From 06bf7ce024054e355eb9475fa0b24626f7511a8a Mon Sep 17 00:00:00 2001
From: imccyu <276526105+imccyu@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:33:44 +0800
Subject: [PATCH] =?UTF-8?q?Revert=20"fix(settings):=20show=20saved=20API?=
 =?UTF-8?q?=20keys=20and=20preserve=20environment=20detection=E2=80=A6"?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This reverts commit 9bb49604b63bb5d50e879bcf63c9f5cb2afbd737.
---
 apps/web/tests/credential-editor.e2e.ts       | 235 ------------------
 .../detected-environment.expected.md          |  25 --
 .../missing-environment.expected.md           |  23 --
 .../credential-editor/saved-key.expected.md   |  26 --
 .../cards.expected.md                         |   4 +-
 .../default-models.expected.md                |   4 +-
 .../models.expected.md                        |   4 +-
 .../fixtures/credential-editor.patch.yml      |   5 -
 apps/web/tests/models-settings.e2e.ts         |   9 +-
 .../tests/onboarding-deepseek-config.e2e.ts   |  17 +-
 apps/web/tsconfig.json                        |   1 -
 docs/capability-seams.i18n.yaml               |   4 +-
 docs/capability-seams.md                      |   2 +-
 docs/capability-seams.zh.md                   |   2 +-
 docs/subsystems/credentials.i18n.yaml         |   4 +-
 docs/subsystems/credentials.md                |  22 +-
 docs/subsystems/credentials.zh.md             |  22 +-
 .../credential-editor/guide.i18n.yaml         |  16 --
 .../v0.2.2-alpha.2/credential-editor/guide.md |  19 --
 .../credential-editor/guide.zh.md             |  19 --
 docs/user/guide/providers.i18n.yaml           |   8 +-
 docs/user/guide/providers.md                  |   8 +-
 docs/user/guide/providers.zh.md               |   8 +-
 .../api/settings-controller/README.i18n.yaml  |   8 +-
 packages/api/settings-controller/README.md    |   4 +-
 packages/api/settings-controller/README.zh.md |   4 +-
 .../settings-controller/src/credentials.ts    |  24 +-
 packages/api/settings-controller/src/types.ts |   6 +-
 .../tests/credentials-controller.host.spec.ts |  40 ---
 .../ui-settings-models/README.i18n.yaml       |  12 +-
 packages/client/ui-settings-models/README.md  |  10 +-
 .../client/ui-settings-models/README.zh.md    |  10 +-
 .../src/client/ApiKeyInput.tsx                |   4 +-
 .../src/client/ModelListEditor.tsx            |   2 +-
 .../src/client/ModelsSection.tsx              |  49 +---
 .../src/client/ProviderEditor.tsx             |  36 ++-
 .../ui-settings-models/src/client/apiKey.ts   |   9 +-
 .../ui-settings-models/src/client/locales.ts  |   8 +
 .../src/client/operations.ts                  |  15 --
 .../tests/components.client.spec.tsx          | 178 +------------
 .../tests/model-list-catalog.client.spec.tsx  |   2 +-
 .../tests/model-order.client.spec.tsx         |   4 +-
 .../model-reasoning-efforts.client.spec.tsx   |   2 +-
 .../tests/provider-form.client.spec.tsx       |   1 -
 .../credentials/authorization/tests/memory.ts |   4 -
 .../credentials-local/README.i18n.yaml        |   4 +-
 .../credentials/credentials-local/README.md   |   2 +-
 .../credentials-local/README.zh.md            |   2 +-
 .../credentials-local/src/index.ts            |   4 -
 .../credentials-local/tests/local.spec.ts     |  12 -
 .../credentials/credentials/README.i18n.yaml  |  12 +-
 packages/credentials/credentials/README.md    |   6 +-
 packages/credentials/credentials/README.zh.md |   6 +-
 packages/credentials/credentials/src/index.ts |   7 -
 .../credentials/credentials/tests/memory.ts   |   5 -
 .../liveshare/src/endpoint-classification.ts  |   1 -
 .../endpoint-classification.client.spec.ts    |   1 -
 .../extensions/tool-cordis/src/api-catalog.ts |  17 +-
 scripts/gen-doc-graphs.ts                     |   2 +-
 tsconfig.host.json                            |   1 -
 60 files changed, 148 insertions(+), 853 deletions(-)
 delete mode 100644 apps/web/tests/credential-editor.e2e.ts
 delete mode 100644 apps/web/tests/expected/credential-editor/detected-environment.expected.md
 delete mode 100644 apps/web/tests/expected/credential-editor/missing-environment.expected.md
 delete mode 100644 apps/web/tests/expected/credential-editor/saved-key.expected.md
 delete mode 100644 apps/web/tests/fixtures/credential-editor.patch.yml
 delete mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.i18n.yaml
 delete mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md
 delete mode 100644 docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.zh.md

diff --git a/apps/web/tests/credential-editor.e2e.ts b/apps/web/tests/credential-editor.e2e.ts
deleted file mode 100644
index b9ee283aa4..0000000000
--- a/apps/web/tests/credential-editor.e2e.ts
+++ /dev/null
@@ -1,235 +0,0 @@
-/** Saved credentials and endpoints reach the assembled editor and provider requests. */
-import { once } from 'node:events'
-import { mkdtemp, rm, writeFile } from 'node:fs/promises'
-import { createServer } from 'node:http'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { fileURLToPath } from 'node:url'
-import { chromium } from 'playwright'
-import { expect, it, onTestFinished } from 'vitest'
-import { BlockAssembler } from '@deepseek-ai/dsh-llm'
-import { credentialRef } from '@deepseek-ai/dsh-credentials'
-import { createLaunchEnvironmentSnapshot } from '@deepseek-ai/dsh-launch-environment'
-import { captureStableAria, compareOrRefreshGolden, launchWebScaffold, webSnapshotMode } from './scaffold.ts'
-import { openSettings, ZH_BROWSER_LOCALE } from './support.ts'
-
-it.each([false, true])('edits saved DeepSeek keys and restores environment detection (environment present: %s)', async (hasEnvironment) => {
-  const scaffold = await launchWebScaffold({
-    deepSeekMissingCredential: true,
-    extraOverlayPath: fileURLToPath(new URL('./fixtures/credential-editor.patch.yml', import.meta.url)),
-    openInAppEnvironment: createLaunchEnvironmentSnapshot([{
-      source: 'process', values: hasEnvironment ? { DEEPSEEK_API_KEY: 'fixture-environment-key' } : {},
-    }]),
-  })
-  try {
-    const browser = await chromium.launch()
-    try {
-      const page = await browser.newPage({ viewport: { width: 1440, height: 960 }, locale: ZH_BROWSER_LOCALE })
-      const ref = credentialRef('DEEPSEEK_API_KEY')
-      await scaffold.ctx.credentials.set(ref, 'fixture-saved-deepseek-key')
-      await page.goto(scaffold.authenticatedUrl, { waitUntil: 'load' })
-      await openSettings(page, 'zh')
-      const dialog = page.getByRole('dialog', { name: '设置' })
-      await dialog.getByRole('button', { name: '模型', exact: true }).click()
-      const edit = dialog.getByRole('button', { name: '编辑 DeepSeek (deepseek-official)', exact: true })
-      await edit.click()
-      const key = dialog.getByLabel('API 密钥', { exact: true })
-      await expect.poll(() => key.inputValue()).toBe('fixture-saved-deepseek-key')
-      expect(await key.getAttribute('type')).toBe('password')
-      await compareOrRefreshGolden(
-        fileURLToPath(new URL('./expected/credential-editor/saved-key.expected.md', import.meta.url)),
-        await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd), webSnapshotMode(),
-      )
-      await dialog.getByRole('button', { name: '显示密钥', exact: true }).click()
-      expect(await key.getAttribute('type')).toBe('text')
-      await key.fill('fixture-cancelled-key')
-      await dialog.getByRole('button', { name: '取消', exact: true }).click()
-      expect(await scaffold.ctx.credentials.readStored(ref)).toBe('fixture-saved-deepseek-key')
-      await edit.click()
-      await expect.poll(() => key.inputValue()).toBe('fixture-saved-deepseek-key')
-      expect(await key.getAttribute('type')).toBe('password')
-      await key.fill('fixture-replacement-key')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await dialog.getByText('已保存 DeepSeek (deepseek-official)。', { exact: true }).waitFor()
-      expect(await scaffold.ctx.credentials.readStored(ref)).toBe('fixture-replacement-key')
-      await page.reload({ waitUntil: 'load' })
-      await openSettings(page, 'zh')
-      await dialog.getByRole('button', { name: '模型', exact: true }).click()
-      await edit.click()
-      await expect.poll(() => key.inputValue()).toBe('fixture-replacement-key')
-      await key.fill('')
-      expect(await key.getAttribute('placeholder')).toBe('留空使用环境认证（DEEPSEEK_API_KEY）')
-      await dialog.getByText('环境凭据状态尚未确认', { exact: true }).waitFor()
-      expect(await scaffold.ctx.credentials.readStored(ref)).toBe('fixture-replacement-key')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await dialog.getByText('已保存 DeepSeek (deepseek-official)。', { exact: true }).waitFor()
-      expect(await scaffold.ctx.credentials.readStored(ref)).toBeUndefined()
-      // A missing credential opens the first-run settings card automatically;
-      // an environment credential keeps an ordinary row whose editor is closed.
-      if (hasEnvironment) await edit.click()
-      await expect.poll(() => key.inputValue()).toBe('')
-      expect(await key.getAttribute('placeholder')).toBe('留空使用环境认证（DEEPSEEK_API_KEY）')
-      const hint = hasEnvironment
-        ? '已检测到环境变量（DEEPSEEK_API_KEY）'
-        : '未检测到环境变量。请填写 API 密钥，或设置环境变量 DEEPSEEK_API_KEY。'
-      const detection = dialog.getByText(hint, { exact: true })
-      await detection.waitFor()
-      const colors = await detection.evaluate((element, present) => {
-        const label = element as HTMLElement
-        const actual = getComputedStyle(label).color
-        const previous = label.style.color
-        label.style.color = present ? 'var(--dsw-alias-state-success-primary)' : 'var(--dsw-alias-state-warn-label)'
-        const expected = getComputedStyle(label).color
-        label.style.color = previous
-        return { actual, expected }
-      }, hasEnvironment)
-      expect(colors.actual).toBe(colors.expected)
-      expect(await dialog.getByRole('button', { name: '显示密钥', exact: true }).count()).toBe(0)
-      expect((await scaffold.ctx.credentials.resolve(ref))?.source).toBe(hasEnvironment ? 'env' : undefined)
-      await compareOrRefreshGolden(
-        fileURLToPath(new URL(`./expected/credential-editor/${hasEnvironment ? 'detected' : 'missing'}-environment.expected.md`, import.meta.url)),
-        await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd), webSnapshotMode(),
-      )
-    } finally { await browser.close() }
-  } finally { await scaffold.close() }
-})
-
-/** Local provider endpoint recording the destination path and authentication actually received. */
-async function connectionProbe(messages: boolean) {
-  const calls: { path: string; key: string | undefined }[] = []
-  const server = createServer((request, response) => {
-    request.on('end', () => {
-      const key = messages ? request.headers['x-api-key'] : request.headers.authorization
-      calls.push({ path: request.url ?? '', key: typeof key === 'string' ? key : undefined })
-      const events = messages ? [
-        { type: 'message_start', message: { id: 'probe', type: 'message', role: 'assistant', model: 'credential-editor-model', content: [], usage: { input_tokens: 1, output_tokens: 0 } } },
-        { type: 'content_block_start', index: 0, content_block: { type: 'text', text: '' } },
-        { type: 'content_block_delta', index: 0, delta: { type: 'text_delta', text: 'connection-ok' } },
-        { type: 'content_block_stop', index: 0 },
-        { type: 'message_delta', delta: { stop_reason: 'end_turn' }, usage: { output_tokens: 1 } },
-        { type: 'message_stop' },
-      ] : [
-        { choices: [{ delta: { role: 'assistant', content: 'connection-ok' }, index: 0, finish_reason: null }] },
-        { choices: [{ delta: {}, index: 0, finish_reason: 'stop' }], usage: { prompt_tokens: 1, completion_tokens: 1 } },
-      ]
-      response.writeHead(200, { 'content-type': 'text/event-stream' })
-      response.end(events.map(event => `${'type' in event ? `event: ${event.type}\n` : ''}data: ${JSON.stringify(event)}\n\n`).join('')
-        + (messages ? '' : 'data: [DONE]\n\n'))
-    })
-    request.resume()
-  })
-  onTestFinished(async () => {
-    await new Promise<void>((resolve) => { server.close(() => { resolve() }); server.closeAllConnections() })
-  })
-  server.listen(0, '127.0.0.1')
-  await once(server, 'listening')
-  const address = server.address()
-  if (address === null || typeof address === 'string') throw new Error('connection probe did not bind TCP')
-  return { url: `http://127.0.0.1:${String(address.port)}`, calls }
-}
-
-it.each([
-  { provider: 'deepseek-official', ref: 'DEEPSEEK_API_KEY', messages: true },
-  { provider: 'openai', ref: 'OPENAI_API_KEY', messages: false },
-  { provider: 'anthropic', ref: 'ANTHROPIC_API_KEY', messages: true },
-  { provider: 'credential-fixture', ref: 'CREDENTIAL_FIXTURE_API_KEY', messages: false },
-])('uses the saved endpoint and key on the wire for $provider, then restores fallbacks', async ({ provider, ref, messages }) => {
-  const ambient = await connectionProbe(messages)
-  const saved = await connectionProbe(messages)
-  const root = await mkdtemp(join(tmpdir(), 'dsh-credential-routing-'))
-  onTestFinished(() => rm(root, { recursive: true, force: true }))
-  const overlay = join(root, 'connection.patch.yml')
-  const models = [{ id: 'credential-editor-model' }]
-  const baseSuffix = provider === 'anthropic' ? '' : '/v1'
-  const operation = provider === 'anthropic' ? '/v1/messages?beta=true' : messages ? '/messages' : '/chat/completions'
-  const ambientURL = `${ambient.url}/ambient${baseSuffix}`
-  await writeFile(overlay, JSON.stringify([
-    { id: 'llm-deepseek', config: { models } },
-    ...provider === 'deepseek-official' ? [] : [{
-      id: 'llm-pi-ai', config: { providers: { [provider]: {
-        api: messages ? 'anthropic-messages' : 'openai-completions',
-        baseURL: ambientURL, models,
-        ...provider === 'credential-fixture' ? {} : { apiKeyEnv: ref },
-      } } },
-    }],
-  ]))
-  const scaffold = await launchWebScaffold({
-    deepSeekMissingCredential: true,
-    extraOverlayPath: overlay,
-    openInAppEnvironment: createLaunchEnvironmentSnapshot([{
-      source: 'process', values: {
-        [ref]: 'fixture-environment-key',
-        DEEPSEEK_BASE_URL: ambientURL,
-        OPENAI_BASE_URL: ambientURL,
-        ANTHROPIC_BASE_URL: ambientURL,
-      },
-    }]),
-  })
-  try {
-    const browser = await chromium.launch()
-    try {
-      const page = await browser.newPage({ locale: ZH_BROWSER_LOCALE })
-      await page.goto(scaffold.authenticatedUrl, { waitUntil: 'load' })
-      await openSettings(page, 'zh')
-      const dialog = page.getByRole('dialog', { name: '设置' })
-      await dialog.getByRole('button', { name: '模型', exact: true }).click()
-      const edit = dialog.getByRole('button', {
-        name: `编辑 ${provider === 'deepseek-official' ? 'DeepSeek (deepseek-official)' : provider}`, exact: true,
-      })
-      const key = dialog.getByLabel('API 密钥', { exact: true })
-      const endpoint = dialog.getByLabel('API 地址', { exact: true })
-      const savedURL = `${saved.url}/configured${baseSuffix}`
-      const generate = async (): Promise<void> => {
-        const assembler = new BlockAssembler()
-        for await (const chunk of scaffold.ctx.llm.stream({ provider, model: 'credential-editor-model', messages: [] })) assembler.push(chunk)
-        expect(assembler.message({ provider, model: 'credential-editor-model' }).content).toContainEqual({ type: 'text', text: 'connection-ok' })
-      }
-      await edit.click()
-      await key.fill('fixture-saved-key')
-      await dialog.getByText('自定义设置', { exact: true }).click()
-      await endpoint.fill(savedURL)
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await expect.poll(() => key.count()).toBe(0)
-      await generate()
-      expect(saved.calls).toEqual([{ path: `/configured${baseSuffix}${operation}`, key: messages ? 'fixture-saved-key' : 'Bearer fixture-saved-key' }])
-      expect(ambient.calls).toEqual([])
-      await page.reload({ waitUntil: 'load' })
-      await openSettings(page, 'zh')
-      await dialog.getByRole('button', { name: '模型', exact: true }).click()
-      await edit.click()
-      expect(await key.inputValue()).toBe('fixture-saved-key')
-      expect(await key.getAttribute('type')).toBe('password')
-      await dialog.getByText('自定义设置', { exact: true }).click()
-      expect(await endpoint.inputValue()).toBe(savedURL)
-      await generate()
-      expect(saved.calls).toHaveLength(2)
-      expect(saved.calls[1]).toEqual(saved.calls[0])
-      expect(ambient.calls).toEqual([])
-      await key.fill('')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await expect.poll(() => key.count()).toBe(0)
-      await generate()
-      expect(saved.calls).toHaveLength(3)
-      expect(saved.calls[2]).toEqual({ path: `/configured${baseSuffix}${operation}`, key: messages ? 'fixture-environment-key' : 'Bearer fixture-environment-key' })
-      expect(ambient.calls).toEqual([])
-      await edit.click()
-      await key.fill('fixture-saved-key')
-      await dialog.getByText('自定义设置', { exact: true }).click()
-      await endpoint.fill('')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await expect.poll(() => key.count()).toBe(0)
-      await generate()
-      expect(saved.calls).toHaveLength(3)
-      expect(ambient.calls).toEqual([{ path: `/ambient${baseSuffix}${operation}`, key: messages ? 'fixture-saved-key' : 'Bearer fixture-saved-key' }])
-      await edit.click()
-      await key.fill('')
-      await dialog.getByRole('button', { name: '保存', exact: true }).click()
-      await expect.poll(() => key.count()).toBe(0)
-      await generate()
-      expect(saved.calls).toHaveLength(3)
-      expect(ambient.calls[1]).toEqual({ path: `/ambient${baseSuffix}${operation}`, key: messages ? 'fixture-environment-key' : 'Bearer fixture-environment-key' })
-      expect(ambient.calls).toHaveLength(2)
-      expect(await scaffold.ctx.credentials.readStored(credentialRef(ref))).toBeUndefined()
-    } finally { await browser.close() }
-  } finally { await scaffold.close() }
-})
diff --git a/apps/web/tests/expected/credential-editor/detected-environment.expected.md b/apps/web/tests/expected/credential-editor/detected-environment.expected.md
deleted file mode 100644
index 829eeedd37..0000000000
--- a/apps/web/tests/expected/credential-editor/detected-environment.expected.md
+++ /dev/null
@@ -1,25 +0,0 @@
-- dialog "设置":
-  - text: 设置
-  - navigation:
-    - button "通用设置"
-    - button "模型"
-    - button "内置插件"
-    - button "Agent 预设"
-  - button "打开配置文件"
-  - button "关闭"
-  - heading "模型" [level=2]
-  - paragraph: 填入各提供商的 API 密钥即可使用其模型。
-  - list:
-    - listitem:
-      - text: DeepSeek
-      - img "API 密钥已配置"
-      - button "编辑 DeepSeek (deepseek-official)": 编辑
-      - text: DeepSeek deepseek-official API 密钥
-      - button "认证说明": "?"
-      - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-      - paragraph: 已检测到环境变量（DEEPSEEK_API_KEY）
-      - group: 自定义设置
-      - button "取消"
-      - button "保存"
-  - button "添加模型提供商"
diff --git a/apps/web/tests/expected/credential-editor/missing-environment.expected.md b/apps/web/tests/expected/credential-editor/missing-environment.expected.md
deleted file mode 100644
index 609ac50d0e..0000000000
--- a/apps/web/tests/expected/credential-editor/missing-environment.expected.md
+++ /dev/null
@@ -1,23 +0,0 @@
-- dialog "设置":
-  - text: 设置
-  - navigation:
-    - button "通用设置"
-    - button "模型"
-    - button "内置插件"
-    - button "Agent 预设"
-  - button "打开配置文件"
-  - button "关闭"
-  - heading "模型" [level=2]
-  - paragraph: 填入各提供商的 API 密钥即可使用其模型。
-  - status: 已保存 DeepSeek (deepseek-official)。
-  - list:
-    - listitem:
-      - text: DeepSeek deepseek-official API 密钥
-      - button "认证说明": "?"
-      - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-      - paragraph: 未检测到环境变量。请填写 API 密钥，或设置环境变量 DEEPSEEK_API_KEY。
-      - group: 自定义设置
-      - button "取消"
-      - button "保存"
-  - button "添加模型提供商"
diff --git a/apps/web/tests/expected/credential-editor/saved-key.expected.md b/apps/web/tests/expected/credential-editor/saved-key.expected.md
deleted file mode 100644
index 2d4dde4639..0000000000
--- a/apps/web/tests/expected/credential-editor/saved-key.expected.md
+++ /dev/null
@@ -1,26 +0,0 @@
-- dialog "设置":
-  - text: 设置
-  - navigation:
-    - button "通用设置"
-    - button "模型"
-    - button "内置插件"
-    - button "Agent 预设"
-  - button "打开配置文件"
-  - button "关闭"
-  - heading "模型" [level=2]
-  - paragraph: 填入各提供商的 API 密钥即可使用其模型。
-  - list:
-    - listitem:
-      - text: DeepSeek
-      - img "API 密钥已配置"
-      - button "编辑 DeepSeek (deepseek-official)": 编辑
-      - text: DeepSeek deepseek-official API 密钥
-      - button "认证说明": "?"
-      - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-        - text: fixture-saved-deepseek-key
-      - button "显示密钥"
-      - group: 自定义设置
-      - button "取消"
-      - button "保存"
-  - button "添加模型提供商"
diff --git a/apps/web/tests/expected/deepseek-messages-settings/cards.expected.md b/apps/web/tests/expected/deepseek-messages-settings/cards.expected.md
index d4fa1c31fb..08a0750772 100644
--- a/apps/web/tests/expected/deepseek-messages-settings/cards.expected.md
+++ b/apps/web/tests/expected/deepseek-messages-settings/cards.expected.md
@@ -17,9 +17,7 @@
       - text: DeepSeek deepseek-official API 密钥
       - button "认证说明": "?"
       - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-        - text: sk-messages-onboarding
-      - button "显示密钥"
+        - /placeholder: 留空使用已保存凭据
       - group:
         - text: 自定义设置 API 地址
         - textbox "API 地址":
diff --git a/apps/web/tests/expected/onboarding-deepseek-config/default-models.expected.md b/apps/web/tests/expected/onboarding-deepseek-config/default-models.expected.md
index 018ea8a13c..03900f109b 100644
--- a/apps/web/tests/expected/onboarding-deepseek-config/default-models.expected.md
+++ b/apps/web/tests/expected/onboarding-deepseek-config/default-models.expected.md
@@ -17,9 +17,7 @@
       - text: DeepSeek deepseek-official API 密钥
       - button "认证说明": "?"
       - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-        - text: dsh_onboarding_fixture_key
-      - button "显示密钥"
+        - /placeholder: 留空使用已保存凭据
       - group:
         - text: 自定义设置 API 地址
         - textbox "API 地址":
diff --git a/apps/web/tests/expected/onboarding-deepseek-config/models.expected.md b/apps/web/tests/expected/onboarding-deepseek-config/models.expected.md
index a5811b5d66..27ba737236 100644
--- a/apps/web/tests/expected/onboarding-deepseek-config/models.expected.md
+++ b/apps/web/tests/expected/onboarding-deepseek-config/models.expected.md
@@ -17,9 +17,7 @@
       - text: DeepSeek deepseek-official API 密钥
       - button "认证说明": "?"
       - textbox "API 密钥":
-        - /placeholder: 留空使用环境认证（DEEPSEEK_API_KEY）
-        - text: dsh_onboarding_fixture_key
-      - button "显示密钥"
+        - /placeholder: 留空使用已保存凭据
       - group:
         - text: 自定义设置 API 地址
         - textbox "API 地址":
diff --git a/apps/web/tests/fixtures/credential-editor.patch.yml b/apps/web/tests/fixtures/credential-editor.patch.yml
deleted file mode 100644
index 911f60db22..0000000000
--- a/apps/web/tests/fixtures/credential-editor.patch.yml
+++ /dev/null
@@ -1,5 +0,0 @@
-- id: llm-deepseek
-  config:
-    baseURL: http://127.0.0.1
-    models:
-      - id: credential-editor-model
diff --git a/apps/web/tests/models-settings.e2e.ts b/apps/web/tests/models-settings.e2e.ts
index 1b5a5dcbed..d36008959d 100644
--- a/apps/web/tests/models-settings.e2e.ts
+++ b/apps/web/tests/models-settings.e2e.ts
@@ -2,7 +2,7 @@
 // wire — the one add card offers the dormant pi-ai catalog on its third-party
 // mode and the create form on its custom-API mode, a blank key saves a
 // reference-free profile for provider-native auth, and typing an API key later
-// stores it under the derived reference (`MINIMAX_CN_API_KEY`)
+// stores it write-only under the derived reference (`MINIMAX_CN_API_KEY`)
 // while the settings document records only that reference. Each saved row
 // appears after route topology invalidation without presenting liveness as
 // provider status. The customized-settings fold writes its curated fields —
@@ -154,7 +154,8 @@ describe('web e2e: Models settings page configures a dormant provider', () => {
     await dialog.getByText('该 API 密钥格式错误，请检查。').waitFor({ timeout: 10_000 })
     await expect.poll(async () => save.isEnabled(), { timeout: 10_000 }).toBe(false)
 
