@mangoc/dsh-sub2api-sync 0.0.0-stage → 0.1.0

package/lib/client.js

@@ -0,0 +1,2425 @@
+window.__ModuleLoader__.load({
+	id: "@mangoc/dsh-sub2api-sync",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+"use strict";
+//#region rolldown:runtime
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+
+//#endregion
+const react = __toESM(require("react"));
+const __deepseek_ai_dsh_client_ui_primitives = __toESM(require("@deepseek-ai/dsh-client-ui-primitives"));
+const react_jsx_runtime = __toESM(require("react/jsx-runtime"));
+
+//#region src/client/constants.ts
+const PKG_NAME = "@mangoc/dsh-sub2api-sync";
+
+//#endregion
+//#region src/client/locales.ts
+const NS = "sub2api-sync";
+const zh = {
+	nav: "Sub2API 同步",
+	localOnlyWarning: "当前页面进程本地，配置仅本页生效",
+	configUnavailable: "配置暂不可用：宿主未连接或未暴露该设置条目",
+	nameLine: "sub2api · {instance}",
+	nameLineSite: "{name} · {instance}",
+	balanceLabel: "余额 {amount}",
+	balanceTitle: "面板账号余额（同步结束自动刷新）",
+	signedOut: "未登录",
+	signedInAs: "已登录：{email}",
+	signIn: "登录",
+	signOut: "登出",
+	signOutDone: "已登出",
+	baseURLLabel: "实例地址",
+	baseURLPlaceholder: "https://api.example.com（可带 /v1）",
+	save: "保存",
+	savedNotice: "已保存",
+	writeRefused: "写入未被接受，已恢复为最新状态",
+	accountTitle: "面板账号",
+	accountSignedOutHint: "登录后可发现分组、勾选同步，自动为每个分组准备 key",
+	signInTitle: "登录 sub2api 面板",
+	channelLabel: "登录方式",
+	channelPassword: "密码登录",
+	channelOAuth: "网页授权",
+	oauthStart: "在浏览器中授权",
+	oauthReadyHint: "该站点支持网页授权登录——点击「在浏览器中授权」跳转完成登录，完成后这里会自动继续。",
+	oauthPendingTitle: "等待浏览器授权…",
+	oauthPendingHint: "已在新标签页打开 sub2api 授权页——完成授权后这里会自动继续；若浏览器未打开，请检查弹窗拦截后重试。",
+	oauthOpenAgain: "重新打开授权页",
+	oauthFailed: "网页授权失败：{message}",
+	signedInOAuth: "已通过网页授权登录",
+	signedInOAuthAccount: "{account} · 已通过网页授权登录",
+	emailPlaceholder: "you@example.com",
+	passwordLabel: "密码",
+	passwordHint: "留空则使用宿主已保存的密码重新登录",
+	twoFactorPlaceholder: "6 位数字验证码",
+	twoFactorSubmit: "验证",
+	back: "返回",
+	cancel: "取消",
+	close: "关闭",
+	signedInNotice: "登录成功",
+	groupsRefresh: "刷新",
+	groupTypeTitle: "分组类型：{type} · 同步协议 {protocol}",
+	syncTitle: "同步",
+	syncNow: "立即同步",
+	syncing: "同步中…",
+	syncDone: "同步完成",
+	reportEmpty: "还没有同步过",
+	reportMeta: "写入 {writes} 项 · {attempts} 次尝试",
+	entryModels: "{name} · {count} 个模型",
+	entryError: "{name} · {error}",
+	entryRemove: "移除",
+	entryRemoveDone: "已移除 {name} 的同步",
+	reportRemoved: "已移除：{routes}",
+	reportWarningLine: "警告：{message}",
+	routesSummary: "已注册 {count} 条路由",
+	actionCreated: "新建",
+	actionUpdated: "更新",
+	actionUnchanged: "无变化",
+	actionFailed: "失败",
+	actionFailedLabel: "操作失败：{message}",
+	bundleTemplateLabel: "供应商名模板",
+	bundleTemplateHint: "displayName 模板，必须包含 {keyName} 占位符",
+	bundleTemplateInvalid: "模板必须包含 {keyName} 占位符",
+	bundleKeyQuotaLabel: "新建 key 配额（USD）",
+	bundleKeyQuotaHint: "自动建 key 时应用；留空不设置",
+	bundleKeyExpiresLabel: "新建 key 有效期（天）",
+	bundleKeyExpiresHint: "自动建 key 时应用；留空不过期",
+	bundleIntervalLabel: "自动同步间隔（毫秒）",
+	bundleIntervalHint: "至少 60000；留空关闭自动同步",
+	bundleIntervalInvalid: "间隔不能小于 60000",
+	bundleNumberInvalid: "请输入合法数字",
+	bundleDeleteOrphanLabel: "移除分组时吊销远端 key",
+	bundleDeleteOrphanHint: "仅对记录过 keyId 的分组生效",
+	bundleEnrichLabel: "补全模型元数据",
+	bundleEnrichHint: "同步时按模型 id 从 models.dev 补全容量元数据；关闭则仅用内置快照（离线）",
+	bundleAllowRemoteLabel: "允许私网设备调用动作接口",
+	bundleAllowRemoteWarning: "开启后同源或私网页面可改写模型路由与凭据——仅在可信内网开启",
+	bundleAdvancedHint: "protocolOverrides / compatTemplate 高级字段请编辑 cordis.patch.yml",
+	badgeManagedTag: "Sub2API 同步",
+	badgeManageHint: "管理入口：设置 → Sub2API 同步",
+	badgeModels: "{count} 个模型",
+	footerSyncedCount: "已同步 {count} 个分组",
+	footerSignedOut: "未连接面板",
+	footerNeverSynced: "尚未同步",
+	footerJustNow: "刚刚",
+	footerMinutesAgo: "{count} 分钟前",
+	detailBadgeSynced: "已同步 {count} 组",
+	detailBadgeSignedOut: "未连接面板",
+	detailSectionTitle: "最近同步",
+	detailSectionEmpty: "还没有同步过——在设置 → Sub2API 同步 完成首次同步",
+	activationTitle: "开始使用 Sub2API 同步",
+	activationStep1: "1. 在设置中连接面板（账号密码或网页授权）",
+	activationStep2: "2. 勾选要同步的分组（key 自动准备）",
+	activationStep3: "3. 点击「立即同步」，模型即可使用",
+	activationOpenConfig: "打开配置页",
+	activationDismiss: "知道了",
+	keysTitle: "Keys",
+	createKey: "创建 key",
+	keyGroupLabel: "所属分组",
+	keyNameLabel: "Key 名称",
+	keyNameHint: "默认与分组同名",
+	keyGroupPlaceholder: "选择分组",
+	keyCreated: "已创建并绑定：{name}",
+	keysListEmpty: "还没有 key",
+	keysListLoading: "正在读取 keys…",
+	syncSelected: "同步所选（{count}）",
+	syncSelectedDone: "同步完成：{ok}/{total} 条成功",
+	keysLoadMore: "加载更多（还有 {count} 个）"
+};
+const en = {
+	nav: "Sub2API Sync",
+	localOnlyWarning: "This page runs process-local; configuration applies to this page only",
+	configUnavailable: "Configuration is unavailable: the host is not connected or does not expose this entry",
+	nameLine: "sub2api · {instance}",
+	nameLineSite: "{name} · {instance}",
+	balanceLabel: "Balance {amount}",
+	balanceTitle: "Panel account balance (refreshed after each sync)",
+	signedOut: "Signed out",
+	signedInAs: "Signed in as {email}",
+	signIn: "Sign in",
+	signOut: "Sign out",
+	signOutDone: "Signed out",
+	baseURLLabel: "Instance address",
+	baseURLPlaceholder: "https://api.example.com (optionally with /v1)",
+	save: "Save",
+	savedNotice: "Saved",
+	writeRefused: "The write was not accepted; the latest state was restored",
+	accountTitle: "Panel account",
+	accountSignedOutHint: "Sign in to discover groups, pick the ones to sync, and let each group get its key prepared",
+	signInTitle: "Sign in to the sub2api panel",
+	channelLabel: "Sign-in channel",
+	channelPassword: "Password",
+	channelOAuth: "Web authorization",
+	oauthStart: "Authorize in browser",
+	oauthReadyHint: "This site supports web authorization — click \"Authorize in browser\" to sign in; this dialog continues automatically once done.",
+	oauthPendingTitle: "Waiting for browser authorization…",
+	oauthPendingHint: "The sub2api authorization page opened in a new tab — this dialog continues automatically. If no tab opened, check the pop-up blocker and retry.",
+	oauthOpenAgain: "Reopen the authorization page",
+	oauthFailed: "Web authorization failed: {message}",
+	signedInOAuth: "Signed in via web authorization",
+	signedInOAuthAccount: "{account} · Signed in via web authorization",
+	emailPlaceholder: "you@example.com",
+	passwordLabel: "Password",
+	passwordHint: "Leave empty to re-login with the password the host already stored",
+	twoFactorPlaceholder: "6-digit code",
+	twoFactorSubmit: "Verify",
+	back: "Back",
+	cancel: "Cancel",
+	close: "Close",
+	signedInNotice: "Signed in",
+	groupsRefresh: "Refresh",
+	groupTypeTitle: "Group type: {type} · syncs as {protocol}",
+	syncTitle: "Sync",
+	syncNow: "Sync now",
+	syncing: "Syncing…",
+	syncDone: "Sync finished",
+	reportEmpty: "Never synced",
+	reportMeta: "{writes} write(s) · {attempts} attempt(s)",
+	entryModels: "{name} · {count} model(s)",
+	entryError: "{name} · {error}",
+	entryRemove: "Remove",
+	entryRemoveDone: "Removed {name}",
+	reportRemoved: "Removed: {routes}",
+	reportWarningLine: "Warning: {message}",
+	routesSummary: "{count} route(s) registered",
+	actionCreated: "created",
+	actionUpdated: "updated",
+	actionUnchanged: "unchanged",
+	actionFailed: "failed",
+	actionFailedLabel: "Operation failed: {message}",
+	bundleTemplateLabel: "Provider name template",
+	bundleTemplateHint: "displayName template; must contain the {keyName} placeholder",
+	bundleTemplateInvalid: "The template must contain the {keyName} placeholder",
+	bundleKeyQuotaLabel: "Created key quota (USD)",
+	bundleKeyQuotaHint: "Applied to auto-created keys; empty leaves it unset",
+	bundleKeyExpiresLabel: "Created key expiry (days)",
+	bundleKeyExpiresHint: "Applied to auto-created keys; empty means no expiry",
+	bundleIntervalLabel: "Auto-sync interval (ms)",
+	bundleIntervalHint: "At least 60000; empty disables auto-sync",
+	bundleIntervalInvalid: "The interval must be at least 60000",
+	bundleNumberInvalid: "Enter a valid number",
+	bundleDeleteOrphanLabel: "Revoke the remote key when a group is removed",
