@dan-ai-studio/dshopencodego 0.1.55 → 0.1.57

package/README.en.md

@@ -109,6 +109,8 @@ Configuration lives in the profile's `cordis.patch.yml`:
       some-legacy-model: null                 # a whole-entry null: both fields explicitly fall back to the catalog values
     modelProtocols:                           # last resort: per-model protocol override
       some-new-model: openai-responses        # the only legal values are anthropic-messages / openai-completions / openai-responses
+    pinnedAddresses:                           # fixed IP: host -> address (only the gateway host counts)
+      opencode.ai: 104.18.32.47              # IPv4 or IPv6; an invalid or absent address uses the system DNS
     retryPolicy:                              # optional: this route's retry policy, executed by dsh-llm-retry
       mode: normal                            # or always (retry every failure; maxRetries is ignored)
       maxRetries: 2                           # default 5
@@ -141,6 +143,17 @@ A model that does not accept image input is rejected before the request is sent
 
 **Retries**: `retryPolicy` is optional — omit it and the host's own default applies. When set, the optional `dsh-llm-retry` plugin executes it, and a malformed policy fails where it is written rather than at the first failure.
 
+**Fixed IP**: `pinnedAddresses` pins the gateway's name to one address, so the requests reach a closer edge — the edge the system resolves to is sometimes far away, and every request pays for that distance.
+
+- **Only the resolution changes**: the name in the request, the host header, the TLS SNI and the certificate check all stay as they are; only the address in the socket is decided. The address therefore has to serve that name, because the certificate is issued for `opencode.ai`.
+- **Only the gateway's own name counts**: the key must be the host of `baseURL` (`opencode.ai` by default). No other name is on this plugin's request path, so a pin for one has no effect. `models.dev` and the provider's documentation always use the system DNS.
+- **Where it applies**: the model API request, the gateway listing (`/models`), and the `/usage` reading — the three requests that go to the gateway.
+- **A gone address falls back**: when the pinned address cannot be reached (connection refused, route unreachable, TLS handshake failed), the request is sent **once more** through the system DNS, and the address is remembered as spent so the later requests go straight to the system's resolution. **A wrong address never costs more than no address**: only a request that was never sent is sent again.
+- **Unset means untouched**: with no `pinnedAddresses`, the plugin uses the system's own fetch and adds nothing to it.
+- **An address that is not an address is ignored**: a typo (`1.2.3.256`, `010.1.1.1`, …) does not fail the request; it is ignored and the request uses the system DNS.
+
+The settings page (**OpenCode Go → Fixed IP**) writes the address for the gateway's current host, refuses an invalid one on the spot, and says "using the system DNS" once the address has been found to be gone.
+
 ## How a model is resolved
 
 Four evidence levels decide how a model is called, first hit wins:
@@ -160,6 +173,8 @@ The gateway's `/v1/models` answers only *which* models exist, never *how* to cal
 - a model the provider **retires** disappears on the next refresh;
 - the bundled catalog is **frozen at the plugin's version** and affects only the quality of the "how to call it" decision, never *which* models exist.
 
+When the gateway is **temporarily unavailable**, the plugin keeps the last listing that succeeded, marks it stale on the page, and retries in the background. The retry rate is governed by a **five-minute back-off** rather than by the TTL, so a gateway that comes back is picked up within five minutes; while it stays down it is asked once, not once per model request. The settings page's Recheck button revalidates at any time and is not bound by that back-off.
+
 The only thing that waits on a plugin release is a missing wire quirk in the pi-ai catalog (DeepSeek's `thinkingFormat`, say) — the model itself is already usable.
 
 ## The model list in the settings page
@@ -247,7 +262,7 @@ npm test            # contract tests against a real local HTTP mock gateway
 
 **Order matters**: `npm run build` must come before `npm test` — `tests/pack-contents.spec.ts` walks every `exports` target, and whether `lib/` exists decides whether that check runs or is silently skipped (it does not fail, it just stops protecting you). `package.json` no longer carries `prepare`, so `npm ci` will not build for you; all three CI workflows run `npm run build` explicitly.
 
