@eduwork/dsh-oidc 0.1.0 → 0.2.0

package/lib/client.js

@@ -28,6 +28,7 @@ window.__ModuleLoader__.load({
 		//#endregion
 		let react = require("react");
 		react = __toESM(react, 1);
+		let react_dom = require("react-dom");
 		//#region node_modules/zod/v4/core/core.js
 		var _a$1;
 		function $constructor(name, initializer, params) {
@@ -4242,18 +4243,33 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			return /* @__PURE__ */ _superRefine(fn, params);
 		}
 		//#endregion
-		//#region src/client/remote.ts
-		const pkg = "@eduwork/dsh-oidc";
-		const source = {
-			file: "lib/index.js",
-			line: 1,
-			column: 1
-		};
-		const profileId = string().min(1).max(64);
-		const options = object({ allowProvision: boolean().optional() }).strict();
-		const baseURL = string().min(1).max(2048);
-		const modelMode = _enum(["discovery", "manual"]);
-		const brand = object({
+		//#region src/host/typert-schemas.js
+		const pkg$1 = "@eduwork/dsh-oidc";
+		const profileIdSchema = string().min(1).max(64);
+		const loginIdSchema = string().regex(/^[A-Za-z0-9_-]{32}$/);
+		const reconcileOptionsSchema = object({ allowProvision: boolean().optional() }).strict();
+		const baseURLSchema = string().min(1).max(2048);
+		const modelCatalogModeSchema = _enum(["discovery", "manual"]);
+		const configurationTargetSchema = _enum(["config", "examples"]);
+		const openConfigurationResult = Object.freeze({
+			mode: "strict",
+			typeSymbol: `${pkg$1}#OpenConfigurationResult`,
+			schema: object({ opened: literal(true) }).strict()
+		});
+		const enterpriseSelectionResult = Object.freeze({
+			mode: "strict",
+			typeSymbol: `${pkg$1}#EnterpriseSelectionResult`,
+			schema: object({
+				changed: boolean(),
+				selection: object({
+					provider: string(),
+					model: string(),
+					reasoningEffort: string().optional()
+				}).strict().optional()
+			}).strict()
+		});
+		const enterpriseSelectionOptionsSchema = object({ onlyIfMissing: boolean().optional() }).strict();
+		const brandSchema = object({
 			productName: string().optional(),
 			organizationName: string().optional(),
 			mark: string().optional(),
@@ -4263,11 +4279,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			loginDescription: string().optional(),
 			supportURL: string().optional()
 		}).strict();
-		const profile = object({
+		const publicProfileSchema = object({
 			id: string(),
 			displayName: string(),
 			organization: string(),
-			brand,
+			brand: brandSchema,
 			credentialRef: string(),
 			provider: object({
 				id: string(),
@@ -4277,9 +4293,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					name: string(),
 					input: array(_enum(["text", "image"]))
 				}).strict())
-			}).strict()
+			}).strict().optional()
 		}).strict();
-		const account = object({
+		const accountSchema = object({
 			profileID: string(),
 			displayName: string(),
 			organization: string(),
@@ -4292,7 +4308,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			credentialState: string().optional(),
 			capabilities: array(string()).optional()
 		}).strict();
-		const runtimeModels = array(object({
+		const runtimeModelsSchema = array(object({
 			id: string().min(1).max(256),
 			name: string().max(256).optional(),
 			upstreamModelID: string().max(256).optional(),
@@ -4305,95 +4321,190 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"video"
 			])).optional(),
 			reasoning: boolean().optional(),
-			reasoningEfforts: record(string(), string().nullable()).optional(),
+			reasoningEfforts: union([literal(false), record(string(), string().nullable())]).optional(),
+			defaultReasoningEffort: _enum([
+				"off",
+				"minimal",
+				"low",
+				"medium",
+				"high",
+				"xhigh",
+				"max"
+			]).optional(),
 			compat: record(string(), unknown()).optional()
 		}).strict()).max(128);
-		const management = object({
-			schemaVersion: literal("dsh-oidc/management/v1alpha1"),
-			mode: _enum(["profile", "native"]),
-			activeProfileID: string(),
-			restartRequired: boolean(),
-			capabilities: object({
-				manageProfiles: boolean(),
-				manageModels: boolean(),
-				restart: boolean()
-			}).strict(),
-			profiles: array(object({
-				id: string(),
+		const resourcesResult = Object.freeze({
+			mode: "strict",
+			typeSymbol: `${pkg$1}#Resources`,
+			schema: object({
+				profileID: string(),
+				modelSource: string(),
+				models: runtimeModelsSchema,
+				issues: array(string())
+			}).strict()
+		});
+		const managementProfileSchema = object({
+			id: string(),
+			displayName: string(),
+			organization: string(),
+			baseURL: string(),
+			builtIn: boolean(),
+			configured: boolean(),
+			enabled: boolean(),
+			providerID: string(),
+			runtime: object({
 				displayName: string(),
-				organization: string(),
-				baseURL: string(),
-				builtIn: boolean(),
-				configured: boolean(),
-				enabled: boolean(),
-				providerID: string(),
-				runtime: object({
-					displayName: string(),
-					modelSource: string().optional(),
-					reasoning: string().optional(),
-					defaultContextWindow: number().int().positive().optional(),
-					defaultMaxTokens: number().int().positive().optional(),
-					compat: record(string(), unknown()).optional(),
-					models: runtimeModels
-				}).strict()
-			}).strict())
+				modelSource: string().optional(),
+				reasoning: string().optional(),
+				defaultContextWindow: number().int().positive().optional(),
+				defaultMaxTokens: number().int().positive().optional(),
+				compat: record(string(), unknown()).optional(),
+				models: runtimeModelsSchema
+			}).strict()
 		}).strict();
-		const result = (typeSymbol, schema) => ({
+		const configurationResult = Object.freeze({
+			mode: "strict",
+			typeSymbol: `${pkg$1}#Configuration`,
+			schema: object({
+				schemaVersion: literal("dsh-oidc/v1alpha1"),
+				uiMode: _enum([
+					"standard",
+					"models-only",
+					"external"
+				]),
+				profiles: array(publicProfileSchema),
+				manageProductBrand: boolean().optional(),
+				configFile: object({
+					path: string(),
+					examplesPath: string(),
+					canOpen: boolean()
+				}).strict().optional()
+			}).strict()
+		});
+		const managementResult = Object.freeze({
+			mode: "strict",
+			typeSymbol: `${pkg$1}#ManagementConfiguration`,
+			schema: object({
+				schemaVersion: literal("dsh-oidc/management/v1alpha1"),
+				mode: _enum(["profile", "native"]),
+				activeProfileID: string(),
+				restartRequired: boolean(),
+				capabilities: object({
+					manageProfiles: boolean(),
+					manageModels: boolean(),
+					restart: boolean()
+				}).strict(),
+				profiles: array(managementProfileSchema)
+			}).strict()
+		});
+		const restartResult = Object.freeze({
+			mode: "strict",
+			typeSymbol: `${pkg$1}#RestartResult`,
+			schema: object({ restarting: literal(true) }).strict()
+		});
+		const accountResult = Object.freeze({
 			mode: "strict",
-			typeSymbol,
-			schema
+			typeSymbol: `${pkg$1}#AccountStatus`,
+			schema: accountSchema
+		});
+		const beginResult = Object.freeze({
+			mode: "strict",
+			typeSymbol: `${pkg$1}#BeginResult`,
+			schema: union([
+				object({
+					mode: literal("redirect"),
+					authorizationURL: string().url()
+				}).strict(),
+				object({
+					mode: literal("completed"),
+					status: accountSchema
+				}).strict(),
+				object({
+					mode: literal("external"),
+					loginID: loginIdSchema,
+					expiresAt: string().datetime()
+				}).strict()
+			])
 		});
-		const parameter = (name, schema, typeSymbol) => ({
-			name,
-			wire: name,
-			source: "json",
-			codec: result(typeSymbol, schema)
+		const loginResult = Object.freeze({
+			mode: "strict",
+			typeSymbol: `${pkg$1}#LoginResult`,
+			schema: object({
+				loginID: loginIdSchema,
+				profileID: profileIdSchema,
+				expiresAt: string().datetime(),
+				state: _enum([
+					"pending",
+					"completed",
+					"cancelled",
+					"expired",
+					"failed"
+				]),
+				status: accountSchema.optional(),
+				errorCode: string().optional()
+			}).strict()
 		});
-		const descriptor = (method, parameters, output) => ({
+		function jsonParameter(name, schema, typeSymbol) {
+			return Object.freeze({
+				name,
+				wire: name,
+				source: "json",
+				codec: Object.freeze({
+					mode: "strict",
+					typeSymbol,
+					schema
+				})
+			});
+		}
+		//#endregion
+		//#region src/host/typert.remote-client.js
+		const pkg = "@eduwork/dsh-oidc";
+		const source = {
+			file: "lib/index.js",
+			line: 1,
+			column: 1
+		};
+		const profile = () => jsonParameter("profileID", profileIdSchema, `${pkg}#ProfileID`);
+		const login = () => jsonParameter("loginID", loginIdSchema, `${pkg}#LoginID`);
+		const options = () => jsonParameter("options", reconcileOptionsSchema, `${pkg}#ReconcileOptions`);
+		const baseURL = () => jsonParameter("baseURL", baseURLSchema, `${pkg}#BaseURL`);
+		const modelMode = () => jsonParameter("modelMode", modelCatalogModeSchema, `${pkg}#ModelCatalogMode`);
+		const models = () => jsonParameter("models", runtimeModelsSchema, `${pkg}#RuntimeModels`);
+		const descriptor = (method, parameters, result) => ({
 			id: `${pkg}#oidcAccounts/${method}`,
 			service: "oidcAccounts",
 			namespace: "oidcAccounts",
 			method,
 			invocation: { kind: "direct" },
 			parameters,
-			result: output,
+			result,
 			sourceLocation: source
 		});
-		const profileParameter = () => parameter("profileID", profileId, `${pkg}#ProfileID`);
-		var remote_default = {
+		const TYPERT_REMOTE = {
 			package: pkg,
 			descriptors: [
-				descriptor("configuration", [], result(`${pkg}#Configuration`, object({
-					schemaVersion: literal("dsh-oidc/v1alpha1"),
-					uiMode: _enum([
-						"standard",
-						"models-only",
-						"external"
-					]),
-					profiles: array(profile)
-				}).strict())),
-				descriptor("status", [profileParameter()], result(`${pkg}#AccountStatus`, account)),
-				descriptor("begin", [profileParameter()], result(`${pkg}#BeginResult`, union([object({
-					mode: literal("redirect"),
-					authorizationURL: string().url()
-				}).strict(), object({
-					mode: literal("completed"),
-					status: account
-				}).strict()]))),
-				descriptor("reconcile", [profileParameter(), parameter("options", options, `${pkg}#ReconcileOptions`)], result(`${pkg}#AccountStatus`, account)),
-				descriptor("logout", [profileParameter()], result(`${pkg}#AccountStatus`, account)),
-				descriptor("management", [], result(`${pkg}#ManagementConfiguration`, management)),
-				descriptor("activate", [profileParameter()], result(`${pkg}#ManagementConfiguration`, management)),
-				descriptor("configure", [profileParameter()], result(`${pkg}#ManagementConfiguration`, management)),
-				descriptor("addCustom", [parameter("baseURL", baseURL, `${pkg}#BaseURL`)], result(`${pkg}#ManagementConfiguration`, management)),
-				descriptor("updateCustom", [profileParameter(), parameter("baseURL", baseURL, `${pkg}#BaseURL`)], result(`${pkg}#ManagementConfiguration`, management)),
-				descriptor("removeProfile", [profileParameter()], result(`${pkg}#ManagementConfiguration`, management)),
+				descriptor("configuration", [], configurationResult),