-    // An empty field leaves this new profile on native authentication.
+    // Clearing it restores submit: an empty field means "keep what is stored",
+    // never a refusal, or editing any other setting would demand the key.
     await key.fill('')
     await expect.poll(async () => save.isEnabled(), { timeout: 10_000 }).toBe(true)
     expect(await dialog.getByText('该 API 密钥格式错误，请检查。').count()).toBe(0)
@@ -220,9 +221,7 @@ describe('web e2e: Models settings page configures a dormant provider', () => {
     onTestFailed(() => saveFailureShot(page, 'web-e2e-models-customized'))
     const dialog = page.getByRole('dialog', { name: '设置' })
     await dialog.getByRole('button', { name: '编辑 minimax-cn' }).click()
-    const savedKey = dialog.getByLabel('API 密钥', { exact: true })
-    await expect.poll(() => savedKey.inputValue(), { timeout: 10_000 }).toBe('sk-e2e-minimax')
-    expect(await savedKey.getAttribute('type')).toBe('password')
+    await dialog.getByPlaceholder('留空使用已保存凭据', { exact: true }).waitFor({ timeout: 10_000 })
     expect(await dialog.textContent()).not.toContain('API 密钥来源：')
     expect(await dialog.textContent()).not.toMatch(/oauth/i)
     await dialog.getByText('自定义设置').click()
diff --git a/apps/web/tests/onboarding-deepseek-config.e2e.ts b/apps/web/tests/onboarding-deepseek-config.e2e.ts
index 06e451032d..8706a7a4de 100644
--- a/apps/web/tests/onboarding-deepseek-config.e2e.ts
+++ b/apps/web/tests/onboarding-deepseek-config.e2e.ts
@@ -2,6 +2,7 @@
 // credential is absent, both ordered steps share the shipped modal chrome,
 // and the inline key write lands in an isolated harness home without a reload
 // or model call.
+import { randomBytes } from 'node:crypto'
 import { assertModelInputLayout } from './model-input-layout.ts'
 import { readFile } from 'node:fs/promises'
 import { fileURLToPath } from 'node:url'
@@ -32,7 +33,6 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
   let page: Page
   let tripwire: ReturnType<typeof watchConsole>
   const browserConsole: string[] = []
-  const secret = 'dsh_onboarding_fixture_key'
 
   beforeAll(async () => {
     scaffold = await launchWebScaffold({ deepSeekMissingCredential: true, welcomeNoticePending: true })
@@ -50,7 +50,7 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     await scaffold?.close()
   })
 
-  it('stores a key and loads it masked only in an explicitly opened editor', async () => {
+  it('stores a key write-only and observes configured state without restarting', async () => {
     onTestFailed(() => saveFailureShot(page, 'web-e2e-onboarding-deepseek-config'))
     const welcome = page.getByRole('dialog', { name: WELCOME_NOTICE_COPY.zh.title })
     await welcome.waitFor({ timeout: 15_000 })
@@ -86,6 +86,7 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     const initial = await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd)
     await compareOrRefreshGolden(MISSING_EXPECTED, initial, MODE)
 
+    const secret = `dsh_onboarding_${randomBytes(12).toString('hex')}`
     await keyInput.fill(secret)
     await credentialStep.getByRole('button', { name: '保存并继续' }).click()
     await credentialStep.waitFor({ state: 'detached', timeout: 15_000 })
@@ -100,7 +101,8 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     const acknowledgedSettings = await readFile(join(scaffold.harnessHome, 'profiles', 'scaffold', 'cordis.patch.yml'), 'utf8')
     expect(acknowledgedSettings).toContain(`${WELCOME_NOTICE_ACK_FIELD}: ${WELCOME_NOTICE_VERSION}`)
 
-    // Opening the ordinary Models editor loads the saved key masked.
+    // The ordinary Models surface reuses the refreshed join and exposes the
+    // configured write-only placeholder without a reload.
     await openSettings(page, 'zh')
     const settings = page.getByRole('dialog', { name: '设置' })
     await settings.waitFor({ timeout: 10_000 })
@@ -111,10 +113,9 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     const configuredInput = settings.getByLabel('API 密钥', { exact: true })
     await configuredInput.waitFor({ timeout: 10_000 })
     await expect.poll(
-      () => configuredInput.inputValue(),
+      () => configuredInput.getAttribute('placeholder'),
       { timeout: 10_000 },
-    ).toBe(secret)
-    expect(await configuredInput.getAttribute('type')).toBe('password')
+    ).toBe('留空使用已保存凭据')
 
     const secondReloadWarnings = tripwire.warnings.length
     await page.reload({ waitUntil: 'load' })
@@ -254,9 +255,9 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup
     await settings.getByRole('group', { name: '输入类型 1' }).getByRole('checkbox', { name: '图片' }).check()
 
     await expect.poll(
-      () => settings.getByLabel('API 密钥', { exact: true }).inputValue(),
+      () => settings.getByLabel('API 密钥', { exact: true }).getAttribute('placeholder'),
       { timeout: 10_000 },
-    ).toBe(secret)
+    ).toBe('留空使用已保存凭据')
     const modelEditor = await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd)
     await compareOrRefreshGolden(MODELS_EXPECTED, modelEditor, MODE)
     await settings.getByRole('button', { name: '保存', exact: true }).click()
diff --git a/apps/web/tsconfig.json b/apps/web/tsconfig.json
index 938c0dae3c..9b3977d4ee 100644
--- a/apps/web/tsconfig.json
+++ b/apps/web/tsconfig.json
@@ -23,7 +23,6 @@
   // this client-registered project must not also hold them (one program
   // cannot see both sides of the cordis Context merges).
   "exclude": [
-    "tests/credential-editor.e2e.ts",
     "tests/sidebar-drawer.e2e.ts",
     "tests/creation-recommendations.e2e.ts",
     "tests/plugin-recommendations.e2e.ts",
diff --git a/docs/capability-seams.i18n.yaml b/docs/capability-seams.i18n.yaml
index 4dc23c45e6..1083094774 100644
--- a/docs/capability-seams.i18n.yaml
+++ b/docs/capability-seams.i18n.yaml
@@ -6,5 +6,5 @@
   en: 41d772192075e133
   zh: 5ef3da69b4de1d8a
 /capability-seams-and-core-services:
-  en: 6215d15e0e273fa4
-  zh: dec5c7779e0a42f5
+  en: 3c972fccec17a890
+  zh: 94c82847a3c8b83c
diff --git a/docs/capability-seams.md b/docs/capability-seams.md
index 334e3757bc..e333a79f71 100644
--- a/docs/capability-seams.md
+++ b/docs/capability-seams.md
@@ -698,7 +698,7 @@ flowchart LR
 | `ctx.configEditor` | `core` | [`config-editor`](../packages/boot/config-editor) | - | [`settings`](../packages/settings/settings), [`agent-default-model`](../packages/core/agent-default-model) | - | Persists profile config patches under the application file lock and HMR queue, then reconciles Loader entries. |
 | `ctx.settings` | `core` | [`settings`](../packages/settings/settings) | - | [`api-settings-controller`](../packages/api/settings-controller) | - | Forms project volatile Config fields from active profile entries and delegate validated edits to config-editor. Plugins consume their own Config references. |
 | `ctx.subagentModelSelection` | `core` | [`tool-subagent`](../packages/subagent/tool-subagent) | - | [`tool-subagent`](../packages/subagent/tool-subagent) | - | Owns the default-off settings namespace that Agent-scoped delegation tools sample when composing a new top-level Session. |
-| `ctx.credentials` | `seam` | [`credentials`](../packages/credentials/credentials) | [`credentials-local`](../packages/credentials/credentials-local) | [`api-settings-controller`](../packages/api/settings-controller), [`llm-deepseek`](../packages/llm/llm-deepseek), [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | Configuration carries references to secrets; providers own the values. Consumers resolve per operation, so a rotated credential reaches the very next request; the settings controller exposes value-free metadata, writes, and owner-only reads of stored keys. |
+| `ctx.credentials` | `seam` | [`credentials`](../packages/credentials/credentials) | [`credentials-local`](../packages/credentials/credentials-local) | [`api-settings-controller`](../packages/api/settings-controller), [`llm-deepseek`](../packages/llm/llm-deepseek), [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | Configuration carries references to secrets; providers own the values. Consumers resolve per operation, so a rotated credential reaches the very next request; the settings controller exposes value-free views and write-only storage. |
 | `ctx.deepseekAccount` | `seam` | [`deepseek-account`](../packages/credentials/deepseek-account) | [`deepseek-account-platform`](../packages/credentials/deepseek-account-platform) | [`api-account-controller`](../packages/api/account-controller), [`llm-deepseek`](../packages/llm/llm-deepseek) | - | The Host owns browser authorization and local credentials; UI consumers receive state without tokens. |
 | `ctx.authorization` | `seam` | [`authorization`](../packages/credentials/authorization) | - | [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | Flows are registered by the plugin that knows how to obtain one credential and keyed by the record they write; the seam owns the conversation and the one-attempt-per-key lifecycle, never the protocol. |
 | `ctx.productAnalytics` | `service` | [`client-product-analytics`](../packages/client/product-analytics) | - | - | - | Accepts selected Desktop events, enriches available login identity, and observes live compaction under the live Host collection policy. |
diff --git a/docs/capability-seams.zh.md b/docs/capability-seams.zh.md
index d0f0bdffb0..cf3f2e67fc 100644
--- a/docs/capability-seams.zh.md
+++ b/docs/capability-seams.zh.md
@@ -700,7 +700,7 @@ flowchart LR
 | `ctx.configEditor` | `core` | [`config-editor`](../packages/boot/config-editor) | - | [`settings`](../packages/settings/settings), [`agent-default-model`](../packages/core/agent-default-model) | - | Persists profile config patches under the application file lock and HMR queue, then reconciles Loader entries. |
 | `ctx.settings` | `core` | [`settings`](../packages/settings/settings) | - | [`api-settings-controller`](../packages/api/settings-controller) | - | Forms project volatile Config fields from active profile entries and delegate validated edits to config-editor. Plugins consume their own Config references. |
 | `ctx.subagentModelSelection` | `core` | [`tool-subagent`](../packages/subagent/tool-subagent) | - | [`tool-subagent`](../packages/subagent/tool-subagent) | - | 拥有默认关闭的设置命名空间；Agent 作用域的委派工具会在组合新顶层 Session 时读取它。 |
-| `ctx.credentials` | `seam` | [`credentials`](../packages/credentials/credentials) | [`credentials-local`](../packages/credentials/credentials-local) | [`api-settings-controller`](../packages/api/settings-controller), [`llm-deepseek`](../packages/llm/llm-deepseek), [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | 配置携带对机密信息的引用；提供方拥有实际值。消费方按操作解析，因此轮换后的凭据会在紧接着的下一次请求中生效；settings controller 提供不含实际值的元数据和写入操作，并仅向所有者读取已保存密钥。 |
+| `ctx.credentials` | `seam` | [`credentials`](../packages/credentials/credentials) | [`credentials-local`](../packages/credentials/credentials-local) | [`api-settings-controller`](../packages/api/settings-controller), [`llm-deepseek`](../packages/llm/llm-deepseek), [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | 配置携带对机密信息的引用；提供方拥有实际值。消费方按操作解析，因此轮换后的凭据会在紧接着的下一次请求中生效；settings controller 提供不含实际值的视图和只写存储。 |
 | `ctx.deepseekAccount` | `seam` | [`deepseek-account`](../packages/credentials/deepseek-account) | [`deepseek-account-platform`](../packages/credentials/deepseek-account-platform) | [`api-account-controller`](../packages/api/account-controller), [`llm-deepseek`](../packages/llm/llm-deepseek) | - | Host 负责浏览器授权和本地凭证；UI 使用方只接收不含 token 的状态。 |
 | `ctx.authorization` | `seam` | [`authorization`](../packages/credentials/authorization) | - | [`llm-pi-ai`](../packages/llm/llm-pi-ai) | - | flow 由知道如何取得某份凭据的插件注册，并以其写入的记录为键；seam 拥有这段对话与"每个键同时只跑一次尝试"的生命周期，而非协议本身。 |
 | `ctx.productAnalytics` | `service` | [`client-product-analytics`](../packages/client/product-analytics) | - | - | - | 根据 Host 动态采集策略接收指定桌面事件、补充可用登录身份并监听实时压缩。 |
diff --git a/docs/subsystems/credentials.i18n.yaml b/docs/subsystems/credentials.i18n.yaml
index 06c51858d4..bad9827407 100644
--- a/docs/subsystems/credentials.i18n.yaml
+++ b/docs/subsystems/credentials.i18n.yaml
@@ -9,8 +9,8 @@
   en: 0083032b9d19467d
   zh: 15d7a7520bac094e
 /user-credentials/resolution:
-  en: 0583aeab49d80a4b
-  zh: 1ffd60d7e79f67cf
+  en: baaab4bca76bea6b
+  zh: 54ccdc03ffd44f63
 /user-credentials/description:
   en: f7b09588c0f34952
   zh: 1b93d673c5bf6a80
diff --git a/docs/subsystems/credentials.md b/docs/subsystems/credentials.md
index b4ffca123b..2a084fb29f 100644
--- a/docs/subsystems/credentials.md
+++ b/docs/subsystems/credentials.md
@@ -20,8 +20,6 @@ type CredentialRef = Branded<'CredentialRef'>
 
 `resolve(ref)` returns the value with the provider-defined source layer that supplied it, or `undefined` while unconfigured. Consumers re-resolve at each operation and never cache across operations — that per-operation read is the hot-update mechanism.
 