+	bundleDeleteOrphanHint: "Only affects groups whose keyId was recorded",
+	bundleEnrichLabel: "Enrich model metadata",
+	bundleEnrichHint: "Fill per-model capacity facts from models.dev at sync; off = bundled snapshot only (offline)",
+	bundleAllowRemoteLabel: "Allow private-network devices to call action routes",
+	bundleAllowRemoteWarning: "When enabled, same-origin or private-network pages can rewrite model routes and credentials — enable only on a trusted network",
+	bundleAdvancedHint: "Edit cordis.patch.yml for the advanced protocolOverrides / compatTemplate fields",
+	badgeManagedTag: "Sub2API Sync",
+	badgeManageHint: "Manage in Settings → Sub2API Sync",
+	badgeModels: "{count} model(s)",
+	footerSyncedCount: "{count} group(s) synced",
+	footerSignedOut: "Panel not connected",
+	footerNeverSynced: "Never synced",
+	footerJustNow: "just now",
+	footerMinutesAgo: "{count} min ago",
+	detailBadgeSynced: "{count} group(s) synced",
+	detailBadgeSignedOut: "Panel not connected",
+	detailSectionTitle: "Last sync",
+	detailSectionEmpty: "Never synced — finish the first sync in Settings → Sub2API Sync",
+	activationTitle: "Get started with Sub2API Sync",
+	activationStep1: "1. Connect the panel in Settings (account password or web authorization)",
+	activationStep2: "2. Check the groups to sync (keys are prepared automatically)",
+	activationStep3: "3. Click \"Sync now\" and the models are ready",
+	activationOpenConfig: "Open configuration",
+	activationDismiss: "Got it",
+	keysTitle: "Keys",
+	createKey: "Create key",
+	keyGroupLabel: "Group",
+	keyNameLabel: "Key name",
+	keyNameHint: "Defaults to the group name",
+	keyGroupPlaceholder: "Pick a group",
+	keyCreated: "Created and bound: {name}",
+	keysListEmpty: "No keys yet",
+	keysListLoading: "Loading keys…",
+	syncSelected: "Sync selected ({count})",
+	syncSelectedDone: "Synced: {ok}/{total} succeeded",
+	keysLoadMore: "Load more ({count} left)"
+};
+const dictionaries = {
+	zh,
+	en
+};
+
+//#endregion
+//#region src/types.ts
+const PLATFORM_LABELS = {
+	anthropic: "Anthropic",
+	openai: "OpenAI",
+	gemini: "Gemini",
+	antigravity: "Antigravity",
+	grok: "Grok",
+	kimi: "Kimi",
+	zhipu: "Zhipu GLM",
+	deepseek: "DeepSeek",
+	composite: "Composite"
+};
+function platformLabel(platform) {
+	return PLATFORM_LABELS[platform] ?? platform;
+}
+const OWNED_ROUTE = /^(?:sub2api-[0-9a-f]{10}|sub2api-\d+)$/;
+function isOwnedRoute(route) {
+	return OWNED_ROUTE.test(route);
+}
+/** Round constants for SHA-256 (FIPS 180-4 §4.2.2). */
+const SHA256_K = new Uint32Array([
+	1116352408,
+	1899447441,
+	3049323471,
+	3921009573,
+	961987163,
+	1508970993,
+	2453635748,
+	2870763221,
+	3624381080,
+	310598401,
+	607225278,
+	1426881987,
+	1925078388,
+	2162078206,
+	2614888103,
+	3248222580,
+	3835390401,
+	4022224774,
+	264347078,
+	604807628,
+	770255983,
+	1249150122,
+	1555081692,
+	1996064986,
+	2554220882,
+	2821834349,
+	2952996808,
+	3210313671,
+	3336571891,
+	3584528711,
+	113926993,
+	338241895,
+	666307205,
+	773529912,
+	1294757372,
+	1396182291,
+	1695183700,
+	1986661051,
+	2177026350,
+	2456956037,
+	2730485921,
+	2820302411,
+	3259730800,
+	3345764771,
+	3516065817,
+	3600352804,
+	4094571909,
+	275423344,
+	430227734,
+	506948616,
+	659060556,
+	883997877,
+	958139571,
+	1322822218,
+	1537002063,
+	1747873779,
+	1955562222,
+	2024104815,
+	2227730452,
+	2361852424,
+	2428436474,
+	2756734187,
+	3204031479,
+	3329325298
+]);
+
+//#endregion
+//#region src/routes.ts
+const ROUTES = {
+	sync: "/plugins/dsh-sub2api-sync/sync",
+	status: "/plugins/dsh-sub2api-sync/status",
+	login: "/plugins/dsh-sub2api-sync/login",
+	login2fa: "/plugins/dsh-sub2api-sync/login/2fa",
+	logout: "/plugins/dsh-sub2api-sync/logout",
+	groups: "/plugins/dsh-sub2api-sync/groups",
+	keys: "/plugins/dsh-sub2api-sync/keys",
+	icon: "/plugins/dsh-sub2api-sync/icon",
+	site: "/plugins/dsh-sub2api-sync/site",
+	account: "/plugins/dsh-sub2api-sync/account",
+	resetSync: "/plugins/dsh-sub2api-sync/reset-sync",
+	removeKey: "/plugins/dsh-sub2api-sync/remove-key",
+	oauthStart: "/plugins/dsh-sub2api-sync/oauth/start",
+	oauthProbe: "/plugins/dsh-sub2api-sync/oauth/probe",
+	oauthCallback: "/plugins/dsh-sub2api-sync/oauth/callback",
+	oauthStatus: "/plugins/dsh-sub2api-sync/oauth/status",
+	oauthCancel: "/plugins/dsh-sub2api-sync/oauth/cancel"
+};
+
+//#endregion
+//#region src/client/usePluginApi.ts
+async function callJson(path, init) {
+	const response = await fetch(path, {
+		...init,
+		headers: {
+			accept: "application/json",
+			...init?.body !== undefined ? { "content-type": "application/json" } : {},
+			...init?.headers
+		}
+	});
+	let payload;
+	try {
+		payload = await response.json();
+	} catch {
+		throw new Error(`HTTP ${response.status}`);
+	}
+	if (!response.ok) {
+		const message = payload?.error;
+		throw new Error(typeof message === "string" && message.length > 0 ? message : `HTTP ${response.status}`);
+	}
+	return payload;
+}
+const post = (body) => ({
+	method: "POST",
+	...body !== undefined ? { body: JSON.stringify(body) } : {}
+});
+function createPluginApi() {
+	return {
+		status: () => callJson(ROUTES.status),
+		login: (email, password) => callJson(ROUTES.login, post({
+			email,
+			...password !== undefined && password.length > 0 ? { password } : {}
+		})),
+		login2fa: (code) => callJson(ROUTES.login2fa, post({ code })),
+		logout: () => callJson(ROUTES.logout, post()),
+		groups: () => callJson(ROUTES.groups),
+		listKeys: (page, pageSize) => callJson(`${ROUTES.keys}?page=${page}&pageSize=${pageSize}`),
+		createKey: (input) => callJson(ROUTES.keys, post(input)),
+		site: () => callJson(ROUTES.site),
+		account: () => callJson(ROUTES.account),
+		resetSyncState: (previousBaseURL) => callJson(ROUTES.resetSync, post(previousBaseURL !== undefined ? { previousBaseURL } : undefined)),
+		removeKey: (keyId) => callJson(ROUTES.removeKey, post({ keyId })),
+		sync: (keyIds) => callJson(ROUTES.sync, post(keyIds !== undefined ? { keyIds } : undefined)),
+		oauthStart: () => callJson(ROUTES.oauthStart, post()),
+		oauthProbe: (address) => callJson(`${ROUTES.oauthProbe}?address=${encodeURIComponent(address)}`),
+		oauthStatus: (attemptId) => callJson(attemptId !== undefined ? `${ROUTES.oauthStatus}?attempt=${encodeURIComponent(attemptId)}` : ROUTES.oauthStatus),
+		oauthCancel: (attemptId) => callJson(ROUTES.oauthCancel, post({ attemptId }))
+	};
+}
+
+//#endregion
+//#region src/client/status.ts
+const POLL_MS = 5e3;
+let snapshot;
+let timer;
+const listeners = new Set();
+function publish(next) {
+	if (next === snapshot) return;
+	snapshot = next;
+	for (const listener of listeners) listener();
+}
+/** One poll round; a failed round keeps the last good snapshot (transient). */
+async function poll() {
+	try {
+		publish(await callJson(ROUTES.status));
+	} catch {}
+}
+function subscribe(listener) {
+	listeners.add(listener);
+	if (listeners.size === 1) {
+		void poll();
+		timer = setInterval(() => {
+			void poll();
+		}, POLL_MS);
+	}
+	return () => {
+		listeners.delete(listener);
+		if (listeners.size === 0 && timer !== undefined) {
+			clearInterval(timer);
+			timer = undefined;
+		}
+	};
+}
+const statusSource = {
+	getSnapshot: () => snapshot,
+	subscribe
+};
+function useStatus() {
+	return (0, react.useSyncExternalStore)(subscribe, getSnapshot);
+}
+function getSnapshot() {
+	return snapshot;
+}
+async function refreshStatus() {
+	await poll();
+	return snapshot;
+}
+
+//#endregion
+//#region src/client/styles.ts
+/**
+* The plugin's one stylesheet, injected once as a `<style data-plugin>`
+* element. Values follow the ui-settings-account `AccountSection.module.css`
+* visual spec exactly (design note §4.4) — page root, cards, rows, identity
+* slots, dividers, and actions — so the card sits next to the official
+* Account section without visual drift. Class names carry the `s2s-` prefix
+* because the sheet is global, not module-scoped.
