@dsh-plus/secret-env 0.1.0

package/lib/client.js

@@ -0,0 +1,992 @@
+window.__ModuleLoader__.load({
+	id: "@dsh-plus/secret-env",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react = require("react");
+		let react_jsx_runtime = require("react/jsx-runtime");
+		//#region ../shared/src/client/fetch.ts
+		/**
+		* 同源自定义端点的最小 fetch 封装（各插件 client/api.ts 的公共收编版）。
+		* 仅同源（credentials: same-origin），错误统一抛 Error(body.error)。
+		* @module @dsh-plus/shared/client/fetch
+		*/
+		async function parse(res) {
+			const body = await res.json();
+			if (!res.ok) throw new Error(body.error ?? `HTTP ${res.status}`);
+			return body;
+		}
+		/** GET 同源 JSON 端点。 */
+		async function getJson(route) {
+			return parse(await fetch(route, { credentials: "same-origin" }));
+		}
+		/** POST 同源 JSON 端点（body 可省略）。 */
+		async function postJson(route, body) {
+			return parse(await fetch(route, {
+				method: "POST",
+				credentials: "same-origin",
+				headers: { "content-type": "application/json" },
+				body: body === void 0 ? void 0 : JSON.stringify(body)
+			}));
+		}
+		//#endregion
+		//#region ../shared/src/client/i18n.ts
+		/** 卡片通用文案（save/discard/unsaved/loading 等四插件共有键）。 */
+		const commonZh = {
+			save: "保存",
+			saving: "保存中…",
+			discard: "放弃",
+			unsaved: "未保存",
+			loading: "加载中…",
+			unavailable: "配置服务不可用。",
+			readOnly: "当前部署无 settings provider，配置为只读；请编辑 settings.yaml。",
+			invalidNumber: "请输入正整数。",
+			collapse: "收起",
+			expand: "展开",
+			enabledOn: "已启用",
+			enabledOff: "未启用",
+			saveFailed: "保存失败，请检查填写内容。",
+			confirm: "确认",
+			cancel: "取消"
+		};
+		const commonEn = {
+			save: "Save",
+			saving: "Saving…",
+			discard: "Discard",
+			unsaved: "Unsaved",
+			loading: "Loading…",
+			unavailable: "Settings service unavailable.",
+			readOnly: "No settings provider in this deployment; config is read-only. Edit settings.yaml.",
+			invalidNumber: "Enter a positive integer.",
+			collapse: "Collapse",
+			expand: "Expand",
+			enabledOn: "On",
+			enabledOff: "Off",
+			saveFailed: "Save failed; check the fields.",
+			confirm: "Confirm",
+			cancel: "Cancel"
+		};
+		/** own 覆盖同键合并（返回新对象，入参不可变）。 */
+		function mergeDict(base, own) {
+			return {
+				...base,
+				...own
+			};
+		}
+		//#endregion
+		//#region ../shared/src/client/styles.ts
+		/**
+		* 配置卡片样式工厂（各插件 client 的公共收编版）。
+		* 视觉规则与迁移前逐字一致（类名前缀换为各插件自身，DOM 类名不变），
+		* 另补移动端与可达性增强（767px 断点 + pointer:coarse，对齐 ui-mobile-fit 约定）：
+		* - 窄屏 input/textarea 16px（防 iOS 聚焦缩放）、可点目标 ≥44px；
+		* - footer 按钮等宽换行、状态文字独占一行；
+		* - 展开态 body 底部 sticky 保存栏（长表单滚动中始终可达）。
+		* 沿用官方 data-plugin / data-plugin-css 约定（HMR 据此卸载），不覆盖上游选择器。
+		* @module @dsh-plus/shared/client/styles
+		*/
+		/** 生成全套卡片 CSS；prefix 为插件类名前缀（如 'dne'），extra 为插件特有规则。 */
+		function cardCss(prefix, extra = "") {
+			return `
+.${prefix}-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}
+.${prefix}-card:hover{border-color:var(--dsw-alias-label-dimmed)}
+.${prefix}-cardOpen{background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-label-dimmed)}
+.${prefix}-header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}
+.${prefix}-header:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:-2px}
+.${prefix}-headText{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}
+.${prefix}-name{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}
+.${prefix}-description{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.5}
+.${prefix}-chevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s;display:inline-flex}
+.${prefix}-chevronOpen{transform:rotate(180deg)}
+.${prefix}-pending{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
+.${prefix}-statusBadge{white-space:nowrap;border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
+.${prefix}-statusOn{background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary)}
+.${prefix}-statusOff{color:var(--dsw-alias-label-tertiary)}
+.${prefix}-body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding-bottom:8px}
+.${prefix}-field{flex-direction:column;gap:6px;padding:12px 0;display:flex}
+.${prefix}-field+.${prefix}-field{border-top:1px solid var(--dsw-alias-border-l2)}
+.${prefix}-head{align-items:center;gap:8px;display:flex}
+.${prefix}-label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}
+.${prefix}-badge{white-space:nowrap;border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}
+.${prefix}-badgeSet{background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary)}
+.${prefix}-badgeUnset{color:var(--dsw-alias-label-tertiary)}
+.${prefix}-input{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;transition:border-color .18s,background .18s}
+.${prefix}-input:hover:not(:disabled):not(:focus-visible){border-color:var(--dsw-alias-label-dimmed)}