+				descriptor("openConfiguration", [jsonParameter("target", configurationTargetSchema, `${pkg}#ConfigurationTarget`)], openConfigurationResult),
+				descriptor("status", [profile()], accountResult),
+				descriptor("resources", [profile()], resourcesResult),
+				descriptor("begin", [profile()], beginResult),
+				descriptor("loginStatus", [login()], loginResult),
+				descriptor("cancelLogin", [login()], loginResult),
+				descriptor("reconcile", [profile(), options()], accountResult),
+				descriptor("selectEnterpriseModel", [profile(), jsonParameter("options", enterpriseSelectionOptionsSchema, `${pkg}#EnterpriseSelectionOptions`)], enterpriseSelectionResult),
+				descriptor("logout", [profile()], accountResult),
+				descriptor("management", [], managementResult),
+				descriptor("activate", [profile()], managementResult),
+				descriptor("configure", [profile()], managementResult),
+				descriptor("addCustom", [baseURL()], managementResult),
+				descriptor("updateCustom", [profile(), baseURL()], managementResult),
+				descriptor("removeProfile", [profile()], managementResult),
 				descriptor("configureModels", [
-					profileParameter(),
-					parameter("modelMode", modelMode, `${pkg}#ModelCatalogMode`),
-					parameter("models", runtimeModels, `${pkg}#RuntimeModels`)
-				], result(`${pkg}#ManagementConfiguration`, management)),
-				descriptor("restart", [], result(`${pkg}#RestartResult`, object({ restarting: literal(true) }).strict()))
+					profile(),
+					modelMode(),
+					models()
+				], managementResult),
+				descriptor("restart", [], restartResult)
 			]
 		};
 		//#endregion
@@ -4412,13 +4523,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const label = cleanText(statusLabel);
 			return userName && organization ? `${organization} · ${label}` : label;
 		}
-		const reasoningEffortOrder = [
-			"xhigh",
-			"max",
-			"high",
+		const reasoningEffortOrder = Object.freeze([
+			"off",
+			"minimal",
+			"low",
 			"medium",
-			"low"
-		];
+			"high",
+			"xhigh",
+			"max"
+		]);
 		function formatModelCapacity(value) {
 			if (!Number.isFinite(value) || value <= 0) return "";
 			if (value >= 1e6 && value % 1e6 === 0) return `${value / 1e6}M`;
@@ -4439,8 +4552,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				contextWindow: formatModelCapacity(model.contextWindow || provider.defaultContextWindow),
 				maxTokens: formatModelCapacity(model.maxTokens || provider.defaultMaxTokens),
 				input,
-				reasoningSupported: model.reasoning !== false,
-				reasoningEfforts: model.reasoning === false ? [] : efforts,
+				reasoningSupported: model.reasoning !== false && model.reasoningEfforts !== false,
+				reasoningEfforts: model.reasoning === false || model.reasoningEfforts === false ? [] : efforts,
+				defaultReasoningEffort: model.reasoning === false || model.reasoningEfforts === false ? "" : cleanText(model.defaultReasoningEffort),
 				multimodal: input.some((value) => value !== "text")
 			};
 		}
@@ -4454,8 +4568,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				maxTokens: model.maxTokens ? String(model.maxTokens) : "",
 				input: Array.isArray(model.input) && model.input.length > 0 ? [...model.input] : ["text"],
 				compat: model.compat && typeof model.compat === "object" && !Array.isArray(model.compat) ? { ...model.compat } : {},
-				reasoningSupported: existing ? model.reasoning !== false : false,
-				reasoning: model.reasoningEfforts && typeof model.reasoningEfforts === "object" ? Object.keys(model.reasoningEfforts) : []
+				reasoningSupported: existing ? model.reasoning !== false && model.reasoningEfforts !== false : false,
+				reasoning: model.reasoningEfforts && typeof model.reasoningEfforts === "object" ? Object.keys(model.reasoningEfforts) : [],
+				defaultReasoningEffort: cleanText(model.defaultReasoningEffort)
 			};
 		}
 		function serializeRuntimeModelDraft(draft) {
@@ -4474,8 +4589,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"video"
 			].includes(value)))];
 			if (input.length === 0) input.push("text");
-			const efforts = [...new Set(Array.isArray(draft.reasoning) ? draft.reasoning : [])];
+			const efforts = [...new Set(Array.isArray(draft.reasoning) ? draft.reasoning : [])].filter((level) => reasoningEffortOrder.includes(level)).sort((left, right) => reasoningEffortOrder.indexOf(left) - reasoningEffortOrder.indexOf(right));
 			const reasoningSupported = draft.reasoningSupported !== false;
+			const defaultReasoningEffort = cleanText(draft.defaultReasoningEffort);
+			if (defaultReasoningEffort && !efforts.includes(defaultReasoningEffort)) throw new Error("Default reasoning effort must be one of the selected reasoning efforts");
 			const compat = draft.compat && typeof draft.compat === "object" && !Array.isArray(draft.compat) ? { ...draft.compat } : {};
 			if (reasoningSupported) compat.supportsReasoningEffort = efforts.length > 0;
 			else delete compat.supportsReasoningEffort;
@@ -4490,19 +4607,96 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				input,
 				...!reasoningSupported ? { reasoning: false } : {},
 				...reasoningSupported && efforts.length > 0 ? { reasoningEfforts: Object.fromEntries(efforts.map((level) => [level, level])) } : {},
+				...reasoningSupported && defaultReasoningEffort ? { defaultReasoningEffort } : {},
 				...Object.keys(compat).length === 0 ? {} : { compat }
 			};
 		}
 		//#endregion
+		//#region src/client/login-flow.js
+		const wait = (ms, signal) => new Promise((resolve) => {
+			const stop = () => {
+				clearTimeout(timer);
+				signal?.removeEventListener("abort", stop);
+				resolve();
+			};
+			const timer = setTimeout(stop, ms);
+			signal?.addEventListener("abort", stop, { once: true });
+			if (signal?.aborted) stop();
+		});
+		/**
+		* Browser navigation is kept for Web; desktop never navigates its renderer to the IdP.
+		* @param {any} service
+		* @param {string} profileID
+		* @param {{signal?: AbortSignal, onPending?: (pending: boolean) => void, redirect?: (url: string) => void, interval?: number}} options
+		*/
+		async function signIn(service, profileID, { signal, onPending = (pending = false) => {}, redirect = (url) => window.location.assign(url), interval = 1e3 } = {}) {
+			const result = await service.begin(profileID);
+			if (result.mode === "redirect") {
+				if (!signal?.aborted) redirect(result.authorizationURL);
+				return service.status(profileID);
+			}
+			if (result.mode === "completed") return result.status;
+			if (result.mode !== "external") throw new Error("Unsupported organization sign-in response");
+			const expires = Math.min(Date.parse(result.expiresAt), Date.now() + 6e5);
+			let completed = false;
+			onPending(true);
+			try {
+				while (!signal?.aborted && Number.isFinite(expires) && Date.now() < expires) {
+					const next = await service.loginStatus(result.loginID);
+					if (next.state === "completed") {
+						completed = true;
+						return next.status;
+					}
+					if (next.state === "cancelled") return service.status(profileID);
+					if (next.state === "failed") throw Object.assign(/* @__PURE__ */ new Error("Organization sign-in did not complete. Please try again."), { code: next.errorCode });
+					if (next.state === "expired") break;
+					await wait(interval, signal);
+				}
+				if (signal?.aborted) {
+					await service.cancelLogin(result.loginID);
+					completed = true;
+					return service.status(profileID);
+				}
+				throw Object.assign(/* @__PURE__ */ new Error("Organization sign-in expired. Please try again."), { code: "oidc_login_expired" });
+			} finally {
+				if (!completed) await service.cancelLogin(result.loginID).catch(() => {});
+				onPending(false);
+			}
+		}
+		//#endregion
+		//#region src/client/use-sign-in.ts
+		function useSignIn(service) {
+			const controller = (0, react.useRef)(null);
+			const [pending, setPending] = (0, react.useState)(false);
+			(0, react.useEffect)(() => () => {
+				controller.current?.abort();
+			}, []);
+			return {
+				pending,
+				cancel: () => controller.current?.abort(),
+				begin: async (profileID) => {
+					controller.current?.abort();
+					const current = new AbortController();
+					controller.current = current;
+					return signIn(service, profileID, {
+						signal: current.signal,
+						onPending: (value) => setPending(Boolean(value))
+					});
+				}
+			};
+		}
+		//#endregion
 		//#region src/client/managed-provider.ts
-		const h$1 = react.default.createElement;
+		const h$2 = react.default.createElement;
 		const border$1 = "var(--dsw-alias-border-l2, #e8d9d2)";
 		const textPrimary = "var(--dsw-alias-label-primary, #231a17)";
 		const textSecondary = "var(--dsw-alias-label-secondary, #75635c)";
 		const textTertiary = "var(--dsw-alias-label-tertiary, #8a766f)";
 		const background = "var(--dsw-alias-bg-layer-1, #fffdfb)";
-		const isChinese = typeof navigator !== "undefined" && navigator.language.toLowerCase().startsWith("zh");
-		const copy = isChinese ? {
+		const isChinese$1 = typeof navigator !== "undefined" && navigator.language.toLowerCase().startsWith("zh");
+		const copy = isChinese$1 ? {
+			waiting: "请在浏览器中完成登录…",
+			cancelLogin: "取消登录",
 			title: "学校 / 企业服务",
 			description: "已验证机构和兼容协议服务使用统一入口管理；普通 API Key 提供方继续由 DSH 原生设置管理。",
 			loading: "正在读取学校 / 企业服务…",
@@ -4553,6 +4747,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			maxOutput: "最大输出",
 			modalities: "输入模态",
 			reasoningLevels: "思考强度",
+			defaultReasoning: "默认思考强度",
 			supportsReasoning: "支持思考",
 			addModel: "+ 添加模型",
 			cancel: "取消",
@@ -4571,8 +4766,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			restart: "立即重启应用",
 			emptyTitle: "尚未配置学校 / 企业服务",
 			emptyHint: "添加只保存配置；需要使用时再显式启用。全局同时只会启用一个企业服务。",
-			profileNotice: "Web 版本从受信 Enterprise Profile 读取机构与模型目录；如需修改，请更新 Profile 后重启 DSH。"
+			profileNotice: "应用从受信 Enterprise Profile 读取机构与模型目录；如需修改，请更新 Profile 后重启 DSH。",
+			fileHint: "通过配置文件连接学校或企业服务。修改后退出应用，再重新启动。",
+			openConfig: "打开配置文件",
+			openExamples: "查看示例",
+			configOpened: "已请求系统打开配置文件，修改后请退出并重新启动应用。",
+			examplesOpened: "已请求系统打开示例目录。",
+			fileFallback: "请在运行应用的电脑上打开：",
+			examplesHint: "完整示例见同目录下的 examples 文件夹。"
 		} : {
+			waiting: "Complete sign-in in your browser…",
+			cancelLogin: "Cancel sign-in",
 			title: "Organization services",
 			description: "Manage verified organizations and compatible enterprise services here; ordinary API-key providers remain in DSH model settings.",
 			loading: "Loading organization services…",
@@ -4623,6 +4827,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			maxOutput: "Max output",
 			modalities: "Input modalities",
 			reasoningLevels: "Reasoning effort",
+			defaultReasoning: "Default reasoning effort",
 			supportsReasoning: "Supports reasoning",
 			addModel: "+ Add model",
 			cancel: "Cancel",
@@ -4641,7 +4846,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			restart: "Restart now",
 			emptyTitle: "No organization service configured",
 			emptyHint: "Adding a service only saves its configuration. Enable one explicitly when needed; only one service is active at a time.",
-			profileNotice: "The Web edition reads organizations and models from a trusted Enterprise Profile. Update the Profile and restart DSH to change them."
