
+  /** Printed right-hand percentage, e.g. `32%`; empty when there is no ratio. */
+  percent: string
+  /** Fill width, clamped to [0, 100]. */
+  barPercent: number
+  /** Render in the warning colour. */
+  warn: boolean
+  /**
+   * This window's own spend against its limit, e.g. `$1.32 / $6.00`. RENDERED,
+   * not just a tooltip: the card exists to show these figures, and the
+   * magnitudes are small dollar amounts (the endpoint reports a Pro account's
+   * five-hour cap as `3` and its weekly cap as `6`).
+   */
+  detail: string
+}
+
+/** One usage tile. */
+export interface PanelStatView {
+  label: PanelKey
+  value: string
+  /** Secondary line, empty when there is none. */
+  sub: string
+}
+
+/** One pool account's report, ready to render. */
+export interface PanelAccountView {
+  id: string
+  label: string
+  /** The account's display name (user name, else account name); empty when unreported. */
+  owner: string
+  /** Subscription display name; empty when unreported. */
+  planName: string
+  /** Subscription status when it is not a plain `active`; empty otherwise. */
+  planStatus: string
+  /** Rotation/credential state ('invalidKey' / 'coolingDown'); undefined when plain. */
+  mark: PanelKey | undefined
+  /** Known cooldown end, appended to the cooling-down badge; empty otherwise. */
+  cooldownUntil: string
+  /** No credential resolved for this slot. */
+  unconfigured: boolean
+  /** Billing period end, empty when unreported. */
+  periodEnds: string
+  /** Whether the account currently serves requests. */
+  active: boolean
+  /** Monthly credit state; undefined when neither endpoint reported it. */
+  monthly: PanelMonthlyView | undefined
+  windows: PanelWindowView[]
+  stats: PanelStatView[]
+}
+
+/** What actually went wrong, once — for the alert box. */
+export interface PanelFailureView {
+  title: PanelKey
+  /** The actionable line under the title. */
+  hint: PanelKey
+  /** The underlying transport message, shown small; empty when there is none. */
+  detail: string
+}
+
+/** The whole panel, in render order. */
+export interface PanelView {
+  /** Every English string this view references, by key. */
+  text: Partial<Record<PanelKey, string>>
+  /** Footer-card plan text (`Go`, `Pro`, …), or a state word. */
+  planName: string
+  /** Footer-card rotation/credential state line; empty when nothing to say. */
+  status: string
+  /**
+   * The compact bars the sidebar footer card stacks: the two quota windows an
+   * account actually runs into, 5-hour first then weekly. The monthly
+   * limit/usage bar belongs to the DASHBOARD alone — it moves once a billing
+   * period, whereas these two are what stop a session — so it is deliberately
+   * absent here. A window with no cap is left out: there is no ratio to draw.
+   */
+  footerBars: PanelFooterBar[]
+  /**
+   * This period's spend in dollars, formatted; empty when the usage endpoint
+   * reported nothing. NOT drawn as its own row — the card's visible figures are
+   * the two windows' own spend (see {@link PanelFooterBar.detail}), and a
+   * separate period total would sit next to the weekly window's near-identical
+   * figure — so it rides the tooltip and the accessible name instead.
+   */
+  cost: string
+  /**
+   * The footer card's accessible name and tooltip: `Command Code · Pro ·
+   * 5-hour $0.04 / $3.00 (1%) · Weekly $1.32 / $6.00 (22%) · Spend $1.32`.
+   * Always starts with the visible title, so the accessible name contains the
+   * visible label.
+   */
+  footTitle: string
+  /** Every account, in rotation order (empty when there is nothing to show). */
+  accounts: PanelAccountView[]
+  /** Id of the account the panel opens on (the serving one), if any. */
+  selectedId: string | undefined
+  /** That account's view, for the footer card; undefined with no accounts. */
+  selected: PanelAccountView | undefined
+  /** A fetch is in flight and no data has landed for this paint. */
+  loading: boolean
+  /** No credential is configured at all. */
+  noKey: boolean
+  /** Report-level failure box; undefined when the report is usable. */
+  failure: PanelFailureView | undefined
+  /** A fetch failed while data is still on screen. */
+  staleError: string | undefined
+  /** Endpoint-level partial failure note; undefined when every endpoint answered. */
+  partial: PanelKey | undefined
+  /** Freshness line, empty when nothing has been fetched. */
+  updatedAt: string
+}
+
+/** Inputs {@link buildPanelView} needs beyond the usage snapshot. */
+export interface PanelViewInput {
+  usage: UsagePageState
+  /** Whether any account holds a credential (the settings controller's fact). */
+  apiKeyConfigured: boolean
+  /** Account ids staged for removal; hidden here immediately, like the settings card. */
+  removingIds?: readonly string[]
+}
+
+/** A quota window's state as the wire carries it. */
+interface WindowInput {
+  used: number
+  cap: number
+  exceeded: boolean
+  resetAt: number
+}
+
+/** `$1.23`, and `$0.0123` only when the amount is too small for cents to show it. */
+function money(value: number): string {
+  if (value === 0) return formatMoney(0)
+  return Math.abs(value) < 0.01 ? formatMoneyExact(value) : formatMoney(value)
+}
+
+/**
+ * What a figure shows when the endpoint that carries it did not report one.
+ * A dash, never a zero: the panel exists to state what the account has spent,
+ * so "we were not told" has to look different from "nothing".
+ */
+const UNREPORTED = '—'
+
+/** Local reset time; empty when the endpoint reported none. */
+function resetText(ms: number): string {
+  if (ms <= 0) return ''
+  return new Date(ms).toLocaleString()
+}
+
+/** Local short date; empty when unset. */
+function dateText(ms: number): string {
+  if (ms <= 0) return ''
+  return new Date(ms).toLocaleDateString()
+}
+
+/** Local time-of-day; empty when unset. */
+function timeText(ms: number): string {
+  if (ms <= 0) return ''
+  return new Date(ms).toLocaleTimeString()
+}
+
+/**
+ * Consumption as a percentage, NOT clamped at 100 — an over-quota window
+ * reports its real overshoot (150%), which is what the printed figure should
+ * say. Bar widths clamp separately via {@link barPercent}.
+ */
+function rawPercent(used: number, cap: number): number {
+  if (cap <= 0) return 0
+  return Math.round((used / cap) * 100)
+}
+
+/** A percentage usable as a CSS width, clamped into [0, 100]. */
+function barPercent(percent: number): number {
+  return Math.min(100, Math.max(0, percent))
+}
+
+/** Build one quota-window view. */
+function windowView(label: PanelKey, limit: WindowInput): PanelWindowView {
+  const percent = rawPercent(limit.used, limit.cap)
+  const capped = limit.cap > 0
+  return {
+    label,
+    // Spend only: an uncapped window has no denominator, so its row pairs this
+    // figure with the "unlimited" label instead of a `used / cap` it lacks.
+    value: capped ? `${money(limit.used)} / ${money(limit.cap)}` : money(limit.used),
+    capped,
+    percent,
+    barPercent: barPercent(percent),
+    exceeded: limit.exceeded,
+    resetsAt: resetText(limit.resetAt),
+  }
+}
+
+/**
+ * Build the monthly credit view from the two endpoints that carry it.
+ *
+ * The limit is the PLAN's credit total, not the billing endpoint's
+ * `monthlyCredits` — that field is a remaining balance (see
+ * {@link PanelMonthlyView}). Unknown plans (no `monthlyCredits` on the plan
+ * record) therefore still show their balances, just without a ratio.
+ *
+ * The trap this guards: a MISSING balance is not a consumed one. The billing
+ * endpoint is one of four the report fetches in parallel, so it fails on its
+ * own while the plan still arrives — and reading the absent balance as 0 would
+ * turn that partial failure into `limit - 0 = limit`, i.e. a confident "100%
+ * used, quota exhausted" for an account that may have spent nothing. The
+ * official CLI draws no meter unless the credits payload is present at all
+ * (`hasCreditsInfo`), so "unreported" is the upstream-faithful reading here
+ * too. Every derived figure stays a placeholder until the balance reported.
+ */
+function monthlyView(report: CommandCodeUsageReport): PanelMonthlyView | undefined {
+  const credits = report.credits
+  const plan = report.plan
+  if (credits === undefined && plan === undefined) return undefined
+
+  const limitValue = plan?.monthlyCredits ?? null
+  // Only an EXPLICIT `false` means the balance was omitted. An unset flag comes
+  // from a Host half older than the field, which always sent a real number, so
+  // it must keep rendering instead of turning into a dash everywhere.
+  const remainingReported = credits !== undefined && credits.monthlyReported !== false
+  const remaining = remainingReported ? Math.max(0, credits.monthlyCredits) : 0
+  // A ratio needs BOTH halves: the plan's total and the balance left of it.
+  const known = limitValue !== null && limitValue > 0 && remainingReported
+  const used = known ? Math.max(0, limitValue - remaining) : 0
+  const percent = known ? rawPercent(used, limitValue) : 0
+
+  return {
+    known,
+    limit: limitValue !== null ? money(limitValue) : UNREPORTED,
+    used: known ? money(used) : UNREPORTED,
+    remaining: remainingReported ? money(remaining) : UNREPORTED,
+    purchased: credits !== undefined && credits.purchasedReported !== false ? money(Math.max(0, credits.purchasedCredits)) : UNREPORTED,
+    free: credits !== undefined && credits.freeReported !== false ? money(Math.max(0, credits.freeCredits)) : UNREPORTED,
+    percent,
+    barPercent: barPercent(percent),
+    exhausted: known && remaining <= 0,
+    periodEnds: dateText(plan?.currentPeriodEnd ?? 0),
+  }
+}
+
+/** Build one account's view. */
+function accountView(entry: CommandCodeAccountUsage): PanelAccountView {
+  const { report } = entry
+  const account = report.account
+  const plan = report.plan
+  const credits = report.credits
+  const usage = report.usage
+
+  const stats: PanelStatView[] = []
+  if (usage !== undefined) {
+    stats.push({
+      label: 'requests',
+      value: String(usage.completedCount),
+      sub: `${usage.failedCount} ${panelText('failed')}`,
+    })
+    stats.push({ label: 'successRate', value: `${formatSuccessRate(usage.successRate)}%`, sub: '' })
+    stats.push({
+      label: 'spend',
+      value: formatMoneyExact(usage.totalCost),
+      sub: `${formatMoney(usage.totalCredits)} credits`,
+    })
+    stats.push({
+      label: 'tokens',
+      value: formatTokensCompact(usage.totalTokensIn + usage.totalTokensOut),
+      sub: `${formatTokensCompact(usage.totalTokensIn)} ${panelText('tokensIn')} / ${formatTokensCompact(usage.totalTokensOut)} ${panelText('tokensOut')}`,
+    })
+  }
+
+  const windows: PanelWindowView[] = []
+  // One row per window the endpoint actually REPORTED. An account on an
+  // unlimited plan reports none, and drawing two zero-cap rows for it would
+  // invent a limit the account does not have; a window that reported
+  // `cap === 0` is uncapped spend and does get a row, labelled as such.
+  if (credits?.fiveHour !== undefined) windows.push(windowView('fiveHour', credits.fiveHour))
+  if (credits?.weekly !== undefined) windows.push(windowView('weekly', credits.weekly))
+
+  // Rotation/credential state: the serving account first, then the two marks
+  // the pool can carry, then a cooldown whose end time is known.
+  let mark: PanelKey | undefined
+  if (entry.active) mark = 'active'
+  else if (entry.mark === 'invalid-credential') mark = 'invalidKey'
+  else if (entry.cooldownUntil > 0 || entry.mark === 'rate-limit') mark = 'coolingDown'
+
+  return {
+    id: entry.id,
+    label: entry.label,
+    owner: account === undefined ? '' : account.userName || account.name,
+    planName: plan?.name ?? '',
+    planStatus: plan !== undefined && plan.status !== '' && plan.status !== 'active' ? plan.status : '',
+    mark,
+    cooldownUntil: entry.cooldownUntil > 0 ? resetText(entry.cooldownUntil) : '',
+    unconfigured: !entry.configured,
+    periodEnds: dateText(plan?.currentPeriodEnd ?? 0),
+    active: entry.active,
+    monthly: monthlyView(report),
+    windows,
+    stats,
+  }
+}
+
+/** The report-level failure box, or undefined when the report is usable. */
+function failureView(state: UsagePageState): PanelFailureView | undefined {
+  const blocked = state.report?.accounts.find((entry) => entry.report.blocked !== undefined)?.report.blocked
+  if (blocked === 'invalid-key') {
+    return { title: 'errorInvalidKey', hint: 'errorInvalidKeyHint', detail: '' }
+  }
+  if (blocked === 'service-unavailable') {
+    return { title: 'errorServiceUnavailable', hint: 'errorServiceUnavailableHint', detail: '' }
+  }
+  if (blocked === 'network') {
+    return { title: 'errorNetwork', hint: 'errorNetworkHint', detail: '' }
+  }
+  // A transport-level failure (unmounted Remote, offline browser) arrives as
+  // the controller's own error rather than as a blocked report.
+  if (state.status === 'error' && state.report === undefined) {
+    return { title: 'errorGeneric', hint: 'errorGeneric', detail: state.error ?? '' }
+  }
+  return undefined
+}
+
+/**
+ * Every panel string, resolved once per projection. One object with all keys
+ * (rather than per-field lookups in the components) keeps the copy table and
+ * the render sites in lockstep: a key cannot be read from `text` unless
+ * {@link PANEL_COPY} declares it.
+ */
+function panelStrings(): Record<PanelKey, string> {
+  const keys = Object.keys(PANEL_COPY) as PanelKey[]
+  const out = {} as Record<PanelKey, string>
+  for (const key of keys) out[key] = panelText(key)
+  return out
+}
+
+/**
+ * Project the shared usage snapshot into the panel's render tree.
+ *
+ * Deduplication matches the settings card: hand-edited settings can name one
+ * credential twice, and removal staging hides an account before the post-save
+ * refresh lands.
+ */
+export function buildPanelView(input: PanelViewInput): PanelView {
+  const { usage } = input
+  const hidden = new Set(input.removingIds ?? [])
+  const seen = new Set<string>()
+  const entries = (usage.report?.accounts ?? []).filter((entry) => {
+    if (hidden.has(entry.id)) return false
+    if (seen.has(entry.id)) return false
+    seen.add(entry.id)
+    return true
+  })
+  const accounts = entries.map(accountView)
+  const selectedEntry = entries.find((entry) => entry.active) ?? entries[0]
+  const selectedView = accounts.find((view) => view.id === selectedEntry?.id)
+
+  // The footer card stacks BOTH quota windows — the two limits an account
+  // actually runs into — 5-hour first (the tighter and nearer one), then
+  // weekly. `barPercent` clamps the fill; the printed percentage keeps the true
+  // consumption, so an over-cap window still reads 150%.
+  const footerBars: PanelFooterBar[] = []
+  const windowBars: Array<[PanelKey, WindowInput | undefined]> = [
+    ['fiveHourShort', selectedEntry?.report.credits?.fiveHour],
+    ['weeklyShort', selectedEntry?.report.credits?.weekly],
+  ]
+  for (const [label, window] of windowBars) {
+    if (window === undefined || window.cap <= 0) continue
+    const percent = rawPercent(window.used, window.cap)
+    footerBars.push({
+      label,
+      percent: `${percent}%`,
+      barPercent: barPercent(percent),
+      warn: window.exceeded,
+      detail: `${money(window.used)} / ${money(window.cap)}`,
+    })
+  }
+
+  // The card's one non-ratio figure: what this period has cost in dollars.
+  const totalCost = selectedEntry?.report.usage?.totalCost
+  const cost = totalCost === undefined ? '' : money(totalCost)
+
+  let status = ''
+  if (entries.length > 0 && !entries.some(entry => entry.configured)) status = panelText('unconfigured')
+  else if (selectedView?.mark !== undefined && selectedView.mark !== 'active') status = panelText(selectedView.mark)
+  else if (selectedEntry === undefined) status = panelText('unavailable')
+
+  const planName = selectedView !== undefined && selectedView.planName !== '' ? selectedView.planName : panelText('nav')
+  // `planName` falls back to the panel name, so it is only a second part when it
+  // actually names a plan — otherwise the title would read `Command Code ·
+  // Command Code`.
+  const titleParts = planName === panelText('nav') ? [planName] : [panelText('nav'), planName]
+  for (const bar of footerBars) {
+    const figures = bar.detail === '' ? '' : ` ${bar.detail}`
+    titleParts.push(`${panelText(bar.label)}${figures} (${bar.percent})`)
+  }
+  if (cost !== '') titleParts.push(`${panelText('spend')} ${cost}`)
+
+  return {
+    text: panelStrings(),
+    planName,
+    status,
+    footerBars,
+    cost,
+    footTitle: titleParts.join(' · '),
+    accounts,
+    selectedId: selectedEntry?.id,
+    selected: selectedView,
+    loading: usage.status === 'loading' && usage.report === undefined,
+    noKey: entries.length > 0 && !entries.some(entry => entry.configured),
+    failure: failureView(usage),
+    staleError: usage.status === 'error' && usage.report !== undefined ? usage.error ?? '' : undefined,
+    partial: (usage.report?.accounts.some((entry) => entry.report.failures.length > 0 && entry.report.blocked === undefined) ?? false)
+      ? 'partial'
+      : undefined,
+    updatedAt: timeText(usage.fetchedAt ?? 0),
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Auto refresh (one shared loop, started by whichever surface mounts first)
+// ---------------------------------------------------------------------------
+
+/**
+ * How often the panel re-reads the report while a surface is mounted. The
+ * quota windows move slowly and one report costs four upstream calls, so this
+ * is a background freshness tick, not a live meter.
+ */
+export const PANEL_AUTO_REFRESH_MS = 120_000
+
+/** The narrow face of `CommandCodeUsageController` this module drives. */
+export interface RefreshSource {
+  state(): UsagePageState
+  refresh(): Promise<void>
+}
+
+/** Timer seam: injectable so tests never wait on real time. */
+export interface AutoRefreshTimer {
+  set(callback: () => void, ms: number): unknown
+  clear(handle: unknown): void
+}
+
+/** The default timer (the client bundle runs in a browser; node tests inject one). */
+const REAL_TIMER: AutoRefreshTimer = {
+  set: (callback, ms) => setTimeout(callback, ms),
+  clear: (handle) => clearTimeout(handle as ReturnType<typeof setTimeout>),
+}
+
+/** Live mount count of {@link startPanelAutoRefresh}. */
+let references = 0
+/** Owner ticket of the running loop, if any. */
+let activeTicket: number | undefined
+/** Ticket handed to the next starter. */
+let ticketSeq = 0
+/** Pending timer handle of the running loop. */
+let handle: unknown
+
+/**
+ * Start the shared auto refresh. One fetch when the surface appears (the
+ * sidebar row is the point of the panel — it must be current, not wait for a
+ * click), then a tick every {@link PANEL_AUTO_REFRESH_MS} while a surface
+ * stays mounted.
+ *
+ * Reference-counted: the sidebar entry and the dashboard can be mounted at
+ * once, so only the first start fetches and only the last stop halts the loop.
+ * Every tick goes through `usage.refresh()`, which already collapses a
+ * concurrent fetch onto the in-flight one — a tick never double-fetches
+ * against the settings page's own refresh.
+ *
+ * @param usage - the shared usage controller.
+ * @param isConfigured - whether a credential exists right now (re-read per tick).
+ * @param timer - timer seam for tests.
+ * @returns the disposer that drops this surface's reference.
+ */
+export function startPanelAutoRefresh(
+  usage: RefreshSource,
+  isConfigured: () => boolean,
+  timer: AutoRefreshTimer = REAL_TIMER,
+): () => void {
+  references += 1
+  const ticket = ++ticketSeq
+  const tick = (): void => {
+    if (activeTicket !== ticket) return
+    if (isConfigured()) void usage.refresh()
+    handle = timer.set(tick, PANEL_AUTO_REFRESH_MS)
+  }
+
+  if (activeTicket === undefined) {
+    activeTicket = ticket
+    handle = timer.set(tick, PANEL_AUTO_REFRESH_MS)
+    // First paint: refresh immediately so the row is never blank on arrival.
+    if (isConfigured()) void usage.refresh()
+  }
+
+  let stopped = false
+  return () => {
+    if (stopped) return
+    stopped = true
+    references -= 1
+    // Still mounted elsewhere: drop this reference only. Note the check is the
+    // REFCOUNT, not this surface's ticket — the surface that started the loop
+    // is not necessarily the last one to unmount, and a first-unmounted owner
+    // must not be the reason a tick keeps firing.
+    if (references > 0) return
+    activeTicket = undefined
+    if (handle !== undefined) {
+      timer.clear(handle)
+      handle = undefined
+    }
+  }
+}
+
+/**
+ * Drop every live reference and halt the loop without a timer.
+ *
+ * Exported for tests only: the loop's state is module-level on purpose (two
+ * surfaces, one upstream poll), so a test that mounts a surface must be able
+ * to start from a clean slate. Production code releases through the disposer
+ * {@link startPanelAutoRefresh} returns — the plugin's fiber unwinds it.
+ */
+export function resetPanelAutoRefresh(): void {
+  references = 0
+  activeTicket = undefined
+  handle = undefined
+}
diff --git a/src/client/prices.ts b/src/client/prices.ts
new file mode 100644
index 0000000..99cc9cc
--- /dev/null
+++ b/src/client/prices.ts
@@ -0,0 +1,194 @@
+/**
+ * Browser controller for the model price table the composer's session-cost
+ * figure depends on.
+ *
+ * The rates are vendored Host-side (`src/model-prices.ts`) and cross the
+ * `commandcode/prices` Remote, so the browser never carries its own copy that
+ * could drift from the snapshot, and a price update reaches an open page
+ * without rebuilding the client bundle.
+ *
+ * Successful reads are cached until the Host namespace rebinds. Transient
+ * failures retry three times with bounded backoff; manual refresh can retry
+ * after that. Rebinding drops stale in-flight results and resets the budget.
+ * Missing endpoints are permanent until the namespace changes.
+ *
+ * Deliberately JSX-free, mirroring `./usage.ts`.
+ *
+ * @module dsh-commandcode-provider/client/prices
+ */
+
+import type { CommandCodePriceTable } from '../usage-wire.ts'
+
+/** The narrow slice of the mounted Remote this controller calls. */
+export interface PricesRemote {
+  /**
+   * Optional because the Host and the browser bundle can be a cross-version
+   * pair: a Host half older than this feature serves no `commandcode/prices`
+   * endpoint, and the controller must read that as "no price table" instead of
+   * calling an undefined method.
+   */
+  prices?(): Promise<
+    | { ok: true; value: CommandCodePriceTable }
+    | { ok: false; error: { message: string; permanent?: boolean } }
+  >
+}
+
+/** The price table's fetch lifecycle. */
+export type PricesStatus =
+  /** Never requested. */
+  | 'idle'
+  /** A fetch is in flight. */
+  | 'loading'
+  /** The table is loaded and cached for the page's lifetime. */
+  | 'ready'
+  /** The last fetch failed; `ensure()` may try again. */
+  | 'error'
+
+/** The readout's price-table state face. */
+export interface SessionCostPricesState {
+  status: PricesStatus
+  /** The cached table (only ever set once). */
+  table: CommandCodePriceTable | undefined
+  /** The last failure's message. */
+  error: string | undefined
+}
+
+const IDLE: SessionCostPricesState = { status: 'idle', table: undefined, error: undefined }
+
+/**
+ * Timer seam for the bounded retry backoff, so a node test can drive the
+ * schedule without waiting on it.
+ */
+export interface PriceRetryTimer {
+  set(callback: () => void, ms: number): unknown
+  clear(handle: unknown): void
+}
+const RETRY_TIMER: PriceRetryTimer = {
+  set(callback, ms) { const handle = setTimeout(callback, ms); handle.unref?.(); return handle },
+  clear(handle) { clearTimeout(handle as ReturnType<typeof setTimeout>) },
+}
+
+/**
+ * Cache over the `commandcode/prices` Remote, with a bounded transient-retry
+ * budget. Public API mirrors {@link CommandCodeUsageController}: `state()`,
+ * `subscribe`, and `ensure()`; `reload()` additionally drops the cache and
+ * restarts the budget when the Host namespace rebinds.
+ *
+ * Not a one-shot: the last fetch is cached until `reload()`, a transient
+ * failure is retried three times at 1/2/4 s (the delays are bounded, not a
+ * poll), and a MANUAL `ensure()` still fetches after that budget is spent. A
+ * PERMANENT failure — the Host serving no such endpoint — is terminal for the
+ * binding and is only cleared by `reload()`.
+ */
+export class CommandCodePricesController {
+  private readonly remote: PricesRemote
+  private readonly listeners = new Set<() => void>()
+  private current: SessionCostPricesState = IDLE
+  private generation = 0
+  private inFlight = false
+  private disposed = false
+
+  private retryHandle: unknown
+  private attempts = 0
+  private permanent = false
+  private readonly timer: PriceRetryTimer
+
+  constructor(remote: PricesRemote, timer: PriceRetryTimer = RETRY_TIMER) {
+    this.timer = timer
+    this.remote = remote
+  }
+
+  /** Release every subscription. Idempotent; in-flight results are dropped. */
+  dispose(): void {
+    this.disposed = true
+    this.clearRetry()
+    this.listeners.clear()
+  }
+
+  /** Subscribe to state projections. @returns the disposer. */
+  subscribe(listener: () => void): () => void {
+    this.listeners.add(listener)
+    return () => this.listeners.delete(listener)
+  }
+
+  /** The current state face. */
+  state(): SessionCostPricesState {
+    return this.current
+  }
+
+  /**
+   * Fetch the table unless it is already loaded, permanent, or in flight — and
+   * unless a bounded retry already owns the next attempt.
+   *
+   * The only callers are the client entry: `reload()` when the Remote namespace
+   * lands or rebinds, and a manual refresh. Nothing in the composer calls it, so
+   * a mounted readout does not trigger a fetch of its own — it renders whatever
+   * the table's state currently is.
+   */
+  ensure(): void {
+    if (this.disposed || this.permanent || this.inFlight || this.current.status === 'ready') return
+    this.clearRetry()
+    const call = this.remote.prices
+    // An older Host half serves no price endpoint. That is a permanent
+    // condition for this page, so it lands in the error state (the readout
+    // stays hidden) rather than retrying on every mount.
+    if (typeof call !== 'function') {
+      this.permanent = true
+      this.publish({ status: 'error', table: undefined, error: 'the Host serves no commandcode/prices endpoint' })
+      return
+    }
+    const generation = this.generation
+    this.inFlight = true
+    this.attempts += 1
+    this.publish({ status: 'loading', table: this.current.table, error: undefined })
+    let request: ReturnType<NonNullable<PricesRemote['prices']>>
+    try { request = call.call(this.remote) } catch (error) { request = Promise.reject(error) }
+    void request.then((result) => {
+      if (this.disposed || generation !== this.generation) return
+      this.inFlight = false
+      if (result.ok) {
+        this.publish({ status: 'ready', table: result.value, error: undefined })
+        return
+      }
+      this.permanent = result.error.permanent === true
+      this.publish({ status: 'error', table: undefined, error: result.error.message })
+      this.scheduleRetry()
+    }, (error: unknown) => {
+      if (this.disposed || generation !== this.generation) return
+      this.inFlight = false
+      this.publish({
+        status: 'error',
+        table: undefined,
+        error: error instanceof Error ? error.message : String(error),
+      })
+      this.scheduleRetry()
+    })
+  }
+
+  /** Rebinding a Host invalidates cached prices and restarts the bounded retry budget. */
+  reload(): void {
+    if (this.disposed) return
+    this.generation += 1
+    this.inFlight = false
+    this.clearRetry()
+    this.permanent = false
+    this.attempts = 0
+    this.current = IDLE
+    this.ensure()
+  }
+
+  private clearRetry(): void {
+    if (this.retryHandle !== undefined) this.timer.clear(this.retryHandle)
+    this.retryHandle = undefined
+  }
+
+  private scheduleRetry(): void {
+    if (this.disposed || this.permanent || this.attempts >= 4) return
+    this.retryHandle = this.timer.set(() => { this.retryHandle = undefined; this.ensure() }, 1000 * 2 ** (this.attempts - 1))
+  }
+
+  private publish(next: SessionCostPricesState): void {
+    this.current = next
+    for (const listener of this.listeners) listener()
+  }
+}
diff --git a/src/client/section.tsx b/src/client/section.tsx
index ebbf26e..9e6a4cd 100644
--- a/src/client/section.tsx
+++ b/src/client/section.tsx
@@ -28,7 +28,7 @@ import type { LoginPageState } from './login.ts'
 import { LoginRow } from './login-row.tsx'
 import { buildModelSelectOptions, catalogIsReady, groupModelSelectOptions, staleModelIds, tierHeadingFor, toggleModelSelection } from './model-select.ts'
 import type { UsagePageState } from './usage.ts'
-import { formatMoney, formatMoneyExact, formatResetAt, formatSuccessRate, formatTokensCompact, windowRatio } from './usage.ts'
+import { usageCardState, formatMoney, formatMoneyExact, formatResetAt, formatSuccessRate, formatTokensCompact, windowRatio } from './usage.ts'
 import { PLUGIN_RELEASES_URL, PLUGIN_VERSION } from './version.ts'
 import { checkForUpdate, localStorageUpdateStore } from './update.ts'
 
@@ -396,13 +396,14 @@ function UsageStat({ label, value, sub }: { label: string; value: string; sub?:
 /** One window-limit row: label, used/cap, a fill bar, and the reset time. */
 function UsageWindow({
   label,
-  limit: { used, cap, exceeded, resetAt },
+  limit,
   t,
 }: {
   label: string
-  limit: CommandCodeCredits['fiveHour']
+  limit: NonNullable<CommandCodeCredits['fiveHour']>
   t: Translate<SettingsCommandCodeKey>
 }) {
+  const { used, cap, exceeded, resetAt } = limit
   const ratio = windowRatio(used, cap)
   const reset = formatResetAt(resetAt)
   return (
@@ -503,16 +504,20 @@ function AccountReport({ entry, fetchedAt, t, onRemove }: {
 
       {credits !== undefined ? (
         <div className="cc-usageStats">
-          <UsageStat label={t('usageMonthly')} value={formatMoney(credits.monthlyCredits)} />
-          <UsageStat label={t('usagePurchased')} value={formatMoney(credits.purchasedCredits)} />
-          <UsageStat label={t('usageFree')} value={formatMoney(credits.freeCredits)} />
+          <UsageStat label={t('usageMonthly')} value={credits.monthlyReported === false ? '—' : formatMoney(credits.monthlyCredits)} />
+          <UsageStat label={t('usagePurchased')} value={credits.purchasedReported === false ? '—' : formatMoney(credits.purchasedCredits)} />
+          <UsageStat label={t('usageFree')} value={credits.freeReported === false ? '—' : formatMoney(credits.freeCredits)} />
         </div>
       ) : null}
 
