dsh-opendesign-corouter 0.1.5 → 0.1.7

package/lib/client.js

@@ -19927,22 +19927,29 @@ function record2(value) {
 }
 
 // src/device-auth.ts
-function validateActivationUrl(value, userCode) {
+function validateActivationUrl(value, userCode, deviceId) {
   if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
   try {
     const url2 = new URL(value);
     if (url2.origin !== "https://open-design.ai" || url2.pathname !== "/cloud/cli/activate" || url2.username || url2.password || url2.hash) return null;
     const entries = [...url2.searchParams];
-    if (entries.length > 1) return null;
-    if (entries.length) {
+    if (entries.length === 2) {
+      if (entries.some(([key]) => key !== "deviceId" && key !== "userCode")) return null;
+      const id = url2.searchParams.get("deviceId");
+      const code = url2.searchParams.get("userCode");
+      if (!validDeviceId(id) || !validUserCode(code) || deviceId !== void 0 && id !== deviceId || userCode !== void 0 && code !== userCode) return null;
+    } else if (entries.length === 1) {
       const entry = entries[0];
       if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
-    }
+    } else if (entries.length > 2) return null;
     return url2.href;
   } catch {
     return null;
   }
 }
+function validDeviceId(value) {
+  return typeof value === "string" && /^[a-z0-9_-]{1,200}$/iu.test(value);
+}
 function validUserCode(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
 }
@@ -20047,9 +20054,9 @@ function amount(value, label, negative = false) {
   if (typeof value !== "number" || !Number.isFinite(value) || !negative && value < 0) throw new Error(`${label} \u5FC5\u987B\u662F${negative ? "" : "\u975E\u8D1F"}\u6709\u9650\u6570\u5B57`);
   return value;
 }
-function positiveInteger(value, label, max) {
+function positiveInteger(value, label, max, min = 1) {
   const result = count(value, label);
-  if (result === 0 || result > max) throw new Error(`${label} \u8D85\u51FA\u8303\u56F4`);
+  if (result < min || result > max) throw new Error(`${label} \u8D85\u51FA\u8303\u56F4`);
   return result;
 }
 function parseEfforts(value) {
@@ -20152,9 +20159,9 @@ function parseStatusConfig(value) {
     apiKeyEnv,
     ...value.apiProtocol === void 0 ? {} : { apiProtocol: member(value.apiProtocol, API_PROTOCOL_IDS, "\u63A8\u7406\u534F\u8BAE") },
     ...value.modelSettings === void 0 ? {} : { modelSettings: parseModelSettingsMap(value.modelSettings) },
-    ...value.requestTimeoutMs === void 0 ? {} : { requestTimeoutMs: positiveInteger(value.requestTimeoutMs, "\u8BF7\u6C42\u8D85\u65F6", 36e5) },
-    ...value.streamIdleTimeoutMs === void 0 ? {} : { streamIdleTimeoutMs: positiveInteger(value.streamIdleTimeoutMs, "\u6D41\u7A7A\u95F2\u8D85\u65F6", 18e5) },
-    ...value.quotaRefreshSeconds === void 0 ? {} : { quotaRefreshSeconds: positiveInteger(value.quotaRefreshSeconds, "\u81EA\u52A8\u5237\u65B0\u95F4\u9694", 3600) }
+    ...value.requestTimeoutMs === void 0 ? {} : { requestTimeoutMs: positiveInteger(value.requestTimeoutMs, "\u8BF7\u6C42\u8D85\u65F6", 36e5, 1e3) },
+    ...value.streamIdleTimeoutMs === void 0 ? {} : { streamIdleTimeoutMs: positiveInteger(value.streamIdleTimeoutMs, "\u6D41\u7A7A\u95F2\u8D85\u65F6", 18e5, 1e3) },
+    ...value.quotaRefreshSeconds === void 0 ? {} : { quotaRefreshSeconds: positiveInteger(value.quotaRefreshSeconds, "\u81EA\u52A8\u5237\u65B0\u95F4\u9694", 3600, 5) }
   };
 }
 function parseStatus(value) {
@@ -20167,9 +20174,13 @@ function parseStatus(value) {
     if (ids.has(model.id)) throw new Error(`\u6A21\u578B\u5217\u8868\u91CD\u590D\u4E86 id "${model.id}"`);
     ids.add(model.id);
   }
+  const apiKeyConfigured = flag(value.apiKeyConfigured, "\u51ED\u636E\u662F\u5426\u5C31\u7EEA");
+  const apiKeySource = value.apiKeySource === void 0 ? void 0 : member(value.apiKeySource, ["reference", "stored", "device"], "\u63A8\u7406\u51ED\u636E\u6765\u6E90");
+  if (!apiKeyConfigured && apiKeySource !== void 0) throw new Error("\u672A\u914D\u7F6E\u51ED\u636E\u65F6\u4E0D\u80FD\u6307\u5B9A\u63A8\u7406\u51ED\u636E\u6765\u6E90");
   return {
     revision: text(value.revision, "\u914D\u7F6E\u7248\u672C", MAX_REVISION),
-    apiKeyConfigured: flag(value.apiKeyConfigured, "\u51ED\u636E\u662F\u5426\u5C31\u7EEA"),
+    apiKeyConfigured,
+    ...apiKeySource === void 0 ? {} : { apiKeySource },
     ...value.sessionSource === void 0 ? {} : { sessionSource: member(value.sessionSource, SESSION_SOURCES, "\u767B\u5F55\u6001\u6765\u6E90") },
     quota: parseQuotaSnapshot(value.quota),
     login: parseLoginState(value.login),
@@ -20257,7 +20268,7 @@ var LOGIN_LABELS = {
 };
 var QUOTA_LABELS = {
   ok: "\u989D\u5EA6\u4FE1\u606F\u5DF2\u66F4\u65B0",
-  partial: "\u90E8\u5206\u989D\u5EA6\u6682\u4E0D\u53EF\u7528\uFF0C\u5176\u4F59\u6570\u636E\u4ECD\u53EF\u53C2\u8003",
+  partial: "\u989D\u5EA6\u6570\u636E\u6682\u672A\u5B8C\u6574",
   "need-login": "\u9700\u8981\u767B\u5F55\u540E\u8BFB\u53D6\u989D\u5EA6",
   error: "\u6682\u65F6\u65E0\u6CD5\u8BFB\u53D6\u989D\u5EA6"
 };
@@ -20271,7 +20282,9 @@ function installStyles() {
 .odc-tab{flex:none;border:1px solid transparent;border-radius:8px;padding:7px 13px;background:transparent;color:var(--dsw-alias-label-secondary,inherit);font:inherit;cursor:pointer}.odc-tab:hover{background:var(--dsw-alias-bg-layer-1,transparent)}.odc-tab[aria-selected=true]{color:var(--dsw-alias-label-primary,inherit);border-color:var(--dsw-alias-border-l3,transparent);background:var(--dsw-alias-bg-layer-1,transparent)}
 .odc-panel{display:grid;gap:14px}.odc-card{min-width:0;padding:15px;border:1px solid var(--dsw-alias-border-l4,transparent);border-radius:12px;background:var(--dsw-alias-bg-layer-1,transparent)}.odc-card>p{margin-top:6px}.odc-card-head,.odc-row{display:flex;align-items:center;justify-content:space-between;gap:12px;flex-wrap:wrap}.odc-card-head{margin-bottom:12px}
