@dungsil/dsh-plugin-ui-vcs 0.2.0 → 0.3.0

package/dist/client.js

@@ -12,9 +12,9 @@ var __exportAll = (all, no_symbols) => {
 	return target;
 };
 let react = require("react");
+let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
 let react_jsx_runtime = require("react/jsx-runtime");
 let react_dom = require("react-dom");
-let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
 // ../../tools/ui/src/icons/git-pull-request.svg
 var git_pull_request_default = "<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n  <circle cx=\"5\" cy=\"5\" r=\"2\"/>\n  <circle cx=\"5\" cy=\"19\" r=\"2\"/>\n  <circle cx=\"19\" cy=\"19\" r=\"2\"/>\n  <path d=\"M5 7v10M19 17V7a2 2 0 0 0-2-2h-5m3-3-3 3 3 3\"/>\n</svg>\n";
 // ../../tools/ui/src/icons/git-pull-request-draft.svg
@@ -23,6 +23,40 @@ var git_pull_request_draft_default = "<svg xmlns=\"http://www.w3.org/2000/svg\"
 var git_pull_request_closed_default = "<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n  <circle cx=\"5\" cy=\"5\" r=\"2\"/>\n  <circle cx=\"5\" cy=\"19\" r=\"2\"/>\n  <circle cx=\"19\" cy=\"19\" r=\"2\"/>\n  <path d=\"M5 7v10M19 17v-5M16 3l6 6m0-6-6 6\"/>\n</svg>\n";
 // ../../tools/ui/src/icons/git-merge.svg
 var git_merge_default = "<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n  <circle cx=\"5\" cy=\"5\" r=\"2\"/>\n  <circle cx=\"5\" cy=\"19\" r=\"2\"/>\n  <circle cx=\"19\" cy=\"19\" r=\"2\"/>\n  <path d=\"M5 7v10M5 7a12 12 0 0 0 12 12\"/>\n</svg>\n";
+// ../../tools/ui/src/client.ts
+function useLocaleSnapshot(locale) {
+	const subscribe = (0, react.useCallback)((listener) => locale.subscribe(listener), [locale]);
+	const getSnapshot = (0, react.useCallback)(() => locale.getSnapshot(), [locale]);
+	return (0, react.useSyncExternalStore)(subscribe, getSnapshot);
+}
+/** Each effect owns its sheet, even when another plugin installs the same defaults. */
+function installStyles(css) {
+	const style = document.createElement("style");
+	style.textContent = css;
+	document.head.append(style);
+	return () => style.remove();
+}
+// ../../tools/ui/src/settings.tsx
+const settingsStyles = `
+.dsh-plugin-settings-row { display: flex; align-items: center; justify-content: space-between; gap: 16px; padding: 16px 0; border-bottom: .5px solid var(--dsw-alias-border-l2); }
+.dsh-plugin-settings-text { flex: 1; min-width: 0; }
+.dsh-plugin-settings-picker { min-width: 0; }
+.dsh-plugin-settings-selector { box-sizing: border-box; display: inline-flex; align-items: center; gap: 12px; max-width: 100%; height: 36px; padding: 0 14px; border: none; border-radius: var(--dsw-radius-md); background: var(--dsw-alias-bg-module-platform); color: inherit; font: inherit; cursor: pointer; }
+.dsh-plugin-settings-value { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.dsh-plugin-settings-selector svg { flex: none; }
+.dsh-plugin-settings-selector:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); }
+.dsh-plugin-settings-selector:disabled { opacity: .5; cursor: default; }
+.dsh-plugin-settings-selector:focus-visible { outline: 2px solid var(--dsw-alias-brand-primary-new-colorprimary-new-color); outline-offset: 2px; }
+`;
+function SettingsRow({ label, children }) {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: "dsh-plugin-settings-row",
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+			className: "dsh-plugin-settings-text",
+			children: label
+		}), children]
+	});
+}
 // locale/en.json
 var en_default = {
 	meta: {
@@ -13322,7 +13356,7 @@ function bindPullRequestLinks(root, open) {
 }
 // src/pull-requests-client.tsx
 var pull_requests_client_exports = /* @__PURE__ */ __exportAll({
-	apply: () => apply$1,
+	apply: () => apply$2,
 	checksState: () => checksState,
 	inject: () => inject$1,
 	name: () => name$1
@@ -13427,7 +13461,7 @@ function Choice({ label, value, items, onChange, disabled }) {
 		})
 	});
 }
-function apply$1(ctx) {
+function apply$2(ctx) {
 	const connection = ctx.get("connection");
 	const sessions = ctx.get("sessions");
 	const views = /* @__PURE__ */ new Map();
@@ -14209,6 +14243,15 @@ function apply$1(ctx) {
 const channel = "/api";
 const describeMethod = "dungsil-vcs/describe";
 const executeMethod = "dungsil-vcs/execute";
+function validCommitSettings(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const input = value;
+	return Object.keys(input).every((key) => [
+		"authorName",
+		"authorEmail",
+		"noSign"
+	].includes(key)) && typeof input.authorName === "string" && input.authorName.length <= 200 && !/[<>]/.test(input.authorName) && !Array.from(input.authorName).some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) && typeof input.authorEmail === "string" && input.authorEmail.length <= 254 && (input.authorEmail === "" || /^[^\s<>@]+@[^\s<>@]+$/.test(input.authorEmail)) && !Array.from(input.authorEmail).some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) && (input.authorName === "" ? input.authorEmail === "" : !!input.authorName.trim() && !!input.authorEmail) && typeof input.noSign === "boolean";
+}
 function isGitActionResult(value) {
 	if (!value || typeof value !== "object") return false;
 	const result = value;
@@ -14218,6 +14261,337 @@ function isGitActionResult(value) {
 		"pr"
 	].includes(result.operation) && typeof result.branch === "string" && (result.commit === void 0 || /^[a-f0-9]{40,64}$/.test(result.commit)) && (result.url === void 0 || /^https?:\/\//.test(result.url)) && Array.isArray(result.checks) && result.checks.every((check) => typeof check === "string");
 }
+// src/settings-client.tsx
+var settings_client_exports = /* @__PURE__ */ __exportAll({ apply: () => apply$1 });
+const copy$1 = {
+	ko: {
+		nav: "버전 관리",
+		scope: "DSH의 Git 버튼이 생성하는 커밋에만 적용합니다. 저장소와 사용자 Git 설정은 변경하지 않습니다.",
+		author: "커밋 작성자",
+		name: "이름",
+		email: "이메일",
+		authorHint: "이름과 이메일을 모두 비우면 기존 Git 작성자를 사용합니다. 커미터는 변경하지 않습니다.",
+		noSign: "항상 커밋 서명 비활성화",
+		noSignHint: "활성화하면 이 UI에서 생성하는 커밋에 --no-gpg-sign을 적용합니다. 비활성화하면 기존 Git 서명 설정을 따릅니다.",
+		loading: "불러오는 중…",
+		error: "결과를 확인하지 못했습니다. 새로고침한 뒤 다시 시도하세요.",
+		conflict: "다른 곳에서 설정을 변경했습니다. 새로고침한 뒤 다시 입력하세요.",
