dsh-any-deepseek 0.0.5 → 0.0.6

package/README.md

@@ -50,11 +50,9 @@ dsh-any-deepseek:
   current: opencode-go          # the live channel (manual)
   channels:
     opencode-go:
-      apiKeyEnv: ANY_DEEPSEEK_OPENCODE_GO_KEY
-      enabled: true
+      apiKey: sk-…              # the key itself
     commandcode:
-      apiKeyEnv: ANY_DEEPSEEK_COMMANDCODE_KEY
-      enabled: true
+      apiKey: sk-…              # the key itself
   usage:
     enabled: true
 ```
@@ -66,6 +64,24 @@ dsh-any-deepseek:
   `openai-completions`, and `contextWindow` / `maxTokens` fall back to documented defaults
   (the panel shows a warning next to the row when a default was applied rather than declared).
 
+### Where the key lives
+
+`apiKey` holds the key **itself**, on the channel. The panel never asks you to invent a name for
+it — you paste the key, and it is written here.
+
+⚠️ **That means the key is in your profile configuration.** `dsh --dump-config` prints patch
+layers verbatim and does not redact, so a diagnostic dump, a `git diff` of the profile, or a
+pasted config includes it. Do not share the profile document. Environment-variable injection
+(`-e SOME_KEY=…`) is not consulted — nothing resolves a name.
+
+`apiKeyEnv` is still **read** for configurations written before this change: when its value
+matches the credential-reference grammar (`^[A-Za-z_][A-Za-z0-9_]*$`) it is resolved as a name;
+when it does not, it cannot be a name, so it is adopted as the key itself. `apiKey` always wins
+when both are present, so re-keying through the panel is enough to migrate an entry.
+
+A channel with no key still **appears** in the panel — that is how you find and fix it. Requests
+through it fail with `MISSING_CREDENTIAL`, and the row shows an unconfigured dot.
+
 ### Channels vs. protocols
 
 `openai-completions` is the default and the recommended protocol: it is what almost every

package/lib/adapter.d.ts

@@ -39,7 +39,12 @@ export interface AdapterDeps {
     channels: () => readonly ResolvedChannel[];
     /** The configured channel id. */
     current: () => string | undefined;
-    /** Resolve a credential reference to its value; undefined when unconfigured. */
+    /**
+     * Resolve a credential REFERENCE name to its value; undefined when unconfigured.
+     *
+     * Only consulted for `credential.kind === 'reference'` (a legacy entry). A literal key is
+     * carried by the channel itself and never travels through this seam.
+     */
     resolveKey: (ref: string) => Promise<string | undefined>;
     /** Record one finished request. Must never throw. */
     record: (entry: LedgerEntry) => Promise<void>;

package/lib/channels.d.ts

@@ -27,7 +27,20 @@ export interface ChannelEntry {
     baseURL?: string;
     /** Upstream model id. Required for a channel that names no preset. */
     model?: string;
-    /** Credential reference (environment-variable name). Required. */
+    /**
+     * The key itself, stored in the entry.
+     *
+     * 🔴 Prefer this over {@link apiKeyEnv}. Owner decision 2026-10-21: the panel takes the key the
+     * user has and writes it here — no invented reference name, no second store to consult. The
+     * accepted cost (a key visible in `--dump-config` output and in the profile patch) is recorded
+     * on `ChannelConfigSchema`.
+     */
+    apiKey?: string;
+    /**
+     * Legacy: a credential reference name, resolved through the harness credential seam or the
+     * process environment. Still honoured so a configuration written before the change keeps
+     * working, but the panel no longer produces one.
+     */
     apiKeyEnv?: string;
     /**
      * @deprecated Retired. Kept in the schema only so an existing configuration that still carries
@@ -57,7 +70,28 @@ export interface ResolvedChannel {
     baseURL: string;
     /** Upstream model id, as the relay spells it. */
     model: string;
-    apiKeyEnv: string;
+    /**
+     * How this channel authenticates.
+     *
+     * A discriminated shape rather than two optional strings, so no caller can read the wrong one
+     * and so "no key at all" is a state the type forces someone to handle.
+     */
+    credential: {
+        kind: 'literal';
+        value: string;
+    } | {
+        kind: 'reference';
+        ref: string;
+    } | {
+        kind: 'none';
+    };
+    /**
+     * Preset id this channel was built from, when it named one.
+     *
+     * Kept through resolution so the panel can label a channel it did not fully recognise, and so
+     * a future preset change can be reasoned about per channel.
+     */
+    preset?: string;
     contextWindow: number;
     maxTokens: number;
     input: ChannelModality[];
@@ -70,7 +104,7 @@ export interface ResolvedChannel {
 /** Why one entry could not be resolved. */
 export interface ChannelProblem {
     id: string;
-    code: 'UNKNOWN_PRESET' | 'MISSING_API_KEY_REF' | 'MISSING_FIELD' | 'INVALID_API' | 'UNKNOWN_KEY';
+    code: 'UNKNOWN_PRESET' | 'MISSING_FIELD' | 'INVALID_API' | 'UNKNOWN_KEY';
     detail: string;
 }
 /** Result of resolving a whole configuration's channel map. */
@@ -80,6 +114,25 @@ export interface ChannelResolution {
     /** Entries that could not resolve; each is reported rather than skipped silently. */
     problems: ChannelProblem[];
 }
+/**
+ * The grammar a credential REFERENCE name must match.
+ *
+ * Transcribed from the harness's own credential seam
+ * (`@deepseek-ai/dsh-credentials` → `REF_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/`).
+ *
+ * This plugin no longer WRITES references (the panel stores the key itself), but it still READS
+ * them, and the grammar is what lets the read distinguish the two shapes. A string that cannot be
+ * an environment-variable name cannot be a reference — so when one appears in `apiKeyEnv` it can
+ * only be a value in the wrong slot, which is a repairable configuration error rather than a
+ * mystery.
+ */
+export declare const CREDENTIAL_REF_PATTERN: RegExp;
+/**
+ * Whether a string could name a credential reference at all.
+ * @param value - candidate name.
+ * @returns true when the field can be read as a reference.
+ */
+export declare function isCredentialRefName(value: string): boolean;
 /**
  * Resolve one channel entry.