-`readStored(ref)` returns only the provider-managed value for editing, or `undefined` when none is stored. It never reads environment fallbacks. The Remote editor operation restricts this read to the owner.
-
 ```ts type-equiv
 /** One resolved credential value and the source layer that supplied it. */
 interface ResolvedCredential {
@@ -154,13 +152,6 @@ A CredentialKey answers "what credential does this plugin hold for this id". Not
  */
 abstract resolve(ref: CredentialRef): Promise<ResolvedCredential | undefined>
 
-/**
- * Read the provider-managed value without consulting environment fallbacks.
- * @param ref - the reference to read.
- * @returns the stored secret, or undefined when no non-empty value is stored.
- */
-abstract readStored(ref: CredentialRef): Promise<string | undefined>
-
 /**
  * Describe one reference for configuration surfaces without exposing the
  * value.
@@ -237,7 +228,7 @@ Source: [`packages/credentials/credentials/src/index.ts`](../../packages/credent
 
 ### `ctx.credentialsController` — `CredentialsController`
 
-Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Metadata reads exclude secrets; readStored returns only a provider-managed value for an explicitly opened editor.
+Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Secret values cross in one direction only — no method here returns one.
 
 ```ts cordis-catalog
 /**
@@ -252,15 +243,8 @@ Host service backing the generated `ctx.remote.credentials` namespace. It carrie
 @Remote async describe(refs: string[]): Promise<Record<string, CredentialInfo>>
 
 /**
- * Read one stored value for a credential editor, excluding environment fallbacks.
- * @param ref - reference name to read.
- * @returns the stored secret, or undefined when the provider stores none.
- * @throws RemoteError for a non-owner Remote caller, an invalid reference, or an absent provider.
- */
-@Remote async readStored(ref: string): Promise<string | undefined>
-
-/**
- * Store one value from a configuration surface.
+ * Store one value from a configuration surface. The value crosses the wire in
+ * this direction only: no read path returns it.
  * @param ref - reference name to store under.
  * @param value - the non-empty secret value.
  * @throws RemoteError when the request is invalid, no provider is mounted, or the provider refuses the write.
diff --git a/docs/subsystems/credentials.zh.md b/docs/subsystems/credentials.zh.md
index d4784832ca..1e9221699a 100644
--- a/docs/subsystems/credentials.zh.md
+++ b/docs/subsystems/credentials.zh.md
@@ -20,8 +20,6 @@ type CredentialRef = Branded<'CredentialRef'>
 
 `resolve(ref)` 返回值及提供该值的来源层（由提供方定义）；未配置期间返回 `undefined`。消费方在每个操作中重新解析，绝不跨操作缓存——这种按操作进行的读取正是热更新机制。
 
-`readStored(ref)` 仅返回用于编辑的提供方托管值；未存储时返回 `undefined`。它不读取环境后备值。编辑器的 Remote 操作仅允许所有者执行此读取。
-
 ```ts type-equiv
 /** One resolved credential value and the source layer that supplied it. */
 interface ResolvedCredential {
@@ -154,13 +152,6 @@ A CredentialKey answers "what credential does this plugin hold for this id". Not
  */
 abstract resolve(ref: CredentialRef): Promise<ResolvedCredential | undefined>
 
-/**
- * Read the provider-managed value without consulting environment fallbacks.
- * @param ref - the reference to read.
- * @returns the stored secret, or undefined when no non-empty value is stored.
- */
-abstract readStored(ref: CredentialRef): Promise<string | undefined>
-
 /**
  * Describe one reference for configuration surfaces without exposing the
  * value.
@@ -237,7 +228,7 @@ Source: [`packages/credentials/credentials/src/index.ts`](../../packages/credent
 
 ### `ctx.credentialsController` — `CredentialsController`
 
-Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Metadata reads exclude secrets; readStored returns only a provider-managed value for an explicitly opened editor.
+Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Secret values cross in one direction only — no method here returns one.
 
 ```ts cordis-catalog
 /**
@@ -252,15 +243,8 @@ Host service backing the generated `ctx.remote.credentials` namespace. It carrie
 @Remote async describe(refs: string[]): Promise<Record<string, CredentialInfo>>
 
 /**
- * Read one stored value for a credential editor, excluding environment fallbacks.
- * @param ref - reference name to read.
- * @returns the stored secret, or undefined when the provider stores none.
- * @throws RemoteError for a non-owner Remote caller, an invalid reference, or an absent provider.
- */
-@Remote async readStored(ref: string): Promise<string | undefined>
-
-/**
- * Store one value from a configuration surface.
+ * Store one value from a configuration surface. The value crosses the wire in
+ * this direction only: no read path returns it.
  * @param ref - reference name to store under.
  * @param value - the non-empty secret value.
  * @throws RemoteError when the request is invalid, no provider is mounted, or the provider refuses the write.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.i18n.yaml b/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.i18n.yaml
deleted file mode 100644
index 3acec7569f..0000000000
--- a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.i18n.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-# Bilingual-pair consistency record for guide.md (docs/i18n/README.md): per heading
-# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
-# After editing either side, bring the other along and re-record with:
-#   pnpm run verify-translation-pairing --write docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md
-/:
-  en: 2f1907963c732ea8
-  zh: e25494c07150f6b9
-/saved-api-keys-in-provider-editors:
-  en: 63376a595a0e6dae
-  zh: 2709df13410087e2
-/saved-api-keys-in-provider-editors/change:
-  en: 463718dbe83f900d
-  zh: d2e55dfebf8a4b9e
-/saved-api-keys-in-provider-editors/migration:
-  en: 19c94ae9626773b1
-  zh: 1098744f47162c43
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md b/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md
deleted file mode 100644
index 8e721ad800..0000000000
--- a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.md
+++ /dev/null
@@ -1,19 +0,0 @@
----
-kind: upgrade-guide
-description: "Saved API keys appear in masked editor fields, and clearing a saved key removes its override."
----
-# Saved API keys in provider editors
-
-English | [中文](guide.zh.md)
-
-## Change
-
-Provider editors show stored API keys as masked values instead of empty fields. Applying an empty field removes a previously loaded key and restores environment authentication. Cancel preserves the stored key. Environment values are never loaded into the editor.
-
-Credential providers implement `readStored(ref): Promise<string | undefined>` to return only the managed value, without environment fallbacks. The owner-only `credentials.readStored` Remote method supplies this value to an opened editor; general metadata reads remain redacted.
-
-## Migration
-
-1. Keep the loaded value to retain a saved key, replace it to rotate the key, or clear it and apply to use environment authentication.
-2. Implement `readStored` in custom `CredentialProvider` subclasses; return `undefined` when no non-empty value is stored.
-3. Reopen the DeepSeek editor to confirm the saved key appears masked. After clearing and applying, confirm the field is empty and offers environment authentication.
diff --git a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.zh.md b/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.zh.md
deleted file mode 100644
index 75efbcc4d7..0000000000
--- a/docs/upgrade-guide/v0.2.2-alpha.2/credential-editor/guide.zh.md
+++ /dev/null
@@ -1,19 +0,0 @@
----
-kind: upgrade-guide
-description: "已保存的 API 密钥显示为编辑器中的掩码值，清空已保存密钥会删除其覆盖。"
----
-# 提供商编辑器中的已保存 API 密钥
-
-[English](guide.md) | 中文
-
-## 变更
-
-提供商编辑器以掩码值显示已保存的 API 密钥，不再显示空字段。应用空字段会删除之前加载的密钥并恢复环境认证。「取消」保留已保存密钥。环境变量值从不加载到编辑器。
-
-凭据提供方实现 `readStored(ref): Promise<string | undefined>`，仅返回托管值，不使用环境后备。仅允许所有者调用的 `credentials.readStored` Remote 方法向已打开的编辑器提供此值；普通元数据读取仍保持脱敏。
-
-## 迁移
-
-1. 保留加载的值即可保留已保存密钥，替换它可轮换密钥，清空并应用则使用环境认证。
-2. 为自定义 `CredentialProvider` 子类实现 `readStored`；未存储非空值时返回 `undefined`。
-3. 重新打开 DeepSeek 编辑器，确认已保存密钥显示为掩码。清空并应用后，确认字段为空且提示使用环境认证。
diff --git a/docs/user/guide/providers.i18n.yaml b/docs/user/guide/providers.i18n.yaml
index 62801fa60d..b04aada43b 100644
--- a/docs/user/guide/providers.i18n.yaml
+++ b/docs/user/guide/providers.i18n.yaml
@@ -6,11 +6,11 @@
   en: b1631dcf25e805a1
   zh: 8ded02e2ae87f00b
 /configure-models/configure-deepseek:
-  en: 5cf396eb7f22b0f6
-  zh: d70688c6cd826f3a
+  en: 44852da64a6a39ec
+  zh: 4c280e428f0fec08
 /configure-models/add-a-third-party-provider:
-  en: c8fd933006c3830c
-  zh: 386f8f7d302e98c3
+  en: f6fb44a85dc5e4dd
+  zh: 2b86ea4492c32ed7
 /configure-models/add-a-custom-model-api:
   en: 17867305a3e1b52a
   zh: 876fedf1f6f563e4
diff --git a/docs/user/guide/providers.md b/docs/user/guide/providers.md
index 1ab90f440e..fe831bcaf9 100644
--- a/docs/user/guide/providers.md
+++ b/docs/user/guide/providers.md
@@ -10,7 +10,7 @@ Open **Settings → Models**. The DeepSeek card exposes one API-key field; enter
 
 ![The Models page: the DeepSeek card, with Add model provider below it](providers-models-page.png)
 
-Opening a provider editor loads its saved key into a masked input. Environment values are never loaded into this input. The key is stored in `$DSH_HOME/.credentials.yaml`, while settings retain only its credential reference. Credential metadata remains redacted.
+Keys are write-only. The page receives a redacted descriptor after saving, never the literal secret. The key is stored in `$DSH_HOME/.credentials.yaml`, while settings retain only its credential reference.
 
 With a key saved and the default endpoint, DeepSeek's models follow the list the DeepSeek API publishes. The list loads when the models are first needed, refreshes in the background about every ten minutes while they are in use, and falls back to the built-in models when it cannot load. Editing **Models** under **Customized settings** keeps your own list instead and stops following the published one; **Restore defaults** follows it again and reloads it. While the published list is in use, the card shows the built-in models, so a newly published model appears only in the model picker. The [API-key provider reference](../../../packages/llm/llm-deepseek-api-key/README.md) owns the listing, fallback, and gating rules.
 
@@ -18,11 +18,11 @@ With a key saved and the default endpoint, DeepSeek's models follow the list the
 
 Choose **Add model provider**. The card opens on **Third-party model provider**: pick a provider dsh ships with — the list shows provider ids such as `anthropic`, `openai`, `moonshotai` for Kimi, or `zai` for GLM — enter its API key, and save. The installed catalog supplies the endpoint, protocol, and model list.
 
-The authentication **?** explains saved-credential priority and environment fallbacks. With no saved key, leave the input blank to try the listed environment variables. A green hint identifies a detected environment variable. A yellow hint means no credential variable was detected; enter an API key or configure the listed variable. An unconfirmed hint means the status read failed or a saved key still covers the environment lookup. Clearing a saved key shows an unconfirmed hint until you save its removal and the page refreshes the environment check. Detection does not validate the credential or test the connection. Provider-managed credential files, including AWS profiles and Google application-default credentials, are outside this check. Providers without native key authentication, such as `openai-codex`, show no key field unless the profile explicitly names a credential reference.
+The authentication **?** explains saved-credential priority and environment fallbacks. Leave the key blank to use a saved credential or try the listed environment variables. A green hint identifies a detected environment variable. A yellow hint means no credential variable was detected; enter an API key or configure the listed variable. An unconfirmed hint means the status read failed. Detection does not validate the credential or test the connection. Provider-managed credential files, including AWS profiles and Google application-default credentials, are outside this check. Providers without native key authentication, such as `openai-codex`, show no key field unless the profile explicitly names a credential reference.
 
-A saved key appears masked, with no status text below the input. An empty input uses **Leave blank to use env as auth** and one detection hint. A nonempty input shows no authentication status text. Address configuration variables appear under **Base URL** and do not count as credentials.
+A saved credential uses the placeholder **Leave blank to use saved credentials**, with no status text below the input. Environment fallback uses **Leave blank to use env as auth** and one detection hint while the input is empty. A nonempty input shows no authentication status text. Address configuration variables appear under **Base URL** and do not count as credentials.
 
-A nonempty key input has an eye button. Select **Show secret** to check the loaded or newly entered key, and **Hide secret** to mask it again. Changing the input masks it again. Saving an unchanged key preserves its exact stored value. Clearing it and saving removes the saved key. Cancelling preserves the saved key.
+A nonempty key input has an eye button. Select **Show secret** to check what you typed, and **Hide secret** to mask it again. Changing the input masks it again. Stored credentials remain write-only.
 
 ## Add a custom model API
 
diff --git a/docs/user/guide/providers.zh.md b/docs/user/guide/providers.zh.md
index ddb44f1814..bb518c42b9 100644
--- a/docs/user/guide/providers.zh.md
+++ b/docs/user/guide/providers.zh.md
@@ -10,7 +10,7 @@
 
 ![模型页：DeepSeek 卡片，及其下方的添加模型提供商入口](providers-models-page.zh.png)
 
-打开提供商编辑器时，已保存密钥会载入遮罩输入框。环境变量的值不会载入此输入框。密钥存储在 `$DSH_HOME/.credentials.yaml` 中，settings 只保留它的凭据引用。凭据元数据仍保持脱敏。
+密钥是只写的。保存后，页面只会收到脱敏描述符，永远不会收到明文密钥。密钥存储在 `$DSH_HOME/.credentials.yaml` 中，settings 只保留它的凭据引用。
 
 保存了密钥且使用默认端点时，DeepSeek 的模型跟随 DeepSeek API 发布的列表。第一次需要模型时加载列表，使用期间约每十分钟在后台刷新一次，无法加载时退回内置模型。在**自定义设置**里编辑**模型目录**会改用你自己的列表，不再跟随发布的列表；点**恢复默认模型**会重新跟随并重新加载。使用发布的列表时，卡片上显示的是内置模型，因此新发布的模型只出现在模型选择器中。列表、兜底和门控规则见 [API key 提供方参考](../../../packages/llm/llm-deepseek-api-key/README.zh.md)。
 
@@ -18,11 +18,11 @@
 
 选择**添加模型提供商**。卡片默认打开在**第三方模型提供商**：选取 dsh 自带的提供商——列表显示的是提供商 id，例如 `anthropic`、`openai`、Kimi 对应的 `moonshotai`、GLM 对应的 `zai`——输入其 API 密钥并保存。已安装目录会提供端点、协议和模型列表。
 
-认证 **?** 说明已保存凭据的优先级和环境后备。没有已保存密钥时，输入留空会尝试读取列出的环境变量。绿色提示标明已检测到环境变量。黄色提示表示未检测到凭据变量；请输入 API 密钥或配置列出的变量。状态未确认表示读取失败，或已保存密钥仍覆盖环境读取。清空已保存密钥后，提示会保持未确认，直到保存删除操作并刷新环境检测。检测不验证凭据，也不测试连接。AWS profile 和 Google 应用默认凭据等提供商管理的凭据文件不在检查范围内。没有原生密钥认证的提供商（例如 `openai-codex`）不显示密钥字段，除非 profile 显式指定了凭据引用。
+认证 **?** 说明已保存凭据的优先级和环境后备。密钥留空时，使用已保存凭据，或尝试读取列出的环境变量。绿色提示标明已检测到环境变量。黄色提示表示未检测到凭据变量；请输入 API 密钥或配置列出的变量。状态未确认表示读取失败。检测不验证凭据，也不测试连接。AWS profile 和 Google 应用默认凭据等提供商管理的凭据文件不在检查范围内。没有原生密钥认证的提供商（例如 `openai-codex`）不显示密钥字段，除非 profile 显式指定了凭据引用。
 
-已保存密钥以遮罩显示，输入框下方不显示状态文字。输入留空时，显示**留空使用环境认证**占位文字和一条检测提示。输入非空时，不显示认证状态文字。地址配置变量显示在**基础 URL**下方，不计作凭据。
+已保存凭据使用**留空使用已保存凭据**占位文字，输入框下方不显示状态文字。环境后备使用**留空使用环境认证**占位文字，输入留空时显示一条检测提示。输入非空时，不显示认证状态文字。地址配置变量显示在**基础 URL**下方，不计作凭据。
 
-密钥输入非空时，输入框内显示眼睛按钮。选择**显示密钥**检查已载入或新输入的密钥，选择**隐藏密钥**重新遮住输入。修改输入后会重新遮住密钥。保存未修改的密钥会保留原值。清空并保存会删除已保存密钥。取消编辑会保留已保存密钥。
+密钥输入非空时，输入框内显示眼睛按钮。选择**显示密钥**检查当前输入，选择**隐藏密钥**重新遮住输入。修改输入后会重新遮住密钥。已保存凭据仍保持只写。
 
 ## 添加自定义模型 API
 
diff --git a/packages/api/settings-controller/README.i18n.yaml b/packages/api/settings-controller/README.i18n.yaml
index 979d0867fb..4b3f0d24d3 100644
--- a/packages/api/settings-controller/README.i18n.yaml
+++ b/packages/api/settings-controller/README.i18n.yaml
@@ -9,14 +9,14 @@
   en: 7fecb4d8800e8f97
   zh: 3e2c3fdb29b73cd0
 /settings-controller/summary:
-  en: 94a995854f855609
-  zh: 7165eecdd85a5632
+  en: e5068267079e62d0
+  zh: 9e2d663a6ca02c58
 /settings-controller/table-of-contents:
   en: 3a654e12f423946b
   zh: 4e3a19aaee58f8a7
 /settings-controller/use-this-package:
-  en: d6fbd0324044be6b
-  zh: 5e86d8c95e51b421
+  en: cf2f4de5bee8be55
+  zh: b2630dcba4be5ae8
 /settings-controller/configuration:
   en: e0297f144b649af7
   zh: e70ed56edffd97f0
diff --git a/packages/api/settings-controller/README.md b/packages/api/settings-controller/README.md
index 17357971ed..b38072546d 100644
--- a/packages/api/settings-controller/README.md
+++ b/packages/api/settings-controller/README.md
@@ -8,7 +8,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-`@deepseek-ai/dsh-api-settings-controller` exposes generated `ctx.remote.settings` and `ctx.remote.credentials` namespaces for browser configuration surfaces. It returns redacted settings and credential metadata and supports settings and credential writes. It reads stored keys for owner-opened editors. It also opens provider-owned settings or Agent preset locations on the Host desktop. When a provider is absent, the namespace remains registered and returns an actionable configuration error.
+`@deepseek-ai/dsh-api-settings-controller` exposes generated `ctx.remote.settings` and `ctx.remote.credentials` namespaces for browser configuration surfaces. It returns redacted settings and credential metadata, supports settings and credential writes without returning secret values, and opens provider-owned settings or Agent preset locations on the Host desktop. When a provider is absent, the namespace remains registered and returns an actionable configuration error.
 