 .odc-quota-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}.odc-metric{display:grid;align-content:start;gap:5px;min-height:96px}.odc-metric-value{font-size:20px;font-weight:650;font-variant-numeric:tabular-nums;overflow-wrap:anywhere}.odc-metric-value.odc-metric-text{font-size:13px;font-weight:600;line-height:1.55}.odc-quota-grid+.odc-quota-grid{margin-top:10px}
-.odc-label,.odc-hint,.odc-meta{color:var(--dsw-alias-label-secondary,inherit);font-size:11px;line-height:1.6}.odc-meta{margin-top:10px!important}.odc-window{display:grid;gap:7px;margin-top:10px}.odc-window progress{width:100%;height:7px;accent-color:var(--dsw-alias-brand-primary,Highlight)}
+.odc-label,.odc-hint,.odc-meta{color:var(--dsw-alias-label-secondary,inherit);font-size:11px;line-height:1.6}.odc-meta{margin-top:10px!important}
+.odc-window{display:grid;gap:10px;margin-top:12px;padding:14px;border-radius:10px;background:var(--dsw-alias-bg-layer-2,transparent);min-width:0}.odc-window-head{display:flex;align-items:center;justify-content:space-between;gap:12px;flex-wrap:wrap}.odc-window h4{margin:0;font-size:13px;font-weight:600}.odc-window-remaining{display:flex;align-items:baseline;gap:6px;font-variant-numeric:tabular-nums;white-space:nowrap}.odc-window-remaining strong{font-size:22px;line-height:1.2}.odc-window progress{display:block;width:100%;height:8px;accent-color:var(--dsw-alias-brand-primary,Highlight)}
+.odc-window-usage{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px;margin:0}.odc-window-usage>div{display:grid;gap:3px;min-width:0}.odc-window dt,.odc-quota-footer dt{color:var(--dsw-alias-label-secondary,inherit);font-size:11px}.odc-window dd,.odc-quota-footer dd{margin:0;min-width:0;overflow-wrap:anywhere;font-variant-numeric:tabular-nums}.odc-window-reset{display:grid;gap:3px;padding-top:10px;border-top:1px solid var(--dsw-alias-border-l4,transparent)}.odc-window-reset time{font-size:12px}.odc-window-details>summary{cursor:pointer;font-size:11px;color:var(--dsw-alias-label-secondary,inherit);min-height:32px;padding:6px 0}.odc-window-details dl{display:grid;gap:8px;margin:6px 0 0}.odc-window-details dl>div{display:grid;gap:3px}.odc-quota-footer{display:grid;gap:8px;margin:0;padding-top:10px;border-top:1px solid var(--dsw-alias-border-l4,transparent)}.odc-quota-footer>div{display:grid;grid-template-columns:72px minmax(0,1fr);gap:10px}.odc-quota-footer dd{font-size:11px;color:var(--dsw-alias-label-secondary,inherit)}
 .odc-button{display:inline-flex;align-items:center;justify-content:center;min-height:32px;padding:6px 12px;border:1px solid var(--dsw-alias-border-l3,transparent);border-radius:8px;background:var(--dsw-alias-bg-layer-2,transparent);color:var(--dsw-alias-label-primary,inherit);font:inherit;font-size:12px;cursor:pointer}.odc-button:hover:not(:disabled){border-color:var(--dsw-alias-brand-primary,Highlight)}.odc-button-primary{background:var(--dsw-alias-button-primary-fill,var(--dsw-alias-brand-primary,Highlight));color:var(--dsw-alias-label-primary-foreground,HighlightText);border-color:transparent}.odc-button-primary:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover,var(--dsw-alias-brand-primary,Highlight))}.odc-button:disabled{opacity:.55;cursor:not-allowed}.odc-button-small{min-height:26px;padding:3px 9px;font-size:11px}.odc-actions{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
 .odc-notice{padding:9px 11px;border-radius:8px;background:var(--dsw-alias-bg-layer-2,transparent);font-size:12px;line-height:1.6}.odc-notice[data-kind=error]{color:var(--dsw-alias-state-error-primary,inherit);color:color-mix(in srgb,var(--dsw-alias-state-error-primary,CanvasText) 85%,var(--dsw-alias-label-primary,CanvasText))}
 .odc-model-groups{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px;margin-top:12px}.odc-model-list{display:grid;gap:6px;margin:10px 0 0;padding:0;list-style:none}.odc-model-item{padding:9px 10px;border-radius:8px;background:var(--dsw-alias-bg-layer-2,transparent);min-width:0}.odc-model-head{display:flex;align-items:flex-start;justify-content:space-between;gap:8px;flex-wrap:wrap}.odc-model-switch{min-width:0;flex:1 1 190px}.odc-model-item strong,.odc-model-item code{display:block;overflow-wrap:anywhere}.odc-model-item strong{font-size:12px;font-weight:600}.odc-model-item code{margin-top:2px;color:var(--dsw-alias-label-secondary,inherit);font-size:11px}.odc-model-meta{margin-top:6px!important;color:var(--dsw-alias-label-secondary,inherit);font-size:11px;overflow-wrap:anywhere}.odc-model-count{color:var(--dsw-alias-label-secondary,inherit);font-size:11px;font-weight:400}.odc-chip{display:inline-flex;align-items:center;padding:1px 7px;border:1px solid var(--dsw-alias-border-l3,transparent);border-radius:999px;color:var(--dsw-alias-label-secondary,inherit);font-size:10px;line-height:1.6}
@@ -20464,19 +20477,49 @@ function QuotaView({ quota, nextAutoRefreshAt, refreshIntervalSeconds }) {
         React.Fragment,
         null,
         h("p", { className: "odc-metric-value" }, "\u2014"),
-        h("p", { className: "odc-hint" }, "\u989D\u5EA6\u7A97\u53E3\u6682\u4E0D\u53EF\u786E\u8BA4\uFF1B\u4E0D\u6309 0 \u586B\u5145\u3002")
-      ) : quota.windows.map((window, index) => h(
-        "div",
-        { className: "odc-window", key: `${window.durationSeconds}-${index}` },
-        h(
-          "div",
-          { className: "odc-row" },
-          h("span", null, windowLabel(window.durationSeconds)),
-          h("span", { className: "odc-label" }, `\u5DF2\u7528 ${window.percent.toFixed(1)}% \xB7 \u5269\u4F59 ${window.remaining ?? "\u2014"}`)
-        ),
-        h("progress", { max: 100, value: window.percent, "aria-label": `${windowLabel(window.durationSeconds)}\u5DF2\u7528\u989D\u5EA6` }),
