@dsh-plus/secret-env 0.1.32 → 0.1.34

package/lib/client.js

@@ -481,7 +481,6 @@ ${extra}
 			"command.openPanel": "打开会话变量面板",
 			"error.invalid-name": "变量名不合法：大写字母开头，仅字母/数字/下划线，≤64 字符。",
 			"error.empty-value": "值不能为空。",
-			"error.shadowed": "进程环境中已存在同名变量且优先级更高，写入无效；请先取消该环境变量。",
 			"error.conflict": "变量名与其他插件注册的受管变量冲突。",
 			"error.no-session": "缺少会话标识，请刷新后重试。",
 			"error.method": "请求方法不允许。",
@@ -542,7 +541,6 @@ ${extra}
 			"command.openPanel": "Open the session variable panel",
 			"error.invalid-name": "Invalid name: start with an uppercase letter; letters/digits/underscore only, ≤64 chars.",
 			"error.empty-value": "Value must not be empty.",
-			"error.shadowed": "A same-named process environment variable shadows this write; unset it first.",
 			"error.conflict": "The variable conflicts with a managed variable registered by another plugin.",
 			"error.no-session": "Missing session id; refresh and retry.",
 			"error.method": "Method not allowed.",

package/lib/index.d.ts

@@ -114,7 +114,7 @@ declare class SecretEnvService extends Service {
    * 两级屏蔽都在 contributor resolve 时现判，下一条命令即生效。
    */
   setMask(suffix: string, masked: boolean, sessionId?: string): Promise<void>;
-  /** 写入全局值（seam 拒绝继承环境遮蔽与空值，此处先行给出结构化错误）。 */
+  /** 写入全局值（空值先行给出结构化错误；其余失败由端点按 internal 上报）。 */
   setGlobal(suffix: string, value: string, description: string): Promise<void>;
   /** 删除全局值与元数据；宿主环境仍有同名变量时回落为继承变量继续纳入。 */
   unsetGlobal(suffix: string): Promise<void>;

package/lib/index.js

@@ -104,10 +104,10 @@ function readSuffix(raw) {
 function readString(raw) {
 	return typeof raw === "string" ? raw : "";
 }
-/** 错误 → HTTP 映射（值类错误 400，遮蔽/冲突 409，其余 500；均只带错误码与消息）。 */
+/** 错误 → HTTP 映射（值类错误 400，冲突 409，其余 500；均只带错误码与消息）。 */
 function sendError(res, error) {
 	if (error instanceof SecretEnvError) {
-		sendJson(res, error.code === "shadowed" || error.code === "conflict" ? 409 : 400, {
+		sendJson(res, error.code === "conflict" ? 409 : 400, {
 			ok: false,
 			error: error.code,
 			message: error.message
@@ -493,14 +493,10 @@ var SecretEnvService = class extends Service {
 		if (masked) next.push(suffix);
 		if (this.settingsRef !== void 0) await this.settingsRef.update(SETTINGS_NS, { masked: next });
 	}
-	/** 写入全局值（seam 拒绝继承环境遮蔽与空值，此处先行给出结构化错误）。 */
+	/** 写入全局值（空值先行给出结构化错误；其余失败由端点按 internal 上报）。 */
 	async setGlobal(suffix, value, description) {
 		if (value.length === 0) throw new SecretEnvError("empty-value", "value must not be empty");
-		try {
-			await this.ctx.credentials.set(credentialRef(envNameOf(suffix)), value);
-		} catch (error) {
-			throw new SecretEnvError("shadowed", error instanceof Error ? error.message : String(error));
-		}
+		await this.ctx.credentials.set(credentialRef(envNameOf(suffix)), value);
 		const meta = this.currentMeta();
 		const next = meta.find((item) => item.name === suffix) === void 0 ? [...meta, {
 			name: suffix,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-plus/secret-env",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "description": "dsh-plus service+ui plugin: 密钥环境变量——以 $DSH_VAR_* 变量名向 agent 暴露密钥（全局持久/会话级/一次性），执行期经 dsh-shell-env 原生注入，值不进消息流，不影响缓存率",
   "type": "module",
   "main": "lib/index.js",
@@ -19,27 +19,27 @@
     "src"
   ],
   "dependencies": {
-    "@dsh-plus/shared": "0.1.38"
+    "@dsh-plus/shared": "0.1.40"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.5-alpha.1",
-    "@deepseek-ai/dsh-credentials": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-shell-env": "^0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "^3.18.5-alpha.1"
+    "@deepseek-ai/cordis": "^4.0.5-alpha.2",
+    "@deepseek-ai/dsh-credentials": "^0.2.1-alpha.3",
+    "@deepseek-ai/dsh-host-webserver": "^0.2.1-alpha.3",
+    "@deepseek-ai/dsh-settings": "^0.2.1-alpha.3",
+    "@deepseek-ai/dsh-shell-env": "^0.2.1-alpha.3",
+    "@deepseek-ai/schemastery": "^3.18.5-alpha.2"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.5-alpha.1",
-    "@deepseek-ai/dsh-client-ui-commands": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-shell-env": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "3.18.5-alpha.1",
+    "@deepseek-ai/cordis": "4.0.5-alpha.2",
+    "@deepseek-ai/dsh-client-ui-commands": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-host-webserver": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-settings": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-shell-env": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-tools": "0.2.1-alpha.3",
+    "@deepseek-ai/schemastery": "3.18.5-alpha.2",
     "@types/node": "26.4.0",
     "@types/react": "~18.3.31",
     "react": "^18.2.0"