+		invalid: "이름과 올바른 이메일을 함께 입력하거나 두 항목을 모두 비우세요.",
+		cli: "CLI 인증 상태",
+		refresh: "새로고침",
+		selectSession: "CLI 상태를 확인하려면 세션을 먼저 여세요.",
+		authenticated: "인증됨",
+		unauthenticated: "인증되지 않음",
+		unavailable: "설치되지 않음",
+		errorStatus: "확인 실패",
+		environment: "환경 변수",
+		keyring: "키링",
+		"config-file": "CLI 설정 파일"
+	},
+	en: {
+		nav: "Version control",
+		scope: "Only applies to commits created by DSH Git buttons. Repository and user Git configuration are never changed.",
+		author: "Commit author",
+		name: "Name",
+		email: "Email",
+		authorHint: "Leave both fields empty to use the existing Git author. The committer is not changed.",
+		noSign: "Always disable commit signing",
+		noSignHint: "When enabled, commits created by this UI use --no-gpg-sign. Otherwise, existing Git signing settings apply.",
+		loading: "Loading…",
+		error: "Could not confirm the result. Refresh before retrying.",
+		conflict: "Settings changed elsewhere. Refresh and enter your changes again.",
+		invalid: "Enter both a name and a valid email, or leave both fields empty.",
+		cli: "CLI authentication",
+		refresh: "Refresh",
+		selectSession: "Open a session to check CLI status.",
+		authenticated: "Authenticated",
+		unauthenticated: "Not authenticated",
+		unavailable: "Not installed",
+		errorStatus: "Check failed",
+		environment: "Environment variable",
+		keyring: "Keyring",
+		"config-file": "CLI config file"
+	},
+	zh: {
+		nav: "版本控制",
+		scope: "仅适用于 DSH Git 按钮创建的提交，不会修改仓库或用户 Git 配置。",
+		author: "提交作者",
+		name: "姓名",
+		email: "邮箱",
+		authorHint: "将两个字段都留空以使用现有 Git 作者，不更改提交者。",
+		noSign: "始终禁用提交签名",
+		noSignHint: "启用时，此 UI 创建的提交使用 --no-gpg-sign；否则遵循现有 Git 签名设置。",
+		loading: "正在加载…",
+		error: "无法确认结果，请刷新后重试。",
+		conflict: "设置已在其他位置更改，请刷新后重新输入。",
+		invalid: "请输入姓名和有效邮箱，或将两个字段都留空。",
+		cli: "CLI 认证状态",
+		refresh: "刷新",
+		selectSession: "请先打开会话以检查 CLI 状态。",
+		authenticated: "已认证",
+		unauthenticated: "未认证",
+		unavailable: "未安装",
+		errorStatus: "检查失败",
+		environment: "环境变量",
+		keyring: "密钥环",
+		"config-file": "CLI 配置文件"
+	}
+};
+const localized = (language) => copy$1[language.startsWith("ko") ? "ko" : language.startsWith("zh") ? "zh" : "en"];
+function VcsSettings({ ctx }) {
+	const { active } = useLocaleSnapshot(ctx.locale);
+	const text = localized(active);
+	const id = (0, react.useId)();
+	const connection = ctx.get("connection");
+	const sessionId = (0, react.useSyncExternalStore)((listener) => ctx.sidebarRight.mounted.subscribe(listener), () => ctx.sidebarRight.mounted.getSnapshot());
+	const [view, setView] = (0, react.useState)();
+	const [draft, setDraft] = (0, react.useState)();
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [blocked, setBlocked] = (0, react.useState)(false);
+	const [notice, setNotice] = (0, react.useState)();
+	const [cli, setCli] = (0, react.useState)();
+	const [checking, setChecking] = (0, react.useState)(false);
+	const [cliError, setCliError] = (0, react.useState)(false);
+	const pending = (0, react.useRef)(false);
+	const lifetime = (0, react.useRef)(null);
+	const load = async (signal) => {
+		setBusy(true);
+		try {
+			const result = await connection.rpc.call(channel, "dungsil-vcs/settings", {}, signal);
+			if (signal.aborted) return;
+			if (!result.ok) throw new Error("unavailable");
+			const next = result.value;
+			setView(next);
+			setDraft(next.settings);
+			setBlocked(false);
+			setNotice(void 0);
+		} catch {
+			if (!signal.aborted) {
+				setBlocked(true);
+				setNotice("error");
+			}
+		} finally {
+			if (!signal.aborted) setBusy(false);
+		}
+	};
+	(0, react.useEffect)(() => {
+		const controller = new AbortController();
+		lifetime.current = controller;
+		load(controller.signal);
+		return () => controller.abort();
+	}, []);
+	(0, react.useEffect)(() => {
+		const controller = new AbortController();
+		setCli(void 0);
+		setCliError(false);
+		setChecking(false);
+		if (sessionId) check(controller.signal);
+		return () => controller.abort();
+	}, [sessionId]);
+	const check = async (signal) => {
+		setChecking(true);
+		setCliError(false);
+		try {
+			const result = await connection.rpc.call(channel, "dungsil-vcs/cli-status", { sessionId }, signal);
+			if (signal.aborted) return;
+			if (!result.ok) throw new Error("unavailable");
+			setCli(result.value);
+		} catch {
+			if (!signal.aborted) {
+				setCli(void 0);
+				setCliError(true);
+			}
+		} finally {
+			if (!signal.aborted) setChecking(false);
+		}
+	};
+	const save = async () => {
+		const signal = lifetime.current?.signal;
+		if (!signal || signal.aborted || pending.current || !view || !validCommitSettings(draft) || blocked) return;
+		if (JSON.stringify(view.settings) === JSON.stringify(draft)) return;
+		const settings = draft;
+		pending.current = true;
+		setBusy(true);
+		setNotice(void 0);
+		try {
+			const result = await connection.rpc.call(channel, "dungsil-vcs/save-settings", {
+				revision: view.revision,
+				settings
+			}, signal);
+			if (signal.aborted) return;
+			if (!result.ok) {
+				setBlocked(true);
+				setNotice(result.error.code === "conflict" ? "conflict" : "error");
+				return;
+			}
+			const next = result.value;
+			setView(next);
+			setDraft((current) => JSON.stringify(current) === JSON.stringify(settings) ? next.settings : current);
+		} catch {
+			if (!signal.aborted) {
+				setBlocked(true);
+				setNotice("error");
+			}
+		} finally {
+			pending.current = false;
+			if (!signal.aborted) setBusy(false);
+		}
+	};
+	(0, react.useEffect)(() => {
+		if (busy || blocked || !view || !validCommitSettings(draft)) return;
+		if (JSON.stringify(view.settings) === JSON.stringify(draft)) return;
+		const timer = setTimeout(() => void save(), 600);
+		return () => clearTimeout(timer);
+	}, [
+		draft,
+		view,
+		busy,
+		blocked
+	]);
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+		className: "dsh-vcs-settings",
+		"aria-label": text.nav,
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: text.scope }),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("form", {
+				onSubmit: (event) => {
+					event.preventDefault();
+					save();
