@dsh-plus/notify-email 0.1.16 → 0.1.17

package/lib/client.js

@@ -18000,16 +18000,16 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 		init_shellscript();
 		init_json();
 		var DiffBlock_module_default = {
-			"add": "obLtqa_add",
-			"block": "obLtqa_block",
-			"body": "obLtqa_body",
-			"copyButton": "obLtqa_copyButton",
-			"del": "obLtqa_del",
-			"expand": "obLtqa_expand",
-			"footer": "obLtqa_footer",
-			"gap": "obLtqa_gap",
-			"line": "obLtqa_line",
-			"path": "obLtqa_path"
+			"add": "nVxsMW_add",
+			"block": "nVxsMW_block",
+			"body": "nVxsMW_body",
+			"copyButton": "nVxsMW_copyButton",
+			"del": "nVxsMW_del",
+			"expand": "nVxsMW_expand",
+			"footer": "nVxsMW_footer",
+			"gap": "nVxsMW_gap",
+			"line": "nVxsMW_line",
+			"path": "nVxsMW_path"
 		};
 		//#endregion
 		//#region ../../node_modules/.pnpm/mdast-util-to-string@4.0.0/node_modules/mdast-util-to-string/lib/index.js
@@ -59244,27 +59244,27 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 			chunkString: "chunkString"
 		};
 		//#endregion
-		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.3-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/markdown/CodeBlock.module.css
+		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.5-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/markdown/CodeBlock.module.css
 		var CodeBlock_module_default = {
-			"action": "folzqq_action",
-			"banner": "folzqq_banner",
-			"bannerWrap": "folzqq_bannerWrap",
-			"block": "folzqq_block",
-			"copyButton": "folzqq_copyButton",
-			"infostring": "folzqq_infostring",
-			"plain": "folzqq_plain",
-			"shiki": "folzqq_shiki"
+			"action": "Hbqh2W_action",
+			"banner": "Hbqh2W_banner",
+			"bannerWrap": "Hbqh2W_bannerWrap",
+			"block": "Hbqh2W_block",
+			"copyButton": "Hbqh2W_copyButton",
+			"infostring": "Hbqh2W_infostring",
+			"plain": "Hbqh2W_plain",
+			"shiki": "Hbqh2W_shiki"
 		};
 		//#endregion
-		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.3-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/markdown/MarkdownText.module.css
+		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.5-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/markdown/MarkdownText.module.css
 		var MarkdownText_module_default = {
-			"fileMention": "vrxa6G_fileMention",
-			"image": "vrxa6G_image",
-			"imageAlt": "vrxa6G_imageAlt",
-			"linkIcon": "vrxa6G_linkIcon",
-			"markdown": "vrxa6G_markdown",
-			"tableFill": "vrxa6G_tableFill",
-			"tableScroll": "vrxa6G_tableScroll"
+			"fileMention": "BL43XG_fileMention",
+			"image": "BL43XG_image",
+			"imageAlt": "BL43XG_imageAlt",
+			"linkIcon": "BL43XG_linkIcon",
+			"markdown": "BL43XG_markdown",
+			"tableFill": "BL43XG_tableFill",
+			"tableScroll": "BL43XG_tableScroll"
 		};
 		//#endregion
 		//#region ../../node_modules/.pnpm/@shikijs+langs@4.4.3/node_modules/@shikijs/langs/dist/python.mjs
@@ -59584,7 +59584,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 			less_default = [lang];
 		}));
 		//#endregion
-		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.3-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/index.js
+		//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-client-ui-primitives@0.1.5-alpha.1_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-client-ui-primitives/lib/index.js
 		init_typescript();
 		init_shellscript();
 		init_json();
@@ -61284,6 +61284,30 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 				return;
 			}
 		}
+		/** Protocols a vocabulary-rewritten image destination may carry. */
+		function vocabularyImageUrl(url) {
+			try {
+				const protocol = new URL(url).protocol;
+				return protocol === "http:" || protocol === "https:" || protocol === "blob:" || protocol === "data:" ? url : void 0;
+			} catch {
+				return;
+			}
+		}
+		/**
+		* The displayable source for one image destination: absolute HTTP(S) as
+		* authored, otherwise the context's local-path vocabulary when it vouches for
+		* the destination. Either miss leaves the authored fallback (alt text) to the
+		* caller.
+		* @param url - The authored markdown destination.
+		* @param pathImages - Rewriting vocabulary, when the render pass has one.
+		* @returns The displayable image URL, or undefined.
+		*/
+		function imageSource(url, pathImages) {
+			const remote = remoteImageUrl(sanitizeUrl(normalizeUri(url)));
+			if (remote !== void 0) return remote;
+			const rewritten = pathImages?.resolve(url);
+			return rewritten === void 0 ? void 0 : vocabularyImageUrl(rewritten);
+		}
 		/**
 		* Create an empty {@link ReferenceTargets}.
 		* @returns Fresh empty maps.
@@ -61398,7 +61422,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 					inLink: true
 				}), key, !anchorWrapsOnlyImages(node.children));