 ## Table of Contents
 
@@ -25,7 +25,7 @@ English | [中文](README.zh.md)
 
 Mount this package as a Loader entry in a profile that serves browser configuration. The entry registers both namespaces independently of their providers so a missing provider produces a named configuration error at invocation. Its generated descriptors enter the strict Typert registry, while the settings and credential Definitions remain plain Cordis Services with no wire obligations of their own.
 
-`describe(refs)` answers one map keyed by the requested names, so a settings page describing every reference its rows carry settles those rows together. It accepts at most 64 names per call, reports an invalid name or empty write value as `bad-request`, and copies each answer field by field — a provider returning more than `CredentialInfo` declares cannot widen what crosses. Valid `set(ref, value)` and `unset(ref)` calls report a provider refusal as `credential-rejected`, carrying the provider's message with only the reference in its details. `readStored(ref)` returns a provider-managed key only for the owner or trusted in-process code; it returns no environment fallback. A non-owner read returns `credential/rejected` before consulting the provider. Metadata reads remain secret-free.
+`describe(refs)` answers one map keyed by the requested names, so a settings page describing every reference its rows carry settles those rows together. It accepts at most 64 names per call, reports an invalid name or empty write value as `bad-request`, and copies each answer field by field — a provider returning more than `CredentialInfo` declares cannot widen what crosses. Valid `set(ref, value)` and `unset(ref)` calls report a provider refusal as `credential-rejected`, carrying the provider's message with only the reference in its details. Secret values cross in this direction only: no method here returns one.
 
 `settings.describe()` returns deployment facts and every namespace under `redactSecrets: true`. `settings.update`, `settings.replace`, and `settings.mutate` expose the settings service's three write operations and return the namespace's new redacted view; stale writes use `settings-conflict` and other provider refusals use `settings-rejected`.
 
diff --git a/packages/api/settings-controller/README.zh.md b/packages/api/settings-controller/README.zh.md
index 2c4f4a2b29..3c9e876740 100644
--- a/packages/api/settings-controller/README.zh.md
+++ b/packages/api/settings-controller/README.zh.md
@@ -8,7 +8,7 @@ kind: "package-reference"
 
 ## 概述
 
-`@deepseek-ai/dsh-api-settings-controller` 为浏览器配置界面提供生成的 `ctx.remote.settings` 与 `ctx.remote.credentials` namespace。它返回脱敏的 settings 与凭据元数据，支持 settings 与凭据写入。它为所有者打开的编辑器读取已保存密钥。它还在 Host 桌面打开由提供方持有的 settings 或 Agent preset 位置。提供方缺失时，namespace 仍会注册，并返回可操作的配置错误。
+`@deepseek-ai/dsh-api-settings-controller` 为浏览器配置界面提供生成的 `ctx.remote.settings` 与 `ctx.remote.credentials` namespace。它返回脱敏的 settings 与凭据元数据，支持 settings 与凭据写入而不返回机密值，并在 Host 桌面打开由提供方持有的 settings 或 Agent preset 位置。提供方缺失时，namespace 仍会注册，并返回可操作的配置错误。
 
 ## 目录
 
@@ -25,7 +25,7 @@ kind: "package-reference"
 
 请把本包作为 Loader entry 挂载到提供浏览器配置的 profile 中。本 entry 不依赖提供方是否存在而注册两个 namespace，因此缺少提供方会在调用时产生具名配置错误。它生成的 descriptor 进入严格 Typert 注册表，而 settings 与凭据 Definition 仍是普通 Cordis 服务，自身不承担任何 wire 义务。
 
-`describe(refs)` 以请求的名字为键返回一份 map，因此设置页描述其各行携带的全部引用时，这些行会一起落定。单次调用最多接受 64 个名字，无效名字或空写入值报告为 `bad-request`，并逐字段复制每个答案——提供方返回超出 `CredentialInfo` 声明的内容也无法扩大跨越 wire 的字段。有效的 `set(ref, value)` 与 `unset(ref)` 调用把提供方拒绝报告为 `credential-rejected`，携带提供方的消息，details 中只有该引用。`readStored(ref)` 仅向所有者或可信进程内代码返回提供方管理的密钥，不返回环境后备值。非所有者读取会在访问提供方之前返回 `credential/rejected`。元数据读取仍不包含机密。
+`describe(refs)` 以请求的名字为键返回一份 map，因此设置页描述其各行携带的全部引用时，这些行会一起落定。单次调用最多接受 64 个名字，无效名字或空写入值报告为 `bad-request`，并逐字段复制每个答案——提供方返回超出 `CredentialInfo` 声明的内容也无法扩大跨越 wire 的字段。有效的 `set(ref, value)` 与 `unset(ref)` 调用把提供方拒绝报告为 `credential-rejected`，携带提供方的消息，details 中只有该引用。机密值只在这个方向跨越 wire：这里没有任何方法会返回它。
 
 `settings.describe()` 返回部署信息，以及在 `redactSecrets: true` 下读取的所有 namespace。`settings.update`、`settings.replace` 与 `settings.mutate` 暴露 settings 服务的三种写入操作，并返回该 namespace 的新脱敏视图；陈旧写入使用 `settings-conflict`，其他提供方拒绝使用 `settings-rejected`。
 
diff --git a/packages/api/settings-controller/src/credentials.ts b/packages/api/settings-controller/src/credentials.ts
index f9172f8f9e..3889669048 100644
--- a/packages/api/settings-controller/src/credentials.ts
+++ b/packages/api/settings-controller/src/credentials.ts
@@ -9,7 +9,7 @@ import { Context } from '@deepseek-ai/cordis'
 import { credentialRef } from '@deepseek-ai/dsh-credentials'
 import type { CredentialProvider } from '@deepseek-ai/dsh-credentials'
 import type { CredentialInfo } from '@deepseek-ai/dsh-credentials/types'
-import { principalOf, Remote, RemoteError, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol'
+import { Remote, RemoteError, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol'
 import { z } from 'zod'
 
 /**
@@ -61,8 +61,8 @@ declare module '@deepseek-ai/cordis' {
  * Host service backing the generated `ctx.remote.credentials` namespace. It
  * carries every wire obligation the credential seam itself does not: the batch
  * fan-out bound, the field-by-field view projection, the reference-grammar
- * guard, and the refusal mapping. Metadata reads exclude secrets; readStored
- * returns only a provider-managed value for an explicitly opened editor.
+ * guard, and the refusal mapping. Secret values cross in one direction only —
+ * no method here returns one.
  */
 export class CredentialsController extends TypertRemoteService {
   /** @param ctx - Host context where a credential provider may be mounted. */
@@ -90,22 +90,8 @@ export class CredentialsController extends TypertRemoteService {
   }
 
   /**
-   * Read one stored value for a credential editor, excluding environment fallbacks.
-   * @param ref - reference name to read.
-   * @returns the stored secret, or undefined when the provider stores none.
-   * @throws RemoteError for a non-owner Remote caller, an invalid reference, or an absent provider.
-   */
-  @Remote
-  async readStored(ref: string): Promise<string | undefined> {
-    const request = parseRequest('credentials.readStored', unsetRequestSchema, { ref })
-    if (principalOf(this.ctx.invocation) !== undefined) {
-      throw new RemoteError('credential/rejected', 'Only the owner can read stored credentials.', { ref: request.ref })
-    }
-    return this.provider().readStored(credentialRef(request.ref))
-  }
-
-  /**
-   * Store one value from a configuration surface.
+   * Store one value from a configuration surface. The value crosses the wire in
+   * this direction only: no read path returns it.
    * @param ref - reference name to store under.
    * @param value - the non-empty secret value.
    * @throws RemoteError when the request is invalid, no provider is mounted, or the provider refuses the write.
diff --git a/packages/api/settings-controller/src/types.ts b/packages/api/settings-controller/src/types.ts
index d1dadc1e16..3d11c6ab0c 100644
--- a/packages/api/settings-controller/src/types.ts
+++ b/packages/api/settings-controller/src/types.ts
@@ -20,9 +20,9 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
      */
     'settings/conflict': { readonly ns: string; readonly expected: number; readonly actual: number }
     /**
-     * A non-owner requested a stored secret, or the provider refused a valid
-     * credential write, for example because the stored document no longer
-     * parses. The details name only the reference, never the value.
+     * The provider refused a valid credential write, for example because the
+     * stored document no longer parses. The details name only the reference,
+     * never the value.
      */
     'credential/rejected': { readonly ref: string }
   }
diff --git a/packages/api/settings-controller/tests/credentials-controller.host.spec.ts b/packages/api/settings-controller/tests/credentials-controller.host.spec.ts
index 552baa7b5d..5eeb190385 100644
--- a/packages/api/settings-controller/tests/credentials-controller.host.spec.ts
+++ b/packages/api/settings-controller/tests/credentials-controller.host.spec.ts
@@ -2,17 +2,9 @@ import { describe, expect, it } from 'vitest'
 import { Context } from '@deepseek-ai/cordis'
 import type { CredentialInfo } from '@deepseek-ai/dsh-credentials/types'
 import { remoteErrorOf, remoteMethods } from '@deepseek-ai/dsh-typert-protocol'
-import type { PeerId, RemoteInvocation } from '@deepseek-ai/dsh-typert-protocol'
 import CredentialsController from '../src/credentials.ts'
 import { MemoryCredentials } from '../../../credentials/credentials/tests/memory.ts'
 
-declare module '@deepseek-ai/dsh-typert-protocol' {
-  interface PrincipalMap {
-    /** Non-owner used to verify stored-key read denial. */
-    'credential-viewer': { readonly kind: 'credential-viewer' }
-  }
-}
-
 /** A store whose `describe` carries more than the view declares, as a foreign provider might. */
 class LeakyCredentials extends MemoryCredentials {
   override describe(): Promise<CredentialInfo> {
@@ -54,7 +46,6 @@ describe('the credentials Remote namespace a configuration surface calls', () =>
     expect(binding.namespace).toBe('credentials')
     expect(remoteMethods(controller)).toEqual([
       { method: 'describe', invocation: { kind: 'direct' } },
-      { method: 'readStored', invocation: { kind: 'direct' } },
       { method: 'set', invocation: { kind: 'direct' } },
       { method: 'unset', invocation: { kind: 'direct' } },
     ])
@@ -65,7 +56,6 @@ describe('the credentials Remote namespace a configuration surface calls', () =>
     await ctx.plugin(CredentialsController)
     for (const call of [
       () => ctx.credentialsController.describe(['DEEPSEEK_API_KEY']),
-      () => ctx.credentialsController.readStored('DEEPSEEK_API_KEY'),
       () => ctx.credentialsController.set('DEEPSEEK_API_KEY', 'sk-live'),
       () => ctx.credentialsController.unset('DEEPSEEK_API_KEY'),
     ]) {
@@ -92,7 +82,6 @@ describe('the credentials Remote namespace a configuration surface calls', () =>
     const controller = await boot()
     for (const call of [
       () => controller.describe(['DEEPSEEK_API_KEY', 'not a var']),
-      () => controller.readStored('not a var'),
       () => controller.set('not a var', 'sk-live'),
       () => controller.unset('not a var'),
     ]) {
@@ -126,35 +115,6 @@ describe('the credentials Remote namespace a configuration surface calls', () =>
       .toEqual({ DEEPSEEK_API_KEY: { configured: false, writable: true } })
   })
 
-  it('reads stored secrets only through the explicit editor read', async () => {
-    const controller = await boot({ DEEPSEEK_API_KEY: 'fixture-saved-key' })
-    expect(await controller.readStored('DEEPSEEK_API_KEY')).toBe('fixture-saved-key')
-    expect(await controller.readStored('OPENAI_API_KEY')).toBeUndefined()
-    expect(JSON.stringify(await controller.describe(['DEEPSEEK_API_KEY']))).not.toContain('fixture-saved-key')
-    await controller.unset('DEEPSEEK_API_KEY')
-    expect(await controller.readStored('DEEPSEEK_API_KEY')).toBeUndefined()
-  })
-
-  it('denies non-owner stored-key reads before consulting the provider', async () => {
-    const ctx = new Context()
-    await ctx.plugin(MemoryCredentials, { DEEPSEEK_API_KEY: 'fixture-saved-key' })
-    await ctx.plugin(CredentialsController)
-    const signal = new AbortController().signal
-    const invocation: RemoteInvocation = {
-      request: { namespace: 'credentials', method: 'readStored', args: { ref: 'DEEPSEEK_API_KEY' } },
-      service: 'credentialsController', signal,
-      peer: {
-        id: 'credential-viewer' as PeerId, ctx, signal, principal: { kind: 'credential-viewer' },
-        interactions: 'none', dispose: () => Promise.resolve(),
-      },
-      uplink: async function* <In>(): AsyncGenerator<In> {},
-    }
-    const caller = ctx.extend({ invocation })
-    const failure = await caller.credentialsController.readStored('DEEPSEEK_API_KEY').catch((error: unknown) => error)
-    expect(remoteErrorOf(failure)).toMatchObject({ code: 'credential/rejected', details: { ref: 'DEEPSEEK_API_KEY' } })
-    expect(JSON.stringify(remoteErrorOf(failure))).not.toContain('fixture-saved-key')
-  })
-
   it('reports a refused write as credential/rejected naming only the reference', async () => {
     const controller = await boot({}, RejectingCredentials)
     const failure = await controller.set('DEEPSEEK_API_KEY', 'sk-live').catch((error: unknown) => error)
diff --git a/packages/client/ui-settings-models/README.i18n.yaml b/packages/client/ui-settings-models/README.i18n.yaml
index 3c28ce7528..02b3bd6729 100644
--- a/packages/client/ui-settings-models/README.i18n.yaml
+++ b/packages/client/ui-settings-models/README.i18n.yaml
@@ -9,8 +9,8 @@
   en: 0db6fa836e1ff511
   zh: 0e2968763e1fb7a5
 /deepseek-ai-dsh-client-ui-settings-models/summary:
-  en: 2d39061747367414
-  zh: 35edfca13c457deb
+  en: 51252c1e9fa6da0a
+  zh: 227b54d7898417fa
 /deepseek-ai-dsh-client-ui-settings-models/table-of-contents:
   en: d152484eb41ac6b4
   zh: 09388d293f9be9cb
@@ -18,11 +18,11 @@
   en: db5aaf7f702e1f0c
   zh: 409a78c14fb2b6e3
 /deepseek-ai-dsh-client-ui-settings-models/use-this-package/api-keys:
-  en: d771da09da774692
-  zh: 9566b3c0e95da8a6
+  en: f4817eb2e3537ed9
+  zh: e589c193fa85473f
 /deepseek-ai-dsh-client-ui-settings-models/use-this-package/editing-a-provider:
-  en: 23c8e60086660111
-  zh: f277b69a202f207c
+  en: ce52da7e6065ccc4
+  zh: c63690cb5de5ea85
 /deepseek-ai-dsh-client-ui-settings-models/use-this-package/adding-and-deleting-providers:
   en: c0b04b2b11af60d3
   zh: d195eec281e445cb
diff --git a/packages/client/ui-settings-models/README.md b/packages/client/ui-settings-models/README.md
index 3e579642fe..8db24c5170 100644
--- a/packages/client/ui-settings-models/README.md
+++ b/packages/client/ui-settings-models/README.md
@@ -11,7 +11,7 @@ Desktop product events use the optional [product analytics service](../product-a
 
 ## Summary
 
-`dsh-client-ui-settings-models` is the Models settings page of the dsh web client: users configure API keys (stored under the profile's credential reference), edit each provider's model list, and hand-declare custom pi-ai routes, with provider rows and one editor card at a time. The page joins the provider directory, the settings document, and the credential descriptions into one shared snapshot, so a row's state stays consistent across all three. It also walks first-run users through two ordered dialogs — a versioned preview notice and the conditional official-DeepSeek credential step.
+`dsh-client-ui-settings-models` is the Models settings page of the dsh web client: users configure API keys (stored write-only under the profile's credential reference), edit each provider's model list, and hand-declare custom pi-ai routes, with provider rows and one editor card at a time. The page joins the provider directory, the settings document, and the credential descriptions into one shared snapshot, so a row's state stays consistent across all three. It also walks first-run users through two ordered dialogs — a versioned preview notice and the conditional official-DeepSeek credential step.
 
 ## Table of Contents
 
@@ -41,15 +41,15 @@ Host configuration `credentialOnboarding` defaults to `true`. The Electron prelo
 
 ### API keys
 
-The API key input shows a saved key masked and uses `autocomplete="new-password"` to avoid filling login passwords. Its eye button reveals the current value; editing or clearing the value masks it again. Environment values are never loaded into the input.
+API-key inputs start empty and use `autocomplete="new-password"` to ask browsers not to autofill saved login passwords. A nonempty draft has the same eye control as masked conversation text: **Show secret** reveals the current input and **Hide secret** masks it. Changing or clearing the input masks it again. Stored credentials are never read into the input.
 