  *

package/lib/client.js

@@ -117,7 +117,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region \0ad-css:src/client/SettingsPage
-		const css = "/* Panel styles.\n *\n * 🔴 There are NO `--dsw-alias-*` design tokens on this host (measured 2026-10-21: the document\n * declares 29 custom properties and not one is a colour). This file used to reference a dozen of\n * them, every one falling back to a hardcoded LIGHT value (`rgba(0,0,0,0.12)` and friends) — so\n * on the dark theme the borders and dividers were effectively invisible.\n *\n * ⇒ Derive everything from `currentColor`, which the host sets per theme. `color-mix` gives the\n * low-contrast borders and fills that a token would have provided, and it follows the theme\n * automatically instead of assuming one palette.\n */\n\n.ad-page {\n  display: flex;\n  flex-direction: column;\n  gap: 20px;\n  padding: 4px 2px 12px;\n}\n\n/* One place to change the two theme-derived values the whole panel uses. */\n.ad-page {\n  --ad-line: color-mix(in srgb, currentColor 18%, transparent);\n  --ad-line-strong: color-mix(in srgb, currentColor 32%, transparent);\n  --ad-fill-subtle: color-mix(in srgb, currentColor 7%, transparent);\n  --ad-danger: #e5534b;\n}\n\n.ad-head {\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n}\n\n.ad-title {\n  margin: 0;\n  font-size: 15px;\n  font-weight: 600;\n}\n\n.ad-intro {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.6;\n  opacity: 0.72;\n}\n\n.ad-error {\n  border: 1px solid var(--ad-danger);\n  border-radius: 6px;\n  padding: 8px 10px;\n  font-size: 12px;\n}\n\n.ad-section {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n}\n\n.ad-sectionTitle {\n  margin: 0;\n  font-size: 12px;\n  font-weight: 600;\n  letter-spacing: 0.04em;\n  text-transform: uppercase;\n  opacity: 0.6;\n}\n\n.ad-rows {\n  list-style: none;\n  margin: 0;\n  padding: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n}\n\n.ad-row {\n  display: flex;\n  align-items: flex-start;\n  justify-content: space-between;\n  gap: 12px;\n  border: 1px solid var(--ad-line);\n  border-radius: 8px;\n  padding: 10px 12px;\n}\n\n.ad-row-current {\n  border-color: var(--ad-line-strong);\n}\n\n.ad-rowMain {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n  min-width: 0;\n}\n\n.ad-rowTitleLine {\n  display: flex;\n  align-items: center;\n  gap: 6px;\n  font-size: 13px;\n  font-weight: 500;\n}\n\n.ad-rowTitle {\n  white-space: nowrap;\n}\n\n.ad-badge {\n  font-size: 10px;\n  padding: 1px 6px;\n  border-radius: 999px;\n  border: 1px solid currentColor;\n  opacity: 0.8;\n}\n\n.ad-warn {\n  color: #b7791f;\n  cursor: help;\n}\n\n.ad-rowMeta {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 6px;\n  font-size: 11px;\n  opacity: 0.66;\n  min-width: 0;\n}\n\n.ad-mono {\n  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;\n  word-break: break-all;\n}\n\n.ad-sep {\n  opacity: 0.5;\n}\n\n.ad-rowActions {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  flex-shrink: 0;\n}\n\n.ad-btn {\n  font-size: 11px;\n  padding: 4px 10px;\n  border-radius: 6px;\n  border: 1px solid var(--ad-line);\n  background: transparent;\n  color: inherit;\n  cursor: pointer;\n}\n\n.ad-btn:disabled {\n  opacity: 0.45;\n  cursor: default;\n}\n\n.ad-btn-quiet {\n  opacity: 0.8;\n}\n\n.ad-probe {\n  font-size: 11px;\n  padding-top: 2px;\n}\n\n.ad-probe-ok {\n  color: #2f855a;\n}\n\n.ad-probe-bad {\n  color: #c53030;\n  word-break: break-word;\n}\n\n.ad-hint,\n.ad-empty,\n.ad-note {\n  margin: 0;\n  font-size: 11px;\n  line-height: 1.6;\n  opacity: 0.66;\n}\n\n.ad-dot {\n  width: 8px;\n  height: 8px;\n  border-radius: 50%;\n  flex-shrink: 0;\n  display: inline-block;\n}\n\n.ad-dot-on {\n  background: #2f855a;\n}\n\n.ad-dot-off {\n  border: 1px solid currentColor;\n  opacity: 0.5;\n}\n\n.ad-dot-unknown {\n  background: linear-gradient(90deg, currentColor 50%, transparent 50%);\n  opacity: 0.5;\n}\n\n/* The channel row is a radio \"pick\" zone: the whole left side is clickable, and the radio sits\n   at the start of the line so \"which one is live\" is readable down a single column. */\n.ad-rowPick {\n  display: flex;\n  align-items: flex-start;\n  gap: 10px;\n  flex: 1;\n  min-width: 0;\n  cursor: pointer;\n}\n\n.ad-rowPick input[type='radio'] {\n  flex: none;\n  /* Optically centred against the first text line rather than the row box. */\n  margin-top: 3px;\n  accent-color: var(--ad-line-strong);\n  cursor: pointer;\n}\n\n/* The switch is gone: selection is the only axis (see `channels.ts`). Keeping the rules would\n   invite someone to bring the second axis back. */\n\n.ad-tabs {\n  display: flex;\n  gap: 6px;\n}\n\n.ad-tab {\n  font-size: 11px;\n  padding: 3px 10px;\n  border-radius: 999px;\n  border: 1px solid var(--ad-line);\n  background: transparent;\n  color: inherit;\n  cursor: pointer;\n}\n\n.ad-tab-on {\n  border-color: var(--ad-line-strong);\n  font-weight: 600;\n}\n\n.ad-tab-refresh {\n  margin-left: auto;\n  opacity: 0.75;\n}\n\n.ad-table {\n  width: 100%;\n  border-collapse: collapse;\n  font-size: 11px;\n}\n\n.ad-table th,\n.ad-table td {\n  padding: 5px 8px;\n  border-bottom: 1px solid var(--ad-line);\n  text-align: left;\n}\n\n.ad-table th {\n  font-weight: 500;\n  opacity: 0.6;\n}\n\n.ad-num {\n  text-align: right;\n  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;\n}\n\n.ad-total td {\n  font-weight: 600;\n  border-bottom: none;\n}\n\n/* ── add-channel form ─────────────────────────────────────────────────────── */\n\n.ad-addForm {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  border: 1px dashed var(--ad-line);\n  border-radius: 8px;\n  padding: 10px 12px;\n}\n\n.ad-field {\n  display: flex;\n  flex-direction: column;\n  gap: 3px;\n  font-size: 11px;\n}\n\n.ad-field > span {\n  opacity: 0.7;\n}\n\n.ad-input {\n  font-size: 11px;\n  padding: 4px 8px;\n  border-radius: 6px;\n  border: 1px solid var(--ad-line);\n  background: transparent;\n  color: inherit;\n  font-family: inherit;\n}\n\n/*\n * 🔴 A native `<select>` cannot be themed by leaving the background transparent.