+.${prefix}-input:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}
+.${prefix}-input:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}
+.${prefix}-inputInvalid{border-color:var(--dsw-alias-label-error)}
+.${prefix}-select{appearance:none;background:var(--dsw-alias-bg-module-platform);border:none;cursor:pointer;background-image:linear-gradient(45deg,transparent 50%,var(--dsw-alias-label-secondary) 50%),linear-gradient(135deg,var(--dsw-alias-label-secondary) 50%,transparent 50%);background-position:calc(100% - 16px) 50%,calc(100% - 11px) 50%;background-size:5px 5px;background-repeat:no-repeat;color:var(--dsw-alias-label-primary);font:inherit;font-size:13px;height:34px;box-sizing:border-box;border-radius:8px;padding:0 30px 0 12px;transition:background-color .18s}
+.${prefix}-select:hover:not(:disabled){background-color:var(--dsw-alias-interactive-bg-hover)}
+.${prefix}-hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}
+.${prefix}-invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}
+.${prefix}-checkRow{align-items:center;gap:10px;display:flex;padding:6px 0}
+.${prefix}-checkRow label{color:var(--dsw-alias-label-primary);font-size:13px;line-height:1.5;cursor:pointer;flex:1;min-width:0}
+/* 自绘圆角扁平开关（官方 UI 无可见原生 checkbox，选择类全走胶囊/菜单） */
+.${prefix}-checkRow input{appearance:none;-webkit-appearance:none;position:relative;box-sizing:border-box;background:var(--dsw-alias-bg-module-platform);border:none;border-radius:999px;width:34px;height:20px;flex:none;cursor:pointer;transition:background .18s;margin:0}
+.${prefix}-checkRow input::after{content:"";position:absolute;top:2px;left:2px;background:var(--dsw-alias-label-primary);border-radius:999px;width:16px;height:16px;transition:left .18s cubic-bezier(.4,0,.2,1)}
+.${prefix}-checkRow input:checked{background:var(--dsw-alias-brand-primary)}
+.${prefix}-checkRow input:checked::after{left:16px;background:var(--dsw-alias-bg-base)}
+.${prefix}-checkRow input:disabled{opacity:.4;cursor:default}
+.${prefix}-checkRow input:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}
+.${prefix}-groupLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:600;padding:12px 0 2px;margin:0}
+.${prefix}-readOnly{color:var(--dsw-alias-label-tertiary);margin:12px 0 0;font-size:12px;line-height:1.5}
+.${prefix}-warn{color:var(--dsw-alias-label-error);margin:12px 0 0;font-size:12px;line-height:1.5}
+.${prefix}-footer{border-top:1px solid var(--dsw-alias-border-l2);justify-content:flex-end;align-items:center;gap:8px;padding:12px 0 4px;display:flex;flex-wrap:wrap}
+.${prefix}-status{min-width:0;color:var(--dsw-alias-label-secondary);flex:1;margin:0;font-size:12px;line-height:1.5}
+.${prefix}-statusError{color:var(--dsw-alias-label-error)}
+.${prefix}-btn{appearance:none;font:inherit;cursor:pointer;border:1px solid #0000;border-radius:8px;padding:5px 14px;font-size:13px;line-height:1.5}
+.${prefix}-btnGhost{border-color:var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);background:0 0}
+.${prefix}-btnGhost:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}
+.${prefix}-btnPrimary{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}
+.${prefix}-btn:disabled{opacity:.4;cursor:default}
+.${prefix}-btn:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}
+@media (max-width:767px){
+.${prefix}-body{margin:0 10px}
+.${prefix}-header{padding:12px 12px}
+.${prefix}-input,.${prefix}-select{font-size:16px;height:40px}
+.${prefix}-checkRow{min-height:44px;padding:8px 0}
+.${prefix}-footer{position:sticky;bottom:0;background:var(--dsw-alias-bg-layer-2);margin:0 -10px;padding:10px 10px 6px;border-top:1px solid var(--dsw-alias-border-l2);border-bottom-left-radius:12px;border-bottom-right-radius:12px}
+.${prefix}-status{flex-basis:100%;flex:none}
+.${prefix}-btn{min-height:44px;flex:1;min-width:96px}
+.${prefix}-statusBadge{display:none}
+}
+@media (pointer:coarse){
+.${prefix}-btn{min-height:44px}
+.${prefix}-checkRow{min-height:44px}
+.${prefix}-input,.${prefix}-select{height:40px}
+}
+${extra}
+`;
+		}
+		/**
+		* 幂等注入样式标签（官方 data-plugin-css 约定）；返回新标签，
+		* 已存在或环境无 document 时返回 null（调用方 effect 卸载用）。
+		*/
+		function injectCardStyle(pluginId, css) {
+			if (typeof document === "undefined") return null;
+			const tagId = `${pluginId}/card.css`;
+			if (document.querySelector(`style[data-plugin-css=${JSON.stringify(tagId)}]`) !== null) return null;
+			const tag = document.createElement("style");
+			tag.dataset.plugin = pluginId;
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+			return tag;
+		}
+		//#endregion
+		//#region src/client/api.ts
+		/**
+		* 数据端点通道：GET list / POST set/unset（同源 fetch，值不上行到任何对话通道）。
+		* @module secret-env/client/api
+		*/
+		/** 端点错误：携带结构化错误码，UI 按码映射文案。 */
+		var ApiError = class extends Error {
