@jedylicong/dsh-xinlab 0.0.0-stage → 0.2.2

package/data/zai.json

@@ -0,0 +1,47 @@
+{
+  "displayName": "Z.ai",
+  "apiKeyEnv": "ZAI_API_KEY",
+  "api": "openai-completions",
+  "baseURL": "https://api.z.ai/api/coding/paas/v4",
+  "compat": {
+    "supportsStore": false,
+    "supportsDeveloperRole": false,
+    "supportsReasoningEffort": true,
+    "maxTokensField": "max_tokens",
+    "thinkingFormat": "zai"
+  },
+  "defaultContextWindow": 1000000,
+  "defaultMaxTokens": 131072,
+  "reasoning": "max",
+  "models": [
+    {
+      "id": "glm-5.3",
+      "name": "GLM-5.3",
+      "input": [
+        "text"
+      ],
+      "reasoningEfforts": {
+        "low": "low",
+        "high": "high",
+        "max": "max"
+      }
+    },
+    {
+      "id": "glm-5.3-flash",
+      "name": "GLM-5.3-Flash",
+      "input": [
+        "text",
+        "image"
+      ],
+      "reasoningEfforts": {
+        "low": "low",
+        "high": "high",
+        "max": "max"
+      }
+    },
+    {
+      "id": "glm-5.2",
+      "name": "GLM-5.2"
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,75 @@
 {
   "name": "@jedylicong/dsh-xinlab",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.2",
+  "description": "XinLab 托管供应商配置：Z.ai、XinLab、vLLM 与 vLLM 请求扩展",
+  "private": false,
+  "license": "MIT",
+  "author": "jedylicong",
+  "type": "module",
+  "main": "./src/runtime.mjs",
+  "engines": {
+    "node": ">=22"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-api-remotes"
+      ],
+      "platform": "web"
+    }
+  },
+  "exports": {
+    ".": "./src/runtime.mjs",
+    "./client": "./client.js",
+    "./catalog": "./src/catalog.mjs",
+    "./vllm-mm-uuid": "./src/vllm-mm-uuid.mjs",
+    "./vllm-reasoning-only-retry": "./vendor/vllm-reasoning-only-retry.mjs",
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "dsh-providers": "./bin/dsh-providers.mjs"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "data/",
+    "vendor/",
+    "client.js",
+    "cordis.patch.yml",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "yaml": "2.9.1"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.5",
+    "@deepseek-ai/schemastery": "^3.18.5",
+    "@deepseek-ai/dsh-llm": "^0.2.1-rc.3 || ^0.2.2-0",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.2.1-rc.3 || ^0.2.2-0",
+    "@deepseek-ai/dsh-typert-protocol": "^0.2.1-rc.3 || ^0.2.2-0"
+  },
+  "scripts": {
+    "build": "node scripts/sync-managed-assets.mjs --write && node scripts/build-bundle.mjs --write && node scripts/build-client.mjs --write",
+    "check": "node scripts/sync-managed-assets.mjs --check && node scripts/build-bundle.mjs --check && node scripts/build-client.mjs --check",
+    "test": "node --test --test-concurrency=1 tests/*.test.mjs",
+    "prepack": "node scripts/release.mjs check",
+    "prepublishOnly": "node scripts/release.mjs block-direct-publish",
+    "release:check": "node scripts/release.mjs check",
+    "release:version": "node scripts/release.mjs version",
+    "release:prepare": "node scripts/release.mjs prepare",
+    "release:tag": "node scripts/release.mjs tag",
+    "release:publish": "node scripts/release.mjs publish",
+    "release:verify": "node scripts/release.mjs verify"
+  }
+}

