@goodandready/dsh-key-rotation 0.8.77 → 0.8.78

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.8.78 (2026-10-30)
+
+### Network Transports, Model Catalog & Predictive Quota Runway (Block 6 Release)
+- **Network Transports & Canonical Token Normalization (Issue #546)**: Introduced dedicated `lib/transports/` layer separating wire protocol streaming and usage normalization. Created `lib/transports/tokens.js` with `normalizeUsageTokens` mapping heterogeneous usage payloads across OpenAI, Anthropic, Google Gemini, Ollama, and DeepSeek into canonical `{ inputTokens, outputTokens, cacheReadTokens, cacheWriteTokens, totalTokens }`. Created `lib/transports/sse.js` providing zero-dependency streaming Server-Sent Events parser (`createSseDecoder`, `parseSseStream`) with cross-chunk buffering, comment filtering, `[DONE]` stripping, and clean `AbortSignal` handling. Added wire parsers for OpenAI chat streams (`openai.js`) and Anthropic Claude Messages (`anthropic.js`) with split-event usage accumulation. Integrated canonical usage into `lib/stream-metrics.js`.
+- **Central ModelCatalog with Cache Stampede Protection (Issue #550)**: Implemented domain service `ModelCatalog` (`lib/model-catalog.js`) with TTL-based caching and in-flight promise deduplication (`inflight = new Map<string, Promise<ModelMeta[]>>()`). Eliminates Cache Stampede by guaranteeing only one upstream `/models` request executes when multiple concurrent sessions query model capabilities simultaneously. Provides model capability normalization (context window, max tokens, reasoning, tools, vision) and resilient offline fallback (`KNOWN_MODELS_FALLBACK`).
+- **Predictive Quota Runway & Burn Rate Preemption (Issue #549)**: Introduced `QuotaRunway` (`lib/quota-runway.js`) replacing reactive 429 rate-limiting with conservative predictive preemption. Calculates window burn rates (`percentUsed / elapsed`) and projected time to exhaustion (`etaMs = (100 - percentUsed) / rate`). Identifies keys projected to exhaust before provider reset windows (`exhaustsBeforeReset: etaMs < timeToReset`). Integrated directly into `sortAttemptList` in `lib/pool-selection.js`: keys risking quota exhaustion are preemptively deprioritized in favor of healthy credentials before encountering HTTP 429 failures.
+
 ## 0.8.77 (2026-10-30)
 
 ### Session Routing, Typed Error Taxonomy & Pre-First-Token Failover (Block 5 Release)

package/lib/client-src/00-header.js

@@ -0,0 +1,40 @@
+// dsh-key-rotation — Settings card (Key Rotation).
+// Renders in Settings → Plugins → Plugin settings via the settings.plugin.item slot and
+// edits the plugin's `dsh-key-rotation` settings namespace through the
+// loopback-fenced config bridge at /dsh-key-rotation/config.
+//
+// The config is a KEY POOL PER PROVIDER: a list of providers, each with a list
+// of API-key env names. The provider is picked from the catalog of providers
+// actually registered with ctx.llm (served by the host as data.providers), so no
+// manual route typing is ever needed. The plugin derives the fallback chain and
+// auto-creates clone routes from the key count.
+//
+// Localization: source strings are English; Chinese is a first-class locale (en + zh).
+// Other languages come from the DSH core locale service / translation plugins
+// via props.t (slot locale: NS). Active locale prefers ctx.locale.getSnapshot().active,
+// else first navigator.languages entry, else 'en' — same fallback chain as DSH core.
+window.__ModuleLoader__.load({
+  id: '@goodandready/dsh-key-rotation',
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+    const React = require('react');
+    const h = React.createElement;
+
+        // Core primitives and chevron icon
+    let ChevronIcon = null;
+    try {
+      const primitives = require('@deepseek-ai/dsh-client-primitives') || require('@deepseek-ai/dsh-client-icons');
+      ChevronIcon = primitives && (primitives.IconChevronDownOutline14 || primitives.IconChevronDownOutline);
+    } catch (err) {
+      ChevronIcon = null;
+    }
+
+    const CONFIG_PATH = '/dsh-key-rotation/config';
+    const NS = 'dsh-key-rotation';
+    // Plugins page row seat (DSH 0.1.6-alpha.2): key = '<package name>#<row id>'.