 				case "linkReference": return renderLinkReference(node, key, context);
-				case "image": return renderImage(node.url, node.alt ?? "", key);
+				case "image": return renderImage(node.url, node.alt ?? "", key, context);
 				case "imageReference": return renderImageReference(node, key, context);
 				case "footnoteReference": return renderFootnoteReference(node, key, context);
 				case "definition":
@@ -61532,20 +61556,36 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 				return;
 			}
 		}
-		function renderImage(url, alt, key) {
-			const imageSrc = remoteImageUrl(sanitizeUrl(normalizeUri(url)));
+		function renderImage(url, alt, key, context) {
+			const imageSrc = imageSource(url, context.pathImages);
 			if (imageSrc === void 0) return (0, react_jsx_runtime.jsx)("span", {
 				className: MarkdownText_module_default.imageAlt,
 				children: alt
 			}, key);
+			return (0, react_jsx_runtime.jsx)(MarkdownImage, {
+				src: imageSrc,
+				alt,
+				destination: url
+			}, `${key}:${imageSrc}`);
+		}
+		/** Failed loads retain the authored alt or destination; a new source remounts the image. */
+		function MarkdownImage({ src, alt, destination }) {
+			const [failed, setFailed] = (0, react.useState)(false);
+			if (failed) return (0, react_jsx_runtime.jsx)("span", {
+				className: MarkdownText_module_default.imageAlt,
+				children: alt || destination
+			});
 			return (0, react_jsx_runtime.jsx)("img", {
 				className: MarkdownText_module_default.image,
-				src: imageSrc,
+				src,
 				alt,
+				onError: () => {
+					setFailed(true);
+				},
 				loading: "lazy",
 				decoding: "async",
 				referrerPolicy: "no-referrer"
-			}, key);
+			});
 		}
 		/** The bracketed source text a reference reverts to when its definition is missing. */
 		function referenceSuffix(node) {
@@ -61569,7 +61609,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 		function renderImageReference(node, key, context) {
 			const definition = context.targets.definitions.get(node.identifier.toUpperCase());
 			if (definition === void 0) return `![${node.alt ?? ""}${referenceSuffix(node)}`;
-			return renderImage(definition.url, node.alt ?? "", key);
+			return renderImage(definition.url, node.alt ?? "", key, context);
 		}
 		function renderFootnoteReference(node, key, context) {
 			const id = node.identifier.toUpperCase();
@@ -61630,7 +61670,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 		* full parse self-heals it.
 		*/
 		/** One settled full render: parse with math, resolve references, append the footnote section. */
-		function renderSettled(text, labels, fileMentions) {
+		function renderSettled(text, labels, fileMentions, pathImages) {
 			const root = parseGfmWithMath(text);
 			const targets = createReferenceTargets();
 			collectReferenceTargets(root.children, targets);
@@ -61638,6 +61678,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 				streaming: false,
 				labels,
 				fileMentions,
+				pathImages,
 				targets,
 				footnoteOrder: [],
 				footnoteCounts: /* @__PURE__ */ new Map()
@@ -61704,6 +61745,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 						streaming: true,
 						labels: this.labels,
 						fileMentions: void 0,
+						pathImages: void 0,
 						targets: frameTargets,
 						footnoteOrder: this.frozenFootnoteOrder,
 						footnoteCounts: this.frozenFootnoteCounts
@@ -61720,6 +61762,7 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 					streaming: true,
 					labels: this.labels,
 					fileMentions: void 0,
+					pathImages: void 0,
 					targets: frameTargets,
 					footnoteOrder: [...this.frozenFootnoteOrder],
 					footnoteCounts: new Map(this.frozenFootnoteCounts)
@@ -61736,13 +61779,13 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 				return this.lastRendered;
 			}
 		};
-		(0, react.memo)(function MarkdownText({ text, streaming = false, labels, fileMentions }) {
+		(0, react.memo)(function MarkdownText({ text, streaming = false, labels, fileMentions, pathImages }) {
 			const streamRef = (0, react.useRef)(null);
 			const streamLabelsRef = (0, react.useRef)(labels);
 			const children = (0, react.useMemo)(() => {
 				if (!streaming) {
 					streamRef.current = null;
-					return renderSettled(text, labels, fileMentions);
+					return renderSettled(text, labels, fileMentions, pathImages);
 				}
 				if (streamRef.current === null || streamLabelsRef.current !== labels) {
 					streamRef.current = new StreamingRenderer(labels);
@@ -61753,7 +61796,8 @@ XID_Start XIDS`.split(/\s/).map((p) => [w(p), p]));
 				text,
 				streaming,
 				labels,
-				fileMentions
+				fileMentions,
+				pathImages
 			]);
 			return (0, react_jsx_runtime.jsx)("div", {
 				className: MarkdownText_module_default.markdown,