-The primary field on an editor card is a single **API key** input — the page never asks for an environment-variable name. A typed key stores through `credentials.set` under the profile's reference, deriving `<ROUTE>_API_KEY` when the profile has none, and the pi-ai profile records that derivation as `apiKeyEnv`, so `cordis.patch.yml` never carries a key value. Leaving a new pi-ai provider's key blank saves a reference-free profile and preserves provider-native authentication (for example the Bedrock credential chain or Vertex ADC). The field's placeholder and help tooltip use the profile's `apiKeyEnv` when it has one; otherwise they use the credential variables of the route's `nativeAuth`, excluding `baseURLEnv` address variables, in lookup order, as the configurable-provider directory reports them. These display hints omit references containing `oauth` (case-insensitively), and describe saved credentials followed by the displayed environment fallbacks. This presentation filter does not change the [credential resolution order](../../../docs/subsystems/credentials.md#resolution), the adapter's complete environment list, or an explicit reference. A filtered explicit reference still has a usable key input with the plain placeholder and no tooltip. A native route that has no key authentication omits the key field and authentication help entirely; an explicit reference still enables the field. A profile without a reference on a route without `nativeAuth`, such as a hand-declared route, shows the plain key placeholder and no tooltip. A row labels API-key state with a green solid dot only when a referenced credential is confirmed configured, and with a red solid dot only when a named reference is confirmed missing. A successful Apply emits a local accessible status message without echoing secret material.
+The primary field on an editor card is a single **API key** input — the page never asks for an environment-variable name. A typed key stores write-only through `credentials.set` under the profile's reference, deriving `<ROUTE>_API_KEY` when the profile has none, and the pi-ai profile records that derivation as `apiKeyEnv`, so `cordis.patch.yml` never carries a key value. Leaving a new pi-ai provider's key blank saves a reference-free profile and preserves provider-native authentication (for example the Bedrock credential chain or Vertex ADC). The field's placeholder and help tooltip use the profile's `apiKeyEnv` when it has one; otherwise they use the credential variables of the route's `nativeAuth`, excluding `baseURLEnv` address variables, in lookup order, as the configurable-provider directory reports them. These display hints omit references containing `oauth` (case-insensitively), and describe saved credentials followed by the displayed environment fallbacks. This presentation filter does not change the [credential resolution order](../../../docs/subsystems/credentials.md#resolution), the adapter's complete environment list, or an explicit reference. A filtered explicit reference still has a usable key input with the plain placeholder and no tooltip. A native route that has no key authentication omits the key field and authentication help entirely; an explicit reference still enables the field. A profile without a reference on a route without `nativeAuth`, such as a hand-declared route, shows the plain key placeholder and no tooltip. A row labels API-key state with a green solid dot only when a referenced credential is confirmed configured, and with a red solid dot only when a named reference is confirmed missing. A successful Apply emits a local accessible status message without echoing secret material.
 
-Opening an existing provider editor reads its stored key through the owner-only `credentials.readStored` operation and shows it as a password input. The reveal button shows the loaded value. The key stays in that editor's local state; provider-directory and settings snapshots contain only redacted metadata. A failed read shows an error instead of an empty editor. Cancel discards edits, and Apply preserves an unchanged key, replaces an edited key, or removes a cleared key so environment authentication can apply.
+The editor uses redacted `CredentialInfo` to choose the saved-credential placeholder or environment detection, without displaying a credential-source label. Refreshing the snapshot updates an open editor without a separate probe. The hint never receives a credential value or changes field writability.
 
 ### Editing a provider
 
-An empty key field offers environment authentication; a saved key appears as a masked value. Redacted `credentials.describe` checks distinguish a detected environment reference, no detected variables, and an unconfirmed read. A missing-variable hint uses the warning color and names the first variable to configure. A detected environment reference uses green. Address configuration variables do not count as credentials. Hidden authentication references still participate in detection; a generic detected hint keeps their names hidden. Detection does not validate credentials, test a connection, or inspect provider-managed files such as AWS profiles and Google application-default credentials. A nonempty input shows no authentication status text. The page describes native variable names and named references in batches of at most 64. Editor reads return only provider-managed values, never environment values.
+A blank key field offers a saved credential when one is detected, with no status text below the input; otherwise it offers environment authentication. Redacted `credentials.describe` checks distinguish a detected environment reference, no detected variables, and an unconfirmed read. A missing-variable hint uses the warning color and names the first variable to configure. A detected environment reference uses green. Address configuration variables do not count as credentials. Hidden authentication references still participate in detection; a generic detected hint keeps their names hidden. Detection does not validate credentials, test a connection, or inspect provider-managed files such as AWS profiles and Google application-default credentials. A nonempty input shows no authentication status text. The page reads native variable names as well as named references, in batches of at most 64, and never reads their values into the Client.
 
 An endpoint without a fixed catalog default shows the provider's `baseURLEnv` configuration names below the input. A profile endpoint remains the first placeholder choice.
 
diff --git a/packages/client/ui-settings-models/README.zh.md b/packages/client/ui-settings-models/README.zh.md
index f96f6d9d2b..23763f168c 100644
--- a/packages/client/ui-settings-models/README.zh.md
+++ b/packages/client/ui-settings-models/README.zh.md
@@ -11,7 +11,7 @@ kind: "package-reference"
 
 ## 概述
 
-`dsh-client-ui-settings-models` 是 dsh Web 客户端的 Models 设置页面：用户可以配置 API 密钥（存入 profile 的凭据引用之下）、编辑每个提供商的模型列表，并手工声明自定义 pi-ai 路由；页面以提供商行展示，一次只展开一张编辑卡片。该页面把提供商目录、设置文档与凭据描述合并为一个共享快照，因此行的状态在三个方面始终一致。它还会带首次运行的用户走两个有序弹窗——版本化预览版说明，以及按条件显示的官方 DeepSeek 凭据步骤。
+`dsh-client-ui-settings-models` 是 dsh Web 客户端的 Models 设置页面：用户可以配置 API 密钥（以只写方式存入 profile 的凭据引用之下）、编辑每个提供商的模型列表，并手工声明自定义 pi-ai 路由；页面以提供商行展示，一次只展开一张编辑卡片。该页面把提供商目录、设置文档与凭据描述合并为一个共享快照，因此行的状态在三个方面始终一致。它还会带首次运行的用户走两个有序弹窗——版本化预览版说明，以及按条件显示的官方 DeepSeek 凭据步骤。
 
 ## 目录
 
@@ -41,15 +41,15 @@ Host 配置 `credentialOnboarding` 默认为 `true`。Electron preload 标记会
 
 ### API 密钥
 
-API 密钥输入框以掩码显示已保存的密钥，并通过 `autocomplete="new-password"` 避免填入登录密码。眼睛按钮显示当前值；修改或清空输入后重新遮住密钥。环境变量值从不加载到输入框。
+API 密钥输入框初始为空，并通过 `autocomplete="new-password"` 请求浏览器不要自动填入已保存的登录密码。输入非空时，显示与会话密钥遮罩一致的眼睛按钮：**显示密钥**展示当前输入，**隐藏密钥**重新遮住输入。修改或清空输入后会重新遮住密钥。已保存凭据从不读入输入框。
 
-编辑卡片上的主字段是单独一个 **API 密钥**输入框——页面从不询问环境变量名。键入的密钥经 `credentials.set` 存入 profile 的引用之下，profile 没有引用时便派生 `<ROUTE>_API_KEY`，pi-ai profile 会把这次派生记录为 `apiKeyEnv`，因此 `cordis.patch.yml` 从不携带密钥值。为新的 pi-ai 提供商留空密钥会保存一个不带引用的 profile，从而保留提供商原生认证（例如 Bedrock 凭据链或 Vertex ADC）。profile 有 `apiKeyEnv` 时，字段的占位文字与帮助提示采用该引用；否则按查找顺序采用可配置提供商目录为该路由报告的 `nativeAuth` 凭据变量，并排除 `baseURLEnv` 地址变量。这些显示提示会忽略包含 `oauth` 的引用（不区分大小写），并说明优先使用已保存凭据，其后为显示的环境后备。这项显示过滤不改变[凭据解析顺序](../../../docs/subsystems/credentials.zh.md#resolution)、适配器的完整环境变量列表或显式引用。被过滤的显式引用仍有可用的密钥输入框，使用普通占位文字且不显示帮助提示。没有密钥认证的原生路由不显示密钥字段及认证帮助；显式引用仍会启用该字段。路由没有 `nativeAuth`（例如手动声明的路由）且 profile 没有引用时，显示普通的密钥占位文字，且不显示帮助提示。只有确认引用的凭据已配置时，行才会以绿色实心点标示 API 密钥状态；只有确认具名引用缺失时，才会以红色实心点标示。「应用」成功后会发出本地无障碍状态消息，且绝不回显任何机密内容。
+编辑卡片上的主字段是单独一个 **API 密钥**输入框——页面从不询问环境变量名。键入的密钥经 `credentials.set` 以**只写**方式存入 profile 的引用之下，profile 没有引用时便派生 `<ROUTE>_API_KEY`，pi-ai profile 会把这次派生记录为 `apiKeyEnv`，因此 `cordis.patch.yml` 从不携带密钥值。为新的 pi-ai 提供商留空密钥会保存一个不带引用的 profile，从而保留提供商原生认证（例如 Bedrock 凭据链或 Vertex ADC）。profile 有 `apiKeyEnv` 时，字段的占位文字与帮助提示采用该引用；否则按查找顺序采用可配置提供商目录为该路由报告的 `nativeAuth` 凭据变量，并排除 `baseURLEnv` 地址变量。这些显示提示会忽略包含 `oauth` 的引用（不区分大小写），并说明优先使用已保存凭据，其后为显示的环境后备。这项显示过滤不改变[凭据解析顺序](../../../docs/subsystems/credentials.zh.md#resolution)、适配器的完整环境变量列表或显式引用。被过滤的显式引用仍有可用的密钥输入框，使用普通占位文字且不显示帮助提示。没有密钥认证的原生路由不显示密钥字段及认证帮助；显式引用仍会启用该字段。路由没有 `nativeAuth`（例如手动声明的路由）且 profile 没有引用时，显示普通的密钥占位文字，且不显示帮助提示。只有确认引用的凭据已配置时，行才会以绿色实心点标示 API 密钥状态；只有确认具名引用缺失时，才会以红色实心点标示。「应用」成功后会发出本地无障碍状态消息，且绝不回显任何机密内容。
 
-打开已有提供商的编辑器时，通过仅允许所有者调用的 `credentials.readStored` 操作读取已保存密钥，并以密码输入框显示。显示按钮可以展示已加载的值。密钥只保存在该编辑器的本地状态中；提供商目录与设置快照只包含脱敏元数据。读取失败时显示错误，不打开空白编辑器。「取消」丢弃编辑；「保存」保留未修改的密钥、替换已编辑的密钥，或删除已清空的密钥，从而允许使用环境认证。
+编辑器使用脱敏 `CredentialInfo` 选择已保存凭据的占位文字或环境检测，不显示凭据来源标签。快照刷新会更新打开的编辑器，无需单独探测。提示从不接收凭据值，也不改变字段的可写性。
 
 ### 编辑提供商
 
-空密钥字段提示使用环境认证；已保存的密钥显示为掩码值。脱敏的 `credentials.describe` 检查区分已检测到环境引用、未检测到变量和读取状态未确认。缺少变量时使用黄色提示，并列出应配置的首个变量名。已检测到环境引用时使用绿色。地址配置变量不计作凭据。隐藏的认证引用仍参与检测；使用不含变量名的通用检测提示。检测不验证凭据、不测试连接，也不检查 AWS profile 或 Google 应用默认凭据等提供商管理的文件。输入非空时，不显示认证状态文字。页面按每批最多 64 项描述原生变量名和具名引用。编辑器读取只返回提供方管理的值，不返回环境变量值。
+密钥字段留空时，已检测到已保存凭据则提示使用该凭据，输入框下方不显示状态文字；否则提示使用环境认证。脱敏的 `credentials.describe` 检查区分已检测到环境引用、未检测到变量和读取状态未确认。缺少变量时使用黄色提示，并列出应配置的首个变量名。已检测到环境引用时使用绿色。地址配置变量不计作凭据。隐藏的认证引用仍参与检测；使用不含变量名的通用检测提示。检测不验证凭据、不测试连接，也不检查 AWS profile 或 Google 应用默认凭据等提供商管理的文件。输入非空时，不显示认证状态文字。页面读取原生变量名和具名引用，每批最多 64 项，不将变量值读入 Client。
 
 目录未提供固定默认端点时，输入框下方显示提供方的 `baseURLEnv` 配置变量名。Profile 中的端点仍是占位符的首选。
 
diff --git a/packages/client/ui-settings-models/src/client/ApiKeyInput.tsx b/packages/client/ui-settings-models/src/client/ApiKeyInput.tsx
index 3727000fc1..e983a40303 100644
--- a/packages/client/ui-settings-models/src/client/ApiKeyInput.tsx
+++ b/packages/client/ui-settings-models/src/client/ApiKeyInput.tsx
@@ -1,4 +1,4 @@
-/** Credential input with the same reveal behavior as masked conversation text. */
+/** Write-only credential input with the same reveal behavior as masked conversation text. */
 import { useState } from 'react'
 import type { InputHTMLAttributes, ReactNode } from 'react'
 import type { en } from './locales.ts'
@@ -10,7 +10,7 @@ const EYE_OFF_PATH = `${EYE_CONTOUR}M2.5 2.5L13.5 13.5`
 
 /** Input attributes and section copy for the current credential draft. */
 interface ApiKeyInputProps extends Omit<InputHTMLAttributes<HTMLInputElement>, 'value' | 'type' | 'className' | 'autoComplete'> {
-  /** Stored credential or the user's current edit; initially masked. */
+  /** Unsaved input; stored credentials are never read into this field. */
   readonly value: string
   /** Section copy, including the same reveal labels as SecretText. */
   readonly t: (key: keyof typeof en) => string
diff --git a/packages/client/ui-settings-models/src/client/ModelListEditor.tsx b/packages/client/ui-settings-models/src/client/ModelListEditor.tsx
index 37a2ae989f..05c2b3e1ab 100644
--- a/packages/client/ui-settings-models/src/client/ModelListEditor.tsx
+++ b/packages/client/ui-settings-models/src/client/ModelListEditor.tsx
@@ -63,7 +63,7 @@ export interface ProbeTarget {
   baseURL?: string
   /** Wire protocol the form names, when it names one. */
   api?: string
-  /** Loaded or newly entered key currently shown in the form, when there is one. */
+  /** Key typed into the form and not yet stored, when there is one. */
   apiKey?: string
 }
 
diff --git a/packages/client/ui-settings-models/src/client/ModelsSection.tsx b/packages/client/ui-settings-models/src/client/ModelsSection.tsx
index adff556795..461ab37aad 100644
--- a/packages/client/ui-settings-models/src/client/ModelsSection.tsx
+++ b/packages/client/ui-settings-models/src/client/ModelsSection.tsx
@@ -86,8 +86,6 @@ export interface ProviderIdentity {
 
 /** One existing row or dormant directory entry addressed by an editor action. */
 interface EditorTarget extends ProviderIdentity {
-  /** Stored secret retained only while this editor is open. */
-  initialCredential?: string
   settingsNs: string
   settingsPath: readonly string[]
   /** Writable credential identified under this page's conventional reference. */
@@ -125,18 +123,16 @@ interface ProviderEditorRenderProps extends Pick<
 
 /** Render an editor for either the setup posture or an expanded provider row. */
 function renderProviderEditor({ target, row, ...props }: ProviderEditorRenderProps): ReactNode {
-  const credential = row.apiKeyEnv === undefined ? row.derivedCredential : row.credential
   return (
     <ProviderEditor
       provider={target.provider}
       displayName={target.displayName}
       settingsPath={target.settingsPath}
-      {...target.initialCredential === undefined ? {} : { initialCredential: target.initialCredential }}
       {...target.declared === true ? { declared: true } : {}}
       {...target.defaultBaseURL === undefined ? {} : { defaultBaseURL: target.defaultBaseURL }}
       {...target.baseURLEnv === undefined ? {} : { baseURLEnv: target.baseURLEnv }}
       {...target.nativeAuth === undefined ? {} : { nativeAuth: target.nativeAuth }}
-      {...credential === undefined ? {} : { credential }}
+      {...row.credential === undefined ? {} : { credential: row.credential }}
       {...row.credentialChecks === undefined ? {} : { credentialChecks: row.credentialChecks }}
       {...props}
     />
@@ -258,10 +254,6 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
   if (state.status === 'ready' && !hasReadySnapshot) setHasReadySnapshot(true)
   if (state.status === 'error' && hasReadySnapshot) setHasReadySnapshot(false)
   const [editing, setEditing] = useState<EditorTarget | undefined>(undefined)
-  const [credentialRead, setCredentialRead] = useState<
-    { provider: string; status: 'loading' } | { provider: string; status: 'failed'; message: string }
-  >()
-  const editorLoading = credentialRead?.status === 'loading'
   const [addOpen, setAddOpen] = useState(false)
   const [addMode, setAddMode] = useState<AddMode>('catalog')
   /** The modes shown since the add card opened; each keeps its panel mounted. */
@@ -277,26 +269,6 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
   const [savedTarget, setSavedTarget] = useState<ProviderIdentity | undefined>(undefined)
   const [dismissedSetup, setDismissedSetup] = useState<ReadonlySet<string>>(() => new Set())
 