+    const PKG = '@goodandready/dsh-key-rotation';
+    const ROW_ID = 'dsh-key-rotation';
+    const ROW_CONFIG_KEY = PKG + '#' + ROW_ID;
+
+    // -------------------------------------------------------------- i18n

package/lib/client-src/10-locales.js

@@ -0,0 +1,585 @@
+    const en = {
+      title: 'Key Rotation',
+      'header.title': 'Key Rotation & Failover',
+      'header.sub': 'Automated multi-key round-robin rotation, 429/5xx exponential backoff cooldowns, circuit breaker failover protection, and credential security (~/.dsh/.credentials.yaml).',
+      'header.pools_badge': 'pools active',
+      'header.keys_badge': 'keys configured',
+            simulatorTitle: 'Interactive Routing Simulator',
+      simulatorDesc: 'Test routing strategies and visualize failover trace across key pools without sending real upstream requests.',
+      simulatorRun: 'Run Simulation',
+      simulatorRunning: 'Simulating...',
+      simulatorSelectProvider: 'Provider',
+      simulatorSelectModel: 'Model (optional)',
+      simulatorMaxAttempts: 'Max Attempts',
+      simulatorEvent: 'Simulated Outcome',
+      simulatorEventSuccess: 'All keys succeed',
+      simulatorEventRateLimit: 'Key 1 Rate Limited (429)',
+      simulatorEventServer500: 'Key 1 Internal Error (500)',
+      simulatorResults: 'Simulation Trace',
+      simulatorNoResults: 'Run a simulation to view the candidate execution trace.',
+      sectionStats: 'Pool Health & Telemetry',
+      sectionStatsDesc: 'Real-time telemetry of active key pools, healthy credentials, and failover status.',
+      sectionFailover: 'Failover Triggers & Error Codes',
+      sectionFailoverDesc: 'Select error conditions that trigger automatic switching to the next available key.',
+            maxAttemptsLabel: 'Max Attempts (Budget)',
+      maxDurationLabel: 'Max Duration ms (Budget)',
+      traceTitle: 'Key Selection Traces',
+      traceDesc: 'Candidate evaluation history, skips and selection decisions for requests.',
+      traceRefresh: 'Refresh Traces',
+      traceClear: 'Clear History',
+      traceEmpty: 'No selection traces recorded yet.',
+      traceSelected: 'Selected Key',
+      traceOutcome: 'Outcome',
+      drainTitle: 'Managed Key Drain',
+      drainDesc: 'Safely transition a key out of rotation waiting for active requests to finish.',
+      drainKeyPlaceholder: 'Key ref (e.g. DEEPSEEK_API_KEY_2)',
+      drainStart: 'Start Drain',
+      drainCancel: 'Cancel Drain',
+      drainActiveStreams: 'Active requests',
+      drainCanComplete: 'Ready to remove',
+      drainDraining: 'Draining Keys',
+      drainEmpty: 'No keys currently draining.',
+      sectionTiming: 'Timing & Rotation Schedule',
+      sectionTimingDesc: 'Configure cooldown durations and scheduled periodic rotation windows.',
+      sectionBackup: 'Backup & Snapshots',
+      sectionBackupDesc: 'Export or import provider pools and create full plugin configuration snapshots.',
+      statPools: 'Configured Pools',
+      statKeys: 'Total Keys',
+      statHealthy: 'Healthy / Ready',
+      loadDistribution: 'Traffic Distribution',
+      statRequests: 'requests',
+      noTrafficYet: 'No traffic recorded yet',
+      confirm: 'Confirm',
+      cancel: 'Cancel',
+      confirmResetTitle: 'Reset cooldowns for {p}?',
+      confirmResetDesc: 'This will immediately clear all failure counts, cooldown timers, and reset the circuit breaker.',
+      confirmRemoveProvTitle: 'Remove provider {p}?',
+      confirmRemoveProvDesc: 'Are you sure you want to remove this provider and all configured keys from rotation?',
+      filterAll: 'All',
+      filterReady: 'Ready',
+      filterCooldown: 'In Cooldown',
+      filterErrors: 'With Errors',