+				},
+				children: [
+					draft && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("fieldset", {
+						disabled: blocked,
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", { children: text.author }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: text.authorHint }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsRow, {
+								label: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+									htmlFor: `${id}-name`,
+									children: text.name
+								}),
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Input, {
+									className: "dsh-vcs-settings-input",
+									id: `${id}-name`,
+									value: draft.authorName,
+									maxLength: 200,
+									autoComplete: "off",
+									onChange: (event) => {
+										setDraft({
+											...draft,
+											authorName: event.target.value
+										});
+										setNotice(void 0);
+									}
+								})
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsRow, {
+								label: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+									htmlFor: `${id}-email`,
+									children: text.email
+								}),
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Input, {
+									className: "dsh-vcs-settings-input",
+									id: `${id}-email`,
+									type: "email",
+									value: draft.authorEmail,
+									maxLength: 254,
+									autoComplete: "off",
+									onChange: (event) => {
+										setDraft({
+											...draft,
+											authorEmail: event.target.value
+										});
+										setNotice(void 0);
+									}
+								})
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsRow, {
+								label: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: text.noSign }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: text.noSignHint })] }),
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Switch, {
+									label: text.noSign,
+									checked: draft.noSign,
+									disabled: blocked,
+									onChange: (noSign) => {
+										setDraft({
+											...draft,
+											noSign
+										});
+										setNotice(void 0);
+									}
+								})
+							}),
+							!validCommitSettings(draft) && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								role: "alert",
+								children: text.invalid
+							})
+						]
+					}),
+					busy && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						role: "status",
+						children: text.loading
+					}),
+					notice && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						role: "alert",
+						children: text[notice]
+					}),
+					blocked && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+						type: "button",
+						disabled: busy,
+						onClick: () => {
+							if (lifetime.current) load(lifetime.current.signal);
+						},
+						children: text.refresh
+					})
+				]
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", { children: text.cli }),
+			!sessionId ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				role: "status",
+				children: text.selectSession
+			}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+				checking && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					role: "status",
+					children: text.loading
+				}),
+				cliError && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					role: "alert",
+					children: text.error
+				}),
+				cli?.map((item) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-vcs-settings-cli",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsRow, {
+						label: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: item.cli }),
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: text[item.status === "error" ? "errorStatus" : item.status] })
+					}), item.accounts.map((account, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", { children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: account.host }),
+						" · ",
+						account.login,
+						account.method && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [" · ", text[account.method]] })
+					] }, index))]
+				}, item.cli))
+			] })
+		]
+	});
+}
+function apply$1(ctx) {
+	ctx.slots.inject("settings.section", () => ctx.slots.register({
+		name: "settings.section",
+		id: "dungsil-ui-vcs",
+		order: 17,
+		label: () => localized(ctx.locale.getSnapshot().active).nav,
+		inject: () => ({ ctx })
+	}, VcsSettings));
+	ctx.effect(() => installStyles(`${settingsStyles}
+.dsh-vcs-settings { color: var(--dsw-alias-label-primary); font: 14px/22px var(--dsw-font-family, system-ui); }
+.dsh-vcs-settings fieldset { border: 0; padding: 0; margin: 0; min-width: 0; }
+.dsh-vcs-settings h3 { font: inherit; font-weight: 600; margin: 24px 0 8px; }
+.dsh-vcs-settings p { color: var(--dsw-alias-label-secondary); margin: 8px 0; overflow-wrap: anywhere; }
+.dsh-vcs-settings .dsh-plugin-settings-text p { font-size: 12px; line-height: 20px; margin: 4px 0 0; }
+.dsh-vcs-settings-input { box-sizing: border-box; width: 240px; max-width: 65%; flex: 0 1 240px; min-width: 0; }
+.dsh-vcs-settings [role=alert] { color: var(--dsw-alias-state-error-primary); }
+.dsh-vcs-settings-cli .dsh-plugin-settings-row { padding: 8px 0; }
+`), "ui-vcs: settings styles");
+}
 // src/client.tsx
 const name = "dungsil-ui-vcs";
 const inject = [
@@ -14235,17 +14609,8 @@ const copy = {
 		push: "Push",
 		commit: "Commit only",
 		menu: "More Git actions",
-		loading: "Checking branch…",
-		lookupError: "Could not determine the default branch. Refocus this window to retry. Commit only is still available.",
 		hint: "Commit and push changes, and create or update a PR on a feature branch or worktree.",
-		sending: "Running Git action…",
-		sent: "Git action completed.",
-		noChanges: "No task changes to commit.",
-		error: "Could not confirm the Git action. Check Git and remote state before retrying.",
-		partialStage: "A selected file has staged and unstaged changes. Finish staging that file before retrying.",
-		readOnly: "Git actions are unavailable in read-only mode.",
-		conflict: "The repository changed. Check Git state before retrying.",
-		busy: "Another task is active. Wait for it to finish."