package/src/catalog.mjs

@@ -0,0 +1,50 @@
+import { readFileSync } from 'node:fs'
+
+export const MANAGED_PROVIDERS = Object.freeze(['zai', 'vllm', 'xin-lab'])
+export const ENDPOINT_ENV = Object.freeze({
+  zai: 'DSH_ZAI_BASE_URL',
+  vllm: 'DSH_VLLM_BASE_URL',
+  'xin-lab': 'DSH_XINLAB_BASE_URL',
+})
+
+export function readCatalog() {
+  const catalog = Object.fromEntries(MANAGED_PROVIDERS.map((id) => [
+    id, JSON.parse(readFileSync(new URL(`../data/${id}.json`, import.meta.url), 'utf8')),
+  ]))
+  rejectEmbeddedCredentials(catalog)
+  return catalog
+}
+
+export function rejectEmbeddedCredentials(value) {
+  if (!value || typeof value !== 'object') return
+  for (const [key, child] of Object.entries(value)) {
+    if (/^(?:apiKey|authorization|access_token|refresh_token|password|secret|token|privateKey)$/i.test(key)) {
+      throw new Error('供应商目录不能包含实际凭据，只能使用 apiKeyEnv 引用')
+    }
+    if (key === 'apiKeyEnv' && (typeof child !== 'string' || !/^[A-Z][A-Z0-9_]*$/.test(child))) {
+      throw new Error('apiKeyEnv 必须为凭据引用名称')
+    }
+    rejectEmbeddedCredentials(child)
+  }
+}
+
+export function normalizeBaseURL(value) {
+  const url = new URL(value)
+  if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash) {
+    throw new Error('供应商地址须为不含凭据、查询参数和片段的 HTTP(S) 地址')
+  }
+  return url.href.replace(/\/+$/, '')
+}
+
+export function buildProviders(env = {}) {
+  const providers = readCatalog()
+  for (const id of MANAGED_PROVIDERS) {
+    const override = env[ENDPOINT_ENV[id]]
+    providers[id].baseURL = normalizeBaseURL(override ?? providers[id].baseURL)
+  }
+  return providers
+}
+
+export function chatCompletionsURL(baseURL) {
+  return `${normalizeBaseURL(baseURL)}/chat/completions`
+}