-      {credits !== undefined ? (
+      {credits?.fiveHour !== undefined || credits?.weekly !== undefined ? (
         <div className="cc-usageWindows">
-          <UsageWindow label={t('usageFiveHour')} limit={credits.fiveHour} t={t} />
-          <UsageWindow label={t('usageWeekly')} limit={credits.weekly} t={t} />
+          {credits.fiveHour !== undefined ? (
+            <UsageWindow label={t('usageFiveHour')} limit={credits.fiveHour} t={t} />
+          ) : null}
+          {credits.weekly !== undefined ? (
+            <UsageWindow label={t('usageWeekly')} limit={credits.weekly} t={t} />
+          ) : null}
         </div>
       ) : null}
 
@@ -568,10 +573,9 @@ function AccountTabDot({ entry }: { entry: CommandCodeAccountUsage }) {
  * management card are hidden here immediately. Data arrives through the
  * `commandcode/report` Remote; the API keys never leave the Host.
  */
-function UsageCard({ t, usage, apiKeyConfigured, removingIds, removableIds, canManage, onRefresh, onRemoveAccount }: {
+function UsageCard({ t, usage, removingIds, removableIds, canManage, onRefresh, onRemoveAccount }: {
   t: Translate<SettingsCommandCodeKey>
   usage: UsagePageState
-  apiKeyConfigured: boolean
   /** Ids of accounts staged for removal (hidden from the carousel). */
   removingIds: string[]
   /**
@@ -586,13 +590,13 @@ function UsageCard({ t, usage, apiKeyConfigured, removingIds, removableIds, canM
   onRefresh(): void
   onRemoveAccount(id: string): void
 }) {
-  // First paint with a configured key fetches automatically; later fetches
-  // are explicit (refresh button) or follow a landed save.
+  const { loading, shouldRefresh, noKey } = usageCardState(usage)
+  // Ask the Host on first paint: CLI auth and composition keys are not
+  // represented by browser credential references. Later failures retry manually.
   useEffect(() => {
-    if (apiKeyConfigured && usage.status === 'idle') onRefresh()
-  }, [apiKeyConfigured, usage.status, onRefresh])
+    if (shouldRefresh) onRefresh()
+  }, [shouldRefresh, onRefresh])
 
-  const loading = usage.status === 'loading'
   const report = usage.report
   // Locally remembered removals: the usage controller keeps the old report
   // until the post-save refresh lands, and removedRefs clears at save-land —
@@ -631,13 +635,13 @@ function UsageCard({ t, usage, apiKeyConfigured, removingIds, removableIds, canM
       <div className="cc-usageHead">
         <h3 className="cc-usageTitle">{t('usageTitle')}</h3>
         <span className="cc-usageMetaSpacer" />
-        <button type="button" className="cc-usageRefresh" disabled={loading || !apiKeyConfigured} onClick={onRefresh}>
+        <button type="button" className="cc-usageRefresh" disabled={loading} onClick={onRefresh}>
           {loading ? t('usageRefreshing') : t('usageRefresh')}
         </button>
       </div>
 
-      {!apiKeyConfigured ? <p className="cc-usageHint">{t('usageNoKey')}</p> : null}
-      {apiKeyConfigured && report === undefined && loading ? <p className="cc-usageHint">{t('usageLoading')}</p> : null}
+      {noKey ? <p className="cc-usageHint">{t('usageNoKey')}</p> : null}
+      {report === undefined && loading ? <p className="cc-usageHint">{t('usageLoading')}</p> : null}
       {usage.status === 'error' ? (
         <p className="cc-usageError" role="status">
           <span>{t('usageError')}{usage.error !== undefined && usage.error !== '' ? ` — ${usage.error}` : ''}</span>
@@ -1143,7 +1147,6 @@ export function CommandCodeSettingsPage(props: CommandCodeSettingsProps) {
       <UsageCard
         t={t}
         usage={usage}
-        apiKeyConfigured={state.anyAccountConfigured}
         removingIds={state.accountsRemoving}
         removableIds={state.accounts.map((account) => account.id)}
         canManage={state.writable}
diff --git a/src/client/session-cost-display.ts b/src/client/session-cost-display.ts
new file mode 100644
index 0000000..dba47fb
--- /dev/null
+++ b/src/client/session-cost-display.ts
@@ -0,0 +1,498 @@
+/**
+ * The DOM half of the composer's session-cost figure (browser only).
+ *
+ * The cost is not a surface of its own any more: it is injected INTO the two
+ * surfaces the harness already draws under the composer — the token-usage pill
+ * (`1.2M tokens · Cache hit 87%`) and the usage dialog that pill opens. This
+ * module owns that injection; `./session-cost.ts` owns every number and every
+ * string, and `./session-cost-view.tsx` owns the two seats the figures come
+ * from.
+ *
+ * Why inject rather than take the pill's cell over (registering a `stats` entry
+ * REPLACES the shipped readout, it does not extend it): the shipped row is one
+ * component owning its tokens / cache-hit / duration figures through the `chat`
+ * locale namespace, and its cache-hit percentage obeys an exact-integer rule
+ * this plugin must not re-derive. Owning that cell would mean reproducing all of
+ * it in English, and every upstream change to it would stop reaching users. So
+ * the shipped markup stays the harness's, and this module adds exactly two
+ * things to it.
+ *
+ * Four properties make that safe, all verified against the shipped build:
+ *
+ * 1. **The dialog's rows are styled by ELEMENT.** `dsh-client-ui-chat`'s
+ *    `stat-dialog` module styles its `dl` as a two-column grid and then
+ *    `.details dt` / `.details dd` — not by class. A price node appended INSIDE a
+ *    shipped value cell therefore inherits that cell's tabular numerals and right
+ *    alignment for free, and this plugin ships no CSS at all.
+ * 2. **The dialog's rows are matched by POSITION and confirmed by value.** Their
+ *    labels are the `chat` locale's own strings (`Uncached input` in English,
+ *    `未缓存输入` in Chinese), so no label is ever read. Instead the shape is
+ *    predicted from the session's buckets — the cache-hit row exists while there
+ *    is billed prompt input, the cache-write row while those tokens are non-zero
+ *    — and each value cell must then carry exactly the token count predicted for
+ *    it. A dialog that does not confirm is left alone.
+ * 3. **The pill keeps the cost visible when space runs out.** The button is an
+ *    inline flex row with `gap`, and its label carries `min-width:0` plus
+ *    ellipsis; our appended span keeps the default `min-width:auto`, so the
+ *    LABEL is what truncates. The cost also inherits the button's `font:inherit`
+ *    and `tabular-nums` typography and its hover/expanded tint.
+ * 4. **React owns those value cells' text, so a price is re-attached, never
+ *    assumed.** The shipped component renders each count as a single string, and
+ *    React rewrites such a cell through `textContent` when the count changes —
+ *    which drops every child with it, our price included. Every sync therefore
+ *    re-checks that the node is still where it was put; the cost of that is a
+ *    read, and the alternative is a price that silently disappears mid-session.
+ *
+ * A `MutationObserver` on `document.body` with `childList` (deliberately NOT
+ * `subtree`, so streaming text never wakes it) is the only way to learn that the
+ * dialog — which is portaled straight onto `body`, with no slot of ours inside
+ * it — has opened or closed. That observer is also what decorates a newly opened
+ * dialog from the last view this module was handed.
+ *
+ * @module dsh-commandcode-provider/client/session-cost-display
+ */
+
+import type { SessionCostPillRun, SessionCostRowDecoration, SessionCostShippedRow, SessionCostView } from './session-cost.ts'
+import {
+  SESSION_COST_COPY,
+  sessionCostPillRun,
+  sessionCostRowDecorations,
+} from './session-cost.ts'
+
+/** The shipped composer stats row (dsh-client-ui-chat `StatsPills`). */
+const STATS_ROOT = '[data-composer-stats]'
+
+/**
+ * The shipped token-usage dialog's `<dl>`. Unique in the whole of
+ * `dsh-client-ui-chat`: the per-message turn-usage panel has its own dialog with
+ * different markup, so the composer's is unambiguous.
+ */
+const USAGE_DIALOG = '[data-session-stats-usage]'
+
+/**
+ * The usage dialog's trigger. Both pills announce a dialog, but the token one is
+ * rendered LAST — and when no step carries timing the time pill is not a button
+ * at all, so "last" still selects the token pill in both cases.
+ */
+const DIALOG_TRIGGER = 'button[aria-haspopup="dialog"]'
+
+/**
+ * Stable id for the hidden node the appended cost is described by. The pill's
+ * own `aria-label` is computed by the harness on every render and cannot be
+ * extended, so a description is how the cost reaches assistive technology.
+ */
+const A11Y_ID = 'dsh-commandcode-session-cost'
+
+/** How many consecutive misses before the missing anchor is worth a console line. */
+const MISSES_BEFORE_WARNING = 3
+
+/**
+ * How the display learns that the shipped usage dialog opened or closed.
+ *
+ * `target` is `document.body`, and the returned function detaches. The default
+ * is a `MutationObserver`; the seam exists so tests can announce the dialog
+ * without a global observer (the repository's usual injected-seam shape).
+ */
+export type SessionCostObserverFactory = (target: Node, listener: () => void) => (() => void) | undefined
+
+/**
+ * The default observer: `childList` on `body`, and deliberately NOT `subtree`, so
+ * streaming text inside the page never wakes it while the panel the harness
+ * portals straight onto `body` does.
+ */
+const observeBodyChildren: SessionCostObserverFactory = (target, listener) => {
+  if (typeof MutationObserver === 'undefined') return undefined
+  const observer = new MutationObserver(listener)
+  observer.observe(target, { childList: true })
+  return () => observer.disconnect()
+}
+
+/** What the display layer reads: the injected document and where to look in it. */
+export interface SessionCostDisplayOptions {
+  /** The document to inject into (injected so node tests can drive a double). */
+  doc: Document
+  /**
+   * The composer that owns this entry — our own outlet wrapper's parent, so a
+   * session-scoped composer looks in its OWN card rather than at whichever
+   * `[data-composer-stats]` happens to come first in the document.
+   */
+  scope: () => ParentNode | null
+  /** Observer seam; defaults to a `childList` `MutationObserver` on `body`. */
+  observe?: SessionCostObserverFactory
+}
+
+/**
+ * Owns the nodes injected into the shipped token-usage UI.
+ *
+ * One instance per mounted entry. `sync()` is cheap and idempotent: it re-reads
+ * both targets on every call, which is what lets it self-heal when React
+ * remounts the row or replaces the dialog, and it rewrites a node only when its
+ * text actually changed.
+ */
+export class SessionCostDisplay {
+  private readonly doc: Document
+  private readonly scope: () => ParentNode | null
+  private readonly observe: SessionCostObserverFactory
+  private view: SessionCostView | undefined = undefined
+  /** Detaches the observer installed by `start()`. */
+  private detach: (() => void) | undefined = undefined
+  /** The button we appended into, while it is still connected. */
+  private pillHost: Element | undefined = undefined
+  /** Our appended root, and the two nodes whose text changes. */
+  private pillRoot: HTMLElement | undefined = undefined
+  private pillValue: HTMLElement | undefined = undefined
+  private pillA11y: HTMLElement | undefined = undefined
+  /** Whether WE set `aria-describedby` on the button (so only we take it back). */
+  private described = false
+  /** The dialog we decorated, the price nodes we own, and the cells we hid. */
+  private dialogHost: Element | undefined = undefined
+  private dialogPrices = new Map<HTMLElement, HTMLElement>()
+  private dialogHidden = new Set<HTMLElement>()
+  private pillMisses = 0
+
+  constructor(options: SessionCostDisplayOptions) {
+    this.doc = options.doc
+    this.scope = options.scope
+    this.observe = options.observe ?? observeBodyChildren
+  }
+
+  /** Begin watching for the shipped usage dialog opening and closing. */
+  start(): void {
+    if (this.detach !== undefined) return
+    const body = this.doc.body
+    if (body === null || body === undefined) return
+    this.detach = this.observe(body, () => this.apply())
+  }
+
+  /**
+   * Hand the display the current figure.
+   *
+   * Undefined — nothing priceable about this session — removes everything this
+   * module injected, leaving both shipped surfaces exactly as they ship.
+   */
+  sync(view: SessionCostView | undefined): void {
+    this.view = view
+    this.apply()
+  }
+
+  /** Remove every injected node and stop observing. Safe to call twice. */
+  dispose(): void {
+    this.detach?.()
+    this.detach = undefined
+    this.removePill()
+    this.clearDialog()
+    this.view = undefined
+  }
+
+  /** Re-apply the last known view to whatever both targets are right now. */
+  private apply(): void {
+    this.applyPill()
+    this.applyDialog()
+  }
+
+  // -------------------------------------------------------------------------
+  // The pill: the cost as the last item of the shipped token pill's text run
+  // -------------------------------------------------------------------------
+
+  private applyPill(): void {
+    const view = this.view
+    if (view === undefined) {
+      this.removePill()
+      return
+    }
+    if (this.pillHost?.isConnected !== true) {
+      const button = this.resolvePillButton()
+      if (button === null) {
+        this.pillMisses += 1
+        if (this.pillMisses === MISSES_BEFORE_WARNING) {
+          console.warn(
+            `[dsh-commandcode-provider] no ${STATS_ROOT} row to append the session cost to; the figure stays in the usage dialog only`,
+          )
+        }
+        return
+      }
+      this.pillMisses = 0
+      this.removePill()
+      this.buildPill(button, sessionCostPillRun(view))
+    }
+    if (this.pillValue !== undefined) {
+      const amount = sessionCostPillRun(view).value
+      if (this.pillValue.textContent !== amount) this.pillValue.textContent = amount
+    }
+    if (this.pillRoot !== undefined) {
+      if (this.pillRoot.title !== view.title) this.pillRoot.title = view.title
+      const approximate = view.approximate ? 'true' : null
+      if (this.pillRoot.getAttribute('data-approximate') !== approximate) {
+        if (approximate === null) this.pillRoot.removeAttribute('data-approximate')
+        else this.pillRoot.setAttribute('data-approximate', approximate)
+      }
+    }
+    if (this.pillA11y !== undefined) {
+      const described = `${SESSION_COST_COPY.panelTitle} ${view.value}`
+      if (this.pillA11y.textContent !== described) this.pillA11y.textContent = described
+    }
+  }
+
+  /** The shipped token pill, scoped to this entry's own composer. */
+  private resolvePillButton(): Element | null {
+    const scope = this.scope() ?? this.doc
+    const root = scope.querySelector(STATS_ROOT)
+    if (root === null) return null
+    const triggers = root.querySelectorAll(DIALOG_TRIGGER)
+    return triggers.length === 0 ? null : (triggers[triggers.length - 1] ?? null)
+  }
+
+  /**
+   * Create and append the cost run. The button's child list is static
+   * (`[svg, label]`), so appending once is enough for it to stay last.
+   */
+  private buildPill(button: Element, run: SessionCostPillRun): void {
+    const doc = this.doc
+    const root = doc.createElement('span')
+    root.setAttribute('data-composer-session-cost', '')
+    // The separator is its own node so it can carry the shipped pill's separator
+    // colour. Its LEFT spacing comes from the button's flex gap; the right margin
+    // reproduces the shipped separator's `margin:0 6px` rhythm, so the run reads
+    // `tokens · Cache hit 87% · $0.0123` at one consistent rhythm.
+    const separator = doc.createElement('span')
+    separator.textContent = run.separator
+    separator.setAttribute('aria-hidden', 'true')
+    separator.style.color = 'var(--dsw-alias-separator-primary)'
+    separator.style.margin = '0 6px 0 0'
+    const value = doc.createElement('span')
+    value.textContent = run.value
+    value.style.fontWeight = '500'
+    // Referenced by the button's `aria-describedby`: a hidden node named by id is
+    // still read out, which is how the cost survives the aria-label override.
+    const a11y = doc.createElement('span')
+    a11y.id = A11Y_ID
+    a11y.style.display = 'none'
+    root.appendChild(separator)
+    root.appendChild(value)
+    root.appendChild(a11y)
+    button.appendChild(root)
+    // Only ever claim the attribute when the button has none of its own: a
+    // shipped `aria-describedby` is the harness's, and overwriting it would
+    // delete a description we cannot restore.
+    if (!button.hasAttribute('aria-describedby')) {
+      button.setAttribute('aria-describedby', A11Y_ID)
+      this.described = true
+    }
+    this.pillHost = button
+    this.pillRoot = root
+    this.pillValue = value
+    this.pillA11y = a11y
+  }
+
+  private removePill(): void {
+    if (this.pillRoot !== undefined && this.pillRoot.parentNode !== null) {
+      this.pillRoot.parentNode.removeChild(this.pillRoot)
+    }
+    if (this.described) {
+      this.pillHost?.removeAttribute('aria-describedby')
+      this.described = false
+    }
+    this.pillHost = undefined
+    this.pillRoot = undefined
+    this.pillValue = undefined
+    this.pillA11y = undefined
+  }
+
+  // -------------------------------------------------------------------------
+  // The dialog: a price on the right of each token row the harness already draws
+  // -------------------------------------------------------------------------
+
+  private applyDialog(): void {
+    const view = this.view
+    const host = view === undefined ? null : this.resolveDialog()
+    if (host === null || view === undefined) {
+      this.clearDialog()
+      return
+    }
+    this.pruneDialog(host)
+    const plan = sessionCostRowDecorations(view)
+    const pairs = dialogPairs(host)
+    if (!dialogShapeMatches(pairs, plan, this.dialogPrices)) {
+      // The dialog is not the shape this session's buckets predict — a different
+      // build, or a projection carrying values the counts cannot explain. Leave
+      // it exactly as the harness drew it rather than pricing the wrong row.
+      this.clearDialog()
+      return
+    }
+    const hidden = new Set<HTMLElement>()
+    for (const [index, row] of plan.entries()) {
+      const pair = pairs[index]
+      if (pair === undefined) continue
+      const span = this.dialogPrices.get(pair.dd)
+      if (row.hidden) {
+        // The row is dropped: both cells, or the grid leaves an empty label
+        // behind. An inline `display` survives the harness's own re-renders
+        // (React pins no style on these nodes) and is given back on disposal.
+        if (pair.dt.style.display !== 'none') pair.dt.style.display = 'none'
+        if (pair.dd.style.display !== 'none') pair.dd.style.display = 'none'
+        hidden.add(pair.dt)
+        hidden.add(pair.dd)
+        this.removeDialogPrice(pair.dd, span)
+        continue
+      }
+      if (pair.dt.style.display === 'none') pair.dt.style.display = ''
+      if (pair.dd.style.display === 'none') pair.dd.style.display = ''
+      if (row.amount === undefined) {
+        this.removeDialogPrice(pair.dd, span)
+        continue
+      }
+      const price = span ?? this.createDialogPrice(pair.dd, row.row)
+      // React owns this cell's text and rewrites it through `textContent` when
+      // the count changes, which drops every child with it — so the price is
+      // re-attached on a miss rather than assumed to still be there.
+      if (price.parentNode !== pair.dd) pair.dd.appendChild(price)
+      if (price.textContent !== row.amount) price.textContent = row.amount
+    }
+    // Cells hidden by an earlier shape (a cache-write row React then rewrote) go
+    // back to the harness.
+    for (const cell of [...this.dialogHidden]) {
+      if (hidden.has(cell)) continue
+      if (cell.style.display === 'none') cell.style.display = ''
+      this.dialogHidden.delete(cell)
+    }
+    for (const cell of hidden) this.dialogHidden.add(cell)
+    this.dialogHost = host
+  }
+
+  /** Forget the cells and prices a re-rendered dialog took with it. */
+  private pruneDialog(host: Element): void {
+    for (const [dd, price] of [...this.dialogPrices]) {
+      if (dd.parentNode === host) continue
+      if (price.parentNode !== null) price.parentNode.removeChild(price)
+      this.dialogPrices.delete(dd)
+    }
+    for (const cell of [...this.dialogHidden]) {
+      if (cell.parentNode === host) continue
+      // The dialog was re-rendered and this cell went with the old tree. Give
+      // the style back BEFORE dropping the reference: a detached node can be
+      // recycled by the next render (React reuses DOM nodes across a remount of
+      // the same shape), and a surviving `display: none` would hide a row of a
+      // dialog we are no longer decorating — with nothing left tracking it to
+      // restore it later.
+      if (cell.style.display === 'none') cell.style.display = ''
+      this.dialogHidden.delete(cell)
+    }
+  }
+
+  /** The price node for one shipped value cell, appended as its last child. */
+  private createDialogPrice(dd: HTMLElement, row: SessionCostShippedRow): HTMLElement {
+    const price = this.doc.createElement('span')
+    price.setAttribute('data-session-cost-price', row)
+    // The cell is right-aligned over tabular numerals, so a fixed-width
+    // inline-block lines the prices up as a column of their own to the right of
+    // the counts instead of trailing each count raggedly.
+    price.style.marginLeft = '6px'
+    price.style.display = 'inline-block'
+    price.style.minWidth = '56px'
+    price.style.textAlign = 'right'
+    price.style.fontWeight = '500'
+    dd.appendChild(price)
+    this.dialogPrices.set(dd, price)
+    return price
+  }
+
+  private removeDialogPrice(dd: HTMLElement, price: HTMLElement | undefined): void {
+    if (price === undefined) return
+    if (price.parentNode !== null) price.parentNode.removeChild(price)
+    this.dialogPrices.delete(dd)
+  }
+
+  /**
+   * The shipped usage dialog, or null while it is closed.
+   *
+   * The dialog is portaled onto `body`, so unlike the pill it cannot be scoped
+   * from this entry; DSH renders one composer, and the attribute is unique in
+   * the chat client, so a document-level lookup is exact. Should a future build
+   * mount two composers at once, both dialogs would describe whichever session
+   * this entry belongs to — noted rather than defended against.
+   */
+  private resolveDialog(): Element | null {
+    if (this.dialogHost?.isConnected === true) return this.dialogHost
+    // The dialog we injected into is gone: our nodes went with it, so only the
+    // bookkeeping is left to drop.
+    this.clearDialog()
+    return this.doc.querySelector(USAGE_DIALOG)
+  }
+
+  /** Give the dialog back: every price removed, every hidden row restored. */
+  private clearDialog(): void {
+    for (const price of this.dialogPrices.values()) {
+      if (price.parentNode !== null) price.parentNode.removeChild(price)
+    }
+    this.dialogPrices.clear()
+    for (const cell of this.dialogHidden) {
+      if (cell.style.display === 'none') cell.style.display = ''
+    }
+    this.dialogHidden.clear()
+    this.dialogHost = undefined
+  }
+}
+
+/** The shipped dialog's `dt`/`dd` pairs, in document order. */
+function dialogPairs(host: Element): Array<{ dt: HTMLElement; dd: HTMLElement }> {
+  const pairs: Array<{ dt: HTMLElement; dd: HTMLElement }> = []
+  let label: HTMLElement | null = null
+  for (const node of Array.from(host.childNodes)) {
+    const tag = tagNameOf(node)
+    if (tag === 'DT') label = node as HTMLElement
+    else if (tag === 'DD' && label !== null) {
+      pairs.push({ dt: label, dd: node as HTMLElement })
+      label = null
+    }
+  }
+  return pairs
+}
+
+/** `tagName` upper-cased, or an empty string for a non-element node. */
+function tagNameOf(node: Node): string {
+  const tag = (node as Element).tagName
+  return typeof tag === 'string' ? tag.toUpperCase() : ''
+}
+
+/**
+ * Whether the dialog really holds the rows this session's buckets predict.
+ *
+ * The shipped labels belong to the `chat` locale — they are `Uncached input` in
+ * English and something else entirely in Chinese — so rows are matched by
+ * POSITION, and this is what makes that safe: the row count must agree, the
+ * cache-hit row must be the percentage it is, and every other value must carry
+ * exactly the token count of the bucket predicted for it. A mismatch means the
+ * dialog is not what this view describes, and nothing is decorated.
+ */
+function dialogShapeMatches(
+  pairs: ReadonlyArray<{ dt: HTMLElement; dd: HTMLElement }>,
+  plan: readonly SessionCostRowDecoration[],
+  prices: ReadonlyMap<HTMLElement, HTMLElement>,
+): boolean {
+  if (pairs.length !== plan.length) return false
+  return plan.every((row, index) => {
+    const pair = pairs[index]
+    if (pair === undefined) return false
+    const text = hostValueText(pair.dd, prices.get(pair.dd))
+    if (row.tokens === undefined) return text.includes('%')
+    return digitsOf(text) === String(row.tokens)
+  })
+}
+
+/**
+ * A value cell's own text, without the price this module appended to it — the
+ * digits of `3,206,544 tok` are the host's, the digits of `$0.07` are ours.
+ */
+function hostValueText(dd: HTMLElement, price: HTMLElement | undefined): string {
+  let text = ''
+  for (const node of Array.from(dd.childNodes)) {
+    if (node === price) continue
+    text += node.textContent ?? ''
+  }
+  return text
+}
+
+/** Every digit of a display string, so locale grouping cannot break the match. */
+function digitsOf(text: string): string {
+  return text.replace(/\D/g, '')
+}
diff --git a/src/client/session-cost-slots.ts b/src/client/session-cost-slots.ts
new file mode 100644
index 0000000..4d1791f
--- /dev/null
+++ b/src/client/session-cost-slots.ts
@@ -0,0 +1,52 @@
+/**
+ * Slot contract the session-cost readout registers into.
+ *
+ * `conversation.composer.dock` belongs to `@deepseek-ai/dsh-client-ui-conversation`
+ * (which declares it and renders it in the composer card) and is occupied by
+ * `@deepseek-ai/dsh-client-ui-chat` (whose `stats` cell is the readout showing
+ * the session's tokens, cache-hit share and throughput). Neither package is a
+ * dependency of this bundle — the readout only needs the slot's *shape* at
+ * compile time, and neither ships a client module the browser would have to
+ * resolve — so, exactly as `panel-slots.ts` does for the sidebar seats, the
+ * declaration is re-stated here and merged into the framework's `SlotMap`.
+ *
+ * The re-statement must stay structurally identical to upstream's
+ * (`{ kind: 'list', scope: 'session' }`). That is the point of the merge: the
+ * registration site typechecks against the real contract, so an upstream change
+ * that invalidates this readout is a compile error here rather than a silent
+ * mis-registration at runtime. A future dsh that ships this declaration to the
+ * client through some other path would collide at compile time — the intended
+ * alarm, and why this file exists instead of a local cast.
+ *
+ * Note what is deliberately NOT restated: the dock's standard props
+ * (`useProjection`, `sessionId`, `useChat`, …). The owner supplies those to
+ * every occupant at runtime; they are not part of the slot's registration
+ * contract, so the component declares the two it reads itself (see
+ * `session-cost-view.tsx`).
+ *
+ * @module dsh-commandcode-provider/client/session-cost-slots
+ */
+
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+  interface SlotMap {
+    /**
+     * Ambient entries below the composer card. Registering a separate entry is
+     * what keeps the shipped `stats` cell intact — that occupant is one
+     * component owning the whole row, so reusing its id would REPLACE the
+     * tokens / cache-hit / throughput readout — and the readout's stylesheet
+     * then lifts this entry out of the dock's flow, so it lands at the right
+     * end of that row's line instead of on a line of its own.
+     */
+    'conversation.composer.dock': { kind: 'list'; scope: 'session' }
+  }
+}
+
+/**
+ * Makes this file a MODULE, which is load-bearing rather than cosmetic. In a
+ * script (non-module) file, `declare module '…'` is not an augmentation: it is
+ * a fresh ambient module declaration that SHADOWS the real package, so
+ * `@deepseek-ai/dsh-client-ui-slots` would suddenly export `SlotMap` and
+ * nothing else — every consumer of its other exports (`Translate`, the slot
+ * hooks) fails to compile. An empty export keeps the merge a merge.
+ */
+export {}
diff --git a/src/client/session-cost-view.tsx b/src/client/session-cost-view.tsx
new file mode 100644
index 0000000..051fcfe
--- /dev/null
+++ b/src/client/session-cost-view.tsx
@@ -0,0 +1,157 @@
+/**
+ * The composer's live session-cost figure (browser half).
+ *
+ * This component renders NO surface of its own. The cost lives inside the
+ * harness's own token-usage UI: the amount becomes the last item of the shipped
+ * pill's text run (`1.2M tokens · Cache hit 87% · $0.0123`) and the per-bucket
+ * breakdown becomes extra rows in the usage dialog that pill opens.
+ * `./session-cost-display.ts` owns that injection and `./session-cost.ts` owns
+ * every number and every string; this file owns nothing but the two seats the
+ * figures come from and the lifetime of the injection.
+ *
+ * It is still registered as an entry in `conversation.composer.dock`, because
+ * that registration is what delivers the seats: `useProjection` is a standard
+ * prop the composer hands every dock occupant, so there is no other way to read
+ * the session's token accounting. Registering under the shipped `stats` cell's
+ * id instead would REPLACE the harness's readout rather than extend it;
+ * `./session-cost-display.ts` records why that trade is refused.
+ *
+ * The rendered node is a hidden marker — `display:none`, so it can add neither a
+ * box nor a flex gap to the composer card. It exists to locate THIS composer
+ * from the entry (`closest()` on the dock's outlet anchor), so a session-scoped
+ * composer reads its own card rather than whichever row comes first in the
+ * document. It is rendered only while there is something to show, so a session
+ * with nothing priceable contributes no markup at all.
+ *
+ * Two seats are read, from two different owners: `useProjection` comes from the
+ * composer (a standard prop of the dock, not part of this registration), and
+ * `useCommandCodePrices` comes from our own registration's `inject` face, which
+ * `bindInjectSources` re-exposes from the `hooks` compartment. Reading
+ * `props.hooks.*` instead finds `undefined` at runtime and crashes the render,
+ * which the slot renderer contains by ABDICATING the entry — a surface that
+ * vanishes with no visible error.
+ *
+ * Both effects are `useEffect`, never `useLayoutEffect`: there is nothing on
+ * screen to align with (the injection is a text run and a hidden marker), and a
+ * layout effect would log a warning from the server render the tests use.
+ *
+ * @module dsh-commandcode-provider/client/session-cost-view
+ */
+
+import type { SessionCostFacts } from '../cost-facts.ts'
+import { useEffect, useRef } from 'react'
+import type { SnapshotStore } from './snapshot-store.ts'
+import type { SessionCostPricesState } from './prices.ts'
+import { SessionCostDisplay } from './session-cost-display.ts'
+import {
+  buildSessionCostView,
+  type SessionModelSelectionProjection,
+  type SessionUsageBuckets,
+} from './session-cost.ts'
+
+/** The dock outlet this entry renders inside, i.e. what it can scope itself from. */
+const DOCK_ANCHOR = '[data-slot="conversation.composer.dock"]'
+
+/** Module-level constant so the marker's `style` prop never diffs. */
+const HIDDEN_STYLE = { display: 'none' } as const
+
+/**
+ * The injected face this registration carries. Bound by the client entry so the
+ * component stays unaware of the Remote, the controller, and its caching.
+ *
+ * NOTE the split from {@link SessionCostComponentProps}: the renderer
+ * destructures this face's `hooks` compartment and re-exposes each member as a
+ * `use<Name>` prop (`commandCodePrices` → `useCommandCodePrices`); it does not
+ * hand the component this object verbatim.
+ */
+export interface SessionCostInjected {
+  hooks: {
+    commandCodePrices: SnapshotStore<SessionCostPricesState>
+  }
+}
+
+/**
+ * The projection keys this readout reads, declared structurally because the
+ * plugin bundle does not depend on the session-controller package (whose
+ * `UseProjection` this mirrors).
+ */
+interface ProjectionSeats {
+  commandCodeCost: SessionCostFacts
+  tokenUsage: SessionUsageBuckets
+  modelSelection: SessionModelSelectionProjection
+}
+
+/** The projection reader the composer supplies to every dock occupant. */
+export interface UseProjectionLike {
+  <K extends keyof ProjectionSeats>(key: K): ProjectionSeats[K] | undefined
+  <K extends keyof ProjectionSeats, S>(
+    key: K,
+    selector: (value: ProjectionSeats[K] | undefined) => S,
+    eq?: (a: S, b: S) => boolean,
+  ): S
+}
+
+/** The props this component actually receives. */
+export interface SessionCostComponentProps {
+  useCommandCodePrices<T>(selector: (state: SessionCostPricesState) => T): T
+  useProjection: UseProjectionLike
+}
+
+/** Log a missing seat once per page, so a silent no-op stays diagnosable. */
+let warnedMissingSeat = false
+
+/**
+ * The composer's session-cost entry. Guards the two seats before rendering the
+ * mount: a dsh that does not supply the projection seat to dock occupants gets
+ * an absent cost and one console line, never a render crash — which the renderer
+ * would answer by abdicating the entry with no visible trace.
+ */
+export function CommandCodeSessionCost(props: SessionCostComponentProps) {
+  if (typeof props.useProjection !== 'function' || typeof props.useCommandCodePrices !== 'function') {
+    if (!warnedMissingSeat) {
+      warnedMissingSeat = true
+      console.error(
+        '[dsh-commandcode-provider] the composer does not supply the projection/hook seats the session-cost readout needs; the readout stays hidden',
+      )
+    }
+    return null
+  }
+  return <SessionCostEntry {...props} />
+}
+
+/** The mount: one injection lifetime, one hidden marker. Every hook lives here. */
+function SessionCostEntry(props: SessionCostComponentProps) {
+  const markerRef = useRef<HTMLSpanElement | null>(null)
+  const displayRef = useRef<SessionCostDisplay | null>(null)
+  const prices = props.useCommandCodePrices((state) => state)
+  const usage = props.useProjection('tokenUsage')
+  const selection = props.useProjection('modelSelection')
+  const facts = props.useProjection('commandCodeCost')
+  const view = buildSessionCostView({ usage, selection, facts, table: prices.table, now: Date.now() })
+
+  useEffect(() => {
+    // No DOM outside a browser: the server render used by the tests, and a
+    // node-hosted assembly, must both stay no-ops.
+    if (typeof document === 'undefined') return
+    const display = new SessionCostDisplay({
+      doc: document,
+      scope: () => markerRef.current?.closest(DOCK_ANCHOR)?.parentElement ?? null,
+    })
+    displayRef.current = display
+    display.start()
+    return () => {
+      displayRef.current = null
+      display.dispose()
+    }
+  }, [])
+
+  // Every render: the projection is a fresh fold, so there is nothing cheaper to
+  // compare than the plan the display derives from it — and the display rewrites
+  // a node only when that node's own text actually moved.
+  useEffect(() => {
+    displayRef.current?.sync(view)
+  })
+
+  if (view === undefined) return null
+  return <span ref={markerRef} style={HIDDEN_STYLE} data-ccp-session-cost-anchor="" />
+}
diff --git a/src/client/session-cost.ts b/src/client/session-cost.ts
new file mode 100644
index 0000000..5baaf71
--- /dev/null
+++ b/src/client/session-cost.ts
@@ -0,0 +1,455 @@
+/**
+ * Session-cost view model for the composer readout.
+ *
+ * Deliberately JSX-free and React-free, mirroring `./panel.ts`: it turns the
+ * session's token accounting plus the Host's price table into one presentation
+ * value AND the exact text the two surfaces of the harness's token-usage UI
+ * receive — the amount appended to the shipped pill, and the rows appended to
+ * the shipped usage dialog. Node tests therefore drive the whole calculation,
+ * and every user-visible string, without a DOM.
+ *
+ * The figures it prices are the session's DURABLE cumulative buckets, which is
+ * what the composer's own "N tokens" pill reads too (`tokenUsage`), so the two
+ * surfaces can never disagree about how much was used. Dollars are computed
+ * here because Command Code publishes per-token rates and bills against
+ * dollar-denominated windows; the account's own reported `totalCost` is a
+ * billing PERIOD figure, not this session's.
+ *
+ * Three rules are load-bearing:
+ *
+ * 1. **Only Command Code usage is priced.** A session served by another
+ *    provider must render nothing, never a Command Code estimate.
+ * 2. **A missing rate is never invented.** The pricing page publishes
+ *    input/output/cache-read rates for every model but a cache-WRITE rate for
+ *    only some, so unpriced cache-write tokens are surfaced as such rather than
+ *    charged at a guessed multiple of the input rate.
+ * 3. **Unpriceable means invisible.** No usage, no model, no table, an unknown
+ *    model, or all-zero buckets renders nothing at all — a confident `$0.00`
+ *    would be a lie, and this module never returns one.
+ *
+ * @module dsh-commandcode-provider/client/session-cost
+ */
+
+import { COST_TOKEN_KEYS, pricingKey, requestRates, peakHour, zeroCostTokens, type SessionCostFacts } from '../cost-facts.ts'
+import type { CommandCodeModelPrice, CommandCodeModelRates, CommandCodePriceTable } from '../usage-wire.ts'
+import { formatMoney, formatMoneyExact, formatTokensCompact } from './usage.ts'
+
+/** Tokens per published rate unit — the pricing page quotes USD per million. */
+const TOKENS_PER_RATE_UNIT = 1_000_000
+
+/** The provider route whose usage this surface prices. */
+const COMMANDCODE_PROVIDER = 'commandcode'
+
+/**
+ * The English copy for this surface.
+ *
+ * A plain constant, NOT the `settings.commandcode` locale namespace: like the
+ * plans & quota panel, the readout stays English on a Chinese harness. Do not
+ * route it through `ctx.locale`.
+ */
+export const SESSION_COST_COPY = {
+  /** Shown instead of an amount when the model costs nothing on every plan. */
+  free: 'Free',
+  /**
+   * The separator the readout prefixes itself with, so the cost reads as the
+   * last item of the token-usage pill's text run rather than a control beside
+   * it. Rendered with the same colour and margins the shipped pill uses
+   * between its own items.
+   */
+  separator: '·',
+  /** The heading the tooltip leads with. */
+  panelTitle: 'Session cost',
+  /** Marks an estimate from published rates rather than an invoice. */
+  approximate: '≈',
+  /** Tooltip line for the unpriced cache-write tokens. */
+  unpricedCacheWrite: 'cache write tokens have no published rate',
+  /** Tooltip line naming the rate half in force. */
+  peakRates: 'peak rates',
+  /** Tooltip line naming the rate half in force. */
+  offPeakRates: 'off-peak rates',
+  /** Tooltip line explaining the approximate marker. */
+  approximateNote: 'estimate from published rates, not the provider invoice',
+  /** Row/tooltip label for uncached prompt tokens. */
+  uncachedInput: 'uncached input',
+  /** Row/tooltip label for completion tokens. */
+  output: 'output',
+  /** Row/tooltip label for cache-served input tokens. */
+  cacheRead: 'cache read',
+  /** Row/tooltip label for cache-written input tokens. */
+  cacheWrite: 'cache write',
+} as const
+
+/**
+ * The session's cumulative token buckets, as the `tokenUsage` projection
+ * carries them. Declared structurally and defensively: this bundle does not
+ * depend on the session-controller package, and a bucket the provider never
+ * reported is absent rather than zero.
+ */
+export interface SessionUsageBuckets {
+  readonly uncachedInputTokens?: number
+  readonly outputTokens?: number
+  readonly cacheReadTokens?: number
+  readonly cacheWriteTokens?: number
+}
+
+/** One entry of the `modelSelection` projection. */
+export interface SessionModelSelection {
+  readonly provider: string
+  readonly model: string
+}
+
+/**
+ * The `modelSelection` projection: the selection the latest request consumed,
+ * and the one the next request will use (falling back to the former).
+ */
+export interface SessionModelSelectionProjection {
+  readonly lastUsed: SessionModelSelection | null
+  readonly next: SessionModelSelection | null
+}
+
+/** Everything the view needs, already read off the seats by the component. */
+export interface SessionCostInput {
+  /** Durable billing groups; absent on older Hosts means no trustworthy estimate. */
+  facts?: SessionCostFacts | undefined
+  /** The durable cumulative token buckets, or undefined before any request. */
+  usage: SessionUsageBuckets | undefined
+  /** The session's model selection fold, or undefined on an older Host. */
+  selection: SessionModelSelectionProjection | undefined
+  /** The Host's price table, or undefined until it lands. */
+  table: CommandCodePriceTable | undefined
+  /** Legacy caller field; historical request timestamps alone determine rates. */
+  now: number
+}
+
+/** One bucket's line in the usage dialog. */
+export interface SessionCostBucketRow {
+  /** Stable key. */
+  key: 'uncachedInput' | 'cacheRead' | 'cacheWrite' | 'output'
+  /** Row label. */
+  label: string
+  /** Tokens charged in this bucket; a bucket that charged nothing withholds its
+   *  row rather than printing a meaningless zero. */
+  tokens: number
+  /** What this bucket cost, or undefined when the table has no rate for it. */
+  costText: string | undefined
+}
+
+/** The composer readout's presentation value. */
+export interface SessionCostView {
+  /** Priced total in dollars. */
+  total: number
+  /** Visible amount text, e.g. `$0.0123` (or the free word, when free). */
+  value: string
+  /** Full tooltip/accessible text, including the bucket breakdown. */
+  title: string
+  /** Per-bucket lines for the usage dialog, in reading order. */
+  rows: SessionCostBucketRow[]
+  /** Caveat lines for the pill's tooltip (rate half, approximation, unpriced). */
+  notes: string[]
+  /** The model costs nothing on every plan right now. */
+  free: boolean
+  /** The model's `peak` rates are in force. */
+  peak: boolean
+  /** Cache-write tokens the table has no rate for (never guessed, so the
+   *  total is a floor rather than an estimate). */
+  unpricedCacheWriteTokens: number
+  /** Published-rate totals are estimates rather than provider invoices. */
+  approximate: boolean
+}
+
+/** A finite, non-negative count — anything else reads as absent. */
+function count(value: number | undefined): number {
+  return typeof value === 'number' && Number.isFinite(value) && value > 0 ? value : 0
+}
+
+/**
+ * Whether `now` falls inside a peak-pricing window, per the windows that travel
+ * with the price table. Monday–Friday (UTC) only, and each window is
+ * end-exclusive — the same rule the Host snapshot applies when it labels the
+ * model picker. The schedule is read from the wire rather than restated so
+ * there is one definition of the windows, on the Host.
+ */
+export function isPeakHour(now: number, peakHours: ReadonlyArray<readonly [number, number]>): boolean {
+  const at = new Date(now)
+  const day = at.getUTCDay()
+  if (day === 0 || day === 6) return false
+  const hour = at.getUTCHours()
+  return peakHours.some(([start, end]) => hour >= start && hour < end)
+}
+
+/**
+ * Index a price table for lookup. Rows are keyed by catalog id and by pricing
+ * slug, both exact and lowercased, because a session reports a catalog id while
+ * a row no catalog model claims is served under the page's slug.
+ */
+function indexTable(table: CommandCodePriceTable): Map<string, CommandCodeModelPrice> {
+  const index = new Map<string, CommandCodeModelPrice>()
+  for (const price of table.models) {
+    for (const key of [price.id, price.slug]) {
+      if (typeof key !== 'string' || key === '') continue
+      if (!index.has(key)) index.set(key, price)
+      const lower = key.toLowerCase()
+      if (!index.has(lower)) index.set(lower, price)
+    }
+  }
+  return index
+}
+
+/**
+ * The dollar cost of each bucket, plus the total and the unpriced remainder.
+ *
+ * Every bucket is charged at its own published rate; the cache-write bucket
+ * contributes only when the model publishes a rate for it, otherwise its tokens
+ * are returned as {@link SessionCostView.unpricedCacheWriteTokens} and its own
+ * cost stays undefined so the panel can say so instead of printing a zero.
+ */
+interface SessionCostBreakdown {
+  uncachedInput: number
+  cacheRead: number
+  cacheWrite: number | undefined
+  output: number
+  total: number
+  unpricedCacheWriteTokens: number
+}
+
+function costOf(
+  usage: SessionUsageBuckets,
+  rates: CommandCodeModelRates,
+  free: boolean,
+): SessionCostBreakdown {
+  if (free) {
+    return { uncachedInput: 0, cacheRead: 0, cacheWrite: 0, output: 0, total: 0, unpricedCacheWriteTokens: 0 }
+  }
+  const perUnit = (tokens: number, rate: number): number => (tokens * rate) / TOKENS_PER_RATE_UNIT
+  const uncachedInput = perUnit(count(usage.uncachedInputTokens), rates.inputCost)
+  const output = perUnit(count(usage.outputTokens), rates.outputCost)
+  const cacheRead = perUnit(count(usage.cacheReadTokens), rates.cacheReadCost)
+  const cacheWriteTokens = count(usage.cacheWriteTokens)
+  const cacheWrite = rates.cacheWriteCost === undefined
+    ? undefined
+    : perUnit(cacheWriteTokens, rates.cacheWriteCost)
+  return {
+    uncachedInput,
+    cacheRead,
+    cacheWrite,
+    output,
+    total: uncachedInput + output + cacheRead + (cacheWrite ?? 0),
+    unpricedCacheWriteTokens: rates.cacheWriteCost === undefined ? cacheWriteTokens : 0,
+  }
+}
+
+/**
+ * Amount text for a session cost.
+ *
+ * The panel's `money()` convention (2 decimals, 4 below a cent) is right for
+ * billing windows, but a live session total starts far below a cent, where
+ * `toFixed(4)` would print a flat `$0.0000` — which reads as broken rather than
+ * as small. So a total under $0.0001 is stated as a bound instead.
+ */
+export function sessionCostAmount(total: number): string {
+  if (!Number.isFinite(total) || total <= 0) return formatMoney(0)
+  if (total < 0.0001) return `<$0.0001`
+  return total < 0.01 ? formatMoneyExact(total) : formatMoney(total)
+}
+
+/** One `label value` clause of the tooltip. */
+function clause(label: string, tokens: number): string | undefined {
+  return tokens > 0 ? `${label} ${formatTokensCompact(tokens)}` : undefined
+}
+
+/**
+ * Build the composer readout, or undefined when there is nothing honest to show.
+ *
+ * Undefined is the correct answer for a session with no usage yet, a session
+ * another provider served, a model the price table does not know, and a table
+ * that has not landed — the pill simply is not there.
+ */
+export function buildSessionCostView(input: SessionCostInput): SessionCostView | undefined {
+  const { usage, table, facts } = input
+  if (!usage || !table || !facts || facts.pricingKey !== pricingKey(table)) return undefined
+  const totals = zeroCostTokens()
+  const index = indexTable(table)
+  const breakdown: SessionCostBreakdown = { uncachedInput: 0, cacheRead: 0, cacheWrite: 0, output: 0, total: 0, unpricedCacheWriteTokens: 0 }
+  let free = true
+  let peak = false
+  let partial = false
+  let priced = false
+  const notes: string[] = []
+  for (const group of facts.groups) {
+    for (const key of COST_TOKEN_KEYS) totals[key] += group.tokens[key]
+    if (group.provider !== COMMANDCODE_PROVIDER) { partial = true; continue }
+    const price = index.get(group.model)
+    if (!price) { partial = true; continue }
+    const isFree = price.free === true
+    free &&= isFree
+    if (price.peak && group.at === null) {
+      partial = true
+      notes.push('request time unavailable; off-peak lower bound')
+    }
+    const rates = requestRates(price, group.at, group.contextTokens, table)
+    const part = costOf(group.tokens, rates, isFree)
+    priced ||= isFree || part.total > 0
+    for (const key of ['uncachedInput', 'cacheRead', 'output', 'total', 'unpricedCacheWriteTokens'] as const) breakdown[key] += part[key]
+    breakdown.cacheWrite = (breakdown.cacheWrite ?? 0) + (part.cacheWrite ?? 0)
+    if (price.peak) {
+      const isPeak = group.at !== null && peakHour(group.at, table.peakHours)
+      peak ||= isPeak
+      notes.push(isPeak ? SESSION_COST_COPY.peakRates : SESSION_COST_COPY.offPeakRates)
+    }
+  }
+  // Both projections must describe the same durable cut. Never decorate token
+  // rows from a newer/older fold, and never price an old Host's cumulative usage.
+  if (COST_TOKEN_KEYS.some(key => totals[key] !== count(usage[key])) || !priced) return undefined
+  const { total, unpricedCacheWriteTokens } = breakdown
+  partial ||= unpricedCacheWriteTokens > 0
+  free &&= !partial
+  if (partial) notes.push('Command Code priced subtotal only; unpriced or other-provider usage excluded')
+  notes.push(SESSION_COST_COPY.approximateNote)
+  const uncachedInput = totals.uncachedInputTokens
+  const output = totals.outputTokens
+  const cacheRead = totals.cacheReadTokens
+  const cacheWrite = totals.cacheWriteTokens
+  // No billed token of any kind means there is nothing to report yet: a `$0.00`
+  // pill on a session that has not made a request would be noise, not
+  // information, and on a free model it would be redundant.
+  if (uncachedInput === 0 && output === 0 && cacheRead === 0 && cacheWrite === 0) return undefined
+
+  // Free priced groups do not establish zero spending for unpriced groups.
+  // Keep the pure-Free label and real sub-cent amounts, but never a zero subtotal.
+  if (!free && total <= 0) return undefined
+
+  const value = free
+    ? SESSION_COST_COPY.free
+    : `${partial ? '≥' : SESSION_COST_COPY.approximate}${sessionCostAmount(total)}`
+  const money = (amount: number | undefined): string | undefined =>
+    amount === undefined ? undefined : sessionCostAmount(amount)
+  // Reading order mirrors the prompt's own order: what was charged at the input
+  // rate, then the two cache buckets, then what the model produced.
+  const rows: SessionCostBucketRow[] = [
+    { key: 'uncachedInput', label: SESSION_COST_COPY.uncachedInput, tokens: uncachedInput, costText: money(breakdown.uncachedInput) },
+    { key: 'cacheRead', label: SESSION_COST_COPY.cacheRead, tokens: cacheRead, costText: money(breakdown.cacheRead) },
+    { key: 'cacheWrite', label: SESSION_COST_COPY.cacheWrite, tokens: cacheWrite, costText: unpricedCacheWriteTokens === cacheWrite && cacheWrite > 0 ? undefined : money(breakdown.cacheWrite) },
+    { key: 'output', label: SESSION_COST_COPY.output, tokens: output, costText: money(breakdown.output) },
+  ]
+  if (unpricedCacheWriteTokens > 0) notes.push(SESSION_COST_COPY.unpricedCacheWrite)
+  // Empty clauses are dropped BEFORE joining: `clause()` returns undefined for a
+  // bucket with no tokens, and joining the raw list would leave a `·  ·` gap for
+  // every absent bucket — a tooltip that reads as a rendering bug.
+  const title = ([
+    `${SESSION_COST_COPY.panelTitle} ${free ? SESSION_COST_COPY.free : sessionCostAmount(total)}`,
+    clause(SESSION_COST_COPY.uncachedInput, uncachedInput),
+    clause(SESSION_COST_COPY.output, output),
+    clause(SESSION_COST_COPY.cacheRead, cacheRead),
+    clause(SESSION_COST_COPY.cacheWrite, cacheWrite),
+    ...notes,
+  ] as Array<string | undefined>).filter((part): part is string => part !== undefined).join(' · ')
+
+  return {
+    total,
+    value,
+    title,
+    rows,
+    notes: [...new Set(notes)],
+    free,
+    peak,
+    unpricedCacheWriteTokens,
+    approximate: !free,
+  }
+}
+
+/**
+ * The two nodes the text appended to the harness's token-usage pill is made of.
+ *
+ * The separator is a node of its own because it carries the shipped pill's
+ * SEPARATOR colour rather than its label colour; the pill is a flex row whose
+ * `gap` already spaces the appended item, so the separator is what makes the
+ * result read as one continuous run (`1.2M tokens · Cache hit 87% · $0.0123`)
+ * rather than as a value parked at the end of it.
+ */
+export interface SessionCostPillRun {
+  /** The shipped pill's own separator glyph. */
+  separator: string
+  /** The amount, `≈` marker and free word included. */
+  value: string
+}
+
+/** Split the appended run into the two nodes the display creates. */
+export function sessionCostPillRun(view: SessionCostView): SessionCostPillRun {
+  return { separator: SESSION_COST_COPY.separator, value: view.value }
+}
+
+/**
+ * How the harness's own usage dialog is decorated: one entry per row the
+ * shipped component renders, IN ITS OWN ORDER.
+ *
+ * The price goes on the right of the row it belongs to (`3,206,544 tok  $0.07`)
+ * rather than in a block of our own rows beneath them, so the dialog keeps the
+ * harness's layout and gains nothing to read past.
+ *
+ * Two rows are special. `cacheHit` carries a percentage, not a count, so it is
+ * never priced. `cacheWrite` is HIDDEN and never priced: the pricing page
+ * publishes a cache-write rate for a minority of models, so its cell read
+ * `unpriced` far more often than a number; its tokens still count toward the
+ * total the pill shows.
+ */
+export type SessionCostShippedRow = 'cacheHit' | 'uncachedInput' | 'cacheRead' | 'cacheWrite' | 'output'
+
+/** One shipped dialog row and what to do with it. */
+export interface SessionCostRowDecoration {
+  /** Which shipped row this is. */
+  row: SessionCostShippedRow
+  /**
+   * The exact token count that row must be showing, or undefined for a row that
+   * carries no count. The display layer verifies it before decorating anything:
+   * the shipped labels are the `chat` locale's own strings (never English), so
+   * rows are matched POSITIONALLY and this is what proves the position is right.
+   */
+  tokens: number | undefined
+  /** The price to append to the row's value, or undefined to leave it alone. */
+  amount: string | undefined
+  /** Whether the row is dropped from the dialog entirely. */
+  hidden: boolean
+}
+
+/**
+ * Decorate the harness's usage dialog, row by row.
+ *
+ * The row sequence mirrors the shipped component's conditions exactly — the
+ * cache-hit row exists while there is billed prompt input, the cache-write row
+ * while those tokens are non-zero — because the display layer matches what it
+ * finds positionally. A shape it cannot confirm is a shape it does not touch.
+ *
+ * A free model decorates nothing: every row's cost is zero by definition, the
+ * pill already says `Free`, and a column of `$0.00` would be noise. A bucket
+ * whose rate the page does not publish is likewise left unfilled rather than
+ * filled with an invented number.
+ */
+export function sessionCostRowDecorations(view: SessionCostView): SessionCostRowDecoration[] {
+  const bucket = (key: SessionCostBucketRow['key']): number =>
+    view.rows.find((row) => row.key === key)?.tokens ?? 0
+  const price = (key: SessionCostBucketRow['key']): string | undefined => {
+    if (view.free) return undefined
+    return view.rows.find((row) => row.key === key)?.costText
+  }
+  const uncachedInput = bucket('uncachedInput')
+  const cacheRead = bucket('cacheRead')
+  const cacheWrite = bucket('cacheWrite')
+  const output = bucket('output')
+  const plan: SessionCostRowDecoration[] = []
+  if (uncachedInput + cacheRead + cacheWrite > 0) {
+    plan.push({ row: 'cacheHit', tokens: undefined, amount: undefined, hidden: false })
+  }
+  plan.push({ row: 'uncachedInput', tokens: uncachedInput, amount: price('uncachedInput'), hidden: false })
+  plan.push({ row: 'cacheRead', tokens: cacheRead, amount: price('cacheRead'), hidden: false })
+  if (cacheWrite !== 0) {
+    // Hidden only when the page publishes NO cache-write rate: those tokens are
+    // genuinely unpriced, the note says so, and the row would otherwise show a
+    // blank cell. When the rate IS known its price is part of the total, so the
+    // row must stay — hiding a row whose cost the pill already counts leaves the
+    // visible rows unable to explain the figure above them.
+    const amount = price('cacheWrite')
+    plan.push({ row: 'cacheWrite', tokens: cacheWrite, amount, hidden: amount === undefined })
+  }
+  plan.push({ row: 'output', tokens: output, amount: price('output'), hidden: false })
+  return plan
+}
diff --git a/src/client/usage.ts b/src/client/usage.ts
index bedee87..f44eee3 100644
--- a/src/client/usage.ts
+++ b/src/client/usage.ts
@@ -13,7 +13,7 @@
  * @module dsh-commandcode-provider/client/usage
  */
 