+*
+* @module sub2api-sync/client/styles
+*/
+const CSS = `
+.s2s-section {
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+  padding: 8px 0;
+  font-size: 13px;
+  line-height: 22px;
+  color: var(--dsw-alias-label-primary);
+}
+
+.s2s-card {
+  display: flex;
+  flex-direction: column;
+  padding: 12px 16px;
+  border: 0.5px solid var(--dsw-alias-settings-card-stroke);
+  border-radius: var(--dsw-radius-xl);
+  background: var(--dsw-alias-settings-card-fill);
+}
+
+.s2s-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  min-height: 40px;
+  padding: 6px 0;
+  box-sizing: border-box;
+}
+
+.s2s-identity {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  min-height: 44px;
+  min-width: 0;
+}
+
+.s2s-avatar {
+  flex: none;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 32px;
+  height: 32px;
+  border-radius: 50%;
+  color: var(--dsw-alias-label-tertiary);
+  background: var(--dsw-alias-bg-skeleton);
+}
+
+.s2s-avatar .s2s-favicon {
+  width: 18px;
+  height: 18px;
+  border-radius: 4px;
+  object-fit: contain;
+}
+
+.s2s-actions .s2s-feedback {
+  margin-right: 2px;
+  white-space: nowrap;
+}
+
+.s2s-identityCopy {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+}
+
+.s2s-name {
+  font-size: 14px;
+  font-weight: 500;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.s2s-secondary {
+  color: var(--dsw-alias-label-tertiary);
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.s2s-divider {
+  border-top: 0.5px solid var(--dsw-alias-border-l2);
+}
+
+.s2s-actions {
+  display: flex;
+  justify-content: flex-end;
+  align-items: center;
+  gap: 10px;
+  flex-wrap: wrap;
+  flex: none;
+}
+
+/* The account-balance pill in the identity header's action row. */
+.s2s-balance {
+  flex: none;
+  padding: 3px 10px;
+  border: 0.5px solid var(--dsw-alias-border-l2);
+  border-radius: 999px;
+  background: var(--dsw-alias-bg-secondary);
+  color: var(--dsw-alias-label-primary);
+  font-size: 12px;
+  font-variant-numeric: tabular-nums;
+  white-space: nowrap;
+}
+
+.s2s-warn {
+  margin: 0;
+  padding: 8px 12px;
+  border: 0.5px solid color-mix(in srgb, var(--dsw-alias-state-warn-primary) 35%, transparent);
+  border-radius: var(--dsw-radius-md);
+  color: var(--dsw-alias-state-warn-primary);
+  background: var(--dsw-alias-state-warn-tertiary);
+}
+
+.s2s-feedback {
+  margin: 0;
+  padding: 2px 0 6px;
+  overflow-wrap: anywhere;
+}
+
+.s2s-feedbackOk {
+  color: var(--dsw-alias-state-success-primary);
+}
+
+.s2s-feedbackError {
+  color: var(--dsw-alias-state-error-primary);
+}
+
+.s2s-column {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  min-width: 0;
+}
+
+.s2s-hint {
+  color: var(--dsw-alias-label-tertiary);
+}
+
+.s2s-inline {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  min-height: 40px;
+  padding: 6px 0;
+  box-sizing: border-box;
+}
+
+.s2s-keyRow {
+  display: grid;
+  /* Columns align across rows: name+checkbox / group / status / type. */
+  grid-template-columns: minmax(0, 1.6fr) minmax(0, 1fr) minmax(0, 0.8fr) minmax(0, 1fr);
+  align-items: center;
+  gap: 10px;
+  width: 100%;
+  min-height: 36px;
+  padding: 4px 10px;
+  box-sizing: border-box;
+  border: 0.5px solid var(--dsw-alias-border-l2);
+  border-radius: var(--dsw-radius-md);
+  background: transparent;
+  color: inherit;
+  font: inherit;
+  text-align: left;
+  cursor: pointer;
+  user-select: none;
+}
+
+.s2s-keyRow > :last-child {
+  justify-self: end;
+  text-align: right;
+}
+
+.s2s-keyRow:hover {
+  background: var(--dsw-alias-interactive-bg-hover);
+}
+
+.s2s-keyRow:focus-visible {
+  outline: var(--dsw-focus-ring-width) solid var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary));
+  outline-offset: 2px;
+}
+
+.s2s-keyRow[aria-pressed='true'] {
+  border-color: var(--dsw-alias-state-business-primary);
+}
+
+.s2s-reportLine {
+  display: flex;
+  align-items: baseline;
+  gap: 8px;
+  padding: 2px 0;
+  min-width: 0;
+}
+
+.s2s-reportRemove {
+  margin-left: auto;
+  flex: none;
+  align-self: center;
+}
+
+.s2s-reportMark {
+  flex: none;
+  font-weight: 500;
+}
+
+.s2s-reportMark[data-mark='ok']::before {
+  content: '\\2713';
+  color: var(--dsw-alias-state-success-primary);
+}
+
+.s2s-reportMark[data-mark='fail']::before {
+  content: '\\2717';
+  color: var(--dsw-alias-state-error-primary);
+}
+
+.s2s-reportText {
+  min-width: 0;
+  overflow-wrap: anywhere;
+}
+
+.s2s-reportError {
+  color: var(--dsw-alias-state-error-primary);
+}
+
+.s2s-fieldLabel {
+  color: var(--dsw-alias-label-primary);
+  flex: none;
+}
+
+.s2s-input {
+  min-width: 0;
+  flex: 1 1 220px;
+}
+
+/* Menu anchor wrapper: give the picker trigger the same field-column
+   footprint as the sibling Input rows. */
+.s2s-menuAnchor {
+  display: flex;
+  flex: 1 1 220px;
+  min-width: 0;
+}
+
+.s2s-menuAnchor > * {
+  width: 100%;
+}
+
+/* Select-style trigger (group picker): label left, chevron right. */
+.s2s-selectTrigger {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
+  width: 100%;
+}
+
+.s2s-selectChevron {
+  flex: none;
+  opacity: 0.55;
+}
+
+/* U2 placements: the provider-card badge, the Models-page footer strip, and
+   the Plugins-page activation steps. */
+.s2s-badgeRow {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 8px;
+  padding-top: 6px;
+}
+
+.s2s-badgeMeta {
+  color: var(--dsw-alias-label-secondary);
+  font-size: 12px;
+  line-height: 18px;
+}
+
+.s2s-badgeHint {
+  color: var(--dsw-alias-label-tertiary);
+  font-size: 12px;
+  line-height: 18px;
+}
+
+.s2s-footerStrip {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  min-height: 32px;
+  color: var(--dsw-alias-label-secondary);
+  font-size: 12px;
+  line-height: 18px;
+}
+
+.s2s-steps {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  margin: 0;
+  padding: 0;
+  list-style: none;
+  color: var(--dsw-alias-label-secondary);
+  font-size: 13px;
+  line-height: 22px;
+}
+`;
+function ensureCss() {
+	if (document.querySelector("style[data-plugin=\"dsh-sub2api-sync\"]") !== null) return;
+	const style = document.createElement("style");
+	style.dataset.plugin = "dsh-sub2api-sync";
+	style.textContent = CSS;
+	document.head.appendChild(style);
+}
+
+//#endregion
+//#region src/client/useConfigForm.ts
+function useConfigForm(form) {
+	const subscribe$1 = (0, react.useMemo)(() => form.subscribe.bind(form), [form]);
+	const getSnapshot$1 = (0, react.useMemo)(() => form.getSnapshot.bind(form), [form]);
+	return (0, react.useSyncExternalStore)(subscribe$1, getSnapshot$1);
+}
+function setField(form, field, value) {
+	return form.set(field, value);
+}
+function unsetField(form, field) {
+	return form.unset(field);
+}
+async function pruneInvalidSelection(config, report) {
+	const invalid = new Set(report.entries.filter((entry) => entry.invalid === true).map((entry) => entry.groupId));
+	if (invalid.size === 0) return false;
+	const current = config.getSnapshot().value?.selectedKeys ?? [];
+	const next = current.filter((id) => !invalid.has(id));
+	if (next.length === current.length) return false;
+	await setField(config, "selectedKeys", [...next].sort((a, b) => a - b));
+	return true;
+}
+async function dropSelectedKey(config, keyId) {
+	const current = config.getSnapshot().value?.selectedKeys ?? [];
+	if (!current.includes(keyId)) return false;
+	await setField(config, "selectedKeys", current.filter((id) => id !== keyId));
+	return true;
+}
+
+//#endregion
+//#region src/client/section/SignInDialog.tsx
+const OAUTH_POLL_MS = 2e3;
+function SignInDialog({ open, onClose, api, config, baseURL, writable, onSignedIn, t }) {
+	const [phase, setPhase] = (0, react.useState)("password");
+	const [channel, setChannel] = (0, react.useState)("password");
+	const [address, setAddress] = (0, react.useState)("");
+	const [email, setEmail] = (0, react.useState)("");
+	const [password, setPassword] = (0, react.useState)("");
+	const [code, setCode] = (0, react.useState)("");
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [error, setError] = (0, react.useState)(undefined);
+	const [authorizeUrl, setAuthorizeUrl] = (0, react.useState)(undefined);
+	const attemptRef = (0, react.useRef)(undefined);
+	const channelTouchedRef = (0, react.useRef)(false);
+	(0, react.useEffect)(() => {
+		if (open) {
+			setAddress(baseURL ?? "");
+			channelTouchedRef.current = false;
+			return;
+		}
+		setPhase("password");
+		setChannel("password");
+		setEmail("");
+		setPassword("");
+		setCode("");
+		setBusy(false);
+		setError(undefined);
+		setAuthorizeUrl(undefined);
+		attemptRef.current = undefined;
+	}, [open, baseURL]);
+	(0, react.useEffect)(() => {
+		if (!open) return;
+		const value = address.trim();
+		if (!/^https?:\/\//i.test(value)) return;
+		if (phase !== "password" && phase !== "oauth") return;
+		const timer$1 = setTimeout(() => {
+			void api.oauthProbe(value).then((answer) => {
+				if (channelTouchedRef.current) return;
+				const next = answer.supported ? "oauth" : "password";
+				setChannel(next);
+				setPhase((prev) => prev === "password" || prev === "oauth" ? next : prev);
+			}).catch(() => undefined);
+		}, 600);
+		return () => {
+			clearTimeout(timer$1);
+		};
+	}, [
+		address,
+		open,
+		phase
+	]);
+	(0, react.useEffect)(() => {
+		if (phase !== "oauth-pending") return;
+		let stopped = false;
+		const timer$1 = setInterval(() => {
+			const attemptId = attemptRef.current;
+			if (attemptId === undefined) return;
+			void api.oauthStatus(attemptId).then((status) => {
+				if (stopped) return;
+				if (status.auth.signedIn && status.auth.kind === "oauth") {
+					finish();
+					return;
+				}
+				const attempt = status.attempt;
+				if (attempt === undefined) {
+					stop();
+					setError(t("oauthFailed", { message: "expired" }));
+					setPhase("oauth");
+					return;
+				}
+				if (attempt.phase === "completed") {
+					finish();
+					return;
+				}
+				if (attempt.phase === "failed") {
+					stop();
+					setError(t("oauthFailed", { message: attempt.error ?? "unknown" }));
+					setPhase("oauth");
+				}
+			}).catch(() => undefined);
+		}, OAUTH_POLL_MS);
+		const stop = () => {
+			stopped = true;
+			clearInterval(timer$1);
+		};
+		return stop;
+	}, [phase]);
+	const pickChannel = (next) => {
+		channelTouchedRef.current = true;
+		setChannel(next);