+			code;
+			constructor(code) {
+				super(code);
+				this.code = code;
+			}
+		};
+		async function fetchSecrets(sessionId) {
+			return getJson(`/dsh-plus/secret-env/list${sessionId === void 0 ? "" : `?sessionId=${encodeURIComponent(sessionId)}`}`);
+		}
+		async function write(path, body) {
+			try {
+				await postJson(`/dsh-plus/secret-env/${path}`, body);
+			} catch (error) {
+				throw new ApiError(error instanceof Error ? error.message : "internal");
+			}
+		}
+		function setGlobal(name, value, description) {
+			return write("global/set", {
+				name,
+				value,
+				description
+			});
+		}
+		function unsetGlobal(name) {
+			return write("global/unset", { name });
+		}
+		function setSession(sessionId, name, value, description, once) {
+			return write("session/set", {
+				sessionId,
+				name,
+				value,
+				description,
+				once
+			});
+		}
+		function unsetSession(sessionId, name) {
+			return write("session/unset", {
+				sessionId,
+				name
+			});
+		}
+		//#endregion
+		//#region src/client/common.ts
+		/**
+		* 浏览器半共享小件：错误码文案映射与复制助手（设置页与会话控件共用）。
+		* @module secret-env/client/common
+		*/
+		/** 端点错误 → 本地化文案（未知码回落 internal）。 */
+		function errorText(t, error) {
+			const code = error instanceof ApiError ? error.code : "internal";
+			const text = t(`error.${code}`);
+			return text === `error.${code}` ? t("error.internal") : text;
+		}
+		/** 复制文本到剪贴板（clipboard API 缺席时退 execCommand）。 */
+		async function copyText(text) {
+			try {
+				await navigator.clipboard.writeText(text);
+				return true;
+			} catch {
+				const area = document.createElement("textarea");
+				area.value = text;
+				area.style.position = "fixed";
+				area.style.opacity = "0";
+				document.body.appendChild(area);
+				area.select();
+				const ok = document.execCommand("copy");
+				area.remove();
+				return ok;
+			}
+		}
+		//#endregion
+		//#region src/client/composer.tsx
+		/**
+		* 会话注入控件（conversation.input.right 官方插槽，session 作用域）：
+		* composer 工具行的钥匙胶囊，弹出本会话的会话级密钥面板（列表 + 增删）。
+		* 会话 id 由插槽 inject 工厂直接供给（框架解析的严格 session 作用域）。
+		* 窄屏（≤767px）popover 转底部抽屉；桌面点外部或 Esc 关闭。
+		* @module secret-env/client/composer
+		*/
+		const EMPTY_FORM$1 = {
+			name: "",
+			value: "",
+			description: "",
+			once: false
+		};
+		function SessionRow(props) {
+			const { t, entry } = props;
+			const [copied, setCopied] = (0, react.useState)(false);
+			const timer = (0, react.useRef)(null);
+			(0, react.useEffect)(() => () => {
+				if (timer.current !== null) clearTimeout(timer.current);
+			}, []);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dse-row",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dse-rowMain",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dse-env",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							className: "dse-envName",
+							children: ["$", entry.envName]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dse-iconBtn",
+							title: t("copy"),
+							"aria-label": t("copy"),
+							onClick: () => {
+								copyText(`$${entry.envName}`).then((ok) => {
+									if (!ok) return;
+									setCopied(true);
+									if (timer.current !== null) clearTimeout(timer.current);
+									timer.current = setTimeout(() => setCopied(false), 1500);
+								});
+							},
+							children: copied ? "✓" : "⧉"
+						})]
+					}), entry.description !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dse-note",
+						children: entry.description
+					}) : null]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dse-badges",
+					children: [entry.once ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dse-badge",
+						children: t("scopeOnce")
+					}) : null, /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "dse-iconBtn dse-delBtn",
+						title: t("delete"),
+						"aria-label": t("delete"),
+						onClick: () => {
+							unsetSession(props.sessionId, entry.name).then(() => props.onDeleted()).catch((error) => props.onError(errorText(t, error)));
+						},
+						children: "✕"
+					})]
+				})]
+			});
+		}
+		function ComposerSecret(props) {
+			const { sessionId, t } = props;
+			const [open, setOpen] = (0, react.useState)(false);
+			const [items, setItems] = (0, react.useState)(null);
+			const [form, setForm] = (0, react.useState)(EMPTY_FORM$1);
+			const [saving, setSaving] = (0, react.useState)(false);
+			const [status, setStatus] = (0, react.useState)(null);
+			const wrapRef = (0, react.useRef)(null);
+			const load = () => {
+				fetchSecrets(sessionId).then((list) => setItems(list.session)).catch(() => setStatus(errorText(t, /* @__PURE__ */ new Error("internal"))));
+			};
+			(0, react.useEffect)(() => {
+				if (!open) return;
+				load();
+			}, [open, sessionId]);
