dsh-plugin-subscriptions 0.5.0 → 0.5.2

package/lib/client.js

@@ -52,6 +52,10 @@ const en = {
 	manualPlaceholder: "Paste the callback URL or code",
 	submit: "Submit",
 	loginMissingUrl: "login answered without an authorizeUrl",
+	deviceCodePrompt: "Enter this code on the GitHub verification page:",
+	deviceCodeCopy: "Copy code",
+	deviceCodeCopied: "Copied",
+	deviceCodeOpenPage: "Open GitHub verification page",
 	usageTitle: "Usage",
 	usageRefresh: "Refresh",
 	usageLoading: "Loading usage…",
@@ -79,7 +83,39 @@ const en = {
 	speedFast: "Fast",
 	speedFastDescription: "1.5x speed, more usage",
 	commandFast: "Switch the Codex speed tier (Standard/Fast)",
-	commandFastUnavailable: "The current model has no fast tier; /fast only works on Codex models whose catalog advertises one"
+	commandFastUnavailable: "The current model has no fast tier; /fast only works on Codex models whose catalog advertises one",
+	proxyTitle: "Proxy",
+	proxyStatusNone: "Not configured — subscription requests go direct.",
+	proxyStatusEnabled: "Enabled · {url}",
+	proxyStatusError: "Config error: {message}",
+	proxyConfigure: "Configure…",
+	proxyDialogTitle: "Proxy settings",
+	proxyDialogClose: "Close",
+	proxyEnabled: "Route subscription requests through a proxy",
+	proxyUrl: "Proxy URL",
+	proxyUrlPlaceholder: "http://localhost:7890",
+	proxyUrlHint: "HTTP or HTTPS proxy only (Clash/mihomo, v2rayN…); socks is not supported.",
+	proxyUsername: "Username (optional)",
+	proxyUsernamePlaceholder: "Proxy username",
+	proxyPassword: "Password",
+	proxyPasswordPlaceholder: "Leave blank to keep the saved password",
+	proxyClearPassword: "Clear the saved password",
+	proxyBypass: "Bypass hosts",
+	proxyBypassPlaceholder: "127.0.0.1, localhost, *.example.com",
+	proxyBypassHint: "Comma-separated hostnames that keep going direct.",
+	proxyTest: "Test",
+	proxyTesting: "Testing…",
+	proxyTestOk: "OK · HTTP {status} · {ms} ms",
+	proxyTestOkDirect: "OK (direct, bypassed) · HTTP {status} · {ms} ms",
+	proxyTestFail: "Failed: {message}",
+	proxySave: "Save",
+	proxyCancel: "Cancel",
+	proxySaving: "Saving…",
+	proxyLoading: "Loading proxy settings…",
+	proxyLoadFailed: "Failed to load proxy settings: {message}",
+	proxySaved: "Saved — new requests use the proxy.",
+	proxySaveFailed: "Save failed: {message}",
+	proxyNote: "Applies to token exchange, model APIs, usage lookups, image/video generation and x_search. The OAuth authorization page opens in your browser and follows the browser/system proxy, not this setting."