+		setPhase(next);
+		setError(undefined);
+	};
+	const finish = () => {
+		onSignedIn();
+		onClose();
+	};
+	/** Commit the address draft before authenticating; aborts the flow on refusal. */
+	const commitAddress = async () => {
+		const value = address.trim();
+		if (value === (baseURL ?? "")) return;
+		const accepted = await (value.length === 0 ? unsetField(config, "baseURL") : setField(config, "baseURL", value));
+		if (!accepted) throw new Error(t("writeRefused"));
+	};
+	const run = async (action) => {
+		setBusy(true);
+		setError(undefined);
+		try {
+			await action();
+		} catch (cause) {
+			setError(cause instanceof Error ? cause.message : String(cause));
+		} finally {
+			setBusy(false);
+		}
+	};
+	const openAuthorizeTab = (url) => {
+		if (url === undefined) return;
+		window.open(url, "_blank", "noopener");
+	};
+	const submitPassword = () => {
+		void run(async () => {
+			await commitAddress();
+			const response = await api.login(email.trim(), password.length > 0 ? password : undefined);
+			if (response.kind === "2fa") {
+				setPhase("2fa");
+				return;
+			}
+			finish();
+		});
+	};
+	const submit2fa = () => {
+		void run(async () => {
+			await api.login2fa(code.trim());
+			finish();
+		});
+	};
+	const startOauth = () => {
+		void run(async () => {
+			await commitAddress();
+			const started = await api.oauthStart();
+			attemptRef.current = started.attemptId;
+			setAuthorizeUrl(started.authorizeUrl);
+			openAuthorizeTab(started.authorizeUrl);
+			setPhase("oauth-pending");
+		});
+	};
+	const cancelOauth = () => {
+		const attemptId = attemptRef.current;
+		attemptRef.current = undefined;
+		if (attemptId !== undefined) void api.oauthCancel(attemptId).catch(() => undefined);
+		setPhase("oauth");
+	};
+	const footer = (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-actions",
+		children: [
+			phase === "2fa" && (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+				variant: "outline",
+				disabled: busy,
+				onClick: () => pickChannel("password"),
+				children: t("back")
+			}),
+			phase === "oauth-pending" && (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+				variant: "outline",
+				disabled: busy,
+				onClick: cancelOauth,
+				children: t("back")
+			}),
+			(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+				variant: "ghost",
+				disabled: busy,
+				onClick: onClose,
+				children: t("cancel")
+			}),
+			phase === "password" && (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+				variant: "primary",
+				disabled: busy || email.trim().length === 0 || address.trim().length === 0,
+				onClick: submitPassword,
+				children: t("signIn")
+			}),
+			phase === "oauth" && (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+				variant: "primary",
+				disabled: busy || address.trim().length === 0,
+				onClick: startOauth,
+				children: t("oauthStart")
+			})
+		]
+	});
+	return (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Modal, {
+		open,
+		onClose,
+		title: t("signInTitle"),
+		closeLabel: t("close"),
+		footer,
+		children: (0, react_jsx_runtime.jsxs)("div", {
+			className: "s2s-column",
+			children: [
+				(0, react_jsx_runtime.jsxs)("div", {
+					className: "s2s-inline",
+					children: [(0, react_jsx_runtime.jsx)("span", {
+						className: "s2s-fieldLabel",
+						children: t("baseURLLabel")
+					}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Input, {
+						className: "s2s-input",
+						type: "text",
+						value: address,
+						placeholder: t("baseURLPlaceholder"),
+						disabled: busy || !writable || phase === "2fa" || phase === "oauth-pending",
+						onChange: (event) => {
+							setAddress(event.target.value);
+						}
+					})]
+				}),
+				phase !== "2fa" && phase !== "oauth-pending" && (0, react_jsx_runtime.jsxs)("div", {
+					className: "s2s-inline",
+					children: [(0, react_jsx_runtime.jsx)("span", {
+						className: "s2s-fieldLabel",
+						children: t("channelLabel")
+					}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.SegmentedControl, {
+						id: "sub2api-sync-signin-channel",
+						value: channel,
+						options: [{
+							value: "password",
+							label: t("channelPassword")
+						}, {
+							value: "oauth",
+							label: t("channelOAuth")
+						}],
+						onChange: pickChannel,
+						label: t("channelLabel"),
+						disabled: busy
+					})]
+				}),
+				phase === "password" && (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+					(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Input, {
+						type: "email",
+						value: email,
+						placeholder: t("emailPlaceholder"),
+						disabled: busy,
+						autoFocus: true,
+						onChange: (event) => {
+							setEmail(event.target.value);
+						}
+					}),
+					(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Input, {
+						type: "password",
+						value: password,
+						disabled: busy,
+						placeholder: t("passwordLabel"),
+						onChange: (event) => {
+							setPassword(event.target.value);
+						}
+					}),
+					(0, react_jsx_runtime.jsx)("span", {
+						className: "s2s-hint",
+						children: t("passwordHint")
+					})
+				] }),
+				phase === "oauth" && (0, react_jsx_runtime.jsx)("span", {
+					className: "s2s-hint",
+					children: t("oauthReadyHint")
+				}),
+				phase === "oauth-pending" && (0, react_jsx_runtime.jsxs)("div", {
+					className: "s2s-column",
+					children: [
+						(0, react_jsx_runtime.jsx)("span", {
+							className: "s2s-hint",
+							children: t("oauthPendingTitle")
+						}),
+						(0, react_jsx_runtime.jsx)("span", {
+							className: "s2s-hint",
+							children: t("oauthPendingHint")
+						}),
+						authorizeUrl !== undefined && (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+							variant: "outline",
+							onClick: () => {
+								openAuthorizeTab(authorizeUrl);
+							},
+							children: t("oauthOpenAgain")
+						})
+					]
+				}),
+				phase === "2fa" && (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Input, {
+					type: "text",
+					inputMode: "numeric",
+					maxLength: 6,
+					value: code,
+					placeholder: t("twoFactorPlaceholder"),
+					disabled: busy,
+					autoFocus: true,
+					onChange: (event) => {
+						setCode(event.target.value.replace(/\D/g, ""));
+					}
+				}),
+				error !== undefined && (0, react_jsx_runtime.jsx)("p", {
+					className: "s2s-feedback s2s-feedbackError",
+					children: t("actionFailedLabel", { message: error })
+				})
+			]
+		})
+	});
+}
+
+//#endregion
+//#region src/protocols.ts
+function protocolForPlatform(platform) {
+	switch (platform) {
+		case "anthropic": return "anthropic-messages";
+		case "openai":
+		case "grok":
+		case "kimi":
+		case "zhipu":
+		case "deepseek": return "openai-responses";
+		case "gemini":
+		case "antigravity":
+		case "composite": return "openai-completions";
+		default: return undefined;
+	}
+}
+
+//#endregion
+//#region src/client/section/KeysCard.tsx
+const PAGE_SIZE = 5;
+function KeysCard({ api, config, groups, t }) {
+	const snapshot$1 = useConfigForm(config);
+	const [keys, setKeys] = (0, react.useState)([]);
+	const [page, setPage] = (0, react.useState)(0);
+	const [pages, setPages] = (0, react.useState)(1);
+	const [total, setTotal] = (0, react.useState)(0);
+	const [loading, setLoading] = (0, react.useState)(false);
+	const [listError, setListError] = (0, react.useState)(undefined);
+	const [creating, setCreating] = (0, react.useState)(false);
+	const [groupMenuOpen, setGroupMenuOpen] = (0, react.useState)(false);
+	const [groupId, setGroupId] = (0, react.useState)("");
+	const [name$1, setName] = (0, react.useState)("");
+	const [nameTouched, setNameTouched] = (0, react.useState)(false);
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [syncing, setSyncing] = (0, react.useState)(false);
+	const [feedback, setFeedback] = (0, react.useState)(undefined);
+	const loadPage = (next) => {
+		setLoading(true);
+		setListError(undefined);
+		api.listKeys(next, PAGE_SIZE).then((response) => {
+			setKeys((previous) => next === 1 ? response.keys : [...previous, ...response.keys]);
+			setPages(response.pages);
+			setTotal(response.total);
+			setPage(next);
+		}).catch((cause) => {
+			setListError(cause instanceof Error ? cause.message : String(cause));
+		}).finally(() => {
+			setLoading(false);
+		});
+	};
+	(0, react.useEffect)(() => {
+		loadPage(1);
+	}, [api]);
+	const selectedIds = snapshot$1.value?.selectedKeys ?? [];
+	const toggle = (keyId, next) => {
+		const nextSet = new Set(selectedIds);
+		if (next) nextSet.add(keyId);
+else nextSet.delete(keyId);
+		void setField(config, "selectedKeys", [...nextSet].sort((a, b) => a - b));
+	};
+	const syncSelected = () => {
+		if (selectedIds.length === 0) return;
+		setSyncing(true);
+		setFeedback(undefined);
+		api.sync([...selectedIds]).then(async (report) => {
+			const okCount = report.report.entries.filter((entry) => entry.action !== "failed").length;
+			setFeedback({
+				tone: okCount === report.report.entries.length ? "ok" : "error",
+				text: t("syncSelectedDone", {
+					ok: okCount,
+					total: report.report.entries.length
+				})
+			});
+			await pruneInvalidSelection(config, report.report);
+			await refreshStatus();
+		}).catch((cause) => {
+			setFeedback({
+				tone: "error",
+				text: cause instanceof Error ? cause.message : String(cause)
+			});
+		}).finally(() => {
+			setSyncing(false);
+		});
+	};
+	const groupNameOf = (gid) => groups.find((group) => group.id === gid)?.name ?? `#${gid}`;
+	/** Pick a group: the name field auto-fills with the group name unless typed. */
+	const pickGroup = (gid) => {
+		setGroupId(gid);
+		if (!nameTouched) setName(groupNameOf(gid));
+	};
+	const closeCreate = () => {
+		setCreating(false);
+		setGroupId("");
+		setName("");
+		setNameTouched(false);
+	};
+	const create = () => {
+		if (groupId === "") return;
+		const finalName = (nameTouched ? name$1.trim() : "") || groupNameOf(groupId);
+		setBusy(true);
+		setFeedback(undefined);
+		api.createKey({
+			groupId,
+			name: finalName
+		}).then(async (response) => {
+			const nextSet = new Set(snapshot$1.value?.selectedKeys ?? []);
+			nextSet.add(response.key.id);
+			await setField(config, "selectedKeys", [...nextSet].sort((a, b) => a - b));