+			profileNotice: "The app reads organizations and models from a trusted Enterprise Profile. Update the Profile and restart DSH to change them.",
+			fileHint: "Connect an organization through the configuration file. Quit and relaunch after editing.",
+			openConfig: "Open configuration file",
+			openExamples: "View examples",
+			configOpened: "The file was sent to your system editor. Quit and relaunch after editing.",
+			examplesOpened: "The examples folder was sent to your system file manager.",
+			fileFallback: "Open this file on the computer running the app: ",
+			examplesHint: "Complete examples are in the examples folder beside it."
 		};
 		const buttonStyle = Object.freeze({
 			border: `1px solid ${border$1}`,
@@ -4677,24 +4889,26 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			boxSizing: "border-box"
 		});
 		const sourceLabel = (value) => ({
-			preset: isChinese ? "内置审核目录" : "Reviewed catalog",
-			discovered: isChinese ? "服务端自动发现" : "Server discovery",
-			discovery: isChinese ? "等待服务端同步" : "Awaiting discovery",
-			manual: isChinese ? "本机手动配置" : "Local manual catalog",
+			preset: isChinese$1 ? "内置审核目录" : "Reviewed catalog",
+			discovered: isChinese$1 ? "服务端自动发现" : "Server discovery",
+			discovery: isChinese$1 ? "等待服务端同步" : "Awaiting discovery",
+			manual: isChinese$1 ? "本机手动配置" : "Local manual catalog",
 			profile: copy.profileManaged
-		})[value] || (isChinese ? "提供方声明" : "Provider declaration");
+		})[value] || (isChinese$1 ? "提供方声明" : "Provider declaration");
 		const capabilityLabel = (value) => ({
-			xhigh: isChinese ? "极高" : "Extra high",
-			max: "Max",
-			high: isChinese ? "高" : "High",
-			medium: isChinese ? "中" : "Medium",
-			low: isChinese ? "低" : "Low"
+			off: isChinese$1 ? "关闭" : "Off",
+			minimal: isChinese$1 ? "极低" : "Minimal",
+			low: isChinese$1 ? "低" : "Low",
+			medium: isChinese$1 ? "中" : "Medium",
+			high: isChinese$1 ? "高" : "High",
+			xhigh: isChinese$1 ? "极高" : "Extra high",
+			max: "Max"
 		})[value] || value;
 		const modalityLabel = (value) => ({
-			text: isChinese ? "文本" : "Text",
-			image: isChinese ? "图片" : "Image",
-			audio: isChinese ? "音频" : "Audio",
-			video: isChinese ? "视频" : "Video"
+			text: isChinese$1 ? "文本" : "Text",
+			image: isChinese$1 ? "图片" : "Image",
+			audio: isChinese$1 ? "音频" : "Audio",
+			video: isChinese$1 ? "视频" : "Video"
 		})[value] || value;
 		function ManagedProviderCard({ service, configuration }) {
 			const [management, setManagement] = (0, react.useState)(null);
@@ -4736,18 +4950,32 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						return [profile.id, null];
 					}
 				}));
-				setStatuses(Object.fromEntries(rows));
+				setStatuses(Object.fromEntries(rows.map(([id]) => [id, service.accountSnapshot(id)])));
+			};
+			const refreshResources = async (id) => {
+				if (service.accountSnapshot(id)?.credentialReady) await service.resources(id);
 			};
 			const refresh = async () => {
 				const next = await service.management();
 				setManagement(next);
 				setRestartRequired(next.restartRequired === true);
 				await loadStatuses(next);
+				for (const profile of next.profiles.filter((row) => row.enabled)) refreshResources(profile.id).then(() => {
+					service.management().then(setManagement).catch(() => {});
+				}).catch(() => {});
 				return next;
 			};
 			(0, react.useEffect)(() => {
 				refresh().catch((cause) => setError(cause?.message || String(cause)));
 			}, []);
+			(0, react.useEffect)(() => service.subscribeAccounts((id) => {
+				const status = service.accountSnapshot(id);
+				setStatuses((current) => ({
+					...current,
+					[id]: status
+				}));
+				refreshResources(id).catch(() => {});
+			}), [service]);
 			const run = async (operation, message = "") => {
 				setBusy(true);
 				setError("");
@@ -4758,10 +4986,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						setManagement(result);
 						setRestartRequired(result.restartRequired === true);
 						await loadStatuses(result);
-					} else if (result?.profileID) setStatuses((current) => ({
-						...current,
-						[result.profileID]: result
-					}));
+					} else if (result?.profileID) {
+						setStatuses((current) => ({
+							...current,
+							[result.profileID]: service.accountSnapshot(result.profileID)
+						}));
+						await refreshResources(result.profileID);
+						setManagement(await service.management());
+					}
 					if (message) setNotice(message);
 					return result;
 				} catch (cause) {
@@ -4771,22 +5003,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					setBusy(false);
 				}
 			};
-			const signIn = (profileID) => run(async () => {
-				const result = await service.begin(profileID);
-				if (result.mode === "redirect") {
-					window.location.assign(result.authorizationURL);
-					return null;
-				}
-				return result.status;
-			});
+			const login = useSignIn(service);
+			const signIn = (profileID) => run(() => login.begin(profileID));
 			const connect = (profileID, status) => status?.state === "authenticated" || status?.state === "provision_required" ? run(() => service.reconcile(profileID, { allowProvision: true })) : signIn(profileID);
-			if (!management) return h$1("p", { style: {
+			if (!management) return h$2("p", { style: {
 				margin: "18px 0",
 				color: textSecondary,
 				fontSize: 12
 			} }, copy.loading);
-			const canManageProfiles = management.capabilities.manageProfiles === true;
-			const canManageModels = management.capabilities.manageModels === true;
+			const canManageProfiles = !configuration.configFile && management.capabilities.manageProfiles === true;
+			const canManageModels = !configuration.configFile && management.capabilities.manageModels === true;
+			const noModelsNotice = configuration.configFile ? isChinese$1 ? "尚未同步模型目录。登录后将读取服务端模型；也可在配置文件中声明模型目录。" : "No model catalog has been synced. Sign in to discover models, or declare them in the configuration file." : copy.noModels;
 			const canRestart = management.capabilities.restart === true;
 			const detail = management.profiles.find((profile) => profile.id === detailID) ?? null;
 			const configured = management.profiles.filter((profile) => profile.configured);
@@ -4848,13 +5075,19 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					setModelDrafts([]);
 				}
 			};
-			const providerCards = configured.length > 0 ? h$1("div", { style: {
+			const providerCards = configured.length > 0 ? h$2("div", { style: {
 				display: "grid",
 				gap: 10
 			} }, ...configured.map((profile) => {
 				const status = statuses[profile.id];
-				const connected = profile.enabled && status?.credentialReady === true;
-				const modelBadges = profile.runtime.models.length > 0 ? profile.runtime.models.map((model) => h$1("code", {
+				const connected = profile.enabled && status?.state === "connected";
+				const modelBadges = !profile.providerID ? [h$2("span", {
+					key: "identity",
+					style: {
+						color: textSecondary,
+						fontSize: 11
+					}
+				}, isChinese$1 ? "身份登录 · 模型可自行配置" : "Identity sign-in · configure your own models")] : profile.runtime.models.length > 0 ? profile.runtime.models.map((model) => h$2("code", {
 					key: model.id,
 					style: {
 						borderRadius: 6,
@@ -4863,14 +5096,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						color: textSecondary,
 						fontSize: 11
 					}
-				}, model.id)) : [h$1("span", {
+				}, model.id)) : [h$2("span", {
 					key: "empty",
 					style: {
 						color: textTertiary,
 						fontSize: 11
 					}
-				}, copy.noModels)];
-				return h$1("article", {
+				}, noModelsNotice)];
+				return h$2("article", {
 					key: profile.id,
 					style: {
 						border: `1px solid ${profile.enabled ? accent : border$1}`,
@@ -4878,85 +5111,85 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						background,
 						padding: 15
 					}
-				}, h$1("div", { style: {
+				}, h$2("div", { style: {
 					display: "flex",
 					justifyContent: "space-between",
 					alignItems: "flex-start",
 					gap: 16
-				} }, h$1("div", { style: { minWidth: 0 } }, h$1("div", { style: {
+				} }, h$2("div", { style: { minWidth: 0 } }, h$2("div", { style: {
 					display: "flex",
 					alignItems: "center",
 					gap: 7,
 					flexWrap: "wrap"
-				} }, h$1("strong", { style: { fontSize: 15 } }, profile.displayName), h$1("span", { style: {
+				} }, h$2("strong", { style: { fontSize: 15 } }, profile.displayName), h$2("span", { style: {
 					borderRadius: 999,
 					padding: "2px 7px",
 					background: profile.builtIn ? "#f5e9e8" : "#eef1f6",
 					color: profile.builtIn ? accent : "#536174",
 					fontSize: 11
-				} }, profile.builtIn ? copy.verified : copy.custom), h$1("span", { style: {
+				} }, configuration.configFile ? isChinese$1 ? "配置文件" : "Configuration file" : profile.builtIn ? copy.verified : copy.custom), h$2("span", { style: {
 					borderRadius: 999,
 					padding: "2px 7px",
 					border: `1px solid ${connected ? "#b9d9c8" : border$1}`,
 					color: connected ? "#357a55" : profile.enabled ? accent : textTertiary,
 					fontSize: 11
-				} }, connected ? copy.connected : profile.enabled ? copy.enabled : copy.disabled)), h$1("div", { style: {
+				} }, connected ? copy.connected : profile.enabled ? copy.enabled : copy.disabled)), h$2("div", { style: {
 					marginTop: 6,
 					color: textSecondary,
 					fontSize: 11,
 					overflowWrap: "anywhere"
-				} }, profile.baseURL), h$1("div", { style: {
+				} }, profile.baseURL), h$2("div", { style: {
 					display: "flex",
 					gap: 6,
 					marginTop: 8,
 					flexWrap: "wrap"
-				} }, ...modelBadges)), h$1("div", { style: {
+				} }, ...modelBadges)), h$2("div", { style: {
 					display: "flex",
 					gap: 7,
 					flex: "none",
 					flexWrap: "wrap",
 					justifyContent: "flex-end"
-				} }, h$1("button", {
+				} }, h$2("button", {
 					type: "button",
 					disabled: busy,
 					style: buttonStyle,
 					onClick: () => openDetail(profile)
-				}, copy.configure), canManageProfiles && !profile.enabled && h$1("button", {
+				}, canManageProfiles || canManageModels ? copy.configure : isChinese$1 ? "查看详情" : "View details"), canManageProfiles && !profile.enabled && h$2("button", {