-The suite covers configuration validation, the protocol ladder, gateway and online metadata, the catalog projection, the adapter on the wire (all three protocols), Remote contracts and services, session-header invariants, usage windows and the meter, the client controller and usage pill, both halves' mounting and registration, the error mapping for stream idle timeouts and aborts, the exit-code contract of the verification scripts, and several **structural invariants** (inject declarations match the source's reads, peer coverage holds both ways, the READMEs match the manifest, and the READMEs' claims about the upstream match the upstream actually installed). That is **52 test files** — a number `tests/readme-consistency.spec.ts` checks against the `tests/` directory, so it cannot drift.
+The suite covers configuration validation, the protocol ladder, gateway and online metadata, the catalog projection, the adapter on the wire (all three protocols), Remote contracts and services, session-header invariants, usage windows and the meter, the client controller and usage pill, both halves' mounting and registration, the error mapping for stream idle timeouts and aborts, the exit-code contract of the verification scripts, and several **structural invariants** (inject declarations match the source's reads, peer coverage holds both ways, the READMEs match the manifest, and the READMEs' claims about the upstream match the upstream actually installed). That is **57 test files** — a number `tests/readme-consistency.spec.ts` checks against the `tests/` directory, so it cannot drift.
 
 ## Releasing (maintainers)
 

package/README.md

@@ -109,6 +109,8 @@ DSH 桌面端是 Electron 壳 + 完整的 dsh Web 应用，本插件对它同样
       some-legacy-model: null                 # 整条 null：该模型两个字段都显式回退到目录值
     modelProtocols:                           # 最后兜底：逐模型协议覆盖
       some-new-model: openai-responses        # 合法值只有 anthropic-messages / openai-completions / openai-responses
+    pinnedAddresses:                           # 固定 IP：域名 → 地址（只对网关域名生效）
+      opencode.ai: 104.18.32.47              # 可写 IPv4 或 IPv6；不合法或未设置时走系统 DNS
     retryPolicy:                              # 可选：本路由的重试策略（由 dsh-llm-retry 执行）
       mode: normal                            # 也可用 always（对所有失败重试，maxRetries 被忽略）
       maxRetries: 2                           # 默认 5
@@ -141,6 +143,17 @@ API Key 通过 Harness 凭证库提供（引用名 `OPENCODE_GO_API_KEY`），
 
 **重试**：`retryPolicy` 是可选的，不写就用宿主默认。写了就由可选的 `dsh-llm-retry` 插件执行，配置错误在写入时报错而不是等到失败发生。
 
+**固定 IP**：`pinnedAddresses` 把网关域名固定到一个地址，用来接入更近的边缘节点（系统解析到的边缘有时离得很远，而每个请求都要为那段距离付费）。
+
+- **只改解析，不改域名**：请求里的域名、Host 头、TLS 的 SNI 与证书校验全部照旧，只有 socket 连到哪个地址被换掉。因此该地址必须能服务这个域名——证书是发给 `opencode.ai` 的。
+- **只对网关域名生效**：键必须等于 `baseURL` 的域名（默认 `opencode.ai`）。其它名字不在本插件的请求路径上，写了不生效。`models.dev` 与厂商文档始终走系统 DNS。
+- **作用范围**：模型 API 请求、网关 listing（`/models`）、`/usage` 读取——这三类都是发往网关的请求。
+- **地址失效自动回退**：固定地址连不上时（连接被拒、路由不可达、TLS 握手失败），请求会用系统 DNS **重试一次**，并把这个地址记为失效，之后的请求直接走系统 DNS。**填错 IP 不会比不填更糟**：只有"请求还没发出去"才重试，已经送达的请求不会发第二遍。
+- **不设置就是原样**：`pinnedAddresses` 为空时，插件用的就是系统自己的 fetch，不加任何东西。
+- **非法地址被忽略**：写错的 IP（`1.2.3.256`、`010.1.1.1` 等）不会让请求失败，只是被忽略并回退系统 DNS。
+
+设置页（**OpenCode Go → 固定 IP**）里可以直接填地址：填的是网关域名当前对应的那个键，非法地址当场拒绝，地址失效后页面会显示"已回退系统 DNS"。
+
 ## 模型是怎么判定的
 
 一个模型"怎么调"由四级证据决定，先命中先赢：
@@ -160,6 +173,8 @@ API Key 通过 Harness 凭证库提供（引用名 `OPENCODE_GO_API_KEY`），
 - 官方**下线**模型 → 下次刷新即消失；
 - 内置目录**冻结**在插件版本里，仅影响"怎么调"的推断质量，不影响"有哪些"。
 