package/lib/index.js

@@ -1,25 +1,29 @@
 import z from "@deepseek-ai/schemastery";
 import { Context, Service } from "@deepseek-ai/cordis";
-import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
+import { pluginDataPath } from "@dsh-plus/shared";
 import { appendFile, mkdir } from "node:fs/promises";
 import { dirname } from "node:path";
+import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import nodemailer from "nodemailer";
 //#endregion
 //#region src/config.ts
 /**
 * 配置单一事实源：cordis 行级 Config（组合默认值，dev/prod patch 层可覆盖）
 * 与 settings namespace（用户层，经 dsh-settings-file 持久化到 $DSH_HOME/settings.yaml）
-* 共用同一 schemastery schema。SMTP 密码标记 secret 角色，任何读取通道不得回传。
+* 共用同一 schemastery schema。SMTP 密码走官方 credentials seam
+* （refs/NOTIFY_EMAIL_SMTP_PASS），不进 settings.yaml（存储规范）。
 * @module notify-email/config
 */
 /** settings 命名空间（字面量即合法命名空间，0.1.2-alpha.2 起编译期校验；webui 配置卡片与插件运行期读取同一份）。 */
 const SETTINGS_NS = "dsh-plus-notify-email";
+/** SMTP 密码在官方 credentials seam 中的引用名。 */
+const SMTP_PASS_REF = "NOTIFY_EMAIL_SMTP_PASS";
 const SmtpSchema = z.object({
 	host: z.string().description("SMTP 服务器主机名").default(""),
 	port: z.natural().max(65535).description("SMTP 端口").default(465),
 	secure: z.boolean().description("使用 TLS 直连（465 端口通常为 true）").default(true),
 	user: z.string().description("SMTP 登录用户名（通常为发件邮箱）").default(""),
-	pass: z.string().role("secret").description("SMTP 密码/授权码").default(""),
+	pass: z.string().role("secret").description("SMTP 密码/授权码（仅兼容行级注入；用户层请配置 credentials 引用）").default(""),
 	from: z.string().description("发件地址（From 头）").default("")
 });
 const TriggerSchema = z.object({
@@ -54,7 +58,8 @@ const Config = z.object({
 //#endregion
 //#region src/audit.ts
 /**
-* 通知投递审计：每次发送尝试追加一行 JSONL 到 $DSH_HOME/logs/notify-email.jsonl。
+* 通知投递审计：每次发送尝试追加一行 JSONL 到
+* $DSH_HOME/dsh-plus/notify-email/audit.jsonl。
 * 让 dry-run 可观测（dev 实例 logger 不落盘），也为生产排查「为什么没收到邮件」留痕。
 * 记录正文截断 2000 字符；永远不含 SMTP 凭据。写失败只告警不阻断。
 * @module notify-email/audit
@@ -127,15 +132,17 @@ function registerTestApi(ctx, service) {
 const CONNECTION_TIMEOUT_MS = 1e4;
 const GREETING_TIMEOUT_MS = 1e4;
 const SOCKET_TIMEOUT_MS = 3e4;
-/** 真实 SMTP 通道：每次发送按当前配置新建 transport（配置热改即生效，发送低频无池化需求）。 */
-const smtpTransport = async (cfg, msg) => {
+/** 真实 SMTP 通道：每次发送按当前配置新建 transport（配置热改即生效，发送低频无池化需求）。
+* 密码优先 credentials seam（NOTIFY_EMAIL_SMTP_PASS），缺席回落行级 smtp.pass（兼容注入场景）。 */
+const smtpTransport = async (cfg, msg, credentials) => {
+	const pass = await resolvePass(cfg, credentials);
 	await nodemailer.createTransport({
 		host: cfg.smtp.host,
 		port: cfg.smtp.port,
 		secure: cfg.smtp.secure,
-		auth: cfg.smtp.user.length > 0 ? {
+		auth: cfg.smtp.user.length > 0 && pass !== null ? {
 			user: cfg.smtp.user,
-			pass: cfg.smtp.pass
+			pass
 		} : void 0,
 		connectionTimeout: CONNECTION_TIMEOUT_MS,
 		greetingTimeout: GREETING_TIMEOUT_MS,
@@ -148,16 +155,26 @@ const smtpTransport = async (cfg, msg) => {
 		...msg.html !== void 0 ? { html: msg.html } : {}
 	});
 };
+/** 解析生效密码：credentials 引用优先，行级 secret 兜底；两处皆空返回 null。 */
+async function resolvePass(cfg, credentials) {
+	if (credentials !== void 0) {
+		const resolved = await credentials.resolve(credentialRef(SMTP_PASS_REF)).catch(() => void 0);
+		if (resolved !== void 0 && resolved.value.length > 0) return resolved.value;
+	}
+	return cfg.smtp.pass.length > 0 ? cfg.smtp.pass : null;
+}
 var Mailer = class {
 	resolveConfig;
 	logger;
 	transport;
 	audit;
-	constructor(resolveConfig, logger, transport = smtpTransport, audit) {
+	credentials;
+	constructor(resolveConfig, logger, transport = smtpTransport, audit, credentials) {
 		this.resolveConfig = resolveConfig;
 		this.logger = logger;
 		this.transport = transport;
 		this.audit = audit;
+		this.credentials = credentials;
 	}
 	/**
 	* 常规通知发送：受 enabled 与配置完整性门禁。
@@ -181,7 +198,7 @@ var Mailer = class {
 			});
 		}
 		try {
-			await this.transport(cfg, msg);
+			await this.transport(cfg, msg, this.credentials);
 			return this.record(msg, cfg, {
 				ok: true,
 				detail: "sent"
@@ -414,6 +431,11 @@ function installTurnEndWatcher(ctx, service, resolveConfig) {
 * - 投递：首个非空 EmailNotice 经 Mailer 发送；单个触发器抛错不影响其余。
 * @module @dsh-plus/notify-email
 */
+/** credentials seam 最小面提取（缺席返回 undefined；Mailer 自行降级行级密码）。 */
+function credentialsOf(ctx) {
+	const found = ctx.get?.("credentials");
+	return found !== null && typeof found === "object" ? found : void 0;
+}
 var NotifyEmailService = class extends Service {
 	static [Context.inject] = ["agents", "tools"];
 	triggers = [];
@@ -431,8 +453,8 @@ var NotifyEmailService = class extends Service {
 			});
 		});
 		const logger = ctx.logger("notify-email");
-		const audit = createJsonlAuditSink(dshHomePath("logs", "notify-email.jsonl"), (message) => logger.warn(`audit write failed: ${message}`));
-		this.mailer = new Mailer(() => this.current(), logger, void 0, audit);
+		const audit = createJsonlAuditSink(pluginDataPath("notify-email", "audit.jsonl"), (message) => logger.warn(`audit write failed: ${message}`));
+		this.mailer = new Mailer(() => this.current(), logger, void 0, audit, credentialsOf(ctx));
 		this.registerTrigger(createDecisionTrigger(() => this.current()));
 		this.registerTrigger(createTurnEndTrigger(() => this.current()));
 		installDecisionWatcher(ctx, this);

