dsh-connect 0.7.2 → 0.9.0

package/lib/settings/rpc-client.js

@@ -0,0 +1,45 @@
+/**
+ * Client-side RPC helper for the dsh-connect web settings pane.
+ *
+ * The frontend talks to the host over the `/dsh-connect` channel; the channel
+ * returns `{ ok, value }`/`{ ok:false, error }` envelopes (see `settings-rpc.js`).
+ * This helper unwraps the envelope and throws a typed error on failure, so the
+ * UI can catch it and render a message. Pure + dependency-free for easy testing.
+ *
+ * @module dsh-connect/settings/rpc-client
+ */
+/** A typed RPC failure, surfaced to the settings UI. */
+export class RpcError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "RpcError";
+        this.code = code;
+    }
+}
+/** Invoke one endpoint and unwrap the envelope (throws `RpcError` on failure). */
+export function callRpc(rpcCall, endpoint, payload, signal) {
+    return rpcCall(endpoint, payload, signal).then((res) => {
+        if (res.ok)
+            return res.value;
+        const code = res.error?.code ?? "settings-failed";
+        throw new RpcError(code, res.error?.message ?? code);
+    });
+}
+/** Load the current settings snapshot via `settings.get`. */
+export function loadSettings(rpcCall) {
+    return callRpc(rpcCall, "settings.get", {});
+}
+/** Persist the settings via `settings.save`. */
+export function saveSettings(rpcCall, config) {
+    return callRpc(rpcCall, "settings.save", config);
+}
+/** Persist channel secrets to the credential store via `credentials.save`. */
+export function saveCredentials(rpcCall, channel, values) {
+    return callRpc(rpcCall, "credentials.save", { channel, values });
+}
+/** Ask the host for a fresh status snapshot via `settings.status`. */
+export function loadStatus(rpcCall) {
+    return callRpc(rpcCall, "settings.status", {});
+}
+//# sourceMappingURL=rpc-client.js.map

package/lib/settings/rpc-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-client.js","sourceRoot":"","sources":["../../src/settings/rpc-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,wDAAwD;AACxD,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,OAAO,CACrB,OAAgB,EAChB,QAAgB,EAChB,OAAiB,EACjB,MAAoB;IAEpB,OAAO,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACrD,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,KAAU,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,iBAAiB,CAAC;QAClD,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,OAAO,OAAO,CAAmB,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY,CAAC,OAAgB,EAAE,MAA+B;IAC5E,OAAO,OAAO,CAAmB,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAC7B,OAAgB,EAChB,OAAe,EACf,MAA8B;IAE9B,OAAO,OAAO,CAAmB,OAAO,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,OAAO,OAAO,CAAmB,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/lib/settings/secret-disclosure.d.ts

@@ -0,0 +1,50 @@
+/**
+ * How much of a stored secret the settings pane is allowed to show.
+ *
+ * The user has to be able to *confirm* what they configured — a pane that only
+ * ever says 「已配置」 cannot tell a correct appId from a typo — but a browser
+ * tab (or a screenshot of one) must never hold a usable credential. The two are
+ * reconciled here: the host masks the value **before it crosses the wire**, so
+ * what the pane receives is already unusable, and `maskSecret` is the only
+ * place that decides how much survives.
+ *
+ * Deliberately pure and dependency-free: the host (`settings-service`) masks
+ * with it and the client bundle imports the same compiled module for the input
+ * `type`, so the two can never drift into disagreeing about which keys are
+ * confidential.
+ *
+ * @module dsh-connect/settings/secret-disclosure
+ */
+/**
+ * - `full` — shown verbatim. For identifiers, not authenticators.
+ * - `mask` — head and tail survive, the middle does not.
+ * - `url` — a URL whose *query* carries the token, so only that part is masked.
+ */
+export type Disclosure = "full" | "mask" | "url";
+/**
+ * Per-config-key policy, keyed by the channel config key (`CREDENTIAL`-style
+ * keys are unique across channels: no channel has two fields that share a name
+ * but want different treatment).