 					type: "button",
 					disabled: busy,
 					style: primaryStyle,
 					onClick: () => enable(profile.id)
-				}, copy.enable), profile.enabled && !restartRequired && !connected && h$1("button", {
+				}, copy.enable), profile.enabled && !restartRequired && !connected && h$2("button", {
 					type: "button",
 					disabled: busy,
 					style: primaryStyle,
 					onClick: () => connect(profile.id, status)
-				}, busy ? copy.processing : status?.state === "authenticated" || status?.state === "provision_required" ? copy.provision : copy.login), profile.enabled && !restartRequired && connected && h$1("button", {
+				}, busy ? copy.processing : status?.state === "authenticated" || status?.state === "provision_required" ? copy.provision : copy.login), profile.enabled && !restartRequired && connected && h$2("button", {
 					type: "button",
 					disabled: busy,
 					style: buttonStyle,
 					onClick: () => run(() => service.reconcile(profile.id, { allowProvision: false }))
 				}, copy.refresh))));
-			})) : h$1("div", { style: {
+			})) : h$2("div", { style: {
 				padding: 18,
 				border: `1px dashed ${border$1}`,
 				borderRadius: 13,
 				background
-			} }, h$1("strong", { style: {
+			} }, h$2("strong", { style: {
 				display: "block",
 				fontSize: 14
-			} }, copy.emptyTitle), h$1("p", { style: {
+			} }, copy.emptyTitle), h$2("p", { style: {
 				margin: "6px 0 0",
 				color: textSecondary,
 				fontSize: 12,
 				lineHeight: 1.55
-			} }, copy.emptyHint));
-			const addDialog = addOpen && h$1("div", {
+			} }, configuration.configFile ? isChinese$1 ? "参考上方示例，在配置文件的 organizations 中填写企业信息，保存并退出后重新启动。也可以直接在模型设置中使用自己的 API Key。" : "Use the examples above to fill in organizations, save, quit and relaunch. You can also use your own API key in model settings." : copy.emptyHint));
+			const addDialog = addOpen && h$2("div", {
 				style: panelStyle,
 				onMouseDown: (event) => {
 					if (event.target === event.currentTarget && !busy) setAddOpen(false);
 				}
-			}, h$1("div", {
+			}, h$2("div", {
 				role: "dialog",
 				"aria-modal": "true",
 				"aria-label": copy.addTitle,
@@ -4964,28 +5197,28 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					...cardStyle,
 					width: "min(660px, calc(100vw - 40px))"
 				}
-			}, h$1("div", { style: {
+			}, h$2("div", { style: {
 				display: "flex",
 				justifyContent: "space-between",
 				gap: 14
-			} }, h$1("div", null, h$1("h2", { style: {
+			} }, h$2("div", null, h$2("h2", { style: {
 				margin: "0 0 4px",
 				fontSize: 22
-			} }, copy.addTitle), h$1("p", { style: {
+			} }, copy.addTitle), h$2("p", { style: {
 				margin: 0,
 				color: textSecondary,
 				fontSize: 12
-			} }, copy.addDescription)), h$1("button", {
+			} }, copy.addDescription)), h$2("button", {
 				type: "button",
 				disabled: busy,
 				"aria-label": copy.close,
 				onClick: () => setAddOpen(false),
 				style: buttonStyle
-			}, "×")), available.length > 0 && h$1("div", { style: {
+			}, "×")), available.length > 0 && h$2("div", { style: {
 				display: "grid",
 				gap: 8,
 				marginTop: 18
-			} }, ...available.map((profile) => h$1("article", {
+			} }, ...available.map((profile) => h$2("article", {
 				key: profile.id,
 				style: {
 					display: "flex",
@@ -4995,60 +5228,60 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					borderRadius: 11,
 					padding: 13
 				}
-			}, h$1("div", null, h$1("strong", null, profile.displayName), h$1("div", { style: {
+			}, h$2("div", null, h$2("strong", null, profile.displayName), h$2("div", { style: {
 				marginTop: 4,
 				color: textTertiary,
 				fontSize: 11
-			} }, profile.baseURL)), h$1("button", {
+			} }, profile.baseURL)), h$2("button", {
 				type: "button",
 				disabled: busy,
 				style: primaryStyle,
 				onClick: () => run(() => service.configure(profile.id)).then(() => setAddOpen(false))
-			}, copy.addVerified)))), h$1("form", {
+			}, copy.addVerified)))), h$2("form", {
 				onSubmit: addCustom,
 				style: {
 					marginTop: 20,
 					paddingTop: 17,
 					borderTop: `1px solid ${border$1}`
 				}
-			}, h$1("strong", { style: {
+			}, h$2("strong", { style: {
 				display: "block",
 				fontSize: 13
-			} }, copy.compatible), h$1("p", { style: {
+			} }, copy.compatible), h$2("p", { style: {
 				margin: "5px 0 10px",
 				color: textSecondary,
 				fontSize: 12
-			} }, copy.compatibleHint), h$1("div", { style: {
+			} }, copy.compatibleHint), h$2("div", { style: {
 				display: "flex",
 				gap: 8
-			} }, h$1("input", {
+			} }, h$2("input", {
 				type: "url",
 				required: true,
 				value: baseURL,
 				placeholder: "https://ai.example.edu",
 				onChange: (event) => setBaseURL(event.currentTarget.value),
 				style: inputStyle
-			}), h$1("button", {
+			}), h$2("button", {
 				type: "submit",
 				disabled: busy,
 				style: primaryStyle
 			}, busy ? copy.saving : copy.saveService)))));
-			const modelEditors = modelDrafts.map((draft, index) => h$1("article", {
+			const modelEditors = modelDrafts.map((draft, index) => h$2("article", {
 				key: index,
 				style: {
 					border: `1px solid ${border$1}`,
 					borderRadius: 11,
 					padding: 13
 				}
-			}, h$1("div", { style: {
+			}, h$2("div", { style: {
 				display: "flex",
 				justifyContent: "space-between",
 				marginBottom: 10
-			} }, h$1("strong", null, `${copy.model} ${index + 1}`), modelDrafts.length > 1 && h$1("button", {
+			} }, h$2("strong", null, `${copy.model} ${index + 1}`), modelDrafts.length > 1 && h$2("button", {
 				type: "button",
 				style: buttonStyle,
 				onClick: () => setModelDrafts((current) => current.filter((_, candidate) => candidate !== index))
-			}, copy.remove)), h$1("div", { style: {
+			}, copy.remove)), h$2("div", { style: {
 				display: "grid",
 				gridTemplateColumns: "repeat(2, minmax(0, 1fr))",
 				gap: 9
@@ -5058,10 +5291,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				[copy.baseModelID, "upstreamModelID"],
 				[copy.contextWindow, "contextWindow"],
 				[copy.maxOutput, "maxTokens"]
-			].map(([label, field]) => h$1("label", {
+			].map(([label, field]) => h$2("label", {
 				key: field,
 				style: { fontSize: 11 }
-			}, label, h$1("input", {
+			}, label, h$2("input", {
 				required: field === "id",
 				value: draft[field],
 				onChange: (event) => updateDraft(index, { [field]: event.currentTarget.value }),
@@ -5069,10 +5302,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					...inputStyle,
 					marginTop: 5
 				}
-			})))), h$1("div", { style: {
+			})))), h$2("div", { style: {
 				marginTop: 10,
 				fontSize: 11
-			} }, h$1("span", { style: {
+			} }, h$2("span", { style: {
 				marginRight: 10,
 				color: textSecondary
 			} }, copy.modalities), ...[
@@ -5080,69 +5313,77 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"image",
 				"audio",
 				"video"
-			].map((value) => h$1("label", {
+			].map((value) => h$2("label", {
 				key: value,
 				style: { marginRight: 11 }
-			}, h$1("input", {
+			}, h$2("input", {
 				type: "checkbox",
 				checked: draft.input.includes(value),
 				onChange: () => toggleDraft(index, "input", value)
-			}), ` ${modalityLabel(value)}`))), h$1("div", { style: {
+			}), ` ${modalityLabel(value)}`))), h$2("div", { style: {
 				marginTop: 8,
 				fontSize: 11
-			} }, h$1("span", { style: {
+			} }, h$2("span", { style: {
 				marginRight: 10,
 				color: textSecondary
-			} }, copy.reasoningLevels), h$1("label", { style: { marginRight: 12 } }, h$1("input", {
+			} }, copy.reasoningLevels), h$2("label", { style: { marginRight: 12 } }, h$2("input", {
 				type: "checkbox",
 				checked: draft.reasoningSupported,
 				onChange: (event) => updateDraft(index, {
 					reasoningSupported: event.currentTarget.checked,
 					reasoning: event.currentTarget.checked ? draft.reasoning : []
 				})
-			}), ` ${copy.supportsReasoning}`), ...draft.reasoningSupported ? [
-				"xhigh",
-				"max",
-				"high",
-				"medium",
-				"low"
-			].map((value) => h$1("label", {
+			}), ` ${copy.supportsReasoning}`), ...draft.reasoningSupported ? reasoningEffortOrder.map((value) => h$2("label", {
 				key: value,
 				style: { marginRight: 11 }
-			}, h$1("input", {
+			}, h$2("input", {
 				type: "checkbox",
 				checked: draft.reasoning.includes(value),
 				onChange: () => toggleDraft(index, "reasoning", value)
-			}), ` ${capabilityLabel(value)}`)) : [])));
-			const detailDialog = detail && h$1("div", {
+			}), ` ${capabilityLabel(value)}`)) : []), draft.reasoningSupported && draft.reasoning.length > 0 && h$2("label", { style: {
+				display: "block",
+				marginTop: 9,
+				fontSize: 11
+			} }, copy.defaultReasoning, h$2("select", {
+				value: draft.reasoning.includes(draft.defaultReasoningEffort) ? draft.defaultReasoningEffort : "",
+				onChange: (event) => updateDraft(index, { defaultReasoningEffort: event.currentTarget.value }),
+				style: {
+					...inputStyle,
+					marginTop: 5
+				}
+			}, h$2("option", { value: "" }, copy.decidedByService), ...draft.reasoning.slice().sort((left, right) => reasoningEffortOrder.indexOf(left) - reasoningEffortOrder.indexOf(right)).map((value) => h$2("option", {
+				key: value,
+				value
+			}, capabilityLabel(value)))))));
+			const detailDialog = detail && h$2("div", {
 				style: panelStyle,
 				onMouseDown: (event) => {
 					if (event.target === event.currentTarget && !busy) setDetailID("");
 				}
-			}, h$1("div", {
+			}, h$2("div", {
 				role: "dialog",
 				"aria-modal": "true",
 				"aria-label": `${detail.displayName} ${copy.configure}`,
 				style: cardStyle
-			}, h$1("div", { style: {
+			}, h$2("div", { style: {
 				display: "flex",
 				justifyContent: "space-between",
 				gap: 14
-			} }, h$1("div", { style: { minWidth: 0 } }, h$1("h2", { style: {
+			} }, h$2("div", { style: { minWidth: 0 } }, h$2("h2", { style: {
 				margin: "0 0 4px",
 				fontSize: 22
-			} }, detail.displayName), h$1("p", { style: {
+			} }, detail.displayName), h$2("p", { style: {
 				margin: 0,
 				color: textSecondary,
 				fontSize: 12,
 				overflowWrap: "anywhere"
-			} }, `${detail.organization} · ${detail.baseURL}`)), h$1("button", {
+			} }, `${detail.organization} · ${detail.baseURL}`)), h$2("button", {