-import type { CommandCodeAccountsReport, CommandCodeCatalog } from '../usage-wire.ts'
+import type { CommandCodeAccountsReport, CommandCodeCatalog, CommandCodePriceTable } from '../usage-wire.ts'
 import type { CommandCodeLoginStatus } from '../login-wire.ts'
 import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol'
 
@@ -23,19 +23,28 @@ import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol'
  * typert.remote-client files use), so `ctx.remote.commandcode.*()` is typed
  * once each contribution is mounted. The `commandcode` namespace member is
  * declared exactly once (interface merging forbids duplicate members), so
- * this one declaration carries the usage report, the model catalog, AND the
- * login endpoints — the endpoint-level declarations live beside their
- * controllers.
+ * this one declaration carries the usage report, the model catalog, the price
+ * table, AND the login endpoints — the endpoint-level declarations live beside
+ * their controllers.
  */
 declare module '@deepseek-ai/dsh-typert-protocol' {
   interface TypertRemoteMap {
     'commandcode/report': () => Promise<RemoteResult<CommandCodeAccountsReport>>
     'commandcode/models': () => Promise<RemoteResult<CommandCodeCatalog>>
+    'commandcode/prices': () => Promise<RemoteResult<CommandCodePriceTable>>
   }
   interface TypertRemoteNamespaceMap {
     commandcode: {
       report: () => Promise<RemoteResult<CommandCodeAccountsReport>>
       models: () => Promise<RemoteResult<CommandCodeCatalog>>
+      /**
+       * Optional because the Host half and this browser bundle can be a
+       * cross-version pair: a Host older than the price table mounts no
+       * `commandcode/prices` descriptor, so the member is genuinely absent at
+       * runtime. The price controller reads a missing method as "no table"
+       * (see `./prices.ts`) instead of throwing.
+       */
+      prices?: () => Promise<RemoteResult<CommandCodePriceTable>>
       loginBegin: () => Promise<RemoteResult<CommandCodeLoginStatus>>
       loginStatus: () => Promise<RemoteResult<CommandCodeLoginStatus>>
       loginCancel: () => Promise<RemoteResult<CommandCodeLoginStatus>>
@@ -53,6 +62,15 @@ export interface UsageRemote {
     | { ok: true; value: CommandCodeCatalog }
     | { ok: false; error: { message: string } }
   >
+  /**
+   * Optional for the same cross-version reason as the namespace member above:
+   * an older Host serves no price table. `CommandCodePricesController` reads
+   * the absence as a permanent "no prices" state.
+   */
+  prices?(): Promise<
+    | { ok: true; value: CommandCodePriceTable }
+    | { ok: false; error: { message: string } }
+  >
 }
 
