@foxden-app/foxclaw 0.13.3 → 0.13.5

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 All notable FoxClaw changes are listed here. Each release note is bilingual so GitHub Releases and the npm package are useful to both Chinese and English readers.
 
+## 0.13.5 - 2026-10-06
+
+### 中文
+
+- 修复 DSH `/threads` 只显示会话 ID：补充读取 DSH 原生持久化标题，旧会话无标题时使用首条用户消息；空会话显示未命名、工作目录和短编号。
+- 标题读取不恢复会话、不调用模型，单个历史会话读取失败不会影响列表；保留分页及原会话 ID 的打开行为。
+
+### English
+
+- Fixed DSH `/threads` displaying session IDs instead of readable names. Read native persisted titles, derive legacy names from the first human message, and show a workspace and short identifier for empty sessions.
+- Title reads do not resume sessions or invoke a model. Unreadable histories cannot break the list; pagination and opening by the original session ID are preserved.
+
+## 0.13.4 - 2026-10-06
+
+### 中文
+
+- DSH 模型面板新增 API Key 配置入口，支持私聊添加、更新和查看配置状态，通过 DSH 原生凭据服务保存并热生效。环境凭据显示为只读；读取模型列表失败时仍提供配置和重试入口。
+- 敏感输入在持久收件前脱敏，不进入模型或任务记录；输入消息尝试删除，跨重启只恢复配置意图。配置后端缺失时仍阻止输入落入其他模型，凭据操作支持关闭取消并阻止并行自升级。
+
+### English
+
+- Added DeepSeek API key configuration to the DSH model panel: add/update keys in private chat and inspect status using native DSH credential storage without restarting. Environment credentials are read-only; configuration and retry actions remain available if model discovery fails.
+- Redact sensitive input before durable intake, keep it out of models and task records, and attempt to delete its message. Restarts retain only configuration intent. Missing backends cannot route credential input to another model; credential operations cancel on shutdown and block concurrent service updates.
+
 ## 0.13.3 - 2026-10-06
 
 ### 中文

package/dist/core/backend_registry.d.ts

@@ -1,5 +1,6 @@
 import type { BackendDescriptor } from './engine_spi.js';
 import type { BackendUi, BackendUiHost } from './backend_ui.js';
+import type { ChannelTextEvent } from './channel_events.js';
 /** Owns backend definitions and their panel lifecycle. Discovery may refresh metadata, never execution identity. */
 export declare class BackendRegistry {
     private readonly host;
@@ -16,7 +17,10 @@ export declare class BackendRegistry {
     list(): BackendDescriptor[];
     ui(id: string): BackendUi | undefined;
     callbackOwner(data: string): BackendUi | undefined;
+    sensitiveInboundOwner(event: ChannelTextEvent): BackendUi | undefined;
     getPendingApprovals(): number;
+    getPendingOperations(): number;
+    stopPendingOperations(): Promise<void>;
     stop(): Promise<void>;
     private stopInterfaces;
 }

package/dist/core/backend_registry.js

@@ -35,9 +35,18 @@ export class BackendRegistry {
     callbackOwner(data) {
         return [...this.interfaces.values()].find(ui => ui.ownsCallback?.(data));
     }
+    sensitiveInboundOwner(event) {
+        return [...this.interfaces.values()].find(ui => ui.isSensitiveInbound?.(event));
+    }
     getPendingApprovals() {
         return [...this.interfaces.values()].reduce((sum, ui) => sum + (ui.getPendingApprovals?.() ?? 0), 0);
     }
+    getPendingOperations() {
+        return [...this.interfaces.values()].reduce((sum, ui) => sum + (ui.getPendingOperations?.() ?? 0), 0);
+    }
+    async stopPendingOperations() {
+        await Promise.allSettled([...this.interfaces.values()].map(ui => ui.stopPendingOperations?.()));
+    }
     stop() {
         return this.stopping ??= this.stopInterfaces();
     }

package/dist/core/backend_ui.d.ts

@@ -20,10 +20,13 @@ export interface EngineCustomUiHook {
     handleCustomCallback?(scopeId: string, data: string, locale: AppLocale, messageId?: number, event?: ChannelCallbackEvent): Promise<boolean>;
     handleCustomCommand?(scopeId: string, command: string, args: string, locale: AppLocale, event?: ChannelTextEvent): Promise<boolean>;
     handleCustomInbound?(event: ChannelTextEvent, locale: AppLocale): boolean | Promise<boolean>;
+    isSensitiveInbound?(event: ChannelTextEvent): boolean;
 }
 export interface BackendUi extends EngineCustomUiHook {
     /** Recognize owned buttons even after the user switches to another backend (e.g. pending approvals). */
     ownsCallback?(data: string): boolean;
     getPendingApprovals?(): number;
+    getPendingOperations?(): number;
+    stopPendingOperations?(): Promise<void>;
     stop?(): Promise<void>;
 }

package/dist/core/channel_events.d.ts

@@ -14,6 +14,8 @@ export interface ChannelTextEvent {
     chatType: string;
     userId: string;
     text: string;
+    /** Durable replay marker for administrative input whose secret was not retained. */
+    redacted?: boolean;
     messageId: number;
     mediaGroupId?: string | null;
     attachments: InboundAttachment[];