package/src/client-page.mjs

@@ -0,0 +1,191 @@
+// This factory is embedded in the browser artifact without a Node dependency.
+// Only transient password inputs and the credentials RPC ever receive key values.
+export function createClientPlugin(React, catalog, settingsId, keyRef, previewDescriptor, packageName) {
+  const { createElement: h, useEffect, useState, useSyncExternalStore } = React
+  const protocols = {
+    'openai-completions': 'OpenAI Chat Completions',
+    'openai-responses': 'OpenAI Responses',
+    'anthropic-messages': 'Anthropic Messages',
+  }
+  const models = catalog.flatMap((provider) => provider.models.map((model) => ({
+    ...model, provider: provider.id, defaultApi: provider.api, ref: keyRef(provider.id, model.id),
+  })))
+
+  class Controller {
+    constructor(ctx) {
+      this.ctx = ctx
+      this.scope = ctx.configForms.get(settingsId)
+      this.listeners = new Set()
+      this.credentials = {}
+      this.notice = {}
+      this.busy = new Set()
+      this.sequence = 0
+      this.disposed = false
+      this.refreshState()
+      this.unsubscribe = this.scope.subscribe(() => this.refreshState())
+    }
+    subscribe = (listener) => { this.listeners.add(listener); return () => this.listeners.delete(listener) }
+    getSnapshot = () => this.state
+    refreshState() {
+      if (this.disposed) return
+      this.state = { form: this.scope.getSnapshot(), credentials: { ...this.credentials }, notice: { ...this.notice }, busy: new Set(this.busy) }
+      for (const listener of this.listeners) listener()
+    }
+    async refreshCredentials() {
+      const sequence = ++this.sequence
+      const next = {}
+      try {
+        for (let start = 0; start < models.length; start += 64) {
+          const refs = models.slice(start, start + 64).map((model) => model.ref)
+          const result = await this.ctx.remote.xinlabModelKeys.describe(refs)
+          if (!result.ok) throw new Error()
+          for (const ref of refs) next[ref] = { configured: result.value[ref]?.configured === true, writable: result.value[ref]?.writable === true, hint: result.value[ref]?.hint }
+        }
+      } catch {
+        // Failed reads never pretend the key is absent or writable.
+        if (!this.disposed && sequence === this.sequence) {
+          this.credentials = {}
+          this.refreshState()
+        }
+        return false
+      }
+      if (this.disposed) return false
+      if (sequence === this.sequence) { this.credentials = next; this.refreshState() }
+      // A write's readback remains valid even if a pushed credential event
+      // started a newer refresh. Only publication is latest-read-wins.
+      return next
+    }
+    async action(id, work, success) {
+      if (this.disposed || this.busy.has(id)) return false
+      this.busy.add(id)
+      delete this.notice[id]
+      this.refreshState()
+      let ok = false
+      try {
+        ok = await work()
+        this.notice[id] = ok ? success : '保存未完成，请刷新状态后重试。'
+      } catch {
+        // RPC/provider errors may contain submitted data. Never render or log them.
+        this.notice[id] = '保存失败，请检查连接和写入权限后重试。'
+      } finally {
+        this.busy.delete(id)
+        this.refreshState()
+      }
+      return ok
+    }
+    saveKey(model, value) {
+      const id = model.ref + ':key'
+      if (!value.trim() || /[^\x21-\x7E]/.test(value.trim())) {
+        this.notice[id] = '请输入有效的 API Key，不能包含空白、换行或非 ASCII 字符。'
+        this.refreshState()
+        return Promise.resolve(false)
+      }
+      if (!this.credentials[model.ref]?.writable) return Promise.resolve(false)
+      return this.action(id, async () => {
+        const result = await this.ctx.remote.credentials.set(model.ref, value.trim())
+        if (!result.ok) return false
+        const readback = await this.refreshCredentials()
+        return readback && readback[model.ref]?.configured === true
+      }, '独立密钥已安全保存。')
+    }
+    clearKey(model) {
+      if (!this.credentials[model.ref]?.writable) return Promise.resolve(false)
+      return this.action(model.ref + ':key', async () => {
+        const result = await this.ctx.remote.credentials.unset(model.ref)
+        if (!result.ok) return false
+        const readback = await this.refreshCredentials()
+        return readback && readback[model.ref]?.configured === false
+      }, '独立密钥已移除，恢复使用供应商凭据。')
+    }
+    saveProtocol(model, api, revision) {
+      if (api !== '' && !Object.hasOwn(protocols, api)) return Promise.resolve(false)
+      if (!this.scope.getSnapshot().writable || revision === undefined) return Promise.resolve(false)
+      const path = ['protocols', model.provider, model.id]
+      return this.action(model.ref + ':protocol', () => this.scope.mutate([
+        api === '' ? { op: 'unset', path } : { op: 'set', path, value: api },
+      ], revision), '协议已保存，将用于下一次模型调用。')
+    }
+    dispose() {
+      this.disposed = true
+      this.sequence++
+      this.unsubscribe()
+      this.listeners.clear()
+      this.credentials = {}
+      this.notice = {}
+    }
+  }
+
+  const inputStyle = { border: '1px solid var(--border, #8886)', borderRadius: 6, padding: '7px 9px', background: 'transparent', color: 'inherit', minWidth: 0, width: '100%', boxSizing: 'border-box' }
