dsh-email 0.9.0 → 0.10.0

package/README.en.md

@@ -26,7 +26,7 @@ Pure Node, **cross-platform** (one codebase for Windows / macOS / Linux), no she
 
 Once an account is configured, a "whale-girl courier" popup lives in the bottom-right corner of the main UI: it checks for new mail every 30 seconds and shows a card (sender + subject) when something arrives, auto-dismissing after 12 seconds. The popup shares the cursor logic with `email_watch` but keeps its own counter, so they never consume each other's mail.
 
-The popup artwork prefers the locally installed [dsh-deep-whale](https://github.com/Small-tailqwq/dsh-deep-whale) whale-girl skin assets (**never bundled** — read at runtime from your own installation): the artwork is a derivative of the original whale-girl character by [上善](https://www.pixiv.net/users/62155430) (skin by Small-tailqwq), published under CC BY-NC-SA 4.0 (Attribution-NonCommercial-ShareAlike); the popup shows the full attribution chain. A built-in fallback image is used when no skin is installed.
+The popup artwork prefers the locally installed [dsh-deep-whale](https://github.com/Small-tailqwq/dsh-deep-whale) whale-girl skin assets (**never bundled** — read at runtime from your own installation): the artwork is a derivative of the original whale-girl character by [上善](https://www.pixiv.net/users/62155430) (skin by Small-tailqwq), published under CC BY-NC-SA 4.0 (Attribution-NonCommercial-ShareAlike); the popup shows the full attribution chain. Without the skin, a bundled community whale-girl artwork is used (copyright stays with the original author, personal non-commercial use only; removed on request via issue).
 
 Example:
 
@@ -42,7 +42,7 @@ Example:
 
 ## Compatibility
 
-Verified against `@deepseek-ai/dsh@0.1.2-alpha.2` on 2026-08-31. Built for the cordis patch-bundle plugin model (`cordis.patch.yml` + `dsh.bundle.patch`). No runtime imports of `@deepseek-ai/*` internals.
+Verified against `@deepseek-ai/dsh@0.1.2-alpha.3` on 2026-09-01 (settings page / asset route / email_watch fully regression-tested). Built for the cordis patch-bundle plugin model (`cordis.patch.yml` + `dsh.bundle.patch`). No runtime imports of `@deepseek-ai/*` internals.
 
 ## Installation
 

package/README.md

@@ -29,12 +29,13 @@ Email tools for DeepSeek Harness: list, read, search and send mail through stand
 | `email_folders` | 列出邮箱的文件夹（INBOX/已发送/垃圾邮件/自定义…），拿 path 喂给其他工具 |
 | `email_attachment` | 按序号下载邮件附件（默认存到会话工作区，模型可直接读取；大小受 maxAttachmentBytes 限制） |
 | `email_watch` | 增量检查新邮件：首次调用建立基线，之后每次只报告比上次多出来的未读邮件，适合定时任务做新邮件提醒 |
+| `email_mark` | 修改邮件状态：标记已读/未读、加/取消星标，或移动到别的文件夹（归档、丢回收站），收发闭环的「收完之后」那一半 |
 
 ### 新邮件提醒（Web 端）
 
 配置好账号后，主界面右下角会出现「鲸鱼娘递信」小弹窗：每 30 秒检查一次新邮件，有新邮件时弹出卡片（发件人 + 主题），12 秒自动消失。弹窗与 `email_watch` 工具共用同一套游标逻辑但各自独立计数，互不抢占。
 
-弹窗形象优先使用本地安装的 [dsh-deep-whale](https://github.com/Small-tailqwq/dsh-deep-whale) 鲸鱼娘皮肤素材（**不打包分发**，运行时从你自己的安装目录读取）：该素材为一创 [上善](https://www.pixiv.net/users/62155430) 鲸鱼娘形象的衍生创作（二创 Small-tailqwq），以 CC BY-NC-SA 4.0（署名-非商业性使用-相同方式共享）发布，弹窗内附完整署名链。未安装皮肤时使用内置回退图。
+弹窗形象优先使用本地安装的 [dsh-deep-whale](https://github.com/Small-tailqwq/dsh-deep-whale) 鲸鱼娘皮肤素材（**不打包分发**，运行时从你自己的安装目录读取）：该素材为一创 [上善](https://www.pixiv.net/users/62155430) 鲸鱼娘形象的衍生创作（二创 Small-tailqwq），以 CC BY-NC-SA 4.0（署名-非商业性使用-相同方式共享）发布，弹窗内附完整署名链。未安装皮肤时使用内置的社区鲸鱼娘形象（版权归原作者，仅供个人非商业使用；如有异议请提 Issue，会立即移除）。
 