package/dist/core/orchestrator.js

@@ -282,12 +282,15 @@ export class UnifiedChannelOrchestrator {
     async receiveInbound(id, inbound) {
         if (this.stopped || !this.ownsScope(inbound.event.scopeId))
             return;
-        if (!this.store.channelInbox.accept(id, inbound))
+        const retained = inbound.kind === 'text' && (this.backends.sensitiveInboundOwner(inbound.event)
+            || (this.store.getServiceInteraction(inbound.event.scopeId, 'sensitive-input') && !parseCommand(inbound.event.text)))
+            ? { kind: 'text', event: { ...inbound.event, text: '', attachments: [], entities: [], redacted: true } } : inbound;
+        if (!this.store.channelInbox.accept(id, retained))
             return;
         await this.intakeOperations.run(id, async () => {
             if (this.stopped)
                 return;
-            if (!this.store.channelInbox.accept(id, inbound))
+            if (!this.store.channelInbox.accept(id, retained))
                 return;
             if (inbound.kind === 'text')
                 await this.handleText(inbound.event);
@@ -562,6 +565,7 @@ export class UnifiedChannelOrchestrator {
         await this.bot.stop();
         this.removeInboundConsumer?.();
         this.removeInboundConsumer = null;
+        await this.backends.stopPendingOperations();
         await this.intakeOperations.idle();
         for (const timer of this.stalePanelDeleteTimers.values())
             clearTimeout(timer);
@@ -577,7 +581,7 @@ export class UnifiedChannelOrchestrator {
     }
     isIdleForServiceUpdate() {
         return !this.store.taskJournal.listUnfinished().some(task => this.ownsScope(task.event.scopeId)) && this.activeTurns.size === 0 && this.settlements.size === 0 && this.scopeOperations.isIdle() && this.messageOperations.isIdle() && this.getPendingApprovals() === 0 &&
-            !this.store.listQueuedTurnInputs().some(input => this.ownsScope(input.scopeId));
+            this.backends.getPendingOperations() === 0 && !this.store.listQueuedTurnInputs().some(input => this.ownsScope(input.scopeId));
     }
     getPendingApprovals() { return this.backends.getPendingApprovals(); }
     getActiveTurnsCount() {
@@ -647,13 +651,32 @@ export class UnifiedChannelOrchestrator {
     async handleText(event) {
         if (this.stopped || !this.ownsScope(event.scopeId))
             return;
+        const scopeId = event.scopeId;
+        const locale = this.store.getChatSettings(scopeId)?.locale ?? 'zh';
+        const sensitiveState = this.store.getServiceInteraction(scopeId, 'sensitive-input');
+        if (sensitiveState && parseCommand(event.text)) {
+            this.store.setServiceInteraction(scopeId, 'sensitive-input', null);
+        }
+        if (event.redacted) {
+            await this.messaging.deleteMessage(scopeId, event.messageId).catch(() => { });
+            await this.sendMessage(scopeId, locale === 'zh' ? '上次配置输入的敏感内容未保存。请重新打开配置面板并再次输入。' : 'The sensitive configuration input was not retained. Reopen its setup panel and enter it again.');
+            return;
+        }
+        const sensitiveOwner = this.backends.sensitiveInboundOwner(event);
+        if (sensitiveOwner) {
+            await sensitiveOwner.handleCustomInbound?.(event, locale);
+            return;
+        }
+        if (sensitiveState && !parseCommand(event.text)) {
+            await this.messaging.deleteMessage(scopeId, event.messageId).catch(() => { });
+            await this.sendMessage(scopeId, locale === 'zh' ? '对应配置入口当前不可用，此输入未交给模型。请重新打开配置面板，或发送 /cancel 取消。' : 'The configuration handler is unavailable. This input was not sent to a model. Reopen configuration or send /cancel.');
+            return;
+        }
         const action = this.messaging.resolveAction?.(event);
         if (action) {
             await this.handleCallback(action);
             return;
         }
-        const scopeId = event.scopeId;
-        const locale = this.store.getChatSettings(scopeId)?.locale ?? 'zh';
         const parsedCommand = parseCommand(event.text);
         const addressing = this.messaging.resolveIncoming?.(event, this.config, this.bot.username) ??
             (parsedCommand ? { kind: 'command', command: parsedCommand } :
@@ -688,8 +711,8 @@ export class UnifiedChannelOrchestrator {
         }
         const ui = this.backends.ui(this.getBackendDescriptorForScope(scopeId).id) ?? this.customUi;
         if (ui?.handleCustomInbound) {
-            const handled = await ui.handleCustomInbound(event, locale);
-            if (handled)
+            const handled = ui.handleCustomInbound(event, locale);
+            if (handled && await handled)
                 return;
         }
         if (addressing.kind === 'command') {

package/dist/dsh/adapter.d.ts

@@ -40,7 +40,22 @@ export declare class DshEngineAdapter implements IEngineAdapter {
     listEfforts(scopeId: string): Promise<SessionConfigSelectOption[]>;
     selectEffort(scopeId: string, effort: string | null): Promise<void>;
     setAccess(scopeId: string, access: AccessPresetValue): Promise<void>;
-    listSessions(scopeId: string, cursor?: string): Promise<import("@agentclientprotocol/sdk").ListSessionsResponse>;
+    listSessions(scopeId: string, cursor?: string): Promise<import("@agentclientprotocol/sdk").ListSessionsResponse | {
+        sessions: {
+            title: string | undefined;
+            sessionId: import("@agentclientprotocol/sdk").SessionId;
+            cwd: string;
+            additionalDirectories?: Array<string>;
+            updatedAt?: string | null;
+            _meta?: {
+                [key: string]: unknown;
+            } | null;
+        }[];
+        nextCursor?: string | null;
+        _meta?: {
+            [key: string]: unknown;
+        } | null;
+    }>;
     isBusy(scopeId: string): boolean;
     executeTurn(request: EngineTurnRequest): EngineTurnExecution;
     stop(): Promise<void>;