+  const buttonStyle = { ...inputStyle, width: 'auto', cursor: 'pointer', marginTop: 8, marginRight: 8 }
+  function ModelRow({ model, controller, state }) {
+    const accepted = state.form.value?.protocols?.[model.provider]?.[model.id] ?? ''
+    const [api, setApi] = useState(accepted)
+    const [revision, setRevision] = useState(state.form.revision)
+    const [dirty, setDirty] = useState(false)
+    const [key, setKey] = useState('')
+    useEffect(() => {
+      if (!dirty) { setApi(accepted); setRevision(state.form.revision) }
+    }, [accepted, state.form.revision, dirty])
+    const status = state.credentials[model.ref]
+    const keyBusy = state.busy.has(model.ref + ':key')
+    const protocolBusy = state.busy.has(model.ref + ':protocol')
+    const keyId = model.ref + '-input'
+    const apiId = model.ref + '-protocol'
+    return h('section', { style: { borderTop: '1px solid var(--border, #8884)', padding: '16px 0' } },
+      h('div', { style: { fontWeight: 600, marginBottom: 12 } }, model.name || model.id),
+      model.name && model.name !== model.id ? h('div', { style: { opacity: 0.65, fontSize: 12, marginBottom: 10 } }, model.id) : null,
+      h('label', { htmlFor: keyId }, 'API Key'),
+      h('input', { id: keyId, type: 'password', autoComplete: 'new-password', spellCheck: false, value: key,
+        disabled: !status?.writable || keyBusy, style: { ...inputStyle, marginTop: 5 },
+        placeholder: status?.configured ? '已保存独立密钥；输入新值可替换' : '留空沿用供应商凭据',
+        onChange: (event) => setKey(event.target.value),
+      }),
+      h('div', { style: { fontSize: 12, opacity: 0.75, marginTop: 5 } }, status ? (status.configured ? '已配置独立密钥：' + (status.hint || '••••••••') : '未配置独立密钥，将沿用供应商凭据。') : '密钥状态尚未确认。'),
+      h('button', { type: 'button', style: buttonStyle, disabled: !status?.writable || !key.trim() || keyBusy,
+        onClick: () => { const submitted = key; setKey(''); void controller.saveKey(model, submitted) },
+      }, keyBusy ? '正在保存…' : '保存密钥'),
+      h('button', { type: 'button', style: buttonStyle, disabled: !status?.writable || !status.configured || keyBusy,
+        onClick: () => { setKey(''); void controller.clearKey(model) },
+      }, '清除独立密钥'),
+      h('div', { role: 'status', style: { fontSize: 12, marginTop: 6 } }, state.notice[model.ref + ':key'] ?? ''),
+      h('label', { htmlFor: apiId, style: { display: 'block', marginTop: 16 } }, '调用协议'),
+      h('select', { id: apiId, value: api, disabled: !state.form.writable || protocolBusy, style: { ...inputStyle, marginTop: 5 },
+        onChange: (event) => { if (!dirty) setRevision(state.form.revision); setDirty(true); setApi(event.target.value) },
+      }, h('option', { value: '' }, '沿用预设（' + (protocols[model.defaultApi] || model.defaultApi) + '）'),
+      ...Object.entries(protocols).map(([id, label]) => h('option', { key: id, value: id }, label))),
+      h('button', { type: 'button', style: buttonStyle, disabled: !state.form.writable || !dirty || protocolBusy,
+        onClick: async () => { if (await controller.saveProtocol(model, api, revision)) setDirty(false); else setRevision(controller.scope.getSnapshot().revision) },
+      }, protocolBusy ? '正在保存…' : '保存协议'),
+      h('div', { role: 'status', style: { fontSize: 12, marginTop: 6 } }, state.notice[model.ref + ':protocol'] ?? ''),
+    )
+  }
+  function Page({ controller }) {
+    const state = useSyncExternalStore(controller.subscribe, controller.getSnapshot, controller.getSnapshot)
+    if (state.form.status !== 'ready') return h('p', null, '正在读取供应商配置…')
+    return h('div', { style: { maxWidth: 720, padding: 16, overflowWrap: 'anywhere' } },
+      h('h2', { style: { marginTop: 0 } }, 'XinLab 模型配置'),
+      h('p', { style: { opacity: 0.75 } }, '为每个模型配置独立密钥和调用协议。密钥保存在当前节点的 DSH 凭据存储中。所选协议需由上游接口支持。'),
+      !state.form.writable ? h('p', { role: 'status' }, '当前连接不允许修改协议配置。') : null,
+      h('button', { type: 'button', style: buttonStyle, onClick: () => void controller.refreshCredentials() }, '刷新密钥状态'),
+      ...catalog.map((provider) => h('details', { key: provider.id, open: true, style: { marginTop: 16 } },
+        h('summary', { style: { cursor: 'pointer', fontWeight: 600 } }, provider.name),
+        ...models.filter((model) => model.provider === provider.id).map((model) => h(ModelRow, { key: model.ref, model, controller, state })),
+      )),
+    )
+  }
+  async function apply(ctx) {
+    const unmount = await ctx.remote.$mount({ package: packageName, descriptors: [previewDescriptor(packageName)] })
+    ctx.effect(() => unmount)
+    const controller = new Controller(ctx)
+    ctx.effect(() => () => controller.dispose())
+    ctx.effect(() => ctx.configForms.whileServed([settingsId], () => ctx.slots.inject('settings.section', () => ctx.slots.register({
+      name: 'settings.section', id: 'xinlab-models', order: 11, label: () => 'XinLab 模型配置', inject: () => ({ controller }),
+    }, Page))))
+    ctx.effect(() => ctx.remote.$on('credentials/reference-updated', (ref) => {
+      if (models.some((model) => model.ref === ref)) void controller.refreshCredentials()
+    }))
+    ctx.on('connection/reset', () => void controller.refreshCredentials())
+    void controller.refreshCredentials()
+  }
+  return { inject: ['slots', 'remote', 'remote.credentials', 'configForms'], apply, Controller, Page, ModelRow, models }
+}