package/lib/style.css

@@ -1,4 +1,4 @@
-.obLtqa_block {
+.nVxsMW_block {
   --dsl-diff-radius: 12px;
   --dsl-diff-line-height: 22px;
   color: var(--dsw-alias-label-primary);
@@ -8,7 +8,7 @@
   position: relative;
 }
 
-.obLtqa_copyButton {
+.nVxsMW_copyButton {
   z-index: 1;
   color: var(--dsw-alias-label-secondary);
   cursor: pointer;
@@ -22,46 +22,46 @@
   right: 12px;
 }
 
-.obLtqa_body {
+.nVxsMW_body {
   font: var(--dsw-font-markdown-code-block);
   padding: 12px 14px;
   overflow: auto hidden;
 }
 
-.obLtqa_line {
+.nVxsMW_line {
   min-height: var(--dsl-diff-line-height);
   white-space: pre;
 }
 
-.obLtqa_path {
+.nVxsMW_path {
   color: var(--dsw-alias-label-primary);
   padding-right: 56px;
   font-weight: 600;
 }
 
-.obLtqa_gap {
+.nVxsMW_gap {
   color: var(--dsw-alias-label-tertiary);
 }
 
-.obLtqa_del:before {
+.nVxsMW_del:before {
   content: "- ";
   color: var(--dsw-alias-state-error-primary);
 }
 
-.obLtqa_del {
+.nVxsMW_del {
   color: var(--dsw-alias-state-error-primary);
 }
 
-.obLtqa_add:before {
+.nVxsMW_add:before {
   content: "+ ";
   color: var(--dsw-alias-state-success-primary);
 }
 
-.obLtqa_add {
+.nVxsMW_add {
   color: var(--dsw-alias-state-success-primary);
 }
 
-.obLtqa_expand {
+.nVxsMW_expand {
   width: 100%;
   color: var(--dsw-alias-label-tertiary);
   cursor: pointer;
@@ -73,16 +73,16 @@
   display: block;
 }
 
-.obLtqa_expand:hover {
+.nVxsMW_expand:hover {
   color: var(--dsw-alias-label-secondary);
 }
 
-.obLtqa_footer {
+.nVxsMW_footer {
   font: var(--dsw-font-markdown-code-block);
   color: var(--dsw-alias-label-tertiary);
   padding: 0 14px 12px;
 }
-.folzqq_block {
+.Hbqh2W_block {
   --dsl-code-block-banner-background-color: var(--dsw-alias-markdown-code-block-banner);
   --dsl-code-block-border-radius: 12px;
   --dsl-code-block-banner-font: 11px/18px var(--dsw-font-family);
@@ -94,11 +94,11 @@
   position: relative;
 }
 
-.folzqq_block:not(:last-child) {
+.Hbqh2W_block:not(:last-child) {
   margin-bottom: 11px;
 }
 
-.folzqq_bannerWrap {
+.Hbqh2W_bannerWrap {
   z-index: 6;
   background-color: var(--dsw-alias-bg-base);
   border-top-left-radius: var(--dsl-code-block-border-radius);
@@ -107,7 +107,7 @@
   top: 0;
 }
 
-.folzqq_banner {
+.Hbqh2W_banner {
   background: var(--dsl-code-block-banner-background-color);
   font: var(--dsl-code-block-banner-font);
   border-top-left-radius: var(--dsl-code-block-border-radius);
@@ -119,7 +119,7 @@
   display: flex;
 }
 
-.folzqq_infostring {
+.Hbqh2W_infostring {
   color: var(--dsw-alias-label-primary);
   font-family: var(--ds-font-family-code);
   text-overflow: ellipsis;
@@ -130,13 +130,13 @@
   overflow: hidden;
 }
 
-.folzqq_action {
+.Hbqh2W_action {
   flex-shrink: 0;
   align-items: center;
   display: flex;
 }
 
-.folzqq_copyButton {
+.Hbqh2W_copyButton {
   color: inherit;
   cursor: pointer;
   font: inherit;
@@ -146,7 +146,7 @@
   padding: 0;
 }
 
-.folzqq_block :where(pre) {
+.Hbqh2W_block :where(pre) {
   font: var(--dsl-code-block-content-font);
   white-space: pre-wrap;
   word-break: break-all;
@@ -158,72 +158,72 @@
   margin: 0 !important;
 }
 