 				type: "button",
 				disabled: busy,
 				"aria-label": copy.close,
 				onClick: () => setDetailID(""),
 				style: buttonStyle
-			}, "×")), h$1("div", { style: {
+			}, "×")), h$2("div", { style: {
 				display: "grid",
 				gridTemplateColumns: "repeat(auto-fit, minmax(145px, 1fr))",
 				gap: 8,
@@ -5152,22 +5393,22 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				[copy.modelCatalog, sourceLabel(detail.runtime.modelSource)],
 				[copy.defaultContext, modelCapabilitySummary({}, detail.runtime).contextWindow],
 				[copy.defaultOutput, modelCapabilitySummary({}, detail.runtime).maxTokens]
-			].map(([label, value]) => h$1("div", {
+			].map(([label, value]) => h$2("div", {
 				key: label,
 				style: {
 					border: `1px solid ${border$1}`,
 					borderRadius: 9,
 					padding: 10
 				}
-			}, h$1("span", { style: {
+			}, h$2("span", { style: {
 				display: "block",
 				color: textTertiary,
 				fontSize: 10
-			} }, label), h$1("strong", { style: {
+			} }, label), h$2("strong", { style: {
 				display: "block",
 				marginTop: 4,
 				fontSize: 12
-			} }, value || copy.unspecified)))), canManageProfiles && !detail.builtIn && h$1("form", {
+			} }, value || copy.unspecified)))), canManageProfiles && !detail.builtIn && h$2("form", {
 				onSubmit: updateCustom,
 				style: {
 					marginTop: 16,
@@ -5175,41 +5416,41 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					border: `1px solid ${border$1}`,
 					borderRadius: 10
 				}
-			}, h$1("strong", { style: { fontSize: 12 } }, copy.editAddress), h$1("p", { style: {
+			}, h$2("strong", { style: { fontSize: 12 } }, copy.editAddress), h$2("p", { style: {
 				margin: "4px 0 9px",
 				color: textTertiary,
 				fontSize: 11
-			} }, copy.editAddressHint), h$1("div", { style: {
+			} }, copy.editAddressHint), h$2("div", { style: {
 				display: "flex",
 				gap: 8
-			} }, h$1("input", {
+			} }, h$2("input", {
 				type: "url",
 				required: true,
 				value: editBaseURL,
 				onChange: (event) => setEditBaseURL(event.currentTarget.value),
 				style: inputStyle
-			}), h$1("button", {
+			}), h$2("button", {
 				type: "submit",
 				disabled: busy || editBaseURL === detail.baseURL,
 				style: buttonStyle
-			}, copy.save))), h$1("div", { style: {
+			}, copy.save))), h$2("div", { style: {
 				marginTop: 20,
 				display: "flex",
 				justifyContent: "space-between",
 				gap: 12
-			} }, h$1("div", null, h$1("strong", { style: { fontSize: 14 } }, copy.modelCapability), h$1("p", { style: {
+			} }, h$2("div", null, h$2("strong", { style: { fontSize: 14 } }, copy.modelCapability), h$2("p", { style: {
 				margin: "4px 0 0",
 				color: textTertiary,
 				fontSize: 11
-			} }, canManageModels && !detail.builtIn ? copy.customModels : copy.readonlyModels)), canManageModels && !detail.builtIn && h$1("div", { style: {
+			} }, canManageModels && !detail.builtIn ? copy.customModels : copy.readonlyModels)), canManageModels && !detail.builtIn && h$2("div", { style: {
 				display: "flex",
 				gap: 7
-			} }, h$1("button", {
+			} }, h$2("button", {
 				type: "button",
 				disabled: busy,
 				style: buttonStyle,
 				onClick: useDiscovery
-			}, copy.automatic), h$1("button", {
+			}, copy.automatic), h$2("button", {
 				type: "button",
 				disabled: busy,
 				style: editingModels ? primaryStyle : buttonStyle,
@@ -5217,38 +5458,38 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					setModelDrafts(detail.runtime.models.map(runtimeModelDraft).concat(detail.runtime.models.length ? [] : [runtimeModelDraft()]));
 					setEditingModels(true);
 				}
-			}, copy.manual))), !editingModels && h$1("div", { style: {
+			}, copy.manual))), !editingModels && h$2("div", { style: {
 				display: "grid",
 				gap: 9,
 				marginTop: 11
 			} }, ...detail.runtime.models.length > 0 ? detail.runtime.models.map((model) => {
 				const summary = modelCapabilitySummary(model, detail.runtime);
-				return h$1("article", {
+				return h$2("article", {
 					key: model.id,
 					style: {
 						border: `1px solid ${border$1}`,
 						borderRadius: 11,
 						padding: 13
 					}
-				}, h$1("div", { style: {
+				}, h$2("div", { style: {
 					display: "flex",
 					gap: 8,
 					flexWrap: "wrap"
-				} }, h$1("strong", null, summary.name), summary.name !== summary.id && h$1("code", { style: {
+				} }, h$2("strong", null, summary.name), summary.name !== summary.id && h$2("code", { style: {
 					color: textTertiary,
 					fontSize: 11
-				} }, summary.id), summary.multimodal && h$1("span", { style: {
+				} }, summary.id), summary.multimodal && h$2("span", { style: {
 					color: "#355c91",
 					fontSize: 10
-				} }, isChinese ? "多模态" : "Multimodal")), h$1("div", { style: {
+				} }, isChinese$1 ? "多模态" : "Multimodal")), h$2("div", { style: {
 					display: "grid",
 					gridTemplateColumns: "repeat(auto-fit, minmax(125px, 1fr))",
 					gap: 8,
 					marginTop: 10,
 					color: textSecondary,
 					fontSize: 11
-				} }, summary.upstreamModelID && h$1("span", null, `${copy.baseModel}：${summary.upstreamModelID}`), h$1("span", null, `${copy.context}：${summary.contextWindow || copy.unspecified}`), h$1("span", null, `${copy.output}：${summary.maxTokens || copy.unspecified}`), h$1("span", null, `${copy.input}：${summary.input.map(modalityLabel).join("、")}`), h$1("span", null, `${copy.reasoning}：${!summary.reasoningSupported ? copy.unsupported : summary.reasoningEfforts.length ? summary.reasoningEfforts.map(capabilityLabel).join("、") : copy.decidedByService}`)));
-			}) : [h$1("div", {
+				} }, summary.upstreamModelID && h$2("span", null, `${copy.baseModel}：${summary.upstreamModelID}`), h$2("span", null, `${copy.context}：${summary.contextWindow || copy.unspecified}`), h$2("span", null, `${copy.output}：${summary.maxTokens || copy.unspecified}`), h$2("span", null, `${copy.input}：${summary.input.map(modalityLabel).join("、")}`), h$2("span", null, `${copy.reasoning}：${!summary.reasoningSupported ? copy.unsupported : summary.reasoningEfforts.length ? summary.reasoningEfforts.map(capabilityLabel).join("、") : copy.decidedByService}`)));
+			}) : [h$2("div", {
 				key: "empty",
 				style: {
 					border: `1px dashed ${border$1}`,
@@ -5257,42 +5498,42 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					color: textTertiary,
 					fontSize: 12
 				}
-			}, copy.noModels)]), editingModels && h$1("form", {
+			}, noModelsNotice)]), editingModels && h$2("form", {
 				onSubmit: saveModels,
 				style: { marginTop: 11 }
-			}, h$1("div", { style: {
+			}, h$2("div", { style: {
 				display: "grid",
 				gap: 10
-			} }, ...modelEditors), h$1("div", { style: {
+			} }, ...modelEditors), h$2("div", { style: {
 				display: "flex",
 				justifyContent: "space-between",
 				marginTop: 11
-			} }, h$1("button", {
+			} }, h$2("button", {
 				type: "button",
 				style: buttonStyle,
 				onClick: () => setModelDrafts((current) => [...current, runtimeModelDraft()])
-			}, copy.addModel), h$1("div", { style: {
+			}, copy.addModel), h$2("div", { style: {
 				display: "flex",
 				gap: 8
-			} }, h$1("button", {
+			} }, h$2("button", {
 				type: "button",
 				style: buttonStyle,
 				onClick: () => setEditingModels(false)
-			}, copy.cancel), h$1("button", {
+			}, copy.cancel), h$2("button", {
 				type: "submit",
 				disabled: busy,
 				style: primaryStyle
-			}, copy.saveModels)))), canManageProfiles && h$1("div", { style: {
+			}, copy.saveModels)))), canManageProfiles && h$2("div", { style: {
 				display: "flex",
 				justifyContent: "space-between",
 				gap: 10,
 				marginTop: 18,
 				paddingTop: 14,
 				borderTop: `1px solid ${border$1}`
-			} }, h$1("div", null, removeConfirmID === detail.id ? h$1("span", { style: {
+			} }, h$2("div", null, removeConfirmID === detail.id ? h$2("span", { style: {
 				color: "#a82332",
 				fontSize: 11
-			} }, detail.builtIn ? copy.confirmRemove : copy.confirmDelete) : h$1("button", {
+			} }, detail.builtIn ? copy.confirmRemove : copy.confirmDelete) : h$2("button", {
 				type: "button",
 				disabled: busy,
 				style: {
@@ -5300,42 +5541,42 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					color: "#a82332"
 				},
 				onClick: () => setRemoveConfirmID(detail.id)
-			}, detail.builtIn ? copy.removeService : copy.deleteService), removeConfirmID === detail.id && h$1("span", { style: { marginLeft: 8 } }, h$1("button", {
+			}, detail.builtIn ? copy.removeService : copy.deleteService), removeConfirmID === detail.id && h$2("span", { style: { marginLeft: 8 } }, h$2("button", {
 				type: "button",
 				style: buttonStyle,
 				onClick: () => setRemoveConfirmID("")
-			}, copy.cancel), h$1("button", {
+			}, copy.cancel), h$2("button", {
 				type: "button",
 				style: {
 					...primaryStyle,
 					marginLeft: 6
 				},
 				onClick: () => removeProfile(detail)
-			}, copy.confirm))), detail.enabled ? h$1("button", {
+			}, copy.confirm))), detail.enabled ? h$2("button", {
 				type: "button",
 				disabled: busy,
 				style: buttonStyle,
 				onClick: disable
-			}, copy.disable) : h$1("button", {
+			}, copy.disable) : h$2("button", {
 				type: "button",
 				disabled: busy,
 				style: primaryStyle,
 				onClick: () => enable(detail.id)
 			}, copy.enable))));
-			return h$1("section", {
+			return h$2("section", {
 				"data-dsh-oidc-managed-provider": "true",
 				style: { margin: "18px 0" }
-			}, h$1("div", { style: {
+			}, h$2("div", { style: {
 				display: "flex",
 				justifyContent: "space-between",
 				gap: 16,
 				marginBottom: 11
-			} }, h$1("div", null, h$1("strong", { style: { fontSize: 14 } }, copy.title), h$1("p", { style: {
+			} }, h$2("div", null, h$2("strong", { style: { fontSize: 14 } }, copy.title), h$2("p", { style: {
 				margin: "4px 0 0",
 				color: textSecondary,
 				fontSize: 12,
 				lineHeight: 1.55
-			} }, copy.description)), canManageProfiles && h$1("button", {
+			} }, copy.description)), canManageProfiles && h$2("button", {
 				type: "button",
 				disabled: busy,
 				style: primaryStyle,
@@ -5344,23 +5585,51 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					setNotice("");
 					setAddOpen(true);
 				}