package/src/api.ts

@@ -43,10 +43,10 @@ function readString(raw: unknown): string {
   return typeof raw === 'string' ? raw : ''
 }
 
-/** 错误 → HTTP 映射（值类错误 400，遮蔽/冲突 409，其余 500；均只带错误码与消息）。 */
+/** 错误 → HTTP 映射（值类错误 400，冲突 409，其余 500；均只带错误码与消息）。 */
 function sendError(res: ServerResponse, error: unknown): void {
   if (error instanceof SecretEnvError) {
-    const status = error.code === 'shadowed' || error.code === 'conflict' ? 409 : 400
+    const status = error.code === 'conflict' ? 409 : 400
     sendJson(res, status, { ok: false, error: error.code, message: error.message })
     return
   }

package/src/client/i18n.ts

@@ -69,7 +69,6 @@ const ownZh = {
   // 错误码
   'error.invalid-name': '变量名不合法：大写字母开头，仅字母/数字/下划线，≤64 字符。',
   'error.empty-value': '值不能为空。',
-  'error.shadowed': '进程环境中已存在同名变量且优先级更高，写入无效；请先取消该环境变量。',
   'error.conflict': '变量名与其他插件注册的受管变量冲突。',
   'error.no-session': '缺少会话标识，请刷新后重试。',
   'error.method': '请求方法不允许。',
@@ -135,7 +134,6 @@ const ownEn = {
   'error.invalid-name':
     'Invalid name: start with an uppercase letter; letters/digits/underscore only, ≤64 chars.',
   'error.empty-value': 'Value must not be empty.',
-  'error.shadowed': 'A same-named process environment variable shadows this write; unset it first.',
   'error.conflict': 'The variable conflicts with a managed variable registered by another plugin.',
   'error.no-session': 'Missing session id; refresh and retry.',
   'error.method': 'Method not allowed.',

package/src/service.ts

@@ -277,14 +277,12 @@ export class SecretEnvService extends Service {
     }
   }
 
-  /** 写入全局值（seam 拒绝继承环境遮蔽与空值，此处先行给出结构化错误）。 */
+  /** 写入全局值（空值先行给出结构化错误；其余失败由端点按 internal 上报）。 */
   async setGlobal(suffix: string, value: string, description: string): Promise<void> {
     if (value.length === 0) throw new SecretEnvError('empty-value', 'value must not be empty')
-    try {
-      await this.ctx.credentials.set(credentialRef(envNameOf(suffix)), value)
-    } catch (error) {
-      throw new SecretEnvError('shadowed', error instanceof Error ? error.message : String(error))
-    }
+    // 宿主环境同名变量不再遮蔽写入：凭据服务自 0.2.1-alpha.3 起以存值优先，
+    // 存值落盘即生效（写入前宿主环境里的同名变量在索引里被显式排除）。
+    await this.ctx.credentials.set(credentialRef(envNameOf(suffix)), value)
     const meta = this.currentMeta()
     const existing = meta.find((item) => item.name === suffix)
     const next =