 };
 /** zh strings, one per {@link en} key. */
 const zh = {
@@ -101,6 +137,10 @@ const zh = {
 	manualPlaceholder: "粘贴回调 URL 或授权码",
 	submit: "提交",
 	loginMissingUrl: "login 响应缺少 authorizeUrl",
+	deviceCodePrompt: "在 GitHub 验证页面输入此验证码：",
+	deviceCodeCopy: "复制验证码",
+	deviceCodeCopied: "已复制",
+	deviceCodeOpenPage: "打开 GitHub 验证页面",
 	usageTitle: "用量",
 	usageRefresh: "刷新",
 	usageLoading: "用量加载中…",
@@ -128,7 +168,39 @@ const zh = {
 	speedFast: "快速",
 	speedFastDescription: "约 1.5 倍速度，消耗更多用量",
 	commandFast: "切换 Codex 速度档（标准/快速）",
-	commandFastUnavailable: "当前模型不支持快速档；/fast 仅对目录声明了 fast tier 的 Codex 模型可用"
+	commandFastUnavailable: "当前模型不支持快速档；/fast 仅对目录声明了 fast tier 的 Codex 模型可用",
+	proxyTitle: "代理",
+	proxyStatusNone: "未配置 —— 订阅请求直连。",
+	proxyStatusEnabled: "已启用 · {url}",
+	proxyStatusError: "配置错误：{message}",
+	proxyConfigure: "配置…",
+	proxyDialogTitle: "代理设置",
+	proxyDialogClose: "关闭",
+	proxyEnabled: "让订阅相关请求走代理",
+	proxyUrl: "代理地址",
+	proxyUrlPlaceholder: "http://localhost:7890",
+	proxyUrlHint: "仅支持 HTTP/HTTPS 代理（Clash/mihomo、v2rayN 等）；不支持 socks。",
+	proxyUsername: "用户名（可选）",
+	proxyUsernamePlaceholder: "代理用户名",
+	proxyPassword: "密码",
+	proxyPasswordPlaceholder: "留空则保留已保存的密码",
+	proxyClearPassword: "清除已保存的密码",
+	proxyBypass: "绕过主机",
+	proxyBypassPlaceholder: "127.0.0.1, localhost, *.example.com",
+	proxyBypassHint: "逗号分隔的主机名，这些主机保持直连。",
+	proxyTest: "测试",
+	proxyTesting: "测试中…",
+	proxyTestOk: "成功 · HTTP {status} · {ms} ms",
+	proxyTestOkDirect: "成功（直连，已绕过）· HTTP {status} · {ms} ms",
+	proxyTestFail: "失败：{message}",
+	proxySave: "保存",
+	proxyCancel: "取消",
+	proxySaving: "保存中…",
+	proxyLoading: "代理设置加载中…",
+	proxyLoadFailed: "代理设置加载失败：{message}",
+	proxySaved: "已保存 —— 后续请求将走代理。",
+	proxySaveFailed: "保存失败：{message}",
+	proxyNote: "作用于 token 交换、模型 API、用量查询、图片/视频生成与 x_search。OAuth 授权页在浏览器中打开，走的是浏览器/系统代理，不受此设置影响。"
 };
 
 //#endregion
@@ -150,6 +222,10 @@ const PROVIDERS = [
 	{
 		id: "grok",
 		name: "Grok (X Premium)"
+	},
+	{
+		id: "copilot",
+		name: "GitHub Copilot"
 	}
 ];
 /** Business error returned by the `/subscriptions-auth` channel (error branch message). */
@@ -210,6 +286,13 @@ const styles$4 = {
 		flexDirection: "column",
 		gap: 6
 	},
+	proxyCard: {
+		padding: "12px 14px",
+		display: "flex",
+		flexDirection: "column",
+		gap: 6
+	},
+	separator: { borderTop: "1px solid var(--dsw-alias-border-l2)" },
 	cardHeader: {
 		display: "flex",
 		alignItems: "center",
@@ -350,6 +433,109 @@ const styles$4 = {
 		lineHeight: "22px",
 		background: "var(--dsw-alias-bg-layer-1)",
 		color: "var(--dsw-alias-label-primary)"
+	},
+	deviceCode: {
+		marginTop: 4,
+		display: "flex",
+		flexDirection: "column",
+		gap: 6,
+		border: "1px solid var(--dsw-alias-border-l2)",
+		borderRadius: 8,
+		padding: "10px 12px",
+		background: "var(--dsw-alias-bg-layer-1)"
+	},
+	deviceCodeText: {
+		fontFamily: "monospace",