+      subtitle: 'Per-provider API key rotation: pools of keys, automatic failover on quota/rate-limit errors, cooldown and recovery.',
+      cardDesc: 'Per-provider API key rotation: pools of keys, automatic failover on quota/rate-limit errors, cooldown and recovery.',
+      loading: 'Loading…',
+      notRegistered: 'not registered',
+      providerCatalogUnavailable: 'Provider list unavailable',
+      removeKey: 'Remove key',
+      removeProvider: 'Remove provider',
+      addKey: '+ Add key',
+      addKeyTitle: 'Add API key',
+      noProviders: 'No providers registered with DSH — nothing to pick from yet.',
+      bulkImport: 'Bulk Import',
+      bulkImportDesc: 'Paste API keys line-by-line, as .env (KEY=value), or CSV (KEY, weight):',
+      bulkImportBtn: 'Import Keys',
+      bulkImportCancel: 'Cancel',
+      bulkImportSuccess: 'Imported {n} keys',
+      keyPaused: 'Paused',
+      keyRevoked: 'Revoked (401)',
+      keyAuthPaused: 'Auth Paused (401/403)',
+      presetLimitsBtn: '⚡ Preset Limits',
+      presetApplied: 'Applied {prov} preset limits ({rpm} RPM / {tpm} TPM)',
+      presetNone: 'No canonical preset for this provider',
+      detectedLimitsLabel: 'Upstream: {rpm} RPM · {tpm} TPM',
+      trafficSmoothingLabel: 'Traffic Smoothing (Burst)',
+      balanceLabel: 'Balance: {amt} {curr}',
+      balanceEmpty: 'Balance Empty (Paused)',
+      balanceCheckBtn: '💰 Check Balance',
+      checkingBalance: 'Checking…',
+      upstreamResetIn: '⚡ Reset in {time} (header)',
+      pauseKey: 'Pause key from rotation',
+      resumeKey: 'Resume key rotation',
+      sparklineTraffic: 'Traffic Trend',
+      sparklineLatency: 'Latency Trend',
+      addProvider: '+ Add provider',
+      desc: 'Per-provider API key rotation. For each provider, list its API keys (env names, stored in DSH credentials). The plugin routes a model through that provider\u2019s keys in order and switches to the next on a quota/rate-limit failure.',
+      cooldown: 'Cooldown after failure (ms)',
+      scheduleDays: 'Rotation schedule (days, 0=off)',
+      switchCodes: 'Switch codes (comma-separated)',
+      providersTitle: 'Providers and their keys',
+      save: 'Save',
+      discard: 'Discard',
+      saving: 'Saving…',
+      moveUp: 'Move up',
+      moveDown: 'Move down',
+      keyActive: 'in use',
+      keyReady: 'ready',
+      keyCooling: 'cooling down, {s}s',
+      keyMissing: 'no such credential',
+      switchesNone: 'no switches yet',
+      switchesSome: 'switches: {n} · last: {reason}, {ago}',
+      justNow: 'just now',
+      minutesAgo: '{n} min ago',
+      hoursAgo: '{n} h ago',
+      codesTitle: 'Switch on these failures',
+      keyValuePlaceholder: 'paste the key, then Save',
+      keySave: 'Save key',
+      keySaved: 'saved',
+      keyFromEnv: 'from the environment, read-only here',
+      keyWriteFailed: 'could not store the key: {msg}',
+      notSecretShape: 'saved, but the value does not look like an API key - check for a typo',
+      rpmTitle: 'requests/min: {u} used, {r} remaining',
+      tpmTitle: 'tokens/min: {u} used, {r} remaining',
+      rpmLimitLabel: 'Rate Limit (RPM)',
+      tpmLimitLabel: 'Rate Limit (TPM)',
+      budgetLabel: 'budget:',
+      exportCsv: 'Export CSV',
+      weightHint: 'round-robin weight: how many times this key joins the cycle (1 = equal share)',
+      modelPoolsTitle: 'Per-model token quotas',
+      modelPoolsHint: 'Give one credential its own token budget for one model. A key that spends its budget is skipped for that model only — other models keep using it. Leave the limit empty for unlimited.',
+      modelPoolsEmpty: 'No model sub-pools configured. Add one to give a model its own keys and token budgets.',
+      addModel: '+ Add model',
+      modelName: 'Model id',
+      modelNamePlaceholder: 'e.g. claude-sonnet',