-        h("span", { className: "odc-meta" }, `\u5DF2\u7528 ${window.used} / \u4E0A\u9650 ${window.limit} \xB7 \u6062\u590D ${formatTime(window.resetsAt)}${window.windowStart === void 0 ? "" : ` \xB7 \u7A97\u53E3\u5F00\u59CB ${formatTime(window.windowStart)}`}${window.resetMode === void 0 ? "" : ` \xB7 \u91CD\u7F6E\u65B9\u5F0F ${RESET_MODE_LABELS[window.resetMode] ?? window.resetMode}`}`)
-      ))
+        h("p", { className: "odc-hint" }, "\u6682\u65F6\u65E0\u6CD5\u83B7\u53D6\u989D\u5EA6\u7A97\u53E3\u3002")
+      ) : quota.windows.map((window, index) => {
+        const label = windowLabel(window.durationSeconds);
+        const remainingPercent = Math.max(0, Math.min(100, 100 - window.percent));
+        return h(
+          "section",
+          { className: "odc-window", key: `${window.durationSeconds}-${index}`, "aria-label": label },
+          h(
+            "div",
+            { className: "odc-window-head" },
+            h("h4", null, label),
+            h(
+              "div",
+              { className: "odc-window-remaining" },
+              h("strong", null, `${remainingPercent.toFixed(1)}%`),
+              h("span", { className: "odc-label" }, "\u5269\u4F59")
+            )
+          ),
+          h("progress", { max: 100, value: remainingPercent, "aria-label": `${label}\u5269\u4F59\u989D\u5EA6` }),
+          h(
+            "dl",
+            { className: "odc-window-usage", "aria-label": "\u7A97\u53E3\u7528\u91CF\u660E\u7EC6" },
+            [{ label: "\u5DF2\u7528", value: window.used }, { label: "\u4E0A\u9650", value: window.limit }, { label: "\u5269\u4F59", value: window.remaining ?? "\u2014" }].map((item) => h("div", { key: item.label }, h("dt", null, item.label), h("dd", null, item.value)))
+          ),
+          h(
+            "div",
+            { className: "odc-window-reset" },
+            h("span", { className: "odc-label" }, "\u4E0B\u6B21\u6062\u590D"),
+            window.resetsAt === void 0 ? h("span", null, "\u2014") : h("time", { dateTime: window.resetsAt }, formatTime(window.resetsAt))
+          ),
+          window.windowStart === void 0 && window.resetMode === void 0 ? null : h(
+            "details",
+            { className: "odc-window-details" },
+            h("summary", null, "\u7A97\u53E3\u8BE6\u60C5"),
+            h(
+              "dl",
+              null,
+              window.windowStart === void 0 ? null : h("div", null, h("dt", null, "\u7A97\u53E3\u5F00\u59CB"), h("dd", null, h("time", { dateTime: window.windowStart }, formatTime(window.windowStart)))),
+              window.resetMode === void 0 ? null : h("div", null, h("dt", null, "\u91CD\u7F6E\u65B9\u5F0F"), h("dd", null, RESET_MODE_LABELS[window.resetMode] ?? window.resetMode))
+            )
+          )
+        );
+      })
     ),
     h("div", { className: "odc-quota-grid" }, metrics.map((metric) => h(
       "div",
@@ -20492,12 +20535,17 @@ function QuotaView({ quota, nextAutoRefreshAt, refreshIntervalSeconds }) {
       h("strong", { className: "odc-metric-value odc-metric-text" }, metric.value),
       h("span", { className: "odc-hint" }, metric.hint)
     ))),
-    h("p", { className: "odc-meta" }, `\u66F4\u65B0\u4E8E ${formatTime(quota.updatedAt)}${quota.source !== void 0 ? ` \xB7 \u6765\u6E90\uFF1A${SOURCE_LABELS[quota.source]}\uFF08\u53EA\u8BFB\u5C55\u793A\uFF09` : ""}`),
+    h(
+      "dl",
+      { className: "odc-quota-footer", "aria-label": "\u989D\u5EA6\u6570\u636E\u6765\u6E90\u4E0E\u66F4\u65B0\u65F6\u95F4" },
+      h("div", null, h("dt", null, "\u6700\u8FD1\u66F4\u65B0"), h("dd", null, h("time", { dateTime: quota.updatedAt }, formatTime(quota.updatedAt)))),
+      quota.source === void 0 ? null : h("div", null, h("dt", null, "\u6570\u636E\u6765\u6E90"), h("dd", null, SOURCE_LABELS[quota.source]))
+    ),
     h(
       "details",
       { className: "odc-model-details" },
       h("summary", null, "\u5982\u4F55\u7406\u89E3\u8FD9\u4E9B\u989D\u5EA6\uFF1F"),
-      h("p", { className: "odc-hint" }, "\u8D60\u9001\u7A97\u53E3\u4E0E\u94B1\u5305\u4F59\u989D\u5206\u522B\u8BA1\u91CF\u3002\u5957\u9910\u4F59\u989D\u6765\u81EA\u8BA2\u9605\uFF0C\u5145\u503C / \u8D60\u9001\u91D1\u989D\u6765\u81EA\u94B1\u5305\uFF1B\u603B\u989D\u5EA6\u662F\u94B1\u5305\u5F53\u524D\u53EF\u7528\u603B\u989D\u3002\u5B9E\u9645\u6263\u6B3E\u7531\u670D\u52A1\u7AEF\u51B3\u5B9A\u3002\u989D\u5EA6\u6570\u636E\u53EA\u8BFB\u5C55\u793A\uFF0C\u672A\u77E5\u91D1\u989D\u663E\u793A \u2014\u3002")
+      h("p", { className: "odc-hint" }, "\u8D60\u9001\u7A97\u53E3\u663E\u793A\u5468\u671F\u5185\u7684\u4F7F\u7528\u91CF\u3002\u5957\u9910\u4F59\u989D\u548C\u5145\u503C / \u8D60\u9001\u91D1\u989D\u662F\u94B1\u5305\u7684\u4E0D\u540C\u5206\u6C60\uFF0C\u603B\u989D\u5EA6\u662F\u94B1\u5305\u5408\u8BA1\u3002\u2014 \u8868\u793A\u6682\u65E0\u6570\u636E\u3002")
     ),
     quota.note !== void 0 ? h("p", { className: "odc-notice", "data-kind": quota.state === "error" ? "error" : "status", role: quota.state === "error" ? "alert" : "status" }, quota.note) : null
   );
@@ -20578,7 +20626,7 @@ function Overview({ status, busy, onRefresh, nextAutoRefreshAt, refreshIntervalS
     h(
       "div",
       { className: "odc-card-head" },
-      h("div", null, h("h3", null, "\u989D\u5EA6\u6982\u89C8"), h("p", { className: "odc-hint" }, "\u5957\u9910\u7A97\u53E3\u4E0E\u94B1\u5305\u4F59\u989D\u5206\u5F00\u8BA1\u91CF\uFF1B\u672A\u77E5\u6570\u636E\u4E0D\u505A\u63A8\u7B97\u3002")),
+      h("div", null, h("h3", null, "\u989D\u5EA6\u6982\u89C8"), h("p", { className: "odc-hint" }, "\u67E5\u770B\u5957\u9910\u7528\u91CF\u3001\u8BA2\u9605\u4F59\u989D\u548C\u5145\u503C\u4F59\u989D\u3002")),