+		sending: "Running Git action…"
 	},
 	ko: {
 		pr: "PR 생성",
@@ -14254,17 +14619,8 @@ const copy = {
 		push: "푸시",
 		commit: "커밋만",
 		menu: "다른 Git 작업",
-		loading: "브랜치 확인 중…",
-		lookupError: "기본 브랜치를 확인하지 못했습니다. 창으로 돌아오면 다시 확인합니다. 커밋만 요청할 수 있습니다.",
 		hint: "변경 사항을 커밋·푸시하고, 기능 브랜치나 worktree에서는 PR을 생성하거나 업데이트합니다.",
-		sending: "Git 작업 실행 중…",
-		sent: "Git 작업을 완료했습니다.",
-		noChanges: "커밋할 작업 변경 사항이 없습니다.",
-		error: "Git 작업 결과를 확인하지 못했습니다. 다시 시도하기 전에 Git과 원격 저장소 상태를 확인하세요.",
-		partialStage: "선택한 파일에 스테이징한 변경과 하지 않은 변경이 함께 있습니다. 해당 파일의 스테이징을 마친 뒤 다시 시도하세요.",
-		readOnly: "읽기 전용 모드에서는 Git 작업을 실행할 수 없습니다.",
-		conflict: "저장소 상태가 바뀌었습니다. Git 상태를 확인한 뒤 다시 시도하세요.",
-		busy: "다른 작업을 실행 중입니다. 작업이 끝날 때까지 기다리세요."
+		sending: "Git 작업 실행 중…"
 	},
 	zh: {
 		pr: "创建 PR",
@@ -14273,21 +14629,13 @@ const copy = {
 		push: "推送",
 		commit: "仅提交",
 		menu: "更多 Git 操作",
-		loading: "正在检查分支…",
-		lookupError: "无法确定默认分支。重新聚焦窗口以重试。仍可选择仅提交。",
 		hint: "提交并推送更改，在功能分支或 worktree 中创建或更新 PR。",
-		sending: "正在执行 Git 操作…",
-		sent: "Git 操作已完成。",
-		noChanges: "没有可提交的任务更改。",
-		error: "无法确认 Git 操作结果。请先检查 Git 和远程仓库状态，再决定是否重试。",
-		partialStage: "所选文件同时包含已暂存和未暂存的更改。请完成该文件的暂存后重试。",
-		readOnly: "只读模式下无法执行 Git 操作。",
-		conflict: "仓库状态已更改。请检查 Git 状态后重试。",
-		busy: "另一个任务正在运行。请等待任务结束。"
+		sending: "正在执行 Git 操作…"
 	}
 };
 function apply(ctx) {
 	ctx.plugin(pull_requests_client_exports);
+	ctx.plugin(settings_client_exports);
 	const connection = ctx.get("connection");
 	function Action({ sessionId, useSession, useAccess, useProjection }) {
 		const language = (0, react.useSyncExternalStore)((listener) => ctx.locale.subscribe(listener), () => ctx.locale.getSnapshot().active);
@@ -14306,9 +14654,7 @@ function apply(ctx) {
 		const [lookup, setLookup] = (0, react.useState)("loading");
 		const [open, setOpen] = (0, react.useState)(false);
 		const [hasChanges, setHasChanges] = (0, react.useState)(false);
-		const [status, setStatus] = (0, react.useState)("idle");
-		const [result, setResult] = (0, react.useState)();
-		const [errorCode, setErrorCode] = (0, react.useState)("");
+		const [sending, setSending] = (0, react.useState)(false);
 		const mounted = (0, react.useRef)(true);
 		(0, react.useEffect)(() => {
 			mounted.current = true;
@@ -14316,8 +14662,7 @@ function apply(ctx) {
 				mounted.current = false;
 			};
 		}, []);
-		const statusId = (0, react.useId)();
-		const disabled = !canPrompt || unavailable || status === "sending" || typeof cwd !== "string";
+		const disabled = !canPrompt || unavailable || sending || typeof cwd !== "string";
 		const viewOnly = hasRequest && !needsUpdate;
 		const ciState = ciRequest ? checksState(ciRequest) : "warning";
 		const ciLabel = {
@@ -14401,9 +14746,7 @@ function apply(ctx) {
 			if (disabled || pending.current || typeof cwd !== "string") return;
 			pending.current = true;
 			setOpen(false);
-			setResult(void 0);
-			setErrorCode("");
-			setStatus("sending");
+			setSending(true);
 			try {
 				const response = await connection.rpc.call(channel, executeMethod, {
 					sessionId,
@@ -14412,110 +14755,79 @@ function apply(ctx) {
 					requestId: crypto.randomUUID()
 				}, AbortSignal.timeout(3e5));
 				if (!mounted.current) return;
-				if (!response.ok) {
-					setErrorCode(response.error.code);
-					setStatus("error");
-					return;
-				}
+				if (!response.ok) return;
 				if (!isGitActionResult(response.value) || response.value.operation !== selected) throw new Error("Invalid Git response");
-				setResult(response.value);
 				if (response.value.operation === "pr" && response.value.url) {
 					setHasRequest(true);
 					setNeedsUpdate(false);
 				}
-				setStatus("sent");
-			} catch {
-				if (mounted.current) setStatus("error");
-			} finally {
+			} catch {} finally {
 				pending.current = false;
+				if (mounted.current) setSending(false);
 			}
 		};
-		if (hidden || !hasChanges) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+		if (hidden || !hasChanges || lookup !== "ready" || !operation) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 			ref: anchor,
 			hidden: true
 		});
 		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 			className: "dsh-vcs",
-			children: [
-				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: "dsh-vcs-actions",
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_deepseek_ai_dsh_client_ui_primitives.Pill, {
-						className: "dsh-vcs-trigger",
-						disabled: !viewOnly && disabled || !operation || lookup !== "ready",
-						title: viewOnly ? text.viewPr : text.hint,
-						"aria-describedby": statusId,
-						"aria-busy": status === "sending",
-						onClick: () => {
-							if (viewOnly) ctx.sidebarRight.openTab(name$1);
-							else if (operation) send(operation);
-						},
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconBranchOutlineRegular, { "aria-hidden": "true" }), viewOnly ? text.viewPr : status === "sending" ? text.sending : operation === "push" ? text.push : hasRequest ? text.updatePr : text.pr]
-					}), !viewOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Menu, {
-						open,
-						side: "top",
-						portal: true,
-						compact: true,
-						items: [...hasRequest ? [{
-							id: "view",
-							label: text.viewPr
-						}] : [], {
-							id: "commit",
-							label: text.commit
-						}],
-						onClose: () => setOpen(false),
-						onSelect: (id) => {
-							if (id === "view") {
-								setOpen(false);
-								ctx.sidebarRight.openTab("dungsil-vcs-pull-requests");
-							} else send("commit");
-						},