 /** The card's fetch lifecycle. */
@@ -195,3 +213,13 @@ export function formatResetAt(ms: number): string {
   if (ms <= 0) return ''
   return new Date(ms).toLocaleString()
 }
+
+/** Host facts drive the usage card, including keys invisible to browser credentials. */
+export function usageCardState(usage: UsagePageState) {
+  const accounts = usage.report?.accounts ?? []
+  return {
+    loading: usage.status === 'loading',
+    shouldRefresh: usage.status === 'idle',
+    noKey: accounts.length > 0 && !accounts.some(account => account.configured),
+  }
+}
diff --git a/src/commands.ts b/src/commands.ts
index 15a6286..17b659b 100644
--- a/src/commands.ts
+++ b/src/commands.ts
@@ -161,36 +161,45 @@ function renderReport(report: CommandCodeUsageReport, locale: LocaleId, title?:
 
   if (report.credits) {
     const c = report.credits
-    const monthlyPct = c.monthlyCredits > 0
-      ? `${((c.monthlyCredits / (c.monthlyCredits + c.purchasedCredits)) * 100).toFixed(0)}%`
-      : '—'
+    const balanceTotal = c.monthlyCredits + c.purchasedCredits
+    const ratioKnown = c.monthlyReported !== false && c.purchasedReported !== false && balanceTotal > 0
     lines.push(
       commandCopy(locale, 'creditsHeader'),
       commandCopy(locale, 'monthlyLine')
-        .replace('{monthly}', moneyShort(c.monthlyCredits))
-        .replace('{purchased}', moneyShort(c.purchasedCredits))
-        .replace('{free}', moneyShort(c.freeCredits)),
-      commandCopy(locale, 'barLine')
-        .replace('{bar}', bar(c.monthlyCredits, c.monthlyCredits + c.purchasedCredits))
-        .replace('{pct}', monthlyPct),
-      '',
-      commandCopy(locale, 'windowsHeader'),
-      commandCopy(locale, 'fiveHourLine')
-        .replace('{used}', moneyShort(c.fiveHour.used))
-        .replace('{cap}', moneyShort(c.fiveHour.cap))
-        .replace('{warn}', c.fiveHour.exceeded ? commandCopy(locale, 'exceededWarning') : ''),
-      commandCopy(locale, 'windowBarLine')
-        .replace('{bar}', bar(c.fiveHour.used, c.fiveHour.cap))
-        .replace('{when}', resetLabel(c.fiveHour.resetAt)),
-      commandCopy(locale, 'weeklyLine')
-        .replace('{used}', moneyShort(c.weekly.used))
-        .replace('{cap}', moneyShort(c.weekly.cap))
-        .replace('{warn}', c.weekly.exceeded ? commandCopy(locale, 'exceededWarning') : ''),
-      commandCopy(locale, 'windowBarLine')
-        .replace('{bar}', bar(c.weekly.used, c.weekly.cap))
-        .replace('{when}', resetLabel(c.weekly.resetAt)),
+        .replace('{monthly}', (c.monthlyReported === false ? '—' : moneyShort(c.monthlyCredits)))
+        .replace('{purchased}', (c.purchasedReported === false ? '—' : moneyShort(c.purchasedCredits)))
+        .replace('{free}', (c.freeReported === false ? '—' : moneyShort(c.freeCredits))),
+      ...(ratioKnown ? [commandCopy(locale, 'barLine')
+        .replace('{bar}', bar(c.monthlyCredits, balanceTotal))
+        .replace('{pct}', ((c.monthlyCredits / balanceTotal) * 100).toFixed(0))] : []),
       '',
     )
+    // Only the windows the endpoint actually reported: an unlimited account
+    // reports none, and printing two zeroed rows for it would invent limits.
+    const windowLines: string[] = []
+    if (c.fiveHour !== undefined) {
+      windowLines.push(
+        commandCopy(locale, 'fiveHourLine')
+          .replace('{used}', moneyShort(c.fiveHour.used))
+          .replace('{cap}', moneyShort(c.fiveHour.cap))
+          .replace('{warn}', c.fiveHour.exceeded ? commandCopy(locale, 'exceededWarning') : ''),
+        commandCopy(locale, 'windowBarLine')
+          .replace('{bar}', bar(c.fiveHour.used, c.fiveHour.cap))
+          .replace('{when}', resetLabel(c.fiveHour.resetAt)),
+      )
+    }
+    if (c.weekly !== undefined) {
+      windowLines.push(
+        commandCopy(locale, 'weeklyLine')
+          .replace('{used}', moneyShort(c.weekly.used))
+          .replace('{cap}', moneyShort(c.weekly.cap))
+          .replace('{warn}', c.weekly.exceeded ? commandCopy(locale, 'exceededWarning') : ''),
+        commandCopy(locale, 'windowBarLine')
+          .replace('{bar}', bar(c.weekly.used, c.weekly.cap))
+          .replace('{when}', resetLabel(c.weekly.resetAt)),
+      )
+    }
+    if (windowLines.length > 0) lines.push(commandCopy(locale, 'windowsHeader'), ...windowLines, '')
   }
 
   if (report.failures.length > 0) {
diff --git a/src/cost-facts.ts b/src/cost-facts.ts
new file mode 100644
index 0000000..a16a490
--- /dev/null
+++ b/src/cost-facts.ts
@@ -0,0 +1,67 @@
+/** Shared, JSON-only billing facts. No Host or browser runtime imports. */
+import type { CommandCodeModelPrice, CommandCodeModelRates, CommandCodePriceTable } from './usage-wire.ts'
+
+export interface CostTokens {
+  uncachedInputTokens: number
+  outputTokens: number
+  cacheReadTokens: number
+  cacheWriteTokens: number
+}
+
+/** Requests with identical model/rates are folded into one group. */
+export interface CostUsageGroup {
+  provider: string
+  model: string
+  at: number | null
+  contextTokens: number
+  tokens: CostTokens
+}
+
+export interface SessionCostFacts {
+  pricingKey: number
+  groups: CostUsageGroup[]
+}
+
+export const zeroCostTokens = (): CostTokens => ({ uncachedInputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 })
+export const COST_TOKEN_KEYS = ['uncachedInputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens'] as const
+
+export function peakHour(at: number, windows: ReadonlyArray<readonly [number, number]>): boolean {
+  const time = new Date(at)
+  return time.getUTCDay() !== 0 && time.getUTCDay() !== 6
+    && windows.some(([start, end]) => time.getUTCHours() >= start && time.getUTCHours() < end)
+}
+
+/**
+ * All prompt billing buckets determine a request's band, never cumulative session input.
+ *
+ * A tiered model returns the matching band and does NOT then apply `peak`: the
+ * page publishes those two dimensions independently, no row carries both today,
+ * and the generator would report a tiered row on every sync — so the combination
+ * becoming real is visible before it reaches a user. This ordering is a latent
+ * choice, not a verified upstream rule.
+ */
+export function requestRates(price: CommandCodeModelPrice, at: number | null, contextTokens: number, table: CommandCodePriceTable): CommandCodeModelRates {
+  // The first band whose bound accepts the prompt. ORDER IS LOAD-BEARING, and
+  // both producers enforce it: the generator refuses non-ascending bounds or a
+  // bounded last band, and the wire parser rejects the same shapes — so a
+  // conforming table cannot present bands out of order, and this `find` cannot
+  // select a band a later one should have won.
+  const tier = price.contextTiers?.find(tier => tier.maxContext === undefined || contextTokens <= tier.maxContext)
+  if (tier !== undefined) return tier
+  return price.peak !== undefined && at !== null && peakHour(at, table.peakHours) ? price.peak : price
+}
+
+/** Cache version and wire guard: changing bands/rates must refold historical groups. */
+export function pricingKey(table: CommandCodePriceTable): number {
+  const rates = (r: CommandCodeModelRates) => [r.inputCost, r.outputCost, r.cacheReadCost, r.cacheWriteCost ?? null]
+  const canonical = JSON.stringify(['commandCodeCost-v1', table.peakHours, table.models.map(p => [p.id, p.slug, p.free === true, rates(p), p.peak ? rates(p.peak) : null, p.contextTiers?.map(t => [t.maxContext ?? null, rates(t)]) ?? null])])
+  let hash = 2166136261
+  for (const c of canonical) hash = Math.imul(hash ^ c.charCodeAt(0), 16777619) >>> 0
+  return hash
+}
+
+/** Only safe to merge requests whose billing classification is identical. */
+export function costGroupKey(group: CostUsageGroup, table: CommandCodePriceTable): string {
+  const price = table.models.find(p => p.id === group.model || p.slug === group.model)
+  return JSON.stringify([group.provider, group.model, price === undefined ? null : requestRates(price, group.at, group.contextTokens, table), group.at === null])
+}
diff --git a/src/cost-projection.ts b/src/cost-projection.ts
new file mode 100644
index 0000000..0d44662
--- /dev/null
+++ b/src/cost-projection.ts
@@ -0,0 +1,97 @@
+/** Durable cost facts: mirrors token-meter's replacement/retry rules across v1/v2 logs. */
+import type { Context } from '@deepseek-ai/cordis'
+import { modelPriceTable } from './model-prices.ts'
+import { COST_TOKEN_KEYS, costGroupKey, pricingKey, zeroCostTokens, type CostTokens, type CostUsageGroup, type SessionCostFacts } from './cost-facts.ts'
+
+interface CostState {
+  selection: { provider: string; model: string } | null
+  at: number | null
+  last: { turn: number; step: number; group: CostUsageGroup } | null
+  facts: SessionCostFacts
+}
+interface LogEvent { type: string; time: number; data: unknown }
+const record = (v: unknown): Record<string, unknown> | undefined => typeof v === 'object' && v !== null && !Array.isArray(v) ? v as Record<string, unknown> : undefined
+const finite = (v: unknown): v is number => typeof v === 'number' && Number.isFinite(v) && v >= 0
+
+function tokensOf(value: unknown): CostTokens | undefined {
+  const u = record(value)
+  if (!u || !finite(u.inputTokens) || !finite(u.outputTokens)) return undefined
+  if (u.cacheReadTokens !== undefined && !finite(u.cacheReadTokens) || u.cacheWriteTokens !== undefined && !finite(u.cacheWriteTokens)) return undefined
+  return { uncachedInputTokens: u.inputTokens, outputTokens: u.outputTokens, cacheReadTokens: u.cacheReadTokens as number ?? 0, cacheWriteTokens: u.cacheWriteTokens as number ?? 0 }
+}
+
+/** Current v2 settlements store the last usage in their stream; v1 stores chunk events. */
+function usageOf(type: string, data: Record<string, unknown>): CostTokens | undefined {
+  if (type === 'assistant/chunk') {
+    const chunk = record(data.chunk)
+    return chunk?.type === 'usage' ? tokensOf(chunk.usage) : undefined
+  }
+  if (type !== 'assistant/message' && type !== 'assistant/attempt') return undefined
+  const direct = tokensOf(data.usage)
+  if (direct !== undefined) return direct
+  if (!Array.isArray(data.stream)) return undefined
+  for (let i = data.stream.length - 1; i >= 0; i--) {
+    const item = record(data.stream[i])
+    const chunk = item?.type === 'chunk' ? record(item.chunk) : undefined
+    if (chunk?.type === 'usage') return tokensOf(chunk.usage)
+  }
+  return undefined
+}
+
+function parseState(value: unknown): CostState {
+  const s = record(value), facts = record(s?.facts)
+  if (!s || !facts || !finite(facts.pricingKey) || !Array.isArray(facts.groups)) throw new TypeError('invalid commandCodeCost state')
+  const group = (v: unknown): boolean => {
+    const g = record(v), t = record(g?.tokens)
+    return !!g && typeof g.provider === 'string' && typeof g.model === 'string' && (g.at === null || finite(g.at)) && finite(g.contextTokens) && !!t && COST_TOKEN_KEYS.every(k => finite(t[k]))
+  }
+  const sel = record(s.selection), last = record(s.last)
+  if (!(s.selection === null || sel && typeof sel.provider === 'string' && typeof sel.model === 'string')
+    || !(s.at === null || finite(s.at)) || !facts.groups.every(group)
+    || !(s.last === null || last && finite(last.turn) && finite(last.step) && group(last.group))) throw new TypeError('invalid commandCodeCost state')
+  return value as CostState
+}
+
+/** Optional registry uses only synchronous parse/view; no new runtime module is required. */
+export function createCostProjection(table = modelPriceTable()) {
+  const version = pricingKey(table)
+  return {
+    key: 'commandCodeCost', stateVersion: version,
+    stateSchema: { parse: parseState },
+    init: (): CostState => ({ selection: null, at: null, last: null, facts: { pricingKey: version, groups: [] } }),
+    apply(state: CostState, event: LogEvent): CostState {
+      const data = record(event.data)
+      if (!data) return state
+      if (event.type === 'request/header') {
+        const config = record(record(data.header)?.config)
+        return { ...state, selection: config && typeof config.provider === 'string' && typeof config.model === 'string' ? { provider: config.provider, model: config.model } : null }
+      }
+      if (event.type === 'step/start' || event.type === 'llm/retry-started') return { ...state, at: finite(event.time) ? event.time : null, last: null }
+      const tokens = usageOf(event.type, data)
+      if (tokens === undefined || !finite(data.turn) || !finite(data.step)) return state
+      const previous = state.last?.turn === data.turn && state.last.step === data.step ? state.last.group : undefined
+      const group: CostUsageGroup = { provider: state.selection?.provider ?? '', model: state.selection?.model ?? '', at: state.at, contextTokens: tokens.uncachedInputTokens + tokens.cacheReadTokens + tokens.cacheWriteTokens, tokens }
+      if (previous && JSON.stringify(previous) === JSON.stringify(group)) return state
+      const groups = state.facts.groups.map(g => ({ ...g, tokens: { ...g.tokens } }))
+      if (previous) {
+        const old = groups.find(g => costGroupKey(g, table) === costGroupKey(previous, table))
+        if (old) for (const k of COST_TOKEN_KEYS) old.tokens[k] -= previous.tokens[k]
+      }
+      let target = groups.find(g => costGroupKey(g, table) === costGroupKey(group, table))
+      if (!target) { target = { ...group, tokens: zeroCostTokens() }; groups.push(target) }
+      for (const k of COST_TOKEN_KEYS) target.tokens[k] += tokens[k]
+      return { ...state, last: { turn: data.turn, step: data.step, group }, facts: { pricingKey: version, groups: groups.filter(g => COST_TOKEN_KEYS.some(k => g.tokens[k] > 0)) } }
+    },
+    wire: {
+      view: (state: CostState) => state.facts,
+      viewSchema: { parse(value: unknown): SessionCostFacts { return parseState({ selection: null, at: null, last: null, facts: value }).facts } },
+    },
+  }
+}
+
+export function installCostProjection(ctx: Context): void {
+  ctx.inject(['sessionProjections'], c => {
+    const registry = c.get('sessionProjections') as { register(definition: ReturnType<typeof createCostProjection>): () => void } | undefined
+    if (typeof registry?.register === 'function') c.effect(() => registry.register(createCostProjection()), 'commandcode cost projection')
+  })
+}
diff --git a/src/index.ts b/src/index.ts
index 0868eeb..dcd05cf 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -26,6 +26,7 @@
  * @module dsh-commandcode-provider
  */
 
+import { installCostProjection } from './cost-projection.ts'
 import { homedir } from 'node:os'
 import { join } from 'node:path'
 
@@ -333,6 +334,7 @@ function readModelVisibility(raw: unknown): Readonly<Record<string, boolean>> |
 }
 
 export function apply(ctx: Context, config: Config): void {
+  installCostProjection(ctx)
   let current: () => Config = () => config
   let lastRaw: Config | undefined
   let lastGood: ResolvedCommandCodeOptions | undefined
diff --git a/src/model-prices.ts b/src/model-prices.ts
new file mode 100644
index 0000000..7c86f75
--- /dev/null
+++ b/src/model-prices.ts
@@ -0,0 +1,260 @@
+/**
+ * Vendored Command Code model prices: the per-token rates the official
+ * pricing page publishes, which is what lets the composer price a session in
+ * dollars.
+ *
+ * Source: the model array embedded in
+ * https://commandcode.ai/docs/resources/pricing-limits, read out of its
+ * Next.js flight payload. That payload is the only place the `timeOfDay` and
+ * `contextTiers` blocks exist, so it is what the generator parses — but it is
+ * NOT trusted on its own: the generator also reads the page's rendered table
+ * and reports any rate where the two disagree. A figure can be internally
+ * consistent and still be the wrong row (this table once carried
+ * `0.22 → 0.44` for a model the page prices `0.15 → 0.30` — exactly the 2× the
+ * peak/off-peak rule promises), so the cross-check exists to catch that class
+ * of error rather than to restate the invariant. Every figure is USD per
+ * 1,000,000 tokens, which the page confirms itself: its Go-plan estimate for
+ * DeepSeek V4 Flash (800 in / 200 out on a $10 budget) resolves to the ~42K
+ * requests the page states, and ~26K once its typical 50K cache reads are
+ * priced at the cacheRead rate.
+ *
+ * Three buckets are always published (inputCost, outputCost, cacheReadCost);
+ * cacheWriteCost is published for a minority of models. A model without the
+ * key has UNPRICED cache-write tokens: never invent a multiplier for them, and
+ * never fold them into the input rate. A published `0` is a different fact and
+ * is kept as a real zero — see the note on the GPT rows below.
+ *
+ * Time-of-day models store a `peak` triplet only. The page repeats the flat
+ * rates inside its own offPeak block, so the top-level rates ARE the off-peak
+ * rates and only the peak override is worth keeping — the generator asserts
+ * that equality and refuses to emit otherwise. Whether "now" counts as peak is
+ * decided by `isPeakPricingHour()` in ./capabilities.ts, on the same
+ * Monday-Friday UTC schedule the model picker labels.
+ *
+ * Context-tiered models carry every band, with inclusive prompt-token bounds
+ * and an unbounded final band. The durable cost projection selects each
+ * request's band from its input/cache buckets, never from session totals.
+ *
+ * Do not hand-edit the table below: run `node scripts/sync-model-prices.mjs`,
+ * which re-reads the page, asserts the structure and the off-peak equality,
+ * prints cross-check warnings for a human, and rewrites
+ * only the rows. `--check` reports drift without writing (exit 1 on drift,
+ * exit 2 when the page could not be read, so a network failure never reads as
+ * "up to date"). Everything else in this file — this doc, the types, the slug
+ * rules, the table builder — is written by hand and survives that rewrite.
+ *
+ * @module dsh-commandcode-provider/model-prices
+ */
+
+import type { CommandCodeModelPrice, CommandCodeModelRates, CommandCodePriceTable } from './usage-wire.ts'
+import { KNOWN_PLANS, PEAK_HOUR_RANGES, isFreeModel } from './capabilities.ts'
+
+/**
+ * One pricing-page row. `rates` is `[input, output, cacheRead, cacheWrite?]`
+ * and `peak` is the `[input, output, cacheRead]` triplet charged inside the
+ * peak windows. All figures are USD per 1,000,000 tokens.
+ */
+interface ModelPriceRow {
+  readonly id: string
+  readonly rates: readonly number[]
+  readonly peak?: readonly number[]
+  readonly contextTiers?: readonly { maxContext?: number; rates: readonly number[] }[]
+}
+
+/**
+ * Every price row the page publishes, ordered by its own slug.
+ *
+ * Note on the GPT rows: `gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini` and
+ * `gpt-5.5` carry a LITERAL `cacheWriteCost: 0` — a different fact from a
+ * missing key, because `ratesOf()` keeps it and the readout then charges
+ * cache writes at zero instead of reporting them unpriced. That is what the
+ * page's JSON says; its rendered column shows `—` for exactly these four while
+ * rendering a genuine zero as `$0.00` elsewhere, so the page contradicts
+ * itself. The table stays faithful to the machine-readable source and the
+ * discrepancy is recorded in AGENTS.md rather than papered over here.
+ */
+const MODEL_PRICE_ROWS: readonly ModelPriceRow[] = [
+  { id: 'claude-fable-5', rates: [10, 50, 1, 12.5] },
+  { id: 'claude-fable-5-1', rates: [10, 50, 0.25, 12.5] },
+  { id: 'claude-haiku-4-5', rates: [1, 5, 0.1, 1.25] },
+  { id: 'claude-opus-4-6', rates: [5, 25, 0.5, 6.25] },
+  { id: 'claude-opus-4-7', rates: [5, 25, 0.5, 6.25] },
+  { id: 'claude-opus-4-8', rates: [5, 25, 0.5, 6.25] },
+  { id: 'claude-opus-5', rates: [5, 25, 0.5, 6.25] },
+  { id: 'claude-sonnet-4-6', rates: [3, 15, 0.3, 3.75] },
+  { id: 'claude-sonnet-5', rates: [2, 10, 0.2, 2.5] },
+  { id: 'deepseek-v4-flash', rates: [0.15, 0.6, 0.003], peak: [0.3, 1.2, 0.006] },
+  { id: 'deepseek-v4-flash-fast', rates: [0.28, 0.56, 0.07] },
+  { id: 'deepseek-v4-flash-vision-exp', rates: [0.15, 0.6, 0.003], peak: [0.3, 1.2, 0.006] },
+  { id: 'deepseek-v4-pro', rates: [0.66, 1.98, 0.022], peak: [1.32, 3.96, 0.044] },
+  { id: 'deepseek-v4.1-flash', rates: [0.15, 0.6, 0.003], peak: [0.3, 1.2, 0.006] },
+  { id: 'fugu-ultra', rates: [5, 30, 0.5] },
+  { id: 'gemini-3.1-flash-lite', rates: [0.25, 1.5, 0.03] },
+  { id: 'gemini-3.5-flash', rates: [1.5, 9, 0.15] },
+  { id: 'gemini-3.5-flash-lite', rates: [0.3, 2.5, 0.03] },
+  { id: 'gemini-3.6-flash', rates: [1.5, 7.5, 0.15] },
+  { id: 'gemini-3.7-flash', rates: [1.5, 7.5, 0.15, 0.08334] },
+  { id: 'gemini-3.8-flash', rates: [1.5, 7.5, 0.15] },
+  { id: 'glm-5', rates: [1, 3.2, 0.2] },
+  { id: 'glm-5.1', rates: [1.4, 4.4, 0.26] },
+  { id: 'glm-5.2', rates: [1.4, 4.4, 0.26] },
+  { id: 'glm-5.2-fast', rates: [3, 10.25, 0.5] },
+  { id: 'glm-5.3', rates: [1.4, 4.4, 0.26] },
+  { id: 'glm-5.3-flash', rates: [0.15, 0.5, 0.03] },
+  { id: 'gpt-5.3-codex', rates: [2, 8, 0.5, 0] },
+  { id: 'gpt-5.4', rates: [2.5, 15, 0.25, 0] },
+  { id: 'gpt-5.4-mini', rates: [0.75, 4.5, 0.075, 0] },
+  { id: 'gpt-5.5', rates: [5, 30, 0.5, 0] },
+  { id: 'gpt-5.6-luna', rates: [0.2, 1.2, 0.02, 0.25], contextTiers: [{"maxContext":272000,"rates":[0.2,1.2,0.02,0.25]},{"rates":[0.4,1.8,0.04,0.5]}] },
+  { id: 'gpt-5.6-sol', rates: [5, 30, 0.5, 6.25], contextTiers: [{"maxContext":272000,"rates":[5,30,0.5,6.25]},{"rates":[10,45,1,12.5]}] },
+  { id: 'gpt-5.6-terra', rates: [2, 12, 0.2, 2.5], contextTiers: [{"maxContext":272000,"rates":[2,12,0.2,2.5]},{"rates":[4,18,0.4,5]}] },
+  { id: 'gpt-6-astra', rates: [10, 50, 1, 12.5], contextTiers: [{"maxContext":272000,"rates":[10,50,1,12.5]},{"rates":[20,75,2,25]}] },
+  { id: 'grok-4.5', rates: [2, 6, 0.5] },
+  { id: 'grok-4.6', rates: [2, 6, 0.5], contextTiers: [{"maxContext":200000,"rates":[2,6,0.5]},{"rates":[4,12,1]}] },
+  { id: 'inkling', rates: [1, 4.05, 0.17] },
+  { id: 'inkling-small', rates: [0.5, 1.2, 0.1] },
+  { id: 'kimi-k2.5', rates: [0.6, 3, 0.1] },
+  { id: 'kimi-k2.6', rates: [0.95, 4, 0.16] },
+  { id: 'kimi-k2.7-code', rates: [0.95, 4, 0.19] },
+  { id: 'kimi-k2.7-code-highspeed', rates: [1.9, 8, 0.38] },
+  { id: 'kimi-k3', rates: [3, 15, 0.3] },
+  { id: 'mimo-v2.5', rates: [0.14, 0.28, 0.0028] },
+  { id: 'mimo-v2.5-pro', rates: [0.435, 0.87, 0.0036] },
+  { id: 'minimax-m2.5', rates: [0.3, 1.2, 0.03] },
+  { id: 'minimax-m2.7', rates: [0.3, 1.2, 0.06] },
+  { id: 'minimax-m3', rates: [0.3, 1.2, 0.06] },
+  { id: 'muse-spark-1.1', rates: [1.25, 4.25, 0.15] },
+  { id: 'muse-spark-1.2', rates: [1.25, 4.25, 0.15] },
+  { id: 'muse-spark-1.2-contributor', rates: [0.1, 0.2, 0.002] },
+  { id: 'muse-spark-1.3', rates: [1.25, 4.25, 0.15] },
+  { id: 'muse-spark-1.3-contributor', rates: [0.1, 0.2, 0.002] },
+  { id: 'nemotron-3-ultra', rates: [0.6, 2.4, 0.12] },
+  { id: 'qwen-3.6-max', rates: [1.3, 7.8, 0.26, 1.63] },
+  { id: 'qwen-3.6-plus', rates: [0.5, 3, 0.1], contextTiers: [{"maxContext":256000,"rates":[0.5,3,0.1]},{"rates":[2,6,0.2]}] },
+  { id: 'qwen-3.7-flash', rates: [0.03, 0.13, 0.006, 0.038], contextTiers: [{"maxContext":32000,"rates":[0.03,0.13,0.006,0.038]},{"maxContext":256000,"rates":[0.1,0.4,0.02,0.125]},{"rates":[0.2,0.8,0.04,0.25]}] },
+  { id: 'qwen-3.7-max', rates: [2.5, 7.5, 0.5, 3.13] },
+  { id: 'qwen-3.7-plus', rates: [0.4, 1.6, 0.08, 0.5], contextTiers: [{"maxContext":256000,"rates":[0.4,1.6,0.08,0.5]},{"rates":[1.2,4.8,0.24,1.5]}] },
+  { id: 'qwen-3.8-27b', rates: [0.4, 3, 0.04] },
+  { id: 'qwen-3.8-flash', rates: [0.16, 0.47, 0.016] },
+  { id: 'qwen-3.8-max', rates: [2, 6, 0.25, 2.5] },
+  { id: 'qwen-3.8-max-0902', rates: [2, 6, 0.25] },
+  { id: 'step-3.5-flash', rates: [0.1, 0.3, 0.02] },
+  { id: 'step-3.7-flash', rates: [0.2, 1.15, 0.04] },
+  { id: 'tencent/hy3-paid', rates: [0.14, 0.58, 0.035] },
+  { id: 'tencent/hy4-preview', rates: [0.834, 2.501, 0.042] },
+]
+
+/**
+ * Catalog ids no candidate rule can reach, because the page names the model
+ * differently from the catalog. `tests/model-prices.test.ts` fails whenever a
+ * catalog model has no price, so a new miss lands here as a visible decision
+ * rather than a silently unpriced model.
+ */
+const PRICE_SLUG_OVERRIDES: Readonly<Record<string, string>> = {
+  // The page lists it by its short name; the catalog carries the full one.
+  'nvidia/nemotron-3-ultra-550b-a55b': 'nemotron-3-ultra',
+}
+
+/**
+ * Plausible price slugs for one catalog model id, most specific first.
+ *
+ * The page normalizes to lowercase and usually drops the vendor segment, but
+ * not consistently: `tencent/hy4-preview` keeps its prefix while
+ * `Qwen/Qwen3.8-Max-0902` becomes `qwen-3.8-max-0902`, with a hyphen the
+ * catalog id does not have. Generating candidates and taking the first that
+ * exists in the vendored table absorbs that drift without a hand-maintained
+ * map of seventy ids.
+ */
+function priceSlugCandidates(modelId: string): string[] {
+  const lower = modelId.toLowerCase()
+  const bare = lower.includes('/') ? lower.slice(lower.indexOf('/') + 1) : lower
+  const out = new Set<string>()
+  const add = (slug: string): void => {
+    const hyphenated = slug.replace(/^([a-z]+)(\d)/, '$1-$2')
+    out.add(slug)
+    out.add(hyphenated)
+    out.add(slug.replace(/-\d{8}$/, ''))
+    out.add(slug.replace(/-(preview|latest)$/, ''))
+    out.add(hyphenated.replace(/-\d{8}$/, ''))
+    out.add(hyphenated.replace(/-(preview|latest)$/, ''))
+  }
+  add(lower)
+  add(bare)
+  return [...out]
+}
+
+/** The pricing-page slug for one catalog model id, or undefined when unpriced. */
+function priceSlugFor(modelId: string, known: ReadonlySet<string>): string | undefined {
+  const override = PRICE_SLUG_OVERRIDES[modelId]
+  if (override !== undefined) return known.has(override) ? override : undefined
+  return priceSlugCandidates(modelId).find((slug) => known.has(slug))
+}
+
+/** Split a stored triplet/quadruplet into the wire rate shape. */
+function ratesOf(values: readonly number[]): CommandCodeModelRates {
+  // Indexed access is asserted rather than defaulted: the generator above only
+  // ever emits rows with the three published rates, so a short row is a broken
+  // table and must not silently become a free model.
+  const rates: CommandCodeModelRates = {
+    inputCost: values[0]!,
+    outputCost: values[1]!,
+    cacheReadCost: values[2]!,
+  }
+  if (values[3] !== undefined) rates.cacheWriteCost = values[3]
+  return rates
+}
+
+/** Build the full price row the browser prices a session with. */
+function wireRow(id: string, slug: string, row: ModelPriceRow): CommandCodeModelPrice {
+  const price: CommandCodeModelPrice = { id, slug, ...ratesOf(row.rates) }
+  if (row.peak !== undefined) price.peak = ratesOf(row.peak)
+  if (row.contextTiers !== undefined) price.contextTiers = row.contextTiers.map(tier => ({
+    ...ratesOf(tier.rates), ...(tier.maxContext === undefined ? {} : { maxContext: tier.maxContext }),
+  }))
+  return price
+}
+
+/**
+ * Build the table the composer prices a session with.
+ *
+ * Rows are keyed by CATALOG id wherever the two namespaces reconcile, because
+ * that is what a session reports, and every row also carries its page slug as a
+ * second lookup key. Price rows no catalog model claims are served under the
+ * slug alone, so drift in either direction still prices: a page rename the
+ * catalog has not followed, or a model the catalog snapshot has not learned
+ * yet. Free models are served explicitly at zero so the composer can say so
+ * instead of showing nothing.
+ *
+ * The peak windows travel with the table, so the browser applies the very
+ * schedule this snapshot knows instead of restating it.
+ */
+export function modelPriceTable(): CommandCodePriceTable {
+  const bySlug = new Map(MODEL_PRICE_ROWS.map((row) => [row.id, row]))
+  const known = new Set(bySlug.keys())
+  const models: CommandCodeModelPrice[] = []
+  const claimed = new Set<string>()
+
+  for (const catalogId of Object.keys(KNOWN_PLANS)) {
+    if (isFreeModel(catalogId) || catalogId.endsWith(':free')) {
+      models.push({ id: catalogId, slug: catalogId, inputCost: 0, outputCost: 0, cacheReadCost: 0, free: true })
+      continue
+    }
+    const slug = priceSlugFor(catalogId, known)
+    if (slug === undefined) continue
+    const row = bySlug.get(slug)
+    if (row === undefined) continue
+    claimed.add(slug)
+    models.push(wireRow(catalogId, slug, row))
+  }
+
+  for (const row of MODEL_PRICE_ROWS) {
+    if (claimed.has(row.id)) continue
+    models.push(wireRow(row.id, row.id, row))
+  }
+
+  return {
+    models,
+    peakHours: PEAK_HOUR_RANGES.map(([start, end]) => [start, end] as [number, number]),
+  }
+}
+
diff --git a/src/usage-remote.ts b/src/usage-remote.ts
index d839466..2e81dbd 100644
--- a/src/usage-remote.ts
+++ b/src/usage-remote.ts
@@ -20,7 +20,9 @@ import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol'
 import type { CommandCodeAdapter, CommandCodeConnectionOptions } from './adapter.ts'
 import { USAGE_HOST_CONTRIBUTION } from './usage-wire.ts'
 import { MODELS_DESCRIPTOR } from './usage-wire.ts'
-import type { CommandCodeAccountsReport, CommandCodeCatalog } from './usage-wire.ts'
+import { PRICES_DESCRIPTOR } from './usage-wire.ts'
+import type { CommandCodeAccountsReport, CommandCodeCatalog, CommandCodePriceTable } from './usage-wire.ts'
+import { modelPriceTable } from './model-prices.ts'
 import { LOGIN_DESCRIPTORS } from './login-wire.ts'
 import type { CommandCodeLoginStatus } from './login-wire.ts'
 