+		fontSize: 18,
+		lineHeight: "24px",
+		letterSpacing: 2,
+		color: "var(--dsw-alias-label-primary)",
+		userSelect: "all"
+	},
+	proxyField: {
+		display: "flex",
+		flexDirection: "column",
+		gap: 4
+	},
+	proxyLabel: {
+		fontSize: 12,
+		lineHeight: "18px",
+		color: "var(--dsw-alias-label-secondary)"
+	},
+	proxyInput: {
+		height: 32,
+		width: "100%",
+		boxSizing: "border-box",
+		border: "1px solid var(--dsw-alias-border-l2)",
+		borderRadius: 8,
+		padding: "0 10px",
+		font: "inherit",
+		fontSize: 14,
+		lineHeight: "22px",
+		background: "var(--dsw-alias-bg-layer-1)",
+		color: "var(--dsw-alias-label-primary)"
+	},
+	proxyHint: {
+		margin: 0,
+		fontSize: 12,
+		lineHeight: "18px",
+		color: "var(--dsw-alias-label-tertiary)"
+	},
+	proxyCheck: {
+		display: "flex",
+		alignItems: "center",
+		gap: 8,
+		fontSize: 13,
+		lineHeight: "20px",
+		color: "var(--dsw-alias-label-primary)",
+		cursor: "pointer"
+	},
+	proxyMessage: {
+		margin: 0,
+		fontSize: 12,
+		lineHeight: "18px"
+	},
+	proxyActions: {
+		display: "flex",
+		gap: 8,
+		alignItems: "center",
+		justifyContent: "flex-end",
+		marginTop: 2
+	},
+	modalOverlay: {
+		position: "fixed",
+		inset: 0,
+		zIndex: 1e3,
+		display: "flex",
+		alignItems: "center",
+		justifyContent: "center",
+		padding: 16,
+		background: "rgba(0, 0, 0, 0.45)"
+	},
+	modal: {
+		width: 460,
+		maxWidth: "100%",
+		maxHeight: "90vh",
+		overflowY: "auto",
+		boxSizing: "border-box",
+		display: "flex",
+		flexDirection: "column",
+		gap: 12,
+		padding: "16px 18px",
+		borderRadius: 12,
+		background: "var(--dsw-alias-bg-layer-1)",
+		border: "1px solid var(--dsw-alias-border-l2)"
+	},
+	modalHeader: {
+		display: "flex",
+		alignItems: "center",
+		gap: 8
+	},
+	modalTitle: {
+		fontWeight: 600,
+		fontSize: 15,
+		lineHeight: "22px",
+		color: "var(--dsw-alias-label-primary)"
 	}
 };
 /** Status dot color for one provider state. */
@@ -394,6 +580,18 @@ function usageBarColor(usedPercent) {
 	if (usedPercent >= 80) return "var(--dsw-alias-state-warn-label)";
 	return "var(--dsw-alias-state-success-primary)";
 }
+/** One-line status text of the proxy config card. */
+function proxyStatusText(t, proxy, loadError) {
+	if (loadError !== void 0) return t("proxyLoadFailed", { message: loadError });
+	if (proxy === void 0) return t("proxyLoading");
+	if (proxy.error !== void 0) return t("proxyStatusError", { message: proxy.error });
+	if (proxy.enabled) return t("proxyStatusEnabled", { url: proxy.url });
+	return t("proxyStatusNone");
+}
+/** Feedback-line color of the proxy dialog. */
+function messageColor(tone) {
+	return tone === "error" ? "var(--dsw-alias-state-error-primary)" : "var(--dsw-alias-state-success-primary)";
+}
 /**
 * The Subscriptions settings page component.
 * @param props - the slot inject face ({@link SubscriptionsSectionInjected}).