       h("button", { className: "odc-button", type: "button", disabled: busy, onClick: onRefresh }, busy ? "\u5237\u65B0\u4E2D\u2026" : "\u5237\u65B0\u989D\u5EA6")
     ),
     h(QuotaView, { quota: status?.quota, nextAutoRefreshAt, refreshIntervalSeconds })
@@ -20852,7 +20900,7 @@ function Models({ status, formSnapshot, setFormField, pendingField, onRefreshMod
       saving.current = false;
     }
   };
-  const source = status?.modelsSource === "openai" ? "OpenAI /models \u53D1\u73B0" : status?.modelsSource === "builtin" ? "\u5185\u7F6E\u76EE\u5F55" : "\u5C1A\u672A\u786E\u8BA4";
+  const source = status?.modelsSource === "openai" ? "\u5F53\u524D\u7F51\u5173" : status?.modelsSource === "builtin" ? "\u5185\u7F6E\u76EE\u5F55" : "\u5C1A\u672A\u786E\u8BA4";
   const updated = status?.modelsUpdatedAt === void 0 ? "" : ` \xB7 \u66F4\u65B0\u4E8E ${formatTime(status.modelsUpdatedAt)}`;
   const models = status?.models ?? [];
   return h(
@@ -20865,7 +20913,7 @@ function Models({ status, formSnapshot, setFormField, pendingField, onRefreshMod
         "div",
         null,
         h("h3", null, "\u53EF\u7528\u6A21\u578B"),
-        h("p", { className: "odc-hint" }, "\u4E24\u4E2A Provider \u72EC\u7ACB\u7B5B\u9009\u3002\u9010\u6A21\u578B\u7684\u542F\u7528\u4E0E\u53C2\u6570\u4F1A\u4FDD\u5B58\u5230\u63D2\u4EF6\u8BBE\u7F6E\uFF0C\u53EA\u5F71\u54CD\u672C\u63D2\u4EF6\u7684\u6A21\u578B\u9009\u62E9\u4E0E\u8BF7\u6C42\u3002")
+        h("p", { className: "odc-hint" }, "\u6309\u5206\u7EC4\u641C\u7D22\u6A21\u578B\uFF0C\u8BBE\u7F6E\u542F\u7528\u72B6\u6001\u4E0E\u9ED8\u8BA4\u53C2\u6570\u3002")
       ),
       h(
         "div",
@@ -20875,8 +20923,9 @@ function Models({ status, formSnapshot, setFormField, pendingField, onRefreshMod
           className: "odc-button",
           type: "button",
           disabled: refreshingModels || status === void 0 || status.apiKeyConfigured === false,
-          onClick: onRefreshModels
-        }, refreshingModels ? "\u6B63\u5728\u5237\u65B0\u6A21\u578B\u2026" : "\u4ECE OpenAI \u5237\u65B0\u6A21\u578B")
+          onClick: onRefreshModels,
+          title: "\u4ECE\u5F53\u524D\u914D\u7F6E\u7684\u7F51\u5173\u8BFB\u53D6\u53EF\u7528\u6A21\u578B\u76EE\u5F55"
+        }, refreshingModels ? "\u6B63\u5728\u5237\u65B0\u6A21\u578B\u2026" : "\u5237\u65B0\u6A21\u578B\u76EE\u5F55")
       )
     ),
     status?.apiKeyConfigured === false ? h("p", { className: "odc-hint" }, "\u5237\u65B0\u6A21\u578B\u9700\u8981\u53EF\u7528\u7684 API Key\uFF1B\u4FDD\u5B58 Key \u540E\u91CD\u8BD5\u3002") : null,
@@ -20885,8 +20934,8 @@ function Models({ status, formSnapshot, setFormField, pendingField, onRefreshMod
     models.length === 0 ? h("p", { className: "odc-hint", role: "status" }, "\u6682\u65E0\u53EF\u7528\u6A21\u578B\uFF1B\u53EF\u5237\u65B0\u6A21\u578B\u5217\u8868\u540E\u91CD\u8BD5\u3002") : h(
       "div",
       { className: "odc-model-groups" },
-      h(ModelGroup, { title: "\u5957\u9910\u8D60\u9001 Provider", group: "plan", models, settingsMap, authoritative, writable, pending, onCommit: commit }),
-      h(ModelGroup, { title: "\u4ED8\u8D39 Provider", group: "paid", models, settingsMap, authoritative, writable, pending, onCommit: commit })
+      h(ModelGroup, { title: "\u5957\u9910\u8D60\u9001\u6A21\u578B", group: "plan", models, settingsMap, authoritative, writable, pending, onCommit: commit }),
+      h(ModelGroup, { title: "\u4ED8\u8D39\u6A21\u578B", group: "paid", models, settingsMap, authoritative, writable, pending, onCommit: commit })
     )
   );
 }
@@ -20978,12 +21027,12 @@ function Advanced({ status, formSnapshot, setFormField, pendingField }) {
       "section",
       { className: "odc-card" },
       h("h3", null, "\u7A7A\u8F6E\u76D1\u63A7"),
-      h("p", { className: "odc-hint" }, "\u72EC\u7ACB\u76D1\u63A7\u5957\u9910\u8D60\u9001\u6A21\u578B\u7684\u7A7A\u8F6E\u6216\u534F\u8BAE\u6B8B\u6E23\uFF1B\u4E0D\u5F71\u54CD\u4ED8\u8D39 Provider \u7684\u5F00\u5173\u3002"),
+      h("p", { className: "odc-hint" }, "\u68C0\u6D4B\u5957\u9910\u8D60\u9001\u6A21\u578B\u5728\u5DE5\u5177\u5BF9\u8BDD\u4E2D\u8FD4\u56DE\u7684\u7A7A\u56DE\u7B54\u3002"),
       h("div", { style: { marginTop: 14 } }, h(Switch, {
         checked: formSnapshot.value?.emptyTurnGuard ?? status?.config.emptyTurnGuard ?? true,
         disabled: !writable || pendingField.includes("emptyTurnGuard"),
         label: "\u542F\u7528\u7A7A\u8F6E\u76D1\u63A7",
-        hint: `\u672C\u6B21\u8FD0\u884C\u5DF2\u62E6\u622A ${status?.guardedTurns ?? "\u2014"} \u8F6E\u3002\u68C0\u6D4B\u540E\u7531\u5BBF\u4E3B\u91CD\u8BD5\u7B56\u7565\u5904\u7406\uFF0C\u5BBF\u4E3B\u91CD\u8BD5\u4F1A\u989D\u5916\u6D88\u8017\u989D\u5EA6\u3002`,
+        hint: `\u5DF2\u68C0\u6D4B\u5230 ${status?.guardedTurns ?? "\u2014"} \u6B21\u7A7A\u56DE\u7B54\u3002\u81EA\u52A8\u91CD\u8BD5\u7531 DSH \u7684\u91CD\u8BD5\u8BBE\u7F6E\u63A7\u5236\uFF0C\u91CD\u8BD5\u53EF\u80FD\u989D\u5916\u6D88\u8017\u989D\u5EA6\u3002`,
         onChange: (checked) => {
           void setFormField("emptyTurnGuard", checked);
         }
@@ -20993,7 +21042,7 @@ function Advanced({ status, formSnapshot, setFormField, pendingField }) {
       "section",
       { className: "odc-card" },
       h("h3", null, "\u63A8\u7406\u534F\u8BAE"),
-      h("p", { className: "odc-hint" }, "\u63D2\u4EF6\u6309\u6240\u9009\u534F\u8BAE\u7EC4\u88C5\u8BF7\u6C42\uFF1B\u6A21\u578B\u53D1\u73B0\u59CB\u7EC8\u8BFB\u53D6 OpenAI /models\uFF0C\u4E0E\u8FD9\u91CC\u7684\u9009\u62E9\u65E0\u5173\u3002"),
+      h("p", { className: "odc-hint" }, "\u9009\u62E9\u5F53\u524D\u7F51\u5173\u652F\u6301\u7684\u63A8\u7406\u534F\u8BAE\u3002\u6A21\u578B\u76EE\u5F55\u59CB\u7EC8\u4ECE\u8BE5\u7F51\u5173\u8BFB\u53D6\u3002"),
       h(
         "div",
         { className: "odc-field" },
@@ -21041,7 +21090,7 @@ function Advanced({ status, formSnapshot, setFormField, pendingField }) {