\n *\n * The popup list is drawn by the browser, not by the closed control's box: the options inherit\n * nothing from it, so `background: transparent` made them render in the platform default (light)\n * palette against this dark theme — reported by the owner and measured on the real host.\n *\n * 🔴 SECOND correction (measured 2026-10-21): this file used `var(--dsw-alias-color-*, #fallback)`\n * throughout, and **none of those variables exist**. The host declares only 29 custom properties\n * in total and not one is a colour token, so every `var()` here was falling back — and a fallback\n * that happens to be set inside a shorthand can be silently dropped (the select's background\n * computed to `rgba(0,0,0,0)`, i.e. still transparent, which is exactly the bug).\n *\n * ⇒ Use only values this file controls, derived from `currentColor` (the host sets a light text\n * colour on both themes) plus explicit translucent layers. No host token is assumed.\n */\nselect.ad-input {\n  /* Tells the engine which palette to use for the popup. This part DID work. */\n  color-scheme: dark light;\n  /*\n   * Paint the closed box with a layer that follows the surrounding text colour, so it matches\n   * whichever theme is active instead of hardcoding a dark value into a light theme.\n   */\n  background-color: color-mix(in srgb, currentColor 8%, transparent);\n  color: inherit;\n  cursor: pointer;\n  padding-right: 22px;\n  /* Room for the chevron drawn below, so text never runs under it. */\n  appearance: none;\n  background-image: linear-gradient(45deg, transparent 50%, currentColor 50%),\n    linear-gradient(135deg, currentColor 50%, transparent 50%);\n  background-position: calc(100% - 12px) calc(50% + 1px), calc(100% - 8px) calc(50% + 1px);\n  background-size: 4px 4px, 4px 4px;\n  background-repeat: no-repeat;\n}\n\nselect.ad-input:hover:not(:disabled) {\n  background-color: color-mix(in srgb, currentColor 14%, transparent);\n}\n\nselect.ad-input:focus-visible {\n  outline: 2px solid currentColor;\n  outline-offset: 1px;\n}\n\n/*\n * The popup itself follows `color-scheme`; these keep the option rows explicit for engines that\n * honour per-option colours. `color-scheme: dark` above is what actually stops the light-on-dark\n * list, because the popup is native chrome rather than a styled element.\n */\nselect.ad-input option {\n  background-color: Canvas;\n  color: CanvasText;\n}\n\n.ad-fieldError {\n  margin: 0;\n  font-size: 11px;\n  color: #c53030;\n}\n\n/* A destructive action is quiet until hovered: it should be findable, not inviting. */\n.ad-btn-danger {\n  opacity: 0.6;\n}\n\n.ad-btn-danger:hover:not(:disabled) {\n  opacity: 1;\n  border-color: var(--ad-danger);\n  color: var(--ad-danger);\n}\n";
+		const css = "/* Panel styles.\n *\n * 🔴 There are NO `--dsw-alias-*` design tokens on this host (measured 2026-10-21: the document\n * declares 29 custom properties and not one is a colour). This file used to reference a dozen of\n * them, every one falling back to a hardcoded LIGHT value (`rgba(0,0,0,0.12)` and friends) — so\n * on the dark theme the borders and dividers were effectively invisible.\n *\n * ⇒ Derive everything from `currentColor`, which the host sets per theme. `color-mix` gives the\n * low-contrast borders and fills that a token would have provided, and it follows the theme\n * automatically instead of assuming one palette.\n */\n\n.ad-page {\n  display: flex;\n  flex-direction: column;\n  gap: 20px;\n  padding: 4px 2px 12px;\n}\n\n/* One place to change the two theme-derived values the whole panel uses. */\n.ad-page {\n  --ad-line: color-mix(in srgb, currentColor 18%, transparent);\n  --ad-line-strong: color-mix(in srgb, currentColor 32%, transparent);\n  --ad-fill-subtle: color-mix(in srgb, currentColor 7%, transparent);\n  --ad-danger: #e5534b;\n}\n\n.ad-head {\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n}\n\n.ad-title {\n  margin: 0;\n  font-size: 15px;\n  font-weight: 600;\n}\n\n.ad-intro {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.6;\n  opacity: 0.72;\n}\n\n.ad-error {\n  border: 1px solid var(--ad-danger);\n  border-radius: 6px;\n  padding: 8px 10px;\n  font-size: 12px;\n}\n\n.ad-section {\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n}\n\n.ad-sectionTitle {\n  margin: 0;\n  font-size: 12px;\n  font-weight: 600;\n  letter-spacing: 0.04em;\n  text-transform: uppercase;\n  opacity: 0.6;\n}\n\n.ad-rows {\n  list-style: none;\n  margin: 0;\n  padding: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n}\n\n.ad-row {\n  display: flex;\n  align-items: flex-start;\n  justify-content: space-between;\n  gap: 12px;\n  border: 1px solid var(--ad-line);\n  border-radius: 8px;\n  padding: 10px 12px;\n}\n\n.ad-row-current {\n  border-color: var(--ad-line-strong);\n}\n\n.ad-rowMain {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n  min-width: 0;\n}\n\n.ad-rowTitleLine {\n  display: flex;\n  align-items: center;\n  gap: 6px;\n  font-size: 13px;\n  font-weight: 500;\n}\n\n.ad-rowTitle {\n  white-space: nowrap;\n}\n\n.ad-badge {\n  font-size: 10px;\n  padding: 1px 6px;\n  border-radius: 999px;\n  border: 1px solid currentColor;\n  opacity: 0.8;\n}\n\n.ad-warn {\n  color: #b7791f;\n  cursor: help;\n}\n\n.ad-rowMeta {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 6px;\n  font-size: 11px;\n  opacity: 0.66;\n  min-width: 0;\n}\n\n.ad-mono {\n  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;\n  word-break: break-all;\n}\n\n.ad-sep {\n  opacity: 0.5;\n}\n\n.ad-rowActions {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  flex-shrink: 0;\n}\n\n.ad-btn {\n  font-size: 11px;\n  padding: 4px 10px;\n  border-radius: 6px;\n  border: 1px solid var(--ad-line);\n  background: transparent;\n  color: inherit;\n  cursor: pointer;\n}\n\n.ad-btn:disabled {\n  opacity: 0.45;\n  cursor: default;\n}\n\n.ad-btn-quiet {\n  opacity: 0.8;\n}\n\n.ad-probe {\n  font-size: 11px;\n  padding-top: 2px;\n}\n\n.ad-probe-ok {\n  color: #2f855a;\n}\n\n.ad-probe-bad {\n  color: #c53030;\n  word-break: break-word;\n}\n\n.ad-hint,\n.ad-empty,\n.ad-note {\n  margin: 0;\n  font-size: 11px;\n  line-height: 1.6;\n  opacity: 0.66;\n}\n\n.ad-dot {\n  width: 8px;\n  height: 8px;\n  border-radius: 50%;\n  flex-shrink: 0;\n  display: inline-block;\n}\n\n.ad-dot-on {\n  background: #2f855a;\n}\n\n.ad-dot-off {\n  border: 1px solid currentColor;\n  opacity: 0.5;\n}\n\n.ad-dot-unknown {\n  background: linear-gradient(90deg, currentColor 50%, transparent 50%);\n  opacity: 0.5;\n}\n\n/* The channel row is a radio \"pick\" zone: the whole left side is clickable, and the radio sits\n   at the start of the line so \"which one is live\" is readable down a single column. */\n.ad-rowPick {\n  display: flex;\n  align-items: flex-start;\n  gap: 10px;\n  flex: 1;\n  min-width: 0;\n  cursor: pointer;\n}\n\n.ad-rowPick input[type='radio'] {\n  flex: none;\n  /* Optically centred against the first text line rather than the row box. */\n  margin-top: 3px;\n  accent-color: var(--ad-line-strong);\n  cursor: pointer;\n}\n\n/* The switch is gone: selection is the only axis (see `channels.ts`). Keeping the rules would\n   invite someone to bring the second axis back. */\n\n.ad-tabs {\n  display: flex;\n  gap: 6px;\n}\n\n.ad-tab {\n  font-size: 11px;\n  padding: 3px 10px;\n  border-radius: 999px;\n  border: 1px solid var(--ad-line);\n  background: transparent;\n  color: inherit;\n  cursor: pointer;\n}\n\n.ad-tab-on {\n  border-color: var(--ad-line-strong);\n  font-weight: 600;\n}\n\n.ad-tab-refresh {\n  margin-left: auto;\n  opacity: 0.75;\n}\n\n.ad-table {\n  width: 100%;\n  border-collapse: collapse;\n  font-size: 11px;\n}\n\n.ad-table th,\n.ad-table td {\n  padding: 5px 8px;\n  border-bottom: 1px solid var(--ad-line);\n  text-align: left;\n}\n\n.ad-table th {\n  font-weight: 500;\n  opacity: 0.6;\n}\n\n.ad-num {\n  text-align: right;\n  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;\n}\n\n.ad-total td {\n  font-weight: 600;\n  border-bottom: none;\n}\n\n/* ── add-channel form ─────────────────────────────────────────────────────── */\n\n.ad-addForm {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  border: 1px dashed var(--ad-line);\n  border-radius: 8px;\n  padding: 10px 12px;\n}\n\n.ad-field {\n  display: flex;\n  flex-direction: column;\n  gap: 3px;\n  font-size: 11px;\n}\n\n.ad-field > span {\n  opacity: 0.7;\n}\n\n.ad-input {\n  font-size: 11px;\n  padding: 4px 8px;\n  border-radius: 6px;\n  border: 1px solid var(--ad-line);\n  background: transparent;\n  color: inherit;\n  font-family: inherit;\n}\n\n/*\n * 🔴 A native `<select>` cannot be themed by leaving the background transparent.\n *\n * The popup list is drawn by the browser, not by the closed control's box: the options inherit\n * nothing from it, so `background: transparent` made them render in the platform default (light)\n * palette against this dark theme — reported by the owner and measured on the real host.\n *\n * 🔴 SECOND correction (measured 2026-10-21): this file used `var(--dsw-alias-color-*, #fallback)`\n * throughout, and **none of those variables exist**. The host declares only 29 custom properties\n * in total and not one is a colour token, so every `var()` here was falling back — and a fallback\n * that happens to be set inside a shorthand can be silently dropped (the select's background\n * computed to `rgba(0,0,0,0)`, i.e. still transparent, which is exactly the bug).\n *\n * ⇒ Use only values this file controls, derived from `currentColor` (the host sets a light text\n * colour on both themes) plus explicit translucent layers. No host token is assumed.\n */\nselect.ad-input {\n  /* Tells the engine which palette to use for the popup. This part DID work. */\n  color-scheme: dark light;\n  /*\n   * Paint the closed box with a layer that follows the surrounding text colour, so it matches\n   * whichever theme is active instead of hardcoding a dark value into a light theme.\n   */\n  background-color: color-mix(in srgb, currentColor 8%, transparent);\n  color: inherit;\n  cursor: pointer;\n  padding-right: 22px;\n  /* Room for the chevron drawn below, so text never runs under it. */\n  appearance: none;\n  background-image: linear-gradient(45deg, transparent 50%, currentColor 50%),\n    linear-gradient(135deg, currentColor 50%, transparent 50%);\n  background-position: calc(100% - 12px) calc(50% + 1px), calc(100% - 8px) calc(50% + 1px);\n  background-size: 4px 4px, 4px 4px;\n  background-repeat: no-repeat;\n}\n\nselect.ad-input:hover:not(:disabled) {\n  background-color: color-mix(in srgb, currentColor 14%, transparent);\n}\n\nselect.ad-input:focus-visible {\n  outline: 2px solid currentColor;\n  outline-offset: 1px;\n}\n\n/*\n * The popup itself follows `color-scheme`; these keep the option rows explicit for engines that\n * honour per-option colours. `color-scheme: dark` above is what actually stops the light-on-dark\n * list, because the popup is native chrome rather than a styled element.