@@ -407,8 +605,12 @@ function SubscriptionsSection(props) {
 	const [manualDrafts, setManualDrafts] = (0, react.useState)({
 		codex: "",
 		claude: "",
-		grok: ""
+		grok: "",
+		copilot: ""
 	});
+	/** Pending device-flow codes (copilot), shown while the attempt polls. */
+	const [deviceCodes, setDeviceCodes] = (0, react.useState)({});
+	const [copiedCode, setCopiedCode] = (0, react.useState)(void 0);
 	const [usages, setUsages] = (0, react.useState)({});
 	const [usageErrors, setUsageErrors] = (0, react.useState)({});
 	const [usageLoading, setUsageLoading] = (0, react.useState)({});
@@ -416,6 +618,21 @@ function SubscriptionsSection(props) {
 	const pollersRef = (0, react.useRef)(/* @__PURE__ */ new Map());
 	/** Providers with a `usage` call in flight; guards the auto-fetch effect against re-entry. */
 	const usageInflightRef = (0, react.useRef)(/* @__PURE__ */ new Set());
+	/** Proxy config as last answered by `proxyGet`/`proxySet`. */
+	const [proxy, setProxy] = (0, react.useState)(void 0);
+	const [proxyLoadError, setProxyLoadError] = (0, react.useState)(void 0);
+	/** Proxy dialog state (draft fields; the password never pre-fills). */
+	const [proxyOpen, setProxyOpen] = (0, react.useState)(false);
+	const [proxyEnabled, setProxyEnabled] = (0, react.useState)(false);
+	const [proxyUrl, setProxyUrl] = (0, react.useState)("");
+	const [proxyUsername, setProxyUsername] = (0, react.useState)("");
+	const [proxyPassword, setProxyPassword] = (0, react.useState)("");
+	const [proxyClearPassword, setProxyClearPassword] = (0, react.useState)(false);
+	const [proxyBypass, setProxyBypass] = (0, react.useState)("");
+	const [proxySaving, setProxySaving] = (0, react.useState)(false);
+	const [proxyTesting, setProxyTesting] = (0, react.useState)(false);
+	const [proxyMessage, setProxyMessage] = (0, react.useState)(void 0);
+	const [proxyTestResult, setProxyTestResult] = (0, react.useState)(void 0);
 	const setProviderError = (0, react.useCallback)((provider, message) => {
 		if (!mountedRef.current) return;
 		setErrors((prev) => {
@@ -445,7 +662,15 @@ function SubscriptionsSection(props) {
 		setStatuses(response.providers);
 		for (const { id } of PROVIDERS) {
 			const status = response.providers[id];
-			if (status.loggedIn || !status.busy) stopPolling(id);
+			if (status.loggedIn || !status.busy) {
+				stopPolling(id);
+				setDeviceCodes((prev) => {
+					if (prev[id] === void 0) return prev;
+					const next = { ...prev };
+					delete next[id];
+					return next;
+				});
+			}
 		}
 	}, [rpc, stopPolling]);
 	const startPolling = (0, react.useCallback)((provider) => {
@@ -536,7 +761,6 @@ function SubscriptionsSection(props) {
 				return;
 			}
 			if (typeof response.authorizeUrl !== "string") throw new SubscriptionsAuthError(t("loginMissingUrl"));
-			window.open(response.authorizeUrl, "_blank", "noopener");
 			if (!mountedRef.current) return;
 			setStatuses((prev) => ({
 				...prev,
@@ -546,6 +770,14 @@ function SubscriptionsSection(props) {
 					loggedIn: false
 				}
 			}));
+			if (typeof response.userCode === "string" && response.userCode.length > 0) setDeviceCodes((prev) => ({
+				...prev,
+				[provider]: {
+					userCode: response.userCode,
+					verificationUrl: response.authorizeUrl
+				}
+			}));
+			else window.open(response.authorizeUrl, "_blank", "noopener");
 			startPolling(provider);
 		} catch (error) {
 			setProviderError(provider, messageOf(error));
@@ -611,162 +843,504 @@ function SubscriptionsSection(props) {
 		setProviderError,
 		refresh
 	]);
+	const copyDeviceCode = (0, react.useCallback)((provider, userCode) => {
+		navigator.clipboard?.writeText(userCode).then(() => {
+			if (!mountedRef.current) return;
+			setCopiedCode(provider);
+			setTimeout(() => {
+				if (mountedRef.current) setCopiedCode((current) => current === provider ? void 0 : current);
+			}, 1500);
+		}).catch(() => void 0);
+	}, []);
+	(0, react.useEffect)(() => {
+		if (rpc === void 0) return;
+		let alive = true;
+		callSubscriptionsAuth(rpc, "proxyGet", {}).then((view) => {
+			if (!alive) return;
+			setProxy(view);
+			setProxyLoadError(void 0);
+		}).catch((error) => {
+			if (alive) setProxyLoadError(messageOf(error));
+		});
+		return () => {
+			alive = false;
+		};
+	}, [rpc]);
+	(0, react.useEffect)(() => {
+		if (!proxyOpen) return;
+		const onKey = (event) => {
+			if (event.key === "Escape") setProxyOpen(false);
+		};
+		window.addEventListener("keydown", onKey);
+		return () => window.removeEventListener("keydown", onKey);
+	}, [proxyOpen]);
+	const openProxyDialog = (0, react.useCallback)(() => {
+		if (proxy === void 0) return;
+		setProxyEnabled(proxy.enabled);
+		setProxyUrl(proxy.url);
+		setProxyUsername(proxy.username ?? "");
+		setProxyPassword("");
+		setProxyClearPassword(false);
+		setProxyBypass(proxy.bypass.join(", "));
+		setProxyMessage(void 0);
+		setProxyTestResult(void 0);
+		setProxyOpen(true);
+	}, [proxy]);
+	const saveProxy = (0, react.useCallback)(async () => {
+		if (rpc === void 0) return;
+		setProxySaving(true);