           className: "odc-input",
           type: "text",
           value: apiKeyEnv,
-          disabled: !writable,
+          disabled: !writable || pendingField.includes("apiKeyEnv"),
           autoCapitalize: "off",
           spellCheck: false,
           onChange: (event) => setApiKeyEnv(event.target.value)
@@ -21061,7 +21110,7 @@ function Advanced({ status, formSnapshot, setFormField, pendingField }) {
       "section",
       { className: "odc-card" },
       h("h3", null, "\u8BF7\u6C42\u65F6\u9650\u4E0E\u81EA\u52A8\u5237\u65B0"),
-      h("p", { className: "odc-hint" }, "\u6570\u503C\u5728\u79BB\u5F00\u8F93\u5165\u6846\u65F6\u6821\u9A8C\u5E76\u4FDD\u5B58\uFF1B\u7559\u7A7A\u6216\u8D8A\u754C\u4E0D\u4F1A\u5199\u5165\u3002"),
+      h("p", { className: "odc-hint" }, "\u8F93\u5165\u6709\u6548\u8303\u56F4\u5185\u7684\u6574\u6570\uFF0C\u79BB\u5F00\u8F93\u5165\u6846\u540E\u4FDD\u5B58\u3002"),
       h(NumberField, {
         id: "odc-request-timeout",
         label: "\u8BF7\u6C42\u603B\u8D85\u65F6\uFF08\u6BEB\u79D2\uFF09",
@@ -21112,14 +21161,32 @@ function loginInFlight(state) {
 var ACTIVATION_OPEN_LABELS = {
   opened: "\u5DF2\u5728\u65B0\u7A97\u53E3\u6253\u5F00\u5B98\u65B9\u6388\u6743\u9875\uFF1B\u8BF7\u5728\u8BE5\u7A97\u53E3\u786E\u8BA4\u8BBE\u5907\u7801\u3002",
   "no-link": "\u6388\u6743\u7801\u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u7533\u8BF7\u3002",
-  "invalid-url": "\u6388\u6743\u94FE\u63A5\u672A\u901A\u8FC7\u6821\u9A8C\uFF0C\u8BF7\u590D\u5236\u94FE\u63A5\u624B\u52A8\u6253\u5F00\u3002",
+  "invalid-url": "\u6388\u6743\u94FE\u63A5\u65E0\u6548\uFF0C\u8BF7\u53D6\u6D88\u5E76\u91CD\u65B0\u5F00\u59CB\u767B\u5F55\u3002",
   unavailable: "\u65E0\u6CD5\u542F\u52A8\u4E34\u65F6\u6D4F\u89C8\u5668\uFF0C\u8BF7\u786E\u8BA4\u5DF2\u5B89\u88C5 Chrome\uFF1B\u4E5F\u53EF\u590D\u5236\u94FE\u63A5\u624B\u52A8\u6253\u5F00\u3002",
   failed: "\u4E34\u65F6\u6D4F\u89C8\u5668\u7A97\u53E3\u672A\u80FD\u6253\u5F00\uFF0C\u8BF7\u590D\u5236\u94FE\u63A5\u624B\u52A8\u6253\u5F00\u3002"
 };
 function LoginApproval({ login, onOpen, opening, notice }) {
+  const mounted = useMounted();
+  const copyVersion = React.useRef(0);
+  const [copyState, setCopyState] = React.useState("idle");
+  React.useEffect(() => {
+    copyVersion.current += 1;
+    setCopyState("idle");
+  }, [login?.jobId, login?.state, login?.activationUrl]);
   if (login?.state !== "waiting" || login.userCode === void 0 || login.expiresAt === void 0) return null;
   const url2 = validateActivationUrl(login.activationUrl, login.userCode);
   if (url2 === null) return null;
+  const copyLink = async () => {
+    const version2 = ++copyVersion.current;
+    setCopyState("copying");
+    try {
+      if (typeof navigator.clipboard?.writeText !== "function") throw new Error("clipboard-unavailable");
+      await navigator.clipboard.writeText(url2);
+      if (mounted.current && version2 === copyVersion.current) setCopyState("copied");
+    } catch {
+      if (mounted.current && version2 === copyVersion.current) setCopyState("manual");
+    }
+  };
   return h(
     "div",
     { className: "odc-readonly", "aria-label": "\u8BBE\u5907\u6388\u6743" },
@@ -21136,14 +21203,24 @@ function LoginApproval({ login, onOpen, opening, notice }) {
           onOpen?.();
         }
       }, opening === true ? "\u6B63\u5728\u6253\u5F00\u2026" : "\u5728\u65B0\u7A97\u53E3\u6253\u5F00\u6388\u6743\u9875"),
-      h("a", { className: "odc-button", href: url2, target: "_blank", rel: "noreferrer noopener" }, "\u590D\u5236\u94FE\u63A5\u624B\u52A8\u6253\u5F00")
+      h("button", { className: "odc-button", type: "button", disabled: copyState === "copying", onClick: () => {
+        void copyLink();
+      } }, copyState === "copying" ? "\u6B63\u5728\u590D\u5236\u2026" : "\u590D\u5236\u6388\u6743\u94FE\u63A5"),
+      h("a", { className: "odc-link", href: url2, target: "_blank", rel: "noreferrer noopener" }, "\u5B98\u65B9\u6388\u6743\u9875")
     ),
+    copyState === "copied" ? h("p", { className: "odc-hint", role: "status" }, "\u94FE\u63A5\u5DF2\u590D\u5236\uFF0C\u53EF\u5728\u5E38\u7528\u6D4F\u89C8\u5668\u4E2D\u7C98\u8D34\u6253\u5F00\u3002") : null,
+    copyState === "manual" ? h(
+      "label",
+      { className: "odc-field" },
+      h("span", null, "\u8BF7\u9009\u62E9\u5E76\u590D\u5236\u6388\u6743\u94FE\u63A5"),
+      h("input", { className: "odc-input", type: "text", readOnly: true, value: url2, onFocus: (event) => event.target.select() })
+    ) : null,
     notice ? h(NoticeView, { notice }) : null,
     h("p", { className: "odc-hint" }, `\u6388\u6743\u7801\u6709\u6548\u81F3 ${formatTime(login.expiresAt)}\u3002\u5728\u6388\u6743\u7A97\u53E3\u786E\u8BA4\u540E\uFF0C\u8FD4\u56DE\u6B64\u9875\u67E5\u770B\u7ED3\u679C\u3002`),
-    h("p", { className: "odc-hint" }, "\u65B0\u7A97\u53E3\u662F\u72EC\u7ACB\u7684\u4E34\u65F6 Chrome\uFF0C\u4E0D\u4F1A\u8BFB\u53D6\u6216\u6539\u52A8\u4F60\u6B63\u5728\u4F7F\u7528\u7684\u6D4F\u89C8\u5668\u914D\u7F6E\uFF1B\u9700\u8981\u6CBF\u7528\u5DF2\u6709\u767B\u5F55\u6001\u65F6\uFF0C\u53F3\u952E\u590D\u5236\u94FE\u63A5\u5230\u5E38\u7528\u6D4F\u89C8\u5668\u3002\u4EC5\u786E\u8BA4\u4F60\u672C\u4EBA\u53D1\u8D77\u7684\u6388\u6743\u3002")
+    h("p", { className: "odc-hint" }, "\u4E34\u65F6 Chrome \u7A97\u53E3\u9700\u8981\u5355\u72EC\u767B\u5F55\uFF1B\u4E5F\u53EF\u590D\u5236\u94FE\u63A5\u5230\u5DF2\u767B\u5F55\u7684\u5E38\u7528\u6D4F\u89C8\u5668\u3002\u4EC5\u786E\u8BA4\u4F60\u672C\u4EBA\u53D1\u8D77\u7684\u6388\u6743\u3002")
   );
 }
-function Connection({ status, formSnapshot, setFormField, pendingField, caller, loadStatus, refreshAfterLogin }) {
+function Connection({ status, formSnapshot, setFormField, pendingField, caller, onLoginStatus, onStatus }) {
