@edge-sky/dsh-oauth-adapter 0.1.1-rc.10

package/lib/client.js

@@ -0,0 +1,683 @@
+window.__ModuleLoader__.load({
+	id: "@edge-sky/dsh-oauth-adapter",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react = require("react");
+		let react_jsx_runtime = require("react/jsx-runtime");
+		//#region src/client/OAuthAccountsSection.tsx
+		/** OAuth account settings page. */
+		function safeHttpUrl(value) {
+			if (value === void 0) return void 0;
+			try {
+				const url = new URL(value);
+				return url.protocol === "http:" || url.protocol === "https:" ? url.href : void 0;
+			} catch {
+				return;
+			}
+		}
+		function AuthorizationLink(props) {
+			const host = new URL(props.url).host;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("a", {
+				className: "dsh-oauth-link",
+				href: props.url,
+				target: "_blank",
+				rel: "noreferrer noopener",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-oauth-link-label",
+						children: props.t("openLink")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-oauth-link-host",
+						children: host
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-oauth-link-icon",
+						"aria-label": props.t("externalLink"),
+						children: "↗"
+					})
+				]
+			});
+		}
+		function PromptForm(props) {
+			const { prompt } = props.active;
+			const [value, setValue] = (0, react.useState)(prompt.kind === "select" ? prompt.options[0]?.id ?? "" : "");
+			const canSubmit = value.length > 0 || prompt.kind === "text" && prompt.allowEmpty === true;
+			const submit = () => {
+				if (!canSubmit) return;
+				props.controller.respond(props.attemptId, props.active.id, value);
+				setValue("");
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-oauth-prompt",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: prompt.kind === "text" && prompt.allowEmpty === true ? props.t("githubDomainPrompt") : prompt.message }),
+					prompt.kind === "text" && prompt.allowEmpty === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-oauth-muted",
+						children: props.t("githubDomainHint")
+					}),
+					prompt.kind === "select" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
+						className: "dsh-oauth-select",
+						value,
+						onChange: (event) => {
+							setValue(event.target.value);
+						},
+						children: prompt.options.map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+							value: option.id,
+							children: option.label
+						}, option.id))
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+						className: "dsh-oauth-input",
+						type: prompt.kind === "secret" ? "password" : "text",
+						value,
+						placeholder: prompt.placeholder,
+						autoComplete: "off",
+						onChange: (event) => {
+							setValue(event.target.value);
+						},
+						onKeyDown: (event) => {
+							if (event.key === "Enter") submit();
+						}
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						className: "dsh-oauth-button",
+						"data-variant": "primary",
+						type: "button",
+						disabled: !canSubmit,
+						onClick: submit,
+						children: props.t("submit")
+					})
+				]
+			});
+		}
+		function ErrorPanel(props) {
+			const collapsible = props.detail !== void 0 && (props.detail.includes("\n") || props.detail.length > 240);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-oauth-error",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: props.message }), props.detail !== void 0 && (collapsible ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
+					className: "dsh-oauth-error-details",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", { children: props.t("technicalDetails") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", { children: props.detail })]
+				}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", { children: props.detail }))]
+			});
+		}
+		function AttemptPanel(props) {
+			const [copied, setCopied] = (0, react.useState)(false);
+			const url = safeHttpUrl(props.attempt.notice?.url);
+			const code = props.attempt.notice?.code;
+			const status = props.attempt.phase === "authorized" ? props.t("authorized") : props.attempt.phase === "cancelled" ? props.t("cancelled") : props.attempt.phase === "failed" ? props.t("failed") : props.attempt.phase === "starting" ? props.t("starting") : props.attempt.prompt !== void 0 ? props.t("awaitingAction") : props.t("waitingProvider");
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-oauth-flow",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: status }),
+					props.attempt.notice !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: props.attempt.notice.message }),
+					url !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AuthorizationLink, {
+						url,
+						t: props.t
+					}),
+					code !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-oauth-code",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: code }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							className: "dsh-oauth-button",
+							type: "button",
+							onClick: () => {
+								navigator.clipboard.writeText(code).then(() => {
+									setCopied(true);
+								});
+							},
+							children: copied ? props.t("copied") : props.t("copy")
+						})]
+					}),
+					props.attempt.id !== void 0 && props.attempt.prompt !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PromptForm, {
+						attemptId: props.attempt.id,
+						active: props.attempt.prompt,
+						controller: props.controller,
+						t: props.t
+					}, props.attempt.prompt.id),
+					props.attempt.error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorPanel, {
+						message: props.attempt.error,
+						...props.attempt.errorDetail === void 0 ? {} : { detail: props.attempt.errorDetail },
+						t: props.t
+					}),