+ *
+ * `appId` / `clientId` are `full` on purpose. They are **identifiers**: they
+ * appear in the URL or body of every outbound API call, are readable in the
+ * vendor's own console, and grant nothing without the paired secret. Masking
+ * them would cost the user the one thing this pane is for — checking that the
+ * id they pasted is the one they meant — and buy no secrecy at all.
+ */
+export declare const SECRET_DISCLOSURE: Record<string, Disclosure>;
+/** Policy for a config key; unknown keys are treated as confidential. */
+export declare function disclosureOf(configKey: string): Disclosure;
+/** True when the pane should render this key as a password input. */
+export declare function isMaskedSecret(configKey: string): boolean;
+/**
+ * The display preview for one stored secret. Never returns the input: for
+ * `mask` and `url` the returned string is lossy by construction, so a caller
+ * that echoes it to a browser cannot leak a usable credential.
+ *
+ * Surrounding whitespace is trimmed first — a pasted value commonly carries a
+ * trailing newline, and the mask should describe the stored value, not the
+ * paste.
+ */
+export declare function maskSecret(configKey: string, value: string): string;
+//# sourceMappingURL=secret-disclosure.d.ts.map

package/lib/settings/secret-disclosure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-disclosure.d.ts","sourceRoot":"","sources":["../../src/settings/secret-disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAQvD,CAAC;AAkBH,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAE1D;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEzD;AAqDD;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAWnE"}

package/lib/settings/secret-disclosure.js

@@ -0,0 +1,132 @@
+/**
+ * How much of a stored secret the settings pane is allowed to show.
+ *
+ * The user has to be able to *confirm* what they configured — a pane that only
+ * ever says 「已配置」 cannot tell a correct appId from a typo — but a browser
+ * tab (or a screenshot of one) must never hold a usable credential. The two are
+ * reconciled here: the host masks the value **before it crosses the wire**, so
+ * what the pane receives is already unusable, and `maskSecret` is the only
+ * place that decides how much survives.
+ *
+ * Deliberately pure and dependency-free: the host (`settings-service`) masks
+ * with it and the client bundle imports the same compiled module for the input
+ * `type`, so the two can never drift into disagreeing about which keys are
+ * confidential.
+ *
+ * @module dsh-connect/settings/secret-disclosure
+ */
+/**
+ * Per-config-key policy, keyed by the channel config key (`CREDENTIAL`-style
+ * keys are unique across channels: no channel has two fields that share a name
+ * but want different treatment).
+ *
+ * `appId` / `clientId` are `full` on purpose. They are **identifiers**: they
+ * appear in the URL or body of every outbound API call, are readable in the
+ * vendor's own console, and grant nothing without the paired secret. Masking
+ * them would cost the user the one thing this pane is for — checking that the
+ * id they pasted is the one they meant — and buy no secrecy at all.
+ */
+export const SECRET_DISCLOSURE = Object.freeze({
+    appId: "full",
+    clientId: "full",
+    appSecret: "mask",
+    clientSecret: "mask",
+    botToken: "mask",
+    secret: "mask",
+    webhookUrl: "url",
+});
+/** Query parameters whose *value* is a credential and must not be echoed. */
+const SECRET_QUERY_PARAM = /(secret|token|key|sign)/i;
+/** Characters kept visible on each end of a masked value. */
+const EDGE = 4;
+/**
+ * Below this length there is no middle to hide — showing 4+4 of a 10-character
+ * value would print it in full — so short values collapse to a fixed-width
+ * mask, which also avoids leaking the length.
+ */
+const MIN_MASKABLE = 12;
+/** The width of the all-bullets mask used for values too short to split. */
+const BULLETS = "••••••";
+/** Policy for a config key; unknown keys are treated as confidential. */
+export function disclosureOf(configKey) {
+    return SECRET_DISCLOSURE[configKey] ?? "mask";
+}
+/** True when the pane should render this key as a password input. */
+export function isMaskedSecret(configKey) {
+    return disclosureOf(configKey) !== "full";
+}
+/** `head…tail`, or the bullets mask when the value is too short to split. */
+function maskMiddle(value) {
+    if (value.length < MIN_MASKABLE)
+        return BULLETS;
+    return value.slice(0, EDGE) + "…" + value.slice(-EDGE);
+}
+/** Escape a query-parameter name for use inside a `RegExp`. */
+function escapeForRegExp(text) {
+    return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/**
+ * Mask the credential-bearing query parameters of a URL, keeping the origin,
+ * path and the innocent parameters readable.