 示例对话：
 
@@ -42,6 +43,8 @@ Email tools for DeepSeek Harness: list, read, search and send mail through stand
 
 ### 版本记录
 
+- **0.10.0**：新增 `email_mark` 工具——标记已读/未读、加/取消星标、移动文件夹（归档/整理），补齐收发闭环；连接池按读/写模式分别管理邮箱打开状态。
+- **0.9.1**：修复设置页空主机遮蔽 provider 预设（#3/#6）；IMAP 连接超时不再杀死整个 DSH 进程（#4）；暗色模式输入控件可见（#2）；密码栏提示环境变量 `DSH_EMAIL_PASSWORD` 免明文方案（#5）。
 - **0.9.0**：新增 `email_watch` 增量新邮件检查工具（游标式，适合定时提醒）；Web 端新增「鲸鱼娘递信」新邮件弹窗（本地皮肤素材运行时读取 + 内置回退图）。
 - **0.8.2**：`since` / `until` 参数描述与其余参数统一为英文，方便多语言 agent 理解。
 - **0.8.0/0.8.1**：`email_list` / `email_search` 新增 `since` / `until` 日期范围过滤；新增 `email_health` 自检（账号/连接/配置一键体检）；适配 harness 0.1.2（清理已删除的客户端注入声明）。
@@ -50,7 +53,7 @@ Email tools for DeepSeek Harness: list, read, search and send mail through stand
 
 ## 兼容性
 
-在 `@deepseek-ai/dsh@0.1.2-alpha.2` 上验证（2026-08-31）。遵循 cordis 组合包补丁模型（`cordis.patch.yml` + `dsh.bundle.patch`），运行时不 import 任何 `@deepseek-ai/*` 内部模块。
+在 `@deepseek-ai/dsh@0.1.2-alpha.3` 上实测通过（2026-09-01，设置页/素材路由/email_watch 全回归）。遵循 cordis 组合包补丁模型（`cordis.patch.yml` + `dsh.bundle.patch`），运行时不 import 任何 `@deepseek-ai/*` 内部模块。
 
 ## 安装
 

package/lib/client.js

@@ -51,7 +51,7 @@ const EMPTY = {
 };
 