package/src/inspect.mjs

@@ -0,0 +1,60 @@
+import { existsSync, readFileSync } from 'node:fs'
+import { join, resolve } from 'node:path'
+import { parseDocument } from 'yaml'
+import { MANAGED_PROVIDERS } from './catalog.mjs'
+
+// Treat !!js as inert data. Inspection must never execute profile expressions.
+export function parsePatch(text, file = 'patch') {
+  const doc = parseDocument(text, {
+    customTags: [{ tag: 'tag:yaml.org,2002:js', resolve: (value) => ({ expression: value }) }],
+  })
+  if (doc.errors.length) throw new Error(`无法解析 YAML：${file}`)
+  let value
+  try { value = doc.toJS({ maxAliasCount: 100 }) } catch { throw new Error(`无法安全读取 YAML：${file}`) }
+  if (!Array.isArray(value)) throw new Error(`DSH patch 必须为列表：${file}`)
+  return value
+}
+
+function* rows(list) {
+  if (!Array.isArray(list)) return
+  for (const row of list) {
+    if (!row || typeof row !== 'object') continue
+    yield row
+    yield* rows(row.insert)
+    if (row.group === true || row.name === 'cordis:group') yield* rows(row.config)
+  }
+}
+
+export function inspectHome(home, profile = 'web') {
+  if (!/^[a-zA-Z0-9_.-]+$/.test(profile) || profile === '.' || profile === '..') {
+    throw new Error('profile 名称不正确')
+  }
+  const root = resolve(home)
+  const directory = join(root, 'profiles', profile)
+  const findings = []
+  if (!existsSync(join(directory, 'package.json'))) findings.push({
+    code: 'PROFILE_MISSING', message: '指定 profile 尚未初始化', file: join(directory, 'package.json'),
+  })
+  for (const file of [join(directory, 'cordis.patch.yml'), join(root, 'cordis.patch.yml')]) {
+    if (!existsSync(file)) continue
+    const patches = parsePatch(readFileSync(file, 'utf8'), file)
+    for (const row of rows(patches)) {
+      if (row.id === 'llm-pi-ai' && (Object.hasOwn(row, 'config') || row.disabled === true)) {
+        const providers = row.config?.providers
+        const ids = providers && typeof providers === 'object' ? Object.keys(providers) : []
+        findings.push({
+          code: 'LOCAL_PROVIDER_OVERRIDE', file, entry: row.id,
+          managedProviders: ids.filter((id) => MANAGED_PROVIDERS.includes(id)),
+          otherProviders: ids.filter((id) => !MANAGED_PROVIDERS.includes(id)),
+          message: '本地覆盖会遮住组合包配置；迁移时须保留非托管供应商并移除旧覆盖',
+        })
+      }
+      const legacyName = typeof row.name === 'string' && /(?:^|\/)plugins\/vllm-(?:mm-uuid|reasoning-only-retry)\//.test(row.name)
+      if (row.disabled !== true && (['vllm-mm-uuid', 'vllm-reasoning-only-retry'].includes(row.id) || legacyName)) {
+        findings.push({ code: 'LEGACY_VLLM_PLUGIN', file, entry: row.id,
+          message: '旧 vLLM 扩展仍启用，迁移时须移除旧加载项，保留其 key 和 warm-uuids 文件' })
+      }
+    }
+  }
+  return { home: root, profile, readyForActivation: findings.length === 0, findings }
+}