+网关**临时不可用**时，插件保留上次成功获取的列表并在页面上标注陈旧，同时在后台重试：重试由**5 分钟的退避**控制，而不是等满一个 TTL，所以网关恢复后 5 分钟内列表就会更新；网关持续不可用时，它只被问一次，不会每次模型请求都去问一遍。设置页的「重新检查」随时可以强制重验，不受这个退避限制。
+
 只有当 pi-ai 内置目录**缺了某个模型的线怪癖**（如 DeepSeek 的 `thinkingFormat`）时，才需要等插件同步 pi-ai 的新版本——而模型本身早已可用。
 
 ## 设置页里的模型列表
@@ -247,7 +262,7 @@ npm test            # 契约测试：真实 HTTP mock 网关，断言请求头/
 
 **顺序有讲究**：`npm run build` 要排在 `npm test` 之前——`tests/pack-contents.spec.ts` 会遍历 `exports` 的每个目标，`lib/` 存在与否决定这条检查是执行还是被跳过（不报错，但会少一层保护）。`package.json` 已移除 `prepare`，因此 `npm ci` 不会再替你隐式构建；三个 CI workflow 都显式跑了 `npm run build`。
 
-测试覆盖配置校验、协议阶梯、网关与在线元数据、目录投影、适配器（三种协议的线上请求）、Remote 契约与服务、会话头不变量、用量窗口与计量、客户端控制器与用量组件、两半的挂载与登记、流空闲超时与中止的错误映射、验证脚本的退出码契约、以及几条**结构性不变量**（inject 声明与源码读取一致、peer 覆盖双向、README 与 manifest 一致、README 对上游的断言与实装的上游一致）。共 **52 个测试文件**——这个数字由 `tests/readme-consistency.spec.ts` 对着 `tests/` 目录校验，不会漂移。
+测试覆盖配置校验、协议阶梯、网关与在线元数据、目录投影、适配器（三种协议的线上请求）、Remote 契约与服务、会话头不变量、用量窗口与计量、客户端控制器与用量组件、两半的挂载与登记、流空闲超时与中止的错误映射、验证脚本的退出码契约、以及几条**结构性不变量**（inject 声明与源码读取一致、peer 覆盖双向、README 与 manifest 一致、README 对上游的断言与实装的上游一致）。共 **57 个测试文件**——这个数字由 `tests/readme-consistency.spec.ts` 对着 `tests/` 目录校验，不会漂移。
 
 ## 发布（维护者）
 

package/lib/client.js

@@ -172,6 +172,41 @@ var catalogRemote = {
   ]
 };
 