 const CSS = [
-  ".dshe-settings{display:grid;gap:14px;max-width:900px;padding:8px 2px 32px;color:var(--dsw-alias-fg-primary,#26231f)}",
+  ".dshe-settings{display:grid;gap:14px;max-width:900px;padding:8px 2px 32px;color:var(--dsw-alias-fg-primary,#26231f);color-scheme:light dark}",
   ".dshe-header{display:grid;gap:4px;padding:8px 2px}",
   ".dshe-header h2{font-size:22px;letter-spacing:-.02em;margin:0}",
   ".dshe-header p{max-width:640px;margin:4px 0 0;color:var(--dsw-alias-fg-muted,#77736d);font-size:13px;line-height:1.55}",
@@ -60,7 +60,8 @@ const CSS = [
   ".dshe-grid{display:grid;grid-template-columns:1fr 1fr;gap:12px}",
   ".dshe-field{display:grid;gap:6px}",
   ".dshe-field label{font-size:12px;font-weight:600;color:var(--dsw-alias-fg-primary,#26231f)}",
-  ".dshe-field input[type=text],.dshe-field input[type=password],.dshe-field input[type=number],.dshe-field select{width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid var(--dsw-alias-border-subtle,#dedbd5);border-radius:9px;background:var(--dsw-alias-bg-layer-1,#fff);color:inherit;font:inherit;font-size:13px}",
+  ".dshe-field input[type=text],.dshe-field input[type=password],.dshe-field input[type=number],.dshe-field select,.dshe-field textarea{width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid var(--dsw-alias-border-subtle,#dedbd5);border-radius:9px;background:var(--dsw-alias-bg-layer-1,#fff);color:var(--dsw-alias-fg-primary,#26231f);font:inherit;font-size:13px}",
+  ".dshe-field select option{background:var(--dsw-alias-bg-layer-1,#fff);color:var(--dsw-alias-fg-primary,#26231f)}",
   ".dshe-check{display:flex;gap:8px;align-items:center;font-size:13px}",
   ".dshe-actions{display:flex;gap:8px;flex-wrap:wrap}",
   ".dshe-btn{display:inline-flex;align-items:center;height:32px;padding:0 14px;border-radius:999px;border:1px solid var(--dsw-alias-border-subtle,#dedbd5);background:var(--dsw-alias-bg-layer-1,#fff);color:inherit;font-size:13px;font-weight:600;cursor:pointer}",
@@ -73,7 +74,7 @@ const CSS = [
   ".dshe-details summary{font-size:12px;font-weight:600;cursor:pointer;color:var(--dsw-alias-fg-muted,#77736d)}",
   ".dshe-hint{font-size:12px;color:var(--dsw-alias-fg-muted,#77736d);line-height:1.5}",
   ".dshe-whale-root{position:fixed;right:20px;bottom:20px;z-index:2147483000;pointer-events:none}",
-  ".dshe-whale-card{pointer-events:auto;position:relative;width:300px;border:1px solid var(--dsw-alias-border-subtle,#dedbd5);border-radius:14px;background:var(--dsw-alias-bg-layer-1,#fff);box-shadow:0 10px 30px rgba(0,0,0,.18);overflow:hidden;animation:dshe-whale-in .35s ease-out;font-size:13px;color:var(--dsw-alias-fg-primary,#26231f)}",
+  ".dshe-whale-card{pointer-events:auto;position:relative;width:300px;border:1px solid var(--dsw-alias-border-subtle,#dedbd5);border-radius:14px;background:var(--dsw-alias-bg-layer-1,#fff);box-shadow:0 10px 30px rgba(0,0,0,.18);overflow:hidden;animation:dshe-whale-in .35s ease-out;font-size:13px;color:var(--dsw-alias-fg-primary,#26231f);color-scheme:light dark}",
   "@keyframes dshe-whale-in{from{opacity:0;transform:translateY(14px)}to{opacity:1;transform:translateY(0)}}",
   ".dshe-whale-img{display:block;width:100%;height:120px;object-fit:cover;object-position:center top;background:#eaf3f8}",
   ".dshe-whale-body{padding:10px 12px 12px;display:grid;gap:6px}",
@@ -219,6 +220,7 @@ function EmailSettingsSection() {
             placeholder: "不是登录密码；QQ/163 在邮箱设置里生成授权码",
             onChange: (e) => update({ password: e.target.value }),
           }),
+          h("div", { className: "dshe-hint" }, "不想明文保存？此栏留空，改用环境变量 DSH_EMAIL_PASSWORD（仅单账号时生效）。"),
         ]),
         h("div", { className: "dshe-field" }, [
           h("label", null, "收件文件夹（默认 INBOX）"),