@@ -57,6 +59,13 @@ export interface CommandCodeUsageDeps<C extends CommandCodeConnectionOptions = C
    * editors degrade to the empty state.
    */
   listModels?: () => Promise<CommandCodeCatalog>
+  /**
+   * Price-table source for the composer's session-cost figure. Defaults to the
+   * vendored snapshot, so the endpoint can never silently serve an empty table
+   * — an unpriced cost is the failure this feature is meant to remove. Override
+   * only to stub it in a test.
+   */
+  prices?: () => CommandCodePriceTable
   /**
    * The browser-login flow (wired by the plugin entry). Absent means the
    * login endpoints answer `idle` / reject with a plain message — the page's
@@ -134,6 +143,16 @@ export class CommandCodeUsageService<C extends CommandCodeConnectionOptions = Co
     return this.deps.listModels?.() ?? { models: [] }
   }
 
+  /**
+   * The model price table the composer prices an in-progress session with.
+   * Static vendored data (the official pricing page's rates), served Host-side
+   * so the browser bundle never carries a copy that could drift from the
+   * snapshot, and so a price update reaches an open page without a rebuild.
+   */
+  async prices(): Promise<CommandCodePriceTable> {
+    return (this.deps.prices ?? modelPriceTable)()
+  }
+
   /**
    * Start (or rejoin) a browser-login attempt and return its fresh status —
    * `waiting` carrying the Studio URL. Rejects when the flow cannot start
@@ -183,7 +202,7 @@ export function applyUsageRemote<C extends CommandCodeConnectionOptions>(
     // Client mount) 1:1.
     const unregister = registry.register({
       ...USAGE_HOST_CONTRIBUTION,
-      invocations: [...USAGE_HOST_CONTRIBUTION.invocations, MODELS_DESCRIPTOR, ...LOGIN_DESCRIPTORS],
+      invocations: [...USAGE_HOST_CONTRIBUTION.invocations, MODELS_DESCRIPTOR, PRICES_DESCRIPTOR, ...LOGIN_DESCRIPTORS],
     })
     // The registry's own effect would outlive this fiber; withdraw the
     // contribution when the plugin unloads.
diff --git a/src/usage-wire.ts b/src/usage-wire.ts
index f573c0d..3075842 100644
--- a/src/usage-wire.ts
+++ b/src/usage-wire.ts
@@ -21,7 +21,7 @@
  * @module dsh-commandcode-provider/usage-wire
  */
 
-import type { CommandCodeUsageReport, UsageBlockReason } from './adapter.ts'
+import type { CommandCodeCredits, CommandCodeUsageReport, UsageBlockReason } from './adapter.ts'
 
 export type { CommandCodeUsageReport, UsageBlockReason }
 import type { InvocationDescriptor, TypertRemoteContribution, TypertSchema } from '@deepseek-ai/dsh-typert-protocol'
@@ -68,7 +68,19 @@ const { reject, record, stringField, numberField, booleanField } =
   makeBoundaryValidator('commandcode/report result:')
 
 /** Validate one window-limit block (`fiveHour` / `weekly`). */
-function windowLimit(value: unknown, field: string): { used: number; cap: number; exceeded: boolean; resetAt: number } {
+/**
+ * Parse one quota window, or undefined when the frame carries no such window.
+ *
+ * The distinction is load-bearing at this boundary: an ABSENT window means the
+ * billing endpoint reported none (an unlimited plan), while a present block with
+ * `cap: 0` means uncapped spend that was really reported. Collapsing the two
+ * would draw a zeroed quota row for an account that has no such limit.
+ */
+function windowLimit(
+  value: unknown,
+  field: string,
+): { used: number; cap: number; exceeded: boolean; resetAt: number } | undefined {
+  if (value === undefined) return undefined
   const source = record(value, field)
   return {
     used: numberField(source, 'used', `${field}.used`),
@@ -127,13 +139,32 @@ function parseUsageReport(value: unknown): CommandCodeUsageReport {
 
   if (source.credits !== undefined) {
     const credits = record(source.credits, 'credits')
-    report.credits = {
+    const parsed: CommandCodeCredits = {
       monthlyCredits: numberField(credits, 'monthlyCredits', 'credits.monthlyCredits'),
       purchasedCredits: numberField(credits, 'purchasedCredits', 'credits.purchasedCredits'),
       freeCredits: numberField(credits, 'freeCredits', 'credits.freeCredits'),
-      fiveHour: windowLimit(credits.fiveHour, 'credits.fiveHour'),
-      weekly: windowLimit(credits.weekly, 'credits.weekly'),
     }
+    // OPTIONAL on the wire: a Host half that predates this field serves the
+    // scalar 0 for an omitted balance, which cannot be told from a real zero.
+    // An explicit `false` therefore means "not reported" and the panel keeps the
+    // figure off the dashboard; an absent flag (an older Host) stays unset and
+    // is read as "assume reported", so a real balance is not lost cross-version.
+    // A PRESENT value must still be a boolean, so a malformed frame is rejected
+    // here rather than coerced.
+    if (credits.monthlyReported !== undefined) {
+      parsed.monthlyReported = booleanField(credits, 'monthlyReported', 'credits.monthlyReported')
+    }
+    for (const flag of ['purchasedReported', 'freeReported'] as const) {
+      if (credits[flag] !== undefined) parsed[flag] = booleanField(credits, flag, `credits.${flag}`)
+    }
+    // Absent means the endpoint reported no such window. The window parsers
+    // return undefined for an absent block, and an optional member is only set
+    // when it was really there.
+    const fiveHour = windowLimit(credits.fiveHour, 'credits.fiveHour')
+    const weekly = windowLimit(credits.weekly, 'credits.weekly')
+    if (fiveHour !== undefined) parsed.fiveHour = fiveHour
+    if (weekly !== undefined) parsed.weekly = weekly
+    report.credits = parsed
   }
 
   if (source.plan !== undefined) {
@@ -301,4 +332,175 @@ export const MODELS_DESCRIPTOR: InvocationDescriptor =
 export const MODELS_REMOTE_CONTRIBUTION: TypertRemoteContribution = {
   package: USAGE_REMOTE_PACKAGE,
   descriptors: [MODELS_DESCRIPTOR],
+}
+
+// ---------------------------------------------------------------------------
+// Model price table Remote (`commandcode/prices`)
+// ---------------------------------------------------------------------------
+
+/**
+ * One model's per-token rates, in USD per 1,000,000 tokens — the unit the
+ * official pricing page publishes in.
+ */
+export interface CommandCodeModelRates {
+  /** Uncached (billed) input tokens. */
+  inputCost: number
+  /** Completion tokens. */
+  outputCost: number
+  /** Input tokens served from the provider's cache. */
+  cacheReadCost: number
+  /**
+   * Input tokens written into the provider's cache. Present for a minority of
+   * models — the page publishes no cache-write rate for the rest, whose
+   * cache-write tokens are therefore UNPRICED. Do not substitute a multiple of
+   * the input rate for a missing value.
+   */
+  cacheWriteCost?: number
+}
+
+/** One whole-request context band; maxContext is inclusive, absent on the last band. */
+export interface CommandCodeContextTier extends CommandCodeModelRates {
+  maxContext?: number
+}
+
+/** One model's rates plus the peak-hour override for time-of-day models. */
+export interface CommandCodeModelPrice extends CommandCodeModelRates {
+  /**
+   * Lookup key: the catalog model id when a catalog model maps to this row,
+   * otherwise the pricing page's own slug. A session reports catalog ids, so
+   * this is the primary key the browser looks up by.
+   */
+  id: string
+  /** The pricing page's slug for this row — the secondary lookup key. */
+  slug: string
+  /**
+   * Rates charged inside the peak windows. The row's own top-level rates are
+   * the off-peak rates, so a row WITH this block is time-of-day priced and a
+   * row without it is flat-priced.
+   */
+  peak?: CommandCodeModelRates
+  contextTiers?: CommandCodeContextTier[]
+  /**
+   * Whether the model costs nothing on every plan right now (a free deal or a
+   * `:free` catalog variant). Served explicitly at zero rates so a surface can
+   * say "free" rather than showing nothing.
+   */
+  free?: boolean
+}
+
+/** The price-table Remote result: every known model's rates. */
+export interface CommandCodePriceTable {
+  /**
+   * Every priced model, keyed by {@link CommandCodeModelPrice.id} (catalog id
+   * first, pricing slug as the fallback) and carrying its slug as a second
+   * lookup key. A model absent from this list has no known price and must
+   * render no cost at all rather than a guess.
+   */
+  models: CommandCodeModelPrice[]
+  /**
+   * Peak-pricing windows as `[startHour, endHour)` in UTC, end-exclusive,
+   * applying Monday–Friday only. Shipped with the table so the browser prices
+   * against the Host snapshot's schedule instead of restating it.
+   */
+  peakHours: Array<[number, number]>
+}
+
+/** Canonical `<namespace>/<method>` endpoint of the price-table Remote. */
+export const PRICES_ENDPOINT = 'commandcode/prices'
+
+/**
+ * The shared read/validate helpers for the price-table endpoint — its own
+ * instance so price boundary errors name `commandcode/prices`.
+ */
+const {
+  reject: priceReject,
+  record: priceRecord,
+  stringField: priceString,
+  numberField: priceNumber,
+  booleanField: priceBoolean,
+} = makeBoundaryValidator('commandcode/prices result:')
+
+/** Parse one rate block (`rates`, or a model's `peak` override). */
+function parseRates(source: Record<string, unknown>, field: string): CommandCodeModelRates {
+  const rates: CommandCodeModelRates = {
+    inputCost: priceNumber(source, 'inputCost', `${field}.inputCost`),
+    outputCost: priceNumber(source, 'outputCost', `${field}.outputCost`),
+    cacheReadCost: priceNumber(source, 'cacheReadCost', `${field}.cacheReadCost`),
+  }
+  // Optional on the wire: only a minority of models publish a cache-write
+  // rate, and a present non-number is a contract violation rather than a
+  // silent zero.
+  if (source.cacheWriteCost !== undefined) {
+    rates.cacheWriteCost = priceNumber(source, 'cacheWriteCost', `${field}.cacheWriteCost`)
+  }
+  return rates
+}
+
+/** Parse one untrusted boundary value into a {@link CommandCodeModelPrice}. */
+function parseModelPrice(value: unknown): CommandCodeModelPrice {
+  const source = priceRecord(value, 'model')
+  const price: CommandCodeModelPrice = {
+    id: priceString(source, 'id', 'model.id'),
+    slug: priceString(source, 'slug', 'model.slug'),
+    ...parseRates(source, 'model'),
+  }
+  if (source.peak !== undefined) price.peak = parseRates(priceRecord(source.peak, 'model.peak'), 'model.peak')
+  if (source.contextTiers !== undefined) {
+    if (!Array.isArray(source.contextTiers) || source.contextTiers.length === 0) priceReject('contextTiers')
+    let previous = 0
+    price.contextTiers = (source.contextTiers as unknown[]).map((value, index, tiers) => {
+      const tier = priceRecord(value, 'contextTier')
+      const out: CommandCodeContextTier = parseRates(tier, 'contextTier')
+      if (tier.maxContext !== undefined) {
+        const max = priceNumber(tier, 'maxContext', 'contextTier.maxContext')
+        if (!Number.isSafeInteger(max) || max <= previous || index === tiers.length - 1) priceReject('contextTier.maxContext')
+        previous = max
+        out.maxContext = max
+      } else if (index !== tiers.length - 1) priceReject('contextTier.maxContext')
+      return out
+    })
+  }
+  if (source.free !== undefined) price.free = priceBoolean(source, 'free', 'model.free')
+  return price
+}
+
+/** Parse the wire result into a {@link CommandCodePriceTable}. */
+function parsePriceTable(value: unknown): CommandCodePriceTable {
+  const source = priceRecord(value, 'result')
+  const models = source.models
+  if (!Array.isArray(models)) priceReject('models')
+  const peakHours = source.peakHours
+  if (!Array.isArray(peakHours)) priceReject('peakHours')
+  return {
+    models: (models as unknown[]).map(parseModelPrice),
+    peakHours: (peakHours as unknown[]).map((window) => {
+      if (!Array.isArray(window) || window.length !== 2) priceReject('peakHours[]')
+      const [start, end] = window as [unknown, unknown]
+      if (typeof start !== 'number' || typeof end !== 'number') priceReject('peakHours[]')
+      return [start, end] as [number, number]
+    }),
+  }
+}
+
+/** The strict result codec for the price-table Remote. */
+export const pricesSchema: TypertSchema<CommandCodePriceTable> = {
+  parse: parsePriceTable,
+}
+
+/**
+ * The price-table invocation descriptor, sharing the same `commandcodeUsage`
+ * service and `commandcode` namespace as the report and catalog endpoints.
+ */
+export const PRICES_DESCRIPTOR: InvocationDescriptor =
+  makeRemoteDescriptor<CommandCodePriceTable>(
+    PRICES_ENDPOINT,
+    'prices',
+    `${USAGE_REMOTE_PACKAGE}#CommandCodePriceTable`,
+    pricesSchema,
+  )
+
+/** The Client-face contribution for the price-table endpoint. */
+export const PRICES_REMOTE_CONTRIBUTION: TypertRemoteContribution = {
+  package: USAGE_REMOTE_PACKAGE,
+  descriptors: [PRICES_DESCRIPTOR],
 }
\ No newline at end of file
diff --git a/tests/adapter.test.ts b/tests/adapter.test.ts
index a2c2d9b..de6d0c8 100644
--- a/tests/adapter.test.ts
+++ b/tests/adapter.test.ts
@@ -28,6 +28,8 @@ import {
   KNOWN_PLANS,
   KNOWN_DEALS,
   KNOWN_PEAK_PRICING,
+  PEAK_HOUR_RANGES,
+  isPeakPricingHour,
   planLabel,
   dealLabel,
   formatContext,
@@ -2875,6 +2877,35 @@ test('peakPricingState/Label report the current UTC peak/off-peak window', () =>
   assert.equal(weekPeakHours, 35)
 })
 
+test('isPeakPricingHour() answers the model-independent half of the same rule', () => {
+  // The composer's session-cost readout prices against the price table's own
+  // `peak` blocks, so it needs the hour test WITHOUT a model membership check.
+  // It must agree with `peakPricingState()` exactly on every hour the snapshot
+  // does place, or the picker's label and the composer's rate would disagree.
+  const peak = (h: number) => Date.parse(`2026-08-17T${String(h).padStart(2, '0')}:30:00Z`)
+  for (let h = 0; h < 24; h++) {
+    const expected = peakPricingState('deepseek/deepseek-v4-flash', peak(h)) === 'peak'
+    assert.equal(isPeakPricingHour(peak(h)), expected, `hour ${h}`)
+  }
+  // Weekends are off-peak for all 24 hours, exactly as above.
+  for (const day of ['2026-08-15', '2026-08-16']) {
+    for (let h = 0; h < 24; h++) {
+      const at = Date.parse(`${day}T${String(h).padStart(2, '0')}:30:00Z`)
+      assert.equal(isPeakPricingHour(at), false, `${day} hour ${h}`)
+    }
+  }
+  // End-exclusive on both edges, same boundaries the snapshot documents.
+  assert.equal(isPeakPricingHour(Date.parse('2026-08-17T00:59:59Z')), false)
+  assert.equal(isPeakPricingHour(Date.parse('2026-08-17T01:00:00Z')), true)
+  assert.equal(isPeakPricingHour(Date.parse('2026-08-17T03:59:59Z')), true)
+  assert.equal(isPeakPricingHour(Date.parse('2026-08-17T04:00:00Z')), false)
+  assert.equal(isPeakPricingHour(Date.parse('2026-08-17T09:59:59Z')), true)
+  assert.equal(isPeakPricingHour(Date.parse('2026-08-17T10:00:00Z')), false)
+  // The windows ship to the browser with the price table, so they are part of
+  // the wire contract rather than a private constant.
+  assert.deepEqual(PEAK_HOUR_RANGES, [[1, 4], [6, 10]])
+})
+
 test('CLI version and API base constants are stable', () => {
   // command-code@1.53.1 (2026-09-12): the CLI changelog lists four CLI-local
   // items (default compaction model set to DeepSeek V4.1 Flash in /config, a
diff --git a/tests/client-boot.test.ts b/tests/client-boot.test.ts
index 2e8c0ec..039ff43 100644
--- a/tests/client-boot.test.ts
+++ b/tests/client-boot.test.ts
@@ -78,16 +78,45 @@ function makeScope() {
 /**
  * Boot the real plugin `apply()` on a fresh Cordis root provisioned with the
  * DSH 0.1.2 (rc.1) service set: `remote` (mounting the `credentials` and
- * `commandcode` namespaces), `slots`, `locale`, `settingsScope`, `connection`.
+ * `commandcode` namespaces), `slots`, `locale`, `settingsScope`, `connection`,
+ * and — when `mountLayout` is set — `layout`.
  *
  * @param options - whether to mount the `credentials` remote namespace. When
  *   `false`, the plugin must not register any surface (it parks on the
- *   `inject(['remote.credentials'])` gate).
- * @returns the registered slot surfaces, keyed by `id` (settings.section) or
- *   `key` (provider-card), after boot settles.
+ *   `inject(['remote.credentials'])` gate). `mountLayout` controls the
+ *   `layout` service, whose `selectPanel` is what makes the sidebar card
+ *   openable; `layoutSelectPanel` optionally omits that method to model a
+ *   pre-0.1.5 layout.
+ * @returns the registered slot surfaces, keyed by `id` (settings.section,
+ *   panel entries) or `key` (provider-card), after boot settles. Every
+ *   registration per key is kept, in registration order.
  */
-async function boot({ mountCredentials = true }: { mountCredentials?: boolean } = {}) {
+async function boot(
+  {
+    mountCredentials = true,
+    mountLayout = true,
+    layoutSelectPanel = true,
+    // The slots the engine declares. The default is the 0.1.5 set; a pre-0.1.5
+    // engine declares the composer dock and the sidebar foot (both since
+    // 0.1.1-rc.2) but has no keyed `main` — the centre column is `conversation`
+    // — so passing that set is how the version boundary is exercised. The
+    // settings seats have been declared since 0.1.2 and are always present.
+    declaredSlots = new Set([
+      'settings.section',
+      'settings.models.provider-card',
+      'main',
+      'sidebar.footer.action',
+      'conversation.composer.dock',
+    ]),
+  }: {
+    mountCredentials?: boolean
+    mountLayout?: boolean
+    layoutSelectPanel?: boolean
+    declaredSlots?: Set<string>
+  } = {},
+) {
   const ctx = new Context()
+  const selectedPanels: string[] = []
 
   // A faithful stand-in for the api-gateway `ClientRemoteService`: mounting a
   // contribution installs each namespace as a Cordis `remote.<ns>` service, so
@@ -125,7 +154,7 @@ async function boot({ mountCredentials = true }: { mountCredentials?: boolean }
     descriptors: [
       // The credentials namespace (dsh-api-settings-controller in alpha2).
       ...(mountCredentials ? [{ namespace: 'credentials', method: 'describe' }] : []),
-      // The plugin's own report/models/login namespace (mounted below).
+      // The plugin's own report/models/prices/login namespace (mounted below).
       { namespace: 'commandcode', method: 'report' },
     ],
   })
@@ -138,13 +167,38 @@ async function boot({ mountCredentials = true }: { mountCredentials?: boolean }
   })
   ctx.provide('settingsScope', { bind: () => makeScope() })
 
-  const registered = new Map<string, { name: string }>()
+  // ui-layout's selection seam. Present from 0.1.5-rc.1; `layoutSelectPanel:
+  // false` models the 0.1.2/0.1.3/0.1.5-alpha.1 layouts, which provide the
+  // service but no way to select a panel.
+  if (mountLayout) {
+    ctx.provide('layout', layoutSelectPanel
+      ? { selectPanel: (id: string) => selectedPanels.push(id) }
+      : {})
+  }
+
+  // Keyed by slot id/key, but ACCUMULATING: the panel registers one `main`
+  // cell and one `sidebar.footer.action` row under the same id, so a
+  // last-write-wins map would hide the other registration. Each entry keeps the
+  // registration's `inject` factory so a test can build the face the component
+  // receives — which is how the card's click path is driven below.
+  const registered = new Map<string, Array<{ name: string; id?: string; key?: string; inject?: () => object }>>()
+  const record = (options: { name: string; id?: string; key?: string; inject?: () => object }): void => {
+    const key = options.id ?? options.key ?? options.name
+    const entries = registered.get(key) ?? []
+    entries.push(options)
+    registered.set(key, entries)
+  }
+  // The real `slots.inject` runs its callback ONLY while the named declaration
+  // is live, so a slot the engine does not declare never registers. A stub that
+  // fires for every name would hide exactly the cross-version behavior these
+  // tests exist to pin — and would let a registration through for `main` on an
+  // engine whose layout has no such slot.
   ctx.provide('slots', {
-    inject(_name: string, fn: () => void) {
-      fn()
+    inject(name: string, fn: () => void) {
+      if (declaredSlots.has(name)) fn()
     },
-    register(options: { id?: string; key?: string; name: string }, _component: unknown) {
-      registered.set(options.id ?? options.key!, options)
+    register(options: { id?: string; key?: string; name: string; inject?: () => object }, _component: unknown) {
+      record(options)
       return () => {}
     },
   })
@@ -162,7 +216,7 @@ async function boot({ mountCredentials = true }: { mountCredentials?: boolean }
   // a `setImmediate`), so flush a few timer rounds before asserting.
   for (let i = 0; i < 4; i += 1) await new Promise((resolve) => setTimeout(resolve, 0))
 
-  return registered
+  return { registered, selectedPanels }
 }
 
 // ---------------------------------------------------------------------------
@@ -170,12 +224,12 @@ async function boot({ mountCredentials = true }: { mountCredentials?: boolean }
 // ---------------------------------------------------------------------------
 
 test('app registers the settings page and Models provider card when remote.credentials is mounted', async () => {
-  const registered = await boot()
+  const { registered } = await boot()
 
   // The "Command Code" settings page: a `settings.section` entry id `commandcode`.
   assert.equal(registered.has('commandcode'), true, 'settings.section id commandcode should register')
   assert.equal(
-    registered.get('commandcode')!.name,
+    registered.get('commandcode')![0]!.name,
     'settings.section',
     'the registered surface should be the settings section',
   )
@@ -183,21 +237,122 @@ test('app registers the settings page and Models provider card when remote.crede
   // The Models-page provider card for the `commandcode` adapter family.
   assert.equal(registered.has('llm-commandcode'), true, 'settings.models.provider-card key llm-commandcode should register')
   assert.equal(
-    registered.get('llm-commandcode')!.name,
+    registered.get('llm-commandcode')![0]!.name,
     'settings.models.provider-card',
     'the registered surface should be the provider card',
   )
 })
 
+test('the same apply() also seats the sidebar panel and the composer cost readout', async () => {
+  const { registered } = await boot()
+
+  // The plans & quota panel: one keyed `main` cell (the dashboard) and one
+  // `sidebar.footer.action` row (the card that opens it), sharing one id so
+  // `layout.selectPanel('commandcode-panel')` resolves the cell the card means.
+  const panel = registered.get('commandcode-panel') ?? []
+  assert.deepEqual(
+    panel.map((entry) => entry.name).sort(),
+    ['main', 'sidebar.footer.action'],
+    'the panel id must occupy both the layout cell and the sidebar row',
+  )
+  assert.equal(panel.find((entry) => entry.name === 'main')?.key, 'commandcode-panel')
+
+  // The session-cost entry exists for its SEATS: it renders nothing itself and
+  // must NOT take the shipped `stats` cell's id, which would replace the
+  // harness's own token/cache-hit/throughput readout instead of decorating it.
+  const dock = registered.get('commandcode-session-cost') ?? []
+  assert.equal(dock.length, 1)
+  assert.equal(dock[0]?.name, 'conversation.composer.dock')
+  assert.equal(registered.has('stats'), false, 'the shipped stats cell must keep its seat')
+
+  // Every registration above is keyed by its own slot, so the shipped
+  // settings/provider surfaces are still registered alongside them.
+  assert.equal(registered.get('commandcode')![0]!.name, 'settings.section')
+  assert.equal(registered.get('llm-commandcode')![0]!.name, 'settings.models.provider-card')
+})
+
 test('app registers no surface when remote.credentials is absent (the alpha2 gate holds)', async () => {
   // Without the credentials namespace the plugin parks on
   // `inject(['remote.credentials'])` and must not register either surface —
   // the legacy `connection.api.credentials` adapter also stays inactive here.
-  const registered = await boot({ mountCredentials: false })
+  const { registered } = await boot({ mountCredentials: false })
 
   assert.deepEqual([...registered.keys()], [], 'no surface should register without remote.credentials')
 })
 