+// src/network/contract.ts
+function parseNetworkReading(value) {
+  if (value === null || typeof value !== "object") throw new Error("invalid network reading");
+  const row = value;
+  const host = row["host"];
+  if (typeof host !== "string") throw new Error("invalid network reading");
+  const address = row["address"];
+  const failed = row["failed"];
+  return {
+    host,
+    ...typeof address === "string" && address.length > 0 ? { address } : {},
+    ...typeof failed === "boolean" ? { failed } : {}
+  };
+}
+var codec2 = {
+  mode: "strict",
+  typeSymbol: "@dan-ai-studio/dshopencodego#NetworkReading",
+  schema: { parse: parseNetworkReading },
+  create: () => ({ parse: parseNetworkReading })
+};
+var networkRemote = {
+  package: "@dan-ai-studio/dshopencodego",
+  descriptors: [
+    {
+      id: "@dan-ai-studio/dshopencodego#opencodeGoNetwork/readNetwork",
+      service: "opencodeGoNetwork",
+      namespace: "opencodeGoNetwork",
+      method: "readNetwork",
+      invocation: { kind: "direct" },
+      parameters: [],
+      result: codec2
+    }
+  ]
+};
+
 // src/update/contract.ts
 function parseUpdateStatus(value) {
   if (value === null || typeof value !== "object") throw new Error("invalid update reading");
@@ -191,7 +226,7 @@ function parseUpdateStatus(value) {
     checked: row["checked"]
   };
 }
-var codec2 = (typeSymbol, parse) => ({
+var codec3 = (typeSymbol, parse) => ({
   mode: "strict",
   typeSymbol,
   schema: { parse },
@@ -207,7 +242,7 @@ var updateRemote = {
       method: "readUpdate",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec2("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
+      result: codec3("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
     },
     {
       id: "@dan-ai-studio/dshopencodego#opencodeGoUpdate/refreshUpdate",
@@ -216,7 +251,7 @@ var updateRemote = {
       method: "refreshUpdate",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec2("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
+      result: codec3("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
     }
   ]
 };
@@ -282,7 +317,7 @@ function parseGoMeter(value) {
     })
   };
 }
-var codec3 = (typeSymbol, parse) => ({
+var codec4 = (typeSymbol, parse) => ({
   mode: "strict",
   typeSymbol,
   schema: { parse },
@@ -298,7 +333,7 @@ var usageRemote = {
       method: "readWindows",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec3("@dan-ai-studio/dshopencodego#GoUsageWindows", parseUsageWindows)
+      result: codec4("@dan-ai-studio/dshopencodego#GoUsageWindows", parseUsageWindows)
     },
     {
       id: "@dan-ai-studio/dshopencodego#opencodeGoUsage/readMeter",
@@ -307,7 +342,7 @@ var usageRemote = {
       method: "readMeter",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec3("@dan-ai-studio/dshopencodego#GoMeter", parseGoMeter)
+      result: codec4("@dan-ai-studio/dshopencodego#GoMeter", parseGoMeter)
     }
   ]
 };
@@ -324,6 +359,15 @@ var en = {
   keySave: "Save key",
   keyClear: "Remove key",
   keySaved: "Saved",
+  pinTitle: "Fixed IP",
+  pinHint: "Send the gateway name to one address to reach a closer edge. The name still goes into the certificate, so the address has to serve this name; an address that cannot be reached falls back to the system DNS.",
+  pinNone: "System DNS",
+  pinFailed: "Unreachable \u2014 using the system DNS",
+  pinUnavailable: "The pin could not be read",
+  pinSave: "Save address",
+  pinClear: "Remove address",
+  pinInvalid: "That is not an IPv4 or IPv6 address",
+  pinPlaceholder: "IPv4 or IPv6 address",
   catalogTitle: "Models",
   catalogRefresh: "Refresh",
   catalogSelectAll: "Select all",
@@ -425,6 +469,15 @@ var zh = {
   keySave: "\u4FDD\u5B58 Key",
   keyClear: "\u79FB\u9664 Key",
   keySaved: "\u5DF2\u4FDD\u5B58",
+  pinTitle: "\u56FA\u5B9A IP",
+  pinHint: "\u628A\u7F51\u5173\u57DF\u540D\u56FA\u5B9A\u5230\u4E00\u4E2A\u5730\u5740\uFF0C\u4EE5\u63A5\u5165\u66F4\u8FD1\u7684\u8FB9\u7F18\u8282\u70B9\u3002\u8BC1\u4E66\u91CC\u4ECD\u7136\u662F\u57DF\u540D\uFF0C\u6240\u4EE5\u8BE5\u5730\u5740\u5FC5\u987B\u80FD\u670D\u52A1\u8FD9\u4E2A\u57DF\u540D\uFF1B\u5730\u5740\u4E0D\u53EF\u8FBE\u65F6\u4F1A\u81EA\u52A8\u56DE\u9000\u7CFB\u7EDF DNS\u3002",
+  pinNone: "\u4F7F\u7528\u7CFB\u7EDF DNS",
+  pinFailed: "\u5730\u5740\u4E0D\u53EF\u8FBE\uFF0C\u5DF2\u56DE\u9000\u7CFB\u7EDF DNS",
+  pinUnavailable: "\u65E0\u6CD5\u8BFB\u53D6\u56FA\u5B9A\u5730\u5740",
+  pinSave: "\u4FDD\u5B58\u5730\u5740",
+  pinClear: "\u6E05\u9664\u5730\u5740",
+  pinInvalid: "\u8FD9\u4E0D\u662F\u5408\u6CD5\u7684 IPv4 \u6216 IPv6 \u5730\u5740",
+  pinPlaceholder: "IPv4 \u6216 IPv6 \u5730\u5740",
   catalogTitle: "\u6A21\u578B",
   catalogRefresh: "\u5237\u65B0",
   catalogSelectAll: "\u5168\u9009",
@@ -543,6 +596,48 @@ function isModelEnabled(model, visibility) {
   return typeof model.recommended === "boolean" ? model.recommended : model.deprecated !== true;
 }
 