\n */\nselect.ad-input option {\n  background-color: Canvas;\n  color: CanvasText;\n}\n\n.ad-fieldError {\n  margin: 0;\n  font-size: 11px;\n  color: #c53030;\n}\n\n/* ── key row ──────────────────────────────────────────────────────────────── */\n\n/*\n * The key line states a FACT and offers the fix beside it: \"configured / not configured\",\n * the reference name the secret is filed under, and one text button that opens the input.\n *\n * The value is never shown — the harness credential seam answers \"configured?\" and refuses to\n * answer anything else, so there is nothing to render even if we wanted to.\n */\n.ad-keyLine {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 6px;\n  font-size: 11px;\n  padding-top: 2px;\n}\n\n.ad-keyOn {\n  color: #2f855a;\n}\n\n.ad-keyOff {\n  color: #b7791f;\n}\n\n/* The reference name, not a secret: monospace so it lines up and misreads as a name, not a value. */\n.ad-keyName {\n  font-size: 10px;\n  padding: 1px 5px;\n  border-radius: 4px;\n  background: var(--ad-fill-subtle);\n  opacity: 0.8;\n}\n\n/* A text-shaped action. Styled as a link because it opens an inline editor, not a dialog. */\n.ad-link {\n  font-size: 11px;\n  padding: 0;\n  border: none;\n  background: none;\n  color: inherit;\n  text-decoration: underline;\n  text-underline-offset: 2px;\n  opacity: 0.75;\n  cursor: pointer;\n}\n\n.ad-link:hover {\n  opacity: 1;\n}\n\n/* The inline key editor: one masked field and one button, on the same line as the fact above. */\n.ad-keyForm {\n  display: flex;\n  align-items: center;\n  gap: 6px;\n  padding-top: 4px;\n}\n\n.ad-keyForm .ad-input {\n  flex: 1;\n  min-width: 0;\n}\n\n/* A destructive action is quiet until hovered: it should be findable, not inviting. */\n.ad-btn-danger {\n  opacity: 0.6;\n}\n\n.ad-btn-danger:hover:not(:disabled) {\n  opacity: 1;\n  border-color: var(--ad-danger);\n  color: var(--ad-danger);\n}\n";
 		if (typeof document !== "undefined" && document.querySelector("style[data-ad-css=\"SettingsPage\"]") === null) {
 			const tag = document.createElement("style");
 			tag.setAttribute("data-ad-css", "SettingsPage");
@@ -146,19 +146,6 @@ window.__ModuleLoader__.load({
 			}
 			return `${presetId}-${Date.now()}`;
 		}
-		/**
-		* The credential reference name a preset conventionally uses.
-		*
-		* This is a CONVENTION, not a lookup: the reference is just the environment-variable name the
-		* user's key is stored under, and any name works. Pre-filling the conventional one saves typing;
-		* `OPEN_DESIGN` → `OPEN_DESIGN_API_KEY`.
-		* @param presetId - the chosen preset.
-		* @returns the suggested reference name ('' when no preset is chosen).
-		*/
-		function suggestKeyRef(presetId) {
-			if (presetId === "") return "";
-			return `${presetId.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_API_KEY`;
-		}
 		/** A status dot: filled when confirmed configured, hollow when confirmed absent, half otherwise. */
 		function KeyDot(props) {
 			const state = props.known ? props.configured ? "on" : "off" : "unknown";
@@ -187,16 +174,19 @@ window.__ModuleLoader__.load({
 			const [adding, setAdding] = (0, react.useState)(false);
 			const [newId, setNewId] = (0, react.useState)("");
 			const [newPreset, setNewPreset] = (0, react.useState)("");
-			const [newKeyRef, setNewKeyRef] = (0, react.useState)("");
 			/**
-			* The reference name the form last derived from a preset.
+			* The key the user typed in the add form.
 			*
-			* Needed to tell "the user never touched this field" from "the user typed it": only a value that
-			* still equals the last suggestion may be replaced when the preset changes. Without it,
-			* switching presets after typing a custom reference would silently discard the user's input.
+			* One field, one meaning: the value goes into the channel entry as `apiKey`. There is no
+			* separate "reference name" any more — that pairing (a name the user had to invent, plus a
+			* second store to hold the value) was the design the owner rejected.
 			*/
-			const lastSuggestedKeyRef = (0, react.useRef)("");
-			/** Same idea for the derived channel id (see the select's onChange). */
+			const [newSecret, setNewSecret] = (0, react.useState)("");
+			/** Which channel currently has its inline key field open (null = none). */
+			const [keying, setKeying] = (0, react.useState)(null);
+			const [keyDraft, setKeyDraft] = (0, react.useState)("");
+			const [keySaving, setKeySaving] = (0, react.useState)(false);
+			/** The channel id the form last derived from a preset (see the select's onChange). */
 			const lastSuggestedId = (0, react.useRef)("");
 			const refresh = (0, react.useCallback)(async () => {
 				const [loaded, statsNow] = await Promise.all([loadChannels(), loadStats(group)]);
@@ -265,22 +255,22 @@ window.__ModuleLoader__.load({
 			/**
 			* Create one channel from the form.
 			*
-			* Writes only the fields the user actually chose: a preset-backed channel needs nothing but
-			* a key reference, and pre-filling endpoint fields would freeze today's preset values into the
-			* user's document (later preset fixes would never reach them).
+			* ONE write, one store. The key goes into the channel entry as `apiKey`, beside the preset id —
+			* there is no second store to keep in step, so there is no ordering to get wrong and no way for
+			* "channel exists but its key does not" to be a reachable state. Pre-filling endpoint fields is
+			* still avoided: a preset-backed channel records the preset, so later preset fixes reach it.