-						anchor: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Pill, {
-							className: "dsh-vcs-trigger dsh-vcs-menu",
-							disabled,
-							"aria-label": text.menu,
-							"aria-haspopup": "menu",
-							"aria-expanded": open,
-							onClick: () => setOpen((value) => !value),
-							onKeyDown: (event) => {
-								if (!open && (event.key === "ArrowDown" || event.key === "ArrowUp")) {
-									event.preventDefault();
-									setOpen(true);
-								}
-							},
-							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineRegular, { "aria-hidden": "true" })
-						})
-					})]
-				}),
-				hasRequest && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_deepseek_ai_dsh_client_ui_primitives.Pill, {
+			children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-vcs-actions",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_deepseek_ai_dsh_client_ui_primitives.Pill, {
 					className: "dsh-vcs-trigger",
-					title: `${labels.checks}: ${ciLabel}`,
-					onClick: () => ctx.sidebarRight.openTab("dungsil-vcs-pull-requests", { params: { section: "checks" } }),
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.StateDot, {
-						state: ciState,
-						appearance: "step"
-					}), `${labels.checks}: ${ciLabel}`]
-				}),
-				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-					id: statusId,
-					role: status === "error" ? "alert" : "status",
-					className: "dsh-vcs-status",
-					children: [
-						status === "error" ? errorCode === "partial_stage" ? text.partialStage : errorCode === "read_only" ? text.readOnly : errorCode === "conflict" ? text.conflict : errorCode === "busy" ? text.busy : text.error : status === "sent" ? result?.operation === "commit" && !result.commit ? text.noChanges : text.sent : "",
-						status === "sent" && result?.commit && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [" ", result.commit.slice(0, 12)] }),
-						status === "sent" && result?.url && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [" ", /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
-							href: result.url,
-							target: "_blank",
-							rel: "noreferrer",
-							children: result.url
-						})] })
-					]
-				}),
-				lookup !== "ready" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-					className: "dsh-vcs-notice",
-					role: "status",
-					children: lookup === "loading" ? text.loading : text.lookupError
-				})
-			]
+					disabled: !viewOnly && disabled,
+					title: viewOnly ? text.viewPr : text.hint,
+					"aria-busy": sending,
+					onClick: () => {
+						if (viewOnly) ctx.sidebarRight.openTab(name$1);
+						else if (operation) send(operation);
+					},
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconBranchOutlineRegular, { "aria-hidden": "true" }), viewOnly ? text.viewPr : sending ? text.sending : operation === "push" ? text.push : hasRequest ? text.updatePr : text.pr]
+				}), !viewOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+					open,
+					side: "top",
+					portal: true,
+					compact: true,
+					items: [...hasRequest ? [{
+						id: "view",
+						label: text.viewPr
+					}] : [], {
+						id: "commit",
+						label: text.commit
+					}],
+					onClose: () => setOpen(false),
+					onSelect: (id) => {
+						if (id === "view") {
+							setOpen(false);
+							ctx.sidebarRight.openTab("dungsil-vcs-pull-requests");
+						} else send("commit");
+					},
+					anchor: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Pill, {
+						className: "dsh-vcs-trigger dsh-vcs-menu",
+						disabled,
+						"aria-label": text.menu,
+						"aria-haspopup": "menu",
+						"aria-expanded": open,
+						onClick: () => setOpen((value) => !value),
+						onKeyDown: (event) => {
+							if (!open && (event.key === "ArrowDown" || event.key === "ArrowUp")) {
+								event.preventDefault();
+								setOpen(true);
+							}
+						},
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineRegular, { "aria-hidden": "true" })
+					})
+				})]
+			}), hasRequest && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_deepseek_ai_dsh_client_ui_primitives.Pill, {
+				className: "dsh-vcs-trigger",
+				title: `${labels.checks}: ${ciLabel}`,
+				onClick: () => ctx.sidebarRight.openTab("dungsil-vcs-pull-requests", { params: { section: "checks" } }),
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.StateDot, {
+					state: ciState,
+					appearance: "step"
+				}), `${labels.checks}: ${ciLabel}`]
+			})]
 		});
 	}
 	ctx.slots.inject("conversation.input.dock", () => ctx.slots.register({
@@ -14531,15 +14843,10 @@ function apply(ctx) {
 .dsh-vcs-actions > .dsh-vcs-trigger { border-radius: 14px 0 0 14px; }
 .dsh-vcs-actions > .dsh-vcs-trigger:only-child { border-radius: 14px; }
 .dsh-vcs-actions .dsh-vcs-menu { border-radius: 0 14px 14px 0; border-left: 0; padding: 0 7px; }
-.dsh-vcs-notice { font-size: 12px; line-height: 18px; color: var(--dsw-alias-label-secondary); }
 .dsh-vcs-trigger { height: 28px; max-width: 100%; padding: 0 10px; border: 1px solid var(--dsw-alias-border-l2); font: inherit; font-size: 12px; line-height: 18px; }
 .dsh-vcs-trigger svg { flex: none; width: 14px; height: 14px; }
 .dsh-vcs-trigger:disabled { background: var(--dsw-alias-bg-layer-2); color: var(--dsw-alias-label-dimmed); cursor: default; }
 .dsh-vcs-trigger:focus-visible { outline: 2px solid var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary)); outline-offset: 0; }
-.dsh-vcs-status { flex-basis: 100%; font-size: 12px; line-height: 18px; color: var(--dsw-alias-label-secondary); }
-.dsh-vcs-status:empty { display: none; }