+// src/client/address.ts
+function isDottedQuad(value) {
+  const parts = value.split(".");
+  if (parts.length !== 4) return false;
+  return parts.every((part) => {
+    if (!/^(0|[1-9][0-9]{0,2})$/.test(part)) return false;
+    return Number(part) <= 255;
+  });
+}
+function isIPv6(value) {
+  if (!value.includes(":")) return false;
+  const zone = value.indexOf("%");
+  const address = zone === -1 ? value : value.slice(0, zone);
+  if (zone !== -1) {
+    const name = value.slice(zone + 1);
+    if (name.length === 0 || name.includes("%")) return false;
+  }
+  const halves = address.split("::");
+  if (halves.length > 2) return false;
+  const groups = (part) => part.length === 0 ? [] : part.split(":");
+  const head = groups(halves[0] ?? "");
+  const tail = halves.length === 2 ? groups(halves[1] ?? "") : [];
+  const all = [...head, ...tail];
+  let count = 0;
+  for (const [index, group] of all.entries()) {
+    if (group.includes(".")) {
+      if (index !== all.length - 1) return false;
+      if (!isDottedQuad(group)) return false;
+      count += 2;
+      continue;
+    }
+    if (!/^[0-9a-fA-F]{1,4}$/.test(group)) return false;
+    count += 1;
+  }
+  return halves.length === 2 ? count <= 7 : count === 8;
+}
+function isAddress(value) {
+  const trimmed = value.trim();
+  if (trimmed.length === 0) return false;
+  return isDottedQuad(trimmed) || isIPv6(trimmed);
+}
+
 // src/client/model-view.ts
 var INITIAL_FILTER = {
   query: "",
@@ -624,6 +719,9 @@ var INITIAL = {
   keyConfigured: void 0,
   failure: void 0,
   writeFailure: void 0,
+  network: void 0,
+  networkFailure: void 0,
+  pinInvalid: false,
   saved: void 0,
   settings: void 0,
   writable: false,
@@ -638,9 +736,12 @@ function settingsOf(value) {
   const minutes = record["refreshMinutes"];
   if (visibility === null || typeof visibility !== "object" || typeof minutes !== "number") return void 0;
   const entries = Object.entries(visibility).filter(([, enabled]) => typeof enabled === "boolean");
+  const pins = record["pinnedAddresses"];
+  const pinEntries = pins !== null && typeof pins === "object" ? Object.entries(pins).filter(([, address]) => typeof address === "string") : [];
   return {
     modelVisibility: Object.fromEntries(entries),
-    refreshMinutes: minutes
+    refreshMinutes: minutes,
+    pinnedAddresses: Object.fromEntries(pinEntries)
   };
 }
 var SectionController = class _SectionController {
@@ -665,6 +766,7 @@ var SectionController = class _SectionController {
     }
     void this.load(false);
     void this.loadKey();
+    void this.loadNetwork();
     void this.checkUpdate(false);
   }
   subscribe = (listener) => {
@@ -708,6 +810,70 @@ var SectionController = class _SectionController {
       this.set({ keyConfigured: void 0 });
     }
   }
+  /**
+   * Read the gateway's pin.
+   *
+   * The Host owns the answer: the address in force is not always the one in
+   * the configuration, because an address that was found to be gone leaves
+   * the requests on the system's own resolution.
+   */
+  async loadNetwork() {
+    const remote = this.services.remote.opencodeGoNetwork;
+    if (remote === void 0) return;
+    try {
+      const result = await remote.readNetwork();
+      if (!result.ok) throw result.error;
+      this.set({ network: result.value, networkFailure: void 0 });
+    } catch (error) {
+      this.set({
+        network: void 0,
+        networkFailure: error instanceof Error ? error.message : "the gateway pin could not be read"
+      });
+    }
+  }
+  /**
+   * Pin the gateway to one address.
+   *
+   * The address is checked before it is written: a typo that reached the
+   * Host would be ignored there, so the page would claim a pin that is not
+   * in force while the request quietly used the system's resolution.
+   * @param address - the address as typed.
+   */
+  async savePin(address) {
+    const scope = this.services.scope;
+    const current = this.state.settings;
+    const host = this.state.network?.host ?? "";
+    if (scope === void 0 || current === void 0 || !this.state.writable) return;
+    if (host.length === 0) return;
+    const trimmed = address.trim();
+    if (!isAddress(trimmed)) {
+      this.set({ pinInvalid: true });
+      return;
+    }
+    await this.write(
+      () => scope.set("pinnedAddresses", { ...current.pinnedAddresses, [host]: trimmed }),
+      () => {
+        this.set({ pinInvalid: false });
+        void this.loadNetwork();
+      }
+    );
+  }
+  /** Unpin the gateway; its name goes back to the system's own resolution. */
+  async clearPin() {
+    const scope = this.services.scope;
+    const current = this.state.settings;
+    const host = this.state.network?.host ?? "";
+    if (scope === void 0 || current === void 0 || !this.state.writable) return;
+    if (host.length === 0) return;
+    const rest = { ...current.pinnedAddresses };
+    delete rest[host];