+			(0, react.useEffect)(() => {
+				if (!open) return;
+				const onDown = (event) => {
+					if (wrapRef.current !== null && !wrapRef.current.contains(event.target)) setOpen(false);
+				};
+				const onKey = (event) => {
+					if (event.key === "Escape") setOpen(false);
+				};
+				document.addEventListener("mousedown", onDown);
+				document.addEventListener("keydown", onKey);
+				return () => {
+					document.removeEventListener("mousedown", onDown);
+					document.removeEventListener("keydown", onKey);
+				};
+			}, [open]);
+			const onSave = () => {
+				setSaving(true);
+				setStatus(null);
+				setSession(sessionId, form.name, form.value, form.description, form.once).then(() => {
+					setForm(EMPTY_FORM$1);
+					load();
+				}).catch((error) => setStatus(errorText(t, error))).finally(() => setSaving(false));
+			};
+			const count = items?.length ?? 0;
+			const canSave = form.name.trim() !== "" && form.value !== "" && !saving;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+				className: "dse-wrap",
+				ref: wrapRef,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+					type: "button",
+					className: "dse-chip",
+					"aria-expanded": open,
+					"aria-label": t("sessionSecrets"),
+					title: t("sessionSecrets"),
+					onClick: () => setOpen(!open),
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
+						width: "14",
+						height: "14",
+						viewBox: "0 0 24 24",
+						fill: "none",
+						"aria-hidden": "true",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("path", {
+							d: "M14.5 2a7.5 7.5 0 0 0-7.36 9.04L2 20.19V22h1.81l1.5-1.5v-1.81h1.81v-1.81h1.81l1.22-1.22A7.5 7.5 0 1 0 14.5 2Zm2 5.5a1.5 1.5 0 1 1 0-3 1.5 1.5 0 0 1 0 3Z",
+							fill: "currentColor"
+						})
+					}), count > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dse-count",
+						children: count
+					}) : null]
+				}), open ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dse-pop",
+					role: "dialog",
+					"aria-label": t("sessionSecrets"),
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dse-popHead",
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "dse-popTitle",
+									children: t("sessionSecrets")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dse-iconBtn",
+									title: t("refresh"),
+									"aria-label": t("refresh"),
+									onClick: load,
+									children: "⟳"
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dse-iconBtn",
+									title: t("close"),
+									"aria-label": t("close"),
+									onClick: () => setOpen(false),
+									children: "✕"
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "dse-popHint",
+							children: t("sessionHint")
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: "dse-popList",
+							children: items === null || items.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dse-empty",
+								children: t("sessionEmpty")
+							}) : items.map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SessionRow, {
+								t,
+								sessionId,
+								entry,
+								onDeleted: load,
+								onError: (text) => setStatus(text === "" ? null : text)
+							}, entry.name))
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dse-popForm",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dse-field",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+										className: "dse-head",
+										children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+											className: "dse-label",
+											htmlFor: "dse-s-name",
+											children: t("addSession")
+										})
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										id: "dse-s-name",
+										className: "dse-input",
+										placeholder: "API_TOKEN",
+										value: form.name,
+										onChange: (event) => setForm({
+											...form,
+											name: event.target.value
+										})
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										className: "dse-input",
+										type: "password",
+										autoComplete: "off",
+										placeholder: t("valueLabel"),
+										value: form.value,
+										onChange: (event) => setForm({
+											...form,
+											value: event.target.value
+										})
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										className: "dse-input",
+										placeholder: t("descLabel"),
+										value: form.description,
+										onChange: (event) => setForm({
+											...form,
+											description: event.target.value
+										})
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										className: "dse-checkRow",
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											id: "dse-s-once",
+											type: "checkbox",
+											role: "switch",
+											"aria-checked": form.once,