+					props.attempt.id !== void 0 && (props.attempt.phase === "running" || props.attempt.phase === "starting") && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						className: "dsh-oauth-button",
+						type: "button",
+						onClick: () => {
+							props.controller.cancel(props.attempt.id);
+						},
+						children: props.t("cancel")
+					})
+				]
+			});
+		}
+		/** Render the standalone OAuth Accounts settings section. */
+		function OAuthAccountsSection(props) {
+			const controller = props.controller;
+			const t = props.t;
+			if (controller === void 0 || t === void 0) return null;
+			const snapshot = (0, react.useSyncExternalStore)(controller.subscribe, controller.getSnapshot, controller.getSnapshot);
+			const accountByProvider = new Map(snapshot.accounts.map((account) => [account.provider, account]));
+			const providers = ["openai-codex", "github-copilot"];
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsh-oauth-section",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
+						className: "dsh-oauth-title",
+						children: t("title")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsh-oauth-intro",
+						children: t("intro")
+					}),
+					snapshot.error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorPanel, {
+						message: snapshot.error,
+						...snapshot.errorDetail === void 0 ? {} : { detail: snapshot.errorDetail },
+						t
+					}),
+					snapshot.connection !== "open" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						className: "dsh-oauth-button",
+						"data-variant": "secondary",
+						type: "button",
+						onClick: () => {
+							controller.retry();
+						},
+						children: t("retry")
+					}),
+					snapshot.accounts.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsh-oauth-muted",
+						children: t("loading")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+						className: "dsh-oauth-list",
+						children: providers.map((provider) => {
+							const account = accountByProvider.get(provider);
+							const attempt = snapshot.attempt?.provider === provider ? snapshot.attempt : void 0;
+							const busy = account?.inFlight === true || attempt?.phase === "running" || attempt?.phase === "starting";
+							const state = busy ? "authorizing" : account?.configured === true ? account.modelsEnabled ? "ready" : "warning" : "disconnected";
+							const stateText = busy ? t("authorizing") : account?.configured === true ? account.modelsEnabled ? t("ready") : t("connectedNoModels") : t("disconnected");
+							return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+								className: "dsh-oauth-card",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										className: "dsh-oauth-head",
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												className: "dsh-oauth-name",
+												children: account?.label ?? provider
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+												className: "dsh-oauth-state",
+												"data-state": state,
+												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsh-oauth-dot" }), stateText]
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+												className: "dsh-oauth-actions",
+												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+													className: "dsh-oauth-button",
+													"data-variant": "primary",
+													type: "button",
+													disabled: snapshot.connection !== "open" || busy || account?.available !== true,
+													onClick: () => {
+														controller.begin(provider);
+													},
+													children: account?.configured === true ? t("reconnect") : t("connect")
+												}), account?.configured === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+													className: "dsh-oauth-button",
+													"data-variant": "danger",
+													type: "button",
+													disabled: snapshot.connection !== "open" || busy || account.writable !== true,
+													onClick: () => {
+														controller.forget(provider);
+													},
+													children: t("forget")
+												})]
+											})
+										]
+									}),
+									account !== void 0 && !account.available && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										className: "dsh-oauth-muted",
+										children: t("unavailable")
+									}),
+									attempt !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AttemptPanel, {
+										attempt,
+										controller,
+										t
+									})
+								]
+							}, provider);
+						})
+					})
+				]
+			});
+		}
+		//#endregion
+		//#region src/client/locales.ts
+		/** English copy for the OAuth accounts page. */
+		const en = {
+			nav: "OAuth Accounts",
+			title: "OAuth Accounts",
+			intro: "Connect subscription-backed providers. Their models appear in separate OAuth groups, apart from API-key providers.",
+			ready: "Connected · Models ready",
+			connectedNoModels: "Connected · Model route unavailable",
+			disconnected: "Not connected",
+			authorizing: "Sign-in in progress",
+			unavailable: "OAuth is unavailable in this DSH installation.",
+			connect: "Connect",
+			reconnect: "Reconnect",
+			cancel: "Cancel",
+			forget: "Sign out",
+			retry: "Retry connection",
+			starting: "Preparing a secure sign-in session…",
+			awaitingAction: "Action required to continue sign-in.",
+			waitingProvider: "Waiting for the provider to complete sign-in…",
+			authorized: "Sign-in completed.",
+			cancelled: "Sign-in was cancelled.",
+			failed: "Sign-in failed.",
+			technicalDetails: "Technical details",
+			submit: "Continue",
+			copy: "Copy code",
+			copied: "Copied",
+			openLink: "Open authorization page",
+			externalLink: "External provider page",
+			githubDomainPrompt: "GitHub Enterprise domain",
+			githubDomainHint: "Leave blank to use github.com.",
+			loading: "Loading account status…",
+			hostDisconnected: "The OAuth connection to DSH was interrupted."