package/dist/dsh/backend.js

@@ -10,11 +10,15 @@ export function createDshBackend(config, store, logger, messaging) {
         createUi: host => ({
             ownsCallback: data => data.startsWith('dsh:'),
             getPendingApprovals: () => ui.pendingApprovals,
+            getPendingOperations: () => ui.pendingOperations,
+            stopPendingOperations: () => ui.stopPendingOperations(),
             stop: () => ui.stop(),
             renderCustomStatus: async (scopeId, locale) => ui.status(scopeId, locale),
             renderSetupMenu: async (scopeId, locale, messageId) => { await ui.setup(scopeId, locale, host, messageId); return true; },
             renderModelsMenu: async (scopeId, locale, messageId) => { await ui.models(scopeId, locale, host, messageId); return true; },
             handleCustomCommand: (scopeId, command, args, locale) => ui.command(scopeId, command, args, locale, host),
+            isSensitiveInbound: event => ui.isSensitiveInbound(event),
+            handleCustomInbound: (event, locale) => ui.inbound(event, locale, host),
             handleCustomCallback: (scopeId, data, locale, _messageId, event) => ui.callback(scopeId, data, locale, host, event),
         }),
     };

package/dist/dsh/client.d.ts

@@ -10,6 +10,10 @@ export interface DshClientOptions {
     patches: string[];
     runtimeDir: string;
     startupTimeoutMs: number;
+    credentialControl?: {
+        requestPath: string;
+        resultPath: string;
+    };
 }
 /** An owned ACP process; protocol stdout stays separate from diagnostics. */
 export declare class DshClient extends EventEmitter {
@@ -25,6 +29,7 @@ export declare class DshClient extends EventEmitter {
     private policyPath;
     private policyWrite;
     private stderr;
+    private titlesDirectory;
     permissionHandler?: (request: RequestPermissionRequest, signal: AbortSignal) => Promise<RequestPermissionResponse>;
     cancelPermissions?: () => void;
     constructor(options: DshClientOptions, scopeId: string, logger: Logger);
@@ -38,7 +43,23 @@ export declare class DshClient extends EventEmitter {
     session(cwd: string, sessionId?: string | null): Promise<string>;
     configOptions(sessionId: string): SessionConfigOption[];
     setConfig(sessionId: string, configId: string, value: string): Promise<void>;
-    listSessions(cursor?: string): Promise<import("@agentclientprotocol/sdk").ListSessionsResponse>;
+    listSessions(cursor?: string): Promise<import("@agentclientprotocol/sdk").ListSessionsResponse | {
+        sessions: {
+            title: string | undefined;
+            sessionId: import("@agentclientprotocol/sdk").SessionId;
+            cwd: string;
+            additionalDirectories?: Array<string>;
+            updatedAt?: string | null;
+            _meta?: {
+                [key: string]: unknown;
+            } | null;
+        }[];
+        nextCursor?: string | null;
+        _meta?: {
+            [key: string]: unknown;
+        } | null;
+    }>;
+    private readSessionTitles;
     closeSession(sessionId: string): Promise<void>;
     stop(): Promise<void>;
     private dispose;

package/dist/dsh/client.js

@@ -4,7 +4,7 @@ import { EventEmitter } from 'node:events';
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
-import { createHash } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
 import { createRequire } from 'node:module';
 import { ClientApp, ndJsonStream, PROTOCOL_VERSION } from '@agentclientprotocol/sdk';
 /** An owned ACP process; protocol stdout stays separate from diagnostics. */
@@ -21,6 +21,7 @@ export class DshClient extends EventEmitter {
     policyPath = '';
     policyWrite = Promise.resolve();
     stderr = '';
+    titlesDirectory = '';
     permissionHandler;
     cancelPermissions;
     constructor(options, scopeId, logger) {
@@ -65,6 +66,25 @@ export class DshClient extends EventEmitter {
             pluginPath = pluginPath.replace(/\.js$/, '.ts');
         }
         await fs.writeFile(patchPath, `- insert:\n    - id: foxclaw-permissions\n      name: ${JSON.stringify(pathToFileURL(pluginPath).href)}\n      config:\n        policyPath: ${JSON.stringify(this.policyPath)}\n`, { mode: 0o600 });
+        this.titlesDirectory = path.join(path.dirname(this.policyPath), `titles-${randomUUID()}`);
+        let titlesPlugin = fileURLToPath(new URL('./session_titles_plugin.js', import.meta.url));
+        try {
+            await fs.access(titlesPlugin);
+        }
+        catch {
+            titlesPlugin = titlesPlugin.replace(/\.js$/, '.ts');
+        }
+        await fs.appendFile(patchPath, `- insert:\n    - id: foxclaw-session-titles\n      name: ${JSON.stringify(pathToFileURL(titlesPlugin).href)}\n      config:\n        directory: ${JSON.stringify(this.titlesDirectory)}\n`);
+        if (this.options.credentialControl) {
+            let credentialsPlugin = fileURLToPath(new URL('./credentials_plugin.js', import.meta.url));
+            try {
+                await fs.access(credentialsPlugin);
+            }
+            catch {
+                credentialsPlugin = credentialsPlugin.replace(/\.js$/, '.ts');
+            }
+            await fs.appendFile(patchPath, `- insert:\n    - id: foxclaw-credentials\n      name: ${JSON.stringify(pathToFileURL(credentialsPlugin).href)}\n      config:\n        requestPath: ${JSON.stringify(this.options.credentialControl.requestPath)}\n        resultPath: ${JSON.stringify(this.options.credentialControl.resultPath)}\n`);
+        }
         const args = ['--profile', this.options.profile, ...this.options.patches.flatMap(p => ['--patch', path.resolve(p)]), '--patch', patchPath];
         const env = { ...process.env, ...(this.options.home ? { DSH_HOME: this.options.home } : {}) };
         let command = this.options.cliBin;
@@ -162,7 +182,50 @@ export class DshClient extends EventEmitter {
         await this.start();
         if (!this.capabilities.list)
             throw new Error('This DSH profile cannot list sessions');
-        return this.agent.request('session/list', cursor ? { cursor } : {});
+        const page = await this.agent.request('session/list', cursor ? { cursor } : {});
+        const unnamed = page.sessions.filter(session => !session.title?.trim());
+        if (unnamed.length === 0)
+            return page;
+        const titles = await this.readSessionTitles(unnamed.map(session => session.sessionId));
+        return { ...page, sessions: page.sessions.map(session => ({ ...session, title: session.title?.trim() ? session.title : titles[session.sessionId] })) };
+    }
+    async readSessionTitles(ids) {
+        const directory = this.titlesDirectory;
+        try {
+            await fs.access(path.join(directory, 'ready'));
+        }
+        catch {
+            return {};
+        }
+        const requestPath = path.join(directory, `${randomUUID()}.request`);
+        const responsePath = requestPath.replace(/\.request$/, '.response');
+        try {
+            await fs.writeFile(`${requestPath}.tmp`, JSON.stringify(ids), { mode: 0o600 });
+            await fs.rename(`${requestPath}.tmp`, requestPath);
+            const deadline = Date.now() + 5000;
+            while (this.connected && Date.now() < deadline) {
+                try {
+                    const result = JSON.parse(await fs.readFile(responsePath, 'utf8'));
+                    if (result && typeof result === 'object' && !Array.isArray(result)) {
+                        return Object.fromEntries(Object.entries(result).filter(([id, title]) => ids.includes(id) && typeof title === 'string'));
+                    }
+                    return {};
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        throw error;
+                }
+                await new Promise(resolve => setTimeout(resolve, 50));
+            }
+            this.logger.warn('dsh.session_titles.timeout', { scopeId: this.scopeId });
+        }
+        catch {
+            this.logger.warn('dsh.session_titles.unavailable', { scopeId: this.scopeId });
+        }
+        finally {
+            await Promise.all([requestPath, responsePath, `${requestPath}.tmp`].map(file => fs.rm(file, { force: true }).catch(() => { })));
+        }
+        return {};
     }
     async closeSession(sessionId) {
         await this.agent.request('session/close', { sessionId });
@@ -180,6 +243,8 @@ export class DshClient extends EventEmitter {
         this.optionsBySession.clear();
         if (!child || !child.pid) {
             connection?.close();
+            if (this.titlesDirectory)
+                await fs.rm(this.titlesDirectory, { recursive: true, force: true });
             return;
         }
         const exited = new Promise(resolve => child.once('exit', () => resolve()));
@@ -197,5 +262,7 @@ export class DshClient extends EventEmitter {
         connection?.close();
         if (this.process === child)
             this.process = null;
+        if (this.titlesDirectory)
+            await fs.rm(this.titlesDirectory, { recursive: true, force: true });
     }
 }