+											checked: form.once,
+											onChange: (event) => setForm({
+												...form,
+												once: event.target.checked
+											})
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+											htmlFor: "dse-s-once",
+											children: t("onceLabel")
+										})]
+									})
+								]
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dse-foot",
+								children: [status !== null ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "dse-status dse-statusError",
+									children: status
+								}) : null, /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dse-btn dse-btnPrimary",
+									disabled: !canSave,
+									onClick: onSave,
+									children: saving ? t("saving") : t("save")
+								})]
+							})]
+						})
+					]
+				}) : null]
+			});
+		}
+		//#endregion
+		//#region src/client/i18n.ts
+		/**
+		* 浏览器半文案（zh/en）。公共键来自 shared common，本文件只维护业务键。
+		* @module secret-env/client/i18n
+		*/
+		const NS = "dsh-plus-secret-env";
+		const ownZh = {
+			nav: "密钥变量",
+			title: "密钥变量",
+			description: "以 $DSH_SECRET_* 变量名向 agent 暴露密钥：值在每次 shell 调用时由宿主注入，不进入对话记录与提示词，不影响上下文缓存。",
+			globalList: "全局密钥",
+			colName: "变量名（模型可见）",
+			colDescription: "描述",
+			colState: "状态",
+			colActions: "操作",
+			configured: "已配置",
+			unconfigured: "未配置",
+			readonly: "只读来源",
+			addGlobal: "添加全局密钥",
+			nameLabel: "变量名后缀",
+			nameHint: "大写字母/数字/下划线，如 GITHUB_TOKEN；模型实际使用 $DSH_SECRET_ 前缀拼接后的完整名。",
+			valueLabel: "值",
+			valueHint: "写入后不可回读；保存于宿主凭据库，不进入对话。",
+			descLabel: "描述（可选）",
+			descHint: "仅人读备注，不进提示词。",
+			save: "保存",
+			saving: "保存中…",
+			delete: "删除",
+			deleteConfirm: "确认删除 {name}？该变量将立即对后续命令失效。",
+			copy: "复制变量名",
+			copied: "已复制",
+			emptyGlobal: "暂无全局密钥。添加后 agent 即可通过变量名引用。",
+			loadFailed: "加载失败，请稍后重试。",
+			retry: "重试",
+			sessionSecrets: "会话密钥",
+			sessionEmpty: "本会话暂无有默认值的密钥。",
+			sessionHint: "仅当前会话的 shell 命令可用；会话结束或一次性使用即失效。",
+			addSession: "添加会话密钥",
+			onceLabel: "一次性（首次使用后销毁）",
+			close: "关闭",
+			refresh: "刷新",
+			scopeGlobal: "全局",
+			scopeSession: "会话",
+			scopeOnce: "一次性",
+			"error.invalid-name": "变量名不合法：大写字母开头，仅字母/数字/下划线，≤64 字符。",
+			"error.empty-value": "值不能为空。",
+			"error.shadowed": "进程环境中已存在同名变量且优先级更高，写入无效；请先取消该环境变量。",
+			"error.conflict": "变量名与其他插件注册的受管变量冲突。",
+			"error.no-session": "缺少会话标识，请刷新后重试。",
+			"error.method": "请求方法不允许。",
+			"error.internal": "服务内部错误，请查看宿主日志。"
+		};
+		const ownEn = {
+			nav: "Secret Variables",
+			title: "Secret Variables",
+			description: "Expose secrets to the agent as $DSH_SECRET_* variables: values are injected by the host into each shell call, never enter the transcript or prompt, and do not affect context caching.",
+			globalList: "Global secrets",
+			colName: "Variable (model-visible)",
+			colDescription: "Description",
+			colState: "State",
+			colActions: "Actions",
+			configured: "Configured",
+			unconfigured: "Not configured",
+			readonly: "Read-only source",
+			addGlobal: "Add global secret",
+			nameLabel: "Name suffix",
+			nameHint: "Uppercase letters/digits/underscore, e.g. GITHUB_TOKEN; the model uses the full name with the $DSH_SECRET_ prefix.",
+			valueLabel: "Value",
+			valueHint: "Write-only after saving; stored in the host credential store, never in chat.",
+			descLabel: "Description (optional)",
+			descHint: "Human-readable note only; never enters prompts.",
+			save: "Save",
+			saving: "Saving…",
+			delete: "Delete",
+			deleteConfirm: "Delete {name}? The variable stops working for subsequent commands immediately.",
+			copy: "Copy variable name",
+			copied: "Copied",
+			emptyGlobal: "No global secrets yet. Once added, the agent can reference them by name.",
+			loadFailed: "Failed to load. Try again later.",
+			retry: "Retry",
+			sessionSecrets: "Session secrets",
+			sessionEmpty: "No session secrets yet.",
+			sessionHint: "Available to shell commands of this session only; expires when the session ends or after one use.",
+			addSession: "Add session secret",
+			onceLabel: "One-time (destroyed after first use)",
+			close: "Close",
+			refresh: "Refresh",
+			scopeGlobal: "global",
+			scopeSession: "session",
+			scopeOnce: "once",
+			"error.invalid-name": "Invalid name: start with an uppercase letter; letters/digits/underscore only, ≤64 chars.",
+			"error.empty-value": "Value must not be empty.",
+			"error.shadowed": "A same-named process environment variable shadows this write; unset it first.",
+			"error.conflict": "The variable conflicts with a managed variable registered by another plugin.",
+			"error.no-session": "Missing session id; refresh and retry.",
+			"error.method": "Method not allowed.",
+			"error.internal": "Internal error; check the host log."