+test('the sidebar card is withheld when the layout cannot open the panel', async () => {
+  // The regression this pins, measured against 0.1.1-rc.2 … 0.1.5-rc.2:
+  // `sidebar.footer.action` exists and RENDERS in every one of those releases,
+  // so `slots.inject` fires and an ungated card would register — and then do
+  // nothing at all when clicked, because `layout.selectPanel` only arrives in
+  // 0.1.5-rc.1. A visible button that silently ignores a click is worse than no
+  // button, so the registration is gated on that seam.
+  // `mountLayout: false` still seats the `main` cell, because that registration
+  // is independent of the layout service (the slot declaration is what gates
+  // it). What must NOT happen is the sidebar card: without a layout there is no
+  // way to open the panel it points at.
+  const { registered } = await boot({ mountLayout: false })
+  assert.deepEqual(
+    (registered.get('commandcode-panel') ?? []).map((entry) => entry.name),
+    ['main'],
+    'no layout means no card to open a panel with',
+  )
+
+  // The same for a 0.1.2-style layout that mounts the service without the
+  // method (0.1.2-rc.1, 0.1.3-alpha.2, 0.1.5-alpha.1). This is the version
+  // boundary the plugin's own docs used to get wrong: the sidebar seat exists
+  // and renders there, so an ungated card would be a visible dead button.
+  const older = await boot({ layoutSelectPanel: false })
+  assert.deepEqual(
+    (older.registered.get('commandcode-panel') ?? []).map((entry) => entry.name),
+    ['main'],
+    'a layout without selectPanel must not get the card',
+  )
+
+  // And a pre-0.1.5 engine declares no keyed `main` at all, so the dashboard
+  // cell cannot seat there. The CARD still does — that seat exists and the
+  // layout can select panels — but it points at a cell that never registered,
+  // which is exactly why the version floor has to be stated per slot: "the
+  // panel needs 0.1.5" is true of the `main` seat, not of the sidebar seat.
+  //
+  // This is a synthetic mix on purpose. In the real releases `selectPanel` and
+  // `main` arrive together in the 0.1.5 line (`main` in alpha.2, `selectPanel`
+  // in rc.1), and `selectPanel` is absent in everything a user can install
+  // before it — so the gate above is what keeps the card off those engines.
+  const preMain = await boot({
+    declaredSlots: new Set(['settings.section', 'settings.models.provider-card', 'sidebar.footer.action', 'conversation.composer.dock']),
+  })
+  assert.deepEqual(
+    (preMain.registered.get('commandcode-panel') ?? []).map((entry) => entry.name),
+    ['sidebar.footer.action'],
+    'a pre-0.1.5 layout has no keyed main cell to seat',
+  )
+
+  // The composer readout is independent of that seam: it needs the dock slot,
+  // which every supported release declares, so it still registers.
+  assert.equal(older.registered.has('commandcode-session-cost'), true)
+  assert.equal(preMain.registered.has('commandcode-session-cost'), true)
+  // ...and the shipped surfaces are untouched either way.
+  assert.equal(older.registered.get('commandcode')![0]!.name, 'settings.section')
+  assert.equal(older.registered.get('llm-commandcode')![0]!.name, 'settings.models.provider-card')
+})
+
+test('the footer card opens the panel cell it shares an id with', async () => {
+  const { registered, selectedPanels } = await boot()
+
+  // Registration alone opens nothing: the card must not select a panel as a
+  // side effect of being mounted.
+  assert.deepEqual(selectedPanels, [], 'registration must not open anything')
+
+  const footer = registered.get('commandcode-panel')?.find((entry) => entry.name === 'sidebar.footer.action')
+  assert.ok(footer?.inject, 'the footer row carries its inject face')
+  const face = footer.inject() as { open: () => void }
+  face.open()
+  // The id the card selects must be the id the `main` cell registered under,
+  // or `selectPanel` would throw and the click would be a dead end.
+  assert.deepEqual(selectedPanels, ['commandcode-panel'])
+})
+
 test('the client apply takes exactly the alpha2 service identities', () => {
   assert.deepEqual(inject, ['slots', 'locale', 'connection', 'remote', 'settingsScope'])
 })
diff --git a/tests/commands.test.ts b/tests/commands.test.ts
index 980f5fc..c884096 100644
--- a/tests/commands.test.ts
+++ b/tests/commands.test.ts
@@ -101,8 +101,9 @@ test('getUsage parses account, usage, and credits', async () => {
   assert.equal(report.usage?.totalCount, 935)
   assert.equal(report.usage?.totalCost, 1.3187)
   assert.equal(report.credits?.monthlyCredits, 8.68)
-  assert.equal(report.credits?.fiveHour.cap, 3)
-  assert.equal(report.credits?.weekly.used, 1.32)
+  assert.equal(report.credits?.monthlyReported, true)
+  assert.equal(report.credits?.fiveHour?.cap, 3)
+  assert.equal(report.credits?.weekly?.used, 1.32)
   assert.equal(report.plan?.name, 'Pro')
   assert.equal(report.plan?.status, 'active')
   assert.equal(report.plan?.monthlyCredits, 30)
@@ -326,7 +327,7 @@ test('command renders one section per pool account with rotation badges in zh',
           report: {
             account: { id: 'u1', name: 'Mars', userName: 'mars-sea' },
             credits: {
-              monthlyCredits: 8.68, purchasedCredits: 0, freeCredits: 0,
+              monthlyCredits: 8.68, purchasedCredits: 0, freeCredits: 0, monthlyReported: true,
               fiveHour: { used: 3, cap: 3, exceeded: true, resetAt },
               weekly: { used: 1.32, cap: 6, exceeded: false, resetAt: 0 },
             },
@@ -381,7 +382,7 @@ test('command renders one section per pool account with rotation badges in en',
           report: {
             account: { id: 'u1', name: 'Mars', userName: 'mars-sea' },
             credits: {
-              monthlyCredits: 8.68, purchasedCredits: 0, freeCredits: 0,
+              monthlyCredits: 8.68, purchasedCredits: 0, freeCredits: 0, monthlyReported: true,
               fiveHour: { used: 3, cap: 3, exceeded: true, resetAt },
               weekly: { used: 1.32, cap: 6, exceeded: false, resetAt: 0 },
             },
@@ -417,3 +418,35 @@ test('command renders one section per pool account with rotation badges in en',
   assert.match(result.text, /no API key configured/)
   assert.match(result.text, /⚠️ exceeded!/)
 })
+
+test('partial credit payload distinguishes omitted balances from reported zero', async () => {
+  const adapter = makeAdapter(makeFetch({
+    '/alpha/billing/credits': { status: 200, body: { credits: { monthlyCredits: 5, purchasedCredits: 0 } } },
+  }))
+  const report = await adapter.getUsage()
+  assert.equal(report.credits?.monthlyReported, true)
+  assert.equal(report.credits?.purchasedReported, true)
+  assert.equal(report.credits?.freeReported, false)
+  assert.equal(report.credits?.purchasedCredits, 0)
+})
+
+test('credit ratios require both balances and print exactly one percent sign', async () => {
+  for (const locale of ['en', 'zh'] as const) {
+    for (const patch of [
+      { purchasedReported: false }, { monthlyReported: false },
+      { monthlyCredits: 0, purchasedCredits: 0 }, {},
+    ]) {
+      const def = commandDefinition({
+        adapter: { getUsage: async () => ({ failures: [], credits: {
+          monthlyCredits: 5, purchasedCredits: 5, freeCredits: 0,
+          monthlyReported: true, purchasedReported: true, freeReported: false, ...patch,
+        } }) } as unknown as CommandCodeAdapter,
+        getLocale: () => locale,
+      })
+      const result = await invoke(def, '')
+      assert.doesNotMatch(result.text, /%%/)
+      if (Object.keys(patch).length === 0) assert.match(result.text, /50%/)
+      else assert.doesNotMatch(result.text, /%|[█░]/, 'missing or zero denominator must not render a ratio')
+    }
+  }
+})
diff --git a/tests/cost-fixture.ts b/tests/cost-fixture.ts
new file mode 100644
index 0000000..a912b27
--- /dev/null
+++ b/tests/cost-fixture.ts
@@ -0,0 +1,9 @@
+/** One synthetic request, for tests that exercise the renderer rather than history folding. */
+import { pricingKey, zeroCostTokens } from '../src/cost-facts.ts'
+import type { SessionCostInput } from '../src/client/session-cost.ts'
+export function withRequestFacts(input: SessionCostInput): SessionCostInput {
+  const selection = input.selection?.lastUsed
+  if (!selection || !input.table || !input.usage) return input
+  const tokens = { ...zeroCostTokens(), ...input.usage }
+  return { ...input, facts: { pricingKey: pricingKey(input.table), groups: [{ ...selection, at: input.now, contextTokens: tokens.uncachedInputTokens + tokens.cacheReadTokens + tokens.cacheWriteTokens, tokens }] } }
+}
diff --git a/tests/cost-projection.test.ts b/tests/cost-projection.test.ts
new file mode 100644
index 0000000..f126677
--- /dev/null
+++ b/tests/cost-projection.test.ts
@@ -0,0 +1,156 @@
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { Context } from '@deepseek-ai/cordis'
+import SessionStore from '@deepseek-ai/dsh-session'
+import SessionProjectionRegistry from '@deepseek-ai/dsh-session-projection'
+import { createCostProjection, installCostProjection } from '../src/cost-projection.ts'
+import { modelPriceTable } from '../src/model-prices.ts'
+import { COST_TOKEN_KEYS, zeroCostTokens } from '../src/cost-facts.ts'
+import { buildSessionCostView } from '../src/client/session-cost.ts'
+import type { CommandCodePriceTable } from '../src/usage-wire.ts'
+
+const table: CommandCodePriceTable = { peakHours: [[1, 4]], models: [
+  { id: 'expensive', slug: 'expensive', inputCost: 10, outputCost: 50, cacheReadCost: 1 },
+  { id: 'cheap', slug: 'cheap', inputCost: .2, outputCost: 1, cacheReadCost: .02 },
+  { id: 'free', slug: 'free', inputCost: 0, outputCost: 0, cacheReadCost: 0, free: true },
+  { id: 'hourly', slug: 'hourly', inputCost: .15, outputCost: .6, cacheReadCost: .003, peak: { inputCost: .3, outputCost: 1.2, cacheReadCost: .006 } },
+] }
+const off = Date.parse('2026-09-14T00:30Z'), peak = Date.parse('2026-09-14T01:30Z')
+function harness(prices = table) {
+  const unit = createCostProjection(prices)
+  let state = unit.init()
+  const send = (type: string, data: unknown, time = off) => { state = unit.apply(state, { type, data, time }) }
+  const start = (model: string, turn = 1, at = off, provider = 'commandcode') => {
+    send('step/start', { turn, step: 1 }, at)
+    send('request/header', { header: { config: { provider, model } } }, at)
+  }
+  const usage = (inputTokens: number, turn = 1, extra = {}) => send('assistant/message', { turn, step: 1, usage: { inputTokens, outputTokens: 0, ...extra } })
+  const view = (now = off) => {
+    const facts = unit.wire.view(state), totals = zeroCostTokens()
+    for (const g of facts.groups) for (const k of COST_TOKEN_KEYS) totals[k] += g.tokens[k]
+    return buildSessionCostView({ usage: totals, facts, table: prices, selection: undefined, now })
+  }
+  return { unit, send, start, usage, view, state: () => state }
+}
+
+test('model switches and free models retain the costs of earlier requests', () => {
+  const h = harness()
+  h.start('expensive'); h.usage(1_000_000)
+  h.start('cheap', 2); h.usage(1_000, 2)
+  assert.ok(Math.abs(h.view()!.total - 10.0002) < 1e-10)
+  h.start('free', 3); h.usage(1_000_000, 3)
+  assert.equal(h.view()!.free, false)
+  assert.ok(Math.abs(h.view()!.total - 10.0002) < 1e-10)
+})
+
+test('request-time rates survive reopening a session in another pricing window', () => {
+  const h = harness()
+  h.start('hourly'); h.usage(1_000_000)
+  assert.equal(h.view(off)!.total, .15)
+  assert.equal(h.view(peak)!.total, .15)
+  h.start('hourly', 2, peak); h.usage(1_000_000, 2)
+  assert.ok(Math.abs(h.view(off)!.total - .45) < 1e-10)
+})
+
+test('other providers and unknown models are excluded and explicitly mark a subtotal', () => {
+  const h = harness()
+  h.start('expensive', 1, off, 'other'); h.usage(1_000_000)
+  assert.equal(h.view(), undefined)
+  h.start('cheap', 2); h.usage(1_000_000, 2)
+  h.start('unknown', 3); h.usage(1_000_000, 3)
+  assert.equal(h.view()!.total, .2)
+  assert.match(h.view()!.value, /^≥/)
+  assert.match(h.view()!.title, /subtotal/)
+})
+
+test('v1 usage samples replace within an attempt; retries add instead of double counting', () => {
+  const h = harness()
+  h.start('cheap')
+  h.send('assistant/chunk', { turn: 1, step: 1, chunk: { type: 'usage', usage: { inputTokens: 100, outputTokens: 0 } } })
+  h.usage(200)
+  assert.equal(h.state().facts.groups[0]!.tokens.uncachedInputTokens, 200)
+  const before = h.state(); h.usage(200); assert.equal(h.state(), before)
+  h.send('llm/retry-started', { turn: 1, step: 1 }, peak)
+  h.usage(300)
+  assert.equal(h.state().facts.groups[0]!.tokens.uncachedInputTokens, 500)
+})
+
+test('v2 successful and failed settlements use the last compact-stream usage sample', () => {
+  const h = harness(); h.start('cheap')
+  h.send('assistant/attempt', { turn: 1, step: 1, stream: [
+    { type: 'chunk', time: off, chunk: { type: 'usage', usage: { inputTokens: 100, outputTokens: 0 } } },
+    { type: 'chunk', time: off, chunk: { type: 'usage', usage: { inputTokens: 200, outputTokens: 0 } } },
+  ] })
+  h.send('llm/retry-started', { turn: 1, step: 1 })
+  h.send('assistant/message', { turn: 1, step: 1, stream: [{ type: 'chunk', time: off, chunk: { type: 'usage', usage: { inputTokens: 300, outputTokens: 0 } } }] })
+  assert.equal(h.state().facts.groups[0]!.tokens.uncachedInputTokens, 500)
+})
+
+test('context bands use all request input buckets, inclusive boundaries, and never session totals', () => {
+  const prices = modelPriceTable()
+  for (const [tokens, rate] of [[272000, .2], [272001, .4]] as const) {
+    const h = harness(prices); h.start('gpt-5.6-luna'); h.usage(tokens)
+    assert.ok(Math.abs(h.view()!.total - tokens * rate / 1e6) < 1e-10)
+  }
+  const h = harness(prices)
+  h.start('gpt-5.6-luna'); h.usage(200000)
+  h.start('gpt-5.6-luna', 2); h.usage(200000, 2)
+  assert.equal(h.view()!.total, .08)
+  assert.equal(h.state().facts.groups.length, 1, 'equal rates aggregate rather than sending every request')
+  h.start('gpt-5.6-luna', 3); h.usage(1, 3, { cacheReadTokens: 272000 })
+  assert.ok(Math.abs(h.view()!.total - (.08 + .4 / 1e6 + 272000 * .04 / 1e6)) < 1e-10)
+})
+
+test('a revised same-attempt sample crossing a tier subtracts the old rate group', () => {
+  const h = harness(modelPriceTable()); h.start('gpt-5.6-luna'); h.usage(272000); h.usage(272001)
+  assert.equal(h.state().facts.groups.length, 1)
+  assert.ok(Math.abs(h.view()!.total - 272001 * .4 / 1e6) < 1e-10)
+})
+
+test('old Hosts and mismatched projection cuts do not produce invented costs', () => {
+  assert.equal(buildSessionCostView({ usage: { uncachedInputTokens: 10 }, table, selection: { lastUsed: { provider: 'commandcode', model: 'cheap' }, next: null }, now: off }), undefined)
+  const h = harness(); h.start('cheap'); h.usage(100)
+  assert.equal(buildSessionCostView({ usage: { uncachedInputTokens: 101 }, facts: h.state().facts, table, selection: undefined, now: off }), undefined)
+  assert.equal(buildSessionCostView({ usage: { uncachedInputTokens: 100 }, facts: h.state().facts, table: { ...table, peakHours: [] }, selection: undefined, now: off }), undefined)
+})
+
+test('real registry replays history, checkpoints/forks and removes the optional projection', async () => {
+  const ctx = new Context()
+  const store = await ctx.plugin(SessionStore)
+  const projections = await ctx.plugin(SessionProjectionRegistry)
+  const fiber = await ctx.plugin({ apply: installCostProjection })
+  await new Promise(resolve => setTimeout(resolve, 0))
+  const unit = createCostProjection()
+  const registry = ctx.sessionProjections
+  const session = ctx.sessions.create()
+  // Restore drives actual persisted log values; no browser/session-memory accumulator is used.
+  const events = [
+    { type: 'step/start', time: off, seq: 0, data: { turn: 1, step: 1 } },
+    { type: 'request/header', time: off, seq: 1, data: { header: { config: { provider: 'commandcode', model: 'gpt-5.6-luna' } } } },
+    { type: 'assistant/message', time: off, seq: 2, data: { turn: 1, step: 1, usage: { inputTokens: 100, outputTokens: 0 } } },
+  ]
+  const restored = registry.restore({}, events as never, 0 as never, session.header, 0 as never)
+  const facts = (restored.snapshot.values as Record<string, unknown>).commandCodeCost
+  assert.ok(facts)
+  assert.deepEqual((registry.viewCheckpoint(restored.checkpoint) as Record<string, unknown>).commandCodeCost, facts)
+  assert.throws(() => unit.stateSchema.parse({ facts: { pricingKey: 1, groups: [{ tokens: { outputTokens: -1 } }] } }))
+  await fiber.dispose()
+  assert.equal((registry.snapshot(session).values as Record<string, unknown>).commandCodeCost, undefined)
+  await projections.dispose()
+  await store.dispose()
+})
+
+test('free usage does not turn unpriced groups into a confident zero subtotal', () => {
+  for (const [model, provider, extra] of [
+    ['cheap', 'other', {}],
+    ['unknown', 'commandcode', {}],
+    ['cheap', 'commandcode', { cacheWriteTokens: 100 }],
+  ] as const) {
+    const h = harness(); h.start('free'); h.usage(100)
+    assert.equal(h.view()!.value, 'Free')
+    h.start(model, 2, off, provider); h.usage(model === 'cheap' && provider === 'commandcode' ? 0 : 100, 2, extra)
+    assert.equal(h.view(), undefined, `${provider}/${model} cannot establish zero spending`)
+    h.start('cheap', 3); h.usage(1000, 3)
+    assert.ok(h.view()!.total > 0, 'a paid subtotal remains visible')
+  }
+})
diff --git a/tests/model-prices.test.ts b/tests/model-prices.test.ts
new file mode 100644
index 0000000..b060cfb
--- /dev/null
+++ b/tests/model-prices.test.ts
@@ -0,0 +1,109 @@
+/**
+ * Vendored price-table tests (node:test, zero deps). Run with `npm test`.
+ *
+ * The table is the Host half of the composer's session-cost readout, so what
+ * matters here is the JOIN with the catalog: a catalog model the table cannot
+ * reach shows no cost at all, which looks identical to "this model is free" to
+ * a user. These tests therefore pin the join itself, not just the numbers.
+ */
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+import { modelPriceTable } from '../src/model-prices.ts'
+import { KNOWN_PLANS, PEAK_HOUR_RANGES, isFreeModel } from '../src/capabilities.ts'
+
+const table = modelPriceTable()
+const byId = new Map(table.models.map((price) => [price.id, price]))
+
+test('every catalog model is either priced or explicitly free', () => {
+  const unreachable = Object.keys(KNOWN_PLANS).filter((id) => {
+    if (isFreeModel(id) || id.endsWith(':free')) return false
+    return byId.get(id) === undefined
+  })
+  // A new catalog model without a price row fails HERE rather than silently
+  // rendering no cost in the composer. When upstream adds a model: sync
+  // `MODEL_PRICE_ROWS` from the pricing page (see the dsh-commandcode-upstream
+  // skill) or record it in the corpus below.
+  assert.deepEqual(unreachable, [])
+})
+
+test('free catalog models carry zero rates and the free flag', () => {
+  for (const id of Object.keys(KNOWN_PLANS)) {
+    if (!isFreeModel(id) && !id.endsWith(':free')) continue
+    const price = byId.get(id)
+    assert.ok(price, `${id} should be served explicitly`)
+    assert.equal(price.free, true)
+    assert.equal(price.inputCost, 0)
+    assert.equal(price.outputCost, 0)
+    assert.equal(price.cacheReadCost, 0)
+  }
+})
+
+test('a missing cache-write rate stays undefined rather than becoming zero', () => {
+  // DeepSeek V4 Pro publishes no cache-write rate; a `0` here would render
+  // cache-write tokens as free, which they are not.
+  const pro = byId.get('deepseek/deepseek-v4-pro')
+  assert.ok(pro)
+  assert.equal(pro.cacheWriteCost, undefined)
+  assert.equal(pro.inputCost, 0.66)
+})
+
+test('a published cache-write rate survives the table', () => {
+  const sonnet = byId.get('claude-sonnet-4-6')
+  assert.ok(sonnet, 'claude-sonnet-4-6 should be priced')
+  assert.equal(sonnet.cacheWriteCost, 3.75)
+})
+
+test('time-of-day models carry a peak override and flat models do not', () => {
+  const pro = byId.get('deepseek/deepseek-v4-pro')
+  assert.ok(pro?.peak, 'the hourly-priced model keeps its peak block')
+  assert.equal(pro.peak.inputCost, 1.32)
+  // The table stores only the override: the top-level rates ARE the off-peak
+  // half, which is what `ratesAt()` prices with outside the windows.
+  assert.equal(pro.inputCost, 0.66)
+
+  // `deepseek-v4-flash-fast` is flat-priced and must stay out of the peak set.
+  const fast = byId.get('deepseek/deepseek-v4-flash-fast')
+  assert.ok(fast)
+  assert.equal(fast.peak, undefined)
+})
+
+test('the peak windows travel with the table', () => {
+  assert.deepEqual(
+    table.peakHours,
+    PEAK_HOUR_RANGES.map(([start, end]) => [start, end]),
+  )
+  assert.deepEqual(table.peakHours, [[1, 4], [6, 10]])
+})
+
+test('price rows no catalog model claims are still served, keyed by slug', () => {
+  const slugs = new Set(table.models.map((price) => price.slug))
+  // The page names models the catalog snapshot has not learned yet; serving
+  // them under the slug is what lets a session on such a model still price.
+  assert.ok(slugs.size > 0)
+  for (const price of table.models) {
+    assert.equal(typeof price.slug, 'string')
+    assert.notEqual(price.slug, '')
+    assert.equal(typeof price.inputCost, 'number')
+    assert.equal(typeof price.outputCost, 'number')
+    assert.equal(typeof price.cacheReadCost, 'number')
+  }
+})
+
+test('a vendor-prefixed catalog id resolves to the page\'s unprefixed slug', () => {
+  // `Qwen/Qwen3.8-Max-0902` → the page's `qwen-3.8-max-0902`: the vendor
+  // segment is dropped AND a hyphen is inserted, which is exactly the drift
+  // `priceSlugCandidates()` exists to absorb.
+  const qwen = byId.get('Qwen/Qwen3.8-Max-0902')
+  assert.ok(qwen, 'the catalog id must be the lookup key a session reports')
+  assert.equal(qwen.slug, 'qwen-3.8-max-0902')
+  assert.equal(qwen.inputCost, 2)
+})
+
+test('a dated catalog id resolves to the page\'s undated slug', () => {
+  const haiku = byId.get('claude-haiku-4-5-20251001')
+  assert.ok(haiku, 'the dated catalog id should reach the undated price row')
+  assert.equal(haiku.slug, 'claude-haiku-4-5')
+  assert.equal(haiku.inputCost, 1)
+})
diff --git a/tests/panel.test.ts b/tests/panel.test.ts
new file mode 100644
index 0000000..b33d8a2
--- /dev/null
+++ b/tests/panel.test.ts
@@ -0,0 +1,540 @@
+/**
+ * Plans & quota panel projection tests (node:test, zero deps). Run with `npm test`.
+ *
+ * The panel is the sidebar footer card + the center dashboard, and its whole
+ * user-visible truth is one projection (`buildPanelView`). This file drives
+ * that projection — plus the shared auto-refresh loop — from hand-built usage
+ * snapshots, so what is pinned here is what the two surfaces render.
+ */
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+import {
+  PANEL_AUTO_REFRESH_MS,
+  buildPanelView,
+  resetPanelAutoRefresh,
+  startPanelAutoRefresh,
+  type AutoRefreshTimer,
+} from '../src/client/panel.ts'
+import type { UsagePageState } from '../src/client/usage.ts'
+import type { CommandCodeAccountUsage } from '../src/usage-wire.ts'
+import type { CommandCodeUsageReport } from '../src/adapter.ts'
+
+/** One account entry with only the fields a test cares about spelled out. */
+function entry(overrides: {
+  id?: string
+  label?: string
+  active?: boolean
+  configured?: boolean
+  mark?: string
+  cooldownUntil?: number
+  report?: Partial<CommandCodeUsageReport>
+} = {}): CommandCodeAccountUsage {
+  return {
+    id: overrides.id ?? 'default',
+    label: overrides.label ?? 'Default',
+    configured: overrides.configured ?? true,
+    active: overrides.active ?? true,
+    mark: overrides.mark ?? '',
+    cooldownUntil: overrides.cooldownUntil ?? 0,
+    report: {
+      failures: [],
+      ...overrides.report,
+    } as CommandCodeUsageReport,
+  }
+}
+
+function usage(overrides: Partial<UsagePageState> = {}): UsagePageState {
+  return {
+    status: 'ready',
+    report: { accounts: [] },
+    error: undefined,
+    fetchedAt: undefined,
+    ...overrides,
+  }
+}
+
+const CREDITS = {
+  monthlyCredits: 60,
+  purchasedCredits: 5,
+  freeCredits: 2,
+  fiveHour: { used: 3, cap: 3, exceeded: true, resetAt: 0 },
+  weekly: { used: 1.32, cap: 6, exceeded: false, resetAt: 0 },
+}
+
+test('credential-reference absence alone does not rule out Host fallback keys', () => {
+  const view = buildPanelView({ usage: usage(), apiKeyConfigured: false })
+  assert.equal(view.noKey, false)
+  assert.equal(view.accounts.length, 0)
+})
+
+test('a first fetch with no data renders the loading state', () => {
+  const view = buildPanelView({
+    usage: usage({ status: 'loading', report: undefined }),
+    apiKeyConfigured: true,
+  })
+  assert.equal(view.loading, true)
+  assert.equal(view.noKey, false)
+})
+
+test('accounts are deduplicated by id and staged removals are hidden', () => {
+  const view = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [
+          entry({ id: 'default', label: 'A' }),
+          entry({ id: 'default', label: 'A again' }),
+          entry({ id: 'COMMANDCODE_API_KEY_2', label: 'B' }),
+        ],
+      },
+    }),
+    apiKeyConfigured: true,
+    removingIds: ['COMMANDCODE_API_KEY_2'],
+  })
+  assert.deepEqual(view.accounts.map((account) => account.id), ['default'])
+})
+
+test('the panel opens on the serving account, not the first one', () => {
+  const view = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [
+          entry({ id: 'default', active: false }),
+          entry({ id: 'COMMANDCODE_API_KEY_2', active: true, label: 'Second' }),
+        ],
+      },
+    }),
+    apiKeyConfigured: true,
+  })
+  assert.equal(view.selectedId, 'COMMANDCODE_API_KEY_2')
+  assert.equal(view.selected?.label, 'Second')
+})
+
+test('an over-cap window keeps its true percentage and clamps only the bar', () => {
+  const view = buildPanelView({
+    usage: usage({
+      report: { accounts: [entry({ report: { credits: { ...CREDITS, fiveHour: { used: 4.5, cap: 3, exceeded: true, resetAt: 0 } } } })] },
+    }),
+    apiKeyConfigured: true,
+  })
+  const fiveHour = view.selected?.windows.find((window) => window.label === 'fiveHour')
+  assert.ok(fiveHour)
+  assert.equal(fiveHour.percent, 150)
+  assert.equal(fiveHour.barPercent, 100)
+  assert.equal(fiveHour.exceeded, true)
+})
+
+test('the footer card stacks 5-hour then weekly, and leaves uncapped windows out', () => {
+  const view = buildPanelView({
+    usage: usage({ report: { accounts: [entry({ report: { credits: CREDITS } })] } }),
+    apiKeyConfigured: true,
+  })
+  assert.deepEqual(view.footerBars.map((bar) => bar.label), ['fiveHourShort', 'weeklyShort'])
+  assert.equal(view.footerBars[0]?.percent, '100%')
+  assert.equal(view.footerBars[0]?.warn, true)
+  assert.equal(view.footerBars[0]?.detail, '$3.00 / $3.00')
+  assert.equal(view.footerBars[1]?.percent, '22%')
+  assert.equal(view.footerBars[1]?.warn, false)
+
+  const uncapped = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({ report: { credits: { ...CREDITS, weekly: { used: 1, cap: 0, exceeded: false, resetAt: 0 } } } })],
+      },
+    }),
+    apiKeyConfigured: true,
+  })
+  assert.deepEqual(uncapped.footerBars.map((bar) => bar.label), ['fiveHourShort'])
+})
+
+test('the accessible footer title carries the visible figures', () => {
+  const view = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({
+          report: {
+            credits: CREDITS,
+            plan: { planId: 'individual-pro', name: 'Pro', status: 'active', monthlyCredits: 60, currentPeriodEnd: 0 },
+            usage: {
+              totalCount: 12,
+              totalCost: 1.32,
+              successRate: 99.9,
+              completedCount: 11,
+              failedCount: 1,
+              totalCredits: 1.4,
+              totalTokensIn: 1000,
+              totalTokensOut: 200,
+              periodBasis: 'billing-period',
+            },
+          },
+        })],
+      },
+    }),
+    apiKeyConfigured: true,
+  })
+  assert.match(view.footTitle, /^Command Code · Pro/)
+  assert.match(view.footTitle, /5-hour \$3\.00 \/ \$3\.00 \(100%\)/)
+  assert.match(view.footTitle, /Weekly \$1\.32 \/ \$6\.00 \(22%\)/)
+  assert.match(view.footTitle, /\$1\.32/)
+  assert.equal(view.planName, 'Pro')
+})
+
+test('monthly consumption is the CLI\'s limit-minus-remaining derivation', () => {
+  // The fixture deliberately makes the two halves DIFFERENT: the plan publishes
+  // a 30-credit limit while the billing endpoint reports 8.68 left, which is the
+  // shape the live API returns. A fixture where `remaining === limit` would let a
+  // hardcoded `$0.00` (and a swapped pair of fields) pass unchanged.
+  const view = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({
+          report: {
+            credits: { ...CREDITS, monthlyCredits: 8.68 },
+            plan: { planId: 'individual-pro', name: 'Pro', status: 'active', monthlyCredits: 30, currentPeriodEnd: 0 },
+          },
+        })],
+      },
+    }),
+    apiKeyConfigured: true,
+  })
+  const monthly = view.selected?.monthly
+  assert.ok(monthly)
+  assert.equal(monthly.known, true)
+  assert.equal(monthly.limit, '$30.00')
+  // 30 credit limit minus the 8.68 the billing endpoint reported left.
+  assert.equal(monthly.used, '$21.32')
+  assert.equal(monthly.remaining, '$8.68')
+  assert.equal(monthly.percent, 71)
+  assert.equal(monthly.exhausted, false)
+  assert.equal(monthly.purchased, '$5.00')
+  assert.equal(monthly.free, '$2.00')
+})
+
+test('a billing endpoint that reported nothing never reads as a consumed quota', () => {
+  // The regression this pins: `/alpha/billing/credits` is one of four endpoints
+  // the report fetches in parallel, so it fails ON ITS OWN while the plan still
+  // arrives. Reading the absent balance as 0 turned that partial failure into
+  // `limit - 0 = limit`, i.e. a confident "100% used, quota exhausted" — with
+  // the purchased/free tiles asserting balances that were never fetched.
+  const view = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({
+          report: {
+            plan: { planId: 'individual-pro', name: 'Pro', status: 'active', monthlyCredits: 30, currentPeriodEnd: 0 },
+            failures: ['/alpha/billing/credits: service unavailable'],
+          },
+        })],
+      },
+    }),
+    apiKeyConfigured: true,
+  })
+  const monthly = view.selected?.monthly
+  assert.ok(monthly)
+  // No ratio, no bar, and above all no "exhausted".
+  assert.equal(monthly.known, false)
+  assert.equal(monthly.exhausted, false)
+  assert.equal(monthly.percent, 0)
+  assert.equal(monthly.barPercent, 0)
+  // Unreported figures read as a dash, never as a zero.
+  assert.equal(monthly.remaining, '—')
+  assert.equal(monthly.used, '—')
+  // The plan's own limit IS known from the subscriptions endpoint, so it shows.
+  assert.equal(monthly.limit, '$30.00')
+})
+
+test('an explicit unreported flag dashes the balance while an absent flag does not', () => {
+  const base = {
+    plan: { planId: 'individual-pro', name: 'Pro', status: 'active', monthlyCredits: 30, currentPeriodEnd: 0 },
+  }
+  const unreported = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({
+          report: { ...base, credits: { ...CREDITS, monthlyCredits: 0, monthlyReported: false } },
+        })],
+      },
+    }),
+    apiKeyConfigured: true,
+  }).selected?.monthly
+  assert.ok(unreported)
+  assert.equal(unreported.known, false)
+  assert.equal(unreported.exhausted, false)
+  assert.equal(unreported.remaining, '—')
+
+  // `undefined` is a Host half older than the flag, which always sent a real
+  // number: it keeps rendering instead of dashing every balance.
+  const legacy = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({ report: { ...base, credits: { ...CREDITS, monthlyCredits: 0 } } })],
+      },
+    }),
+    apiKeyConfigured: true,
+  }).selected?.monthly
+  assert.ok(legacy)
+  assert.equal(legacy.known, true)
+  assert.equal(legacy.remaining, '$0.00')
+  // A genuine zero balance IS an exhausted plan, and still says so.
+  assert.equal(legacy.exhausted, true)
+})
+
+test('only the quota windows the endpoint reported get a row', () => {
+  const unlimited = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({ report: { credits: { monthlyCredits: 5, purchasedCredits: 0, freeCredits: 0 } } })],
+      },
+    }),
+    apiKeyConfigured: true,
+  }).selected
+  assert.ok(unlimited)
+  // No windowLimits at all: an unlimited plan. Drawing two zeroed rows for it
+  // would invent limits the account does not have.
+  assert.deepEqual(unlimited.windows, [])
+
+  // A window that WAS reported with a zero cap is uncapped spend, not an absent
+  // window, and it keeps its row.
+  const uncapped = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({
+          report: {
+            credits: {
+              monthlyCredits: 5,
+              purchasedCredits: 0,
+              freeCredits: 0,
+              fiveHour: { used: 2.4, cap: 0, exceeded: false, resetAt: 0 },
+            },
+          },
+        })],
+      },
+    }),
+    apiKeyConfigured: true,
+  }).selected
+  assert.ok(uncapped)
+  assert.equal(uncapped.windows.length, 1)
+  assert.equal(uncapped.windows[0]?.capped, false)
+  // Spend only, with no `used / cap` it does not have; the row's percentage
+  // label reads "unlimited" instead of a fabricated 0%.
+  assert.equal(uncapped.windows[0]?.value, '$2.40')
+})
+
+test('an unknown limit draws no percentage rather than inventing a denominator', () => {
+  const view = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({
+          report: {
+            credits: CREDITS,
+            plan: { planId: 'individual-unknown', name: 'Unknown', status: 'active', monthlyCredits: null, currentPeriodEnd: 0 },
+          },
+        })],
+      },
+    }),
+    apiKeyConfigured: true,
+  })
+  const monthly = view.selected?.monthly
+  assert.ok(monthly)
+  // No denominator means no ratio: the view reports `known: false` and a zero
+  // percentage, so the dashboard draws no bar instead of a fabricated 100%.
+  assert.equal(monthly.known, false)
+  assert.equal(monthly.percent, 0)
+  assert.equal(monthly.barPercent, 0)
+  assert.equal(monthly.exhausted, false)
+  // The balances the billing endpoint did report still render.
+  assert.equal(monthly.purchased, '$5.00')
+  assert.equal(monthly.free, '$2.00')
+})
+
+test('an exhausted plan and a cooling-down account both read as states', () => {
+  const view = buildPanelView({
+    usage: usage({
+      report: {
+        accounts: [entry({
+          active: false,
+          mark: 'rate-limit',
+          cooldownUntil: 1_700_000_000_000,
+          report: {
+            credits: { ...CREDITS, monthlyCredits: 0 },
+            plan: { planId: 'individual-pro', name: 'Pro', status: 'active', monthlyCredits: 60, currentPeriodEnd: 0 },
+          },
+        })],
+      },
+    }),
+    apiKeyConfigured: true,
+  })
+  assert.equal(view.selected?.mark, 'coolingDown')
+  assert.notEqual(view.selected?.cooldownUntil, '')
+  assert.equal(view.selected?.monthly?.exhausted, true)
+})
+
+test('a 401 across every endpoint surfaces the invalid-key box, not a generic error', () => {
+  const view = buildPanelView({
+    usage: usage({
+      status: 'error',
+      report: { accounts: [entry({ report: { failures: ['credits: 401'], blocked: 'invalid-key' } })] },
+    }),
+    apiKeyConfigured: true,
+  })
+  assert.equal(view.failure?.title, 'errorInvalidKey')
+  assert.equal(view.failure?.hint, 'errorInvalidKeyHint')
+})
+
+test('a transport failure with no report renders the generic box with its reason', () => {
+  const view = buildPanelView({
+    usage: usage({ status: 'error', report: undefined, error: 'commandcode/report remote is not mounted' }),
+    apiKeyConfigured: true,
+  })
+  assert.equal(view.failure?.title, 'errorGeneric')
+  assert.equal(view.failure?.detail, 'commandcode/report remote is not mounted')
+})
+
+test('a failed refetch keeps the last good data on screen as stale', () => {
+  const view = buildPanelView({
+    usage: usage({
+      status: 'error',
+      error: 'network down',
+      report: { accounts: [entry({ report: { credits: CREDITS } })] },
+    }),
+    apiKeyConfigured: true,
+  })
+  assert.equal(view.staleError, 'network down')
+  assert.equal(view.accounts.length, 1)
+  assert.equal(view.failure, undefined)
+})
+
+test('every string the view references exists in the copy table', () => {
+  const view = buildPanelView({
+    usage: usage({ report: { accounts: [entry({ report: { credits: CREDITS } })] } }),
+    apiKeyConfigured: true,
+  })
+  const referenced = [
+    ...view.footerBars.map((bar) => bar.label),
+    ...(view.selected?.windows.map((window) => window.label) ?? []),
+    ...(view.selected?.stats.map((stat) => stat.label) ?? []),
+  ]
+  for (const key of referenced) {
+    assert.equal(typeof view.text[key], 'string', `${key} must render text, not a raw key`)
+    assert.notEqual(view.text[key], '')
+  }
+})
+
+// ---------------------------------------------------------------------------
+// startPanelAutoRefresh
+// ---------------------------------------------------------------------------
+
+/** A timer seam that records schedules and lets a test fire them by hand. */
+function fakeTimer(): AutoRefreshTimer & { fire(): void; pending(): number } {
+  let callback: (() => void) | undefined
+  let handle: unknown
+  return {
+    set(next: () => void): unknown {
+      callback = next
+      handle = {}
+      return handle
+    },
+    clear(target: unknown): void {
+      if (target === handle) {
+        callback = undefined
+        handle = undefined
+      }
+    },
+    fire(): void {
+      const next = callback
+      callback = undefined
+      next?.()
+    },
+    pending(): number {
+      return callback === undefined ? 0 : 1
+    },
+  }
+}
+
+test('the auto-refresh loop fetches on mount, ticks, and stops on the last unmount', () => {
+  resetPanelAutoRefresh()
+  const timer = fakeTimer()
+  let refreshes = 0
+  const source = {
+    state: () => usage(),
+    refresh: async () => {
+      refreshes += 1
+    },
+  }
+
+  const stop = startPanelAutoRefresh(source, () => true, timer)
+  assert.equal(refreshes, 1, 'the row must be current on arrival, not after a tick')
+  assert.equal(timer.pending(), 1)
+
+  timer.fire()
+  assert.equal(refreshes, 2)
+  assert.equal(timer.pending(), 1, 'the loop reschedules itself')
+
+  stop()
+  assert.equal(timer.pending(), 0)
+  resetPanelAutoRefresh()
+})
+
+test('an unconfigured account is never polled, and a later key starts it', () => {
+  resetPanelAutoRefresh()
+  const timer = fakeTimer()
+  let refreshes = 0
+  let configured = false
+  const source = {
+    state: () => usage(),
+    refresh: async () => {
+      refreshes += 1
+    },
+  }
+
+  const stop = startPanelAutoRefresh(source, () => configured, timer)
+  assert.equal(refreshes, 0, 'no key means nothing to fetch')
+
+  // The configuration fact is re-read per tick, so a key pasted mid-session
+  // starts fresh data without re-registering the surface.
+  configured = true
+  timer.fire()
+  assert.equal(refreshes, 1)
+
+  stop()
+  resetPanelAutoRefresh()
+})
+
+test('two mounted surfaces share one loop and one fetch', () => {
+  resetPanelAutoRefresh()
+  const timer = fakeTimer()
+  let refreshes = 0
+  const source = {
+    state: () => usage(),
+    refresh: async () => {
+      refreshes += 1
+    },
+  }
+
+  const stopSidebar = startPanelAutoRefresh(source, () => true, timer)
+  const stopDashboard = startPanelAutoRefresh(source, () => true, timer)
+  assert.equal(refreshes, 1, 'the second mount joins the running loop')
+
+  // The surface that started the loop unmounting first must not stop it while
+  // the other is still mounted.
+  stopSidebar()
+  timer.fire()
+  assert.equal(refreshes, 2)
+
+  stopDashboard()
+  assert.equal(timer.pending(), 0)
+  assert.equal(PANEL_AUTO_REFRESH_MS, 120_000)
+  resetPanelAutoRefresh()
+})
+
+test('omitted purchased and free balances remain unknown while explicit zero is shown', () => {
+  const view = buildPanelView({ apiKeyConfigured: false, usage: usage({ report: { accounts: [entry({ report: {
+    credits: { ...CREDITS, purchasedCredits: 0, freeCredits: 0, purchasedReported: true, freeReported: false },
+  } })] } }) })
+  assert.equal(view.noKey, false, 'Host-resolved literal or CLI keys override an absent browser credential ref')
+  assert.equal(view.accounts[0]?.monthly?.purchased, '$0.00')
+  assert.equal(view.accounts[0]?.monthly?.free, '—')
+  const missing = buildPanelView({ apiKeyConfigured: true, usage: usage({ report: { accounts: [entry({ configured: false })] } }) })
+  assert.equal(missing.noKey, true, 'only the Host can establish that no usable key exists')
+})
diff --git a/tests/prices-client.test.ts b/tests/prices-client.test.ts
new file mode 100644
index 0000000..d0a394a
--- /dev/null
+++ b/tests/prices-client.test.ts
@@ -0,0 +1,190 @@
+/**
+ * Price-table controller tests (node:test, zero deps). Run with `npm test`.
+ *
+ * `CommandCodePricesController` is a one-shot cache in front of the
+ * `commandcode/prices` Remote: `ensure()` is safe to call from every mount
+ * point, fetches at most once, and must read a Host half that serves no such
+ * endpoint as a permanent "no prices" state rather than throwing.
+ */
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+import { CommandCodePricesController } from '../src/client/prices.ts'
+import type { CommandCodePriceTable } from '../src/usage-wire.ts'
+
+const TABLE: CommandCodePriceTable = {
+  models: [{ id: 'commandcode/test', slug: 'test', inputCost: 1, outputCost: 2, cacheReadCost: 0.1 }],
+  peakHours: [[1, 4]],
+}
+
+test('ensure() fetches once and caches the table for the page lifetime', async () => {
+  let calls = 0
+  const controller = new CommandCodePricesController({
+    prices: async () => {
+      calls += 1
+      return { ok: true, value: TABLE }
+    },
+  })
+  const seen: string[] = []
+  controller.subscribe(() => seen.push(controller.state().status))
+
+  controller.ensure()
+  assert.equal(controller.state().status, 'loading')
+  await Promise.resolve()
+  await Promise.resolve()
+  assert.equal(controller.state().status, 'ready')