package/src/key-preview-protocol.mjs

@@ -0,0 +1,28 @@
+// One self-contained descriptor shared by Host and browser. Strict parsers do
+// not require a compiler or a second schema runtime in the installed plugin.
+export function keyPreviewDescriptor(packageName) {
+  const refsCodec = {
+    mode: 'strict', typeSymbol: 'XinlabModelKeyRefs',
+    create: () => ({ parse(value) {
+      if (!Array.isArray(value) || value.length > 64 || value.some((ref) => typeof ref !== 'string' || !/^XINLAB_MODEL_[0-9A-F]+$/.test(ref))) throw new Error('无效的模型密钥提示请求。')
+      return value
+    } }),
+  }
+  const resultCodec = {
+    mode: 'strict', typeSymbol: 'XinlabModelKeyPreviews',
+    create: () => ({ parse(value) {
+      if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error('无效的密钥提示响应。')
+      const safe = {}
+      for (const [ref, info] of Object.entries(value)) {
+        if (!info || typeof info.configured !== 'boolean' || typeof info.writable !== 'boolean') throw new Error('无效的密钥状态。')
+        if (info.hint !== undefined && (typeof info.hint !== 'string' || !/^(?:[\x21-\x7E]{7})?•{8}$/.test(info.hint))) throw new Error('无效的脱敏提示。')
+        safe[ref] = { configured: info.configured, writable: info.writable, ...(info.hint === undefined ? {} : { hint: info.hint }) }
+      }
+      return safe
+    } }),
+  }
+  return {
+    id: packageName + '#xinlabModelKeys/describe', service: 'xinlabModelKeys', namespace: 'xinlabModelKeys', method: 'describe',
+    invocation: { kind: 'direct' }, parameters: [{ name: 'refs', wire: 'refs', source: 'json', codec: refsCodec }], result: resultCodec,
+  }
+}

package/src/key-preview.mjs

@@ -0,0 +1,37 @@
+import { TypertRemoteService, RemoteError, principalOf } from '@deepseek-ai/dsh-typert-protocol'
+import { modelKeyRef } from './model-settings.mjs'
+import { keyPreviewDescriptor } from './key-preview-protocol.mjs'
+
+export function maskedKey(value) {
+  const key = value.trim()
+  // Never expose the whole value, even for short test/local-server keys.
+  return key.length > 14 && /^[\x21-\x7E]+$/.test(key) ? key.slice(0, 7) + '••••••••' : '••••••••'
+}
+
+export class ModelKeyPreviews extends TypertRemoteService {
+  constructor(ctx, providers) {
+    super(ctx, 'xinlabModelKeys')
+    this.allowed = new Set(Object.entries(providers).flatMap(([provider, profile]) => (profile.models ?? []).map((model) => modelKeyRef(provider, model.id))))
+  }
+  async describe(refs) {
+    // Gateway authentication and its global-resource ACL remain authoritative;
+    // even an explicitly admitted non-owner must not receive key fragments.
+    if (principalOf(this.ctx.invocation) !== undefined) throw new RemoteError('gateway/bad-request', '只有节点所有者可以查看密钥提示。', {})
+    const parse = keyPreviewDescriptor('').parameters[0].codec.create()
+    try { parse.parse(refs) } catch { throw new RemoteError('gateway/bad-request', '无效的模型密钥提示请求。', {}) }
+    if (refs.some((ref) => !this.allowed.has(ref))) throw new RemoteError('gateway/bad-request', '不能查看其他凭据的提示。', {})
+    const credentials = this.ctx.get('credentials')
+    const result = {}
+    try {
+      for (const ref of refs) {
+        const info = await credentials.describe(ref)
+        const hit = info.configured ? await credentials.resolve(ref) : undefined
+        result[ref] = { configured: Boolean(hit?.value), writable: info.writable === true, ...(hit?.value ? { hint: maskedKey(hit.value) } : {}) }
+      }
+    } catch {
+      // Never let a provider's raw exception echo a credential through RPC.
+      throw new RemoteError('gateway/internal', '暂时无法读取密钥状态。', {})
+    }
+    return result
+  }
+}