+		};
+		const zh = mergeDict(commonZh, ownZh);
+		const en = mergeDict(commonEn, ownEn);
+		//#endregion
+		//#region src/client/section.tsx
+		/**
+		* 密钥变量设置页（settings.section 官方插槽）：全局密钥的列表与增删。
+		* 只展示元数据与模型可见的完整变量名——值写入后不可回读（端点不出值）。
+		* 响应式：≤767px 行转堆叠卡、表单转单列。
+		* @module secret-env/client/section
+		*/
+		const EMPTY_FORM = {
+			name: "",
+			value: "",
+			description: ""
+		};
+		/** 单行：完整变量名（复制）+ 描述 + 状态徽标 + 两步删除。 */
+		function GlobalRow(props) {
+			const { t, entry } = props;
+			const [confirming, setConfirming] = (0, react.useState)(false);
+			const [copied, setCopied] = (0, react.useState)(false);
+			const timer = (0, react.useRef)(null);
+			(0, react.useEffect)(() => () => {
+				if (timer.current !== null) clearTimeout(timer.current);
+			}, []);
+			const onCopy = () => {
+				copyText(`$${entry.envName}`).then((ok) => {
+					if (!ok) return;
+					setCopied(true);
+					if (timer.current !== null) clearTimeout(timer.current);
+					timer.current = setTimeout(() => setCopied(false), 1500);
+				});
+			};
+			const onDelete = () => {
+				unsetGlobal(entry.name).then(() => props.onDeleted()).catch((error) => props.onError(errorText(t, error)));
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dse-row",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dse-rowMain",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dse-env",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							className: "dse-envName",
+							children: ["$", entry.envName]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dse-iconBtn",
+							title: t("copy"),
+							"aria-label": t("copy"),
+							onClick: onCopy,
+							children: copied ? "✓" : "⧉"
+						})]
+					}), entry.description !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dse-note",
+						children: entry.description
+					}) : null]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dse-badges",
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: `dse-badge${entry.configured ? "" : " dse-badgeDim"}`,
+							children: entry.configured ? t("configured") : t("unconfigured")
+						}),
+						entry.writable ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dse-badge dse-badgeDim",
+							title: entry.source ?? "",
+							children: t("readonly")
+						}),
+						confirming ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dse-btn dse-btnPrimary",
+							onClick: onDelete,
+							children: t("delete")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dse-btn dse-btnGhost",
+							onClick: () => setConfirming(false),
+							children: t("close")
+						})] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dse-iconBtn dse-delBtn",
+							title: t("delete"),
+							"aria-label": t("delete"),
+							onClick: () => setConfirming(true),
+							children: "✕"
+						})
+					]
+				})]
+			});
+		}
+		function SecretsSection(props) {
+			const { t } = props;
+			const [data, setData] = (0, react.useState)(null);
+			const [failed, setFailed] = (0, react.useState)(false);
+			const [form, setForm] = (0, react.useState)(EMPTY_FORM);
+			const [saving, setSaving] = (0, react.useState)(false);
+			const [status, setStatus] = (0, react.useState)(null);
+			const load = () => {
+				fetchSecrets().then((list) => {
+					setData(list);
+					setFailed(false);
+				}).catch(() => setFailed(true));
+			};
+			(0, react.useEffect)(() => {
+				load();
+			}, []);
+			const onSave = () => {
+				setSaving(true);
+				setStatus(null);
+				setGlobal(form.name, form.value, form.description).then(() => {
+					setForm(EMPTY_FORM);
+					setStatus({
+						kind: "ok",
+						text: t("configured")
+					});
+					load();
+				}).catch((error) => {
+					setStatus({
+						kind: "err",
+						text: errorText(t, error instanceof ApiError ? error : new ApiError("internal"))
+					});
+				}).finally(() => setSaving(false));
+			};
+			if (data === null) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dse-section",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					className: "dse-empty",
+					children: failed ? t("loadFailed") : "…"
+				}), failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					className: "dse-btn dse-btnGhost",
+					onClick: load,
+					children: t("retry")
+				}) : null]
+			});
+			const canSave = form.name.trim() !== "" && form.value !== "" && !saving;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dse-section",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("header", {
+						className: "dse-head",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
+							className: "dse-title",
+							children: t("title")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "dse-desc",
+							children: t("description")