-  const openEditor = async (row: ProviderRow, target: EditorTarget): Promise<void> => {
-    setSavedTarget(undefined)
-    setAddOpen(false)
-    setEditing(undefined)
-    setCredentialRead(undefined)
-    const info = row.apiKeyEnv === undefined ? row.derivedCredential : row.credential
-    if (info?.configured === false) {
-      setEditing(target)
-      return
-    }
-    setCredentialRead({ provider: target.provider, status: 'loading' })
-    const loaded = await operations.readCredential(row.apiKeyEnv ?? deriveKeyRef(target.provider))
-    if (loaded.kind === 'refused') {
-      setCredentialRead({ provider: target.provider, status: 'failed', message: loaded.message })
-      return
-    }
-    setCredentialRead(undefined)
-    setEditing({ ...target, ...loaded.value === undefined ? {} : { initialCredential: loaded.value } })
-  }
-
   const announceSaved = (target: ProviderIdentity): void => {
     // Announced only once the refreshed directory is in the snapshot the
     // notice reads its name from: an apply can rename the route, and the
@@ -537,12 +509,15 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
                         type="button"
                         className={styles['secondaryButton']}
                         aria-label={providerCopy(t('editProvider'), target)}
-                        disabled={editorLoading || (!open && state.status !== 'ready')}
-                        aria-busy={credentialRead?.provider === target.provider && editorLoading}
+                        disabled={!open && state.status !== 'ready'}
                         onClick={() => {
                           if (!open && controller.store.getSnapshot().status !== 'ready') return
-                          if (open) setEditing(undefined)
-                          else void openEditor(row, target)
+                          setSavedTarget(undefined)
+                          // One card at a time: the add card closes with whatever
+                          // it held, since closing either card would otherwise
+                          // discard the other's draft.
+                          setAddOpen(false)
+                          setEditing(open ? undefined : target)
                         }}
                       >
                         {t('edit')}
@@ -554,7 +529,7 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
                         type="button"
                         className={styles['dangerButton']}
                         aria-label={providerCopy(t('removeProvider'), target)}
-                        disabled={editorLoading || !state.writable || state.status !== 'ready'}
+                        disabled={!state.writable || state.status !== 'ready'}
                         onClick={() => {
                           if (controller.store.getSnapshot().status !== 'ready') return
                           setSavedTarget(undefined)
@@ -569,8 +544,6 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
                 </span>
               </div>
               {error}
-              {credentialRead?.provider === target.provider && credentialRead.status === 'failed'
-                ? <p className={styles['error']} role="alert">{credentialRead.message}</p> : null}
               {renderSlot(
                 'settings.models.provider-card',
                 { provider: row.entry, configured: row.configured, keyConfigured: keyConfiguredOf(row) },
@@ -578,7 +551,7 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
               )}
               {open
                 ? renderProviderEditor({
-                  target: { ...target, ...editing.initialCredential === undefined ? {} : { initialCredential: editing.initialCredential } },
+                  target,
                   row,
                   namespace,
                   schema,
@@ -725,7 +698,7 @@ function Loaded({ injected, renderSlot }: { injected: ModelsSectionFace; renderS
                 <button
                   type="button"
                   className={styles['addButton']}
-                  disabled={editorLoading || !state.writable || state.status !== 'ready' || (!catalogEnabled && !customEnabled)}
+                  disabled={!state.writable || state.status !== 'ready' || (!catalogEnabled && !customEnabled)}
                   onClick={() => {
                     if (controller.store.getSnapshot().status !== 'ready') return
                     const first = addable[0]
diff --git a/packages/client/ui-settings-models/src/client/ProviderEditor.tsx b/packages/client/ui-settings-models/src/client/ProviderEditor.tsx
index 1daffc0f39..262f8c9d55 100644
--- a/packages/client/ui-settings-models/src/client/ProviderEditor.tsx
+++ b/packages/client/ui-settings-models/src/client/ProviderEditor.tsx
@@ -1,6 +1,6 @@
 /**
  * One provider's editor card, hand-written per adapter family: the primary
- * field is a masked **API key** input (the page never asks for an
+ * field is a single write-only **API key** input (the page never asks for an
  * environment-variable name — a typed key stores through `credentials/set`
  * under the profile's reference, deriving `<ROUTE>_API_KEY` when the profile
  * has none. The pi-ai profile records that derivation as `apiKeyEnv` only when
@@ -72,15 +72,13 @@ export interface ProviderEditorProps {
   settingsPath: readonly string[]
   /** The Host operations this card writes and interrogates through. */
   operations: ModelsOperations
-  /** Stored key loaded when opening this editor; omission starts with environment authentication. */
-  initialCredential?: string
   /** Endpoint the route uses when its profile sets no `baseURL`; absent when the adapter reports none. */
   defaultBaseURL?: string
   /** Environment variables used by the provider to construct its endpoint. */
   baseURLEnv?: readonly string[]
   /** Authentication the route performs when its profile names no credential reference; absent when the adapter reports none. */
   nativeAuth?: LlmNativeAuth
-  /** Redacted state of the editor's named or derived credential reference, from the page snapshot. */
+  /** Redacted state of the profile's named credential reference, from the page snapshot. */
   credential?: CredentialInfo
   /** Redacted checks for the profile's named reference or the provider's native variables. */
   credentialChecks?: Readonly<Record<string, CredentialInfo>>
@@ -181,7 +179,7 @@ function refFor(
 export function ProviderEditor(props: ProviderEditorProps): ReactNode {
   const { namespace, schema, settingsPath, operations, t } = props
   const [draft, setDraft] = useState<Record<string, unknown>>(() => draftAt(schema, namespace, settingsPath))
-  const [keyDraft, setKeyDraft] = useState(props.initialCredential ?? '')
+  const [keyDraft, setKeyDraft] = useState('')
   const [busy, setBusy] = useState(false)
   const [listBusy, setListBusy] = useState(false)
   const { onBusyChange } = props
@@ -237,17 +235,19 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
   const validateModels = (value: unknown): DeepSeekModelsValidationFailure | ReasoningEffortsFailure | undefined =>
     validateDeepSeekModels(value) ?? (editsReasoning ? validateReasoningEfforts(value) : undefined)
   const modelFailure = validateModels(schema.getPath(draft, ['models']))
-  const keyChanged = keyDraft !== (props.initialCredential ?? '')
-  const keyFailure = keyChanged ? apiKeyFailure(keyDraft) : undefined
-  // Normalize edited keys; preserve unchanged stored values exactly.
-  const keyValue = keyChanged ? keyDraft.trim() : keyDraft
+  const keyFailure = apiKeyFailure(keyDraft)
+  // What a probe or a write must carry: the typed key with paste whitespace
+  // removed. A blank field yields an empty string, which both call sites read
+  // as "no key supplied" rather than as a key — that is how a card whose
+  // provider already has a stored key is edited without re-entering it.
+  const keyValue = keyDraft.trim()
   const credentialRequiredFailure = props.credentialRequired === true
     && keyDraft.length > 0 && keyValue.length === 0
     ? 'keyRequired' as const
     : undefined
   const shownKeyFailure = credentialRequiredFailure ?? keyFailure
   // What the form currently shows, which is what an interrogation must ask:
-  // an edited-but-unsaved endpoint, and the loaded or newly entered key.
+  // an edited-but-unsaved endpoint, and a key typed but not yet stored.
   const probeApi = stringAt(draft, 'api') ?? stringAt(fallback, 'api')
   const probeBaseURL = stringAt(draft, 'baseURL') ?? stringAt(fallback, 'baseURL')
   const probe = {
@@ -270,7 +270,7 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
     // A pi-ai profile names the conventional reference only when this page is
     // about to store a key. Otherwise the provider keeps its native auth path.
     const next = layout === 'pi-ai' && stringAt(draft, 'apiKeyEnv') === undefined
-      && stringAt(fallback, 'apiKeyEnv') === undefined && keyChanged && keyValue.length > 0
+      && stringAt(fallback, 'apiKeyEnv') === undefined && keyValue.length > 0
       ? schema.setPath(draft, ['apiKeyEnv'], keyRef)
       : draft
     if (props.credentialOnly !== true) {
@@ -305,14 +305,9 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
       setExpectedRevision(written.view.revision)
       setDraft(next)
     }
-    const storedKeyRemoved = props.initialCredential !== undefined
-      && (props.credential?.configured === false || props.credential?.source === 'env')
-    if (keyValue.length > 0 && (keyChanged || storedKeyRemoved)) {
+    if (keyValue.length > 0) {
       const stored = await operations.storeCredential(keyRef, keyValue)
       if (stored !== undefined) return stored
-    } else if (keyValue.length === 0 && props.initialCredential !== undefined) {
-      const removed = await operations.removeCredential(keyRef)
-      if (removed !== undefined) return removed
     }
     setKeyDraft('')
     return undefined
@@ -384,11 +379,12 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
     const checkedRefs = authRefs.map(ref => [
       ref, props.credentialChecks?.[ref] ?? (ref === namedRef ? props.credential : undefined),
     ] as const)
-    const detected = checkedRefs.find(([, info]) => info?.configured === true && info.source !== 'file')
+    const detected = checkedRefs.find(([, info]) => info?.configured === true)
     const detectedRef = detected?.[0]
     const detectedVisibleRef = detectedRef === undefined || !visibleRefs.includes(detectedRef) ? undefined : detectedRef
     const missingRefs = checkedRefs.length > 0 && checkedRefs.every(([, info]) => info?.configured === false)
-    const credentialHint = keyDraft.length > 0 || keyHint === undefined || props.credentialRequired === true
+    const savedCredential = detected?.[1]?.source === 'file'
+    const credentialHint = keyDraft.length > 0 || savedCredential || keyHint === undefined || props.credentialRequired === true
       ? undefined
       : t(detectedRef === undefined ? missingRefs ? 'keyFallbackMissing' : 'keyFallbackUnchecked'
         : detectedVisibleRef === undefined ? 'keyFallbackDetectedHidden' : 'keyFallbackDetected')
@@ -405,7 +401,7 @@ export function ProviderEditor(props: ProviderEditorProps): ReactNode {
     const keylessNativeAuth = nativeAuth?.env.length === 0 && nativeAuth.oauth
     const keyPlaceholder = keyHint === undefined || props.credentialRequired === true
       ? t('keyPlaceholder')
-      : t('keyPlaceholderFallback').replace('{hint}', () => keyHint)
+      : t(savedCredential ? 'keyPlaceholderSaved' : 'keyPlaceholderFallback').replace('{hint}', () => keyHint)
     /** What both family editors take: the rows, whose layer owns them, and the two writes. */
     const catalogProps = {
       models,
diff --git a/packages/client/ui-settings-models/src/client/apiKey.ts b/packages/client/ui-settings-models/src/client/apiKey.ts
index b14b8efced..353488a0b5 100644
--- a/packages/client/ui-settings-models/src/client/apiKey.ts
+++ b/packages/client/ui-settings-models/src/client/apiKey.ts
@@ -39,11 +39,12 @@ function isQuoted(value: string): boolean {
 }
 
 /**
- * Judge a newly entered or edited key.
+ * Judge the key input's current value.
  *
- * An empty field is valid; the caller decides whether it means no key or
- * removal. Whitespace-only input is invalid, so typed input is never silently
- * discarded. Unchanged stored values do not require this check.
+ * An empty field is not a failure: every card opens with it empty even when a
+ * key is already stored, where it means keep that one. A field holding only
+ * whitespace is a failure rather than an empty field, so typed input is never
+ * silently discarded.
  * @param draft - the key input's current value, untrimmed.
  * @returns the copy key for a field-level failure, or `undefined` to allow submit.
  */
diff --git a/packages/client/ui-settings-models/src/client/locales.ts b/packages/client/ui-settings-models/src/client/locales.ts
index 2adc9842ee..533b7aed02 100644
--- a/packages/client/ui-settings-models/src/client/locales.ts
+++ b/packages/client/ui-settings-models/src/client/locales.ts
@@ -41,6 +41,7 @@ export const en = {
   keyHide: 'Hide secret',
   keyPlaceholder: 'Enter your API key',
   keyPlaceholderFallback: 'Leave blank to use env as auth ({hint})',
+  keyPlaceholderSaved: 'Leave blank to use saved credentials',
   keyFallbackMissing: 'Env var not detected. Enter an API key, or configure {hint} in your env.',
   keyFallbackDetected: 'Env var detected. ({hint})',
   keyFallbackDetectedHidden: 'Env var detected.',
@@ -184,6 +185,7 @@ export const zh: { [Key in keyof typeof en]: string } = {
   keyHide: '隐藏密钥',
   keyPlaceholder: '输入 API 密钥',
   keyPlaceholderFallback: '留空使用环境认证（{hint}）',
+  keyPlaceholderSaved: '留空使用已保存凭据',
   keyFallbackMissing: '未检测到环境变量。请填写 API 密钥，或设置环境变量 {hint}。',
   keyFallbackDetected: '已检测到环境变量（{hint}）',
   keyFallbackDetectedHidden: '已检测到环境变量',
@@ -324,6 +326,7 @@ export const ja = {
   'keyHide': 'シークレットを非表示',
   'keyPlaceholder': 'APIキーを入力',
   'keyPlaceholderFallback': '空欄のままにすると環境変数を認証に使用します ({hint})',
+  'keyPlaceholderSaved': '空欄のままにすると保存済みの認証情報を使用します',
   'keyFallbackMissing': '環境変数が検出されません。APIキーを入力するか、環境変数に{hint}を設定してください。',
   'keyFallbackDetected': '環境変数を検出しました。({hint})',
   'keyFallbackDetectedHidden': '環境変数を検出しました。',
@@ -464,6 +467,7 @@ export const es = {
   keyHide: 'Ocultar secreto',
   keyPlaceholder: 'Ingrese su clave API',
   keyPlaceholderFallback: 'Déjelo en blanco para usar env como autenticación ({hint})',
+  keyPlaceholderSaved: 'Déjelo en blanco para usar las credenciales guardadas',
   keyFallbackMissing: 'No se detectó la variable de entorno. Ingrese una clave API o configure {hint} en su entorno.',
   keyFallbackDetected: 'Se detectó var env. ({hint})',
   keyFallbackDetectedHidden: 'Se detectó var env.',
@@ -604,6 +608,7 @@ export const fr = {
   keyHide: 'Cacher le secret',
   keyPlaceholder: 'Entrez votre clé API',
   keyPlaceholderFallback: 'Laissez vide pour utiliser env comme authentification ({hint})',
+  keyPlaceholderSaved: "Laissez vide pour utiliser les informations d'identification enregistrées",
   keyFallbackMissing: "Var d'environnement non détectée. Entrez une clé API ou configurez {hint} dans votre environnement.",
   keyFallbackDetected: "Var d'environnement détectée. ({hint})",
   keyFallbackDetectedHidden: "Var d'environnement détectée.",
@@ -744,6 +749,7 @@ export const de = {
   keyHide: 'Geheimnis verbergen',
   keyPlaceholder: 'Geben Sie Ihren API-Schlüssel ein',
   keyPlaceholderFallback: 'Lassen Sie das Feld leer, um env als Authentifizierung zu verwenden ({hint})',
+  keyPlaceholderSaved: 'Lassen Sie das Feld leer, um gespeicherte Anmeldeinformationen zu verwenden',
   keyFallbackMissing: 'Umgebungsvariable nicht erkannt. Geben Sie einen API-Schlüssel ein oder konfigurieren Sie {hint} in Ihrer Umgebung.',
   keyFallbackDetected: 'Umgebungsvariable erkannt. ({hint})',
   keyFallbackDetectedHidden: 'Umgebungsvariable erkannt.',
@@ -884,6 +890,7 @@ export const ru = {
   keyHide: 'Скрыть секрет',
   keyPlaceholder: 'Введите свой ключ API',
   keyPlaceholderFallback: 'Оставьте пустым, чтобы использовать env в качестве аутентификации ({hint})',
+  keyPlaceholderSaved: 'Оставьте поле пустым, чтобы использовать сохраненные учетные данные.',
   keyFallbackMissing: 'Переменная Env не обнаружена. Введите ключ API или настройте {hint} в своей среде.',
   keyFallbackDetected: 'Обнаружена переменная Env. ({hint})',
   keyFallbackDetectedHidden: 'Обнаружена переменная Env.',
@@ -1024,6 +1031,7 @@ export const pt = {
   keyHide: 'Ocultar segredo',
   keyPlaceholder: 'Insira sua chave API',
   keyPlaceholderFallback: 'Deixe em branco para usar env como autenticação ({hint})',
+  keyPlaceholderSaved: 'Deixe em branco para usar credenciais salvas',
   keyFallbackMissing: 'Env var não detectado. Insira uma chave API ou configure {hint} em seu ambiente.',
   keyFallbackDetected: 'Variável de ambiente detectada. ({hint})',
   keyFallbackDetectedHidden: 'Variável de ambiente detectada.',
diff --git a/packages/client/ui-settings-models/src/client/operations.ts b/packages/client/ui-settings-models/src/client/operations.ts
index 750982fed3..d8c5d0ac99 100644
--- a/packages/client/ui-settings-models/src/client/operations.ts
+++ b/packages/client/ui-settings-models/src/client/operations.ts
@@ -30,19 +30,8 @@ export type ModelDiscoveryOutcome =
   /** The interrogation was refused, with the Host's own diagnostic. */
   | { readonly kind: 'refused'; readonly message: string }
 
-/** Stored credential loaded for one editor, or a read failure. */
-export type CredentialReadOutcome =
-  | { readonly kind: 'read'; readonly value: string | undefined }
-  | { readonly kind: 'refused'; readonly message: string }
-
 /** The Host operations the Models page and its cards invoke. */
 export interface ModelsOperations {
-  /**
-   * Load a stored credential without reading environment values.
-   * @param ref - credential reference name.
-   * @returns the stored value or the refusal to display.
-   */
-  readCredential(ref: string): Promise<CredentialReadOutcome>
   /**
    * Store one credential literal under its reference.
    * @param ref - credential reference name.
@@ -86,10 +75,6 @@ export interface ModelsOperations {
  */
 export function createModelsOperations(ctx: ClientContext): ModelsOperations {
   return {
-    readCredential: async (ref) => {
-      const response = await ctx.remote.credentials.readStored(ref)
-      return response.ok ? { kind: 'read', value: response.value } : { kind: 'refused', message: response.error.message }
-    },
     storeCredential: async (ref, value) => {
       const response = await ctx.remote.credentials.set(ref, value)
       return response.ok ? undefined : response.error.message
diff --git a/packages/client/ui-settings-models/tests/components.client.spec.tsx b/packages/client/ui-settings-models/tests/components.client.spec.tsx
index ac9aac1fc4..08ce75a428 100644
--- a/packages/client/ui-settings-models/tests/components.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/components.client.spec.tsx
@@ -162,13 +162,12 @@ function remoteOk<T>(value: T) {
   return { ok: true as const, value }
 }
 /** The codes this page's scripted Host answers refuse with. */
-type RefusalCode = 'credential/rejected' | 'gateway/internal' | 'gateway/cancelled' | 'settings/conflict' | 'settings/rejected'
+type RefusalCode = 'credential/rejected' | 'gateway/internal' | 'settings/conflict' | 'settings/rejected'
 