+		};
+		/** Simplified Chinese copy for the OAuth accounts page. */
+		const zh = {
+			nav: "OAuth 账户",
+			title: "OAuth 账户",
+			intro: "连接订阅型模型服务。OAuth 模型会以独立分组显示，与 API 密钥提供商分开。",
+			ready: "已连接 · 模型可用",
+			connectedNoModels: "已连接 · 模型路由不可用",
+			disconnected: "未连接",
+			authorizing: "正在登录",
+			unavailable: "当前 DSH 安装未提供此 OAuth 流程。",
+			connect: "连接",
+			reconnect: "重新连接",
+			cancel: "取消",
+			forget: "退出登录",
+			retry: "重新连接 DSH",
+			starting: "正在准备安全登录会话…",
+			awaitingAction: "需要完成操作以继续登录。",
+			waitingProvider: "正在等待提供商完成登录…",
+			authorized: "登录已完成。",
+			cancelled: "登录已取消。",
+			failed: "登录失败。",
+			technicalDetails: "技术详情",
+			submit: "继续",
+			copy: "复制代码",
+			copied: "已复制",
+			openLink: "打开授权页面",
+			externalLink: "外部提供商页面",
+			githubDomainPrompt: "GitHub Enterprise 域名",
+			githubDomainHint: "留空将默认使用 github.com。",
+			loading: "正在读取账户状态…",
+			hostDisconnected: "与 DSH 的 OAuth 连接已中断。"
+		};
+		//#endregion
+		//#region src/protocol.ts
+		/** Shared browser/Host wire vocabulary for the OAuth account surface. */
+		const OAUTH_SOCKET_PATH = "/_edge-sky/dsh-oauth";
+		const OAUTH_SOCKET_PROTOCOL = "dsh-oauth-v1";
+		//#endregion
+		//#region src/client/store.ts
+		/** Browser state machine for the plugin-owned OAuth WebSocket. */
+		function socketUrl() {
+			return `${window.location.protocol === "https:" ? "wss:" : "ws:"}//${window.location.host}${OAUTH_SOCKET_PATH}`;
+		}
+		function isServerMessage(value) {
+			return typeof value === "object" && value !== null && typeof value.type === "string";
+		}
+		/** Remove interaction-only content once an authorization attempt settles. */
+		function settleAttemptView(attempt, status) {
+			const next = {
+				...attempt,
+				phase: status
+			};
+			delete next.prompt;
+			delete next.notice;
+			return next;
+		}
+		/** Hide a successful attempt after the account snapshot confirms its model route. */
+		function reconcileAttemptView(attempt, accounts) {
+			if (attempt?.phase !== "authorized" || attempt.error !== void 0) return attempt;
+			const account = accounts.find((candidate) => candidate.provider === attempt.provider);
+			return account?.configured === true && account.modelsEnabled ? void 0 : attempt;
+		}
+		/** App-lifetime controller; reconnects without persisting provider messages or answers. */
+		var OAuthAccountsController = class {
+			snapshot = {
+				connection: "connecting",
+				accounts: []
+			};
+			listeners = /* @__PURE__ */ new Set();
+			socket;
+			reconnectTimer;
+			reconnectDelay = 500;
+			disposed = false;
+			constructor() {
+				this.connect();
+			}
+			subscribe = (listener) => {
+				this.listeners.add(listener);
+				return () => {
+					this.listeners.delete(listener);
+				};
+			};
+			getSnapshot = () => this.snapshot;
+			begin(provider) {
+				if (this.snapshot.attempt?.phase === "starting" || this.snapshot.attempt?.phase === "running") return;
+				const { error: _error, errorDetail: _errorDetail, ...current } = this.snapshot;
+				this.update({
+					...current,
+					attempt: {
+						provider,
+						phase: "starting"
+					}
+				});
+				this.send({
+					type: "begin",
+					requestId: crypto.randomUUID(),
+					provider
+				});
+			}
+			respond(attemptId, promptId, value) {
+				this.send({
+					type: "respond",
+					requestId: crypto.randomUUID(),
+					attemptId,
+					promptId,
+					value
+				});
+				const attempt = this.snapshot.attempt;
+				if (attempt?.id === attemptId && attempt.prompt?.id === promptId) {