+ *
+ * Masking such a URL end-to-end would defeat the purpose: DingTalk's webhook is
+ * `https://oapi.dingtalk.com/robot/send?access_token=…`, so `https…bcde` tells
+ * the user nothing about whether they pasted the right robot. Falls back to the
+ * plain mask when the value isn't a parseable URL (a bare token, a typo, an
+ * empty-ish string).
+ *
+ * The masking is a surgical replace on the original text rather than a
+ * re-serialize through `URLSearchParams`, which would percent-encode the `…`
+ * into `%E2%80%A6` and render the preview unreadable.
+ */
+function maskUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return maskMiddle(value);
+    }
+    let masked = value;
+    for (const key of new Set(url.searchParams.keys())) {
+        if (!SECRET_QUERY_PARAM.test(key))
+            continue;
+        const pattern = new RegExp(`([?&]${escapeForRegExp(key)}=)([^&#]*)`, "g");
+        masked = masked.replace(pattern, (whole, prefix, held) => {
+            // Tolerate a percent-encoded token: decode to measure it, mask the
+            // decoded form, and splice the readable result back into the raw text.
+            let decoded = held;
+            try {
+                decoded = decodeURIComponent(held);
+            }
+            catch {
+                /* not encoded — use as-is */
+            }
+            return decoded.length === 0 ? whole : prefix + maskMiddle(decoded);
+        });
+    }
+    return masked;
+}
+/**
+ * The display preview for one stored secret. Never returns the input: for
+ * `mask` and `url` the returned string is lossy by construction, so a caller
+ * that echoes it to a browser cannot leak a usable credential.
+ *
+ * Surrounding whitespace is trimmed first — a pasted value commonly carries a
+ * trailing newline, and the mask should describe the stored value, not the
+ * paste.
+ */
+export function maskSecret(configKey, value) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0)
+        return "";
+    switch (disclosureOf(configKey)) {
+        case "full":
+            return trimmed;
+        case "url":
+            return maskUrl(trimmed);
+        default:
+            return maskMiddle(trimmed);
+    }
+}
+//# sourceMappingURL=secret-disclosure.js.map

package/lib/settings/secret-disclosure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-disclosure.js","sourceRoot":"","sources":["../../src/settings/secret-disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA+B,MAAM,CAAC,MAAM,CAAC;IACzE,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,MAAM;IACd,UAAU,EAAE,KAAK;CAClB,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD,6DAA6D;AAC7D,MAAM,IAAI,GAAG,CAAC,CAAC;AAEf;;;;GAIG;AACH,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,4EAA4E;AAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC;AAEzB,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,iBAAiB,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC;AAChD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,YAAY,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC;AAC5C,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,+DAA+D;AAC/D,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,QAAQ,eAAe,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC1E,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;YACvE,mEAAmE;YACnE,uEAAuE;YACvE,IAAI,OAAO,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,KAAa;IACzD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,QAAQ,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM;YACT,OAAO,OAAO,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1B;YACE,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/lib/settings/settings-model.d.ts

@@ -0,0 +1,124 @@
+import type { ChannelName } from "./channels.js";
+import type { SettingsSnapshot } from "./settings-rpc.js";
+/** Secret config-keys per channel, for rendering secret inputs. */
+export declare const CHANNEL_SECRET_FIELDS: Record<ChannelName, string[]>;
+/**
+ * A non-secret, user-editable per-channel config field. `kind` drives how the
+ * pane renders the control and how `coerceConfigValue` normalizes the raw input
+ * (text → string, number → finite number, boolean → false on empty, select →
+ * one of `options`).