package/src/model-settings.mjs

@@ -0,0 +1,37 @@
+// Shared wire vocabulary. Key references depend on identity, never catalog order.
+export const SETTINGS_ID = 'xinlab-providers'
+export const PROTOCOLS = Object.freeze(['openai-completions', 'openai-responses', 'anthropic-messages'])
+
+export function modelKeyRef(provider, model) {
+  const bytes = new TextEncoder().encode(JSON.stringify([provider, model]))
+  return 'XINLAB_MODEL_' + Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('').toUpperCase()
+}
+
+export function modelProfile(provider, model, protocol) {
+  const profile = structuredClone(provider)
+  const entry = profile.models?.find((item) => item.id === model)
+  if (!entry) throw new Error('未知模型，不能更改其配置。')
+  profile.models = [entry]
+  delete profile.modelOverrides
+  if (protocol && protocol !== profile.api) {
+    if (!PROTOCOLS.includes(protocol)) throw new Error('不支持的模型协议。')
+    profile.api = protocol
+    // Compatibility flags belong to a wire protocol; carrying Chat flags into
+    // Messages/Responses is rejected by the official adapter, or changes semantics.
+    delete profile.compat
+    delete entry.compat
+    // Anthropic's SDK appends /v1/messages; OpenAI-compatible bases include /v1.
+    if (protocol === 'anthropic-messages') profile.baseURL = profile.baseURL.replace(/\/v1\/?$/, '')
+  }
+  return profile
+}
+
+export function assertModelSettings(providers, protocols) {
+  for (const [provider, models] of Object.entries(protocols ?? {})) {
+    if (!Object.hasOwn(providers, provider)) throw new Error('不能配置未知供应商。')
+    for (const [model, protocol] of Object.entries(models ?? {})) {
+      if (!providers[provider].models?.some((item) => item.id === model)) throw new Error('不能配置未知模型。')
+      if (!PROTOCOLS.includes(protocol)) throw new Error('不支持的模型协议。')
+    }
+  }
+}

package/src/official-adapter.mjs

@@ -0,0 +1,52 @@
+import { Context } from '@deepseek-ai/cordis'
+import { Config, apply } from '@deepseek-ai/dsh-llm-pi-ai'
+
+// Compose the published official plugin against its public adapter-registration
+// seam. A private Context keeps its directory, authorization and Loader listeners
+// out of the public settings UI; no SDK implementation or private adapter state
+// is copied. Calls use the captured adapter directly, so llm/stream runs once.
+export function officialAdapter(host, providers, fallback) {
+  const scope = new Context()
+  let adapter
+  scope.provide('llm', {
+    registerAdapter(_routes, value) {
+      adapter = value
+      return Object.assign(() => {}, { replace() {} })
+    },
+    registerConfigurableProviders() { return Object.assign(() => {}, { replace() {} }) },
+    registerModelDiscovery() { return () => {} },
+  })
+  const credentials = {
+    async resolve(ref) {
+      const service = host.get('credentials')
+      const hit = await service?.resolve(ref)
+      if (hit?.value) return hit
+      if (fallback && ref === fallback.ref && fallback.baseRef) return service?.resolve(fallback.baseRef)
+      return undefined
+    },
+    readRecord: (...args) => host.get('credentials')?.readRecord(...args),
+    listRecords: (...args) => host.get('credentials')?.listRecords(...args) ?? [],
+  }
+  const view = scope.extend({
+    // A prepared call may outlive this composition after a protocol change or
+    // HMR. Keep its auth/attachment seam alive independently of the disposable
+    // private registry; never freeze secret values in the profile snapshot.
+    get(name) {
+      if (name === 'credentials') return credentials
+      if (['attachments', 'fs', 'launchEnvironment'].includes(name)) return host.get(name)
+      return scope.get(name)
+    },
+    waterfall(name, ...args) {
+      if (name === 'llm-pi-ai/request-headers') return host.waterfall(name, ...args)
+      return scope.waterfall(name, ...args)
+    },
+  })
+  try {
+    apply(view, Config({ providers }))
+    if (!adapter) throw new Error('供应商配置未注册模型适配器。')
+    return { adapter, dispose: () => scope.fiber.dispose() }
+  } catch (error) {
+    scope.fiber.dispose()
+    throw error
+  }
+}