-.folzqq_block :where(pre.folzqq_shiki) {
+.Hbqh2W_block :where(pre.Hbqh2W_shiki) {
   background: var(--dsw-alias-markdown-code-block) !important;
 }
 
-.folzqq_block :where(pre) code {
+.Hbqh2W_block :where(pre) code {
   font: inherit;
   background: none;
   padding: 0;
 }
 
-.folzqq_plain {
+.Hbqh2W_plain {
   color: var(--dsw-alias-label-primary);
 }
-.vrxa6G_markdown {
+.BL43XG_markdown {
   overflow-wrap: anywhere;
   min-width: 0;
   font: var(--dsw-font-markdown-base);
   color: var(--dsw-alias-label-primary);
 }
 
-.vrxa6G_markdown strong {
+.BL43XG_markdown strong {
   font-weight: 600;
 }
 
-.vrxa6G_markdown h1 {
+.BL43XG_markdown h1 {
   font: var(--dsw-font-markdown-h1);
   margin: 32px 0 16px;
 }
 
-.vrxa6G_markdown h2 {
+.BL43XG_markdown h2 {
   font: var(--dsw-font-markdown-h2);
   margin: 32px 0 16px;
 }
 
-.vrxa6G_markdown h3 {
+.BL43XG_markdown h3 {
   font: var(--dsw-font-markdown-h3);
   margin: 32px 0 16px;
 }
 
-.vrxa6G_markdown h4 {
+.BL43XG_markdown h4 {
   font: var(--dsw-font-markdown-h4);
   margin: 16px 0;
 }
 
-.vrxa6G_markdown :where(h5, h6) {
+.BL43XG_markdown :where(h5, h6) {
   font: var(--dsw-font-markdown-base-strong);
   margin: 16px 0;
 }
 
-.vrxa6G_markdown :where(h1, h2, h3, h4, h5, h6) strong {
+.BL43XG_markdown :where(h1, h2, h3, h4, h5, h6) strong {
   font-weight: inherit;
 }
 
-.vrxa6G_markdown p {
+.BL43XG_markdown p {
   margin: 16px 0;
 }
 
-.vrxa6G_markdown :where(h4, h5, h6) + :where(ul, ol) {
+.BL43XG_markdown :where(h4, h5, h6) + :where(ul, ol) {
   margin-top: 8px;
 }
 
-.vrxa6G_markdown :where(h4, h5, h6):has( + :where(ul, ol)) {
+.BL43XG_markdown :where(h4, h5, h6):has( + :where(ul, ol)) {
   margin-bottom: 8px;
 }
 
-.vrxa6G_markdown a {
+.BL43XG_markdown a {
   color: var(--dsw-alias-link);
   transition: box-shadow var(--ds-transition-duration) var(--ds-ease-in-out);
   border: 2px solid #fff0;
@@ -235,17 +235,17 @@
   position: relative;
 }
 
-.vrxa6G_markdown a:hover, .vrxa6G_markdown a:focus {
+.BL43XG_markdown a:hover, .BL43XG_markdown a:focus {
   text-decoration: underline dotted var(--dsw-alias-link);
   text-underline-offset: 3px;
   outline: none;
 }
 
-.vrxa6G_markdown a:focus-visible {
+.BL43XG_markdown a:focus-visible {
   box-shadow: 0 0 0 2px var(--dsw-alias-state-business-primary);
 }
 
-.vrxa6G_linkIcon {
+.BL43XG_linkIcon {
   vertical-align: -.25em;
   flex: none;
   width: 1.1em;
@@ -253,46 +253,46 @@
   margin-right: 5px;
 }
 
-.vrxa6G_markdown :where(ul, ol) {
+.BL43XG_markdown :where(ul, ol) {
   margin: 16px 0;
   padding-left: 18px;
 }
 
-.vrxa6G_markdown li:not(:first-child) {
+.BL43XG_markdown li:not(:first-child) {
   margin-top: 6px;
 }
 
-.vrxa6G_markdown li > :where(ul, ol) {
+.BL43XG_markdown li > :where(ul, ol) {
   margin-top: 4px;
 }
 
-.vrxa6G_markdown li::marker {
+.BL43XG_markdown li::marker {
   color: var(--dsw-alias-label-secondary);
   line-height: 24px;
 }
 
-.vrxa6G_markdown :where(ul, ol) ol {
+.BL43XG_markdown :where(ul, ol) ol {
   padding-left: 0;
   list-style-position: inside;
 }
 
-.vrxa6G_markdown :where(ul, ol) ol li p {
+.BL43XG_markdown :where(ul, ol) ol li p {
   display: inline;
 }
 
-.vrxa6G_markdown li > p {
+.BL43XG_markdown li > p {
   margin: 8px 0;
 }
 
-.vrxa6G_markdown li > :first-child {
+.BL43XG_markdown li > :first-child {
   margin-top: 0;
 }
 
-.vrxa6G_markdown li > :last-child:not(.md-code-block) {
+.BL43XG_markdown li > :last-child:not(.md-code-block) {
   margin-bottom: 0;
 }
 