package/dist/dsh/credentials.d.ts

@@ -0,0 +1,20 @@
+import { type DshClientOptions } from './client.js';
+import type { Logger } from '../logger.js';
+export interface DshCredentialInfo {
+    configured: boolean;
+    writable: boolean;
+}
+/** Owns ephemeral native credential control processes; no model/session requests. */
+export declare class DshCredentials {
+    private readonly options;
+    private readonly logger;
+    private readonly jobs;
+    private stopped;
+    constructor(options: DshClientOptions, logger: Logger);
+    get pendingOperations(): number;
+    describe(): Promise<DshCredentialInfo>;
+    set(value: string): Promise<DshCredentialInfo>;
+    private run;
+    private execute;
+    stop(): Promise<void>;
+}

package/dist/dsh/credentials.js

@@ -0,0 +1,72 @@
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { DshClient } from './client.js';
+/** Owns ephemeral native credential control processes; no model/session requests. */
+export class DshCredentials {
+    options;
+    logger;
+    jobs = new Set();
+    stopped = false;
+    constructor(options, logger) {
+        this.options = options;
+        this.logger = logger;
+    }
+    get pendingOperations() { return this.jobs.size; }
+    describe() { return this.run('describe'); }
+    set(value) { return this.run('set', value); }
+    run(operation, value) {
+        if (this.stopped)
+            return Promise.reject(new Error('DSH credentials stopped'));
+        const controller = new AbortController();
+        const done = this.execute(operation, value, controller.signal);
+        const job = { controller, done };
+        this.jobs.add(job);
+        void done.finally(() => this.jobs.delete(job)).catch(() => { });
+        return done;
+    }
+    async execute(operation, value, signal) {
+        const runtimeDir = await fs.mkdtemp(path.join(os.tmpdir(), 'foxclaw-dsh-credential-'));
+        const control = { requestPath: path.join(runtimeDir, 'request.json'), resultPath: path.join(runtimeDir, 'result.json') };
+        const client = new DshClient({ ...this.options, runtimeDir, credentialControl: control }, 'credentials', this.logger);
+        try {
+            signal.throwIfAborted();
+            await fs.writeFile(control.requestPath, JSON.stringify({ operation, value }), { mode: 0o600, flag: 'wx' });
+            await client.setAccess('read-only');
+            await client.start(signal);
+            signal.throwIfAborted();
+            const deadline = Date.now() + this.options.startupTimeoutMs;
+            let text;
+            for (;;) {
+                signal.throwIfAborted();
+                try {
+                    text = await fs.readFile(control.resultPath, 'utf8');
+                    break;
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT' || Date.now() >= deadline)
+                        throw error;
+                    await delay(25, undefined, { signal });
+                }
+            }
+            const result = JSON.parse(text);
+            if (!result.ok || !result.info)
+                throw new Error(result.error || 'DSH credential operation unavailable');
+            return result.info;
+        }
+        catch {
+            throw new Error('DSH 凭据操作未完成，请检查本机凭据配置、权限及环境覆盖后重试。 / DSH credential operation failed; check configuration, permissions and environment overrides.');
+        }
+        finally {
+            await client.stop();
+            await fs.rm(runtimeDir, { recursive: true, force: true });
+        }
+    }
+    async stop() {
+        this.stopped = true;
+        for (const job of this.jobs)
+            job.controller.abort();
+        await Promise.allSettled([...this.jobs].map(job => job.done));
+    }
+}