package/lib/index.js

@@ -137,6 +137,21 @@ const attachmentSchema = {
     },
     additionalProperties: true,
 };
+const markSchema = {
+    type: 'object',
+    properties: {
+        account: { type: 'string' },
+        uid: { type: 'integer' },
+        folder: { type: 'string' },
+        action: { type: 'string' },
+        seen: { type: 'boolean' },
+        flagged: { type: 'boolean' },
+        movedTo: { type: 'string' },
+        movedUid: { type: 'integer' },
+    },
+    additionalProperties: true,
+};
+const MARK_ACTIONS = ['read', 'unread', 'star', 'unstar', 'move'];
 function oneText(text) {
     return [{ type: 'text', text }];
 }
@@ -194,6 +209,23 @@ function renderFolders(value) {
 function renderAttachment(value) {
     return oneText('账号 ' + value.account + ' 已下载附件 "' + value.filename + '"（' + value.contentType + '，' + value.size + ' 字节）到：\n' + value.path + '\n可用 read 工具读取该文件。');
 }
+const MARK_LABELS = {
+    read: '标记为已读',
+    unread: '标记为未读',
+    star: '加星标',
+    unstar: '取消星标',
+    move: '移动',
+};
+function renderMark(value) {
+    let text = '账号 ' + value.account + '：文件夹 "' + value.folder + '" 中 uid=' + value.uid + ' 已' + (MARK_LABELS[value.action] ?? value.action);
+    if (value.action === 'move') {
+        text += '到 "' + (value.movedTo ?? '') + '"' + (typeof value.movedUid === 'number' ? '（新 uid=' + value.movedUid + '）' : '');
+    }
+    else {
+        text += '（当前：' + (value.seen ? '已读' : '未读') + (value.flagged ? '、已标星' : '') + '）';
+    }
+    return oneText(text);
+}
 function fingerprintSettings(settings) {
     return JSON.stringify({
         accounts: [...settings.accounts.entries()].map(([name, account]) => [name, account]),
@@ -293,6 +325,35 @@ export function apply(ctx, config = {}) {
             return await getPool().read(args.account, args.uid, args.folder?.trim() || '');
         },
     });
+    ctx.tools.register({
+        name: 'email_mark',
+        description: 'Change an existing message: mark it read/unread, star/unstar it, or move it to another folder. Use after email_list/email_search when the user wants to tidy the mailbox (archive, clear unread, flag important mail). Moving uses the server MOVE/COPY so the uid changes; the new uid is reported when the server provides it.',
+        parameters: compileParameters({
+            uid: { type: 'integer', required: true, description: 'Message uid from email_list or email_search' },
+            action: { type: 'string', required: true, description: 'What to do: read, unread, star, unstar, or move' },
+            toFolder: { type: 'string', description: 'Destination folder path for action=move (see email_folders for valid paths)' },
+            folder: { type: 'string', description: 'IMAP folder the uid belongs to; defaults to the account inboxFolder' },
+            account: { type: 'string', description: ACCOUNT_HINT },
+        }),
+        output: {
+            schema: markSchema,
+            render: (_args, value) => renderMark(value),
+        },
+        async execute(rawArgs) {
+            const args = rawArgs;
+            if (typeof args.uid !== 'number' || !Number.isInteger(args.uid) || args.uid <= 0) {
+                throw new Error('uid 必须是正整数（用 email_list 获取）');
+            }
+            const action = (typeof args.action === 'string' ? args.action.trim().toLowerCase() : '');
+            if (!MARK_ACTIONS.includes(action)) {
+                throw new Error('action 必须是 ' + MARK_ACTIONS.join('、') + ' 之一');
+            }
+            if (action === 'move' && (typeof args.toFolder !== 'string' || args.toFolder.trim() === '')) {
+                throw new Error('action=move 时需要 toFolder 参数（用 email_folders 查看可用文件夹）');
+            }
+            return await getPool().mark(args.account, args.folder?.trim() || '', args.uid, action, args.toFolder);
+        },
+    });
     ctx.tools.register({
         name: 'email_search',
         description: 'Search emails by a keyword matched against sender, recipient and subject (server-side IMAP SEARCH). Body search is not supported by every server and is not attempted; returns the same compact rows as email_list.',