-.vrxa6G_markdown hr {
+.BL43XG_markdown hr {
   background: var(--dsw-alias-border-l2);
   border: none;
   height: .5px;
@@ -300,19 +300,19 @@
   display: block;
 }
 
-.vrxa6G_markdown blockquote {
+.BL43XG_markdown blockquote {
   border-left: 2px solid var(--dsw-alias-label-caption);
   margin: 16px 0 0;
   padding-left: 14px;
 }
 
-.vrxa6G_markdown pre {
+.BL43XG_markdown pre {
   font-family: var(--ds-font-family-code);
   margin: 16px 0;
   overflow: auto;
 }
 
-.vrxa6G_markdown :not(pre) > code {
+.BL43XG_markdown :not(pre) > code {
   box-sizing: border-box;
   font: var(--dsw-font-markdown-code);
   font-family: var(--ds-font-family-code);
@@ -325,54 +325,54 @@
   font-size: .875em !important;
 }
 
-.vrxa6G_markdown :where(h1, h2, h3, h4, h5, h6) code {
+.BL43XG_markdown :where(h1, h2, h3, h4, h5, h6) code {
   font: inherit;
   font-family: var(--ds-font-family-code);
 }
 
-.vrxa6G_markdown .katex-display {
+.BL43XG_markdown .katex-display {
   max-width: 100%;
   overflow: auto hidden;
 }
 
-.vrxa6G_markdown input[type="checkbox"] {
+.BL43XG_markdown input[type="checkbox"] {
   accent-color: var(--dsw-alias-label-secondary);
   margin: 0 8px 0 0;
 }
 
-.vrxa6G_tableScroll {
+.BL43XG_tableScroll {
   overscroll-behavior-x: contain;
   max-width: 100%;
   overflow-x: auto;
 }
 
-.vrxa6G_tableScroll.md-table-wide {
+.BL43XG_tableScroll.md-table-wide {
   padding-bottom: var(--dsh-scrollbar-width, 8px);
   overflow-x: hidden;
 }
 
-.vrxa6G_tableScroll.md-table-wide:hover, .vrxa6G_tableScroll.md-table-wide:focus-visible {
+.BL43XG_tableScroll.md-table-wide:hover, .BL43XG_tableScroll.md-table-wide:focus-visible {
   padding-bottom: 0;
   overflow-x: auto;
 }
 
-.vrxa6G_tableScroll:focus-visible {
+.BL43XG_tableScroll:focus-visible {
   box-shadow: 0 0 0 2px var(--dsw-alias-state-business-primary);
   outline: none;
 }
 
-.vrxa6G_tableScroll table {
+.BL43XG_tableScroll table {
   border-collapse: collapse;
   width: max-content;
   max-width: max-content;
 }
 
-.vrxa6G_tableFill table {
+.BL43XG_tableFill table {
   width: 100%;
   max-width: none;
 }
 
-.vrxa6G_tableScroll th {
+.BL43XG_tableScroll th {
   text-align: start;
   border-bottom: .5px solid var(--dsw-alias-border-l3);
   font: var(--dsw-font-markdown-table-head);
@@ -382,7 +382,7 @@
   padding: 10px 16px;
 }
 
-.vrxa6G_tableScroll td {
+.BL43XG_tableScroll td {
   border-bottom: .5px solid var(--dsw-alias-border-l2);
   font: var(--dsw-font-markdown-table);
   min-width: 100px;
@@ -390,32 +390,32 @@
   padding: 10px 16px;
 }
 
-.vrxa6G_tableScroll th:first-child, .vrxa6G_tableScroll td:first-child {
+.BL43XG_tableScroll th:first-child, .BL43XG_tableScroll td:first-child {
   padding-left: 0;
 }
 
-.vrxa6G_tableScroll td:last-child {
+.BL43XG_tableScroll td:last-child {
   padding-right: 0;
 }
 
-.vrxa6G_tableScroll table code {
+.BL43XG_tableScroll table code {
   font-size: 11px;
 }
 
-.vrxa6G_markdown > :first-child, .vrxa6G_markdown p:first-child {
+.BL43XG_markdown > :first-child, .BL43XG_markdown p:first-child {
   margin-top: 0 !important;
 }
 
-.vrxa6G_markdown > :last-child, .vrxa6G_markdown p:last-child {
+.BL43XG_markdown > :last-child, .BL43XG_markdown p:last-child {
   margin-bottom: 0 !important;
 }
 
-.vrxa6G_imageAlt {
+.BL43XG_imageAlt {
   color: var(--dsw-alias-label-tertiary);
   font-style: italic;
 }
 
-.vrxa6G_image {
+.BL43XG_image {
   background: var(--dsw-alias-bg-base);
   object-fit: contain;
   border-radius: 8px;
@@ -426,7 +426,7 @@
   display: block;
 }
 
-.vrxa6G_fileMention {
+.BL43XG_fileMention {
   font: inherit;
   color: var(--dsw-alias-link);
   cursor: pointer;
@@ -438,7 +438,7 @@
   text-decoration: none;
 }
 