+ */
+export interface ConfigField {
+    key: string;
+    kind: 'text' | 'number' | 'boolean' | 'select';
+    options?: string[];
+    /** Human label; defaults to the key if absent. */
+    label?: string;
+}
+/**
+ * Non-secret per-channel fields the pane exposes, mirroring the keys used by
+ * each channel adapter config (see `examples/profile-cordis.patch.yml`). Order
+ * is the render order; keep secrets separate (`CHANNEL_SECRET_FIELDS`).
+ */
+export declare const CHANNEL_CONFIG_FIELDS: {
+    readonly feishu: readonly [{
+        readonly key: "transport";
+        readonly kind: "select";
+        readonly options: ["websocket", "webhook"];
+        readonly label: "transport";
+    }, {
+        readonly key: "requireMention";
+        readonly kind: "boolean";
+        readonly label: "requireMention";
+    }, {
+        readonly key: "dmMode";
+        readonly kind: "select";
+        readonly options: ["open", "allowlist", "pair", "disabled"];
+        readonly label: "dmMode";
+    }, {
+        readonly key: "language";
+        readonly kind: "select";
+        readonly options: ["zh", "en"];
+        readonly label: "language";
+    }, {
+        readonly key: "webhookPort";
+        readonly kind: "number";
+        readonly label: "webhookPort";
+    }, {
+        readonly key: "webhookPath";
+        readonly kind: "text";
+        readonly label: "webhookPath";
+    }];
+    readonly telegram: readonly [{
+        readonly key: "requireMention";
+        readonly kind: "boolean";
+        readonly label: "requireMention";
+    }, {
+        readonly key: "language";
+        readonly kind: "select";
+        readonly options: ["zh", "en"];
+        readonly label: "language";
+    }, {
+        readonly key: "pollingTimeoutSeconds";
+        readonly kind: "number";
+        readonly label: "pollingTimeoutSeconds";
+    }, {
+        readonly key: "baseUrl";
+        readonly kind: "text";
+        readonly label: "baseUrl";
+    }];
+    readonly dingtalk: readonly [{
+        readonly key: "language";
+        readonly kind: "select";
+        readonly options: ["zh", "en"];
+        readonly label: "language";
+    }, {
+        readonly key: "defaultAt";
+        readonly kind: "text";
+        readonly label: "defaultAt";
+    }];
+    readonly web: readonly [{
+        readonly key: "pollIntervalMs";
+        readonly kind: "number";
+        readonly label: "pollIntervalMs";
+    }];
+};
+/** Channel-agnostic keys applied to every channel that doesn't set its own. */
+export declare const CHANNEL_DEFAULT_FIELDS: readonly ConfigField[];
+/** Normalize a raw form input for a field `kind` (empty → undefined = not saved). */
+export declare function coerceConfigValue(kind: ConfigField['kind'], raw: unknown): unknown;
+/** The edit form the pane works on. */
+export interface SettingsForm {
+    channels: ChannelName[];
+    channelDefaults: Record<string, unknown>;
+    channelConfigs: Record<string, Record<string, unknown>>;
+    /** Secret inputs the user is *typing*: written on save, never seeded by a read. */
+    secrets: Record<string, Record<string, string>>;
+    /**
+     * Whether a value is already stored for a secret key, for the placeholder.
+     * Separate from `secrets` because the two have opposite lifetimes: presence
+     * comes from the snapshot and the typed values start empty and are cleared
+     * after a save — a read must never be able to populate an input.
+     */
+    secretPresence: Record<string, Record<string, boolean>>;
+    /**
+     * Host-masked previews of the stored secrets, so the user can confirm what
+     * they configured. Rendered as read-only text and **never** fed into
+     * `secrets`: a masked value is not a credential, and treating one as a value
+     * to save would overwrite a working secret with its own mask.