+		setProxyMessage(void 0);
+		try {
+			setProxy(await callSubscriptionsAuth(rpc, "proxySet", {
+				enabled: proxyEnabled,
+				url: proxyUrl.trim(),
+				username: proxyUsername,
+				...proxyClearPassword ? { password: null } : proxyPassword !== "" ? { password: proxyPassword } : {},
+				bypass: proxyBypass.split(/[,\n]/).map((entry) => entry.trim()).filter((entry) => entry !== "")
+			}));
+			setProxyLoadError(void 0);
+			setProxyMessage({
+				tone: "success",
+				text: t("proxySaved")
+			});
+			setProxyOpen(false);
+		} catch (error) {
+			setProxyMessage({
+				tone: "error",
+				text: t("proxySaveFailed", { message: messageOf(error) })
+			});
+		} finally {
+			setProxySaving(false);
+		}
+	}, [
+		rpc,
+		proxyEnabled,
+		proxyUrl,
+		proxyUsername,
+		proxyPassword,
+		proxyClearPassword,
+		proxyBypass,
+		t
+	]);
+	const testProxy = (0, react.useCallback)(async () => {
+		if (rpc === void 0 || proxyTesting) return;
+		setProxyTesting(true);
+		setProxyTestResult(void 0);
+		try {
+			setProxyTestResult(await callSubscriptionsAuth(rpc, "proxyTest", { proxy: {
+				url: proxyUrl.trim(),
+				...proxyUsername.trim() !== "" ? { username: proxyUsername.trim() } : {},
+				...proxyPassword !== "" ? { password: proxyPassword } : {}
+			} }));
+		} catch (error) {
+			setProxyTestResult({
+				ok: false,
+				viaProxy: false,
+				error: messageOf(error)
+			});
+		} finally {
+			setProxyTesting(false);
+		}
+	}, [
+		rpc,
+		proxyTesting,
+		proxyUrl,
+		proxyUsername,
+		proxyPassword
+	]);
 	if (rpc === void 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 		style: styles$4.intro,
 		children: t("unavailable")
 	});
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 		style: styles$4.section,
-		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-			style: styles$4.intro,
-			children: t("intro")
-		}), PROVIDERS.map(({ id, name }) => {
-			const status = statuses[id];
-			const busy = status?.busy === true;
-			const usage = usages[id];
-			const usageError = usageErrors[id];
-			const showUsage = status?.loggedIn === true && usage?.supported !== false && (usage !== void 0 || usageError !== void 0 || usageLoading[id] === true);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				style: styles$4.card,
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						style: styles$4.cardHeader,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { style: {
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				style: styles$4.intro,
+				children: t("intro")
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				style: styles$4.proxyCard,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					style: styles$4.cardHeader,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { style: {
 							...styles$4.dot,
-							background: dotColor(status)
-						} }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							background: proxy?.enabled === true ? "var(--dsw-alias-state-success-primary)" : "var(--dsw-alias-label-dimmed)"
+						} }),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 							style: styles$4.name,
-							children: name
-						})]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: styles$4.statusLine,
-						children: statusText(t, status)
-					}),
-					status?.detail !== void 0 && status.detail !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: styles$4.statusLine,
-						children: status.detail
-					}),
-					errors[id] !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: styles$4.errorLine,
-						children: errors[id]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						style: styles$4.actions,
-						children: [
-							!busy && status?.loggedIn !== true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								style: styles$4.button,
-								onClick: () => {
-									login(id);
-								},
-								children: t("login")
-							}),
-							busy && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								style: styles$4.button,
-								onClick: () => {
-									cancel(id);
-								},
-								children: t("cancel")
-							}),
-							status?.loggedIn === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								style: styles$4.button,
-								onClick: () => {
-									logout(id, name);
-								},
-								children: t("logout")
-							})
-						]
-					}),
-					showUsage && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						style: styles$4.usage,
-						children: [
-							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								style: styles$4.usageHeader,
-								children: [
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										style: styles$4.usageTitle,
-										children: t("usageTitle")
-									}),
-									usage?.plan !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										style: styles$4.usagePlan,
-										children: t("usagePlan", { plan: usage.plan })
-									}),
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							children: t("proxyTitle")
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							style: {
+								...styles$4.button,