package/dist/dsh/credentials_plugin.d.ts

@@ -0,0 +1,19 @@
+interface CredentialInfo {
+    configured: boolean;
+    writable: boolean;
+    source?: unknown;
+}
+interface Context {
+    credentials: {
+        describe(ref: string): Promise<CredentialInfo>;
+        set(ref: string, value: string): Promise<void>;
+    };
+}
+export declare const name = "foxclaw-credentials";
+export declare const inject: string[];
+/** One private control request. Use DSH's native locking, validation and storage. */
+export declare function apply(ctx: Context, config: {
+    requestPath: string;
+    resultPath: string;
+}): Promise<void>;
+export {};

package/dist/dsh/credentials_plugin.js

@@ -0,0 +1,30 @@
+import fs from 'node:fs/promises';
+export const name = 'foxclaw-credentials';
+export const inject = ['credentials'];
+/** One private control request. Use DSH's native locking, validation and storage. */
+export async function apply(ctx, config) {
+    let result;
+    try {
+        const request = JSON.parse(await fs.readFile(config.requestPath, 'utf8'));
+        const ref = 'DEEPSEEK_API_KEY';
+        if (request.operation === 'set') {
+            if (typeof request.value !== 'string' || !/^[!-~]+$/.test(request.value))
+                throw new Error('Invalid key');
+            await ctx.credentials.set(ref, request.value);
+        }
+        else if (request.operation !== 'describe')
+            throw new Error('Unknown credential operation');
+        const info = await ctx.credentials.describe(ref);
+        result = { ok: true, info: { configured: info.configured, writable: info.writable } };
+    }
+    catch {
+        // Native errors and parser diagnostics must never propagate a key value.
+        result = { ok: false, error: 'DSH 无法保存或读取凭据，请检查其凭据配置及文件权限；环境提供的密钥不能在面板中覆盖。 / DSH credential operation failed. Check configuration, file permissions and environment overrides.' };
+    }
+    finally {
+        await fs.rm(config.requestPath, { force: true });
+    }
+    const temporary = `${config.resultPath}.tmp`;
+    await fs.writeFile(temporary, JSON.stringify(result), { mode: 0o600, flag: 'wx' });
+    await fs.rename(temporary, config.resultPath);
+}

package/dist/dsh/session_titles_plugin.d.ts

@@ -0,0 +1,32 @@
+interface SessionQuery {
+    readTitle(id: string): Promise<{
+        title: string;
+    } | undefined>;
+    readSession(id: string): Promise<{
+        events: Array<{
+            type: string;
+            data: {
+                source?: {
+                    kind: string;
+                };
+                content?: Array<{
+                    type: string;
+                    text?: string;
+                }>;
+            };
+        }>;
+    }>;
+}
+interface Context {
+    sessionQuery: SessionQuery;
+    effect(callback: () => () => Promise<void>): void;
+}
+export declare const name = "foxclaw-session-titles";
+export declare const inject: string[];
+/** Read native log-backed names without resuming sessions or invoking a model. */
+export declare function readSessionTitle(query: SessionQuery, id: string): Promise<string | undefined>;
+/** A private, per-process mailbox supplements ACP versions that omit titles. */
+export declare function apply(ctx: Context, config: {
+    directory: string;
+}): Promise<void>;
+export {};

package/dist/dsh/session_titles_plugin.js

@@ -0,0 +1,62 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+export const name = 'foxclaw-session-titles';
+export const inject = ['sessionQuery'];
+/** Read native log-backed names without resuming sessions or invoking a model. */
+export async function readSessionTitle(query, id) {
+    const title = (await query.readTitle(id))?.title;
+    if (title?.trim())
+        return title;
+    const { events } = await query.readSession(id);
+    for (const event of events) {
+        if (event.type !== 'user/message' || event.data.source?.kind !== 'user')
+            continue;
+        const text = event.data.content?.filter(block => block.type === 'text').map(block => block.text ?? '').join(' ');
+        if (text?.trim())
+            return Array.from(text.replace(/\s+/gu, ' ').trim()).slice(0, 120).join('');
+    }
+    return undefined;
+}
+/** A private, per-process mailbox supplements ACP versions that omit titles. */
+export async function apply(ctx, config) {
+    await fs.mkdir(config.directory, { recursive: true, mode: 0o700 });
+    let active;
+    let stopped = false;
+    const poll = async () => {
+        for (const file of await fs.readdir(config.directory)) {
+            if (!/^[a-f0-9-]+\.request$/.test(file))
+                continue;
+            const requestPath = path.join(config.directory, file);
+            const responsePath = requestPath.replace(/\.request$/, '.response');
+            let titles = Object.create(null);
+            try {
+                const ids = JSON.parse(await fs.readFile(requestPath, 'utf8'));
+                if (!Array.isArray(ids) || ids.length > 1000 || !ids.every(id => typeof id === 'string'))
+                    throw new Error('Invalid session title request');
+                const results = await Promise.allSettled(ids.map(async (id) => ({ id, title: await readSessionTitle(ctx.sessionQuery, id) })));
+                titles = Object.create(null);
+                for (const result of results) {
+                    if (result.status === 'fulfilled' && result.value.title)
+                        titles[result.value.id] = result.value.title;
+                }
+            }
+            catch { /* Metadata failure must not break native session listing. */ }
+            if (!stopped) {
+                await fs.writeFile(`${responsePath}.tmp`, JSON.stringify(titles), { mode: 0o600 });
+                await fs.rename(`${responsePath}.tmp`, responsePath);
+            }
+            await fs.rm(requestPath, { force: true });
+        }
+    };
+    const timer = setInterval(() => {
+        if (!active)
+            active = poll().catch(() => { }).finally(() => { active = undefined; });
+    }, 50);
+    ctx.effect(() => async () => {
+        stopped = true;
+        clearInterval(timer);
+        await active;
+        await fs.rm(path.join(config.directory, 'ready'), { force: true });
+    });
+    await fs.writeFile(path.join(config.directory, 'ready'), '', { mode: 0o600 });
+}