+						})]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+						className: "dse-groupLabel",
+						children: t("globalList")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dse-rows",
+						children: data.global.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "dse-empty",
+							children: t("emptyGlobal")
+						}) : data.global.map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(GlobalRow, {
+							t,
+							entry,
+							onDeleted: load,
+							onError: (text) => setStatus({
+								kind: "err",
+								text
+							})
+						}, entry.name))
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+						className: "dse-groupLabel",
+						children: t("addGlobal")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dse-form",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dse-formGrid",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "dse-field",
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+											className: "dse-head",
+											children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+												className: "dse-label",
+												htmlFor: "dse-name",
+												children: t("nameLabel")
+											})
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											id: "dse-name",
+											className: "dse-input",
+											value: form.name,
+											placeholder: "GITHUB_TOKEN",
+											onChange: (event) => setForm({
+												...form,
+												name: event.target.value
+											})
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											className: "dse-hint",
+											children: t("nameHint")
+										})
+									]
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "dse-field",
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+											className: "dse-head",
+											children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+												className: "dse-label",
+												htmlFor: "dse-value",
+												children: t("valueLabel")
+											})
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											id: "dse-value",
+											className: "dse-input",
+											type: "password",
+											autoComplete: "off",
+											value: form.value,
+											onChange: (event) => setForm({
+												...form,
+												value: event.target.value
+											})
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											className: "dse-hint",
+											children: t("valueHint")
+										})
+									]
+								})]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dse-field",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+										className: "dse-head",
+										children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+											className: "dse-label",
+											htmlFor: "dse-desc",
+											children: t("descLabel")
+										})
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										id: "dse-desc",
+										className: "dse-input",
+										value: form.description,
+										onChange: (event) => setForm({
+											...form,
+											description: event.target.value
+										})
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										className: "dse-hint",
+										children: t("descHint")
+									})
+								]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dse-foot",
+								children: [status !== null ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: `dse-status${status.kind === "err" ? " dse-statusError" : ""}`,
+									children: status.text
+								}) : null, /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dse-btn dse-btnPrimary",
+									disabled: !canSave,
+									onClick: onSave,
+									children: saving ? t("saving") : t("save")
+								})]
+							})
+						]
+					})
+				]
+			});
+		}
+		//#endregion
+		//#region src/client/styles.ts
+		/**
+		* 样式注入：shared cardCss('dse') 提供官方卡片/字段/按钮基件，
+		* extra 部分为本插件特有规则——设置页变量表（桌面网格、≤767px 堆叠）
+		* 与会话注入控件（官方 chip 胶囊 + popover，窄屏转底部抽屉）。
+		* @module secret-env/client/styles
+		*/
+		const EXTRA = `
+/* 设置页布局 */
+.dse-section{padding:0 0 24px}
+.dse-head{flex-direction:column;gap:6px;padding:16px 0 12px;display:flex}
+.dse-title{color:var(--dsw-alias-label-primary);font-size:18px;font-weight:600;margin:0;line-height:1.4}
+.dse-desc{color:var(--dsw-alias-label-tertiary);font-size:13px;margin:0;line-height:1.6}
+.dse-groupLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:600;padding:14px 0 8px;margin:0}
+.dse-rows{flex-direction:column;display:flex;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;overflow:hidden}
+.dse-row{align-items:center;gap:12px;padding:10px 14px;display:flex;background:var(--dsw-alias-bg-layer-3)}
+.dse-row+.dse-row{border-top:1px solid var(--dsw-alias-border-l2)}