+					const next = { ...attempt };
+					delete next.prompt;
+					this.update({
+						...this.snapshot,
+						attempt: next
+					});
+				}
+			}
+			cancel(attemptId) {
+				this.send({
+					type: "cancel",
+					requestId: crypto.randomUUID(),
+					attemptId
+				});
+			}
+			forget(provider) {
+				this.send({
+					type: "forget",
+					requestId: crypto.randomUUID(),
+					provider
+				});
+			}
+			retry() {
+				if (this.socket?.readyState === WebSocket.OPEN || this.socket?.readyState === WebSocket.CONNECTING) return;
+				if (this.reconnectTimer !== void 0) window.clearTimeout(this.reconnectTimer);
+				this.reconnectTimer = void 0;
+				this.connect();
+			}
+			dispose() {
+				this.disposed = true;
+				if (this.reconnectTimer !== void 0) window.clearTimeout(this.reconnectTimer);
+				this.reconnectTimer = void 0;
+				this.socket?.close(1e3, "client plugin disposed");
+				this.socket = void 0;
+				this.listeners.clear();
+			}
+			connect() {
+				if (this.disposed) return;
+				this.update({
+					...this.snapshot,
+					connection: this.socket === void 0 ? "connecting" : "reconnecting"
+				});
+				const socket = new WebSocket(socketUrl(), OAUTH_SOCKET_PROTOCOL);
+				this.socket = socket;
+				socket.addEventListener("open", () => {
+					if (this.socket !== socket) return;
+					this.reconnectDelay = 500;
+					const { error: _error, errorDetail: _errorDetail, ...current } = this.snapshot;
+					this.update({
+						...current,
+						connection: "open"
+					});
+					this.send({
+						type: "refresh",
+						requestId: crypto.randomUUID()
+					});
+				});
+				socket.addEventListener("message", (event) => {
+					if (this.socket !== socket || typeof event.data !== "string") return;
+					let value;
+					try {
+						value = JSON.parse(event.data);
+					} catch {
+						const next = {
+							...this.snapshot,
+							error: "DSH returned an invalid OAuth message."
+						};
+						delete next.errorDetail;
+						this.update(next);
+						return;
+					}
+					if (isServerMessage(value)) this.receive(value);
+				});
+				socket.addEventListener("close", () => {
+					if (this.socket !== socket) return;
+					this.socket = void 0;
+					if (this.disposed) {
+						this.update({
+							...this.snapshot,
+							connection: "closed"
+						});
+						return;
+					}
+					const attempt = this.snapshot.attempt;
+					const interrupted = {
+						...this.snapshot,
+						connection: "reconnecting",
+						error: "The OAuth connection to DSH was interrupted.",
+						...attempt === void 0 || attempt.phase === "authorized" || attempt.phase === "cancelled" ? {} : { attempt: {
+							...attempt,
+							phase: "failed",
+							error: "The OAuth connection to DSH was interrupted."
+						} }
+					};
+					delete interrupted.errorDetail;
+					if (interrupted.attempt?.error === "The OAuth connection to DSH was interrupted.") delete interrupted.attempt.errorDetail;
+					this.update(interrupted);
+					const delay = this.reconnectDelay;
+					this.reconnectDelay = Math.min(this.reconnectDelay * 2, 5e3);
+					this.reconnectTimer = window.setTimeout(() => {
+						this.reconnectTimer = void 0;
+						this.connect();
+					}, delay);
+				});
+				socket.addEventListener("error", () => {});
+			}
+			send(command) {
+				if (this.socket?.readyState !== WebSocket.OPEN) {
+					const next = {
+						...this.snapshot,
+						error: "The OAuth connection to DSH is not ready."