+    await this.write(
+      () => scope.set("pinnedAddresses", rest),
+      () => {
+        void this.loadNetwork();
+      }
+    );
+  }
   /**
    * The update Remote.
    *
@@ -1121,6 +1287,7 @@ function updateFailureText(message, t) {
 function Section({ controller, t, getLocale }) {
   const state = (0, import_react.useSyncExternalStore)(controller.subscribe, controller.snapshot, controller.snapshot);
   const [keyDraft, setKeyDraft] = (0, import_react.useState)("");
+  const [pinDraft, setPinDraft] = (0, import_react.useState)("");
   const [busy, setBusy] = (0, import_react.useState)(false);
   const act = (0, import_react.useCallback)(async (operation) => {
     setBusy(true);
@@ -1133,7 +1300,11 @@ function Section({ controller, t, getLocale }) {
   (0, import_react.useEffect)(() => {
     setKeyDraft("");
   }, [state.saved]);
+  (0, import_react.useEffect)(() => {
+    setPinDraft(state.network?.address ?? "");
+  }, [state.network?.address]);
   const reading = state.reading;
+  const network = state.network;
   const visibility = state.settings?.modelVisibility ?? {};
   const editable = state.writable && state.settings !== void 0;
   const rows = reading === void 0 ? [] : visibleModels(reading.models, state.filter, visibility, getLocale?.());
@@ -1192,6 +1363,59 @@ function Section({ controller, t, getLocale }) {
         )
       ] })
     ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.block, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.row, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("pinTitle") }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.mono, children: network?.host ?? "\u2014" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: network?.failed === true ? section_default.warn : section_default.hint, children: network === void 0 ? "\u2014" : network.failed === true ? t("pinFailed") : network.address === void 0 ? t("pinNone") : network.address })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: section_default.hint, children: t("pinHint") }),
+      state.networkFailure !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: section_default.warn, children: `${t("pinUnavailable")}: ${state.networkFailure}` }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.row, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          "input",
+          {
+            className: section_default.input,
+            type: "text",
+            "aria-label": t("pinTitle"),
+            placeholder: t("pinPlaceholder"),
+            value: pinDraft,
+            onChange: (event) => {
+              setPinDraft(event.target.value);
+            }
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          "button",
+          {
+            type: "button",
+            className: section_default.button,
+            disabled: !editable || busy || pinDraft.trim().length === 0,
+            onClick: () => {
+              void act(async () => {
+                await controller.savePin(pinDraft);
+              });
+            },
+            children: t("pinSave")
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          "button",
+          {
+            type: "button",
+            className: section_default.button,
+            disabled: !editable || busy || network?.address === void 0,
+            onClick: () => {
+              void act(async () => {
+                await controller.clearPin();
+              });
+            },
+            children: t("pinClear")
+          }
+        )
+      ] }),
+      state.pinInvalid && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: section_default.warn, children: t("pinInvalid") })
+    ] }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.block, children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.row, children: [
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("catalogTitle") }),
@@ -1581,7 +1805,12 @@ function apply(ctx) {
   ctx.effect(() => ctx.locale.register(NS, { zh, en }), "dshopencodego: copy dictionaries");
   const mounted = ctx.remote.$mount({
     package: usageRemote.package,
-    descriptors: [...usageRemote.descriptors, ...catalogRemote.descriptors, ...updateRemote.descriptors]
+    descriptors: [
+      ...usageRemote.descriptors,
+      ...catalogRemote.descriptors,
+      ...updateRemote.descriptors,
+      ...networkRemote.descriptors
+    ]
   });
   ctx.effect(() => {
     let dispose;
@@ -1593,7 +1822,7 @@ function apply(ctx) {
       void dispose?.();
     };
   }, "dshopencodego: usage Remote");
-  ctx.inject(["configForms", "remote.opencodeGoCatalog", "remote.opencodeGoUpdate", "remote.credentials"], (scope) => {
+  ctx.inject(["configForms", "remote.opencodeGoCatalog", "remote.opencodeGoUpdate", "remote.opencodeGoNetwork", "remote.credentials"], (scope) => {
     const forms = scope.get("configForms");
     const pluginManager = {};
     const controller = new SectionController({