-			}, copy.add)), management.mode === "profile" && h$1("p", { style: {
+			}, copy.add)), configuration.configFile ? h$2("div", {
+				"data-eduwork-config-file": true,
+				style: {
+					margin: "10px 0",
+					color: textSecondary,
+					fontSize: 12,
+					lineHeight: 1.7,
+					overflowWrap: "anywhere"
+				}
+			}, h$2("p", { style: { margin: 0 } }, copy.fileHint), configuration.configFile.canOpen ? h$2("div", { style: {
+				display: "flex",
+				flexWrap: "wrap",
+				gap: 8,
+				marginTop: 10
+			} }, h$2("button", {
+				type: "button",
+				style: primaryStyle,
+				disabled: busy,
+				onClick: () => run(() => service.openConfiguration("config"), copy.configOpened)
+			}, copy.openConfig), h$2("button", {
+				type: "button",
+				style: buttonStyle,
+				disabled: busy,
+				onClick: () => run(() => service.openConfiguration("examples"), copy.examplesOpened)
+			}, copy.openExamples)) : h$2("div", { style: { marginTop: 6 } }, h$2("div", null, copy.fileFallback, h$2("code", null, configuration.configFile.path)), h$2("div", null, copy.examplesHint))) : management.mode === "profile" && h$2("p", { style: {
 				margin: "8px 0",
 				color: textTertiary,
 				fontSize: 11
-			} }, copy.profileNotice), error && h$1("p", {
+			} }, copy.profileNotice), login.pending && h$2("p", { role: "status" }, copy.waiting, " ", h$2("button", {
+				type: "button",
+				style: buttonStyle,
+				onClick: login.cancel
+			}, copy.cancelLogin)), error && h$2("p", {
 				role: "alert",
 				style: {
 					color: "#a82332",
 					fontSize: 12
 				}
-			}, error), notice && h$1("p", {
+			}, error), notice && h$2("p", {
 				role: "status",
 				style: {
 					color: "#357a55",
 					fontSize: 12
 				}
-			}, notice), restartRequired && canRestart && h$1("div", { style: {
+			}, notice), restartRequired && canRestart && h$2("div", { style: {
 				display: "flex",
 				justifyContent: "space-between",
 				gap: 12,
@@ -5368,10 +5637,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				padding: 11,
 				border: `1px solid ${border$1}`,
 				borderRadius: 10
-			} }, h$1("span", { style: {
+			} }, h$2("span", { style: {
 				color: textSecondary,
 				fontSize: 12
-			} }, copy.restartNotice), h$1("button", {
+			} }, copy.restartNotice), h$2("button", {
 				type: "button",
 				disabled: busy,
 				style: primaryStyle,
@@ -5379,6 +5648,338 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}, copy.restart)), providerCards, addDialog, detailDialog);
 		}
 		//#endregion
+		//#region src/client/use-account-status.ts
+		function useAccountStatus(service, profileID) {
+			const subscribe = (0, react.useCallback)((changed) => service.subscribeAccounts((id) => {
+				if (id === profileID) changed();
+			}), [service, profileID]);
+			const snapshot = (0, react.useCallback)(() => service.accountSnapshot(profileID), [service, profileID]);
+			const status = (0, react.useSyncExternalStore)(subscribe, snapshot, snapshot);
+			(0, react.useEffect)(() => {
+				service.status(profileID).catch(() => {});
+			}, [service, profileID]);
+			return status;
+		}
+		//#endregion
+		//#region src/client/account-state.js
+		/** One account snapshot shared by onboarding, settings and sidebar consumers. */
+		function createAccountState(base, { connected = async (_profileID) => {} } = {}) {
+			const values = /* @__PURE__ */ new Map(), versions = /* @__PURE__ */ new Map(), epochs = /* @__PURE__ */ new Map(), reads = /* @__PURE__ */ new Map(), listeners = /* @__PURE__ */ new Set(), logins = /* @__PURE__ */ new Map();
+			let disposed = false;
+			const revision = (id) => versions.get(id) ?? 0;
+			const invalidate = (id) => {
+				versions.set(id, revision(id) + 1);
+			};
+			const epoch = (id) => epochs.get(id) ?? 0;
+			const mutate = (id) => {
+				invalidate(id);
+				epochs.set(id, epoch(id) + 1);
+				return epoch(id);
+			};
+			const publish = (status) => {
+				if (disposed || !status?.profileID) return status;
+				invalidate(status.profileID);
+				const previous = values.get(status.profileID);
+				if (JSON.stringify(previous) === JSON.stringify(status)) return previous;
+				values.set(status.profileID, status);
+				for (const listener of [...listeners]) listener(status.profileID);
+				return status;
+			};
+			const status = (id) => {
+				const version = revision(id), pending = reads.get(id);
+				if (pending?.version === version) return pending.promise;
+				const promise = base.status(id).then((value) => {
+					if (revision(id) === version) publish(value);
+					return values.get(id) ?? value;
+				}).finally(() => {
+					if (reads.get(id)?.promise === promise) reads.delete(id);
+				});
+				reads.set(id, {
+					version,
+					promise
+				});
+				return promise;
+			};
+			const activate = async (value) => {
+				if (value?.state === "connected" && value.credentialReady) await connected(value.profileID);
+			};
+			return {
+				service: {
+					...base,
+					status,
+					accountSnapshot: (id) => values.get(id) ?? null,
+					subscribeAccounts(listener) {
+						listeners.add(listener);
+						return () => listeners.delete(listener);
+					},
+					async begin(id) {
+						const generation = mutate(id), result = await base.begin(id);
+						if (epoch(id) !== generation || disposed) return result;
+						if (result.mode === "external") logins.set(result.loginID, {
+							id,
+							generation
+						});
+						if (result.mode === "completed") {
+							publish(result.status);
+							await activate(result.status);
+						}
+						return result;
+					},
+					async loginStatus(loginID) {
+						const next = await base.loginStatus(loginID), flow = logins.get(loginID);
+						if (!flow || disposed || epoch(flow.id) !== flow.generation) return next;
+						if (next.state === "completed" && next.status) {
+							if (!flow.completion) {
+								publish(next.status);
+								flow.completion = activate(next.status);
+							}
+							await flow.completion;
+						}
+						return next;
+					},
+					async reconcile(id, options) {
+						const generation = mutate(id), result = await base.reconcile(id, options);
+						if (epoch(id) === generation && !disposed) {
+							publish(result);
+							if (options?.allowProvision === true) await activate(result);
+						}
+						return result;
+					},
+					async logout(id) {
+						const generation = mutate(id), result = await base.logout(id);
+						if (epoch(id) === generation) publish(result);
+						return result;
+					},
+					async refreshAccounts(ids) {
+						for (const id of ids) invalidate(id);
+						await Promise.all(ids.map((id) => status(id).catch(() => {})));
+					}
+				},
+				dispose() {
+					disposed = true;
+					listeners.clear();
+					logins.clear();
+					reads.clear();
+				}
+			};
+		}
+		/** DSH 0.1.5 uses the current Session's ModelDirectory, not a global UI field. */
+		async function selectConnectedModel(ctx, service, profileID, onlyIfMissing = false) {
+			const { selection, changed } = await service.selectEnterpriseModel(profileID, { onlyIfMissing });
+			if (!changed || !selection) return;
+			const sessions = ctx.get?.("sessions");
+			const current = sessions?.list?.getSnapshot().current;
+			if (!current || sessions.subagentAddress(current) !== void 0) return;
+			const directories = ctx.get?.("modelDirectories");
+			if (!directories) throw new Error("已连接企业模型，但当前对话的模型选择器尚未准备好。请在模型菜单中选择。");
+			const directory = directories.directoryFor(current);
+			if (onlyIfMissing) {
+				const state = await directory.load();
+				if (state.current && state.routable !== false) return;
+			}
+			await directory.select(selection);
+		}
+		//#endregion
+		//#region src/client/account-menu.ts
+		const h$1 = react.default.createElement;
+		const words = typeof navigator !== "undefined" && navigator.language.toLowerCase().startsWith("zh") ? {
+			menu: "账户菜单",
+			check: "刷新账户",
+			logout: "退出登录",
+			login: "登录账户",
+			provision: "确认创建模型凭据",
+			waiting: "请在浏览器中完成登录…",
+			cancel: "取消登录",
+			processing: "正在处理…"
+		} : {
+			menu: "Account menu",
+			check: "Refresh account",
+			logout: "Sign out",
+			login: "Sign in",
+			provision: "Provision model credential",
+			waiting: "Complete sign-in in your browser…",
+			cancel: "Cancel sign-in",
+			processing: "Working…"
+		};
+		const action = {
+			width: "100%",
+			textAlign: "left",
+			border: 0,
+			borderRadius: 7,
+			padding: "9px 10px",
+			font: "inherit",
+			cursor: "pointer",
+			background: "var(--dsw-alias-bg-layer-2, #f5f6f8)",
+			color: "inherit"
+		};
+		const secondary = "var(--dsw-alias-label-secondary, #69717f)";
+		function AccountMenu({ service, profile, children, renderSlot, wide = true }) {
+			const status = useAccountStatus(service, profile.id);
+			const [open, setOpen] = (0, react.useState)(false);
+			const [position, setPosition] = (0, react.useState)({
+				left: 12,
+				bottom: 60
+			});
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [error, setError] = (0, react.useState)("");
+			const trigger = (0, react.useRef)(null), panel = (0, react.useRef)(null);
+			const initialFocus = (0, react.useRef)("first");
+			const id = (0, react.useId)(), login = useSignIn(service);
+			const signedIn = status?.state === "connected" || status?.state === "authenticated";
+			const close = (restore = false) => {
+				setOpen(false);
+				if (restore) trigger.current?.focus();
+			};
+			(0, react.useEffect)(() => {
+				if (!open) return;
+				const place = () => {
+					const rect = trigger.current?.getBoundingClientRect();
+					if (rect) setPosition({
+						left: Math.max(8, Math.min(rect.left, window.innerWidth - 304)),
+						bottom: Math.max(8, window.innerHeight - rect.top + 8)
+					});
+				};
+				const inside = (target) => target instanceof Node && (trigger.current?.contains(target) || panel.current?.contains(target));
+				const outside = (event) => {
+					if (!inside(event.target)) close();
+				};
+				place();
+				const items = panel.current?.querySelectorAll("[role=\"menuitem\"]:not(:disabled)");
+				const first = initialFocus.current === "last" ? items?.[items.length - 1] : items?.[0];
+				initialFocus.current = "first";
+				if (first) first.focus();
+				else panel.current?.focus();