 			*/
 			const addChannel = () => {
 				const id = newId.trim();
-				if (newPreset === "" || id === "" || newIdProblem !== null || newKeyRef.trim() === "") return;
+				if (newPreset === "" || id === "" || newIdProblem !== null || newSecret.trim() === "") return;
 				write(() => setField(["channels", id], {
 					preset: newPreset,
-					apiKeyEnv: newKeyRef.trim()
+					apiKey: newSecret.trim()
 				}), "添加渠道失败");
 				if (current === "") write(() => setField(["current"], id), "设为当前渠道失败");
+				setNewSecret("");
 				setNewId("");
-				setNewKeyRef("");
 				setNewPreset("");
-				lastSuggestedKeyRef.current = "";
 				lastSuggestedId.current = "";
 				setAdding(false);
 			};
@@ -288,6 +278,40 @@ window.__ModuleLoader__.load({
 				write(() => removeField(["channels", id]), "移除渠道失败");
 				if (current === id) write(() => removeField(["current"]), "清除当前选择失败");
 			};
+			/**
+			* Store one channel's key from the inline field.
+			*
+			* The "I have the key / mine changed" path. It is a plain settings write to
+			* `channels.<id>.apiKey`, which means it inherits everything the rest of the panel already
+			* relies on: a real path (not a dotted string), a visible refusal, and the host's own
+			* validation. Nothing is consulted, resolved or named.
+			*
+			* A legacy entry whose key lives in `apiKeyEnv` is handled by the runtime, not here: that field
+			* is read as a literal key when it cannot be a reference name, so the user's first typed key
+			* simply supersedes it.
+			* @param row - the channel whose key is being set.
+			*/
+			const saveKey = async (row) => {
+				setKeySaving(true);
+				try {
+					if (!await setField([
+						"channels",
+						row.id,
+						"apiKey"
+					], keyDraft.trim())) {
+						setError("保存密钥失败：宿主拒绝了这个修改");
+						return;
+					}
+					setError(null);
+					setKeyDraft("");
+					setKeying(null);
+					await refresh();
+				} catch (cause) {
+					setError(`保存密钥失败：${cause instanceof Error ? cause.message : String(cause)}`);
+				} finally {
+					setKeySaving(false);
+				}
+			};
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "ad-page",
 				children: [
@@ -392,6 +416,55 @@ window.__ModuleLoader__.load({
 													probeResult !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 														className: `ad-probe ad-probe-${probeResult.ok ? "ok" : "bad"}`,
 														children: probeResult.ok ? `通（${probeResult.ms}ms）` : `不通：${probeResult.code ?? "ERROR"}${probeResult.message === void 0 ? "" : ` — ${probeResult.message}`}`
+													}),
+													row.keyConfigured ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+														className: "ad-keyLine",
+														children: [
+															/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+																className: "ad-keyOn",
+																children: "密钥已配置"
+															}),
+															row.keyKind === "reference" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+																className: "ad-mono ad-keyName",
+																children: row.keyRef
+															}),
+															/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+																type: "button",
+																className: "ad-link",
+																onClick: () => setKeying(keying === row.id ? null : row.id),
+																children: keying === row.id ? "取消" : "更换"
+															})
+														]
+													}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+														className: "ad-keyLine",
+														children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+															className: "ad-keyOff",
+															children: "未配置密钥"
+														}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+															type: "button",
+															className: "ad-link",
+															onClick: () => setKeying(keying === row.id ? null : row.id),
+															children: keying === row.id ? "取消" : "填写密钥"
+														})]
+													}),
+													keying === row.id && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+														className: "ad-keyForm",
+														children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+															className: "ad-input",
+															type: "password",
+															autoComplete: "off",
+															value: keyDraft,
+															placeholder: "粘贴 key 本体",
+															onChange: (event) => setKeyDraft(event.target.value)
+														}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+															type: "button",
+															className: "ad-btn",
+															disabled: keyDraft.trim() === "" || keySaving,
+															onClick: () => {
+																saveKey(row);
+															},
+															children: keySaving ? "保存中…" : "保存密钥"
+														})]
 													})
 												]
 											})]
@@ -428,13 +501,9 @@ window.__ModuleLoader__.load({
 												const next = event.target.value;
 												setNewPreset(next);
 												const previousId = lastSuggestedId.current;
-												const previousKey = lastSuggestedKeyRef.current;
 												const nextId = suggestId(next, rows);
-												const nextKey = suggestKeyRef(next);
 												setNewId((current) => current === "" || current === previousId ? nextId : current);
-												setNewKeyRef((current) => current === "" || current === previousKey ? nextKey : current);
 												lastSuggestedId.current = nextId;
-												lastSuggestedKeyRef.current = nextKey;
 											},
 											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
 												value: "",
@@ -460,19 +529,26 @@ window.__ModuleLoader__.load({
 									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 										className: "ad-field",
-										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: "凭据引用名" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: "密钥" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 											className: "ad-input",
-											value: newKeyRef,
-											placeholder: newPreset === "" ? "例如 OPENCODE_GO_API_KEY" : suggestKeyRef(newPreset),
-											onChange: (event) => setNewKeyRef(event.target.value)
+											type: "password",
+											autoComplete: "off",
+											value: newSecret,
+											placeholder: newPreset === "" ? "先选上面的规格" : "sk-…",
+											onChange: (event) => setNewSecret(event.target.value)
 										})]
 									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 										className: "ad-hint",
 										children: [
-											"这里填的是",
-											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: "引用名" }),
-											"（环境变量名），不是密钥本身。密钥请通过凭据中心设置。"
+											"密钥写在本机 profile 配置里（",
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												className: "ad-mono",
+												children: "channels.<id>.apiKey"
+											}),
+											"）。 它",
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: "不" }),
+											"外传，但会因为配置文件而被看到——别把这个 profile 分享出去。"
 										]
 									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -480,7 +556,7 @@ window.__ModuleLoader__.load({
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
 											className: "ad-btn",
-											disabled: newPreset === "" || newId.trim() === "" || newIdProblem !== null || newKeyRef.trim() === "",
+											disabled: newPreset === "" || newId.trim() === "" || newIdProblem !== null || newSecret.trim() === "",
 											onClick: addChannel,
 											children: "添加"
 										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
@@ -497,7 +573,6 @@ window.__ModuleLoader__.load({
 								onClick: () => {
 									setAdding(true);
 									lastSuggestedId.current = "";
-									lastSuggestedKeyRef.current = "";
 								},
 								children: "添加渠道"
 							}),

package/lib/config.d.ts

@@ -41,6 +41,9 @@ export interface ChannelConfigInput {
     api?: string;
     baseURL?: string;
     model?: string;
+    /** The key itself, stored in the channel entry. The panel writes this. */
+    apiKey?: string;
+    /** Legacy: a credential reference name, resolved through the harness seam / environment. */
     apiKeyEnv?: string;
     contextWindow?: number;
     maxTokens?: number;
@@ -61,6 +64,7 @@ export interface ChannelConfigValue {
     readonly api?: string;
     readonly baseURL?: string;
     readonly model?: string;
+    readonly apiKey?: string;
     readonly apiKeyEnv?: string;
     readonly contextWindow?: number;
     readonly maxTokens?: number;
@@ -73,9 +77,26 @@ export interface ChannelConfigValue {
  * One channel entry schema.