+      removeModel: 'Remove this model pool',
+      modelKeys: 'Credential references for this model',
+      tokenLimitLabel: 'Token limit',
+      tokenLimitPlaceholder: 'unlimited',
+      tokenLimitHint: 'Tokens this credential may spend on this model per quota window. Empty = unlimited.',
+      mtUnlimited: 'Unlimited',
+      mtExhausted: 'Exhausted',
+      mtRemaining: 'Remaining: {n}',
+      mtResetIn: 'Reset: {t}',
+      mtUsedOf: '{u} / {l}',
+      mtResetWindowHint: 'Window controlled by quotaResetWindow.',
+      mtLocalOnly: 'Tracked locally from provider-reported usage on successful responses.',
+      retestBroken: 'Re-test',
+      retestFail: 're-test failed - key still down',
+      snapshotExport: 'Snapshot ⬇',
+      snapshotImport: 'Restore',
+      keyHint: 'The value is stored in DSH credentials and never sent back to the browser — only its last 5 characters are shown. Names are generated for you; hover a key to see the one it uses.',
+      brokenKey: 'broken (3× AUTH)',
+      keyExpired: 'expired',
+      keyExpiringSoon: 'expires in {n} d',
+      exportPools: 'Export',
+      exportOne: '⬇',
+      usedAgo: '{ago} ago',
+      importPools: 'Import',
+      importEnv: 'Import .env',
+      resetCooldown: 'Reset cooldown',
+      testAll: 'Test all keys',
+      testing: 'Testing…',
+      testKey: 'Test',
+      testOk: 'OK',
+      testFail: 'FAIL',
+      poolExhausted: 'pool exhausted — all keys cooling',
+      resetting: 'Resetting…',
+      keyLabel: 'Key {n}',
+      undoProvider: 'Provider removed',
+      undoKey: 'Key removed',
+      undo: 'Undo',
+      // (issue 289) a11y / issue 290 states / issue 291 bulk / issue 292 locale
+      emptyTitle: 'No pools yet',
+      emptyDesc: 'Add a provider and at least one API key name to start rotating.',
+      errorTitle: 'Could not load settings',
+      retry: 'Retry',
+      chooseProvider: 'Choose a provider',
+      readOnly: 'Settings are read-only.',
+      settingsChanged: 'The settings service changed. Discard this draft and reload before saving.',
+      saveRefused: 'The host did not accept this save. Your draft is kept; discard it to load the latest settings.',
+      saveUnconfirmed: 'The save result could not be confirmed. Your draft is kept; reload before trying again.',
+      unavailableTitle: 'Settings bridge unavailable',
+      unavailableDesc: 'The host did not expose the dsh-key-rotation settings namespace. Reopen Settings or check the plugin is enabled.',
+      modalClose: 'Close dialog',
+      dialogLabel: 'Confirmation',
+      loadChartAria: 'Key traffic distribution',
+      bulkCooldownPlaceholder: 'Bulk cooldown (ms)',
+      bulkApply: 'Apply to selected',
+      bulkRemove: 'Remove selected',
+      confirmBulkRemoveTitle: 'Remove {n} provider(s)?',
+      confirmBulkRemoveDesc: 'Selected providers and all their keys will be removed from rotation. You can undo once immediately after.',
+      selectProvider: 'Select provider {p}',
+      activeBadge: 'active',
+      healthScoreTitle: 'health score',
+      totalRequestsTitle: 'total requests',
+      exportProvider: 'Export this provider',
+      recentFailures: 'Recent failures ({n})',
+      noActivePools: 'No active pools',
+      headerPoolsTitle: 'Key rotation pools',
+            pausedBudget: 'paused',
+      sortUsage: 'Sort by usage',
+      testingAllProgress: 'Testing {n}/{total}…',
+      liveEventStream: 'Live Event Stream',
+      liveEventStreamEmpty: 'No rotation events recorded',
+      eventAt: 'Time',
+      eventKey: 'Key',
+      eventReason: 'Reason',
+      eventCooldown: 'Cooldown',
+      quotaResetIn: 'Reset in {time}',
+      routingStrategyLabel: 'Routing Strategy',
+      routingStrategyRoundRobin: 'Round-Robin (default)',