package/dist/dsh/ui.d.ts

@@ -1,4 +1,4 @@
-import type { AppConfig } from '../config.js';
+import { type AppConfig } from '../config.js';
 import type { BridgeStore } from '../store/database.js';
 import type { Logger } from '../logger.js';
 import type { ChannelPort } from '../core/channel_port.js';
@@ -6,6 +6,7 @@ import type { AppLocale } from '../types.js';
 import type { ChannelCallbackEvent } from '../core/channel_events.js';
 import type { BackendUiHost } from '../core/backend_ui.js';
 import { DshEngineAdapter } from './adapter.js';
+import type { ChannelTextEvent } from '../core/channel_events.js';
 /** DSH controls shared by the unified bot and the optional dedicated bot. */
 export declare class DshUi {
     private readonly config;
@@ -15,7 +16,10 @@ export declare class DshUi {
     private readonly actions;
     private readonly approvals;
     readonly adapter: DshEngineAdapter;
+    private readonly credentials;
     get pendingApprovals(): number;
+    get pendingOperations(): number;
+    stopPendingOperations(): Promise<void>;
     constructor(config: AppConfig, store: BridgeStore, logger: Logger, messaging: ChannelPort);
     private defaultAccess;
     private copy;
@@ -35,4 +39,9 @@ export declare class DshUi {
     callback(scopeId: string, data: string, locale: AppLocale, orchestrator: BackendUiHost, event?: ChannelCallbackEvent): Promise<boolean>;
     private requestPermission;
     stop(): Promise<void>;
+    isSensitiveInbound(event: ChannelTextEvent): boolean;
+    inbound(event: ChannelTextEvent, locale: AppLocale, host: BackendUiHost): boolean | Promise<boolean>;
+    private saveKey;
+    private clearKeyInput;
+    private keyInput;
 }