+  assert.deepEqual(controller.state().table, TABLE)
+
+  controller.ensure()
+  controller.ensure()
+  await Promise.resolve()
+  assert.equal(calls, 1, 'a second mount must join the cached table')
+  assert.deepEqual(seen, ['loading', 'ready'])
+})
+
+test('a concurrent ensure() while one is in flight does not double-fetch', async () => {
+  let calls = 0
+  let release: ((value: { ok: true; value: CommandCodePriceTable }) => void) | undefined
+  const controller = new CommandCodePricesController({
+    prices: () => {
+      calls += 1
+      return new Promise((resolve) => {
+        release = resolve
+      })
+    },
+  })
+
+  controller.ensure()
+  controller.ensure()
+  assert.equal(calls, 1)
+  release?.({ ok: true, value: TABLE })
+  await Promise.resolve()
+  await Promise.resolve()
+  assert.equal(controller.state().status, 'ready')
+})
+
+test('a failure stays retryable instead of caching the error', async () => {
+  let calls = 0
+  const controller = new CommandCodePricesController({
+    prices: async () => {
+      calls += 1
+      if (calls === 1) return { ok: false, error: { message: 'not mounted yet' } }
+      return { ok: true, value: TABLE }
+    },
+  })
+
+  controller.ensure()
+  await Promise.resolve()
+  await Promise.resolve()
+  assert.equal(controller.state().status, 'error')
+  assert.equal(controller.state().error, 'not mounted yet')
+
+  controller.ensure()
+  await Promise.resolve()
+  await Promise.resolve()
+  assert.equal(calls, 2)
+  assert.equal(controller.state().status, 'ready')
+})
+
+test('a thrown request lands in the error state with its message', async () => {
+  const controller = new CommandCodePricesController({
+    prices: async () => {
+      throw new Error('transport exploded')
+    },
+  })
+  controller.ensure()
+  await Promise.resolve()
+  await Promise.resolve()
+  assert.equal(controller.state().status, 'error')
+  assert.equal(controller.state().error, 'transport exploded')
+})
+
+test('a Host without the price endpoint is a permanent no-prices state, not a throw', async () => {
+  // The Host and this bundle can be a cross-version pair: an older Host mounts
+  // no `commandcode/prices` descriptor, so the namespace member is absent.
+  const controller = new CommandCodePricesController({})
+  controller.ensure()
+  assert.equal(controller.state().status, 'error')
+  assert.match(controller.state().error ?? '', /no commandcode\/prices endpoint/)
+})
+
+test('a disposed controller drops in-flight results and stops publishing', async () => {
+  let release: ((value: { ok: true; value: CommandCodePriceTable }) => void) | undefined
+  const controller = new CommandCodePricesController({
+    prices: () =>
+      new Promise((resolve) => {
+        release = resolve
+      }),
+  })
+  const seen: string[] = []
+  controller.subscribe(() => seen.push(controller.state().status))
+
+  controller.ensure()
+  controller.dispose()
+  release?.({ ok: true, value: TABLE })
+  await Promise.resolve()
+  await Promise.resolve()
+  assert.deepEqual(seen, ['loading'])
+  assert.equal(controller.state().status, 'loading')
+})
+
+function retryTimer() {
+  let next: (() => void) | undefined
+  const delays: number[] = []
+  return { delays, set(callback: () => void, ms: number) { next = callback; delays.push(ms); return callback }, clear() { next = undefined }, fire() { const callback = next; next = undefined; callback?.() }, pending: () => !!next }
+}
+const settled = async () => { await Promise.resolve(); await Promise.resolve() }
+
+test('transient failures automatically retry without another mount, with bounded backoff', async () => {
+  const timer = retryTimer()
+  let calls = 0
+  const controller = new CommandCodePricesController({ prices: async () => {
+    calls++
+    return { ok: false, error: { message: 'temporary disconnect' } }
+  } }, timer)
+  controller.ensure(); await settled()
+  for (let i = 0; i < 3; i++) { timer.fire(); await settled() }
+  assert.equal(calls, 4)
+  assert.deepEqual(timer.delays, [1000, 2000, 4000])
+  assert.equal(timer.pending(), false)
+  controller.ensure(); await settled()
+  assert.equal(calls, 5, 'manual refresh remains available after the bounded retries')
+  controller.dispose()
+})
+
+test('a successful retry caches prices and disposal cancels pending retries', async () => {
+  const timer = retryTimer()
+  let calls = 0
+  const controller = new CommandCodePricesController({ prices: async () => ++calls === 1
+    ? { ok: false, error: { message: 'not ready' } }
+    : { ok: true, value: TABLE } }, timer)
+  controller.ensure(); await settled(); timer.fire(); await settled()
+  assert.equal(controller.state().status, 'ready')
+  assert.equal(timer.pending(), false)
+  controller.reload(); await settled()
+  controller.dispose(); timer.fire()
+  assert.equal(calls, 3)
+  const failing = new CommandCodePricesController({ prices: async () => { throw new Error('offline') } }, timer)
+  failing.ensure(); await settled()
+  assert.equal(timer.pending(), true)
+  failing.dispose()
+  assert.equal(timer.pending(), false)
+})
+
+test('namespace rebind ignores old in-flight results and resets permanent failures', async () => {
+  const timer = retryTimer()
+  let release!: (value: { ok: true; value: CommandCodePriceTable }) => void
+  const remote = { prices: () => new Promise<{ ok: true; value: CommandCodePriceTable }>(resolve => { release = resolve }) }
+  const controller = new CommandCodePricesController(remote, timer)
+  controller.ensure()
+  const newer = { ...TABLE, peakHours: [] }
+  remote.prices = async () => ({ ok: true, value: newer })
+  controller.reload(); await settled()
+  release({ ok: true, value: TABLE }); await settled()
+  assert.deepEqual(controller.state().table, newer)
+  const absent = new CommandCodePricesController({ prices: async () => ({ ok: false, error: { message: 'missing', permanent: true } }) }, timer)
+  absent.ensure(); await settled()
+  assert.equal(timer.pending(), false)
+  controller.dispose(); absent.dispose()
+})
diff --git a/tests/session-cost-display.test.ts b/tests/session-cost-display.test.ts
new file mode 100644
index 0000000..cf71df8
--- /dev/null
+++ b/tests/session-cost-display.test.ts
@@ -0,0 +1,541 @@
+import { withRequestFacts } from './cost-fixture.ts'
+/**
+ * DOM-injection tests for the composer's session-cost figure
+ * (`src/client/session-cost-display.ts`). Run with `npm test`.
+ *
+ * This module is the highest-risk half of the readout: it reaches into the
+ * harness's OWN token-usage markup — the pill's button and the usage dialog's
+ * `dl` — appends nodes to them, hides rows, and restores everything on the way
+ * out. None of that is covered by `tests/session-cost.test.ts`, which stops at
+ * the pure projection, so these tests drive the real class through its two
+ * injected seams (`doc` and `observe`) against a small fake DOM.
+ *
+ * What is pinned here is the safety contract, not the arithmetic:
+ *   · nothing is injected unless the shipped shape confirms (positionally, by
+ *     the token count each row must be showing);
+ *   · a re-render that drops our nodes is self-healed, not assumed;
+ *   · disposal removes every node we added and every style we set;
+ *   · a missing anchor degrades to nothing instead of throwing.
+ */
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+import { SessionCostDisplay, type SessionCostObserverFactory } from '../src/client/session-cost-display.ts'
+import {
+  SESSION_COST_COPY,
+  buildSessionCostView as buildCostView,
+  type SessionCostInput,
+} from '../src/client/session-cost.ts'
+import type { CommandCodePriceTable } from '../src/usage-wire.ts'
+
+const buildSessionCostView = (input: SessionCostInput) => buildCostView(withRequestFacts(input))
+
+// ---------------------------------------------------------------------------
+// A fake DOM: only what the display actually touches
+// ---------------------------------------------------------------------------
+
+class FakeNode {
+  childNodes: FakeNode[] = []
+  parentNode: FakeNode | null = null
+  /**
+   * Whether this node is part of the document tree. Computed by walking to the
+   * root rather than stored as a flag: the display decides whether its cached
+   * dialog is still live with `isConnected`, so a double that reported a
+   * detached node as connected would test the wrong branch — and a real
+   * `isConnected` is exactly this walk.
+   */
+  get isConnected(): boolean {
+    let node: FakeNode = this
+    while (node.parentNode !== null) node = node.parentNode
+    return node instanceof FakeDocument
+  }
+
+  /** Simulate the harness replacing this node: detach it from its parent. */
+  detach(): void {
+    this.parentNode?.removeChild(this)
+  }
+
+  appendChild<T extends FakeNode>(child: T): T {
+    child.parentNode?.removeChild(child)
+    child.parentNode = this
+    this.childNodes.push(child)
+    return child
+  }
+
+  removeChild<T extends FakeNode>(child: T): T {
+    const at = this.childNodes.indexOf(child)
+    if (at !== -1) this.childNodes.splice(at, 1)
+    child.parentNode = null
+    return child
+  }
+
+  get textContent(): string {
+    return this.childNodes.map((child) => child.textContent).join('')
+  }
+
+  set textContent(value: string) {
+    for (const child of this.childNodes) child.parentNode = null
+    this.childNodes = []
+    if (value !== '') this.appendChild(new FakeText(value))
+  }
+}
+
+class FakeText extends FakeNode {
+  constructor(private readonly data: string) {
+    super()
+  }
+
+  override get textContent(): string {
+    return this.data
+  }
+}
+
+class FakeElement extends FakeNode {
+  readonly tagName: string
+  attributes = new Map<string, string>()
+  style: Record<string, string> = {}
+
+  constructor(tagName: string) {
+    super()
+    this.tagName = tagName.toUpperCase()
+  }
+
+  /**
+   * The display assigns `a11y.id = A11Y_ID` directly (it is how the DOM API is
+   * normally used), so the property must land in the same place `setAttribute`
+   * writes — otherwise an `#id` lookup would not see it.
+   */
+  get id(): string {
+    return this.attributes.get('id') ?? ''
+  }
+
+  set id(value: string) {
+    this.attributes.set('id', value)
+  }
+
+  setAttribute(name: string, value: string): void {
+    this.attributes.set(name, value)
+  }
+
+  getAttribute(name: string): string | null {
+    return this.attributes.get(name) ?? null
+  }
+
+  hasAttribute(name: string): boolean {
+    return this.attributes.has(name)
+  }
+
+  removeAttribute(name: string): void {
+    this.attributes.delete(name)
+  }
+
+  /** Depth-first search by a single `[attr]`, `[attr="v"]`, `tag` or class-free selector. */
+  querySelector(selector: string): FakeElement | null {
+    return this.querySelectorAll(selector)[0] ?? null
+  }
+
+  querySelectorAll(selector: string): FakeElement[] {
+    const found: FakeElement[] = []
+    const visit = (node: FakeNode): void => {
+      for (const child of node.childNodes) {
+        if (child instanceof FakeElement) {
+          if (matches(child, selector)) found.push(child)
+          visit(child)
+        }
+      }
+    }
+    visit(this)
+    return found
+  }
+
+  closest(selector: string): FakeElement | null {
+    let node: FakeNode | null = this
+    while (node !== null) {
+      if (node instanceof FakeElement && matches(node, selector)) return node
+      node = node.parentNode
+    }
+    return null
+  }
+}
+
+/**
+ * Match the selector subset the display uses: a tag name, one or more
+ * `[attr]` / `[attr="value"]` tests, or a compound of both
+ * (`button[aria-haspopup="dialog"]`). A bare `[attr]` matches on PRESENCE, so
+ * a valueless attribute (`""`) still matches — the display sets several
+ * attributes to the empty string.
+ */
+function matches(element: FakeElement, selector: string): boolean {
+  // `#id` — how the a11y description node is addressed.
+  const byId = selector.match(/^#(.+)$/)
+  if (byId !== null) {
+    if (element.getAttribute('id') !== byId[1]) return false
+    return true
+  }
+  const compound = selector.match(/^([a-zA-Z]*)((?:\[[a-zA-Z-]+(?:="[^"]*")?\])+)$/)
+  if (compound === null) return element.tagName === selector.toUpperCase()
+  const tag = compound[1] ?? ''
+  const attrs = compound[2] ?? ''
+  if (tag !== '' && element.tagName !== tag.toUpperCase()) return false
+  for (const test of attrs.matchAll(/\[([a-zA-Z-]+)(?:="([^"]*)")?\]/g)) {
+    const name = test[1]!
+    if (!element.attributes.has(name)) return false
+    if (test[2] !== undefined && element.getAttribute(name) !== test[2]) return false
+  }
+  return true
+}
+
+class FakeDocument extends FakeNode {
+  body = new FakeElement('body')
+  head = new FakeElement('head')
+
+  constructor() {
+    super()
+    this.appendChild(this.body)
+  }
+
+  createElement(tagName: string): FakeElement {
+    return new FakeElement(tagName)
+  }
+
+  querySelector(selector: string): FakeElement | null {
+    return this.body.querySelector(selector)
+  }
+}
+
+const doc = (): FakeDocument => new FakeDocument()
+/** The shipped shape is `Element`; the fake is structurally compatible for our use. */
+const asDocument = (fake: FakeDocument): Document => fake as unknown as Document
+
+// ---------------------------------------------------------------------------
+// The shipped markup the injection targets
+// ---------------------------------------------------------------------------
+
+/**
+ * The shipped token pill as it really nests: a `[data-composer-stats]` root
+ * wrapping the button (`StatsPills`), whose last `aria-haspopup` child is the
+ * token pill. The wrapper matters — the display scopes its lookup to it.
+ */
+function shippedPill(parent: FakeElement): { root: FakeElement; button: FakeElement; label: FakeElement } {
+  const root = new FakeElement('div')
+  root.setAttribute('data-composer-stats', '')
+  const button = new FakeElement('button')
+  button.setAttribute('aria-haspopup', 'dialog')
+  const label = new FakeElement('span')
+  label.textContent = '1.2M tokens'
+  button.appendChild(label)
+  root.appendChild(button)
+  parent.appendChild(root)
+  return { root, button, label }
+}
+
+/**
+ * The shipped usage dialog: a `dl` of `dt`/`dd` pairs, portaled onto `body`.
+ * `values` are the value cells' text, in order.
+ */
+function shippedDialog(parent: FakeElement, values: (string | undefined)[]): FakeElement {
+  const dl = new FakeElement('dl')
+  dl.setAttribute('data-session-stats-usage', '')
+  for (const value of values) {
+    const dt = new FakeElement('dt')
+    dt.textContent = 'label'
+    const dd = new FakeElement('dd')
+    if (value !== undefined) dd.textContent = value
+    dl.appendChild(dt)
+    dl.appendChild(dd)
+  }
+  parent.appendChild(dl)
+  return dl
+}
+
+// ---------------------------------------------------------------------------
+// The view under test
+// ---------------------------------------------------------------------------
+
+/** A flat table with every rate published, so every row can be priced. */
+const FLAT: CommandCodePriceTable = {
+  models: [
+    {
+      id: 'commandcode/test-flat',
+      slug: 'test-flat',
+      inputCost: 1,
+      outputCost: 2,
+      cacheReadCost: 0.1,
+      cacheWriteCost: 1.25,
+    },
+  ],
+  peakHours: [[1, 4], [6, 10]],
+}
+
+const SELECTION = {
+  lastUsed: { provider: 'commandcode', model: 'commandcode/test-flat' },
+  next: { provider: 'commandcode', model: 'commandcode/test-flat' },
+}
+
+function view(usage: SessionCostInput['usage']): NonNullable<ReturnType<typeof buildSessionCostView>> {
+  const built = buildSessionCostView({
+    usage,
+    selection: SELECTION,
+    table: FLAT,
+    now: Date.UTC(2026, 8, 16, 5, 0, 0),
+  })
+  assert.ok(built, 'the fixture must be priceable')
+  return built
+}
+
+/** A display wired to both seams, plus the observer's manual trigger. */
+function makeDisplay(scopeRoot: FakeElement | null) {
+  const fake = doc()
+  // The composer lives in the page in real life, so attach it: the dialog is
+  // resolved document-wide and the pill is resolved through the scope, and both
+  // need the tree to be whole for the lookups to mean anything.
+  if (scopeRoot !== null && scopeRoot.parentNode === null) fake.body.appendChild(scopeRoot)
+  const trigger = { fire: (): void => {} }
+  const observe: SessionCostObserverFactory = (_target, listener) => {
+    trigger.fire = listener
+    return () => {
+      trigger.fire = (): void => {}
+    }
+  }
+  const display = new SessionCostDisplay({
+    doc: asDocument(fake),
+    scope: () => scopeRoot as unknown as ParentNode | null,
+    observe,
+  })
+  display.start()
+  return { display, fake, trigger }
+}
+
+// ---------------------------------------------------------------------------
+// The pill
+// ---------------------------------------------------------------------------
+
+test('the cost is appended to the shipped pill and removed on dispose', () => {
+  const composer = new FakeElement('div')
+  const { button } = shippedPill(composer)
+  const { display, fake } = makeDisplay(composer)
+
+  display.sync(view({ uncachedInputTokens: 1_000_000, outputTokens: 500_000 }))
+  const injected = button.querySelector('[data-composer-session-cost]')
+  assert.ok(injected, 'the cost run is appended to the shipped button')
+  // Appended LAST, so the shipped label stays first in the text run.
+  assert.equal(button.childNodes[button.childNodes.length - 1], injected)
+  assert.equal(injected.textContent.includes('$2.00'), true, `the amount is in the run: ${injected.textContent}`)
+  // The description is how the figure reaches assistive tech, because the
+  // shipped button's own aria-label is computed by the harness and cannot be
+  // extended.
+  assert.equal(button.getAttribute('aria-describedby'), 'dsh-commandcode-session-cost')
+  assert.ok(fake.body.querySelector('#dsh-commandcode-session-cost'), 'the description node is in the page')
+
+  display.dispose()
+  assert.equal(button.querySelector('[data-composer-session-cost]'), null, 'disposal removes the run')
+  assert.equal(button.hasAttribute('aria-describedby'), false, 'and gives the attribute back')
+})
+
+test("a shipped aria-describedby is never overwritten or taken away", () => {
+  const composer = new FakeElement('div')
+  const { button } = shippedPill(composer)
+  button.setAttribute('aria-describedby', 'harness-own-description')
+  const { display } = makeDisplay(composer)
+
+  display.sync(view({ uncachedInputTokens: 1_000_000 }))
+  assert.equal(button.getAttribute('aria-describedby'), 'harness-own-description', 'the harness description wins')
+
+  display.dispose()
+  assert.equal(
+    button.getAttribute('aria-describedby'),
+    'harness-own-description',
+    'and is still there after we leave',
+  )
+})
+
+test('a re-rendered pill is re-decorated instead of losing the figure', () => {
+  const composer = new FakeElement('div')
+  const first = shippedPill(composer)
+  const { display } = makeDisplay(composer)
+
+  display.sync(view({ uncachedInputTokens: 1_000_000 }))
+  assert.ok(first.button.querySelector('[data-composer-session-cost]'))
+
+  // React remounts the row: the whole stats root is replaced, so our node goes
+  // with the old tree. The next sync must notice and re-attach to the NEW row —
+  // assuming the old one survived would leave the figure silently gone.
+  first.button.detach()
+  composer.removeChild(first.root)
+  const fresh = shippedPill(composer)
+  display.sync(view({ uncachedInputTokens: 1_000_000 }))
+  assert.ok(fresh.button.querySelector('[data-composer-session-cost]'), 'the figure follows the shipped row')
+})
+
+test('a pill whose label text was rewritten keeps its figure', () => {
+  const composer = new FakeElement('div')
+  const { button } = shippedPill(composer)
+  const { display } = makeDisplay(composer)
+
+  display.sync(view({ uncachedInputTokens: 1_000_000 }))
+  const before = button.querySelector('[data-composer-session-cost]')
+
+  // React rewrites the LABEL's own text on every token update. Our run is a
+  // sibling node, so it survives: this pins that an ordinary text update does
+  // not detach the cost, which is the case the module's own comment describes.
+  const label = button.childNodes[0] as FakeElement
+  label.textContent = '1.3M tokens'
+  display.sync(view({ uncachedInputTokens: 1_100_000 }))
+  assert.equal(button.querySelector('[data-composer-session-cost]'), before, 'the same node stays put')
+})
+
+test('an unpriceable session removes the injected figure', () => {
+  const composer = new FakeElement('div')
+  const { button } = shippedPill(composer)
+  const { display } = makeDisplay(composer)
+
+  display.sync(view({ uncachedInputTokens: 1_000_000 }))
+  assert.ok(button.querySelector('[data-composer-session-cost]'))
+
+  // `undefined` is "nothing honest to show": the pill must go back to exactly
+  // the shipped markup rather than showing a stale or zero figure.
+  display.sync(undefined)
+  assert.equal(button.querySelector('[data-composer-session-cost]'), null)
+  assert.equal(button.hasAttribute('aria-describedby'), false)
+})
+
+test('a missing shipped pill is a no-op that never throws', () => {
+  const composer = new FakeElement('div')
+  const { display } = makeDisplay(composer)
+  // No `[data-composer-stats]` anywhere: an engine whose markup moved.
+  assert.doesNotThrow(() => display.sync(view({ uncachedInputTokens: 1_000_000 })))
+  assert.equal(composer.querySelector('[data-composer-session-cost]'), null)
+  display.dispose()
+})
+
+// ---------------------------------------------------------------------------
+// The usage dialog
+// ---------------------------------------------------------------------------
+
+test('a confirming dialog gets a price per row and gives every node back', () => {
+  const composer = new FakeElement('div')
+  shippedPill(composer)
+  const { display, fake } = makeDisplay(composer)
+
+  // 1M uncached in, 500K out, 0 cache read/write: the shipped rows are
+  // cacheHit (a percentage), uncachedInput, cacheRead, output — and the
+  // predicted counts must match the cells for the shape to confirm.
+  const dl = shippedDialog(fake.body, ['0%', '1,000,000 tok', '0 tok', '500,000 tok'])
+  display.sync(view({ uncachedInputTokens: 1_000_000, outputTokens: 500_000 }))
+
+  const prices = dl.querySelectorAll('[data-session-cost-price]')
+  assert.equal(prices.length, 3, 'the three counted rows are priced; the percentage row is not')
+  const dds = [...dl.childNodes].filter((node): node is FakeElement => node instanceof FakeElement && node.tagName === 'DD')
+  assert.equal(dds[1]?.querySelector('[data-session-cost-price]')?.textContent, '$1.00')
+  assert.equal(dds[3]?.querySelector('[data-session-cost-price]')?.textContent, '$1.00')
+  assert.equal(dds[0]?.querySelector('[data-session-cost-price]'), null, 'the cache-hit row is never priced')
+
+  display.dispose()
+  assert.equal(dl.querySelectorAll('[data-session-cost-price]').length, 0, 'disposal removes every price')
+})
+
+test('a dialog whose counts do not confirm is left exactly as it shipped', () => {
+  const composer = new FakeElement('div')
+  shippedPill(composer)
+  const { display, fake } = makeDisplay(composer)
+
+  // The cells show different counts than the view predicts, so this is not the
+  // dialog we think it is (another build, another session) and NOTHING may be
+  // decorated — pricing the wrong row would be worse than showing no price.
+  const dl = shippedDialog(fake.body, ['0%', '999 tok', '0 tok', '500,000 tok'])
+  display.sync(view({ uncachedInputTokens: 1_000_000, outputTokens: 500_000 }))
+  assert.equal(dl.querySelectorAll('[data-session-cost-price]').length, 0)
+})
+
+test('a dialog that opens later is decorated when the observer fires', () => {
+  const composer = new FakeElement('div')
+  shippedPill(composer)
+  const { display, fake, trigger } = makeDisplay(composer)
+
+  // The dialog is portaled on open, so it does not exist when the view lands.
+  display.sync(view({ uncachedInputTokens: 1_000_000, outputTokens: 500_000 }))
+  const dl = shippedDialog(fake.body, ['0%', '1,000,000 tok', '0 tok', '500,000 tok'])
+  assert.equal(dl.querySelectorAll('[data-session-cost-price]').length, 0, 'nothing is injected before it opens')
+
+  trigger.fire()
+  assert.equal(dl.querySelectorAll('[data-session-cost-price]').length, 3, 'the observer decorates the opened dialog')
+})
+
+test('a closed dialog gives its hidden rows and styles back', () => {
+  const composer = new FakeElement('div')
+  shippedPill(composer)
+  const { display, fake, trigger } = makeDisplay(composer)
+
+  // A session with real priced spend AND cache-write tokens whose rate the page
+  // does not publish — a mixed session, which is what makes the cache-write row
+  // hidden. (A cache-write-ONLY session on such a model is the case the view
+  // refuses to render at all, so it could not reach the dialog.)
+  const noCacheWrite: CommandCodePriceTable = {
+    models: [{ id: 'commandcode/test-flat', slug: 'test-flat', inputCost: 1, outputCost: 2, cacheReadCost: 0.1 }],
+    peakHours: [[1, 4], [6, 10]],
+  }
+  const mixed = buildSessionCostView({
+    usage: { uncachedInputTokens: 1_000_000, cacheWriteTokens: 7 },
+    selection: SELECTION,
+    table: noCacheWrite,
+    now: Date.UTC(2026, 8, 16, 5, 0, 0),
+  })
+  assert.ok(mixed)
+  assert.equal(mixed.unpricedCacheWriteTokens, 7)
+
+  const dl = shippedDialog(fake.body, ['0%', '1,000,000 tok', '0 tok', '7 tok', '0 tok'])
+  display.sync(mixed)
+  const dds = [...dl.childNodes].filter((node): node is FakeElement => node instanceof FakeElement && node.tagName === 'DD')
+  assert.equal(dds[3]?.style.display, 'none', 'the unpriced row is hidden')
+
+  // The dialog closes: the harness takes its nodes back, and the style we set on
+  // a detached node must not linger on a recycled one.
+  fake.body.removeChild(dl)
+  trigger.fire()
+  // `delete` leaves no own property at all, so the honest observable is
+  // presence/absence of the inline style rather than a particular falsy value.
+  // `''` is the DOM's canonical "no inline style", which is what the display
+  // writes back — the row returns to the sheet's own styling rather than
+  // staying hidden.
+  assert.equal(dds[3]?.style.display, '', 'the hidden style is given back on close')
+})
+
+test('disposal stops observing and detaches the injected nodes', () => {
+  const composer = new FakeElement('div')
+  shippedPill(composer)
+  const { display, fake, trigger } = makeDisplay(composer)
+
+  display.sync(view({ uncachedInputTokens: 1_000_000, outputTokens: 500_000 }))
+  const dl = shippedDialog(fake.body, ['0%', '1,000,000 tok', '0 tok', '500,000 tok'])
+  trigger.fire()
+  assert.equal(dl.querySelectorAll('[data-session-cost-price]').length, 3)
+
+  display.dispose()
+  // The observer is detached, so a later dialog open cannot re-inject.
+  const later = shippedDialog(fake.body, ['0%', '1,000,000 tok', '0 tok', '500,000 tok'])
+  trigger.fire()
+  assert.equal(later.querySelectorAll('[data-session-cost-price]').length, 0)
+  // And disposal is safe to call again.
+  assert.doesNotThrow(() => display.dispose())
+})
+
+test('the copy the injection renders is the copy the projection owns', () => {
+  // Guards against the display layer growing its own strings: the title it puts
+  // on the pill must start with the shared label.
+  const composer = new FakeElement('div')
+  const { button } = shippedPill(composer)
+  const { display } = makeDisplay(composer)
+  display.sync(view({ uncachedInputTokens: 1_000_000 }))
+  const injected = button.querySelector('[data-composer-session-cost]') as FakeElement
+  assert.ok(injected, 'the run is injected')
+  // `title` is a DOM PROPERTY, not an attribute: asserting on
+  // `getAttribute('title')` would have looked correct while checking nothing.
+  assert.equal(
+    (injected as unknown as { title: string }).title.startsWith(SESSION_COST_COPY.panelTitle),
+    true,
+    'the tooltip starts with the shared label',
+  )
+  // And the tooltip must not carry the separators of clauses that were empty.
+  assert.equal((injected as unknown as { title: string }).title.includes('·  ·'), false)
+})
diff --git a/tests/session-cost.test.ts b/tests/session-cost.test.ts
new file mode 100644
index 0000000..18ac39d
--- /dev/null
+++ b/tests/session-cost.test.ts
@@ -0,0 +1,324 @@
+import { withRequestFacts } from './cost-fixture.ts'
+/**
+ * Session-cost calculation tests (node:test, zero deps). Run with `npm test`.
+ *
+ * `buildSessionCostView()` owns every number and every string the composer's
+ * cost readout shows, so this file is where the three load-bearing rules are
+ * pinned: only Command Code usage is priced, a missing rate is never invented,
+ * and an unpriceable session renders nothing at all rather than `$0.00`.
+ */
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+import {
+  SESSION_COST_COPY,
+  buildSessionCostView,
+  isPeakHour,
+  sessionCostAmount,
+  sessionCostPillRun,
+  sessionCostRowDecorations,
+  type SessionCostInput,
+} from '../src/client/session-cost.ts'
+import type { CommandCodePriceTable } from '../src/usage-wire.ts'
+
+const PEAK_HOURS: Array<[number, number]> = [[1, 4], [6, 10]]
+
+/** The vendored row for a flat-priced model, simplified for arithmetic. */
+const FLAT: CommandCodePriceTable = {
+  models: [
+    {
+      id: 'commandcode/test-flat',
+      slug: 'test-flat',
+      inputCost: 1,
+      outputCost: 2,
+      cacheReadCost: 0.1,
+      cacheWriteCost: 1.25,
+    },
+  ],
+  peakHours: PEAK_HOURS,
+}
+
+/** A time-of-day model: off-peak is half the peak rates. */
+const HOURLY: CommandCodePriceTable = {
+  models: [
+    {
+      id: 'deepseek/deepseek-v4-pro',
+      slug: 'deepseek-v4-pro',
+      inputCost: 0.66,
+      outputCost: 1.98,
+      cacheReadCost: 0.022,
+      peak: { inputCost: 1.32, outputCost: 3.96, cacheReadCost: 0.044 },
+    },
+  ],
+  peakHours: PEAK_HOURS,
+}
+
+/** Wednesday 2026-09-16, 02:00 UTC — inside the 01–04 window. */
+const PEAK_AT = Date.UTC(2026, 8, 16, 2, 0, 0)
+/** Wednesday 2026-09-16, 05:00 UTC — between the two windows. */
+const OFF_PEAK_AT = Date.UTC(2026, 8, 16, 5, 0, 0)
+/** Saturday 2026-09-19, 02:00 UTC — inside the hours, but a weekend. */
+const WEEKEND_AT = Date.UTC(2026, 8, 19, 2, 0, 0)
+
+const SELECTION = {
+  lastUsed: { provider: 'commandcode', model: 'commandcode/test-flat' },
+  next: { provider: 'commandcode', model: 'commandcode/test-flat' },
+}
+
+function input(overrides: Partial<SessionCostInput> = {}): SessionCostInput {
+  return withRequestFacts({
+    usage: { uncachedInputTokens: 1_000_000, outputTokens: 500_000, cacheReadTokens: 0, cacheWriteTokens: 0 },
+    selection: SELECTION,
+    table: FLAT,
+    now: OFF_PEAK_AT,
+    ...overrides,
+  })
+}
+
+test('a priced session totals each bucket at its own published rate', () => {
+  const view = buildSessionCostView(input({
+    usage: {
+      uncachedInputTokens: 1_000_000,
+      outputTokens: 500_000,
+      cacheReadTokens: 2_000_000,
+      cacheWriteTokens: 0,
+    },
+  }))
+  assert.ok(view)
+  // 1M × $1 + 0.5M × $2 + 2M × $0.10 = $1 + $1 + $0.20
+  assert.equal(view.total, 2.2)
+  assert.equal(view.value, '≈$2.20')
+  assert.equal(view.free, false)
+})
+
+test('nothing to show renders nothing, never a confident $0.00', () => {
+  const cases: Array<[string, SessionCostInput]> = [
+    ['no usage yet', input({ usage: undefined })],
+    ['all buckets zero', input({ usage: { uncachedInputTokens: 0, outputTokens: 0 } })],
+    ['no price table', input({ table: undefined })],
+    ['an empty price table', input({ table: { models: [], peakHours: PEAK_HOURS } })],
+    ['no selection', input({ selection: undefined })],
+    ['an unknown model', input({ selection: { lastUsed: { provider: 'commandcode', model: 'nope' }, next: null } })],
+    ['another provider', input({ selection: { lastUsed: { provider: 'deepseek', model: 'commandcode/test-flat' }, next: null } })],
+    ['no model recorded', input({ selection: { lastUsed: null, next: null } })],
+  ]
+  for (const [label, value] of cases) {
+    assert.equal(buildSessionCostView(value), undefined, label)
+  }
+})
+
+test('peak rates apply inside a weekday window and off-peak rates outside it', () => {
+  // One bucket at a time, so each assertion names a single rate: 1M uncached
+  // input tokens cost the input rate of whichever half is in force.
+  const at = (now: number) => buildSessionCostView(input({
+    table: HOURLY,
+    now,
+    usage: { uncachedInputTokens: 1_000_000 },
+    selection: { lastUsed: { provider: 'commandcode', model: 'deepseek/deepseek-v4-pro' }, next: null },
+  }))
+
+  const peak = at(PEAK_AT)
+  assert.ok(peak)
+  assert.equal(peak.peak, true)
+  assert.equal(peak.total, 1.32)
+  assert.ok(peak.notes.includes(SESSION_COST_COPY.peakRates))
+
+  const offPeak = at(OFF_PEAK_AT)
+  assert.ok(offPeak)
+  assert.equal(offPeak.peak, false)
+  assert.equal(offPeak.total, 0.66)
+  assert.ok(offPeak.notes.includes(SESSION_COST_COPY.offPeakRates))
+
+  // Weekends are fully off-peak even inside the hour ranges.
+  const weekend = at(WEEKEND_AT)
+  assert.ok(weekend)
+  assert.equal(weekend.peak, false)
+  assert.equal(weekend.total, 0.66)
+})
+
+test('isPeakHour() is end-exclusive and weekday-only', () => {
+  assert.equal(isPeakHour(Date.UTC(2026, 8, 16, 0, 59), PEAK_HOURS), false)
+  assert.equal(isPeakHour(Date.UTC(2026, 8, 16, 1, 0), PEAK_HOURS), true)
+  assert.equal(isPeakHour(Date.UTC(2026, 8, 16, 3, 59), PEAK_HOURS), true)
+  assert.equal(isPeakHour(Date.UTC(2026, 8, 16, 4, 0), PEAK_HOURS), false)
+  assert.equal(isPeakHour(Date.UTC(2026, 8, 16, 6, 0), PEAK_HOURS), true)
+  assert.equal(isPeakHour(Date.UTC(2026, 8, 16, 10, 0), PEAK_HOURS), false)
+  assert.equal(isPeakHour(WEEKEND_AT, PEAK_HOURS), false)
+})
+
+test('an unpublished cache-write rate is surfaced, not guessed, and the total stays a floor', () => {
+  const table: CommandCodePriceTable = {
+    models: [{ id: 'commandcode/test-flat', slug: 'test-flat', inputCost: 1, outputCost: 2, cacheReadCost: 0.1 }],
+    peakHours: PEAK_HOURS,
+  }
+  const view = buildSessionCostView(input({ table, usage: { uncachedInputTokens: 1_000_000, cacheWriteTokens: 500_000 } }))
+  assert.ok(view)
+  assert.equal(view.unpricedCacheWriteTokens, 500_000)
+  assert.ok(view.notes.includes(SESSION_COST_COPY.unpricedCacheWrite))
+  // The unpriced bucket contributes nothing rather than being charged at the
+  // input rate, so the total is a FLOOR.
+  assert.equal(view.total, 1)
+  const write = view.rows.find((row) => row.key === 'cacheWrite')
+  assert.ok(write)
+  assert.equal(write.tokens, 500_000)
+  assert.equal(write.costText, undefined)
+})
+
+test('a free model reads as Free with zero rows priced', () => {
+  const table: CommandCodePriceTable = {
+    models: [{ id: 'commandcode/test-flat', slug: 'test-flat', inputCost: 0, outputCost: 0, cacheReadCost: 0, free: true }],
+    peakHours: PEAK_HOURS,
+  }
+  const view = buildSessionCostView(input({ table }))
+  assert.ok(view)
+  assert.equal(view.free, true)
+  assert.equal(view.value, SESSION_COST_COPY.free)
+  assert.equal(view.total, 0)
+  // A free session carries no rate-half note: there is no rate in force.
+  assert.ok(!view.notes.includes(SESSION_COST_COPY.peakRates))
+  for (const decoration of sessionCostRowDecorations(view)) {
+    assert.equal(decoration.amount, undefined)
+  }
+})
+
+test('a pending model selection does not change the recorded request cost', () => {
+  const view = buildSessionCostView(input({
+    selection: {
+      lastUsed: { provider: 'commandcode', model: 'commandcode/test-flat' },
+      next: { provider: 'commandcode', model: 'commandcode/other' },
+    },
+  }))
+  assert.ok(view)
+  assert.equal(view.approximate, true)
+  assert.equal(view.value, `${SESSION_COST_COPY.approximate}$2.00`)
+  assert.ok(view.notes.includes('estimate from published rates, not the provider invoice'))
+})
+
+test('published-rate totals remain labelled as estimates', () => {
+  const view = buildSessionCostView(input({
+    selection: {
+      lastUsed: { provider: 'commandcode', model: 'commandcode/test-flat' },
+      next: { provider: 'commandcode', model: 'commandcode/test-flat' },
+    },
+  }))
+  assert.ok(view)
+  assert.equal(view.approximate, true)
+})
+
+test('the lookup index answers the page slug as a second key', () => {
+  // A row no catalog model claims is served under the page's slug, so a session
+  // reporting that slug still prices.
+  const view = buildSessionCostView(input({
+    selection: { lastUsed: { provider: 'commandcode', model: 'test-flat' }, next: null },
+  }))
+  assert.ok(view)
+  assert.equal(view.total, 2)
+})
+
+test('sessionCostAmount() states a bound instead of a flat $0.0000', () => {
+  assert.equal(sessionCostAmount(0), '$0.00')
+  assert.equal(sessionCostAmount(-1), '$0.00')
+  assert.equal(sessionCostAmount(0.000_05), '<$0.0001')
+  assert.equal(sessionCostAmount(0.0001), '$0.0001')
+  // From a tenth of a cent up, the amount reads as cents — the same convention
+  // the account panel uses for billing windows.
+  assert.equal(sessionCostAmount(0.009), '$0.0090')
+  assert.equal(sessionCostAmount(0.0123), '$0.01')
+  assert.equal(sessionCostAmount(1.234), '$1.23')
+})
+
+test('the pill run keeps the separator node the shipped pill styles', () => {
+  const view = buildSessionCostView(input())
+  assert.ok(view)
+  assert.deepEqual(sessionCostPillRun(view), { separator: SESSION_COST_COPY.separator, value: '≈$2.00' })
+})
+
+test('dialog rows are decorated positionally, and unpriced rows stay untouched', () => {
+  const view = buildSessionCostView(input({
+    usage: { uncachedInputTokens: 1_000_000, outputTokens: 500_000, cacheReadTokens: 2_000_000, cacheWriteTokens: 7 },
+  }))
+  assert.ok(view)
+  const rows = sessionCostRowDecorations(view)
+  assert.deepEqual(rows.map((row) => row.row), ['cacheHit', 'uncachedInput', 'cacheRead', 'cacheWrite', 'output'])
+  // Every row carries the token count the shipped cell must be showing, which
+  // is how the display layer proves the position is right before decorating.
+  assert.equal(rows[1]?.tokens, 1_000_000)
+  assert.equal(rows[2]?.tokens, 2_000_000)
+  assert.equal(rows[3]?.tokens, 7)
+  assert.equal(rows[4]?.tokens, 500_000)
+  // The cache-hit row is a percentage, so it is never priced.
+  assert.equal(rows[0]?.tokens, undefined)
+  assert.equal(rows[0]?.amount, undefined)
+  // Cache-write tokens exist AND this table publishes their rate, so the row is
+  // kept and priced: its cost is already inside the pill's total, and hiding it
+  // would leave the rows unable to explain the figure above them.
+  assert.equal(rows[3]?.hidden, false)
+  // 7 tokens at $1.25/1M is far below a cent, so it is stated as a bound.
+  assert.equal(rows[3]?.amount, '<$0.0001')
+  // A priced row carries its own amount, formatted for its magnitude.
+  assert.equal(rows[1]?.amount, '$1.00')
+})
+
+test('an unpriced cache-write row is hidden rather than shown as a blank or $0.00', () => {
+  // The HOURLY table publishes no cache-write rate, so those tokens cannot be
+  // priced: the row is hidden and the note explains it, rather than inventing a
+  // figure or leaving an empty cell in the dialog's grid.
+  const view = buildSessionCostView(input({
+    table: HOURLY,
+    selection: { lastUsed: { provider: 'commandcode', model: 'deepseek/deepseek-v4-pro' }, next: null },
+    usage: { uncachedInputTokens: 1_000_000, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 7 },
+  }))
+  assert.ok(view)
+  const rows = sessionCostRowDecorations(view)
+  const cacheWrite = rows.find((row) => row.row === 'cacheWrite')
+  assert.ok(cacheWrite)
+  assert.equal(cacheWrite.hidden, true)
+  assert.equal(cacheWrite.amount, undefined)
+  // The tokens are still reported as unpriced, and the total stays a floor.
+  assert.equal(view.unpricedCacheWriteTokens, 7)
+  assert.equal(view.approximate, true)
+})
+
+test('a session whose every billed token is unpriced renders nothing, not $0.00', () => {
+  // The regression this pins: cache-write-only usage on a model with no
+  // published cache-write rate. The buckets are non-zero, so the old all-zero
+  // guard passed, every priced cost was 0 for LACK OF A RATE, and the pill
+  // announced a confident `$0.00`. Nothing to price means nothing to show.
+  const unpriced = buildSessionCostView(input({
+    table: HOURLY,
+    selection: { lastUsed: { provider: 'commandcode', model: 'deepseek/deepseek-v4-pro' }, next: null },
+    usage: { cacheWriteTokens: 500_000 },
+  }))
+  assert.equal(unpriced, undefined)
+
+  // The same shape on a table that DOES publish the rate is a real figure, so
+  // the guard is about pricing, not about which bucket was used.
+  const priced = buildSessionCostView(input({ usage: { cacheWriteTokens: 500_000 } }))
+  assert.ok(priced)
+  assert.equal(priced.total, 0.625)
+})
+
+test('the cache-hit row is absent when no prompt token was billed', () => {
+  const view = buildSessionCostView(input({ usage: { outputTokens: 500_000 } }))
+  assert.ok(view)
+  assert.deepEqual(sessionCostRowDecorations(view).map((row) => row.row), ['uncachedInput', 'cacheRead', 'output'])
+})
+
+test('a priced session below a cent still shows a figure, not nothing', () => {
+  // The guard above must key on "no rate", never on "tiny amount": 100 output
+  // tokens on the flat table is $0.0002 — real priced spend. A guard written as
+  // `total > 0` would swallow it into a blank pill.
+  const view = buildSessionCostView(input({ usage: { outputTokens: 100 } }))
+  assert.ok(view)
+  assert.equal(view.total, 0.0002)
+  assert.equal(view.value, '≈$0.0002')
+  assert.equal(view.unpricedCacheWriteTokens, 0)
+})
+
+test('spend too small for four decimals reads as a bound, not as $0.0000', () => {
+  const view = buildSessionCostView(input({ usage: { outputTokens: 10 } }))
+  assert.ok(view)
+  assert.equal(view.total, 0.00002)
+  assert.equal(view.value, '≈<$0.0001')
+})
diff --git a/tests/usage-client.test.ts b/tests/usage-client.test.ts
index 5246392..1de7f39 100644
--- a/tests/usage-client.test.ts
+++ b/tests/usage-client.test.ts
@@ -11,6 +11,7 @@ import assert from 'node:assert/strict'
 