+								marginLeft: "auto",
+								flexShrink: 0
+							},
+							onClick: openProxyDialog,
+							children: t("proxyConfigure")
+						})
+					]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					style: styles$4.statusLine,
+					children: proxyStatusText(t, proxy, proxyLoadError)
+				})]
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { style: styles$4.separator }),
+			PROVIDERS.map(({ id, name }) => {
+				const status = statuses[id];
+				const busy = status?.busy === true;
+				const deviceCode = deviceCodes[id];
+				const usage = usages[id];
+				const usageError = usageErrors[id];
+				const showUsage = status?.loggedIn === true && usage?.supported !== false && (usage !== void 0 || usageError !== void 0 || usageLoading[id] === true);
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					style: styles$4.card,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles$4.cardHeader,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { style: {
+								...styles$4.dot,
+								background: dotColor(status)
+							} }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: styles$4.name,
+								children: name
+							})]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: styles$4.statusLine,
+							children: statusText(t, status)
+						}),
+						status?.detail !== void 0 && status.detail !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: styles$4.statusLine,
+							children: status.detail
+						}),
+						errors[id] !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: styles$4.errorLine,
+							children: errors[id]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles$4.actions,
+							children: [
+								!busy && status?.loggedIn !== true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: styles$4.button,
+									onClick: () => {
+										login(id);
+									},
+									children: t("login")
+								}),
+								busy && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: styles$4.button,
+									onClick: () => {
+										cancel(id);
+									},
+									children: t("cancel")
+								}),
+								status?.loggedIn === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: styles$4.button,
+									onClick: () => {
+										logout(id, name);
+									},
+									children: t("logout")
+								})
+							]
+						}),
+						showUsage && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles$4.usage,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: styles$4.usageHeader,
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											style: styles$4.usageTitle,
+											children: t("usageTitle")
+										}),
+										usage?.plan !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											style: styles$4.usagePlan,
+											children: t("usagePlan", { plan: usage.plan })
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											style: {
+												...styles$4.usageRefresh,
+												...usageLoading[id] === true ? {
+													opacity: .5,
+													cursor: "default"
+												} : {}
+											},
+											disabled: usageLoading[id] === true,
+											onClick: () => {
+												loadUsage(id);
+											},
+											children: t("usageRefresh")
+										})
+									]
+								}),
+								usage === void 0 && usageError === void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: styles$4.statusLine,
+									children: t("usageLoading")
+								}),
+								usageError !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: styles$4.errorLine,
+									children: t("usageError", { message: usageError })
+								}),
+								usage?.windows !== void 0 && usage.windows.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: styles$4.statusLine,
+									children: t("usageEmpty")
+								}),
+								(usage?.windows ?? []).map((window$1, index) => {
+									const percent = Math.min(100, Math.max(0, window$1.usedPercent));
+									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										style: styles$4.usageRow,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: styles$4.usageMeta,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: usageWindowLabel(t, window$1) }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [`${String(Math.round(percent))}%`, window$1.resetsAt !== void 0 && ` · ${t("usageResets", { date: new Date(window$1.resetsAt).toLocaleString() })}`] })]
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+											style: styles$4.usageTrack,
+											children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { style: {
+												...styles$4.usageFill,
+												width: `${String(percent)}%`,
+												background: usageBarColor(percent)
+											} })
+										})]
+									}, index);
+								})
+							]
+						}),
+						busy && deviceCode !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles$4.deviceCode,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: styles$4.statusLine,
+									children: t("deviceCodePrompt")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: styles$4.deviceCodeText,