+     */
+    secretPreviews: Record<string, Record<string, string>>;
+    settingsStatePath?: string;
+    /** True when the section lives in the settings namespace: a save is immediate and durable. */
+    live: boolean;
+}
+/** Build the initial form from a snapshot. */
+export declare function snapshotToForm(snapshot: SettingsSnapshot): SettingsForm;
+/** Build the non-secret config to persist via `settings.save`. */
+export declare function buildConfigSave(form: SettingsForm): Record<string, unknown>;
+/** Build the `credentials.save` payloads for every channel with secret values. */
+export declare function buildCredentialSaves(form: SettingsForm): {
+    channel: string;
+    values: Record<string, string>;
+}[];
+//# sourceMappingURL=settings-model.d.ts.map

package/lib/settings/settings-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-model.d.ts","sourceRoot":"","sources":["../../src/settings/settings-model.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,mEAAmE;AACnE,eAAO,MAAM,qBAAqB,EAE7B,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC/C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsB8B,CAAC;AAEjE,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,EAAE,SAAS,WAAW,EAGxD,CAAC;AAEF,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAclF;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,mFAAmF;IACnF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8FAA8F;IAC9F,IAAI,EAAE,OAAO,CAAC;CACf;AAED,8CAA8C;AAC9C,wBAAgB,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,YAAY,CAoBvE;AASD,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAU3E;AAED,kFAAkF;AAClF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EAAE,CAM9G"}

package/lib/settings/settings-model.js

@@ -0,0 +1,118 @@
+/**
+ * Client-side settings model: pure, dependency-free helpers that map between the
+ * host snapshot and the edit form, and build the save payloads. Kept separate from
+ * the React component so the client settings logic is unit-testable anywhere.
+ * The host-only secret-ref mapping lives on the server; the client only carries
+ * field names.
+ *
+ * @module dsh-connect/settings/settings-model
+ */
+import { CHANNEL_SECRET_KEYS } from "./credential-store.js";
+/** Secret config-keys per channel, for rendering secret inputs. */
+export const CHANNEL_SECRET_FIELDS = Object.fromEntries(Object.entries(CHANNEL_SECRET_KEYS).map(([ch, map]) => [ch, Object.keys(map ?? {})]));
+/**
+ * Non-secret per-channel fields the pane exposes, mirroring the keys used by
+ * each channel adapter config (see `examples/profile-cordis.patch.yml`). Order
+ * is the render order; keep secrets separate (`CHANNEL_SECRET_FIELDS`).
+ */
+export const CHANNEL_CONFIG_FIELDS = {
+    feishu: [
+        { key: 'transport', kind: 'select', options: ['websocket', 'webhook'], label: 'transport' },
+        { key: 'requireMention', kind: 'boolean', label: 'requireMention' },
+        { key: 'dmMode', kind: 'select', options: ['open', 'allowlist', 'pair', 'disabled'], label: 'dmMode' },
+        { key: 'language', kind: 'select', options: ['zh', 'en'], label: 'language' },
+        { key: 'webhookPort', kind: 'number', label: 'webhookPort' },
+        { key: 'webhookPath', kind: 'text', label: 'webhookPath' },
+    ],
+    telegram: [
+        { key: 'requireMention', kind: 'boolean', label: 'requireMention' },
+        { key: 'language', kind: 'select', options: ['zh', 'en'], label: 'language' },
+        { key: 'pollingTimeoutSeconds', kind: 'number', label: 'pollingTimeoutSeconds' },
+        { key: 'baseUrl', kind: 'text', label: 'baseUrl' },
+    ],
+    dingtalk: [
+        { key: 'language', kind: 'select', options: ['zh', 'en'], label: 'language' },
+        { key: 'defaultAt', kind: 'text', label: 'defaultAt' },
+    ],
+    web: [
+        { key: 'pollIntervalMs', kind: 'number', label: 'pollIntervalMs' },
+    ],
+};
+/** Channel-agnostic keys applied to every channel that doesn't set its own. */
+export const CHANNEL_DEFAULT_FIELDS = [
+    { key: 'language', kind: 'select', options: ['zh', 'en'], label: 'language' },
+    { key: 'notifyLevel', kind: 'select', options: ['full', 'important', 'result'], label: 'notifyLevel' },
+];
+/** Normalize a raw form input for a field `kind` (empty → undefined = not saved). */
+export function coerceConfigValue(kind, raw) {
+    if (raw === undefined || raw === null || raw === '')
+        return undefined;
+    switch (kind) {
+        case 'number': {
+            const n = Number(raw);
+            return Number.isFinite(n) ? n : undefined;
+        }
+        case 'boolean':
+            return typeof raw === 'boolean' ? raw : raw === true || raw === 'true';
+        case 'select':
+            return String(raw);
+        default:
+            return String(raw);
+    }
+}
+/** Build the initial form from a snapshot. */
+export function snapshotToForm(snapshot) {
+    const config = snapshot.config ?? {};
+    const channels = (snapshot.enabled ?? []);