+      routingStrategyLeastLoaded: 'Least-Loaded (concurrency)',
+      routingStrategyLowestLatency: 'Lowest-Latency (p95)',
+      routingStrategySticky: 'Sticky (preserves prompt cache)',
+      proactiveGuardLabel: 'Proactive Rate-Limit Guard',
+      proactiveGuardHint: 'Pre-emptively pause keys when remaining quota or Retry-After header indicates limit before hitting 429',
+      showChatHeaderChipLabel: 'Chat Header Status Chip',
+      showChatHeaderChipDesc: 'Show pool status chip in conversation header',
+      selfHealingLabel: 'Auto-Unbreak Interval (min)',
+      selfHealingHint: 'Periodic free model check to revive broken keys (0 to disable)',
+      updateCheck: 'Check for updates',
+      updateAvailable: 'Update available',
+      updateNone: 'Plugin is up to date',
+      updateRun: 'Update now',
+      updateRestart: 'Update installed. Restart DSH to load the new version.',
+      updateRunning: 'Updating…',
+      updateFailed: 'Update failed',
+      currentVersion: 'Current version',
+      latestVersion: 'Latest version',
+      testAllKeys: 'Test All Keys',
+      testingMatrix: 'Testing Keys…',
+      matrixModalTitle: '⚡ Key Test Matrix',
+      matrixModalDesc: 'Parallel probe of all configured credentials across all provider pools.',
+      matrixSummary: '{healthy}/{total} keys operational',
+      matrixLatency: 'Latency',
+      matrixStatus: 'Status',
+      matrixClose: 'Close',
+      discoverBannerTitle: '⚡ Unassigned API Keys Discovered',
+      discoverBannerDesc: 'Found {n} credentials in your environment (~/.dsh/.credentials.yaml / env) not yet assigned to any rotation pool.',
+      autoImportBtn: '1-Click Auto-Import',
+      autoImportSuccess: 'Imported {n} keys into rotation pools',
+      autoImporting: 'Importing…',
+      quickSkip: 'Skip',
+      quickSkipTitle: 'Skip to next key in pool',
+      quickReset: 'Reset',
+      quickResetTitle: 'Reset cooldowns and circuit breaker for active provider',
+      quickPause: 'Pause',
+      quickPauseTitle: 'Pause or resume active key',
+      exportConfig: 'Export Pools',
+      importConfig: 'Import Pools',
+      exportSafe: 'Masked (Safe for sharing)',
+      exportFull: 'Full Backup (Includes secrets)',
+      exportWithPassphrase: 'Encrypted with passphrase',
+      importMode: 'Import Mode',
+      importMerge: 'Merge with existing pools',
+      importReplace: 'Replace entire pool configuration',
+      importPreview: 'Preview Diff',
+      importApply: 'Apply Configuration',
+      importSuccess: 'Configuration successfully imported and applied',
+      exportSuccess: 'Configuration exported successfully',
+      passphraseLabel: 'Passphrase (optional)',
+      passphrasePlaceholder: 'Enter master passphrase for encryption/decryption',
+      jsonConfigPlaceholder: 'Paste JSON configuration here or choose a file...',
+      previewSummary: 'Diff: {created} new providers, {updated} updated providers, {keys} keys ({added} new).',
+      promptCacheTitle: 'Prompt Cache Savings',
+      promptCacheDesc: 'Tokens served from prefix cache across sessions and estimated cost savings.',
+      promptCacheHitRatio: 'Hit Ratio',
+      promptCacheSaved: 'saved',
+      analytics24hTitle: '24h Pool Health & Load Balance',
+      healthIndex: 'Health Index',
+      cleanRequests: 'clean',
+      errorBreakdown: '24h Errors',
+      avgRecovery: 'Avg Recovery',
+    };
+
+    const zh = {
+      title: '密钥轮换',
+      'header.title': '密钥轮换与故障转移',
+      'header.sub': '自动化多密钥轮换、429/5xx指数退避冷却、断路器保护及凭证安全 (~/.dsh/.credentials.yaml)。',
+      'header.pools_badge': '个活跃密钥池',
+      'header.keys_badge': '个已配置密钥',
+      simulatorTitle: '交互式路由模拟器',
+      simulatorDesc: '测试路由策略并在不向上游发送实际请求的情况下可视化密钥池的故障转移链路。',
+      simulatorRun: '运行模拟',
+      simulatorRunning: '模拟中…',