-.dsh-vcs-status { overflow-wrap: anywhere; }
-.dsh-vcs-status[role=alert] { color: var(--dsw-alias-state-error-primary); }
 .dsh-vcs-session-request svg { width: 100%; height: 100%; }
 `;
 		document.head.append(style);

package/dist/index.js

@@ -3,6 +3,7 @@ import { clientRequestSchema } from "@deepseek-ai/dsh-client-connection";
 import { SessionId } from "@deepseek-ai/dsh-session";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { Context, Service } from "@deepseek-ai/cordis";
+import { createHash } from "node:crypto";
 // \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -905,13 +906,13 @@ const method = "dungsil-vcs/pull-requests/list";
 const actionMethod = "dungsil-vcs/pull-requests/action";
 // src/pull-requests.ts
 var pull_requests_exports = /* @__PURE__ */ __exportAll({
-	Config: () => Config,
-	apply: () => apply$2,
-	inject: () => inject$2,
-	name: () => name$2
+	Config: () => Config$1,
+	apply: () => apply$3,
+	inject: () => inject$3,
+	name: () => name$3
 });
-const name$2 = "dungsil-vcs-pull-requests";
-const inject$2 = [
+const name$3 = "dungsil-vcs-pull-requests";
+const inject$3 = [
 	"connection",
 	"sessionController",
 	"workingDirectory",
@@ -919,7 +920,7 @@ const inject$2 = [
 	"sandbox",
 	"sandboxPolicy"
 ];
-const Config = Schema.object({ provider: Schema.union([
+const Config$1 = Schema.object({ provider: Schema.union([
 	"auto",
 	"github",
 	"gitlab",
@@ -971,7 +972,7 @@ function actionInput$1(value) {
 	].includes(input.strategy)) || input.action === "merge" && input.body !== void 0) throw new Error("invalid_payload");
 	return input;
 }
-function apply$2(ctx, config) {
+function apply$3(ctx, config) {
 	const lifetime = new AbortController();
 	const actionsInFlight = /* @__PURE__ */ new Set();
 	ctx.effect(() => () => lifetime.abort());
@@ -4514,14 +4515,23 @@ async function generateTexts(ctx, agent, operation, context, signal) {
 // src/protocol.ts
 const channel = "/api";
 const executeMethod = "dungsil-vcs/execute";
+function validCommitSettings(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const input = value;
+	return Object.keys(input).every((key) => [
+		"authorName",
+		"authorEmail",
+		"noSign"
+	].includes(key)) && typeof input.authorName === "string" && input.authorName.length <= 200 && !/[<>]/.test(input.authorName) && !Array.from(input.authorName).some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) && typeof input.authorEmail === "string" && input.authorEmail.length <= 254 && (input.authorEmail === "" || /^[^\s<>@]+@[^\s<>@]+$/.test(input.authorEmail)) && !Array.from(input.authorEmail).some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) && (input.authorName === "" ? input.authorEmail === "" : !!input.authorName.trim() && !!input.authorEmail) && typeof input.noSign === "boolean";
+}
 // src/commands.ts
 var commands_exports = /* @__PURE__ */ __exportAll({
-	apply: () => apply$1,
-	inject: () => inject$1,
-	name: () => name$1
+	apply: () => apply$2,
+	inject: () => inject$2,
+	name: () => name$2
 });
-const name$1 = "dungsil-vcs-commands";
-const inject$1 = [
+const name$2 = "dungsil-vcs-commands";
+const inject$2 = [
 	"connection",
 	"sessionController",
 	"workingDirectory",
@@ -4546,7 +4556,7 @@ function actionInput(value) {
 	].includes(input.operation) || typeof input.requestId !== "string" || !/^[a-zA-Z0-9-]{16,100}$/.test(input.requestId)) throw new Error("invalid");
 	return input;
 }
-function apply$1(ctx, config) {
+function apply$2(ctx, config) {
 	const lifetime = new AbortController();
 	const pending = /* @__PURE__ */ new Set();
 	const repositories = /* @__PURE__ */ new Set();
@@ -4561,6 +4571,12 @@ function apply$1(ctx, config) {
 		}
 	});
 	const execute = async (agent, input, signal) => {
+		const settings = {
+			authorName: config.authorName ?? "",
+			authorEmail: config.authorEmail ?? "",
+			noSign: config.noSign ?? false
+		};
+		if (!validCommitSettings(settings)) throw new Error("invalid");
 		if (ctx.sandboxPolicy.resolve({ session: agent.session }).mode === "read-only") throw new Error("read_only");
 		const cwd = await ctx.workingDirectory.ensure(agent, signal);
 		if (cwd !== input.cwd) throw new Error("conflict");
@@ -4810,6 +4826,8 @@ function apply$1(ctx, config) {
 				]);
 				await git([
 					"commit",
+					...settings.authorName ? [`--author=${settings.authorName} <${settings.authorEmail}>`] : [],
+					...settings.noSign ? ["--no-gpg-sign"] : [],
 					"--only",
 					"-m",
 					texts.commitMessage,
@@ -4906,6 +4924,312 @@ function apply$1(ctx, config) {
 		}
 	}), "ui-vcs: owner-only commands");
 }
+// src/cli-status.ts
+function object(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("invalid_status");
+	return value;
+}
+function parse(output) {
+	if (output.length > 1048576) throw new Error("invalid_status");
+	return JSON.parse(output);
+}
+function safe(value) {
+	return typeof value === "string" && !/(?:gh[pousr]_|github_pat_|gl(?:pat|oas|rt|cbt|ptt|ft|soat|dt)-|Bearer|eyJ)/i.test(value) && !/[a-f0-9]{20,}/i.test(value) && !/[a-z0-9_+-]{32,}/i.test(value);
+}
+function host(value) {
+	if (!safe(value) || value.length > 253 || !/^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?::[0-9]{1,5})?$/i.test(value)) throw new Error("invalid_identity");
+	return value.toLowerCase();
+}
+function account(hostname, login, source) {
+	if (!safe(login) || !/^[a-z0-9][a-z0-9_.-]{0,99}$/i.test(login)) throw new Error("invalid_identity");
+	const result = {
+		host: host(hostname),
+		login
+	};
+	if ([
+		"GH_TOKEN",