+    const channelConfigs = {};
+    for (const ch of channels)
+        channelConfigs[ch] = (config[ch] ?? {});
+    return {
+        channels,
+        channelDefaults: (config.channelDefaults ?? {}),
+        channelConfigs,
+        // Deliberately empty even though `secretPreviews` carries something: an
+        // input is a place to *type a new* secret, and prefilling it with the mask
+        // would either overwrite the stored secret with its own preview on save, or
+        // train the user to think a masked value is the real one. The preview is
+        // rendered beside the input instead.
+        secrets: {},
+        secretPresence: (snapshot.secrets ?? {}),
+        secretPreviews: (snapshot.secretPreviews ?? {}),
+        settingsStatePath: config.settingsStatePath,
+        live: snapshot.live === true,
+    };
+}
+/** Drop keys whose value is `undefined`/`null` so cleared inputs aren't persisted. */
+function stripEmpty(obj) {
+    const out = {};
+    for (const [k, v] of Object.entries(obj))
+        if (v !== undefined && v !== null)
+            out[k] = v;
+    return out;
+}
+/** Build the non-secret config to persist via `settings.save`. */
+export function buildConfigSave(form) {
+    const config = { channels: form.channels };
+    const defaults = stripEmpty(form.channelDefaults ?? {});
+    if (Object.keys(defaults).length > 0)
+        config.channelDefaults = defaults;
+    for (const [ch, cfg] of Object.entries(form.channelConfigs ?? {})) {
+        const clean = stripEmpty(cfg ?? {});
+        if (Object.keys(clean).length > 0)
+            config[ch] = clean;
+    }
+    if (form.settingsStatePath)
+        config.settingsStatePath = form.settingsStatePath;
+    return config;
+}
+/** Build the `credentials.save` payloads for every channel with secret values. */
+export function buildCredentialSaves(form) {
+    const out = [];
+    for (const [ch, values] of Object.entries(form.secrets ?? {})) {
+        if (values && Object.keys(values).length > 0)
+            out.push({ channel: ch, values });
+    }
+    return out;
+}
+//# sourceMappingURL=settings-model.js.map

package/lib/settings/settings-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-model.js","sourceRoot":"","sources":["../../src/settings/settings-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAI5D,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,WAAW,CACrD,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CACpD,CAAC;AAgBnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM,EAAE;QACN,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE;QAC3F,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE;QACnE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE;QACtG,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;QAC7E,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE;QAC5D,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE;KAC3D;IACD,QAAQ,EAAE;QACR,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE;QACnE,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;QAC7E,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE;QAChF,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE;KACnD;IACD,QAAQ,EAAE;QACR,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;QAC7E,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE;KACvD;IACD,GAAG,EAAE;QACH,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE;KACnE;CAC6D,CAAC;AAEjE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;IAC7E,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE;CACvG,CAAC;AAEF,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,IAAyB,EAAE,GAAY;IACvE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5C,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,CAAC;QACzE,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB;YACE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AA4BD,8CAA8C;AAC9C,MAAM,UAAU,cAAc,CAAC,QAA0B;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAkB,CAAC;IAC3D,MAAM,cAAc,GAA4C,EAAE,CAAC;IACnE,KAAK,MAAM,EAAE,IAAI,QAAQ;QAAE,cAAc,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC9F,OAAO;QACL,QAAQ;QACR,eAAe,EAAE,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAA4B;QAC1E,cAAc;QACd,wEAAwE;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,qCAAqC;QACrC,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAA4C;QACnF,cAAc,EAAE,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAA2C;QACzF,iBAAiB,EAAE,MAAM,CAAC,iBAAuC;QACjE,IAAI,EAAE,QAAQ,CAAC,IAAI,KAAK,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,UAAU,CAAC,GAA4B;IAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC;IACxE,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB;QAAE,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,IAAkB;IACrD,MAAM,GAAG,GAA0D,EAAE,CAAC;IACtE,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/lib/settings/settings-rpc.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Host-side RPC facade for the dsh-connect web settings pane.