  *
  * Fields split into two groups the panel treats differently:
- *  - the key group (`apiKeyEnv`) — the only thing a user must supply for a preset channel;
+ *  - the key group (`apiKey`) — the only thing a user must supply for a preset channel;
  *  - the endpoint group (`api` / `baseURL` / `model` / capacities) — filled from a preset, or
  *    declared by hand for a custom channel.
+ *
+ * ## Why the key is stored here and not behind a reference
+ *
+ * This plugin used to take a credential REFERENCE NAME and store the value through
+ * `ctx.remote.credentials`. Owner decision 2026-10-21: store the key in the entry itself.
+ *
+ * The price is explicit and accepted, recorded here so nobody rediscovers it as a bug:
+ *  · `dsh --dump-config` renders patch layers verbatim and does NOT redact — a key in the
+ *    configuration tree prints in full in diagnostics and diffs;
+ *  · the environment-injection path (`-e SOME_KEY=…`) no longer reaches this plugin, because
+ *    nothing resolves a name any more; a container run must carry the value in the profile.
+ * What it buys: one storage location, no invented naming layer, and a panel that asks only for
+ * the thing the user actually has.
+ *
+ * `role('secret')` is still declared. It does nothing for `dump-config` (measured: that path has
+ * no redaction hook), but it makes the REMOTE settings read strip the field, so the browser form
+ * never receives a value it did not type.
  */
 export declare const ChannelConfigSchema: SchemaOf<ChannelConfigInput, ChannelConfigValue>;
 /** Ledger settings. */

package/lib/http.d.ts

@@ -23,7 +23,7 @@ export declare const ROUTE_PREFIX = "/any-deepseek";
 export interface RouteDeps {
     /** Every resolved channel, in configuration order. */
     channels: () => readonly ResolvedChannel[];
-    /** Resolve a credential reference to its value. */
+    /** Resolve a credential REFERENCE to its value (legacy entries only). */
     resolveKey: (ref: string) => Promise<string | undefined>;
     /** Preset ids and labels for the "add channel" picker. */
     listPresets: () => Array<{

package/lib/index.js

@@ -43,9 +43,26 @@ import { appendFile, mkdir, readFile, readdir } from "node:fs/promises";
 * One channel entry schema.
 *
 * Fields split into two groups the panel treats differently:
-*  - the key group (`apiKeyEnv`) — the only thing a user must supply for a preset channel;
+*  - the key group (`apiKey`) — the only thing a user must supply for a preset channel;
 *  - the endpoint group (`api` / `baseURL` / `model` / capacities) — filled from a preset, or
 *    declared by hand for a custom channel.
+*
+* ## Why the key is stored here and not behind a reference
+*
+* This plugin used to take a credential REFERENCE NAME and store the value through
+* `ctx.remote.credentials`. Owner decision 2026-10-21: store the key in the entry itself.
+*
+* The price is explicit and accepted, recorded here so nobody rediscovers it as a bug:
+*  · `dsh --dump-config` renders patch layers verbatim and does NOT redact — a key in the
+*    configuration tree prints in full in diagnostics and diffs;
+*  · the environment-injection path (`-e SOME_KEY=…`) no longer reaches this plugin, because
+*    nothing resolves a name any more; a container run must carry the value in the profile.
+* What it buys: one storage location, no invented naming layer, and a panel that asks only for
+* the thing the user actually has.
+*
+* `role('secret')` is still declared. It does nothing for `dump-config` (measured: that path has
+* no redaction hook), but it makes the REMOTE settings read strip the field, so the browser form
+* never receives a value it did not type.
 */
 const ChannelConfigSchema = z.object({
 	/** Label shown in the panel; falls back to the preset's display name, then the id. */
@@ -55,7 +72,8 @@ const ChannelConfigSchema = z.object({
 	api: z.string().description("接口协议：openai-completions（默认）/ openai-responses / anthropic-messages"),
 	baseURL: z.string().description("端点根地址"),
 	model: z.string().description("上游模型 id（各家拼写不同，必填）"),
-	apiKeyEnv: z.string().description("凭据引用名（环境变量名）；真实 key 存在凭据库里，不落配置"),
+	apiKey: z.string().role("secret").description("密钥本体（面板里粘贴，写在这条渠道上）"),
+	apiKeyEnv: z.string().description("旧式：凭据引用名（环境变量名）。仅当 apiKey 为空时才用"),
 	contextWindow: z.number().description("上下文窗口（tokens）"),
 	maxTokens: z.number().description("单次输出上限（tokens）"),
 	input: z.array(z.union([z.const("text"), z.const("image")])).description("输入模态"),
@@ -276,6 +294,7 @@ const KNOWN_KEYS = /* @__PURE__ */ new Set([
 	"api",
 	"baseURL",
 	"model",
+	"apiKey",
 	"apiKeyEnv",
 	"enabled",
 	"contextWindow",
@@ -293,6 +312,27 @@ function nonEmpty(value) {
 	const trimmed = value.trim();
 	return trimmed === "" ? void 0 : trimmed;
 }
+/**
+* The grammar a credential REFERENCE name must match.
+*
+* Transcribed from the harness's own credential seam
+* (`@deepseek-ai/dsh-credentials` → `REF_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/`).
+*
+* This plugin no longer WRITES references (the panel stores the key itself), but it still READS
+* them, and the grammar is what lets the read distinguish the two shapes. A string that cannot be
+* an environment-variable name cannot be a reference — so when one appears in `apiKeyEnv` it can
+* only be a value in the wrong slot, which is a repairable configuration error rather than a
+* mystery.
+*/
+const CREDENTIAL_REF_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+* Whether a string could name a credential reference at all.
+* @param value - candidate name.
+* @returns true when the field can be read as a reference.