package/dist/dsh/ui.js

@@ -2,8 +2,10 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import os from 'node:os';
 import { randomBytes } from 'node:crypto';
+import { DEFAULT_ENV_PATH } from '../config.js';
 import { DshClient } from './client.js';
 import { DshEngineAdapter } from './adapter.js';
+import { DshCredentials } from './credentials.js';
 /** DSH controls shared by the unified bot and the optional dedicated bot. */
 export class DshUi {
     config;
@@ -13,7 +15,10 @@ export class DshUi {
     actions = new Map();
     approvals = new Map();
     adapter;
+    credentials;
     get pendingApprovals() { return this.approvals.size; }
+    get pendingOperations() { return this.credentials.pendingOperations; }
+    stopPendingOperations() { return this.credentials.stop(); }
     constructor(config, store, logger, messaging) {
         this.config = config;
         this.store = store;
@@ -22,6 +27,7 @@ export class DshUi {
         if (!config.dsh)
             throw new Error('DSH backend is not configured');
         const dsh = config.dsh;
+        this.credentials = new DshCredentials(dsh, logger);
         this.adapter = new DshEngineAdapter({
             createClient: scopeId => {
                 const client = new DshClient(dsh, scopeId, logger);
@@ -82,14 +88,27 @@ export class DshUi {
         await this.panel(scopeId, `⚙️ **DeepSeek Harness**\n\n${this.copy(locale, '模型', 'Model')}: \`${settings?.model ?? 'default'}\`\n${this.copy(locale, '推理档位', 'Reasoning')}: \`${settings?.reasoningEffort ?? 'default'}\`\n${this.copy(locale, '权限', 'Access')}: \`${access}\`\n${this.copy(locale, '会话', 'Session')}: \`${binding?.threadId || 'new'}\`\n${this.copy(locale, '工作目录', 'Directory')}: \`${binding?.cwd || this.config.defaultCwd}\``, rows, orchestrator, messageId);
     }
     async models(scopeId, locale, orchestrator, messageId) {
-        const models = await this.adapter.listModels(scopeId);
+        const envPath = this.config.envPath || DEFAULT_ENV_PATH;
+        const guidance = this.copy(locale, `首次使用 DeepSeek：点击“配置 API Key”，在与 Bot 的私聊中添加密钥。保存到 DSH 原生凭据存储，已有凭据直接复用。\n\n如果 \`${envPath}\` 中已设置 DEEPSEEK_API_KEY，则优先使用该环境配置，面板不能覆盖；其他供应商沿用 DSH 原生配置。`, `First-time DeepSeek setup: select “Configure API Key” and add your key in a private chat with the bot. Keys are saved in DSH's native credential store; existing credentials are reused.\n\nDEEPSEEK_API_KEY in \`${envPath}\` takes precedence and cannot be overwritten here. Configure other providers through DSH.`);
+        const title = this.copy(locale, '🎯 **DSH 模型**', '🎯 **DSH models**');
+        const models = await this.adapter.listModels(scopeId).catch(async () => {
+            await this.panel(scopeId, `${title}\n\n${this.copy(locale, '暂时无法读取模型列表，请检查 DSH 配置后重试。', 'Model list unavailable. Check DSH configuration and retry.')}\n\n${guidance}`, [
+                [{ text: this.copy(locale, '🔑 配置 API Key', '🔑 Configure API Key'), callback_data: 'dsh:credentials' }],
+                [{ text: this.copy(locale, '🔄 重试', '🔄 Retry'), callback_data: 'dsh:models' }],
+                [{ text: this.copy(locale, '返回设置', 'Back'), callback_data: 'engine:setup:main' }],
+            ], orchestrator, messageId);
+            return null;
+        });
+        if (!models)
+            return;
         const current = this.store.getChatSettings(scopeId)?.model;
         const buttons = [this.button(scopeId, 'model', '', this.copy(locale, '默认模型', 'Default model')), ...models.map(model => this.button(scopeId, 'model', model.id, `${model.id === current ? '✓ ' : ''}${model.name}`))];
         const rows = [];
         for (let index = 0; index < buttons.length; index += 2)
             rows.push(buttons.slice(index, index + 2));
+        rows.push([{ text: this.copy(locale, '🔑 配置 API Key', '🔑 Configure API Key'), callback_data: 'dsh:credentials' }]);
         rows.push([{ text: this.copy(locale, '返回设置', 'Back'), callback_data: 'engine:setup:main' }]);
-        await this.panel(scopeId, this.copy(locale, '🎯 **DSH 模型**', '🎯 **DSH models**'), rows, orchestrator, messageId);
+        await this.panel(scopeId, `${title}\n\n${guidance}`, rows, orchestrator, messageId);
     }
     async efforts(scopeId, locale, orchestrator, messageId) {
         const choices = await this.adapter.listEfforts(scopeId);
@@ -122,7 +141,12 @@ export class DshUi {
     }
     async threads(scopeId, locale, orchestrator, messageId, cursor) {
         const page = await this.adapter.listSessions(scopeId, cursor);
-        const rows = page.sessions.map(session => [this.button(scopeId, 'open', session.sessionId, (session.title || session.sessionId).slice(0, 60), session.cwd)]);
+        const rows = page.sessions.map(session => {
+            const workspace = session.cwd.split(/[\\/]/).filter(Boolean).at(-1) || session.cwd;
+            const fallback = `${this.copy(locale, '未命名会话', 'Untitled session')} · ${workspace} · ${session.sessionId.slice(-8)}`;
+            const title = session.title?.replace(/\s+/gu, ' ').trim() || fallback;
+            return [this.button(scopeId, 'open', session.sessionId, Array.from(title).slice(0, 60).join(''), session.cwd)];
+        });
         if (page.nextCursor)
             rows.push([this.button(scopeId, 'page', page.nextCursor, this.copy(locale, '下一页', 'Next page'))]);
         rows.push([{ text: this.copy(locale, '返回设置', 'Back'), callback_data: 'engine:setup:main' }]);
@@ -172,6 +196,9 @@ export class DshUi {
     async command(scopeId, command, args, locale, orchestrator) {
         try {
             switch (command) {
+                case 'cancel':
+                    await orchestrator.sendMessage(scopeId, this.copy(locale, '配置输入已取消。', 'Configuration input cancelled.'));
+                    return true;
                 case 'setup':
                     await this.setup(scopeId, locale, orchestrator);
                     return true;
@@ -249,6 +276,7 @@ export class DshUi {
         }
     }
     async callback(scopeId, data, locale, orchestrator, event) {
+        this.clearKeyInput(scopeId);
         const answer = (text = '') => this.messaging.answerCallback(event?.callbackQueryId ?? '', text);
         if (!data.startsWith('dsh:')) {
             if (orchestrator.getBackendDescriptorForScope(scopeId).engineType === 'dsh' && data.startsWith('engine:') && !['engine:setup:main', 'engine:setup:models', 'engine:setup:active_mode', 'engine:setup:new', 'engine:setup:backend'].includes(data) && !data.startsWith('engine:backend:')) {
@@ -275,7 +303,25 @@ export class DshUi {
         }
         await answer();
         try {
-            if (data === 'dsh:models')
+            if (data === 'dsh:credentials' || data === 'dsh:credentials:add') {
+                if (!event || event.chatId !== event.userId) {
+                    await orchestrator.sendMessage(scopeId, this.copy(locale, '请在与 Bot 的私聊中配置 API Key。', 'Configure API keys in a private chat with the bot.'));
+                    return true;
+                }
+                const info = await this.credentials.describe();
+                if (data === 'dsh:credentials:add' && info.writable) {
+                    this.store.setServiceInteraction(scopeId, 'sensitive-input', JSON.stringify({ owner: 'dsh:api-key', expires: Date.now() + 5 * 60_000 }));
+                    await this.panel(scopeId, this.copy(locale, '🔑 发送 DeepSeek API Key（仅密钥本身）。\n输入消息会尝试删除，密钥不会进入模型或任务记录。保存后本机所有 DSH 会话共用；不会发起付费请求验证。\n发送 /cancel 或点击返回取消。', '🔑 Send your DeepSeek API Key only.\nWe will attempt to delete the input message; it will not enter models or task records. Local DSH sessions share the stored key. No paid validation request is made.\nSend /cancel or select Back to cancel.'), [[{ text: this.copy(locale, '返回模型', 'Back to models'), callback_data: 'dsh:models' }]], orchestrator, event.messageId);
+                }
+                else {
+                    const keyboard = [];
+                    if (info.writable)
+                        keyboard.push([{ text: this.copy(locale, info.configured ? '更新 API Key' : '添加 API Key', info.configured ? 'Update API Key' : 'Add API Key'), callback_data: 'dsh:credentials:add' }]);
+                    keyboard.push([{ text: this.copy(locale, '返回模型', 'Back to models'), callback_data: 'dsh:models' }]);
+                    await this.panel(scopeId, `🔑 **DeepSeek API Key**\n\n${this.copy(locale, info.configured ? '状态：已配置' : '状态：未配置', info.configured ? 'Status: configured' : 'Status: not configured')}\n${info.writable ? this.copy(locale, '由 DSH 保存，可从此面板添加或更新。', 'DSH stores the key; add or update it here.') : this.copy(locale, '来自启动环境，只读。请移除对应环境变量并重启后再使用面板管理。', 'Supplied by the launch environment, read-only. Remove that variable and restart to manage the key here.')}`, keyboard, orchestrator, event.messageId);
+                }
+            }
+            else if (data === 'dsh:models')
                 await this.models(scopeId, locale, orchestrator, event?.messageId);
             else if (data === 'dsh:efforts')
                 await this.efforts(scopeId, locale, orchestrator, event?.messageId);
@@ -337,6 +383,62 @@ export class DshUi {
         for (const pending of this.approvals.values())
             pending.resolve({ outcome: { outcome: 'cancelled' } });
         this.actions.clear();
+        await this.credentials.stop();
         await this.adapter.stop();
     }
+    isSensitiveInbound(event) {
+        if (!this.keyInput(event.scopeId))
+            return false;
+        if (event.text.trim().startsWith('/')) {
+            this.clearKeyInput(event.scopeId);
+            return false;
+        }
+        return true;
+    }
+    inbound(event, locale, host) {
+        if (!this.isSensitiveInbound(event))
+            return false;
+        return this.saveKey(event, locale, host);
+    }
+    async saveKey(event, locale, host) {
+        const saved = this.keyInput(event.scopeId);
+        this.clearKeyInput(event.scopeId);
+        await this.messaging.deleteMessage(event.scopeId, event.messageId).catch(() => { });
+        const key = event.text.trim();
+        const expires = saved?.expires ?? 0;
+        if (event.chatType !== 'private' || expires < Date.now() || event.attachments.length || key.length < 8 || !/^[!-~]+$/.test(key)) {
+            await host.sendMessage(event.scopeId, this.copy(locale, '输入已过期或格式不正确，请从模型面板重新添加 API Key。', 'Input expired or invalid. Reopen the model panel to add a key.'), [[{ text: this.copy(locale, '配置 API Key', 'Configure API Key'), callback_data: 'dsh:credentials' }]]);
+            return true;
+        }
+        try {
+            await this.credentials.set(key);
+            await host.sendMessage(event.scopeId, this.copy(locale, '✅ API Key 已保存到 DSH。无需重启，下一次模型请求使用新凭据；尚未验证密钥是否有效。', '✅ API Key saved in DSH. No restart is needed; the next model request uses it. Key validity has not been tested.'), [[{ text: this.copy(locale, '返回模型选择', 'Choose model'), callback_data: 'dsh:models' }]]);
+        }
+        catch {
+            await host.sendMessage(event.scopeId, this.copy(locale, '无法保存 API Key，请检查 DSH 凭据存储及环境覆盖后重试。', 'Cannot save the key. Check DSH credential storage and environment overrides, then retry.'), [[{ text: this.copy(locale, '配置 API Key', 'Configure API Key'), callback_data: 'dsh:credentials' }]]);
+        }
+        return true;
+    }
+    clearKeyInput(scopeId) {
+        const state = this.store.getServiceInteraction(scopeId, 'sensitive-input');
+        if (state) {
+            try {
+                if (JSON.parse(state).owner === 'dsh:api-key')
+                    this.store.setServiceInteraction(scopeId, 'sensitive-input', null);
+            }
+            catch { /* Another administrative interaction owns its own marker. */ }
+        }
+    }
+    keyInput(scopeId) {
+        const text = this.store.getServiceInteraction(scopeId, 'sensitive-input');
+        if (!text)
+            return null;
+        try {
+            const value = JSON.parse(text);
+            return value.owner === 'dsh:api-key' && typeof value.expires === 'number' && Number.isFinite(value.expires) ? { expires: value.expires } : null;
+        }
+        catch {
+            return null;
+        }
+    }
 }