+ *
+ * Mirrors dsh-im's host RPC pattern: a plugin registers a single channel on
+ * `ctx.connection.rpc.handle(...)` and a handler dispatches dotted endpoints,
+ * returning `{ ok: true, value }` on success or `{ ok: false, error }` on
+ * failure (see dsh-im `plugin-src/host/update-rpc.mjs`).
+ *
+ * Endpoints:
+ * - `settings.get` — current non-secret config + enabled channels + credential presence.
+ * - `settings.save` — persist non-secret config (payload must be non-empty).
+ * - `credentials.save` — persist secrets to the DSH credential store (payload
+ *   `{ channel, values }`, values are {configKey: secret}).
+ * - `settings.status` — fresh status snapshot.
+ *
+ * @module dsh-connect/settings/settings-rpc
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** RPC channel the settings pane calls. */
+export declare const SETTINGS_RPC_CHANNEL = "/dsh-connect";
+/** Endpoints the settings pane can invoke on the channel. */
+export declare const SETTINGS_ENDPOINTS: readonly string[];
+/** A settings pane `settings.get`/status snapshot. */
+export interface SettingsSnapshot {
+    /** The current plugin config (non-secret fields). */
+    config: Record<string, unknown>;
+    /** The channel names currently enabled. */
+    enabled: string[];
+    /** Per-channel credential presence (true = stored & set). */
+    credentials: Record<string, boolean>;
+    /**
+     * Per-channel, per-config-key secret **presence** (true = a value is stored
+     * for that key) — never the values themselves. The pane uses it to tell an
+     * untouched input («已配置») from an empty one.
+     *
+     * This used to echo the values, which put an `appSecret` into browser state
+     * and every screenshot of the settings page. What leaves the host now is
+     * either this boolean or the masked {@link secretPreviews} below — a usable
+     * secret still leaves exactly once, when the adapter consumes it
+     * (`injectSecrets`).
+     */
+    secrets?: Record<string, Record<string, boolean>>;
+    /**
+     * Per-channel, per-config-key **display preview**, for the user to confirm
+     * what they configured without being able to copy it back out.
+     *
+     * Already masked on the host by `maskSecret` (`./secret-disclosure.js`), so
+     * it is lossy by construction: identifiers such as an `appId` come through
+     * whole, an `appSecret` keeps only its first and last four characters, and a
+     * `webhookUrl` keeps its origin and path with the `access_token` in the query
+     * masked. A key is present here only when a value is stored for it, which
+     * makes an empty entry the same statement as `secrets[key] === false`.
+     *
+     * **Display-only.** The pane renders it as text; it must never be written
+     * back as a credential, and `buildCredentialSaves` ignores it — the secret
+     * inputs are still write-only and still start blank.
+     */
+    secretPreviews?: Record<string, Record<string, string>>;
+    /**
+     * True when the `dsh-connect` settings namespace is live, i.e. this config is
+     * stored in `$DSH_HOME/settings.yaml` and a save takes effect immediately.
+     * False means the legacy JSON state file is behind this pane: the settings
+     * path control still applies, and a save needs a restart.