+					};
+					delete next.errorDetail;
+					this.update(next);
+					return;
+				}
+				this.socket.send(JSON.stringify(command));
+			}
+			receive(message) {
+				switch (message.type) {
+					case "snapshot":
+						const accounts = [...message.accounts];
+						const reconciled = reconcileAttemptView(this.snapshot.attempt, accounts);
+						const nextSnapshot = {
+							...this.snapshot,
+							accounts
+						};
+						if (reconciled === void 0) delete nextSnapshot.attempt;
+						else nextSnapshot.attempt = reconciled;
+						this.update(nextSnapshot);
+						return;
+					case "started":
+						const { error: _error, errorDetail: _errorDetail, ...current } = this.snapshot;
+						this.update({
+							...current,
+							attempt: {
+								id: message.attemptId,
+								provider: message.provider,
+								phase: "running"
+							}
+						});
+						return;
+					case "notice": {
+						const attempt = this.snapshot.attempt;
+						if (attempt?.id !== message.attemptId) return;
+						this.update({
+							...this.snapshot,
+							attempt: {
+								...attempt,
+								notice: {
+									message: message.message,
+									...message.url === void 0 ? {} : { url: message.url },
+									...message.code === void 0 ? {} : { code: message.code }
+								}
+							}
+						});
+						return;
+					}
+					case "prompt": {
+						const attempt = this.snapshot.attempt;
+						if (attempt?.id !== message.attemptId) return;
+						this.update({
+							...this.snapshot,
+							attempt: {
+								...attempt,
+								prompt: {
+									id: message.promptId,
+									prompt: message.prompt
+								}
+							}
+						});
+						return;
+					}
+					case "prompt-withdrawn": {
+						const attempt = this.snapshot.attempt;
+						if (attempt?.id !== message.attemptId || attempt.prompt?.id !== message.promptId) return;
+						const next = { ...attempt };
+						delete next.prompt;
+						this.update({
+							...this.snapshot,
+							attempt: next
+						});
+						return;
+					}
+					case "settled": {
+						const attempt = this.snapshot.attempt;
+						if (attempt?.id !== message.attemptId) return;
+						this.update({
+							...this.snapshot,
+							attempt: settleAttemptView(attempt, message.status)
+						});
+						return;
+					}
+					case "error": {
+						const attempt = this.snapshot.attempt;
+						if (message.attemptId !== void 0 && attempt?.id === message.attemptId) {
+							const nextAttempt = {
+								...attempt,
+								error: message.message
+							};
+							if (message.detail === void 0) delete nextAttempt.errorDetail;
+							else nextAttempt.errorDetail = message.detail;
+							this.update({
+								...this.snapshot,
+								attempt: nextAttempt
+							});
+						} else {
+							const next = {
+								...this.snapshot,
+								error: message.message
+							};
+							if (message.detail === void 0) delete next.errorDetail;
+							else next.errorDetail = message.detail;
+							this.update(next);
+						}
+						return;
+					}
+					case "ack": return;
+				}
+			}
+			update(snapshot) {
+				this.snapshot = snapshot;
+				for (const listener of this.listeners) listener();
+			}
+		};
+		//#endregion
+		//#region src/client/styles.ts
+		/** Plugin-owned styles, injected and removed with the browser Cordis fiber. */
+		const styles = `
+.dsh-oauth-section{display:flex;flex-direction:column;gap:12px;max-width:720px;color:var(--dsw-alias-label-primary)}
+.dsh-oauth-title{margin:0;font-size:16px;line-height:24px;font-weight:500}
+.dsh-oauth-intro,.dsh-oauth-muted{margin:0;font-size:13px;line-height:20px;color:var(--dsw-alias-label-tertiary)}
+.dsh-oauth-error{display:flex;flex-direction:column;gap:6px;margin:0;padding:8px 10px;border-radius:8px;background:var(--dsw-alias-interactive-bg-hover-danger);color:var(--dsw-alias-state-error-primary);font-size:12px;line-height:18px}.dsh-oauth-error p{margin:0}.dsh-oauth-error pre{box-sizing:border-box;max-width:100%;max-height:320px;margin:0;padding:8px;border:1px solid var(--dsw-alias-border-l2);border-radius:6px;overflow:auto;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-primary);font:11px/17px ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;white-space:pre-wrap;overflow-wrap:anywhere}.dsh-oauth-error-details summary{cursor:pointer;color:var(--dsw-alias-label-secondary);user-select:none}.dsh-oauth-error-details[open] summary{margin-bottom:6px}
+.dsh-oauth-list{display:flex;flex-direction:column;gap:8px;margin:4px 0 0;padding:0;list-style:none}