   const mounted = useMounted();
   const actionVersion = React.useRef(0);
   const [busy, setBusy] = React.useState(false);
@@ -21154,6 +21231,7 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
   const [activationNotice, setActivationNotice] = React.useState(null);
   const activationJob = React.useRef(null);
   const activationToken = React.useRef(0);
+  const autoOpenPending = React.useRef(false);
   React.useEffect(() => () => {
     actionVersion.current += 1;
   }, []);
@@ -21172,15 +21250,17 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
     if (status === void 0 || busy || keyBusy) return;
     const version2 = ++actionVersion.current;
     setBusy(true);
+    autoOpenPending.current = true;
     setNotice({ kind: "status", text: "\u6B63\u5728\u7533\u8BF7\u8BBE\u5907\u6388\u6743\u2026" });
     try {
       const next = await caller("startLogin", { expectedRevision: status.revision });
       if (!mounted.current || version2 !== actionVersion.current) return;
+      onLoginStatus(next);
       setNotice(null);
       setActivationNotice(null);
-      await (next.state === "success" ? refreshAfterLogin() : loadStatus());
     } catch {
-      if (mounted.current && version2 === actionVersion.current) setNotice({ kind: "error", text: "\u65E0\u6CD5\u542F\u52A8\u767B\u5F55\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002" });
+      autoOpenPending.current = false;
+      if (mounted.current && version2 === actionVersion.current) setNotice({ kind: "error", text: "\u767B\u5F55\u8BF7\u6C42\u6682\u672A\u786E\u8BA4\uFF0C\u8BF7\u91CD\u8BD5\u3002" });
     } finally {
       if (mounted.current && version2 === actionVersion.current) setBusy(false);
     }
@@ -21190,10 +21270,11 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
     const version2 = ++actionVersion.current;
     setBusy(true);
     try {
-      await caller("cancelLogin", { jobId: login.jobId });
+      const next = await caller("cancelLogin", { jobId: login.jobId });
       if (!mounted.current || version2 !== actionVersion.current) return;
-      await loadStatus();
-      if (mounted.current) setNotice({ kind: "status", text: "\u5DF2\u8BF7\u6C42\u53D6\u6D88\u767B\u5F55\u3002" });
+      autoOpenPending.current = false;
+      onLoginStatus(next);
+      setNotice({ kind: "status", text: next.message ?? LOGIN_LABELS[next.state] });
     } catch {
       if (mounted.current && version2 === actionVersion.current) setNotice({ kind: "error", text: "\u53D6\u6D88\u672A\u5B8C\u6210\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002" });
     } finally {
@@ -21210,15 +21291,15 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
     setKeyBusy(true);
     setNotice(null);
     try {
-      await caller("saveApiKey", { value: apiKey, expectedRevision: status.revision });
+      const next = await caller("saveApiKey", { value: apiKey, expectedRevision: status.revision });
       if (!mounted.current || version2 !== actionVersion.current) return;
       setApiKey("");
-      await loadStatus();
-      if (mounted.current) setNotice({ kind: "status", text: "API Key \u5DF2\u5B89\u5168\u4FDD\u5B58\u3002" });
+      onStatus(next);
+      setNotice({ kind: "status", text: next.apiKeySource === "reference" ? `API Key \u5DF2\u4FDD\u5B58\uFF1B\u5F53\u524D\u4ECD\u4F18\u5148\u4F7F\u7528\u73AF\u5883\u6216\u51ED\u636E\u5F15\u7528 ${next.config.apiKeyEnv}\u3002` : next.apiKeySource === "stored" ? "API Key \u5DF2\u4FDD\u5B58\u5E76\u7528\u4E8E\u5F53\u524D\u7F51\u5173\u3002" : "API Key \u5DF2\u4FDD\u5B58\u3002" });
     } catch {
       if (!mounted.current || version2 !== actionVersion.current) return;
       setApiKey("");
-      setNotice({ kind: "error", text: "API Key \u672A\u4FDD\u5B58\uFF0C\u8BF7\u68C0\u67E5\u540E\u91CD\u8BD5\u3002" });
+      setNotice({ kind: "error", text: "\u4FDD\u5B58\u7ED3\u679C\u6682\u672A\u786E\u8BA4\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002" });
     } finally {
       if (mounted.current && version2 === actionVersion.current) setKeyBusy(false);
     }
@@ -21240,7 +21321,17 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
       if (mounted.current && activationToken.current === token) setOpening(false);
     }
   };
+  React.useEffect(() => {
+    if (!autoOpenPending.current || busy || keyBusy || opening || status === void 0) return;
+    if (state === "waiting") {
+      autoOpenPending.current = false;
+      void openActivation();
+    } else if (state === "error" || state === "cancelled" || state === "success") {
+      autoOpenPending.current = false;
+    }
+  }, [state, login?.jobId, busy, keyBusy, opening, status]);
   const desktopChecked = formSnapshot.value?.useDesktopCredential ?? status?.config.useDesktopCredential ?? true;
+  const keySource = status?.apiKeySource === "reference" ? `\u73AF\u5883\u6216\u51ED\u636E\u5F15\u7528\uFF08${status.config.apiKeyEnv}\uFF09` : status?.apiKeySource === "stored" ? "\u5DF2\u4FDD\u5B58\u7684 API Key" : status?.apiKeySource === "device" ? "\u8BBE\u5907\u6388\u6743" : status?.apiKeyConfigured ? "\u5C1A\u672A\u786E\u8BA4" : "\u672A\u914D\u7F6E";
   return h(
     React.Fragment,
     null,
@@ -21256,7 +21347,7 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
           checked: desktopChecked,
           disabled: formSnapshot.status !== "ready" || formSnapshot.value === void 0 || !formSnapshot.writable || pendingField.includes("useDesktopCredential"),
           label: "\u4F18\u5148\u4F7F\u7528\u684C\u9762\u767B\u5F55\u6001",
-          hint: "\u4EC5\u63A7\u5236\u8BFB\u53D6\u4F18\u5148\u7EA7\uFF0C\u4E0D\u4F1A\u4FEE\u6539\u6216\u5199\u56DE\u684C\u9762\u7AEF\u767B\u5F55\u6587\u4EF6\u3002",
+          hint: "\u4F18\u5148\u663E\u793A\u684C\u9762\u7AEF\u767B\u5F55\u8D26\u53F7\u7684\u989D\u5EA6\u3002",