+									children: deviceCode.userCode
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: styles$4.actions,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 										type: "button",
-										style: {
-											...styles$4.usageRefresh,
-											...usageLoading[id] === true ? {
-												opacity: .5,
-												cursor: "default"
-											} : {}
+										style: styles$4.button,
+										onClick: () => {
+											copyDeviceCode(id, deviceCode.userCode);
 										},
-										disabled: usageLoading[id] === true,
+										children: copiedCode === id ? t("deviceCodeCopied") : t("deviceCodeCopy")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										style: styles$4.button,
 										onClick: () => {
-											loadUsage(id);
+											window.open(deviceCode.verificationUrl, "_blank", "noopener");
 										},
-										children: t("usageRefresh")
-									})
-								]
-							}),
-							usage === void 0 && usageError === void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								style: styles$4.statusLine,
-								children: t("usageLoading")
-							}),
-							usageError !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								style: styles$4.errorLine,
-								children: t("usageError", { message: usageError })
-							}),
-							usage?.windows !== void 0 && usage.windows.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								style: styles$4.statusLine,
-								children: t("usageEmpty")
-							}),
-							(usage?.windows ?? []).map((window$1, index) => {
-								const percent = Math.min(100, Math.max(0, window$1.usedPercent));
-								return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									style: styles$4.usageRow,
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-										style: styles$4.usageMeta,
-										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: usageWindowLabel(t, window$1) }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [`${String(Math.round(percent))}%`, window$1.resetsAt !== void 0 && ` · ${t("usageResets", { date: new Date(window$1.resetsAt).toLocaleString() })}`] })]
-									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-										style: styles$4.usageTrack,
-										children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { style: {
-											...styles$4.usageFill,
-											width: `${String(percent)}%`,
-											background: usageBarColor(percent)
-										} })
+										children: t("deviceCodeOpenPage")
 									})]
-								}, index);
-							})
-						]
-					}),
-					busy && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
-						style: styles$4.manual,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", { children: t("manualSummary") }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							style: styles$4.manualRow,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-								style: styles$4.manualInput,
-								value: manualDrafts[id],
-								placeholder: t("manualPlaceholder"),
-								onChange: (event) => setManualDrafts((prev) => ({
-									...prev,
-									[id]: event.target.value
-								}))
+								})
+							]
+						}),
+						busy && deviceCode === void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
+							style: styles$4.manual,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", { children: t("manualSummary") }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: styles$4.manualRow,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									style: styles$4.manualInput,
+									value: manualDrafts[id],
+									placeholder: t("manualPlaceholder"),
+									onChange: (event) => setManualDrafts((prev) => ({
+										...prev,
+										[id]: event.target.value
+									}))
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: styles$4.button,
+									onClick: () => {
+										submitManual(id);
+									},
+									children: t("submit")
+								})]
+							})]
+						})
+					]
+				}, id);
+			}),
+			proxyOpen && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				style: styles$4.modalOverlay,
+				onClick: () => setProxyOpen(false),
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					style: styles$4.modal,
+					onClick: (event) => event.stopPropagation(),
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles$4.modalHeader,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: styles$4.modalTitle,
+								children: t("proxyDialogTitle")
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
-								style: styles$4.button,
-								onClick: () => {
-									submitManual(id);
+								style: {
+									...styles$4.button,
+									marginLeft: "auto"
 								},
-								children: t("submit")
+								onClick: () => setProxyOpen(false),
+								children: t("proxyDialogClose")
 							})]
-						})]
-					})
-				]
-			}, id);
-		})]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+							style: styles$4.proxyCheck,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								type: "checkbox",
+								checked: proxyEnabled,