+			setFeedback({
+				tone: "ok",
+				text: t("keyCreated", { name: response.key.name })
+			});
+			closeCreate();
+			loadPage(1);
+		}).catch((cause) => {
+			setFeedback({
+				tone: "error",
+				text: cause instanceof Error ? cause.message : String(cause)
+			});
+		}).finally(() => {
+			setBusy(false);
+		});
+	};
+	const createFooter = (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-actions",
+		children: [(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+			variant: "ghost",
+			disabled: busy,
+			onClick: closeCreate,
+			children: t("cancel")
+		}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+			variant: "primary",
+			disabled: busy || groupId === "",
+			onClick: create,
+			children: t("createKey")
+		})]
+	});
+	return (0, react_jsx_runtime.jsxs)("section", {
+		className: "s2s-card",
+		children: [
+			(0, react_jsx_runtime.jsxs)("div", {
+				className: "s2s-row",
+				children: [(0, react_jsx_runtime.jsx)("span", {
+					className: "s2s-name",
+					children: t("keysTitle")
+				}), (0, react_jsx_runtime.jsxs)("div", {
+					className: "s2s-actions",
+					children: [
+						(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+							variant: "outline",
+							onClick: () => {
+								loadPage(1);
+							},
+							children: t("groupsRefresh")
+						}),
+						(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+							variant: "primary",
+							disabled: syncing || selectedIds.length === 0,
+							onClick: syncSelected,
+							children: syncing ? t("syncing") : t("syncSelected", { count: selectedIds.length })
+						}),
+						(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+							variant: "primary",
+							onClick: () => {
+								setCreating(true);
+							},
+							children: t("createKey")
+						})
+					]
+				})]
+			}),
+			feedback !== undefined && (0, react_jsx_runtime.jsx)("p", {
+				className: `s2s-feedback ${feedback.tone === "ok" ? "s2s-feedbackOk" : "s2s-feedbackError"}`,
+				children: feedback.text
+			}),
+			listError !== undefined && (0, react_jsx_runtime.jsx)("p", {
+				className: "s2s-feedback s2s-feedbackError",
+				children: listError
+			}),
+			!loading && keys.length === 0 && listError === undefined && (0, react_jsx_runtime.jsx)("p", {
+				className: "s2s-feedback s2s-hint",
+				children: t("keysListEmpty")
+			}),
+			loading && keys.length === 0 && (0, react_jsx_runtime.jsx)("p", {
+				className: "s2s-feedback s2s-hint",
+				children: t("keysListLoading")
+			}),
+			keys.length > 0 && (0, react_jsx_runtime.jsx)("div", {
+				className: "s2s-column",
+				children: keys.map((key) => {
+					const platform = groups.find((group) => group.id === key.groupId)?.platform;
+					const protocol = platform === undefined ? undefined : protocolForPlatform(platform);
+					return (0, react_jsx_runtime.jsxs)("div", {
+						className: "s2s-keyRow",
+						onClick: (event) => {
+							if (event.target.closest("label") !== null) return;
+							toggle(key.id, !selectedIds.includes(key.id));
+						},
+						children: [
+							(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Checkbox, {
+								checked: selectedIds.includes(key.id),
+								onChange: (next) => {
+									toggle(key.id, next);
+								},
+								label: key.name
+							}),
+							(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Tag, {
+								tone: "neutral",
+								children: groupNameOf(key.groupId)
+							}),
+							key.status !== undefined ? (0, react_jsx_runtime.jsx)("span", {
+								className: "s2s-badgeHint",
+								children: key.status
+							}) : null,
+							(0, react_jsx_runtime.jsx)("span", {
+								className: "s2s-badgeHint",
+								title: platform === undefined ? undefined : t("groupTypeTitle", {
+									type: platformLabel(platform),
+									protocol: protocol ?? "—"
+								}),
+								children: platform === undefined ? "—" : platformLabel(platform)
+							})
+						]
+					}, key.id);
+				})
+			}),
+			keys.length > 0 && page < pages && (0, react_jsx_runtime.jsx)("div", {
+				className: "s2s-actions",
+				children: (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+					variant: "outline",
+					disabled: loading,
+					onClick: () => {
+						loadPage(page + 1);
+					},
+					children: t("keysLoadMore", { count: Math.max(0, Math.min(PAGE_SIZE, total - keys.length)) })
+				})
+			}),
+			(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Modal, {
+				open: creating,
+				onClose: closeCreate,
+				title: t("createKey"),
+				closeLabel: t("close"),
+				footer: createFooter,
+				children: (0, react_jsx_runtime.jsxs)("div", {
+					className: "s2s-column",
+					children: [(0, react_jsx_runtime.jsxs)("div", {
+						className: "s2s-inline",
+						children: [(0, react_jsx_runtime.jsx)("span", {
+							className: "s2s-fieldLabel",
+							children: t("keyGroupLabel")
+						}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Menu, {
+							open: groupMenuOpen,
+							anchor: (0, react_jsx_runtime.jsx)("span", {
+								className: "s2s-menuAnchor",
+								children: (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+									variant: "outline",
+									onClick: () => {
+										setGroupMenuOpen(true);
+									},
+									children: (0, react_jsx_runtime.jsxs)("span", {
+										className: "s2s-selectTrigger",
+										children: [(0, react_jsx_runtime.jsx)("span", { children: groupId === "" ? t("keyGroupPlaceholder") : groupNameOf(groupId) }), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineRegular, {
+											size: 14,
+											className: "s2s-selectChevron"
+										})]
+									})
+								})
+							}),
+							items: groups.map((group) => ({
+								id: String(group.id),
+								label: group.name
+							})),
+							selectedId: groupId === "" ? undefined : String(groupId),
+							onSelect: (id) => {
+								pickGroup(Number(id));
+								setGroupMenuOpen(false);
+							},
+							onClose: () => {
+								setGroupMenuOpen(false);
+							}
+						})]
+					}), (0, react_jsx_runtime.jsxs)("div", {
+						className: "s2s-inline",
+						children: [(0, react_jsx_runtime.jsx)("span", {
+							className: "s2s-fieldLabel",
+							children: t("keyNameLabel")
+						}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Input, {
+							className: "s2s-input",
+							type: "text",
+							value: nameTouched ? name$1 : groupId === "" ? "" : groupNameOf(groupId),
+							placeholder: t("keyNameHint"),
+							disabled: busy || groupId === "",
+							onChange: (event) => {
+								setName(event.target.value);
+								setNameTouched(true);
+							}
+						})]
+					})]
+				})
+			})
+		]
+	});
+}
+
+//#endregion
+//#region src/client/section/header.ts
+function maskEmail(email) {
+	const trimmed = email.trim();
+	const at = trimmed.indexOf("@");
+	if (at <= 0) return trimmed.length > 0 ? `${trimmed.slice(0, 1)}***` : "—";
+	return `${trimmed.slice(0, 1)}***${trimmed.slice(at)}`;
+}
+function accountLabelOf(profile) {
+	const username = profile?.username?.trim();
+	if (username !== undefined && username.length > 0) return username;
+	const email = profile?.email?.trim();
+	return email !== undefined && email.length > 0 ? maskEmail(email) : undefined;
+}
+function formatBalance(amount) {
+	const digits = amount > 0 && amount < .01 ? 6 : 2;
+	return new Intl.NumberFormat("en-US", {
+		style: "currency",
+		currency: "USD",
+		minimumFractionDigits: digits,
+		maximumFractionDigits: digits
+	}).format(amount);
+}
+
+//#endregion
+//#region src/client/section/Sub2apiSyncSection.tsx
+function messageOf$1(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+/** The instance display host: the URL's host when parseable, else the raw value. */
+function hostOf(instance) {
+	const trimmed = instance.trim();
+	if (trimmed.length === 0) return "—";
+	try {
+		return new URL(trimmed).host;
+	} catch {
+		return trimmed;
+	}
+}
+function actionKeyOf$1(action) {
+	switch (action) {
+		case "created": return "actionCreated";
+		case "updated": return "actionUpdated";
+		case "unchanged": return "actionUnchanged";
+		case "failed": return "actionFailed";
+	}
+}
+function actionToneOf(action) {
+	switch (action) {
+		case "created": return "success";
+		case "updated": return "info";
+		case "unchanged": return "outline";
+		case "failed": return "danger";
+	}
+}
+function Sub2apiSyncSection({ t, api, config, useStatus: useStatus$1 }) {
+	const status = useStatus$1((value) => value);
+	const snapshot$1 = useConfigForm(config);
+	const configValues = snapshot$1.value;
+	const writable = snapshot$1.writable;
+	const auth = status?.auth;
+	const signedIn = auth?.signedIn ?? false;
+	const syncRunning = status?.syncRunning ?? false;
+	const configuredBaseURL = configValues?.baseURL;
+	const dotState = signedIn ? "done" : "idle";
+	const instanceOrigin = (() => {
+		try {
+			return new URL(status?.instance ?? "").origin;
+		} catch {
+			return "";
+		}
+	})();
+	const iconSrc = instanceOrigin !== "" ? `${ROUTES.icon}?instance=${encodeURIComponent(instanceOrigin)}` : undefined;
+	const [faviconBroken, setFaviconBroken] = (0, react.useState)(false);
+	(0, react.useEffect)(() => {
+		setFaviconBroken(false);
+	}, [iconSrc]);
+	const previousSignedIn = (0, react.useRef)(signedIn);
+	(0, react.useEffect)(() => {
+		const was = previousSignedIn.current;
+		previousSignedIn.current = signedIn;
+		if (was && !signedIn) void setField(config, "selectedKeys", []);
+	}, [signedIn, config]);
+	const instanceMarker = (configValues?.baseURL ?? "").trim().replace(/\/+$/, "").toLowerCase();
+	const previousInstance = (0, react.useRef)(undefined);
+	(0, react.useEffect)(() => {
+		const markerKey = "sub2api-sync:last-instance";
+		let stored;
+		try {
+			stored = window.localStorage.getItem(markerKey) ?? undefined;
+			window.localStorage.setItem(markerKey, instanceMarker);
+		} catch {}
+		const was = previousInstance.current ?? stored;
+		previousInstance.current = instanceMarker;
+		if (was !== undefined && was.length > 0 && was !== instanceMarker) {
+			void setField(config, "selectedKeys", []);
+			void api.resetSyncState(was).catch(() => undefined);
+		}
+	}, [
+		instanceMarker,
+		api,
+		config
+	]);