+				document.addEventListener("pointerdown", outside, true);
+				document.addEventListener("focusin", outside, true);
+				window.addEventListener("resize", place);
+				window.addEventListener("scroll", place, true);
+				return () => {
+					document.removeEventListener("pointerdown", outside, true);
+					document.removeEventListener("focusin", outside, true);
+					window.removeEventListener("resize", place);
+					window.removeEventListener("scroll", place, true);
+				};
+			}, [open]);
+			const run = async (operation, exit = false) => {
+				setBusy(true);
+				setError("");
+				try {
+					await operation();
+					if (exit) close(true);
+				} catch (cause) {
+					setError(cause?.message || String(cause));
+				} finally {
+					setBusy(false);
+				}
+			};
+			const keydown = (event) => {
+				if (event.key === "Escape") {
+					event.preventDefault();
+					event.stopPropagation();
+					close(true);
+					return;
+				}
+				if (![
+					"ArrowDown",
+					"ArrowUp",
+					"Home",
+					"End"
+				].includes(event.key)) return;
+				event.preventDefault();
+				const items = Array.from(panel.current?.querySelectorAll("[role=\"menuitem\"]:not(:disabled)") ?? []);
+				const index = items.indexOf(document.activeElement);
+				items[event.key === "Home" ? 0 : event.key === "End" ? items.length - 1 : (index + (event.key === "ArrowDown" ? 1 : -1) + items.length) % items.length]?.focus();
+			};
+			const button = (label, onClick) => h$1("button", {
+				type: "button",
+				role: "menuitem",
+				disabled: busy,
+				style: action,
+				onClick
+			}, label);
+			const refreshAccount = () => service.reconcile(profile.id, { allowProvision: false });
+			const defaultContent = signedIn && button(busy ? words.processing : words.check, () => void run(refreshAccount));
+			const content = open && h$1("div", {
+				ref: panel,
+				id,
+				role: "menu",
+				tabIndex: -1,
+				"aria-label": words.menu,
+				onKeyDown: keydown,
+				style: {
+					position: "fixed",
+					zIndex: 11e3,
+					...position,
+					width: "min(296px, calc(100vw - 16px))",
+					maxHeight: "min(540px, calc(100vh - 80px))",
+					overflowY: "auto",
+					boxSizing: "border-box",
+					padding: 14,
+					border: "1px solid var(--dsw-alias-border-l2, #e1e4eb)",
+					borderRadius: 13,
+					background: "var(--dsw-alias-bg-layer-1, #fff)",
+					color: "var(--dsw-alias-label-primary, #20232c)",
+					boxShadow: "0 12px 38px #17264d20",
+					fontSize: 12
+				}
+			}, h$1("div", {
+				role: "presentation",
+				style: { padding: "2px 3px 12px" }
+			}, h$1("strong", null, accountUserName(status) || accountOrganization(profile)), h$1("div", { style: {
+				marginTop: 4,
+				color: secondary
+			} }, accountOrganization(profile))), typeof renderSlot === "function" ? renderSlot("oidc.account.menu.details", {
+				profile,
+				status,
+				busy,
+				run,
+				refreshAccount,
+				defaultContent
+			}, { fallback: defaultContent }) : defaultContent, h$1("div", { style: {
+				display: "grid",
+				gap: 6
+			} }, status?.state === "authenticated" && profile.provider && button(words.provision, () => void run(() => service.reconcile(profile.id, { allowProvision: true }))), !signedIn && button(busy ? words.processing : words.login, () => void run(() => login.begin(profile.id))), signedIn && button(words.logout, () => void run(() => service.logout(profile.id), true))), login.pending && h$1("p", { role: "status" }, words.waiting, " ", h$1("button", {
+				type: "button",
+				role: "menuitem",
+				style: action,
+				onClick: login.cancel
+			}, words.cancel)), error && h$1("p", {
+				role: "alert",
+				style: {
+					color: "var(--dsw-alias-state-error-primary, #a14d3b)",
+					marginBottom: 0
+				}
+			}, error));
+			return h$1(react.default.Fragment, null, h$1("button", {
+				ref: trigger,
+				type: "button",
+				"aria-label": `${accountUserName(status) || accountOrganization(profile)} · ${words.menu}`,
+				"aria-haspopup": "menu",
+				"aria-expanded": open,
+				"aria-controls": open ? id : void 0,
+				title: words.menu,
+				onClick: () => setOpen((value) => !value),
+				onKeyDown: (event) => {
+					if (event.key === "ArrowDown" || event.key === "ArrowUp") {
+						event.preventDefault();
+						initialFocus.current = event.key === "ArrowUp" ? "last" : "first";
+						setOpen(true);
+					} else if (event.key === "Escape") close(true);
+				},
+				style: {
+					display: "block",
+					width: wide ? "100%" : 36,
+					border: 0,
+					borderRadius: 9,
+					padding: wide ? "7px 4px" : 4,
+					cursor: "pointer",
+					background: "transparent",
+					color: "inherit",
+					textAlign: "left"
+				}
+			}, children), content && typeof document !== "undefined" ? (0, react_dom.createPortal)(content, document.body) : null);
+		}
+		//#endregion
 		//#region src/client/index.ts
 		const inject = [
 			"slots",
@@ -5396,7 +5997,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			background: "var(--dsw-alias-bg-layer-1, #fff)",
 			color: "var(--dsw-alias-label-primary, #241a18)"
 		});
-		const messages = typeof navigator !== "undefined" && navigator.language.toLowerCase().startsWith("zh") ? {
+		const isChinese = typeof navigator !== "undefined" && navigator.language.toLowerCase().startsWith("zh");
+		const messages = isChinese ? {
+			waiting: "请在浏览器中完成登录…",
+			cancelLogin: "取消登录",
+			identityDescription: "使用组织账号登录。模型服务可在设置中单独配置。",
+			identityConnected: "组织身份已登录",
 			unavailable: "企业模型服务暂时不可用",
 			connected: "已连接",
 			authenticated: "身份认证完成，等待创建模型凭据",
@@ -5418,6 +6024,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			footerAuthenticated: "身份认证完成，等待创建模型凭据",
 			footerSetup: "点击设置完成登录"
 		} : {
+			waiting: "Complete sign-in in your browser…",
+			cancelLogin: "Cancel sign-in",
+			identityDescription: "Sign in with your organization account. Configure model services separately in settings.",
+			identityConnected: "Organization identity connected",
 			unavailable: "Enterprise model service is temporarily unavailable",
 			connected: "Connected",
 			authenticated: "Identity verified; model credential is not provisioned",
@@ -5482,6 +6092,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}
 		function installBrand(ctx, profile) {
 			const brand = profile.brand ?? {};
+			if (Object.keys(brand).length === 0) return () => {};
 			const productName = brand.productName || profile.displayName;
 			const previousTitle = document.title;
 			document.title = productName;
@@ -5523,18 +6134,23 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			};
 		}
 		function useAccount(service, profileID) {
-			const [status, setStatus] = (0, react.useState)(null);
+			const status = useAccountStatus(service, profileID);
 			const [busy, setBusy] = (0, react.useState)("");
 			const [error, setError] = (0, react.useState)("");
-			const refresh = async () => setStatus(await service.status(profileID));
 			(0, react.useEffect)(() => {
-				refresh().catch((cause) => setError(cause?.message || String(cause)));
-			}, [profileID]);
+				let active = true;
+				service.status(profileID).catch((cause) => {
+					if (active) setError(cause?.message || String(cause));
+				});
+				return () => {
+					active = false;
+				};
+			}, [service, profileID]);
 			const run = async (name, operation) => {
 				setBusy(name);
 				setError("");
 				try {
-					setStatus(await operation());
+					await operation();
 				} catch (cause) {
 					setError(cause?.message || String(cause));
 				} finally {
@@ -5558,15 +6174,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				color: "white",
 				borderColor: "transparent"
 			};
-			const begin = () => account.run("login", async () => {
-				const result = await service.begin(profile.id);
-				if (result.mode === "redirect") {
-					window.location.assign(result.authorizationURL);
-					return account.status;
-				}
-				return result.status;
-			});
-			const stateLabel = account.status?.credentialReady ? messages.connected : account.status?.state === "authenticated" ? messages.authenticated : messages.disconnected;
+			const login = useSignIn(service);
+			const begin = () => account.run("login", () => login.begin(profile.id));
+			const stateLabel = account.status?.state === "connected" ? messages.connected : account.status?.state === "authenticated" ? messages.authenticated : messages.disconnected;
 			const userName = accountUserName(account.status);
 			return h("section", { style: {
 				padding: "16px 0",
@@ -5601,22 +6211,22 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				color: "var(--dsw-alias-label-secondary)",
 				fontSize: 12,
 				lineHeight: 1.6
-			} }, profile.brand?.loginDescription || messages.description), h("div", { style: {
+			} }, profile.brand?.loginDescription || (profile.provider ? messages.description : messages.identityDescription)), h("div", { style: {
 				marginTop: 12,
 				display: "flex",
 				gap: 8,
 				flexWrap: "wrap"
-			} }, !account.status?.credentialReady && account.status?.state !== "authenticated" && h("button", {
+			} }, account.status?.state !== "connected" && account.status?.state !== "authenticated" && h("button", {
 				type: "button",
 				disabled: Boolean(account.busy),
 				style: primary,
 				onClick: begin
-			}, account.busy ? messages.connecting : messages.login), !account.status?.credentialReady && account.status?.state === "authenticated" && h("button", {
+			}, account.busy ? messages.connecting : messages.login), profile.provider && !account.status?.credentialReady && account.status?.state === "authenticated" && h("button", {
 				type: "button",
 				disabled: Boolean(account.busy),
 				style: primary,
 				onClick: () => account.run("provision", () => service.reconcile(profile.id, { allowProvision: true }))
-			}, account.busy ? messages.provisioning : messages.provision), account.status?.credentialReady && h("button", {
+			}, account.busy ? messages.provisioning : messages.provision), account.status?.state === "connected" && h("button", {
 				type: "button",
 				disabled: Boolean(account.busy),
 				style: button,
@@ -5634,7 +6244,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					...button,