+      simulatorSelectProvider: '提供商',
+      simulatorSelectModel: '模型（可选）',
+      simulatorMaxAttempts: '最大尝试次数',
+      simulatorEvent: '模拟场景',
+      simulatorEventSuccess: '所有密钥均成功',
+      simulatorEventRateLimit: '密钥 1 触发速率限制 (429)',
+      simulatorEventServer500: '密钥 1 内部服务错误 (500)',
+      simulatorResults: '模拟追踪结果',
+      simulatorNoResults: '运行模拟以查看候选密钥执行链路。',
+      sectionStats: '密钥池健康与遥测',
+      sectionStatsDesc: '活跃密钥池、健康凭证和故障转移状态的实时遥测。',
+      sectionFailover: '故障转移触发器与错误代码',
+      sectionFailoverDesc: '选择触发自动切换至下一个可用密钥的错误条件。',
+            maxAttemptsLabel: '最大重试次数 (预算)',
+      maxDurationLabel: '最大超时毫秒 (预算)',
+      traceTitle: '密钥选择追踪 (Trace)',
+      traceDesc: '查看请求的候选密钥评估、跳过原因和最终选择决策。',
+      traceRefresh: '刷新追踪',
+      traceClear: '清空历史',
+      traceEmpty: '暂无选择追踪记录。',
+      traceSelected: '所选密钥',
+      traceOutcome: '结果',
+      drainTitle: '安全下线密钥 (Drain)',
+      drainDesc: '平滑下线密钥并等待当前在途请求完成，避免中途断流。',
+      drainKeyPlaceholder: '密钥标识 (例如 DEEPSEEK_API_KEY_2)',
+      drainStart: '开始下线',
+      drainCancel: '取消下线',
+      drainActiveStreams: '在途请求数',
+      drainCanComplete: '可安全移除',
+      drainDraining: '下线中的密钥',
+      drainEmpty: '当前没有正在下线的密钥。',
+      sectionTiming: '时间与轮换计划',
+      sectionTimingDesc: '配置冷却持续时间和定期轮换计划窗口。',
+      sectionBackup: '备份与快照',
+      sectionBackupDesc: '导出或导入提供商密钥池，并创建完整插件配置快照。',
+      statPools: '已配置密钥池',
+      statKeys: '总密钥数',
+      statHealthy: '健康 / 就绪',
+      loadDistribution: '流量分布',
+      statRequests: '请求',
+      noTrafficYet: '暂无流量记录',
+      confirm: '确认',
+      cancel: '取消',
+      confirmResetTitle: '重置 {p} 的冷却状态？',
+      confirmResetDesc: '这将立即清除所有故障计数、冷却计时器并重置断路器。',
+      confirmRemoveProvTitle: '移除提供商 {p}？',
+      confirmRemoveProvDesc: '确定要从轮换中移除该提供商及其所有已配置密钥吗？',
+      filterAll: '全部',
+      filterReady: '就绪',
+      filterCooldown: '冷却中',
+      filterErrors: '存在错误',
+      subtitle: '按提供商 API 密钥轮换：密钥池、配额/限流错误自动故障转移、冷却与恢复。',
+      cardDesc: '按提供商 API 密钥轮换：密钥池、配额/限流错误自动故障转移、冷却与恢复。',
+      loading: '加载中…',
+      notRegistered: '未注册',
+      providerCatalogUnavailable: '提供商列表暂不可用',
+      removeKey: '移除密钥',
+      removeProvider: '移除提供商',
+      addKey: '+ 添加密钥',
+      addKeyTitle: '添加 API 密钥',
+      noProviders: 'DSH 尚未注册任何提供商 — 暂无可选项目。',
+      bulkImport: '批量导入',
+      bulkImportDesc: '按行粘贴 API 密钥，支持 .env (KEY=value) 或 CSV (KEY, 权重) 格式：',
+      bulkImportBtn: '导入密钥',
+      bulkImportCancel: '取消',
+      bulkImportSuccess: '已导入 {n} 个密钥',
+      keyPaused: '已暂停',
+      keyRevoked: '已撤销 (401)',
+      keyAuthPaused: '身份验证失败已暂停 (401/403)',
+      presetLimitsBtn: '⚡ 预设限制',
+      presetApplied: '已应用 {prov} 预设限制 ({rpm} RPM / {tpm} TPM)',
+      presetNone: '未找到该提供商预设规则',
+      detectedLimitsLabel: '上游限制：{rpm} RPM · {tpm} TPM',
+      trafficSmoothingLabel: '流量平滑 (突发并发)',
+      balanceLabel: '余额：{amt} {curr}',
+      balanceEmpty: '余额不足已暂停',
+      balanceCheckBtn: '💰 检查余额',
+      checkingBalance: '查询中…',
+      upstreamResetIn: '⚡ {time}后重置 (上游头信息)',
+      pauseKey: '暂停此密钥轮换',
+      resumeKey: '恢复此密钥轮换',
+      sparklineTraffic: '流量趋势',
+      sparklineLatency: '延迟趋势',
+      addProvider: '+ 添加提供商',
+      desc: '按提供商的 API 密钥轮换。为每个提供商列出其 API 密钥（环境变量名，存储在 DSH 凭据中）。插件按顺序通过提供商的密钥路由模型，并在配额/速率限制失败时切换到下一个。',
+      cooldown: '故障后冷却时间 (毫秒)',
+      scheduleDays: '轮换计划 (天数，0=关闭)',
+      switchCodes: '切换代码 (逗号分隔)',
+      providersTitle: '提供商与其密钥',
+      save: '保存',
+      discard: '放弃',
+      saving: '保存中…',
+      moveUp: '上移',
+      moveDown: '下移',
+      keyActive: '使用中',
+      keyReady: '就绪',
+      keyCooling: '冷却中，{s}秒',
+      keyMissing: '凭证不存在',
+      switchesNone: '暂无切换',
+      switchesSome: '切换次数: {n} · 上次: {reason}, {ago}',
+      justNow: '刚刚',
+      minutesAgo: '{n} 分钟前',
+      hoursAgo: '{n} 小时前',