+		"GITHUB_TOKEN",
+		"GH_ENTERPRISE_TOKEN",
+		"GITHUB_ENTERPRISE_TOKEN",
+		"environment"
+	].includes(String(source))) result.method = "environment";
+	else if (source === "keyring") result.method = "keyring";
+	else if (source === "config_file" || typeof source === "string" && /(?:^|[/\\])hosts\.yml$/.test(source)) result.method = "config-file";
+	return result;
+}
+async function inspectAuth(cli, run) {
+	const data = object(parse(await run(cli, cli === "gh" ? [
+		"auth",
+		"status",
+		"--json",
+		"hosts"
+	] : [
+		"auth",
+		"status",
+		"--all",
+		"--output",
+		"json"
+	])));
+	const rows = cli === "gh" ? Object.values(object(data.hosts)).flatMap((entries) => {
+		if (!Array.isArray(entries)) throw new Error("invalid_status");
+		return entries;
+	}) : data.hosts;
+	if (!Array.isArray(rows)) throw new Error("invalid_status");
+	const accounts = [];
+	let failed = false;
+	for (const row of rows) {
+		const entry = object(row);
+		if (entry.state === "success") try {
+			accounts.push(account(entry.host, cli === "gh" ? entry.login : entry.user, cli === "gh" ? entry.tokenSource : entry.token_source));
+		} catch {
+			failed = true;
+		}
+		else if (entry.state !== "refresh_expired") failed = true;
+	}
+	return {
+		cli,
+		status: failed ? "error" : accounts.length ? "authenticated" : "unauthenticated",
+		accounts
+	};
+}
+async function inspectTea(run) {
+	const logins = parse(await run("tea", [
+		"login",
+		"list",
+		"--output",
+		"json"
+	]));
+	if (!Array.isArray(logins)) throw new Error("invalid_status");
+	const accounts = [];
+	let failed = false;
+	for (const row of logins) try {
+		const entry = object(row);
+		if (typeof entry.name !== "string" || !entry.name || entry.name.length > 256 || entry.name.split("").some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127)) throw new Error("invalid_status");
+		if (typeof entry.url !== "string") throw new Error("invalid_status");
+		const url = new URL(entry.url);
+		if (!["https:", "http:"].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new Error("invalid_identity");
+		const hostname = host(url.host);
+		const user = object(parse(await run("tea", [
+			"api",
+			"--method",
+			"GET",
+			"--login",
+			entry.name,
+			"user"
+		])));
+		if (typeof user.id !== "number" || !Number.isSafeInteger(user.id) || user.id <= 0) throw new Error("invalid_user");
+		accounts.push(account(hostname, user.login));
+	} catch (error) {
+		if (error instanceof Error && error.message === "cli_missing") throw error;
+		failed = true;
+	}
+	return {
+		cli: "tea",
+		status: failed ? "error" : accounts.length ? "authenticated" : "unauthenticated",
+		accounts
+	};
+}
+/** The runner must reject resolution failures with Error('cli_missing'), and
+* reject nonzero exits, policy failures and timeouts with any other error.
+* It must bound execution/output and disable prompts. No stdout/stderr is ever
+* returned, including when older CLIs do not support these structured queries.
+*/
+async function inspectCliStatus(run) {
+	return Promise.all([
+		"gh",
+		"glab",
+		"tea"
+	].map(async (cli) => {
+		try {
+			return await (cli === "tea" ? inspectTea(run) : inspectAuth(cli, run));
+		} catch (error) {
+			return {
+				cli,
+				status: error instanceof Error && error.message === "cli_missing" ? "unavailable" : "error",
+				accounts: []
+			};
+		}
+	}));
+}
+// src/settings.ts
+var settings_exports = /* @__PURE__ */ __exportAll({
+	Config: () => Config,
+	apply: () => apply$1,
+	inject: () => inject$1,
+	name: () => name$1
+});
+const name$1 = "dungsil-vcs-settings";
+const inject$1 = [
+	"connection",
+	"configEditor",
+	"sessionController",
+	"workingDirectory",
+	"subprocess",
+	"sandbox",
+	"sandboxPolicy"
+];
+const Config = Schema.object({
+	provider: Schema.union([
+		"auto",
+		"github",
+		"gitlab",
+		"gitea",
+		"forgejo"
+	]).default("auto"),
+	authorName: Schema.string().default(""),
+	authorEmail: Schema.string().default(""),
+	noSign: Schema.boolean().default(false)
+});
+function apply$1(ctx) {
+	const editor = ctx.configEditor;
+	const lifetime = new AbortController();
+	ctx.effect(() => () => lifetime.abort());
+	const entry = () => {
+		const entries = editor.entries().filter((item) => item.options.name === "@dungsil/dsh-plugin-ui-vcs");
+		if (entries.length !== 1) throw new Error("unavailable");
+		return entries[0];
+	};
+	const snapshot = () => {
+		const current = entry().options.config;
+		return {
+			revision: createHash("sha256").update(JSON.stringify(current ?? {})).digest("hex"),
+			settings: {
+				authorName: current?.authorName ?? "",
+				authorEmail: current?.authorEmail ?? "",
+				noSign: current?.noSign ?? false
+			}
+		};
+	};
+	for (const endpoint of [
+		"settings",
+		"save-settings",
+		"cli-status"
+	]) {
+		const method = `dungsil-vcs/${endpoint}`;
+		ctx.effect(() => ctx.connection.fetch.register({
+			path: `${channel}/${method}`,
+			methods: ["POST"],
+			requestBody: "buffered",
+			async fetch(request) {
+				let rpcId = "";
+				let result;
+				try {
+					const body = clientRequestSchema.parse(await request.json());
+					rpcId = body.rpcId;
+					if (body.method !== method) throw new Error("invalid");
+					const signal = AbortSignal.any([
+						request.signal,
+						lifetime.signal,
+						AbortSignal.timeout(3e4)
+					]);
+					signal.throwIfAborted();
+					if (endpoint === "settings") result = {
+						ok: true,
+						value: snapshot()
+					};
+					else if (endpoint === "save-settings") {
+						const input = body.payload;