 					textDecoration: "none"
 				}
-			}, messages.help)), account.error && h("p", {
+			}, messages.help)), login.pending && h("p", { role: "status" }, messages.waiting, " ", h("button", {
+				type: "button",
+				style: button,
+				onClick: login.cancel
+			}, messages.cancelLogin)), account.error && h("p", {
 				role: "alert",
 				style: {
 					margin: "10px 0 0",
@@ -5645,29 +6259,28 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				margin: "10px 0 0",
 				color: "var(--dsw-alias-label-tertiary)",
 				fontSize: 11
-			} }, `${profile.provider.displayName} · ${profile.provider.models.map((model) => model.name).join("、")}`));
+			} }, profile.provider ? `${profile.provider.displayName} · ${profile.provider.models.map((model) => model.name).join("、")}` : messages.other));
 		}
 		function EnterpriseOnboarding({ service, configuration, complete }) {
 			const profile = configuration.profiles[0];
 			const account = useAccount(service, profile.id);
 			(0, react.useEffect)(() => {
-				if (account.status?.credentialReady) complete();
-			}, [account.status?.credentialReady, complete]);
-			if (account.status === null || account.status?.credentialReady) return null;
+				if (account.status?.state === "connected" && !account.busy && !account.error) complete();
+			}, [
+				account.status?.state,
+				account.busy,
+				account.error,
+				complete
+			]);
+			const login = useSignIn(service);
+			if (account.status === null || account.status?.state === "connected" && !account.busy && !account.error) return null;
 			const primary = {
 				...button,
 				background: profile.brand?.primaryColor || "var(--dsw-alias-brand-primary, #5157af)",
 				color: "white",
 				borderColor: "transparent"
 			};
-			const begin = () => account.run("login", async () => {
-				const result = await service.begin(profile.id);
-				if (result.mode === "redirect") {
-					window.location.assign(result.authorizationURL);
-					return account.status;
-				}
-				return result.status;
-			});
+			const begin = () => account.run("login", () => login.begin(profile.id));
 			return h("div", { style: {
 				position: "fixed",
 				inset: 0,
@@ -5714,7 +6327,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				color: "var(--dsw-alias-label-secondary)",
 				fontSize: 13,
 				lineHeight: 1.7
-			} }, profile.brand?.loginDescription || messages.shortDescription), h("div", { style: {
+			} }, profile.brand?.loginDescription || (profile.provider ? messages.shortDescription : messages.identityDescription)), h("div", { style: {
 				marginTop: 20,
 				display: "flex",
 				gap: 9,
@@ -5723,8 +6336,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				type: "button",
 				disabled: Boolean(account.busy),
 				style: primary,
-				onClick: begin
-			}, account.busy ? messages.connecting : messages.login), account.status?.state === "authenticated" && h("button", {
+				onClick: account.status?.state === "connected" ? () => account.run("provision", () => service.reconcile(profile.id, { allowProvision: true })) : begin
+			}, account.busy ? messages.connecting : account.status?.state === "connected" ? isChinese ? "使用企业模型" : "Use organization model" : messages.login), account.status?.state === "authenticated" && h("button", {
 				type: "button",
 				disabled: Boolean(account.busy),
 				style: primary,
@@ -5734,7 +6347,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				disabled: Boolean(account.busy),
 				style: button,
 				onClick: complete
-			}, messages.other)), account.error && h("p", {
+			}, messages.other)), login.pending && h("p", { role: "status" }, messages.waiting, " ", h("button", {
+				type: "button",
+				style: button,
+				onClick: login.cancel
+			}, messages.cancelLogin)), account.error && h("p", {
 				role: "alert",
 				style: {
 					margin: "12px 0 0",
@@ -5746,17 +6363,19 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				color: "var(--dsw-alias-label-tertiary)",
 				fontSize: 11,
 				lineHeight: 1.55
-			} }, `${messages.enabled} ${profile.provider.displayName}: ${profile.provider.models.map((model) => model.name).join("、")}`)));
+			} }, profile.provider ? `${messages.enabled} ${profile.provider.displayName}: ${profile.provider.models.map((model) => model.name).join("、")}` : messages.other)));
 		}
-		function FooterAccount({ service, configuration }) {
+		function FooterAccount({ service, configuration, renderSlot, wide = true }) {
 			const profile = configuration.profiles[0];
-			const [status, setStatus] = (0, react.useState)(null);
-			(0, react.useEffect)(() => {
-				service.status(profile.id).then(setStatus).catch(() => {});
-			}, [profile.id]);
+			const status = useAccountStatus(service, profile.id);
 			const userName = accountUserName(status);
-			const statusLabel = status?.credentialReady ? messages.footerConnected : status?.state === "authenticated" ? messages.footerAuthenticated : messages.footerSetup;
-			return h("div", { style: {
+			const statusLabel = status?.state === "connected" ? profile.provider ? messages.footerConnected : messages.identityConnected : status?.state === "authenticated" ? messages.footerAuthenticated : messages.footerSetup;
+			return h(AccountMenu, {
+				service,
+				profile,
+				renderSlot,
+				wide
+			}, h("div", { style: {
 				display: "flex",
 				alignItems: "center",
 				gap: 9,
@@ -5764,7 +6383,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			} }, h(ProductMark, {
 				profile,
 				size: 28
-			}), h("div", { style: { minWidth: 0 } }, h("div", { style: {
+			}), wide && h("div", { style: { minWidth: 0 } }, h("div", { style: {
 				overflow: "hidden",
 				textOverflow: "ellipsis",
 				whiteSpace: "nowrap",
@@ -5773,19 +6392,24 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			} }, userName || accountOrganization(profile)), h("div", { style: {
 				fontSize: 10,
 				color: "var(--dsw-alias-label-tertiary)"
-			} }, accountStatusLine(profile, statusLabel, userName))));
+			} }, accountStatusLine(profile, statusLabel, userName)))));
 		}
 		async function apply(ctx) {
-			const disposeRemote = await ctx.remote.$mount(remote_default);
+			const disposeRemote = await ctx.remote.$mount(TYPERT_REMOTE);
 			ctx.inject(["remote.oidcAccounts"], (surfaceCtx) => {
 				let cancelled = false;
 				let disposeBrand = () => {};
 				const disposers = [];
-				const service = {
+				const base = {
 					configuration: () => unwrap(surfaceCtx.remote.oidcAccounts.configuration()),
+					openConfiguration: (target) => unwrap(surfaceCtx.remote.oidcAccounts.openConfiguration(target)),
 					status: (profileID) => unwrap(surfaceCtx.remote.oidcAccounts.status(profileID)),
+					resources: (profileID) => unwrap(surfaceCtx.remote.oidcAccounts.resources(profileID)),
 					begin: (profileID) => unwrap(surfaceCtx.remote.oidcAccounts.begin(profileID)),
+					loginStatus: (loginID) => unwrap(surfaceCtx.remote.oidcAccounts.loginStatus(loginID)),
+					cancelLogin: (loginID) => unwrap(surfaceCtx.remote.oidcAccounts.cancelLogin(loginID)),
 					reconcile: (profileID, options) => unwrap(surfaceCtx.remote.oidcAccounts.reconcile(profileID, options)),
+					selectEnterpriseModel: (profileID, options) => unwrap(surfaceCtx.remote.oidcAccounts.selectEnterpriseModel(profileID, options)),
 					logout: (profileID) => unwrap(surfaceCtx.remote.oidcAccounts.logout(profileID)),
 					management: () => unwrap(surfaceCtx.remote.oidcAccounts.management()),
 					activate: (profileID) => unwrap(surfaceCtx.remote.oidcAccounts.activate(profileID)),
@@ -5796,8 +6420,19 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					configureModels: (profileID, modelMode, models) => unwrap(surfaceCtx.remote.oidcAccounts.configureModels(profileID, modelMode, models)),
 					restart: () => unwrap(surfaceCtx.remote.oidcAccounts.restart())
 				};
+				const accounts = createAccountState(base, { connected: (profileID) => selectConnectedModel(surfaceCtx, base, profileID) });
+				const service = accounts.service;
 				service.configuration().then((configuration) => {
 					if (cancelled || configuration.uiMode === "external") return;
+					const ids = configuration.profiles.map((profile) => profile.id);
+					const refreshAccounts = () => service.refreshAccounts(ids);
+					if (typeof surfaceCtx.remote.$on === "function") disposers.push(surfaceCtx.remote.$on("credentials/reference-updated", refreshAccounts));
+					if (typeof surfaceCtx.on === "function") disposers.push(surfaceCtx.on("connection/reset", refreshAccounts));
+					refreshAccounts().then(async () => {
+						if (cancelled) return;
+						const connected = configuration.profiles.find((profile) => profile.provider && service.accountSnapshot(profile.id)?.credentialReady);
+						if (connected) await selectConnectedModel(surfaceCtx, base, connected.id, true);
+					}).catch(() => {});
 					disposers.push(surfaceCtx.slots.inject("settings.models.footer", () => surfaceCtx.slots.register({
 						name: "settings.models.footer",
 						id: "dsh-oidc-enterprise",
@@ -5808,7 +6443,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						})
 					}, ManagedProviderCard)));
 					if (configuration.uiMode === "models-only" || configuration.profiles.length === 0) return;
-					disposeBrand = installBrand(surfaceCtx, configuration.profiles[0]);
+					if (configuration.manageProductBrand !== false) disposeBrand = installBrand(surfaceCtx, configuration.profiles[0]);
 					disposers.push(surfaceCtx.slots.inject("settings.onboarding", () => surfaceCtx.slots.register({
 						name: "settings.onboarding",
 						id: "dsh-oidc-enterprise",
@@ -5822,6 +6457,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						name: "sidebar.footer.action",
 						id: "dsh-oidc-account",
 						order: -90,
+						children: { "oidc.account.menu.details": {
+							kind: "single",
+							scope: "root"
+						} },
 						inject: () => ({
 							service,
 							configuration
@@ -5841,6 +6480,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				});
 				surfaceCtx.effect(() => () => {
 					cancelled = true;
+					accounts.dispose();
 					for (const dispose of disposers.reverse()) dispose?.();
 					disposeBrand();
 				}, "dsh-oidc: client surfaces");