+     */
+    live?: boolean;
+}
+/** The service backing the RPC; supplied by the web-settings integration. */
+export interface SettingsService {
+    get(): Promise<SettingsSnapshot>;
+    save(config: Record<string, unknown>): Promise<SettingsSnapshot>;
+    /** Persist channel secrets ({configKey: secret}) to the credential store. */
+    saveCredentials?(channel: string, values: Record<string, string>): Promise<SettingsSnapshot>;
+    status(): Promise<SettingsSnapshot>;
+}
+/** Build the channel handler for a settings service. */
+export declare function createSettingsRpcHandler(service: SettingsService): (endpoint: string, payload: unknown, signal?: {
+    aborted?: boolean;
+}) => Promise<{
+    ok: boolean;
+    value: SettingsSnapshot;
+    error?: undefined;
+} | {
+    ok: boolean;
+    error: {
+        code: any;
+        message: any;
+    };
+    value?: undefined;
+}>;
+/** The Host/Origin + browser-auth fence exposed by the host `connection` service. */
+interface ConnectionFence {
+    /** HTTP status to reject with, or `undefined` to allow the request through. */
+    requestRejection?(request: IncomingMessage): number | undefined;
+}
+/**
+ * Build the raw HTTP handler for {@link SETTINGS_RPC_CHANNEL}. Mirrors the
+ * host's own Connection RPC adapter (method/content-type/envelope checks plus
+ * the Host/Origin and browser-auth fence) so the pane sees the same protocol
+ * and the same failure codes as a first-party channel.
+ */
+export declare function createSettingsHttpHandler(service: SettingsService, connection?: ConnectionFence): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+/**
+ * Mount the settings RPC channel on the host webserver.
+ *
+ * Mounts a `prefix` route for {@link SETTINGS_RPC_CHANNEL} directly on the
+ * `webServer` host service — the same thing the host's own
+ * `connection.rpc.handle()` does internally (`owner.webServer.register(route)`
+ * with the `/api` fence), and the same thing `dsh-api-gateway` does for its
+ * WebSocket route.
+ *
+ * Why not `connection.rpc.handle()`: the host's `HostConnectionService` is
+ * context-tracked, so its `get rpc()` captures `this.ctx`. cordis resolves that
+ * read to a *shadow* of the service's construction context, and service
+ * resolution then walks **that** fiber chain — which never contains the
+ * `webServer` provider (a sibling fiber). The call therefore dies with
+ * `cannot get property "webServer" without inject`, the route is never mounted,
+ * and every `settings.*` call falls through to the static fallback (HTTP 405),
+ * leaving the pane stuck on "加载中". Injecting `webServer` into the calling
+ * scope — or declaring it in the plugin's `inject` — does not help, because the
+ * shadow overrides the caller's fiber.
+ *
+ * @param ctx - an injection scope holding `connection` and `webServer`.
+ * @param options - the settings service backing the channel.
+ * @returns a disposer removing the route (no-op if the host has no webserver).
+ */
+export declare function installSettingsRpc(ctx: unknown, options: {
+    service: SettingsService;
+}): () => void;
+export {};
+//# sourceMappingURL=settings-rpc.d.ts.map

package/lib/settings/settings-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-rpc.d.ts","sourceRoot":"","sources":["../../src/settings/settings-rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,2CAA2C;AAC3C,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAEnD,6DAA6D;AAC7D,eAAO,MAAM,kBAAkB,mBAA0F,CAAC;AAU1H,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,2CAA2C;IAC3C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD;;;;;;;;;;;;;;OAcG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjE,6EAA6E;IAC7E,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7F,MAAM,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACrC;AAeD,wDAAwD;AACxD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,eAAe,IACjD,UAAU,MAAM,EAAE,SAAS,OAAO,EAAE,SAAS;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE;;;;;;;;;;;GAoBjF;AAmBD,qFAAqF;AACrF,UAAU,eAAe;IACvB,+EAA+E;IAC/E,gBAAgB,CAAC,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAAC;CACjE;AA+ED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,eAAe,IAGpD,KAAK,eAAe,EAAE,KAAK,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CAgEpG;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;IAAE,OAAO,EAAE,eAAe,CAAA;CAAE,GAAG,MAAM,IAAI,CAiBlG"}