 /** One refusal per code, each carrying the details its own code declares. */
 const REFUSALS: { [Code in RefusalCode]: (message: string) => RemoteError<Code> } = {
   'credential/rejected': message => new RemoteError('credential/rejected', message, { ref: 'DEEPSEEK_API_KEY' }),
   'gateway/internal': message => new RemoteError('gateway/internal', message, {}),
-  'gateway/cancelled': message => new RemoteError('gateway/cancelled', message, {}),
   'settings/conflict': message =>
     new RemoteError('settings/conflict', message, { ns: 'llm-pi-ai', expected: 4, actual: 5 }),
   'settings/rejected': message => new RemoteError('settings/rejected', message, { ns: 'llm-pi-ai' }),
@@ -217,9 +216,6 @@ function scriptedFace(overrides: {
       mutate,
     },
     credentials: {
-      readStored: vi.fn((ref: string): Promise<RemoteResult<string | undefined>> => Promise.resolve(remoteOk(
-        ref === 'OPENAI_API_KEY' ? 'fixture-openai-key' : undefined,
-      ))),
       // Typed as the Remote answer rather than the success branch alone: a
       // case that scripts a refusal replaces this mock.
       describe: vi.fn((refs: string[]): Promise<RemoteResult<Record<string, CredentialInfo>>> =>
@@ -361,156 +357,16 @@ async function mountFirstRun(overrides: Parameters<typeof scriptedFace>[0] = {})
 async function mountDeepSeekCard(overrides: Parameters<typeof scriptedFace>[0] = {}) {
   const mounted = await mountSection(overrides)
   fireEvent.click(screen.getByRole('button', { name: deepSeekCopy(en.editProvider) }))
-  await screen.findByLabelText(en.keyInput)
   return mounted
 }
 
 describe('ModelsSection', () => {
-  it('loads a saved DeepSeek key only when editing and keeps an unchanged key stored', async () => {
-    const scripted = scriptedFace()
-    scripted.face.credentials.describe.mockImplementation(refs => Promise.resolve(remoteOk(
-      Object.fromEntries(refs.map(ref => [ref, { configured: ref === 'DEEPSEEK_API_KEY', source: 'file', writable: true }])),
-    )))
-    scripted.face.credentials.readStored.mockResolvedValue(remoteOk('fixture-deepseek-key'))
-    const { set, unset } = await mountFace(scripted)
-    expect(scripted.face.credentials.readStored).not.toHaveBeenCalled()
-    fireEvent.click(screen.getByRole('button', { name: deepSeekCopy(en.editProvider) }))
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(key.value).toBe('fixture-deepseek-key')
-    expect(key.type).toBe('password')
-    expect(scripted.face.credentials.readStored).toHaveBeenCalledWith('DEEPSEEK_API_KEY')
-    fireEvent.click(screen.getByRole('button', { name: en.keyReveal }))
-    expect(key.type).toBe('text')
-    fireEvent.click(screen.getByRole('button', { name: en.apply }))
-    await screen.findByRole('status')
-    expect(set).not.toHaveBeenCalled()
-    expect(unset).not.toHaveBeenCalled()
-  })
-
-  it('removes a cleared saved DeepSeek key and retains the edit when removal fails', async () => {
-    const scripted = scriptedFace()
-    scripted.face.credentials.describe.mockImplementation(refs => Promise.resolve(remoteOk(
-      Object.fromEntries(refs.map(ref => [ref, { configured: ref === 'DEEPSEEK_API_KEY', source: 'file', writable: true }])),
-    )))
-    scripted.face.credentials.readStored.mockResolvedValue(remoteOk('fixture-deepseek-key'))
-    scripted.unset.mockResolvedValueOnce(remoteFail('credential removal failed'))
-    await mountFace(scripted)
-    fireEvent.click(screen.getByRole('button', { name: deepSeekCopy(en.editProvider) }))
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    fireEvent.change(key, { target: { value: '' } })
-    expect(key.placeholder).toBe(en.keyPlaceholderFallback.replace('{hint}', 'DEEPSEEK_API_KEY'))
-    expect(screen.getByText(en.keyFallbackUnchecked)).toBeTruthy()
-    expect(screen.queryByText(en.keyFallbackDetected.replace('{hint}', 'DEEPSEEK_API_KEY'))).toBeNull()
-    fireEvent.click(screen.getByRole('button', { name: en.apply }))
-    await screen.findByText('credential removal failed')
-    expect(scripted.unset).toHaveBeenCalledWith('DEEPSEEK_API_KEY')
-    expect(screen.queryByRole('status')).toBeNull()
-    expect(key.value).toBe('')
-    fireEvent.click(screen.getByRole('button', { name: en.apply }))
-    await screen.findByRole('status')
-    expect(scripted.set).not.toHaveBeenCalled()
-  })
-
-  it('waits for a saved key under a derived reference before opening its provider editor', async () => {
-    const scripted = scriptedFace()
-    const read = Promise.withResolvers<RemoteResult<string | undefined>>()
-    scripted.face.credentials.describe.mockImplementation(refs => Promise.resolve(remoteOk(
-      Object.fromEntries(refs.map(ref => [ref, {
-        configured: ref === 'OPENAI_API_KEY' || ref === 'ZOMBIE_API_KEY', source: 'file', writable: true,
-      }])),
-    )))
-    scripted.face.credentials.readStored.mockReturnValue(read.promise)
-    const { mutate, set } = await mountFace(scripted)
-    const edit = screen.getByRole<HTMLButtonElement>('button', {
-      name: providerCopy(en.editProvider, { provider: 'zombie', displayName: 'zombie' }),
-    })
-    fireEvent.click(edit)
-    expect(scripted.face.credentials.readStored).toHaveBeenCalledWith('ZOMBIE_API_KEY')
-    expect(edit.disabled).toBe(true)
-    expect(screen.queryByLabelText(en.keyInput)).toBeNull()
-    await act(async () => { read.resolve(remoteOk('fixture-zombie-key')) })
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(key.value).toBe('fixture-zombie-key')
-    expect(key.type).toBe('password')
-    fireEvent.click(screen.getByRole('button', { name: en.apply }))
-    await screen.findByRole('status')
-    expect(mutate).not.toHaveBeenCalled()
-    expect(set).not.toHaveBeenCalled()
-  })
-
-  it('refreshes provider metadata without replacing the loaded key draft', async () => {
-    const { face, controller } = await mountSection()
-    face.credentials.readStored.mockResolvedValue(remoteOk('fixture-zombie-key'))
-    act(() => {
-      controller.store.update((state) => {
-        state.rows = state.rows.map(row => row.entry.provider === 'zombie' ? {
-          ...row,
-          entry: { ...row.entry, displayName: 'Before', defaultBaseURL: 'https://before.example', nativeAuth: { env: ['ZOMBIE_API_KEY'], oauth: false } },
-          derivedCredential: { configured: true, source: 'file', writable: true },
-        } : row)
-      })
-    })
-    fireEvent.click(screen.getByRole('button', { name: 'Edit Before (zombie)' }))
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    fireEvent.change(key, { target: { value: 'fixture-draft-key' } })
-    fireEvent.click(screen.getByText(en.customized))
-    expect(screen.getByLabelText<HTMLInputElement>(en.baseUrl).placeholder).toContain('https://before.example')
-    act(() => {
-      controller.store.update((state) => {
-        state.rows = state.rows.map(row => row.entry.provider === 'zombie' ? {
-          ...row, entry: { ...row.entry, displayName: 'After', defaultBaseURL: 'https://after.example', nativeAuth: { env: ['NEW_ZOMBIE_KEY'], oauth: false } },
-        } : row)
-      })
-    })
-    expect(screen.queryByText('Before')).toBeNull()
-    expect(screen.getAllByText('After').length).toBeGreaterThan(0)
-    expect(screen.getByLabelText<HTMLInputElement>(en.baseUrl).placeholder).toContain('https://after.example')
-    expect(key.value).toBe('fixture-draft-key')
-    fireEvent.change(key, { target: { value: '' } })
-    expect(key.placeholder).toContain('NEW_ZOMBIE_KEY')
-  })
-
-  it.each(['"quoted-key"', 'NAME=value', '密钥', '  fixture-key  '])('preserves an unchanged stored value %s while editing other settings', async (stored) => {
-    const scripted = scriptedFace()
-    scripted.face.credentials.readStored.mockResolvedValue(remoteOk(stored))
-    const { mutate, set, unset } = await mountFace(scripted)
-    fireEvent.click(screen.getByRole('button', { name: openaiCopy(en.editProvider) }))
-    const key = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(key.value).toBe(stored)
-    fireEvent.click(screen.getByText(en.customized))
-    fireEvent.change(screen.getByLabelText(en.baseUrl), { target: { value: 'https://edited.example' } })
-    const apply = screen.getByRole<HTMLButtonElement>('button', { name: en.apply })
-    expect(apply.disabled).toBe(false)
-    fireEvent.click(apply)
-    await screen.findByRole('status')
-    expect(mutate).toHaveBeenCalledWith('llm-pi-ai', [{ op: 'set', path: ['providers', 'openai', 'baseURL'], value: 'https://edited.example' }], 0)
-    expect(set).not.toHaveBeenCalled()
-    expect(unset).not.toHaveBeenCalled()
-  })
-
-  it.each(['credential/rejected', 'gateway/internal', 'gateway/cancelled'] as const)('reports a %s stored-key read and enables retry without opening an empty editor', async (code) => {
-    const scripted = scriptedFace()
-    scripted.face.credentials.readStored.mockResolvedValueOnce(remoteFail('credential read failed', code))
-    await mountFace(scripted)
-    const edit = screen.getByRole<HTMLButtonElement>('button', { name: openaiCopy(en.editProvider) })
-    fireEvent.click(edit)
-    expect((await screen.findByRole('alert')).textContent).toBe('credential read failed')
-    expect(screen.queryByLabelText(en.keyInput)).toBeNull()
-    expect(edit.disabled).toBe(false)
-    expect(screen.getByRole<HTMLButtonElement>('button', { name: en.add }).disabled).toBe(false)
-    expect(screen.getByRole<HTMLButtonElement>('button', { name: openaiCopy(en.removeProvider) }).disabled).toBe(false)
-    fireEvent.click(edit)
-    expect((await screen.findByLabelText<HTMLInputElement>(en.keyInput)).value).toBe('fixture-openai-key')
-  })
-
   it('keeps the credential state unconfirmed when its redacted read fails', async () => {
     const scripted = scriptedFace()
-    scripted.face.credentials.readStored.mockResolvedValue(remoteOk(undefined))
     scripted.face.credentials.describe.mockResolvedValue(remoteFail('credentials unavailable', 'gateway/internal'))
     await mountFace(scripted)
     const edit = screen.getByRole('button', { name: openaiCopy(en.editProvider) })
     fireEvent.click(edit)
-    await screen.findByLabelText(en.keyInput)
     const row = within(edit.closest('li')!)
     expect(row.getByText(en.keyFallbackUnchecked)).toBeTruthy()
     expect(row.queryByText(en.keyFallbackMissing.replace('{hint}', 'OPENAI_API_KEY'))).toBeNull()
@@ -1593,10 +1449,9 @@ describe('ModelsSection', () => {
   it('edits a pi-ai profile with the curated fields only', async () => {
     const { mutate } = await mountSection()
     fireEvent.click(screen.getByRole('button', { name: openaiCopy(en.editProvider) }))
-    // The stored value starts masked, and an empty edit selects environment authentication.
+    // The field names the profile's reference; a stored value stays hidden.
     const editorKey = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(editorKey.value).toBe('fixture-openai-key')
-    expect(editorKey.type).toBe('password')
+    expect(editorKey.placeholder).toBe(en.keyPlaceholderSaved)
     // pi-ai carries Base URL too: the stored override shows as the value and
     // the effective profile endpoint, ahead of the catalog's, as its placeholder.
     fireEvent.click(screen.getByText(en.customized))
@@ -1782,8 +1637,7 @@ describe('ModelsSection', () => {
     face.credentials.describe.mockImplementation(() => Promise.resolve(remoteFail('down', 'gateway/internal')))
     fireEvent.click(screen.getByRole('button', { name: openaiCopy(en.editProvider) }))
     const editorKey = await screen.findByLabelText<HTMLInputElement>(en.keyInput)
-    expect(editorKey.value).toBe('fixture-openai-key')
-    expect(editorKey.type).toBe('password')
+    expect(editorKey.placeholder).toBe(en.keyPlaceholderSaved)
     fireEvent.change(editorKey, { target: { value: 'sk-live' } })
     fireEvent.click(screen.getByText(en.apply))
     await waitFor(() => { expect(set).toHaveBeenCalledTimes(1) })
@@ -2357,7 +2211,7 @@ it.each(['file', 'env', 'project-env', 'user-env'] as const)('shows only the bla
   else expect(screen.getAllByText(hint)).toHaveLength(1)
   expect(input.value).toBe('')
   expect(input.placeholder)
-    .toBe(en.keyPlaceholderFallback.replace('{hint}', 'OPENAI_API_KEY'))
+    .toBe(source === 'file' ? en.keyPlaceholderSaved : en.keyPlaceholderFallback.replace('{hint}', 'OPENAI_API_KEY'))
   fireEvent.change(input, { target: { value: 'new-key' } })
   expect(screen.queryByText(hint)).toBeNull()
   expect(screen.queryByText(/^API key source:/)).toBeNull()
@@ -2377,31 +2231,21 @@ it.each([
   expect(document.body.textContent).not.toMatch(/oauth/i)
 })
 
-it.each([
-  { label: 'removed without environment fallback', info: { configured: false, writable: true }, restore: true },
-  { label: 'removed with environment fallback', info: { configured: true, source: 'env', writable: true }, restore: true },
-  { label: 'still stored or externally rotated', info: { configured: true, source: 'file', writable: true }, restore: false },
-  { label: 'unknown source', info: { configured: true, writable: true }, restore: false },
-] as const)('preserves the loaded draft and restores it only after confirmed removal: $label', async ({ info, restore }) => {
-  const { face, controller, set } = await mountSection()
+it('refreshes a blank editor from saved credentials to environment detection without an editor probe', async () => {
+  const { face, controller } = await mountSection()
   const reads = face.credentials.describe.mock.calls.length
   fireEvent.click(screen.getByRole('button', { name: openaiCopy(en.editProvider) }))
-  expect((await screen.findByLabelText<HTMLInputElement>(en.keyInput)).value).toBe('fixture-openai-key')
+  expect(screen.getByLabelText<HTMLInputElement>(en.keyInput).placeholder).toBe(en.keyPlaceholderSaved)
   expect(screen.queryByText(/^API key source:/)).toBeNull()
   expect(screen.queryByText(/Env var detected/)).toBeNull()
   expect(face.credentials.describe).toHaveBeenCalledTimes(reads)
   face.credentials.describe.mockImplementation(refs => Promise.resolve(remoteOk(
-    Object.fromEntries(refs.map(ref => [ref, ref === 'OPENAI_API_KEY' ? info : { configured: true, source: 'env', writable: true }])),
+    Object.fromEntries(refs.map(ref => [ref, { configured: true, source: 'env', writable: true }])),
   )))
   await act(() => controller.load())
-  expect(screen.getByLabelText<HTMLInputElement>(en.keyInput).value).toBe('fixture-openai-key')
-  expect(screen.queryByText(/Env var detected/)).toBeNull()
-  expect(face.credentials.readStored).toHaveBeenCalledTimes(1)
+  expect(screen.getByText(en.keyFallbackDetected.replace('{hint}', 'OPENAI_API_KEY'))).toBeTruthy()
+  expect(screen.queryByText(/^API key source:/)).toBeNull()
   expect(face.credentials.describe).toHaveBeenCalledTimes(reads + 1)
-  fireEvent.click(screen.getByRole('button', { name: en.apply }))
-  await screen.findByRole('status')
-  if (restore) expect(set).toHaveBeenCalledWith('OPENAI_API_KEY', 'fixture-openai-key')
-  else expect(set).not.toHaveBeenCalled()
 })
 
 it('keeps an OAuth-only provider on its native authentication path', () => {
diff --git a/packages/client/ui-settings-models/tests/model-list-catalog.client.spec.tsx b/packages/client/ui-settings-models/tests/model-list-catalog.client.spec.tsx
index 41062ac46d..1e40a70f1e 100644
--- a/packages/client/ui-settings-models/tests/model-list-catalog.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/model-list-catalog.client.spec.tsx
@@ -11,7 +11,7 @@ afterEach(cleanup)
 function operations(discoverModels: ModelsOperations['discoverModels']): ModelsOperations {
   return {
     discoverModels,
-    readCredential: vi.fn(), storeCredential: vi.fn(),
+    storeCredential: vi.fn(),
     removeCredential: vi.fn(),
     writeSettings: vi.fn(),
   }
diff --git a/packages/client/ui-settings-models/tests/model-order.client.spec.tsx b/packages/client/ui-settings-models/tests/model-order.client.spec.tsx
index 22ef92b679..46884f5f3e 100644
--- a/packages/client/ui-settings-models/tests/model-order.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/model-order.client.spec.tsx
@@ -27,9 +27,7 @@ function Editor(props: {
     ? <DeepSeekModelsEditor {...shared} defaultContextWindow={undefined} defaultMaxTokens={undefined} />
     : <ModelListEditor
       {...shared} probe={{ settingsNs: 'llm-pi-ai' }} onBusyChange={() => {}}
-      operations={{
-        discoverModels: vi.fn(), readCredential: vi.fn(), storeCredential: vi.fn(), removeCredential: vi.fn(), writeSettings: vi.fn(),
-      }}
+      operations={{ discoverModels: vi.fn(), storeCredential: vi.fn(), removeCredential: vi.fn(), writeSettings: vi.fn() }}
     />
 }
 
diff --git a/packages/client/ui-settings-models/tests/model-reasoning-efforts.client.spec.tsx b/packages/client/ui-settings-models/tests/model-reasoning-efforts.client.spec.tsx
index c9ddabbeee..6e31ede058 100644
--- a/packages/client/ui-settings-models/tests/model-reasoning-efforts.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/model-reasoning-efforts.client.spec.tsx
@@ -241,7 +241,7 @@ describe('reasoning-level validation', () => {
 describe('reasoning levels in the model list', () => {
   const operations: ModelsOperations = {
     discoverModels: () => Promise.resolve({ kind: 'found', models: [] }),
-    readCredential: vi.fn(), storeCredential: vi.fn(),
+    storeCredential: vi.fn(),
     removeCredential: vi.fn(),
     writeSettings: vi.fn(),
   }
diff --git a/packages/client/ui-settings-models/tests/provider-form.client.spec.tsx b/packages/client/ui-settings-models/tests/provider-form.client.spec.tsx
index 7145e8df8e..a0e15d75fb 100644
--- a/packages/client/ui-settings-models/tests/provider-form.client.spec.tsx
+++ b/packages/client/ui-settings-models/tests/provider-form.client.spec.tsx
@@ -138,7 +138,6 @@ function scriptedFace(options: {
       mutate,
     },
     credentials: {
-      readStored: vi.fn(() => Promise.resolve(remoteOk(undefined))),
       describe: vi.fn((refs: string[]) => Promise.resolve(remoteOk(
         Object.fromEntries(refs.map(ref => [ref, { configured: false, writable: true }])),
       ))),
diff --git a/packages/credentials/authorization/tests/memory.ts b/packages/credentials/authorization/tests/memory.ts
index b216ec68f8..1d9990af99 100644
--- a/packages/credentials/authorization/tests/memory.ts
+++ b/packages/credentials/authorization/tests/memory.ts
@@ -24,10 +24,6 @@ export class MemoryCredentials extends CredentialProvider {
     return Promise.resolve(undefined)
   }
 
-  override readStored(_ref: CredentialRef): Promise<string | undefined> {
-    return Promise.resolve(undefined)
-  }
-
   override describe(_ref: CredentialRef): Promise<CredentialInfo> {
     return Promise.resolve({ configured: false, writable: true })
   }
diff --git a/packages/credentials/credentials-local/README.i18n.yaml b/packages/credentials/credentials-local/README.i18n.yaml
index 520f191975..b4401964e7 100644
--- a/packages/credentials/credentials-local/README.i18n.yaml
+++ b/packages/credentials/credentials-local/README.i18n.yaml
@@ -24,8 +24,8 @@
   en: fccad7d354c2af71
   zh: 5b95b5890e21f80f
 /deepseek-ai-dsh-credentials-local/use-this-package/storing-and-removing-keys:
-  en: bcff7fccee1870a9
-  zh: 754be1485afc7ad2
+  en: 5e3d45470142b9dd
+  zh: 1f8358f987769d3a
 /deepseek-ai-dsh-credentials-local/use-this-package/where-keys-come-from:
   en: a55fac148b62e007
   zh: fdb3d19ccae676ee
diff --git a/packages/credentials/credentials-local/README.md b/packages/credentials/credentials-local/README.md
index b78d1cc344..c3d15999be 100644
--- a/packages/credentials/credentials-local/README.md
+++ b/packages/credentials/credentials-local/README.md
@@ -50,7 +50,7 @@ The generated [configuration catalog](../../../docs/config-catalog.md#deepseek-a
 