package/lib/mail-client.d.ts

@@ -1,6 +1,6 @@
 import { ImapFlow } from 'imapflow';
 import type { ResolvedEmailConfig, ResolvedEmailSettings } from './config.js';
-import type { EmailAttachmentMeta, EmailAttachmentResult, EmailFoldersResult, EmailListResult, EmailReadResult, EmailSearchResult, EmailSendResult } from './types.js';
+import type { EmailAttachmentMeta, EmailAttachmentResult, EmailFoldersResult, EmailListResult, EmailMarkAction, EmailMarkResult, EmailReadResult, EmailSearchResult, EmailSendResult } from './types.js';
 export declare class MailError extends Error {
     constructor(message: string);
 }
@@ -35,7 +35,7 @@ export declare class EmailPool {
     resolveName(name?: string): string;
     /** Serialize operations per account: one IMAP connection serves one op at a time. */
     private enqueue;
-    withImap<T>(accountName: string | undefined, folder: string | null, run: (client: ImapFlow) => Promise<T>): Promise<T>;
+    withImap<T>(accountName: string | undefined, folder: string | null, run: (client: ImapFlow) => Promise<T>, readOnly?: boolean): Promise<T>;
     private createImap;
     private imapRun;
     private normalizeImapError;
@@ -50,6 +50,7 @@ export declare class EmailPool {
     private searchBodies;
     private fetchListed;
     read(accountName: string | undefined, uid: number, folder: string): Promise<EmailReadResult>;
+    mark(accountName: string | undefined, folder: string, uid: number, action: EmailMarkAction, toFolder?: string): Promise<EmailMarkResult>;
     folders(accountName: string | undefined, subscribedOnly: boolean): Promise<EmailFoldersResult>;
     downloadAttachment(accountName: string | undefined, folder: string, uid: number, index: number, workspaceHint?: string): Promise<EmailAttachmentResult>;
     send(accountName: string | undefined, to: string, subject: string, text: string | undefined, cc: string | undefined, attachmentPaths: string[] | undefined): Promise<EmailSendResult>;

package/lib/mail-client.js

@@ -114,13 +114,13 @@ export class EmailPool {
         this.queues.set(name, next.then(() => undefined, () => undefined));
         return next;
     }
-    async withImap(accountName, folder, run) {
+    async withImap(accountName, folder, run, readOnly = true) {
         const name = this.resolveName(accountName);
         const cfg = this.account(name);
-        return this.enqueue(name, () => this.imapRun(name, cfg, folder, run));
+        return this.enqueue(name, () => this.imapRun(name, cfg, folder, readOnly, run));
     }
     createImap(cfg) {
-        return new ImapFlow({
+        const client = new ImapFlow({
             host: cfg.imap.host,
             port: cfg.imap.port,
             secure: cfg.imap.secure,
@@ -130,8 +130,21 @@ export class EmailPool {
             greetingTimeout: 30000,
             socketTimeout: cfg.imap.socketTimeoutMs ?? 60000,
         });
+        // ImapFlow emits 'error' on socket timeouts/drops; without a listener Node
+        // escalates it to an uncaught exception and kills the whole DSH process
+        // (issue #4). Swallow it here and reap the dead connection when idle —
+        // in-flight calls fail through their own promise paths instead.
+        client.on('error', () => {
+            for (const [name, entry] of this.imaps) {
+                if (entry.client === client && entry.inUse === 0) {
+                    void this.evictImap(name);
+                    return;
+                }
+            }
+        });
+        return client;
     }
-    async imapRun(name, cfg, folder, run) {
+    async imapRun(name, cfg, folder, readOnly, run) {
         let entry = this.imaps.get(name);
         try {
             if (entry === undefined || !entry.client.usable) {
@@ -139,14 +152,17 @@ export class EmailPool {
                     await this.evictImap(name);
                 const client = this.createImap(cfg);
                 await client.connect();