+.dsh-oauth-card{display:flex;flex-direction:column;gap:10px;padding:12px 14px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px}
+.dsh-oauth-head{display:flex;align-items:center;gap:8px;flex-wrap:wrap}.dsh-oauth-name{font-size:14px;font-weight:500}.dsh-oauth-state{display:inline-flex;align-items:center;gap:6px;padding:3px 8px;border-radius:999px;background:var(--dsw-alias-interactive-bg-hover);font-size:12px;color:var(--dsw-alias-label-secondary)}
+.dsh-oauth-dot{width:7px;height:7px;border-radius:50%;background:var(--dsw-alias-label-tertiary)}.dsh-oauth-state[data-state=ready] .dsh-oauth-dot{background:var(--dsw-alias-state-success-primary)}.dsh-oauth-state[data-state=warning] .dsh-oauth-dot{background:var(--dsw-alias-state-error-primary)}.dsh-oauth-state[data-state=authorizing] .dsh-oauth-dot{background:var(--dsw-alias-button-info-fill)}
+.dsh-oauth-actions{display:flex;gap:6px;margin-left:auto}.dsh-oauth-button{box-sizing:border-box;display:inline-flex;align-items:center;justify-content:center;min-height:30px;padding:0 12px;border:1px solid var(--dsw-alias-border-l2);border-radius:15px;background:transparent;color:var(--dsw-alias-label-primary);font:inherit;font-size:12px;line-height:18px;cursor:pointer}.dsh-oauth-button[data-variant=primary]{border-color:transparent;background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground)}.dsh-oauth-button[data-variant=danger]{border-color:transparent;color:var(--dsw-alias-state-error-primary)}.dsh-oauth-button:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover-solid)}.dsh-oauth-button[data-variant=primary]:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover);color:var(--dsw-alias-label-primary-foreground)}.dsh-oauth-button[data-variant=danger]:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover-danger)}.dsh-oauth-button:focus-visible{outline:none;box-shadow:0 0 0 2px var(--dsw-alias-border-l3)}.dsh-oauth-button:disabled{cursor:not-allowed;opacity:.4}
+.dsh-oauth-flow{display:flex;flex-direction:column;gap:8px;padding-top:10px;border-top:1px solid var(--dsw-alias-border-l3);font-size:13px;line-height:20px}.dsh-oauth-link{display:grid;grid-template-columns:minmax(0,1fr) auto auto;align-items:center;gap:8px;padding:9px 10px;border:1px solid var(--dsw-alias-border-l2);border-radius:9px;background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary);text-decoration:none}.dsh-oauth-link:hover{background:var(--dsw-alias-interactive-bg-hover-solid)}.dsh-oauth-link-label{font-weight:500}.dsh-oauth-link-host{max-width:240px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-tertiary);font-size:12px}.dsh-oauth-link-icon{color:var(--dsw-alias-brand-text)}.dsh-oauth-code{display:flex;align-items:center;gap:8px}.dsh-oauth-code code{padding:5px 8px;border-radius:6px;background:var(--dsw-alias-bg-module-platform);font-size:14px;letter-spacing:.08em}
+.dsh-oauth-prompt{display:flex;flex-direction:column;gap:7px}.dsh-oauth-input,.dsh-oauth-select{box-sizing:border-box;width:100%;height:34px;padding:0 10px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-primary)}
+`;
+		//#endregion
+		//#region src/client/index.ts
+		const NS = "settings.oauth-accounts";
+		/** Required browser services for settings placement and localized copy. */
+		const inject = ["slots", "locale"];
+		/** Register the OAuth account page and its app-lifetime connection controller. */
+		function apply(ctx) {
+			ctx.effect(() => ctx.locale.register(NS, {
+				zh,
+				en
+			}), "dsh-oauth-adapter: dictionaries");
+			ctx.effect(() => {
+				const style = document.createElement("style");
+				style.dataset.plugin = "@edge-sky/dsh-oauth-adapter";
+				style.textContent = styles;
+				document.head.append(style);
+				return () => {
+					style.remove();
+				};
+			}, "dsh-oauth-adapter: styles");
+			const controller = new OAuthAccountsController();
+			ctx.effect(() => () => {
+				controller.dispose();
+			}, "dsh-oauth-adapter: controller");
+			const t = ctx.locale.bind(NS);
+			ctx.slots.inject("settings.section", () => ctx.slots.register({
+				name: "settings.section",
+				id: "oauth-accounts",
+				order: 15,
+				label: () => t("nav"),
+				inject: () => ({
+					controller,
+					t
+				})
+			}, OAuthAccountsSection));
+		}
+		//#endregion
+		exports.OAuthAccountsController = OAuthAccountsController;
+		exports.OAuthAccountsSection = OAuthAccountsSection;
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map