+	const [siteName, setSiteName] = (0, react.useState)(undefined);
+	(0, react.useEffect)(() => {
+		if (!signedIn || instanceOrigin === "") {
+			setSiteName(undefined);
+			return;
+		}
+		let alive = true;
+		api.site().then((response) => {
+			if (alive) setSiteName(response.name);
+		}).catch(() => {
+			if (alive) setSiteName(undefined);
+		});
+		return () => {
+			alive = false;
+		};
+	}, [
+		api,
+		signedIn,
+		instanceOrigin
+	]);
+	const [account, setAccount] = (0, react.useState)(undefined);
+	(0, react.useEffect)(() => {
+		if (!signedIn || syncRunning) return;
+		let alive = true;
+		api.account().then((response) => {
+			if (!alive) return;
+			if (response.error !== undefined) console.warn("[sub2api-sync] account:", response.error);
+			setAccount({
+				username: response.username,
+				email: response.email,
+				balance: response.balance
+			});
+		}).catch((cause) => {
+			console.warn("[sub2api-sync] account fetch failed", cause);
+			if (alive) setAccount(undefined);
+		});
+		return () => {
+			alive = false;
+		};
+	}, [
+		api,
+		signedIn,
+		syncRunning
+	]);
+	const accountSegment = accountLabelOf(account);
+	const nameLine = siteName !== undefined && siteName.length > 0 ? t("nameLineSite", {
+		name: siteName,
+		instance: hostOf(status?.instance ?? "")
+	}) : t("nameLine", { instance: hostOf(status?.instance ?? "") });
+	const secondary = !signedIn ? t("signedOut") : auth?.kind === "oauth" ? accountSegment !== undefined ? t("signedInOAuthAccount", { account: accountSegment }) : t("signedInOAuth") : t("signedInAs", { email: auth?.email ?? "" });
+	const routeCount = status?.routes.length ?? 0;
+	const selectedCount = configValues?.selectedKeys?.length ?? 0;
+	const report = status?.lastReport;
+	const [signInOpen, setSignInOpen] = (0, react.useState)(false);
+	const [accountBusy, setAccountBusy] = (0, react.useState)(false);
+	const [accountFeedback, setAccountFeedback] = (0, react.useState)(undefined);
+	const [groups, setGroups] = (0, react.useState)(undefined);
+	const fetchGroups = (0, react.useCallback)(() => {
+		api.groups().then((response) => {
+			setGroups(response.groups);
+		}).catch(() => {
+			setGroups(undefined);
+		});
+	}, [api]);
+	(0, react.useEffect)(() => {
+		if (!signedIn) {
+			setGroups(undefined);
+			return;
+		}
+		fetchGroups();
+	}, [signedIn, fetchGroups]);
+	const [syncBusy, setSyncBusy] = (0, react.useState)(false);
+	const [syncFeedback, setSyncFeedback] = (0, react.useState)(undefined);
+	const signOut = () => {
+		setAccountBusy(true);
+		setAccountFeedback(undefined);
+		api.logout().then(() => {
+			setAccountFeedback({
+				tone: "ok",
+				text: t("signOutDone")
+			});
+			return refreshStatus();
+		}).catch((cause) => {
+			setAccountFeedback({
+				tone: "error",
+				text: t("actionFailedLabel", { message: messageOf$1(cause) })
+			});
+		}).finally(() => {
+			setAccountBusy(false);
+		});
+	};
+	const onSignedIn = () => {
+		setAccountFeedback({
+			tone: "ok",
+			text: t("signedInNotice")
+		});
+		void refreshStatus();
+	};
+	const syncNow = () => {
+		setSyncBusy(true);
+		setSyncFeedback(undefined);
+		api.sync().then(async (response) => {
+			setSyncFeedback({
+				tone: "ok",
+				text: t("syncDone")
+			});
+			await pruneInvalidSelection(config, response.report);
+			return refreshStatus();
+		}).catch((cause) => {
+			setSyncFeedback({
+				tone: "error",
+				text: t("actionFailedLabel", { message: messageOf$1(cause) })
+			});
+		}).finally(() => {
+			setSyncBusy(false);
+		});
+	};
+	const [removingRoute, setRemovingRoute] = (0, react.useState)(undefined);
+	const removeRoute = (route) => {
+		const keyId = route.keyId;
+		if (keyId === undefined || removingRoute !== undefined) return;
+		setRemovingRoute(route.route);
+		api.removeKey(keyId).then(async () => {
+			setSyncFeedback({
+				tone: "ok",
+				text: t("entryRemoveDone", { name: route.displayName ?? route.route })
+			});
+			await dropSelectedKey(config, keyId).catch(() => undefined);
+			await refreshStatus();
+		}).catch((cause) => {
+			setSyncFeedback({
+				tone: "error",
+				text: t("actionFailedLabel", { message: messageOf$1(cause) })
+			});
+		}).finally(() => {
+			setRemovingRoute(undefined);
+		});
+	};
+	return (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-section",
+		children: [
+			snapshot$1.status === "ready" && !writable && (0, react_jsx_runtime.jsx)("p", {
+				className: "s2s-warn",
+				children: t("localOnlyWarning")
+			}),
+			snapshot$1.status === "unavailable" && (0, react_jsx_runtime.jsx)("p", {
+				className: "s2s-warn",
+				children: t("configUnavailable")
+			}),
+			(0, react_jsx_runtime.jsx)("section", {
+				className: "s2s-card",
+				children: (0, react_jsx_runtime.jsxs)("div", {
+					className: "s2s-row",
+					children: [(0, react_jsx_runtime.jsxs)("div", {
+						className: "s2s-identity",
+						children: [(0, react_jsx_runtime.jsx)("div", {
+							className: "s2s-avatar",
+							children: signedIn && iconSrc !== undefined && !faviconBroken ? (0, react_jsx_runtime.jsx)("img", {
+								className: "s2s-favicon",
+								src: iconSrc,
+								alt: "",
+								onError: () => {
+									setFaviconBroken(true);
+								}
+							}) : (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.StateDot, {
+								state: dotState,
+								size: 16
+							})
+						}), (0, react_jsx_runtime.jsxs)("div", {
+							className: "s2s-identityCopy",
+							children: [(0, react_jsx_runtime.jsx)("span", {
+								className: "s2s-name",
+								children: nameLine
+							}), (0, react_jsx_runtime.jsx)("span", {
+								className: "s2s-secondary",
+								children: secondary
+							})]
+						})]
+					}), (0, react_jsx_runtime.jsxs)("div", {
+						className: "s2s-actions",
+						children: [
+							accountFeedback !== undefined && (0, react_jsx_runtime.jsx)("span", {
+								className: `s2s-feedback ${accountFeedback.tone === "ok" ? "s2s-feedbackOk" : "s2s-feedbackError"}`,
+								children: accountFeedback.text
+							}),
+							signedIn && account?.balance !== undefined && (0, react_jsx_runtime.jsx)("span", {
+								className: "s2s-balance",
+								title: t("balanceTitle"),
+								children: t("balanceLabel", { amount: formatBalance(account.balance) })
+							}),
+							signedIn ? (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+								variant: "outline",
+								disabled: accountBusy || syncRunning,
+								title: syncRunning ? t("syncing") : undefined,
+								onClick: signOut,
+								children: t("signOut")
+							}) : (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+								variant: "primary",
+								disabled: accountBusy,
+								onClick: () => {
+									setSignInOpen(true);
+								},
+								children: t("signIn")
+							})
+						]
+					})]
+				})
+			}),
+			!signedIn && (0, react_jsx_runtime.jsxs)("section", {
+				className: "s2s-card",
+				children: [(0, react_jsx_runtime.jsx)("div", {
+					className: "s2s-row",
+					children: (0, react_jsx_runtime.jsx)("span", {
+						className: "s2s-name",
+						children: t("accountTitle")
+					})
+				}), (0, react_jsx_runtime.jsx)("p", {
+					className: "s2s-feedback s2s-hint",
+					children: t("accountSignedOutHint")
+				})]
+			}),
+			signedIn && (0, react_jsx_runtime.jsx)(KeysCard, {
+				api,
+				config,
+				groups: groups ?? [],
+				t
+			}),
+			(0, react_jsx_runtime.jsxs)("section", {
+				className: "s2s-card",
+				children: [
+					(0, react_jsx_runtime.jsxs)("div", {
+						className: "s2s-row",
+						children: [(0, react_jsx_runtime.jsx)("span", {
+							className: "s2s-name",
+							children: t("syncTitle")
+						}), (0, react_jsx_runtime.jsxs)("div", {
+							className: "s2s-actions",
+							children: [(syncRunning || syncBusy) && (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.TextShimmer, {
+								active: true,
+								children: t("syncing")
+							}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+								variant: "primary",
+								disabled: !signedIn || !writable || syncBusy || syncRunning || selectedCount === 0,
+								onClick: syncNow,
+								children: t("syncNow")
+							})]
+						})]
+					}),
+					routeCount > 0 && (0, react_jsx_runtime.jsx)("p", {
+						className: "s2s-feedback s2s-hint",
+						children: t("routesSummary", { count: routeCount })
+					}),
+					status?.routes.map((route) => (0, react_jsx_runtime.jsxs)("div", {
+						className: "s2s-reportLine",
+						children: [
+							(0, react_jsx_runtime.jsx)("span", {
+								className: "s2s-reportMark",
+								"data-mark": "ok",
+								"aria-hidden": "true"
+							}),
+							(0, react_jsx_runtime.jsxs)("span", {
+								className: "s2s-reportText",
+								children: [
+									t("entryModels", {
+										name: route.displayName ?? route.route,
+										count: route.models
+									}),
+									" ",
+									route.api !== undefined ? (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Tag, {
+										tone: "info",
+										children: route.api
+									}) : null
+								]
+							}),
+							route.keyId !== undefined && (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+								variant: "ghost",
+								size: "sm",
+								className: "s2s-reportRemove",
+								disabled: removingRoute !== undefined,
+								onClick: () => {
+									removeRoute(route);
+								},
+								children: t("entryRemove")
+							})
+						]
+					}, route.route)),
+					syncFeedback !== undefined && (0, react_jsx_runtime.jsx)("p", {
+						className: `s2s-feedback ${syncFeedback.tone === "ok" ? "s2s-feedbackOk" : "s2s-feedbackError"}`,
+						children: syncFeedback.text
+					}),
+					signedIn && (0, react_jsx_runtime.jsx)(SyncReportView, {
+						t,
+						report
+					})
+				]
+			}),
+			(0, react_jsx_runtime.jsx)(SignInDialog, {
+				open: signInOpen,
+				onClose: () => {
+					setSignInOpen(false);
+				},
+				api,
+				config,
+				baseURL: configuredBaseURL,
+				writable,
+				onSignedIn,
+				t
+			})
+		]
+	});
+}
+/**
+* The last sync report — a hint about the previous run (meta line, per-entry
+* outcomes, removals, warnings). No actions live here: removal belongs on
+* the registered-routes list above, which reflects the live state.