+.dse-rowMain{flex-direction:column;gap:3px;flex:1;min-width:0;display:flex}
+.dse-env{align-items:center;gap:6px;display:flex;min-width:0}
+.dse-envName{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;color:var(--dsw-alias-label-primary);font-size:13px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dse-note{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dse-badges{align-items:center;gap:6px;flex:none;display:flex}
+.dse-badge{white-space:nowrap;border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary)}
+.dse-badgeDim{background:0 0;color:var(--dsw-alias-label-tertiary)}
+.dse-iconBtn{appearance:none;border:none;background:0 0;cursor:pointer;color:var(--dsw-alias-label-tertiary);border-radius:6px;padding:4px;display:inline-flex}
+.dse-iconBtn:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover)}
+.dse-iconBtn:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}
+.dse-delBtn{color:var(--dsw-alias-label-tertiary)}
+.dse-delBtn:hover{color:var(--dsw-alias-label-error)}
+.dse-empty{color:var(--dsw-alias-label-tertiary);font-size:13px;padding:18px 14px;margin:0;background:var(--dsw-alias-bg-layer-3)}
+.dse-form{border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-3);padding:4px 14px 12px;margin-top:10px}
+.dse-formGrid{display:grid;grid-template-columns:1fr 1fr;gap:0 16px}
+/* 会话注入控件（composer 工具行胶囊，对齐官方 chip 语言） */
+.dse-wrap{position:relative;align-items:center;display:inline-flex}
+.dse-chip{background:var(--dsw-alias-bg-module-platform);min-width:34px;color:var(--dsw-alias-label-secondary);cursor:pointer;border:none;border-radius:999px;align-items:center;gap:4px;padding:2px 8px;font-size:13px;font-weight:500;line-height:20px;display:inline-flex}
+.dse-chip:hover:not(:disabled){color:var(--dsw-alias-label-primary)}
+.dse-chip:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}
+.dse-chip:disabled{opacity:.6;cursor:default}
+.dse-count{background:var(--dsw-alias-brand-primary);color:var(--dsw-alias-bg-base);border-radius:999px;min-width:16px;text-align:center;font-size:11px;line-height:16px;padding:0 4px}
+.dse-pop{position:absolute;bottom:calc(100% + 8px);right:0;z-index:60;width:320px;max-width:calc(100vw - 24px);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;box-shadow:0 8px 28px rgba(0,0,0,.18);padding:10px 12px 12px}
+.dse-popHead{align-items:center;gap:8px;display:flex;padding:2px 0 8px}
+.dse-popTitle{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:600;flex:1;margin:0}
+.dse-popHint{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5;margin:0 0 8px}
+.dse-popList{flex-direction:column;display:flex;max-height:220px;overflow:auto;margin:0 -4px;padding:0 4px}
+.dse-popList .dse-row{background:0 0;border-radius:8px;padding:8px 8px}
+.dse-popList .dse-row+.dse-row{border-top:1px solid var(--dsw-alias-border-l2)}
+.dse-popForm{border-top:1px solid var(--dsw-alias-border-l2);margin-top:8px;padding-top:4px}
+.dse-foot{justify-content:flex-end;gap:8px;display:flex;padding-top:8px}
+/* 响应式：窄屏表格转堆叠，popover 转底部抽屉 */
+@media (max-width:767px){
+.dse-formGrid{grid-template-columns:1fr}
+.dse-row{flex-wrap:wrap;padding:12px 12px}
+.dse-rowMain{flex-basis:100%}
+.dse-badges{margin-left:auto}
+.dse-pop{position:fixed;left:8px;right:8px;bottom:8px;top:auto;width:auto;max-width:none;max-height:70vh;overflow:auto}
+.dse-chip{min-height:32px}
+}
+@media (pointer:coarse){
+.dse-chip{min-height:32px}
+.dse-iconBtn{min-width:44px;min-height:44px;align-items:center;justify-content:center}
+}
+`;
+		/** 幂等注入本插件样式；返回新标签（卸载用），已存在或无 document 返回 null。 */
+		function injectSecretEnvStyle(pluginId) {
+			return injectCardStyle(pluginId, cardCss("dse", EXTRA));
+		}
+		//#endregion
+		//#region src/client/client.ts
+		const name = "dsh-plus-secret-env";
+		/** 浏览器半需要的 cordis 服务 key（loader 据此注入；package.json 的 dsh.client.inject 管包加载顺序）。 */
+		const inject = ["slots", "locale"];
+		function apply(ctx) {
+			const c = ctx;
+			const styleTag = injectSecretEnvStyle("@dsh-plus/secret-env");
+			c.effect(() => () => {
+				styleTag?.remove();
+			}, "secret-env: style");
+			c.effect(() => c.locale.register(NS, {
+				zh,
+				en
+			}), "secret-env: locale");
+			const t = c.locale.bind(NS);
+			c.slots.inject("settings.section", () => c.slots.register({
+				name: "settings.section",
+				id: "dsh-plus-secret-env",
+				order: 16,
+				label: () => t("nav"),
+				inject: () => ({ t })
+			}, SecretsSection));
+			c.slots.inject("conversation.input.right", () => c.slots.register({
+				name: "conversation.input.right",
+				id: "dsh-plus-secret-env",
+				order: 40,
+				locale: NS,
+				inject: (sessionId) => ({ sessionId })
+			}, ComposerSecret));
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		exports.name = name;
+		return module.exports;
+	}
+});