 import {
   CommandCodeUsageController,
+  usageCardState,
   formatMoney,
   formatMoneyExact,
   formatResetAt,
@@ -176,3 +177,28 @@ test('formatResetAt renders a local time and empty for unset', () => {
   assert.equal(formatResetAt(-5), '')
   assert.notEqual(formatResetAt(1_800_000_000_000), '')
 })
+
+test('usage card fetches Host facts without browser credentials and keeps manual retry available', async () => {
+  let calls = 0
+  const controller = new CommandCodeUsageController({ models: async () => ({ ok: true, value: { models: [] } }), report: async () => {
+    calls++
+    return { ok: true, value: makeReport() }
+  } })
+  const initial = usageCardState(controller.state())
+  assert.equal(initial.shouldRefresh, true)
+  assert.equal(initial.noKey, false, 'no report is not proof that no key exists')
+  if (initial.shouldRefresh) await controller.refresh()
+  assert.equal(calls, 1)
+  assert.equal(usageCardState(controller.state()).noKey, false, 'literal/CLI key availability comes from Host')
+  assert.equal(usageCardState(controller.state()).shouldRefresh, false)
+  const report = makeReport()
+  report.accounts[0]!.configured = false
+  const absent = usageCardState({ ...controller.state(), report })
+  assert.equal(absent.noKey, true)
+  assert.equal(absent.loading, false, 'refresh stays enabled even after a no-key report')
+  const failed = usageCardState({ ...controller.state(), report: undefined, status: 'error' })
+  assert.equal(failed.noKey, false)
+  assert.equal(failed.shouldRefresh, false, 'a failure must not cause an automatic request loop')
+  assert.equal(failed.loading, false)
+  controller.dispose()
+})
diff --git a/tests/usage-wire.test.ts b/tests/usage-wire.test.ts
index 9579009..8bb04b7 100644
--- a/tests/usage-wire.test.ts
+++ b/tests/usage-wire.test.ts
@@ -150,7 +150,7 @@ test('schema rejects a window limit with a non-boolean exceeded flag', () => {
   const report = makeReport()
   const bad = wrap(makeAccount({
     ...report,
-    credits: { ...report.credits!, fiveHour: { ...report.credits!.fiveHour, exceeded: 'yes' as unknown as boolean } },
+    credits: { ...report.credits!, fiveHour: { ...report.credits!.fiveHour!, exceeded: 'yes' as unknown as boolean } },
   }))
   assert.throws(() => usageReportSchema.parse(bad), /fiveHour\.exceeded/)
 })
@@ -240,3 +240,76 @@ test('models descriptor targets the commandcodeUsage service and models method',
   assert.equal(MODELS_DESCRIPTOR.namespace, 'commandcode')
   assert.equal(MODELS_DESCRIPTOR.method, 'models')
 })
+
+// ---------------------------------------------------------------------------
+// Price-table Remote (`commandcode/prices`)
+// ---------------------------------------------------------------------------
+
+import { PRICES_DESCRIPTOR, PRICES_ENDPOINT, PRICES_REMOTE_CONTRIBUTION, pricesSchema } from '../src/usage-wire.ts'
+
+test('prices schema parses rates, the optional peak block, and the windows', () => {
+  const parsed = pricesSchema.parse({
+    models: [
+      { id: 'deepseek/deepseek-v4-pro', slug: 'deepseek-v4-pro', inputCost: 0.66, outputCost: 1.98, cacheReadCost: 0.022,
+        peak: { inputCost: 1.32, outputCost: 3.96, cacheReadCost: 0.044 } },
+      { id: 'meituan/LongCat-2.0:free', slug: 'meituan/LongCat-2.0:free', inputCost: 0, outputCost: 0, cacheReadCost: 0, free: true },
+    ],
+    peakHours: [[1, 4], [6, 10]],
+  })
+  assert.deepEqual(parsed.peakHours, [[1, 4], [6, 10]])
+  assert.equal(parsed.models[0]?.peak?.inputCost, 1.32)
+  // A flat row carries no peak block: that absence IS the flat-price signal.
+  assert.equal(parsed.models[1]?.peak, undefined)
+  assert.equal(parsed.models[1]?.free, true)
+})
+
+test('prices schema keeps a missing cache-write rate missing', () => {
+  const parsed = pricesSchema.parse({
+    models: [{ id: 'a', slug: 'a', inputCost: 1, outputCost: 2, cacheReadCost: 0.1 }],
+    peakHours: [],
+  })
+  assert.equal(parsed.models[0]?.cacheWriteCost, undefined)
+
+  const withRate = pricesSchema.parse({
+    models: [{ id: 'a', slug: 'a', inputCost: 1, outputCost: 2, cacheReadCost: 0.1, cacheWriteCost: 1.25 }],
+    peakHours: [],
+  })
+  assert.equal(withRate.models[0]?.cacheWriteCost, 1.25)
+})
+
+test('prices schema rejects a malformed table', () => {
+  assert.throws(() => pricesSchema.parse({}), /models/)
+  assert.throws(() => pricesSchema.parse({ models: [], peakHours: 'soon' }), /peakHours/)
+  assert.throws(() => pricesSchema.parse({ models: [], peakHours: [[1]] }), /peakHours\[\]/)
+  assert.throws(() => pricesSchema.parse({ models: [], peakHours: [['1', 4]] }), /peakHours\[\]/)
+  // A present-but-non-numeric rate is a contract violation, not a zero.
+  assert.throws(
+    () => pricesSchema.parse({ models: [{ id: 'a', slug: 'a', inputCost: 'free', outputCost: 2, cacheReadCost: 0.1 }], peakHours: [] }),
+    /model\.inputCost/,
+  )
+  assert.throws(
+    () => pricesSchema.parse({
+      models: [{ id: 'a', slug: 'a', inputCost: 1, outputCost: 2, cacheReadCost: 0.1, peak: { inputCost: 1 } }],
+      peakHours: [],
+    }),
+    /model\.peak\.outputCost/,
+  )
+})
+
+test('prices descriptor targets the commandcodeUsage service and prices method', () => {
+  assert.equal(PRICES_DESCRIPTOR.id, `@mars-sea/dsh-commandcode-provider#${PRICES_ENDPOINT}`)
+  assert.equal(PRICES_DESCRIPTOR.service, 'commandcodeUsage')
+  assert.equal(PRICES_DESCRIPTOR.namespace, 'commandcode')
+  assert.equal(PRICES_DESCRIPTOR.method, 'prices')
+  assert.equal(PRICES_REMOTE_CONTRIBUTION.descriptors[0], PRICES_DESCRIPTOR)
+})
+
+test('price wire retains all context bands and rejects gaps in ordered boundaries', () => {
+  const rate = { inputCost: 1, outputCost: 2, cacheReadCost: .1 }
+  const parse = (contextTiers: unknown) => pricesSchema.parse({ models: [{ id: 'tiered', slug: 'tiered', ...rate, contextTiers }], peakHours: [] })
+  const tiers = [{ ...rate, maxContext: 32000 }, { ...rate, inputCost: 4 }]
+  assert.deepEqual(parse(tiers).models[0]?.contextTiers, tiers)
+  for (const invalid of [[], [{ ...rate, maxContext: 32000 }], [{ ...rate }, { ...rate }], [{ ...rate, maxContext: 2 }, { ...rate, maxContext: 1 }, rate]]) {
+    assert.throws(() => parse(invalid), /contextTier/)
+  }
+})