+      codesTitle: '在这些故障时切换',
+      keyValuePlaceholder: '粘贴密钥，然后保存',
+      keySave: '保存密钥',
+      keySaved: '已保存',
+      keyFromEnv: '来自环境变量，此处只读',
+      keyWriteFailed: '无法存储密钥: {msg}',
+      notSecretShape: '已保存，但该值看起来不像 API 密钥 - 请检查是否有拼写错误',
+      rpmTitle: '请求/分钟: 已用 {u}, 剩余 {r}',
+      tpmTitle: 'Token/分钟: 已用 {u}, 剩余 {r}',
+      rpmLimitLabel: '速率限制 (RPM)',
+      tpmLimitLabel: '速率限制 (TPM)',
+      budgetLabel: '预算:',
+      exportCsv: '导出 CSV',
+      weightHint: '轮换权重：该密钥参与循环的次数 (1 = 等分)',
+      modelPoolsTitle: '按模型设置 Token 额度',
+      modelPoolsHint: '为某个凭据在某个模型上单独设置 Token 额度。额度用尽的密钥只会在该模型上被跳过，其他模型仍可继续使用。留空表示不限额。',
+      modelPoolsEmpty: '尚未配置模型子池。添加一个即可为该模型单独指定密钥与 Token 额度。',
+      addModel: '+ 添加模型',
+      modelName: '模型 ID',
+      modelNamePlaceholder: '例如 claude-sonnet',
+      removeModel: '移除该模型子池',
+      modelKeys: '该模型使用的凭据引用',
+      tokenLimitLabel: 'Token 额度',
+      tokenLimitPlaceholder: '不限额',
+      tokenLimitHint: '该凭据在此模型的每个额度周期内可消耗的 Token 数。留空表示不限额。',
+      mtUnlimited: '不限额',
+      mtExhausted: '已耗尽',
+      mtRemaining: '剩余：{n}',
+      mtResetIn: '重置：{t}',
+      mtUsedOf: '{u} / {l}',
+      mtResetWindowHint: '周期由 quotaResetWindow 控制。',
+      mtLocalOnly: '仅在成功响应后根据提供商返回的 usage 本地记账。',
+      retestBroken: '重新测试',
+      retestFail: '重新测试失败 - 密钥仍然不可用',
+      snapshotExport: '快照 ⬇',
+      snapshotImport: '恢复',
+      keyHint: '该值存储在 DSH 凭据中，绝不会发送回浏览器 — 仅显示其最后 5 个字符。名称已自动生成；悬停在密钥上可查看其使用的名称。',
+      brokenKey: '已损坏 (3× 认证失败)',
+      keyExpired: '已过期',
+      keyExpiringSoon: '{n} 天后过期',
+      exportPools: '导出',
+      exportOne: '⬇',
+      usedAgo: '{ago}前使用',
+      importPools: '导入',
+      importEnv: '导入 .env',
+      resetCooldown: '重置冷却',
+      testAll: '测试所有密钥',
+      testing: '测试中…',
+      testKey: '测试',
+      testOk: '正常',
+      testFail: '失败',
+      poolExhausted: '密钥池耗尽 — 所有密钥冷却中',
+      resetting: '重置中…',
+      keyLabel: '密钥 {n}',
+      undoProvider: '提供商已移除',
+      undoKey: '密钥已移除',
+      undo: '撤销',
+      emptyTitle: '暂无密钥池',
+      emptyDesc: '添加提供商及至少一个 API 密钥名称以开始轮换。',
+      errorTitle: '无法加载设置',
+      retry: '重试',
+      chooseProvider: '请选择提供商',
+      readOnly: '当前设置为只读。',
+      settingsChanged: '设置服务已变更。请放弃当前草稿并重新加载后再保存。',
+      saveRefused: '宿主未接受此次保存。草稿已保留；放弃草稿可加载最新设置。',
+      saveUnconfirmed: '无法确认保存结果。草稿已保留，请重新加载后再试。',
+      unavailableTitle: '设置桥接不可用',
+      unavailableDesc: '宿主未暴露 dsh-key-rotation 设置命名空间。请重新打开设置或检查插件是否已启用。',
+      modalClose: '关闭对话框',
+      dialogLabel: '确认',
+      loadChartAria: '密钥流量分布',
+      bulkCooldownPlaceholder: '批量冷却时间 (毫秒)',
+      bulkApply: '应用到所选项',
+      bulkRemove: '删除所选项',
+      confirmBulkRemoveTitle: '删除 {n} 个提供商？',
+      confirmBulkRemoveDesc: '所选提供商及其所有密钥将从轮换中移除。操作后可立即撤销一次。',
+      selectProvider: '选择提供商 {p}',
+      activeBadge: '活跃',
+      healthScoreTitle: '健康评分',
+      totalRequestsTitle: '总请求数',
+      exportProvider: '导出此提供商',
+      recentFailures: '近期故障 ({n})',
+      noActivePools: '无活跃密钥池',
+      headerPoolsTitle: '密钥轮换池',
+      pausedBudget: '已暂停',
+      sortUsage: '按使用量排序',
+      testingAllProgress: '正在测试 {n}/{total}…',
+      liveEventStream: '实时事件流',
+      liveEventStreamEmpty: '暂无轮换事件记录',
+      eventAt: '时间',
+      eventKey: '密钥',
+      eventReason: '原因',
+      eventCooldown: '冷却',
+      quotaResetIn: '{time} 后重置',
+      routingStrategyLabel: '路由策略',
+      routingStrategyRoundRobin: '轮询 (默认)',
+      routingStrategyLeastLoaded: '最低负载 (并发)',
+      routingStrategyLowestLatency: '最低延迟 (p95)',
+      routingStrategySticky: '粘性模式 (优先保持提示词缓存)',
+      proactiveGuardLabel: '前瞻性限流防护',
+      proactiveGuardHint: '当响应中的剩余配额或 Retry-After 头提示即将超限时，预先冷却密钥以防触发 429',
+      showChatHeaderChipLabel: '聊天头部状态按钮',
+      showChatHeaderChipDesc: '在会话界面顶部工具栏显示密钥池状态按钮',