package/docs/dsh.md

@@ -49,6 +49,8 @@ DEFAULT_CWD=/absolute/path/to/workspace
 
 Provider credentials remain managed by DSH. Provider environment variables such as `DEEPSEEK_API_KEY` can be placed in FoxClaw's `.env` and are inherited by DSH. Codex/AGY account rotation and auth synchronization are not used by this backend.
 
+Use `/models` → **Configure API Key** to add or update a DeepSeek key in a private chat with the bot. FoxClaw attempts to delete the input message and saves the key through DSH's native credential service. The next request uses it without restarting. Keys never enter model prompts, task records or the durable inbox; a restart retains only the input intent, requiring any unsaved key to be entered again. Saving does not make a paid request or verify key validity. Local DSH sessions share credentials. Launch-environment keys take precedence and are read-only; other providers continue using native DSH configuration.
+
 | Control | Purpose |
 | --- | --- |
 | `/setup` | Models, reasoning, permissions, queue/interrupt mode, sessions, and plugin configuration |

package/docs/zh/dsh.md

@@ -49,6 +49,8 @@ DEFAULT_CWD=/absolute/path/to/workspace
 
 Provider 与 API key 沿用 DSH 配置。使用环境变量的 provider，可将相应变量（如 `DEEPSEEK_API_KEY`）加入 FoxClaw `.env`，DSH 子进程会继承。这里不使用 Codex/AGY 的账号轮转或认证同步。
 
+也可在 `/models` → **配置 API Key** 中添加或更新 DeepSeek 密钥：在与 Bot 的私聊中输入，FoxClaw 尝试删除输入消息，通过 DSH 原生凭据服务保存，下一次请求生效，无需重启。密钥不进入模型、任务记录或持久收件箱；服务重启后只恢复输入意图，未保存的密钥需要重新输入。保存确认不代表已经调用模型验证密钥。凭据在本机 DSH 会话间共用；启动环境提供的密钥优先且只读，其他供应商继续沿用 DSH 原生配置。
+
 | 操作 | 用途 |
 | --- | --- |
 | `/setup` | 模型、推理档位、权限、排队/中断接管、会话与插件配置面板 |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foxden-app/foxclaw",
-  "version": "0.13.3",
+  "version": "0.13.5",
   "description": "Foxden local execution claw for controlling Codex, OpenCode, Antigravity, and DeepSeek Harness from trusted chat interfaces.",
   "type": "module",
   "main": "dist/main.js",