-.vrxa6G_fileMention:hover, .vrxa6G_fileMention:focus {
+.BL43XG_fileMention:hover, .BL43XG_fileMention:focus {
   text-decoration: underline dotted var(--dsw-alias-link);
   text-underline-offset: 3px;
   outline: none;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-plus/notify-email",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "dsh-plus service+ui plugin: 任务结束/等待决策/出错时向指定邮箱发送邮件通知",
   "type": "module",
   "main": "lib/index.js",
@@ -31,28 +31,30 @@
     }
   },
   "dependencies": {
-    "@dsh-plus/shared": "0.1.10",
-    "nodemailer": "9.0.6"
+    "nodemailer": "9.0.6",
+    "@dsh-plus/shared": "0.1.11"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.3-alpha.2",
-    "@deepseek-ai/schemastery": "^3.18.1"
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-home-paths": "*",
+    "@deepseek-ai/dsh-settings": "*",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@deepseek-ai/dsh-credentials": "*"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/dsh-agent": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.1.3-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-home-paths": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-host-webserver": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-llm": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-session": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-settings": "0.1.5-alpha.1",
+    "@deepseek-ai/dsh-tools": "0.1.5-alpha.1",
     "@deepseek-ai/schemastery": "3.18.2",
     "@types/nodemailer": "8.0.1",
     "@types/react": "~18.3.31",
-    "react": "^18.2.0"
+    "react": "^18.2.0",
+    "@deepseek-ai/dsh-credentials": "0.1.5-alpha.1"
   },
   "publishConfig": {
     "access": "public"

package/src/audit.ts

@@ -1,5 +1,6 @@
 /**
- * 通知投递审计：每次发送尝试追加一行 JSONL 到 $DSH_HOME/logs/notify-email.jsonl。
+ * 通知投递审计：每次发送尝试追加一行 JSONL 到
+ * $DSH_HOME/dsh-plus/notify-email/audit.jsonl。
  * 让 dry-run 可观测（dev 实例 logger 不落盘），也为生产排查「为什么没收到邮件」留痕。
  * 记录正文截断 2000 字符；永远不含 SMTP 凭据。写失败只告警不阻断。
  * @module notify-email/audit

package/src/config.ts

@@ -1,7 +1,8 @@
 /**
  * 配置单一事实源：cordis 行级 Config（组合默认值，dev/prod patch 层可覆盖）
  * 与 settings namespace（用户层，经 dsh-settings-file 持久化到 $DSH_HOME/settings.yaml）
- * 共用同一 schemastery schema。SMTP 密码标记 secret 角色，任何读取通道不得回传。
+ * 共用同一 schemastery schema。SMTP 密码走官方 credentials seam
+ * （refs/NOTIFY_EMAIL_SMTP_PASS），不进 settings.yaml（存储规范）。
  * @module notify-email/config
  */
 
@@ -12,12 +13,19 @@ import { SETTINGS_NS as NS_LITERAL } from './ns.ts'
 /** settings 命名空间（字面量即合法命名空间，0.1.2-alpha.2 起编译期校验；webui 配置卡片与插件运行期读取同一份）。 */
 export const SETTINGS_NS = NS_LITERAL
 
+/** SMTP 密码在官方 credentials seam 中的引用名。 */
+export const SMTP_PASS_REF = 'NOTIFY_EMAIL_SMTP_PASS'
+
 const SmtpSchema = z.object({
   host: z.string().description('SMTP 服务器主机名').default(''),
   port: z.natural().max(65535).description('SMTP 端口').default(465),
   secure: z.boolean().description('使用 TLS 直连（465 端口通常为 true）').default(true),
   user: z.string().description('SMTP 登录用户名（通常为发件邮箱）').default(''),
-  pass: z.string().role('secret').description('SMTP 密码/授权码').default(''),
+  pass: z
+    .string()
+    .role('secret')
+    .description('SMTP 密码/授权码（仅兼容行级注入；用户层请配置 credentials 引用）')
+    .default(''),
   from: z.string().description('发件地址（From 头）').default(''),
 })
 

package/src/mailer.ts

@@ -3,10 +3,12 @@
  * Transport 抽象为函数注入，单元测试以假 transport 断言参数，零网络。
  * @module notify-email/mailer
  */
+
+import { credentialRef } from '@deepseek-ai/dsh-credentials'
 import nodemailer from 'nodemailer'
 
 import { type AuditSink, buildAuditRecord } from './audit.ts'
-import type { NotifyEmailConfig } from './config.ts'
+import { type NotifyEmailConfig, SMTP_PASS_REF } from './config.ts'
 
 /** 一封待发邮件（触发器产物的最小契约）。 */
 export interface MailMessage {
@@ -22,7 +24,16 @@ export interface SendResult {
 }
 
 /** 发送通道：按生效配置投递一封邮件；失败抛错由调用方归一化。 */
-export type Transport = (cfg: NotifyEmailConfig, msg: MailMessage) => Promise<void>
+export type Transport = (
+  cfg: NotifyEmailConfig,
+  msg: MailMessage,
+  credentials?: CredentialsSeamLike,
+) => Promise<void>
+
+/** credentials seam 最小面（Mailer 不感知完整 seam 类型）。 */
+export interface CredentialsSeamLike {
+  resolve(ref: ReturnType<typeof credentialRef>): Promise<{ value: string } | undefined>
+}
 
 export interface MailLogger {
   info(msg: string): void
@@ -34,13 +45,15 @@ const CONNECTION_TIMEOUT_MS = 10_000
 const GREETING_TIMEOUT_MS = 10_000
 const SOCKET_TIMEOUT_MS = 30_000
 