+						if (!input || typeof input.revision !== "string" || !validCommitSettings(input.settings)) throw new Error("invalid");
+						const settings = input.settings;
+						await editor.edit(entry(), (current) => {
+							if (snapshot().revision !== input.revision) throw new Error("conflict");
+							return {
+								...current,
+								...settings
+							};
+						});
+						result = {
+							ok: true,
+							value: snapshot()
+						};
+					} else {
+						const sessionId = body.payload?.sessionId;
+						if (typeof sessionId !== "string" || !sessionId || sessionId.length > 256) throw new Error("invalid");
+						const resolved = await ctx.sessionController.resolveAgent(SessionId(sessionId));
+						if ("error" in resolved) throw new Error("unavailable");
+						const { agent } = resolved;
+						const cwd = await ctx.workingDirectory.ensure(agent, signal);
+						const value = await inspectCliStatus(async (executable, args) => {
+							const bounded = AbortSignal.any([signal, AbortSignal.timeout(1e4)]);
+							let path;
+							try {
+								path = await ctx.subprocess.resolveExecutable(executable, void 0, bounded);
+							} catch (error) {
+								if (error instanceof Error && error.name === "SubprocessExecutableNotFoundError") throw new Error("cli_missing");
+								throw error;
+							}
+							const argv = [path, ...args];
+							const policy = ctx.sandboxPolicy.resolve({ session: agent.session });
+							const command = policy.mode === "danger-full-access" ? argv : (await ctx.sandbox.confine(argv, {
+								...policy,
+								mode: policy.mode
+							}, bounded)).argv;
+							const child = ctx.subprocess.spawn({
+								argv: command,
+								cwd,
+								signal: bounded,
+								graceMs: 1e3,
+								env: {
+									GH_PROMPT_DISABLED: "1",
+									GLAB_PROMPT_DISABLED: "1",
+									NO_COLOR: "1",
+									GH_HOST: void 0,
+									GH_REPO: void 0,
+									GITLAB_HOST: void 0,
+									GITLAB_REPO: void 0,
+									TEA_LOGIN: void 0,
+									TEA_REPO: void 0,
+									...executable === "tea" ? {
+										GH_TOKEN: void 0,
+										GITEA_TOKEN: void 0,
+										GITEA_INSTANCE_URL: void 0,
+										GITEA_INSTANCE_SSH_HOST: void 0,
+										GITEA_INSTANCE_INSECURE: void 0
+									} : {}
+								},
+								stdio: {
+									stdin: "ignore",
+									stdout: { maxBytes: 131072 },
+									stderr: { maxBytes: 16384 }
+								}
+							});
+							try {
+								const outcome = await child.done;
+								bounded.throwIfAborted();
+								const output = child.collected.stdout.readFrom(0);
+								if (outcome.exitCode !== 0 || output.lossy) throw new Error("command_failed");
+								return output.text;
+							} finally {
+								child.terminate();
+								await child.waitForExit();
+							}
+						});
+						signal.throwIfAborted();
+						if (ctx.workingDirectory.get(agent.session) !== cwd) throw new Error("conflict");
+						result = {
+							ok: true,
+							value
+						};
+					}
+				} catch (error) {
+					result = {
+						ok: false,
+						error: {
+							code: error instanceof Error && ["invalid", "conflict"].includes(error.message) ? error.message : "unavailable",
+							message: "Could not confirm VCS settings.",
+							details: {}
+						}
+					};
+				}
+				return Response.json({
+					type: "server-response",
+					rpcId,
+					result
+				}, { headers: { "Cache-Control": "no-store" } });
+			}
+		}), `ui-vcs: owner-only ${endpoint}`);
+	}
+}
 // src/index.ts
 const name = "dungsil-ui-vcs";
 const inject = [
@@ -4919,6 +5243,7 @@ const inject = [
 function apply(ctx, config) {
 	ctx.plugin(pull_requests_exports, config);
 	ctx.plugin(commands_exports, config);
+	ctx.plugin(settings_exports);
 	ctx.effect(() => ctx.connection.fetch.register({
 		path: "/api/dungsil-vcs/describe",
 		methods: ["POST"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dungsil/dsh-plugin-ui-vcs",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Git actions and PR/MR review for GitHub, GitLab, Gitea and Forgejo.",
   "license": "MIT",
   "repository": {
@@ -29,15 +29,18 @@
     "@deepseek-ai/dsh-agent": "0.2.1-rc.5",
     "@deepseek-ai/dsh-agent-loop-testkit": "0.2.1-rc.5",
     "@deepseek-ai/dsh-api-session-controller": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-app-boot": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-connection": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-locale": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-store": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-ui-conversation": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-ui-session": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-ui-sidebar-right": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.5",
     "@deepseek-ai/dsh-client-ui-workspace": "0.2.1-rc.5",
+    "@deepseek-ai/dsh-config-editor": "0.2.1-rc.5",
     "@deepseek-ai/dsh-credentials-local": "0.2.1-rc.5",
     "@deepseek-ai/dsh-fs": "0.2.1-rc.5",
     "@deepseek-ai/dsh-llm": "0.2.1-rc.5",
@@ -66,6 +69,7 @@
     "@deepseek-ai/cordis": "^4.0.5",
     "@deepseek-ai/dsh-client-connection": "^0.2.1-rc.5",
     "@deepseek-ai/dsh-client-ui-primitives": "^0.2.1-rc.5",
+    "@deepseek-ai/dsh-config-editor": "0.2.1-rc.5",
     "@deepseek-ai/dsh-session": "^0.2.1-rc.5"
   },
   "engines": {
@@ -83,6 +87,7 @@
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-session",
+        "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-sidebar-right",
         "@deepseek-ai/dsh-client-ui-workspace"
       ]