+*/
+function isCredentialRefName(value) {
+	return CREDENTIAL_REF_PATTERN.test(value);
+}
 function positiveInt(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : void 0;
 }
@@ -334,14 +374,31 @@ function resolveChannel(id, raw) {
 			detail: `unknown channel field "${key}"`
 		}
 	};
-	const apiKeyEnv = nonEmpty(entry.apiKeyEnv);
-	if (apiKeyEnv === void 0) return {
-		ok: false,
-		problem: {
-			id,
-			code: "MISSING_API_KEY_REF",
-			detail: "apiKeyEnv is required: a channel without a credential reference cannot authenticate"
-		}
+	/**
+	* How this channel authenticates — never a reason to fail resolution.
+	*
+	* 🔴 A channel with no key still RESOLVES. The panel has to be able to show it (that is how the
+	* user gets to fix it), and the model directory must not depend on a secret being present
+	* (decision 26: a provider that vanishes when unconfigured looks exactly like one that is not
+	* installed). A missing key is answered per request — `MISSING_CREDENTIAL` — and per row.
+	*
+	* Migration, by grammar: `apiKey` wins when present. Otherwise `apiKeyEnv` is read as a
+	* reference ONLY when it matches the host's reference grammar. A string that cannot be a name
+	* is a key in the wrong slot — an observed state, since the previous version of this panel
+	* asked for a name and one user's YAML holds `sk-…` there. Adopting it is a repair, not a
+	* guess: no environment variable can have that spelling.
+	*/
+	const literal = nonEmpty(entry.apiKey);
+	const legacy = nonEmpty(entry.apiKeyEnv);
+	const credential = literal !== void 0 ? {
+		kind: "literal",
+		value: literal
+	} : legacy === void 0 ? { kind: "none" } : isCredentialRefName(legacy) ? {
+		kind: "reference",
+		ref: legacy
+	} : {
+		kind: "literal",
+		value: legacy
 	};
 	const presetId = nonEmpty(entry.preset);
 	const preset = presetId === void 0 ? void 0 : presetById(presetId);
@@ -396,7 +453,8 @@ function resolveChannel(id, raw) {
 			api: apiRaw,
 			baseURL,
 			model,
-			apiKeyEnv,
+			credential,
+			...presetId === void 0 ? {} : { preset: presetId },
 			contextWindow,
 			maxTokens,
 			input,
@@ -993,7 +1051,7 @@ var AnyDeepSeekAdapter = class extends LlmAdapter {
 			return;
 		}
 		channel = selection.channel;
-		const key = await this.deps.resolveKey(channel.apiKeyEnv);
+		const key = channel.credential.kind === "literal" ? channel.credential.value : channel.credential.kind === "reference" ? await this.deps.resolveKey(channel.credential.ref) : void 0;
 		if (key === void 0 || key === "") {
 			outcome = {
 				ok: false,
@@ -1005,7 +1063,7 @@ var AnyDeepSeekAdapter = class extends LlmAdapter {
 				reason: {
 					kind: "error",
 					failure: {
-						message: `no credential is configured for channel "${channel.id}" (reference ${channel.apiKeyEnv})`,
+						message: `channel "${channel.id}" has no key configured`,
 						code: "MISSING_CREDENTIAL"
 					}
 				}
@@ -1441,7 +1499,19 @@ function registerStatsRoutes(ctx, webServer, deps) {
 			handler: async (_req, res) => {
 				json(res, 200, {
 					channels: await Promise.all(deps.channels().map(async (channel) => {
-						const key = await deps.describeKey(channel.apiKeyEnv);
+						/**
+						* 🔴 The key is a property of the CHANNEL now, so "is one configured?" is answered
+						* without consulting any credential store. A legacy reference still asks the harness,
+						* and that answer is the only thing the panel ever learns about a reference: whether
+						* it exists.
+						*/
+						const key = channel.credential.kind === "literal" ? {
+							configured: channel.credential.value !== "",
+							source: "channel"
+						} : channel.credential.kind === "reference" ? await deps.describeKey(channel.credential.ref) : {
+							configured: false,
+							source: void 0
+						};
 						return {
 							id: channel.id,
 							label: channel.label,
@@ -1453,7 +1523,9 @@ function registerStatsRoutes(ctx, webServer, deps) {
 							input: [...channel.input],
 							warnings: [...channel.warnings],
 							keyConfigured: key.configured,
-							...key.source === void 0 ? {} : { keySource: key.source }
+							...key.source === void 0 ? {} : { keySource: key.source },
+							keyKind: channel.credential.kind,
+							...channel.credential.kind === "reference" ? { keyRef: channel.credential.ref } : {}
 						};
 					})),
 					presets: deps.listPresets(),
@@ -1505,13 +1577,13 @@ function registerStatsRoutes(ctx, webServer, deps) {
 				}
 				const channel = deps.channels().find((candidate) => candidate.id === id);
 				if (channel === void 0) {
-					json(res, 404, { error: `no enabled channel named "${id}"` });
+					json(res, 404, { error: `no channel named "${id}"` });
 					return;
 				}
-				const key = await deps.resolveKey(channel.apiKeyEnv);
+				const key = channel.credential.kind === "literal" ? channel.credential.value : channel.credential.kind === "reference" ? await deps.resolveKey(channel.credential.ref) : void 0;
 				if (key === void 0 || key === "") {
 					json(res, 409, {
-						error: `channel "${id}" has no configured credential`,
+						error: `channel "${id}" has no key configured`,
 						code: "MISSING_CREDENTIAL"
 					});
 					return;
@@ -1596,7 +1668,11 @@ function makeRecorder(ctx, config) {
 */
 function apply(ctx, config) {
 	const credentials = () => service(ctx, "credentials");
-	/** Resolve a credential reference, distinguishing "absent" from "not configured". */
+	/**
+	* Resolve a credential REFERENCE, distinguishing "absent" from "not configured".
+	*
+	* Only legacy channels reach this: a channel that stores its own key never asks the seam.
+	*/
 	const resolveKey = async (ref) => {
 		const seam = credentials();
 		if (seam?.resolve === void 0) return process.env[ref];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-any-deepseek",
-  "version": "0.0.5",
+  "version": "0.0.6",
   "description": "One DeepSeek V4.1 Flash provider for DeepSeek Harness: paste a key per channel, switch channels manually, token usage booked per real upstream.",
   "license": "MIT",
   "repository": {