+*/
+function SyncReportView({ t, report }) {
+	if (report === undefined) return (0, react_jsx_runtime.jsx)("p", {
+		className: "s2s-feedback s2s-hint",
+		children: t("reportEmpty")
+	});
+	return (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-column",
+		children: [
+			(0, react_jsx_runtime.jsx)("span", {
+				className: "s2s-hint",
+				children: t("reportMeta", {
+					writes: report.writes,
+					attempts: report.attempts
+				})
+			}),
+			report.entries.map((entry, index) => (0, react_jsx_runtime.jsxs)("div", {
+				className: "s2s-reportLine",
+				children: [(0, react_jsx_runtime.jsx)("span", {
+					className: "s2s-reportMark",
+					"data-mark": entry.action === "failed" ? "fail" : "ok",
+					"aria-hidden": "true"
+				}), (0, react_jsx_runtime.jsxs)("span", {
+					className: `s2s-reportText${entry.action === "failed" ? " s2s-reportError" : ""}`,
+					children: [
+						entry.action === "failed" ? t("entryError", {
+							name: entry.displayName ?? entry.route,
+							error: entry.error ?? ""
+						}) : t("entryModels", {
+							name: entry.displayName ?? entry.route,
+							count: entry.models ?? 0
+						}),
+						" ",
+						(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Tag, {
+							tone: actionToneOf(entry.action),
+							children: t(actionKeyOf$1(entry.action))
+						})
+					]
+				})]
+			}, `${entry.groupId}-${index}`)),
+			report.removed.length > 0 && (0, react_jsx_runtime.jsx)("span", {
+				className: "s2s-reportText",
+				children: t("reportRemoved", { routes: report.removed.join(", ") })
+			}),
+			report.warnings.map((warning, index) => (0, react_jsx_runtime.jsx)("span", {
+				className: "s2s-reportText s2s-reportError",
+				children: t("reportWarningLine", { message: warning })
+			}, index))
+		]
+	});
+}
+
+//#endregion
+//#region src/client/bundleConfig/BundleConfigCard.tsx
+function parseNumber(text) {
+	const trimmed = text.trim();
+	if (trimmed.length === 0) return "";
+	const value = Number(trimmed);
+	return Number.isFinite(value) ? value : "invalid";
+}
+function messageOf(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+function BundleConfigCard({ view, form, t }) {
+	if (view !== "page" || form === undefined) return null;
+	return (0, react_jsx_runtime.jsx)(BundleConfigFields, {
+		form,
+		t
+	});
+}
+function BundleConfigFields({ form, t }) {
+	const values = form.state.value ?? {};
+	const writable = form.state.writable;
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [feedback, setFeedback] = (0, react.useState)(undefined);
+	const run = (ops) => {
+		setBusy(true);
+		setFeedback(undefined);
+		form.mutate(ops).then((accepted) => {
+			setFeedback(accepted ? {
+				tone: "ok",
+				text: t("savedNotice")
+			} : {
+				tone: "error",
+				text: t("writeRefused")
+			});
+		}).catch((cause) => {
+			setFeedback({
+				tone: "error",
+				text: t("actionFailedLabel", { message: messageOf(cause) })
+			});
+		}).finally(() => {
+			setBusy(false);
+		});
+	};
+	const [templateDraft, setTemplateDraft] = (0, react.useState)(values.providerNameTemplate ?? "");
+	(0, react.useEffect)(() => {
+		setTemplateDraft(values.providerNameTemplate ?? "");
+	}, [values.providerNameTemplate]);
+	const [quotaDraft, setQuotaDraft] = (0, react.useState)(values.keyQuota === undefined ? "" : String(values.keyQuota));
+	(0, react.useEffect)(() => {
+		setQuotaDraft(values.keyQuota === undefined ? "" : String(values.keyQuota));
+	}, [values.keyQuota]);
+	const [expiryDraft, setExpiryDraft] = (0, react.useState)(values.keyExpiresInDays === undefined ? "" : String(values.keyExpiresInDays));
+	(0, react.useEffect)(() => {
+		setExpiryDraft(values.keyExpiresInDays === undefined ? "" : String(values.keyExpiresInDays));
+	}, [values.keyExpiresInDays]);
+	const [intervalDraft, setIntervalDraft] = (0, react.useState)(values.syncIntervalMs === undefined ? "" : String(values.syncIntervalMs));
+	(0, react.useEffect)(() => {
+		setIntervalDraft(values.syncIntervalMs === undefined ? "" : String(values.syncIntervalMs));
+	}, [values.syncIntervalMs]);
+	const templateInvalid = !templateDraft.includes("{keyName}");
+	const quotaParsed = parseNumber(quotaDraft);
+	const quotaInvalid = quotaParsed === "invalid" || quotaParsed !== "" && quotaParsed < 0;
+	const expiryParsed = parseNumber(expiryDraft);
+	const expiryInvalid = expiryParsed === "invalid" || expiryParsed !== "" && (!Number.isInteger(expiryParsed) || expiryParsed < 1);
+	const intervalParsed = parseNumber(intervalDraft);
+	const intervalInvalid = intervalParsed === "invalid" || intervalParsed !== "" && (!Number.isInteger(intervalParsed) || intervalParsed < 6e4);
+	const numberOp = (field, parsed) => parsed === "" ? {
+		op: "unset",
+		path: [field]
+	} : {
+		op: "set",
+		path: [field],
+		value: parsed
+	};
+	return (0, react_jsx_runtime.jsx)("div", {
+		className: "s2s-section",
+		children: (0, react_jsx_runtime.jsxs)("section", {
+			className: "s2s-card",
+			children: [
+				(0, react_jsx_runtime.jsx)(TextFieldRow, {
+					id: "sub2api-sync-provider-name-template",
+					label: t("bundleTemplateLabel"),
+					value: templateDraft,
+					hint: t("bundleTemplateHint"),
+					invalid: templateInvalid,
+					invalidHint: t("bundleTemplateInvalid"),
+					disabled: !writable || busy,
+					saveDisabled: templateDraft.trim() === (values.providerNameTemplate ?? ""),
+					onChange: setTemplateDraft,
+					saveLabel: t("save"),
+					onSave: () => {
+						run([{
+							op: "set",
+							path: ["providerNameTemplate"],
+							value: templateDraft.trim()
+						}]);
+					}
+				}),
+				(0, react_jsx_runtime.jsx)("div", { className: "s2s-divider" }),
+				(0, react_jsx_runtime.jsx)(TextFieldRow, {
+					id: "sub2api-sync-key-quota",
+					label: t("bundleKeyQuotaLabel"),
+					value: quotaDraft,
+					hint: t("bundleKeyQuotaHint"),
+					invalid: quotaInvalid,
+					invalidHint: t("bundleNumberInvalid"),
+					disabled: !writable || busy,
+					saveDisabled: quotaDraft.trim() === (values.keyQuota === undefined ? "" : String(values.keyQuota)),
+					onChange: setQuotaDraft,
+					saveLabel: t("save"),
+					onSave: () => {
+						run([numberOp("keyQuota", quotaParsed)]);
+					}
+				}),
+				(0, react_jsx_runtime.jsx)("div", { className: "s2s-divider" }),
+				(0, react_jsx_runtime.jsx)(TextFieldRow, {
+					id: "sub2api-sync-key-expiry",
+					label: t("bundleKeyExpiresLabel"),
+					value: expiryDraft,
+					hint: t("bundleKeyExpiresHint"),
+					invalid: expiryInvalid,
+					invalidHint: t("bundleNumberInvalid"),
+					disabled: !writable || busy,
+					saveDisabled: expiryDraft.trim() === (values.keyExpiresInDays === undefined ? "" : String(values.keyExpiresInDays)),
+					onChange: setExpiryDraft,
+					saveLabel: t("save"),
+					onSave: () => {
+						run([numberOp("keyExpiresInDays", expiryParsed)]);
+					}
+				}),
+				(0, react_jsx_runtime.jsx)("div", { className: "s2s-divider" }),
+				(0, react_jsx_runtime.jsx)(TextFieldRow, {
+					id: "sub2api-sync-sync-interval",
+					label: t("bundleIntervalLabel"),
+					value: intervalDraft,
+					hint: t("bundleIntervalHint"),
+					invalid: intervalInvalid,
+					invalidHint: t("bundleIntervalInvalid"),
+					disabled: !writable || busy,
+					saveDisabled: intervalDraft.trim() === (values.syncIntervalMs === undefined ? "" : String(values.syncIntervalMs)),
+					onChange: setIntervalDraft,
+					saveLabel: t("save"),
+					onSave: () => {
+						run([numberOp("syncIntervalMs", intervalParsed)]);
+					}
+				}),
+				(0, react_jsx_runtime.jsx)("div", { className: "s2s-divider" }),
+				(0, react_jsx_runtime.jsx)(SwitchRow, {
+					label: t("bundleDeleteOrphanLabel"),
+					hint: t("bundleDeleteOrphanHint"),
+					checked: values.deleteOrphanKeys === true,
+					disabled: !writable || busy,
+					onChange: (next) => {
+						run([{
+							op: "set",
+							path: ["deleteOrphanKeys"],
+							value: next
+						}]);
+					}
+				}),
+				(0, react_jsx_runtime.jsx)(SwitchRow, {
+					label: t("bundleEnrichLabel"),
+					hint: t("bundleEnrichHint"),
+					checked: values.enrichModelMeta !== false,
+					disabled: !writable || busy,
+					onChange: (next) => {
+						run([{
+							op: "set",
+							path: ["enrichModelMeta"],
+							value: next
+						}]);
+					}
+				}),
+				(0, react_jsx_runtime.jsx)(SwitchRow, {
+					label: t("bundleAllowRemoteLabel"),
+					checked: values.allowRemoteActions === true,
+					disabled: !writable || busy,
+					onChange: (next) => {
+						run([{
+							op: "set",
+							path: ["allowRemoteActions"],
+							value: next
+						}]);
+					}
+				}),
+				(0, react_jsx_runtime.jsx)("p", {
+					className: "s2s-feedback s2s-feedbackError",
+					children: t("bundleAllowRemoteWarning")
+				}),
+				feedback !== undefined && (0, react_jsx_runtime.jsx)("p", {
+					className: `s2s-feedback ${feedback.tone === "ok" ? "s2s-feedbackOk" : "s2s-feedbackError"}`,
+					children: feedback.text
+				}),
+				(0, react_jsx_runtime.jsx)("span", {
+					className: "s2s-hint",
+					children: t("bundleAdvancedHint")
+				})
+			]
+		})
+	});
+}
+/** One labeled text field with its own save control. */
+function TextFieldRow(props) {
+	return (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-column",
+		children: [(0, react_jsx_runtime.jsxs)("div", {
+			className: "s2s-row",
+			children: [(0, react_jsx_runtime.jsx)("label", {
+				className: "s2s-fieldLabel",
+				htmlFor: props.id,
+				children: props.label
+			}), (0, react_jsx_runtime.jsxs)("div", {
+				className: "s2s-actions",
+				children: [(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Input, {
+					id: props.id,
+					className: "s2s-input",