-                entry = { client, selected: null, lastUsed: Date.now(), inUse: 0 };
+                entry = { client, selected: null, selectedReadOnly: true, lastUsed: Date.now(), inUse: 0 };
                 this.imaps.set(name, entry);
             }
             entry.lastUsed = Date.now();
             entry.inUse += 1;
-            if (folder !== null && entry.selected !== folder) {
-                await entry.client.mailboxOpen(folder, { readOnly: true });
+            // Reopen when the folder changes or when the caller needs a different
+            // access mode (email_mark writes flags / moves messages).
+            if (folder !== null && (entry.selected !== folder || entry.selectedReadOnly !== readOnly)) {
+                await entry.client.mailboxOpen(folder, { readOnly });
                 entry.selected = folder;
+                entry.selectedReadOnly = readOnly;
             }
             const result = await run(entry.client);
             entry.lastUsed = Date.now();
@@ -342,6 +358,55 @@ export class EmailPool {
             return { account: name, uid, folder: folderName, ...body };
         });
     }
+    async mark(accountName, folder, uid, action, toFolder) {
+        const name = this.resolveName(accountName);
+        const cfg = this.account(name);
+        const folderName = folder || cfg.inboxFolder;
+        return this.withImap(name, folderName, async (client) => {
+            const before = await client.fetchOne(uid, { uid: true, flags: true }, { uid: true });
+            if (before === false) {
+                throw new MailError('找不到 uid=' + uid + ' 的邮件（可能已被删除，或不在文件夹 "' + folderName + '"；可用 email_list 重新获取 uid）');
+            }
+            let seen = before.flags?.has('\\Seen') === true;
+            let flagged = before.flags?.has('\\Flagged') === true;
+            if (action === 'read' && !seen) {
+                await client.messageFlagsAdd(uid, ['\\Seen'], { uid: true });
+                seen = true;
+            }
+            else if (action === 'unread' && seen) {
+                await client.messageFlagsRemove(uid, ['\\Seen'], { uid: true });
+                seen = false;
+            }
+            else if (action === 'star' && !flagged) {
+                await client.messageFlagsAdd(uid, ['\\Flagged'], { uid: true });
+                flagged = true;
+            }
+            else if (action === 'unstar' && flagged) {
+                await client.messageFlagsRemove(uid, ['\\Flagged'], { uid: true });
+                flagged = false;
+            }
+            else if (action === 'move') {
+                const target = (toFolder ?? '').trim();
+                if (target === '')
+                    throw new MailError('move 操作需要 toFolder 参数（用 email_folders 查看可用文件夹）');
+                if (target === folderName)
+                    throw new MailError('邮件已在文件夹 "' + folderName + '" 中，无需移动');
+                const folders = await client.list();
+                if (!folders.some(row => row.path === target)) {
+                    throw new MailError('找不到目标文件夹 "' + target + '"，可用：' + folders.map(row => row.path).join('、'));
+                }
+                const moved = await client.messageMove(uid, target, { uid: true });
+                if (moved === false)
+                    throw new MailError('移动 uid=' + uid + ' 到 "' + target + '" 失败（服务器拒绝了 MOVE/COPY）');
+                const result = { account: name, uid, folder: folderName, action, seen, flagged, movedTo: target };
+                const destUid = moved?.destinationUid;
+                if (typeof destUid === 'number')
+                    result.movedUid = destUid;
+                return result;
+            }
+            return { account: name, uid, folder: folderName, action, seen, flagged };
+        }, false);
+    }
     async folders(accountName, subscribedOnly) {
         const name = this.resolveName(accountName);
         return this.withImap(name, null, async (client) => {