           onChange: (checked) => {
             void setFormField("useDesktopCredential", checked);
           }
@@ -21289,8 +21380,9 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
     h(
       "section",
       { className: "odc-card" },
-      h("h3", null, "API Key\uFF08\u53EF\u9009\u8986\u76D6\uFF09"),
-      h("p", { className: "odc-hint" }, status?.apiKeyConfigured === true ? "\u5F53\u524D\u7F51\u5173\u5DF2\u6709\u53EF\u7528\u63A8\u7406\u51ED\u636E\u3002\u4F18\u5148\u7EA7\uFF1A\u73AF\u5883\u6216\u51ED\u636E\u5F15\u7528 \u2192 \u624B\u52A8\u4FDD\u5B58\u7684 API Key \u2192 \u8BBE\u5907\u6388\u6743\u4EE4\u724C\u3002" : "\u5F53\u524D\u7F51\u5173\u5C1A\u65E0\u63A8\u7406\u51ED\u636E\u3002\u53EF\u5B8C\u6210\u8BBE\u5907\u6388\u6743\u4EE5\u4F7F\u7528\u5B98\u65B9\u7F51\u5173\uFF0C\u6216\u4E3A\u5F53\u524D\u7F51\u5173\u5355\u72EC\u4FDD\u5B58 API Key\u3002"),
+      h("h3", null, "API Key"),
+      h("p", { className: "odc-meta", "aria-label": "\u5F53\u524D\u751F\u6548\u7684\u63A8\u7406\u51ED\u636E\u6765\u6E90" }, `\u5F53\u524D\u751F\u6548\u6765\u6E90\uFF1A${keySource}`),
+      h("p", { className: "odc-hint" }, status?.apiKeyConfigured === true ? "\u5F53\u524D\u7F51\u5173\u5DF2\u914D\u7F6E\u63A8\u7406\u51ED\u636E\u3002\u53EF\u5728\u6B64\u4FDD\u5B58\u63D2\u4EF6\u4E13\u7528\u7684 API Key\u3002" : "\u5F53\u524D\u7F51\u5173\u5C1A\u65E0\u63A8\u7406\u51ED\u636E\u3002\u53EF\u5B8C\u6210\u8BBE\u5907\u6388\u6743\u4EE5\u4F7F\u7528\u5B98\u65B9\u7F51\u5173\uFF0C\u6216\u4E3A\u5F53\u524D\u7F51\u5173\u5355\u72EC\u4FDD\u5B58 API Key\u3002"),
       h(
         "form",
         { onSubmit: (event) => {
@@ -21359,6 +21451,19 @@ function SettingsPage({ caller, form }) {
     ...acceptedFormSnapshot,
     value: acceptedFormSnapshot.value === void 0 ? void 0 : { ...acceptedFormSnapshot.value, ...pendingValues }
   }), [acceptedFormSnapshot, pendingValues]);
+  const acceptLoginStatus = React.useCallback((login) => {
+    statusVersion.current += 1;
+    loginVersion.current += 1;
+    setStatus((previous) => previous === void 0 ? previous : { ...previous, login });
+    setError(void 0);
+  }, []);
+  const acceptStatus = React.useCallback((next) => {
+    statusVersion.current += 1;
+    loginVersion.current += 1;
+    setStatus(next);
+    setModelsNotice(null);
+    setError(void 0);
+  }, []);
   const loadStatus = React.useCallback(async () => {
     const version2 = ++statusVersion.current;
     try {
@@ -21461,7 +21566,7 @@ function SettingsPage({ caller, form }) {
       if (!mounted.current || version2 !== modelsVersion.current) return;
       setStatus(next);
       setError(void 0);
-      setModelsNotice(next.modelsError === void 0 ? { kind: "status", text: `\u5DF2\u4ECE OpenAI \u5237\u65B0\u6A21\u578B\u5217\u8868\uFF0C\u5171 ${next.models.length} \u4E2A\u6A21\u578B\u3002` } : null);
+      setModelsNotice(next.modelsError === void 0 ? { kind: "status", text: `\u5DF2\u4ECE\u5F53\u524D\u7F51\u5173\u5237\u65B0\u6A21\u578B\u76EE\u5F55\uFF0C\u5171 ${next.models.length} \u4E2A\u6A21\u578B\u3002` } : null);
     } catch {
       if (mounted.current && version2 === modelsVersion.current) setModelsNotice({ kind: "error", text: "\u6A21\u578B\u5237\u65B0\u672A\u5B8C\u6210\uFF0C\u8BF7\u68C0\u67E5\u51ED\u636E\u3001\u7F51\u5173\u4E0E\u7F51\u7EDC\u540E\u91CD\u8BD5\u3002" });
     } finally {
@@ -21482,10 +21587,7 @@ function SettingsPage({ caller, form }) {
         const login = await caller("loginStatus");
         if (stopped || !mounted.current || version2 !== loginVersion.current) return;
         setStatus((previous) => previous === void 0 ? previous : { ...previous, login });
-        if (!loginInFlight(login.state)) {
-          if (login.state === "success") void refresh();
-          else void loadStatus();
-        }
+        if (!loginInFlight(login.state) && login.state !== "success") void loadStatus();
       } catch {
       }
     };
@@ -21499,6 +21601,11 @@ function SettingsPage({ caller, form }) {
       loginVersion.current += 1;
     };
   }, [caller, loadStatus, loginActive, mounted, refresh]);
+  React.useEffect(() => {
+    if (loginState !== "success") return;
+    void loadStatus();
+    void refresh(true);
+  }, [loginState, status?.login.jobId, loadStatus, refresh]);
   const configuredSeconds = formSnapshot.value?.quotaRefreshSeconds ?? status?.config.quotaRefreshSeconds;
   const refreshIntervalSeconds = configuredSeconds === void 0 ? DEFAULT_QUOTA_REFRESH_SECONDS : normaliseQuotaRefreshSeconds(configuredSeconds);
   const quotaNextRefreshAt = status?.quota.nextRefreshAt;
@@ -21544,7 +21651,7 @@ function SettingsPage({ caller, form }) {
       notice: modelsNotice
     });
   } else if (tab === "connection") {
-    content = h(Connection, { status, formSnapshot, setFormField, pendingField, caller, loadStatus, refreshAfterLogin: refresh });
+    content = h(Connection, { status, formSnapshot, setFormField, pendingField, caller, onLoginStatus: acceptLoginStatus, onStatus: acceptStatus });
   } else {
     content = h(Advanced, { status, formSnapshot, setFormField, pendingField });
   }
@@ -21552,7 +21659,7 @@ function SettingsPage({ caller, form }) {
     "div",
     { className: "odc-settings" },
     h("h2", null, "OpenDesign CoRouter"),
-    h("p", { className: "odc-intro" }, "\u5728\u4E00\u4E2A\u7B80\u6D01\u9762\u677F\u4E2D\u7BA1\u7406\u989D\u5EA6\u3001\u53CC Provider \u6A21\u578B\u3001\u767B\u5F55\u4E0E\u8FD0\u884C\u4FDD\u62A4\u3002"),
+    h("p", { className: "odc-intro" }, "\u67E5\u770B\u989D\u5EA6\uFF0C\u7BA1\u7406\u6A21\u578B\u3001\u8FDE\u63A5\u4E0E\u8BF7\u6C42\u8BBE\u7F6E\u3002"),
     h("div", { className: "odc-tabs", role: "tablist", "aria-label": "CoRouter \u8BBE\u7F6E\u5206\u7C7B" }, TABS.map((item, index) => h("button", {