+								onChange: (event) => setProxyEnabled(event.target.checked)
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("proxyEnabled") })]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+							style: styles$4.proxyField,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: styles$4.proxyLabel,
+									children: t("proxyUrl")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									style: styles$4.proxyInput,
+									value: proxyUrl,
+									placeholder: t("proxyUrlPlaceholder"),
+									onChange: (event) => setProxyUrl(event.target.value)
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: styles$4.proxyHint,
+									children: t("proxyUrlHint")
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+							style: styles$4.proxyField,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: styles$4.proxyLabel,
+								children: t("proxyUsername")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								style: styles$4.proxyInput,
+								value: proxyUsername,
+								placeholder: t("proxyUsernamePlaceholder"),
+								onChange: (event) => setProxyUsername(event.target.value)
+							})]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles$4.proxyField,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: styles$4.proxyLabel,
+									children: t("proxyPassword")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "password",
+									style: styles$4.proxyInput,
+									value: proxyPassword,
+									placeholder: t("proxyPasswordPlaceholder"),
+									onChange: (event) => setProxyPassword(event.target.value)
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+									style: styles$4.proxyCheck,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: proxyClearPassword,
+										onChange: (event) => setProxyClearPassword(event.target.checked)
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("proxyClearPassword") })]
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+							style: styles$4.proxyField,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: styles$4.proxyLabel,
+									children: t("proxyBypass")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									style: styles$4.proxyInput,
+									value: proxyBypass,
+									placeholder: t("proxyBypassPlaceholder"),
+									onChange: (event) => setProxyBypass(event.target.value)
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: styles$4.proxyHint,
+									children: t("proxyBypassHint")
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: styles$4.proxyHint,
+							children: t("proxyNote")
+						}),
+						proxyMessage !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: {
+								...styles$4.proxyMessage,
+								color: messageColor(proxyMessage.tone)
+							},
+							children: proxyMessage.text
+						}),
+						proxyTestResult !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: {
+								...styles$4.proxyMessage,
+								color: proxyTestResult.ok ? "var(--dsw-alias-state-success-primary)" : "var(--dsw-alias-state-error-primary)"
+							},
+							children: proxyTestResult.ok ? proxyTestResult.viaProxy ? t("proxyTestOk", {
+								status: String(proxyTestResult.status),
+								ms: String(proxyTestResult.latencyMs)
+							}) : t("proxyTestOkDirect", {
+								status: String(proxyTestResult.status),
+								ms: String(proxyTestResult.latencyMs)
+							}) : t("proxyTestFail", { message: proxyTestResult.error ?? "" })
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles$4.proxyActions,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: {
+										...styles$4.button,
+										...proxyTesting ? {
+											opacity: .5,
+											cursor: "default"
+										} : {}
+									},
+									disabled: proxyTesting,
+									onClick: () => {
+										testProxy();
+									},
+									children: proxyTesting ? t("proxyTesting") : t("proxyTest")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: {
+										...styles$4.button,
+										...proxySaving ? {
+											opacity: .5,
+											cursor: "default"
+										} : {}
+									},
+									disabled: proxySaving,
+									onClick: () => {
+										saveProxy();
+									},
+									children: proxySaving ? t("proxySaving") : t("proxySave")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: styles$4.button,
+									onClick: () => setProxyOpen(false),
+									children: t("proxyCancel")
+								})
+							]
+						})
+					]
+				})
+			})
+		]
 	});
 }
 
@@ -1648,6 +2222,13 @@ function apply(ctx) {
 		zh,
 		en
 	}), "dsh-plugin-subscriptions: copy dictionaries");
+	ctx.effect(() => {
+		const style = document.createElement("style");
+		style.setAttribute("data-plugin", "dsh-plugin-subscriptions");
+		style.textContent = "div[role=\"dialog\"][aria-modal=\"true\"]:has(> nav) { padding-top: 14px; }";
+		document.head.appendChild(style);
+		return () => style.remove();
+	}, "dsh-plugin-subscriptions: settings panel breathing room");
 	const connection = ctx.get("connection");
 	const t = ctx.locale.bind(NS);
 	const injected = () => ({