package/lib/settings.js

@@ -83,7 +83,9 @@ export function toEmailConfig(value, user) {
     if (user === null || user?.imap !== undefined) {
         const fields = user === null ? value.imap : (user.imap ?? {});
         const imap = {};
-        if (fields.host !== undefined)
+        // Empty host means "use the provider preset" — never project it, or the
+        // preset gets shadowed by '' (issues #3 / #6).
+        if (fields.host !== undefined && value.imap.host !== '')
             imap.host = value.imap.host;
         if (fields.port !== undefined)
             imap.port = value.imap.port;
@@ -94,7 +96,7 @@ export function toEmailConfig(value, user) {
     if (user === null || user?.smtp !== undefined) {
         const fields = user === null ? value.smtp : (user.smtp ?? {});
         const smtp = {};
-        if (fields.host !== undefined)
+        if (fields.host !== undefined && value.smtp.host !== '')
             smtp.host = value.smtp.host;
         if (fields.port !== undefined)
             smtp.port = value.smtp.port;

package/lib/types.d.ts

@@ -124,6 +124,26 @@ export interface EmailWatchArgs extends AccountArg {
     /** Max number of new messages to return per call, default 20. */
     limit?: number;
 }
+export type EmailMarkAction = 'read' | 'unread' | 'star' | 'unstar' | 'move';
+export interface EmailMarkArgs extends AccountArg {
+    uid: number;
+    action: EmailMarkAction;
+    /** Target folder path; only used (and required) when action is 'move'. */
+    toFolder?: string;
+    folder?: string;
+}
+export interface EmailMarkResult {
+    account: string;
+    uid: number;
+    folder: string;
+    action: EmailMarkAction;
+    seen: boolean;
+    flagged: boolean;
+    /** Set after a successful move: the destination folder path. */
+    movedTo?: string;
+    /** Set after a successful move: uid in the destination when the server reports it. */
+    movedUid?: number;
+}
 export interface EmailWatchResult {
     account: string;
     folder: string;

package/lib/web.js

@@ -13,6 +13,8 @@ const SKIN_PACKAGES = [
     '@dsh-external/dsh-client-ui-skin-maid-atelier',
 ];
 const WHALE_CREDIT = '鲸鱼娘：一创 上善（pixiv 62155430）· 二创 Small-tailqwq / dsh-deep-whale · CC BY-NC-SA 4.0（非商业）';
+/** Credit shown with the bundled fallback artwork (community fan character). */
+const FALLBACK_CREDIT = '鲸鱼娘：社区同人形象，版权归原作者，仅供个人非商业使用；如有异议请提 Issue 移除';
 let whaleCache;
 function pickFromDir(dir) {
     let names = [];
@@ -36,10 +38,12 @@ function contentTypeOf(file) {
     return 'image/png';
 }
 /**
- * Locate the whale-girl artwork at runtime. It is never bundled: the skin art
- * is CC BY-NC-SA 4.0, so dsh-email only serves it from the user's own
- * installed dsh-deep-whale skin package (with the attribution chain shown in
- * the widget); otherwise the bundled MIT fallback is served.
+ * Locate the whale-girl artwork at runtime. Skin art is never bundled: it is
+ * CC BY-NC-SA 4.0, so dsh-email only serves it from the user's own installed
+ * dsh-deep-whale skin package (with the attribution chain shown in the
+ * widget). Without the skin, a bundled community whale-girl artwork is
+ * served with its own credit line (copyright stays with the original author;
+ * personal non-commercial use, removed on request via issue).
  */
 function findWhaleAsset() {
     if (whaleCache !== undefined)
@@ -60,7 +64,7 @@ function findWhaleAsset() {
     }
     const fallback = join(packageDir, 'assets', 'whale-fallback.png');
     if (existsSync(fallback)) {
-        whaleCache = { file: fallback, contentType: 'image/png', skin: false, credit: '' };
+        whaleCache = { file: fallback, contentType: 'image/png', skin: false, credit: FALLBACK_CREDIT };
         return whaleCache;
     }
     return whaleCache;
@@ -130,6 +134,16 @@ export class EmailSettingsBackend {
             await pool.withImap(settings.defaultAccount, null, async () => 'connected');
             return { ok: true, ms: Date.now() - started };
         }
+        catch (error) {
+            // imapflow reports failed LOGIN as a bare "Command failed"; surface an
+            // actionable hint instead of the opaque message.
+            const raw = messageOf(error, 'unknown error');
+            const lower = raw.toLowerCase();
+            if (lower.includes('command failed') || lower.includes('authentication') || lower.includes('login')) {
+                throw new Error('邮箱登录失败：请检查邮箱地址与授权码（' + raw + '）');
+            }
+            throw error;
+        }
         finally {
             pool.dispose();
         }
@@ -231,8 +245,8 @@ export class EmailSettingsBackend {
             res.setHeader('Content-Type', asset.contentType);
             res.setHeader('Content-Length', String(bytes.length));
             res.setHeader('Cache-Control', 'no-store');
-            if (asset.credit !== '')
-                res.setHeader('X-Whale-Credit', asset.credit);
+            // No credit header: HTTP header values must be latin-1, and the widget
+            // already shows the credit from the snapshot JSON.
             res.writeHead(200);
             res.end(bytes);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-email",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "IMAP/SMTP email tools for DeepSeek Harness: list, read, search and send mail, with QQ/163/126/Sina/Aliyun/Gmail/Outlook/iCloud presets.",
   "type": "module",
   "main": "lib/index.js",