+      selfHealingLabel: '自愈检查间隔 (分钟)',
+      selfHealingHint: '定期轻量探测以自动恢复损坏密钥 (0 为禁用)',
+      updateCheck: '检查更新',
+      updateAvailable: '有可用更新',
+      updateNone: '插件已是最新版本',
+      updateRun: '立即更新',
+      updateRestart: '更新已安装。请重启 DSH 以加载新版本。',
+      updateRunning: '更新中…',
+      updateFailed: '更新失败',
+      currentVersion: '当前版本',
+      latestVersion: '最新版本',
+      testAllKeys: '批量测试所有密钥',
+      testingMatrix: '正在测试密钥…',
+      matrixModalTitle: '⚡ 密钥测试矩阵',
+      matrixModalDesc: '并行探测所有提供商密钥池中配置的凭据。',
+      matrixSummary: '{healthy}/{total} 个密钥正常可用',
+      matrixLatency: '延迟',
+      matrixStatus: '状态',
+      matrixClose: '关闭',
+      discoverBannerTitle: '⚡ 发现未分配的 API 密钥',
+      discoverBannerDesc: '在当前环境 (~/.dsh/.credentials.yaml / env) 中发现 {n} 个未分配给轮换池的密钥。',
+      autoImportBtn: '一键自动导入',
+      autoImportSuccess: '成功导入 {n} 个密钥到轮换池',
+      autoImporting: '正在导入…',
+      quickSkip: '跳过',
+      quickSkipTitle: '跳过并轮换到池中下一个密钥',
+      quickReset: '重置',
+      quickResetTitle: '重置当前提供商的冷却时间与断路器',
+      quickPause: '暂停',
+      quickPauseTitle: '暂停或恢复当前正在使用的密钥',
+      exportConfig: '导出密钥池',
+      importConfig: '导入密钥池',
+      exportSafe: '脱敏导出 (安全分享)',
+      exportFull: '完整备份 (包含密钥)',
+      exportWithPassphrase: '使用密码加密导出',
+      importMode: '导入模式',
+      importMerge: '与现有密钥池合并',
+      importReplace: '覆盖现有全部密钥池配置',
+      importPreview: '预览差异',
+      importApply: '应用配置',
+      importSuccess: '配置已成功导入并生效',
+      exportSuccess: '配置导出成功',
+      passphraseLabel: '加密密码 (可选)',
+      passphrasePlaceholder: '输入用于加密/解密的主密码',
+      jsonConfigPlaceholder: '在此粘贴 JSON 配置或选择文件...',
+      previewSummary: '差异: 新增 {created} 个提供商, 更新 {updated} 个提供商, 包含 {keys} 个密钥 (新增 {added} 个)。',
+      promptCacheTitle: 'Prompt 缓存节省',
+      promptCacheDesc: '会话间前缀缓存命中 Token 及预估节省成本。',
+      promptCacheHitRatio: '缓存命中率',
+      promptCacheSaved: '已节省',
+      analytics24hTitle: '24小时池健康度与负载分布',
+      healthIndex: '健康指数',
+      cleanRequests: '无重试',
+      errorBreakdown: '24小时错误',
+      avgRecovery: '平均恢复',
+    };
+
+    // Codes worth switching on. Host list is DEFAULT_SWITCH_CODES; config may
+    // add extras — those render as separate checked boxes so a custom rule is
+    // not dropped on first save.
+    const KNOWN_CODES = ['QUOTA', 'RATE_LIMIT', 'SERVER', 'TIMEOUT', 'TRANSPORT', 'EMPTY_RESPONSE', 'UNKNOWN_MODEL', 'AUTH'];
+
+    // (issue 273): keep the settings list item mounted if the section throws.
+        const bestEffort = (label, fn) => {
+          try { return fn(); } catch (err) {
+            try { console.debug('[dsh-key-rotation] best-effort ' + label, err); } catch { /* console unavailable */ }
+            return undefined;
+          }
+        };
+    class KeyRotationErrorBoundary extends React.Component {
+      constructor(props) {
+        super(props);
+        this.state = { error: null };
+      }
+      static getDerivedStateFromError(error) {
+        return { error };
+      }
+      componentDidCatch(error, info) {
+        bestEffort('error-boundary.log', () => { console.error('[dsh-key-rotation] settings card crashed', error, info); });
+      }
+      render() {
+        if (this.state.error) {
+          return React.createElement('div', { className: 'krot krot-err', style: { padding: 12 } },
+            React.createElement('p', null, 'Key Rotation settings failed to render.'),
+            React.createElement('p', { style: { fontSize: 11, opacity: 0.8 } }, String(this.state.error?.message || this.state.error)),
+            React.createElement('button', {
+              type: 'button',
+              className: 'krot-btn',
+              onClick: () => this.setState({ error: null }),
+            }, 'Retry'));
+        }
+        return this.props.children;
+      }
+    }
+