-/** 真实 SMTP 通道：每次发送按当前配置新建 transport（配置热改即生效，发送低频无池化需求）。 */
-export const smtpTransport: Transport = async (cfg, msg) => {
+/** 真实 SMTP 通道：每次发送按当前配置新建 transport（配置热改即生效，发送低频无池化需求）。
+ * 密码优先 credentials seam（NOTIFY_EMAIL_SMTP_PASS），缺席回落行级 smtp.pass（兼容注入场景）。 */
+export const smtpTransport: Transport = async (cfg, msg, credentials) => {
+  const pass = await resolvePass(cfg, credentials)
   const transporter = nodemailer.createTransport({
     host: cfg.smtp.host,
     port: cfg.smtp.port,
     secure: cfg.smtp.secure,
-    auth: cfg.smtp.user.length > 0 ? { user: cfg.smtp.user, pass: cfg.smtp.pass } : undefined,
+    auth: cfg.smtp.user.length > 0 && pass !== null ? { user: cfg.smtp.user, pass } : undefined,
     connectionTimeout: CONNECTION_TIMEOUT_MS,
     greetingTimeout: GREETING_TIMEOUT_MS,
     socketTimeout: SOCKET_TIMEOUT_MS,
@@ -54,22 +67,37 @@ export const smtpTransport: Transport = async (cfg, msg) => {
   })
 }
 
+/** 解析生效密码：credentials 引用优先，行级 secret 兜底；两处皆空返回 null。 */
+async function resolvePass(
+  cfg: NotifyEmailConfig,
+  credentials: CredentialsSeamLike | undefined,
+): Promise<string | null> {
+  if (credentials !== undefined) {
+    const resolved = await credentials.resolve(credentialRef(SMTP_PASS_REF)).catch(() => undefined)
+    if (resolved !== undefined && resolved.value.length > 0) return resolved.value
+  }
+  return cfg.smtp.pass.length > 0 ? cfg.smtp.pass : null
+}
+
 export class Mailer {
   private readonly resolveConfig: () => NotifyEmailConfig
   private readonly logger: MailLogger
   private readonly transport: Transport
   private readonly audit?: AuditSink
+  private readonly credentials?: CredentialsSeamLike
 
   constructor(
     resolveConfig: () => NotifyEmailConfig,
     logger: MailLogger,
     transport: Transport = smtpTransport,
     audit?: AuditSink,
+    credentials?: CredentialsSeamLike,
   ) {
     this.resolveConfig = resolveConfig
     this.logger = logger
     this.transport = transport
     this.audit = audit
+    this.credentials = credentials
   }
 
   /**
@@ -87,7 +115,7 @@ export class Mailer {
       return this.record(msg, cfg, { ok: true, detail: 'dry-run' })
     }
     try {
-      await this.transport(cfg, msg)
+      await this.transport(cfg, msg, this.credentials)
       return this.record(msg, cfg, { ok: true, detail: 'sent' })
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error)

package/src/service.ts

@@ -7,12 +7,12 @@
  * @module @dsh-plus/notify-email
  */
 import { Context, Service } from '@deepseek-ai/cordis'
-import { dshHomePath } from '@deepseek-ai/dsh-home-paths'
 import type {} from '@deepseek-ai/dsh-settings'
+import { pluginDataPath } from '@dsh-plus/shared'
 import { createJsonlAuditSink } from './audit.ts'
 import { Config, type NotifyEmailConfig, SETTINGS_NS } from './config.ts'
 import { registerTestApi } from './config-api.ts'
-import { Mailer } from './mailer.ts'
+import { type CredentialsSeamLike, Mailer } from './mailer.ts'
 import { createDecisionTrigger, createTurnEndTrigger } from './triggers/builtin.ts'
 import type { DecisionCall, NotifyTrigger, TurnEndInfo } from './triggers/types.ts'
 import { installDecisionWatcher } from './watchers/decision.ts'
@@ -24,6 +24,12 @@ declare module '@deepseek-ai/cordis' {
   }
 }
 
+/** credentials seam 最小面提取（缺席返回 undefined；Mailer 自行降级行级密码）。 */
+function credentialsOf(ctx: Context): CredentialsSeamLike | undefined {
+  const found = (ctx as unknown as { get?(key: string): unknown }).get?.('credentials')
+  return found !== null && typeof found === 'object' ? (found as CredentialsSeamLike) : undefined
+}
+
 export class NotifyEmailService extends Service {
   static [Context.inject] = ['agents', 'tools']
 
@@ -45,10 +51,10 @@ export class NotifyEmailService extends Service {
       })
     })
     const logger = ctx.logger('notify-email')
-    const audit = createJsonlAuditSink(dshHomePath('logs', 'notify-email.jsonl'), (message) =>
+    const audit = createJsonlAuditSink(pluginDataPath('notify-email', 'audit.jsonl'), (message) =>
       logger.warn(`audit write failed: ${message}`),
     )
-    this.mailer = new Mailer(() => this.current(), logger, undefined, audit)
+    this.mailer = new Mailer(() => this.current(), logger, undefined, audit, credentialsOf(ctx))
     this.registerTrigger(createDecisionTrigger(() => this.current()))
     this.registerTrigger(createTurnEndTrigger(() => this.current()))
     installDecisionWatcher(ctx, this)