 ### Storing and removing keys
 
-Save a key with `set`, remove it with `unset`, and check whether a key is configured with `describe`. `readStored` reads only the managed value for an editor, excluding environment fallbacks:
+Save a key with `set`, remove it with `unset`, and check whether a key is configured with `describe` — the same operations the credential API provides:
 
 ```ts
 import type { Context } from '@deepseek-ai/cordis'
diff --git a/packages/credentials/credentials-local/README.zh.md b/packages/credentials/credentials-local/README.zh.md
index ad517c82bf..5249827cde 100644
--- a/packages/credentials/credentials-local/README.zh.md
+++ b/packages/credentials/credentials-local/README.zh.md
@@ -50,7 +50,7 @@ kind: "package-reference"
 
 ### 存储与移除密钥
 
-用 `set` 保存密钥、用 `unset` 移除、用 `describe` 检查密钥是否已配置。`readStored` 仅为编辑器读取托管值，不使用环境后备：
+用 `set` 保存密钥、用 `unset` 移除、用 `describe` 检查密钥是否已配置——与凭据 API 提供的操作相同：
 
 ```ts
 import type { Context } from '@deepseek-ai/cordis'
diff --git a/packages/credentials/credentials-local/src/index.ts b/packages/credentials/credentials-local/src/index.ts
index f18f84e067..48ae487c6d 100644
--- a/packages/credentials/credentials-local/src/index.ts
+++ b/packages/credentials/credentials-local/src/index.ts
@@ -642,10 +642,6 @@ export class LocalCredentialProvider extends CredentialProvider {
     return Promise.resolve({ configured: false, writable: true })
   }
 
-  override readStored(ref: CredentialRef): Promise<string | undefined> {
-    return Promise.resolve(this.values.get(ref))
-  }
-
   override async set(ref: CredentialRef, value: string): Promise<void> {
     if (value.length === 0) {
       throw new Error(`credentials-local: an empty value cannot be stored for "${ref}"; use unset`)
diff --git a/packages/credentials/credentials-local/tests/local.spec.ts b/packages/credentials/credentials-local/tests/local.spec.ts
index 761148a6a5..d1436e0731 100644
--- a/packages/credentials/credentials-local/tests/local.spec.ts
+++ b/packages/credentials/credentials-local/tests/local.spec.ts
@@ -59,18 +59,6 @@ describe('resolveSpec', () => {
 })
 
 describe('layering and reads', () => {
-  it('reads only stored values for an editor while resolution retains environment fallback', async () => {
-    const dir = await tempDir()
-    vi.stubEnv('DSH_CRED_TEST', 'fixture-environment-key')
-    const ctx = await boot({ path: join(dir, '.credentials.yaml'), watch: false })
-    expect(await ctx.credentials.readStored(KEY)).toBeUndefined()
-    await ctx.credentials.set(KEY, 'fixture-stored-key')
-    expect(await ctx.credentials.readStored(KEY)).toBe('fixture-stored-key')
-    expect(await ctx.credentials.resolve(KEY)).toEqual({ value: 'fixture-stored-key', source: 'file' })
-    await ctx.credentials.unset(KEY)
-    expect(await ctx.credentials.readStored(KEY)).toBeUndefined()
-    expect(await ctx.credentials.resolve(KEY)).toEqual({ value: 'fixture-environment-key', source: 'env' })
-  })
   it('treats an absent file as an empty writable store', async () => {
     const dir = await tempDir()
     const ctx = await boot({ path: join(dir, '.credentials.yaml'), watch: false })
diff --git a/packages/credentials/credentials/README.i18n.yaml b/packages/credentials/credentials/README.i18n.yaml
index e262675e0a..3f2265caf7 100644
--- a/packages/credentials/credentials/README.i18n.yaml
+++ b/packages/credentials/credentials/README.i18n.yaml
@@ -18,14 +18,14 @@
   en: 32e626bb84b2360a
   zh: 6bad5ffd40687587
 /deepseek-ai-dsh-credentials/use-this-package/when-to-use-it:
-  en: fa4e2165e41700b9
-  zh: 9f2c0f7a7f15a4b5
+  en: 78c50ac5ee5cf5f1
+  zh: d42c0b8df37653bf
 /deepseek-ai-dsh-credentials/use-this-package/adding-it-to-your-composition:
   en: 8f3500119608f91b
   zh: 147fdb5389affbc0
 /deepseek-ai-dsh-credentials/use-this-package/storing-checking-and-removing-keys:
-  en: 28bff3f6efbacca7
-  zh: 856c60c716b82c19
+  en: fa334e2d4438e0b6
+  zh: 009b9252ed046886
 /deepseek-ai-dsh-credentials/use-this-package/storing-updating-and-removing-records:
   en: 300c3f1f13abdca4
   zh: ec7a6486ac88889c
@@ -33,8 +33,8 @@
   en: fd17366bde0425e0
   zh: 408fc625b58db7b4
 /deepseek-ai-dsh-credentials/use-this-package/what-can-go-wrong:
-  en: 8d317fd66477a3a5
-  zh: 40f15af21d4bcd61
+  en: 23794d3510273e7f
+  zh: d89075376de4be29
 /deepseek-ai-dsh-credentials/understand-the-implementation:
   en: 16370ef642feec6a
   zh: a546774827234300
diff --git a/packages/credentials/credentials/README.md b/packages/credentials/credentials/README.md
index e4c733646f..85ed5a68b0 100644
--- a/packages/credentials/credentials/README.md
+++ b/packages/credentials/credentials/README.md
@@ -29,7 +29,7 @@ This package is the part of the product that stores and looks up secret values:
 
 ### When to use it
 
-Use a credential store whenever configuration must stay free of secret values: settings files that are synced, shared, or rendered in a configuration UI, or teams that rotate keys without editing configuration. Use records when a plugin must keep credentials with no single environment variable — an authorization grant from a sign-in flow, or provider environment values — and when a configuration UI should list what a user is authorized for. A configuration UI describes presence and writability without reading values. An owner-opened key editor can use `readStored` to load the managed value without consulting environment fallbacks. If you only need one fixed environment variable, read that variable directly and skip the store.
+Use a credential store whenever configuration must stay free of secret values: settings files that are synced, shared, or rendered in a configuration UI, or teams that rotate keys without editing configuration. Use records when a plugin must keep credentials with no single environment variable — an authorization grant from a sign-in flow, or provider environment values — and when a configuration UI should list what a user is authorized for. A configuration UI can show whether a key or record is set, where it comes from, and whether you can change it — never the value itself. If you only need one fixed environment variable, read that variable directly and skip the store.
 
 ### Adding it to your composition
 
@@ -58,7 +58,7 @@ await ctx.credentials.set(ref, 'sk-…')                 // the stored value out
 await ctx.credentials.unset(ref)                       // no-op when absent; an environment fallback then applies again
 ```
 
-Store a key with `set`, remove it with `unset`, check its status with `describe`, and read the current value with `resolve` when an operation needs it. `readStored` returns only the managed value for editing; it returns `undefined` when none is stored, even when the environment supplies a value. `describe` reports whether the key is set, where it comes from, and whether you can write to it — it never returns the value.
+Store a key with `set`, remove it with `unset`, check its status with `describe`, and read the current value with `resolve` when an operation needs it. `describe` reports whether the key is set, where it comes from, and whether you can write to it — it never returns the value.
 
 ### Storing, updating, and removing records
 
@@ -94,7 +94,7 @@ Requests that need the key use its current stored value, so rotating the key tak
 
 - **A stored key outranks the launching environment** — while a value is stored, `DEEPSEEK_API_KEY=… dsh` (or a CI secret, a container `-e`) does not apply; `unset` the stored key to use the exported one.
 - **An empty value cannot be stored** — storing an empty string is refused; remove the key instead.
-- **Metadata and diagnostics exclude key values** — an owner-opened credential editor loads a managed key separately and masks it until revealed.
+- **Key values never appear in configuration UIs or diagnostics** — the UI shows whether a key is set, where it comes from, and whether you can change it; the value itself stays in the store.
 
 -----
 
diff --git a/packages/credentials/credentials/README.zh.md b/packages/credentials/credentials/README.zh.md
index 9ba6698cfc..c73f0c68bf 100644
--- a/packages/credentials/credentials/README.zh.md
+++ b/packages/credentials/credentials/README.zh.md
@@ -29,7 +29,7 @@ kind: "package-reference"
 
 ### 何时使用
 
-只要配置需要与机密值绝缘，就使用凭据存储：需要同步、共享或渲染进配置界面的设置文件，或希望在不改配置的情况下轮换密钥的团队。当插件必须保存没有单一环境变量的凭据——登录流程产生的授权 grant，或提供方环境值——并希望配置界面能列出用户获得了哪些授权时，请使用记录。配置界面无需读取值就能描述配置状态和可写性。所有者打开的密钥编辑器可以通过 `readStored` 加载提供方管理的值，不读取环境后备值。如果只需要一个固定的环境变量，直接读该变量即可，无需存储。
+只要配置需要与机密值绝缘，就使用凭据存储：需要同步、共享或渲染进配置界面的设置文件，或希望在不改配置的情况下轮换密钥的团队。当插件必须保存没有单一环境变量的凭据——登录流程产生的授权 grant，或提供方环境值——并希望配置界面能列出用户获得了哪些授权时，请使用记录。配置界面能显示某个密钥或记录是否已设置、来自哪里、能否修改——但绝不显示值本身。如果只需要一个固定的环境变量，直接读该变量即可，无需存储。
 
 ### 加入你的组合
 
@@ -58,7 +58,7 @@ await ctx.credentials.set(ref, 'sk-…')                 // the stored value out
 await ctx.credentials.unset(ref)                       // no-op when absent; an environment fallback then applies again
 ```
 
-用 `set` 存储密钥、用 `unset` 移除、用 `describe` 检查状态、在操作需要时用 `resolve` 读取当前值。`readStored` 仅返回用于编辑的托管值；未存储时返回 `undefined`，即使环境提供了值。`describe` 报告密钥是否已设置、来自哪里、能否写入——它绝不返回值。
+用 `set` 存储密钥、用 `unset` 移除、用 `describe` 检查状态、在操作需要时用 `resolve` 读取当前值。`describe` 报告密钥是否已设置、来自哪里、能否写入——它绝不返回值。
 
 ### 存储、更新与移除记录
 
@@ -94,7 +94,7 @@ apiKeyEnv: DEEPSEEK_API_KEY
 
 - **存储的密钥优先于启动环境**——存在存储值时，`DEEPSEEK_API_KEY=… dsh`（或 CI 机密、容器 `-e`）不会生效；要使用导出的密钥，请 `unset` 存储的密钥。
 - **空值无法存储**——存储空字符串会被拒绝；请改为移除密钥。
-- **元数据和诊断信息不包含密钥值**——所有者打开的凭据编辑器单独加载托管密钥，并在用户主动显示之前保持遮罩。
+- **密钥值绝不会出现在配置界面或诊断信息中**——界面只显示密钥是否已设置、来自哪里、能否修改；值本身留在存储中。
 
 -----
 
diff --git a/packages/credentials/credentials/src/index.ts b/packages/credentials/credentials/src/index.ts
index e676556f98..2e0b56931a 100644
--- a/packages/credentials/credentials/src/index.ts
+++ b/packages/credentials/credentials/src/index.ts
@@ -183,13 +183,6 @@ export abstract class CredentialProvider extends Service {
    */
   abstract resolve(ref: CredentialRef): Promise<ResolvedCredential | undefined>
 
-  /**
-   * Read the provider-managed value without consulting environment fallbacks.
-   * @param ref - the reference to read.
-   * @returns the stored secret, or undefined when no non-empty value is stored.
-   */
-  abstract readStored(ref: CredentialRef): Promise<string | undefined>
-
   /**
    * Describe one reference for configuration surfaces without exposing the
    * value.
diff --git a/packages/credentials/credentials/tests/memory.ts b/packages/credentials/credentials/tests/memory.ts
index e809bbcdba..9bdf31554f 100644
--- a/packages/credentials/credentials/tests/memory.ts
+++ b/packages/credentials/credentials/tests/memory.ts
@@ -40,11 +40,6 @@ export class MemoryCredentials extends CredentialProvider {
     })
   }
 
-  override readStored(ref: CredentialRef): Promise<string | undefined> {
-    const value = this.store.get(ref)
-    return Promise.resolve(value === '' ? undefined : value)
-  }
-
   override set(ref: CredentialRef, value: string): Promise<void> {
     if (value.length === 0) {
       return Promise.reject(new Error('memory credentials: an empty value cannot be stored; use unset'))
diff --git a/packages/experimental/liveshare/src/endpoint-classification.ts b/packages/experimental/liveshare/src/endpoint-classification.ts
index e71f116953..3c2fb1bfbd 100644
--- a/packages/experimental/liveshare/src/endpoint-classification.ts
+++ b/packages/experimental/liveshare/src/endpoint-classification.ts
@@ -105,7 +105,6 @@ export const VIEWER_ENDPOINT_CLASSES = {
   'session/updateQueue': 'owner-only', // owner edits queued input
   'session/workspacePathApplications': 'owner-only', // owner applies a Workspace path
   'credentials/describe': 'owner-only', // owner credentials; secrets never reach a reader
-  'credentials/readStored': 'owner-only', // owner credentials; secrets never reach a reader
   'credentials/set': 'owner-only', // owner credentials; secrets never reach a reader
   'credentials/unset': 'owner-only', // owner credentials; secrets never reach a reader
   'settings/describe': 'owner-only', // owner settings
diff --git a/packages/experimental/liveshare/tests/endpoint-classification.client.spec.ts b/packages/experimental/liveshare/tests/endpoint-classification.client.spec.ts
index 2796ec8634..ec47e869a5 100644
--- a/packages/experimental/liveshare/tests/endpoint-classification.client.spec.ts
+++ b/packages/experimental/liveshare/tests/endpoint-classification.client.spec.ts
@@ -15,7 +15,6 @@ const CLASSIFIED = Object.keys(VIEWER_ENDPOINT_CLASSES)
 describe('viewer endpoint classification', () => {
   it('exports the compiled classification without changing its keys', () => {
     expect(Object.keys(COMPLETE_VIEWER_ENDPOINT_CLASSES)).toEqual(CLASSIFIED)
-    expect(COMPLETE_VIEWER_ENDPOINT_CLASSES['credentials/readStored']).toBe('owner-only')
   })
 
   it('reports the endpoint a classification is missing', () => {
diff --git a/packages/extensions/tool-cordis/src/api-catalog.ts b/packages/extensions/tool-cordis/src/api-catalog.ts
index 227c397f7b..48ffeeb70f 100644
--- a/packages/extensions/tool-cordis/src/api-catalog.ts
+++ b/packages/extensions/tool-cordis/src/api-catalog.ts
@@ -842,12 +842,6 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
         parameters: [{ name: 'ref', description: 'the reference to resolve.' }],
         returns: 'the value and its source, or `undefined` while unconfigured.',
       },
-      {
-        signature: 'abstract readStored(ref: CredentialRef): Promise<string | undefined>',
-        description: 'Read the provider-managed value without consulting environment fallbacks.',
-        parameters: [{ name: 'ref', description: 'the reference to read.' }],
-        returns: 'the stored secret, or undefined when no non-empty value is stored.',
-      },
       {
         signature: 'abstract describe(ref: CredentialRef): Promise<CredentialInfo>',
         description: 'Describe one reference for configuration surfaces without exposing the value.',
@@ -898,7 +892,7 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
   {
     key: 'credentialsController',
     summary: 'Host service backing the generated `ctx.remote.credentials` namespace.',
-    description: 'Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Metadata reads exclude secrets; readStored returns only a provider-managed value for an explicitly opened editor.',
+    description: 'Host service backing the generated `ctx.remote.credentials` namespace. It carries every wire obligation the credential seam itself does not: the batch fan-out bound, the field-by-field view projection, the reference-grammar guard, and the refusal mapping. Secret values cross in one direction only — no method here returns one.',
     methods: [
       {
         signature: '@Remote async describe(refs: string[]): Promise<Record<string, CredentialInfo>>',
@@ -907,16 +901,9 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
         returns: 'one view per requested name, keyed by that name.',
         throws: ['RemoteError when the request is invalid or no credential provider is mounted.'],
       },
-      {
-        signature: '@Remote async readStored(ref: string): Promise<string | undefined>',
-        description: 'Read one stored value for a credential editor, excluding environment fallbacks.',
-        parameters: [{ name: 'ref', description: 'reference name to read.' }],
-        returns: 'the stored secret, or undefined when the provider stores none.',
-        throws: ['RemoteError for a non-owner Remote caller, an invalid reference, or an absent provider.'],
-      },
       {
         signature: '@Remote async set(ref: string, value: string): Promise<void>',
-        description: 'Store one value from a configuration surface.',
+        description: 'Store one value from a configuration surface. The value crosses the wire in this direction only: no read path returns it.',
         parameters: [{ name: 'ref', description: 'reference name to store under.' }, { name: 'value', description: 'the non-empty secret value.' }],
         throws: ['RemoteError when the request is invalid, no provider is mounted, or the provider refuses the write.'],
       },
diff --git a/scripts/gen-doc-graphs.ts b/scripts/gen-doc-graphs.ts
index 5152091c77..ec22ea680d 100644
--- a/scripts/gen-doc-graphs.ts
+++ b/scripts/gen-doc-graphs.ts
@@ -487,7 +487,7 @@ const SERVICE_ROLES: ServiceRole[] = [
     mode: 'seam',
     implementations: ['credentials-local'],
     consumers: ['api-settings-controller', 'llm-deepseek', 'llm-pi-ai'],
-    note: 'Configuration carries references to secrets; providers own the values. Consumers resolve per operation, so a rotated credential reaches the very next request; the settings controller exposes value-free metadata, writes, and owner-only reads of stored keys.',
+    note: 'Configuration carries references to secrets; providers own the values. Consumers resolve per operation, so a rotated credential reaches the very next request; the settings controller exposes value-free views and write-only storage.',
   },
   {
     key: 'deepseekAccount',
diff --git a/tsconfig.host.json b/tsconfig.host.json
index 33fdb36aa4..761e67e4b7 100644
--- a/tsconfig.host.json
+++ b/tsconfig.host.json
@@ -8,7 +8,6 @@
     "rewriteRelativeImportExtensions": false
   },
   "include": [
-    "apps/web/tests/credential-editor.e2e.ts",
     "apps/web/tests/sidebar-drawer.e2e.ts",
     "apps/web/tests/creation-recommendations.e2e.ts",
     "apps/web/tests/plugin-recommendations.e2e.ts",