       key: item.id,
       ref: (node2) => {

package/lib/device-auth.d.ts

@@ -3,7 +3,7 @@ export interface DeviceTokens {
     runtimeKey: string;
 }
 export declare const DEVICE_AUTH_ENDPOINT = "https://amr-api.open-design.ai/api/v1/cli/device-authorizations";
-export declare const DEVICE_AUTH_PLUGIN_VERSION = "0.1.5";
+export declare const DEVICE_AUTH_PLUGIN_VERSION = "0.1.7";
 export declare const DEVICE_REQUEST_TIMEOUT_MS = 20000;
 /** One bounded launch step of the temporary activation window. */
 export declare const DEVICE_OPEN_TIMEOUT_MS = 30000;
@@ -14,8 +14,8 @@ export declare class DeviceAuthError extends Error {
     readonly code: string;
     constructor(code: string);
 }
-/** Strict public-link allowlist: only an optional, single, non-secret code is allowed. */
-export declare function validateActivationUrl(value: unknown, userCode?: string): string | null;
+/** Strict public-link allowlist: a legacy code or the public deviceId/userCode pair. */
+export declare function validateActivationUrl(value: unknown, userCode?: string, deviceId?: string): string | null;
 export interface DeviceAuthorization {
     deviceId: string;
     deviceSecret: string;

package/lib/generated/typert.host.js

@@ -8,22 +8,29 @@ function record(value) {
 }
 
 // src/device-auth.ts
-function validateActivationUrl(value, userCode) {
+function validateActivationUrl(value, userCode, deviceId) {
   if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
   try {
     const url = new URL(value);
     if (url.origin !== "https://open-design.ai" || url.pathname !== "/cloud/cli/activate" || url.username || url.password || url.hash) return null;
     const entries = [...url.searchParams];
-    if (entries.length > 1) return null;
-    if (entries.length) {
+    if (entries.length === 2) {
+      if (entries.some(([key]) => key !== "deviceId" && key !== "userCode")) return null;
+      const id = url.searchParams.get("deviceId");
+      const code = url.searchParams.get("userCode");
+      if (!validDeviceId(id) || !validUserCode(code) || deviceId !== void 0 && id !== deviceId || userCode !== void 0 && code !== userCode) return null;
+    } else if (entries.length === 1) {
       const entry = entries[0];
       if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
-    }
+    } else if (entries.length > 2) return null;
     return url.href;
   } catch {
     return null;
   }
 }
+function validDeviceId(value) {
+  return typeof value === "string" && /^[a-z0-9_-]{1,200}$/iu.test(value);
+}
 function validUserCode(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
 }
@@ -115,9 +122,9 @@ function amount(value, label, negative = false) {
   if (typeof value !== "number" || !Number.isFinite(value) || !negative && value < 0) throw new Error(`${label} \u5FC5\u987B\u662F${negative ? "" : "\u975E\u8D1F"}\u6709\u9650\u6570\u5B57`);
   return value;
 }
-function positiveInteger(value, label, max) {
+function positiveInteger(value, label, max, min = 1) {
   const result = count(value, label);
-  if (result === 0 || result > max) throw new Error(`${label} \u8D85\u51FA\u8303\u56F4`);
+  if (result < min || result > max) throw new Error(`${label} \u8D85\u51FA\u8303\u56F4`);
   return result;
 }
 function parseEfforts(value) {
@@ -220,9 +227,9 @@ function parseStatusConfig(value) {
     apiKeyEnv,
     ...value.apiProtocol === void 0 ? {} : { apiProtocol: member(value.apiProtocol, API_PROTOCOL_IDS, "\u63A8\u7406\u534F\u8BAE") },
     ...value.modelSettings === void 0 ? {} : { modelSettings: parseModelSettingsMap(value.modelSettings) },
-    ...value.requestTimeoutMs === void 0 ? {} : { requestTimeoutMs: positiveInteger(value.requestTimeoutMs, "\u8BF7\u6C42\u8D85\u65F6", 36e5) },
-    ...value.streamIdleTimeoutMs === void 0 ? {} : { streamIdleTimeoutMs: positiveInteger(value.streamIdleTimeoutMs, "\u6D41\u7A7A\u95F2\u8D85\u65F6", 18e5) },
-    ...value.quotaRefreshSeconds === void 0 ? {} : { quotaRefreshSeconds: positiveInteger(value.quotaRefreshSeconds, "\u81EA\u52A8\u5237\u65B0\u95F4\u9694", 3600) }
+    ...value.requestTimeoutMs === void 0 ? {} : { requestTimeoutMs: positiveInteger(value.requestTimeoutMs, "\u8BF7\u6C42\u8D85\u65F6", 36e5, 1e3) },
+    ...value.streamIdleTimeoutMs === void 0 ? {} : { streamIdleTimeoutMs: positiveInteger(value.streamIdleTimeoutMs, "\u6D41\u7A7A\u95F2\u8D85\u65F6", 18e5, 1e3) },
+    ...value.quotaRefreshSeconds === void 0 ? {} : { quotaRefreshSeconds: positiveInteger(value.quotaRefreshSeconds, "\u81EA\u52A8\u5237\u65B0\u95F4\u9694", 3600, 5) }
   };
 }
 function parseStatus(value) {
@@ -235,9 +242,13 @@ function parseStatus(value) {
     if (ids.has(model.id)) throw new Error(`\u6A21\u578B\u5217\u8868\u91CD\u590D\u4E86 id "${model.id}"`);
     ids.add(model.id);
   }
+  const apiKeyConfigured = flag(value.apiKeyConfigured, "\u51ED\u636E\u662F\u5426\u5C31\u7EEA");
+  const apiKeySource = value.apiKeySource === void 0 ? void 0 : member(value.apiKeySource, ["reference", "stored", "device"], "\u63A8\u7406\u51ED\u636E\u6765\u6E90");
+  if (!apiKeyConfigured && apiKeySource !== void 0) throw new Error("\u672A\u914D\u7F6E\u51ED\u636E\u65F6\u4E0D\u80FD\u6307\u5B9A\u63A8\u7406\u51ED\u636E\u6765\u6E90");
   return {
     revision: text(value.revision, "\u914D\u7F6E\u7248\u672C", MAX_REVISION),
-    apiKeyConfigured: flag(value.apiKeyConfigured, "\u51ED\u636E\u662F\u5426\u5C31\u7EEA"),
+    apiKeyConfigured,
+    ...apiKeySource === void 0 ? {} : { apiKeySource },
     ...value.sessionSource === void 0 ? {} : { sessionSource: member(value.sessionSource, SESSION_SOURCES, "\u767B\u5F55\u6001\u6765\u6E90") },
     quota: parseQuotaSnapshot(value.quota),
     login: parseLoginState(value.login),