+					type: "text",
+					value: props.value,
+					disabled: props.disabled,
+					"aria-invalid": props.invalid,
+					onChange: (event) => {
+						props.onChange(event.target.value);
+					}
+				}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+					variant: "primary",
+					disabled: props.disabled || props.saveDisabled || props.invalid,
+					onClick: props.onSave,
+					children: props.saveLabel
+				})]
+			})]
+		}), props.invalid ? (0, react_jsx_runtime.jsx)("span", {
+			className: "s2s-feedback s2s-feedbackError",
+			children: props.invalidHint
+		}) : (0, react_jsx_runtime.jsx)("span", {
+			className: "s2s-hint",
+			children: props.hint
+		})]
+	});
+}
+/** One labeled switch row with its hint. */
+function SwitchRow(props) {
+	return (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-column",
+		children: [(0, react_jsx_runtime.jsxs)("div", {
+			className: "s2s-row",
+			children: [(0, react_jsx_runtime.jsx)("span", {
+				className: "s2s-fieldLabel",
+				children: props.label
+			}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Switch, {
+				checked: props.checked,
+				disabled: props.disabled,
+				label: props.label,
+				onChange: props.onChange
+			})]
+		}), props.hint !== undefined && (0, react_jsx_runtime.jsx)("span", {
+			className: "s2s-hint",
+			children: props.hint
+		})]
+	});
+}
+
+//#endregion
+//#region src/client/models/badge.ts
+function isSyncedRoute(routeId) {
+	return isOwnedRoute(routeId);
+}
+function badgeModel(routeId, status) {
+	if (status === undefined || !isOwnedRoute(routeId)) return undefined;
+	const route = status.routes.find((candidate) => candidate.route === routeId);
+	if (route === undefined) return undefined;
+	const entry = status.lastReport?.entries.find((candidate) => candidate.route === routeId);
+	return {
+		models: route.models,
+		...route.displayName !== undefined ? { displayName: route.displayName } : {},
+		...entry?.action !== undefined ? { lastAction: entry.action } : {},
+		...entry?.error !== undefined ? { lastError: entry.error } : {},
+		...status.lastReportAt !== undefined ? { lastReportAt: status.lastReportAt } : {}
+	};
+}
+function footerModel(status) {
+	return {
+		signedIn: status?.auth.signedIn === true,
+		groups: status?.routes.length ?? 0,
+		...status?.lastReportAt !== undefined ? { lastReportAt: status.lastReportAt } : {}
+	};
+}
+function relativeMinutes(at, now) {
+	const minutes = Math.max(0, Math.floor((now - at) / 6e4));
+	if (minutes < 1) return { key: "footerJustNow" };
+	return {
+		key: "footerMinutesAgo",
+		count: minutes
+	};
+}
+
+//#endregion
+//#region src/client/models/ProviderBadge.tsx
+function actionKeyOf(action) {
+	switch (action) {
+		case "created": return "actionCreated";
+		case "updated": return "actionUpdated";
+		case "unchanged": return "actionUnchanged";
+		case "failed": return "actionFailed";
+	}
+}
+function ProviderBadge(props) {
+	const { provider, t } = props;
+	if (!isSyncedRoute(provider.provider)) return null;
+	return (0, react_jsx_runtime.jsx)(ProviderBadgeBody, {
+		routeId: provider.provider,
+		t
+	});
+}
+function ProviderBadgeBody({ routeId, t }) {
+	const status = useStatus();
+	const badge = badgeModel(routeId, status);
+	if (badge === undefined) return null;
+	return (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-badgeRow",
+		children: [
+			(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Tag, {
+				tone: "info",
+				children: t("badgeManagedTag")
+			}),
+			(0, react_jsx_runtime.jsxs)("span", {
+				className: "s2s-badgeMeta",
+				children: [t("badgeModels", { count: badge.models }), badge.lastAction !== undefined ? ` · ${t(actionKeyOf(badge.lastAction))}` : ""]
+			}),
+			(0, react_jsx_runtime.jsx)("span", {
+				className: "s2s-badgeHint",
+				children: t("badgeManageHint")
+			})
+		]
+	});
+}
+
+//#endregion
+//#region src/client/models/ModelsFooter.tsx
+function ModelsFooter(props) {
+	const { t } = props;
+	const status = useStatus();
+	const footer = footerModel(status);
+	const when = footer.lastReportAt !== undefined ? (() => {
+		const relative = relativeMinutes(footer.lastReportAt, Date.now());
+		return t(relative.key, relative.count !== undefined ? { count: relative.count } : {});
+	})() : t("footerNeverSynced");
+	return (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-footerStrip",
+		children: [(0, react_jsx_runtime.jsx)("span", { children: footer.signedIn ? t("footerSyncedCount", { count: footer.groups }) : t("footerSignedOut") }), (0, react_jsx_runtime.jsx)("span", { children: when })]
+	});
+}
+
+//#endregion
+//#region src/client/plugins/Detail.tsx
+function isOwnBundle(subject) {
+	return subject.kind === "bundle" && subject.pkg.name === PKG_NAME;
+}
+function DetailBadge(props) {
+	const { subject, t } = props;
+	if (!isOwnBundle(subject)) return null;
+	return (0, react_jsx_runtime.jsx)(DetailBadgeBody, { t });
+}
+function DetailBadgeBody({ t }) {
+	const status = useStatus();
+	const footer = footerModel(status);
+	return (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Tag, {
+		tone: footer.signedIn ? "success" : "quiet",
+		children: footer.signedIn ? t("detailBadgeSynced", { count: footer.groups }) : t("detailBadgeSignedOut")
+	});
+}
+function DetailSection(props) {
+	const { subject, t } = props;
+	if (!isOwnBundle(subject)) return null;
+	return (0, react_jsx_runtime.jsx)(DetailSectionBody, { t });
+}
+function DetailSectionBody({ t }) {
+	const status = useStatus();
+	const report = status?.lastReport;
+	return (0, react_jsx_runtime.jsxs)("section", {
+		className: "s2s-card",
+		children: [(0, react_jsx_runtime.jsx)("span", {
+			className: "s2s-name",
+			children: t("detailSectionTitle")
+		}), report === undefined ? (0, react_jsx_runtime.jsx)("span", {
+			className: "s2s-badgeHint",
+			children: t("detailSectionEmpty")
+		}) : (0, react_jsx_runtime.jsxs)("ul", {
+			className: "s2s-steps",
+			children: [report.entries.map((entry) => (0, react_jsx_runtime.jsx)("li", {
+				className: "s2s-reportLine",
+				children: (0, react_jsx_runtime.jsx)("span", {
+					className: entry.action === "failed" ? "s2s-reportError" : "s2s-reportText",
+					children: entry.action === "failed" ? t("entryError", {
+						name: entry.displayName ?? entry.route,
+						error: entry.error ?? ""
+					}) : t("entryModels", {
+						name: entry.displayName ?? entry.route,
+						count: entry.models ?? 0
+					})
+				})
+			}, entry.route)), report.removed.length > 0 && (0, react_jsx_runtime.jsx)("li", {
+				className: "s2s-reportLine",
+				children: t("reportRemoved", { routes: report.removed.join(", ") })
+			})]
+		})]
+	});
+}
+
+//#endregion
+//#region src/client/plugins/ActivationGuide.tsx
+function ActivationGuide(props) {
+	const { t, onDismiss, onOpenDetails } = props;
+	return (0, react_jsx_runtime.jsxs)("div", {
+		className: "s2s-card",
+		children: [
+			(0, react_jsx_runtime.jsx)("span", {
+				className: "s2s-name",
+				children: t("activationTitle")
+			}),
+			(0, react_jsx_runtime.jsxs)("ol", {
+				className: "s2s-steps",
+				children: [
+					(0, react_jsx_runtime.jsx)("li", { children: t("activationStep1") }),
+					(0, react_jsx_runtime.jsx)("li", { children: t("activationStep2") }),
+					(0, react_jsx_runtime.jsx)("li", { children: t("activationStep3") })
+				]
+			}),
+			(0, react_jsx_runtime.jsxs)("div", {
+				className: "s2s-actions",
+				children: [(0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+					variant: "primary",
+					onClick: onOpenDetails,
+					children: t("activationOpenConfig")
+				}), (0, react_jsx_runtime.jsx)(__deepseek_ai_dsh_client_ui_primitives.Button, {
+					variant: "ghost",
+					onClick: onDismiss,
+					children: t("activationDismiss")
+				})]
+			})
+		]
+	});
+}
+
+//#endregion
+//#region src/client/mount.ts
+function mount(ctx) {
+	ensureCss();
+	ctx.effect(() => ctx.locale.register(NS, dictionaries), "sub2api-sync: dictionaries");
+	const t = ctx.locale.bind(NS);
+	const config = ctx.configForms.get(NS);
+	const sectionOps = {
+		api: createPluginApi(),
+		config,
+		hooks: { status: statusSource }
+	};
+	ctx.slots.inject("settings.section", () => ctx.slots.register({
+		name: "settings.section",
+		id: "sub2api-sync",
+		order: 30,
+		label: () => t("nav"),
+		locale: NS,
+		inject: () => sectionOps
+	}, Sub2apiSyncSection));
+	ctx.slots.inject("plugins.bundle.config", () => ctx.slots.register({
+		name: "plugins.bundle.config",
+		key: PKG_NAME,
+		locale: NS
+	}, BundleConfigCard));
+	ctx.slots.inject("settings.models.provider-card", () => ctx.slots.register({
+		name: "settings.models.provider-card",
+		key: "llm-pi-ai",
+		locale: NS
+	}, ProviderBadge));
+	ctx.slots.inject("settings.models.footer", () => ctx.slots.register({
+		name: "settings.models.footer",
+		id: "sub2api-sync",
+		order: 10,
+		locale: NS
+	}, ModelsFooter));
+	ctx.slots.inject("plugins.detail.badge", () => ctx.slots.register({
+		name: "plugins.detail.badge",
+		id: "sub2api-sync",
+		locale: NS
+	}, DetailBadge));
+	ctx.slots.inject("plugins.detail.section", () => ctx.slots.register({
+		name: "plugins.detail.section",
+		id: "sub2api-sync",
+		locale: NS
+	}, DetailSection));
+	ctx.slots.inject("plugins.bundle.activation", () => ctx.slots.register({
+		name: "plugins.bundle.activation",
+		key: PKG_NAME,
+		locale: NS
+	}, ActivationGuide));
+}
+
+//#endregion
+//#region src/client/index.tsx
+const name = "dsh-sub2api-sync-client";
+const inject = [
+	"slots",
+	"locale",
+	"configForms"
+];
+function apply(ctx) {
+	mount(ctx);
+}
+
+//#endregion
+exports.apply = apply
+exports.inject = inject
+exports.name = name
+		return module.exports;
+	}
+});