@awiki/dsh-plugin 0.2.1 → 0.2.3

package/README.md

@@ -19,7 +19,7 @@ TypeScript SDK `identity.json`; create a new Rust-backed identity after upgradin
 - Register one deployment-level AWiki identity from the Web UI.
 - Open the top-left AWiki account menu to sign out locally without deleting the encrypted identity or message database; **Resume** restores the same DID and Handle, including across DSH restarts.
 - Reuse that identity across the root Agent and its subagents.
-- Direct-message and existing-group conversation lists, unread counts, latest-message previews, and persisted display names. Opening a conversation keeps loading feedback inside the history and lands on the newest message; scrolling up reveals a latest-message control that counts newer arrivals without interrupting reading.
+- Direct-message and existing-group conversation lists, unread counts, latest-message previews, and persisted display names. Opening a conversation keeps loading feedback inside the history and lands on the newest message; scrolling up reveals a latest-message control that counts newer arrivals without interrupting reading. A conversation is marked read only after its newest rendered message reaches the visible bottom.
 - Text messages plus one attachment per message, with Enter-to-send, Shift+Enter line breaks, optimistic sending bubbles, image previews, and SHA verification.
 - A draggable circular launcher, adaptive popup placement, dark mode, and remembered active conversation.
 - User-triggered AI summaries for up to 50 recent or unread messages, kept only in runtime memory with explicit stale, retry, copy, and source-navigation states.
@@ -36,9 +36,17 @@ group administration, realtime push, or multiple attachments in one message.
 Install the official public npm package:
 
 ```bash
-pnpm add @awiki/dsh-plugin@next
+dsh plugin --profile web add @awiki/dsh-plugin@latest
 ```
 
+The profile installer both adds the package and activates its bundle layer. Do
+not add the plugin to the DSH CLI project root with npm or pnpm: profile-managed
+plugins resolve Host packages from the running Harness installation. This
+release line targets the `0.1.0-rc.6` package family and pins those Host peer
+ranges exactly. The Harness profile sets `autoInstallPeers: false`, so an
+external plugin never installs an `rc.7` Host package into an `rc.6`
+deployment.
+
 `@awiki/dsh-plugin` is the canonical package identity starting with
 `0.2.0-rc.4`. The former `@awiki/dsh` registry entry was unpublished and is
 not an installation source for this release line.
@@ -107,6 +115,37 @@ stale, without another model call, when newer messages arrive. The replaceable
 for one direct `ctx.llm.stream` request; it does not create an Agent or write an
 Agent session.
 
+## External HTTP ANP authentication
+
+Trusted same-process DSH Host plugins can authenticate an externally transported HTTP request
+without handling ANP signatures, access tokens, challenges, or retries themselves:
+
+```ts
+const response = await ctx.awiki.externalHttpAuth.dispatch(
+  new Request('https://api.example.com/orders', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ productId: '123' }),
+  }),
+  request => fetch(request),
+)
+```
+
+The callback remains the only network transport owner. AWiki buffers at most 4 MiB of exact body
+bytes, forces manual redirects, asks Rust to select an origin-scoped in-memory Bearer token or a
+fresh HTTP Message Signature, observes only authentication response headers, and invokes the
+transport at most twice for one bounded `401` authentication retry. The final `Response` body is
+untouched. Transport rejections preserve their original error identity.
+
+The unsigned input must not contain `Authorization`, `Signature-Input`, `Signature`, or
+`Content-Digest`. Production targets require HTTPS; test-only loopback HTTP uses the existing
+`allowInsecureLoopbackForTesting` deployment gate. Tokens come only from successful
+`Authentication-Info` responses, are scoped to the current identity/signing key/origin, and are
+not persisted across Harness restarts.
+
+`externalHttpAuth` is deliberately absent from Browser Remote, Agent tools, Typert Remote, and the
+Web client bundle. Exposing it across an untrusted boundary would create a signing oracle.
+
 ## Development
 
 Requirements: Node.js 22.19+ (or 24+) and pnpm 11.7.
@@ -117,7 +156,7 @@ pnpm run verify
 pnpm pack --dry-run
 ```
 
-The production Host loads the exact `@awiki/im-core-node@0.1.2` runtime package;
+The production Host loads the exact `@awiki/im-core-node@0.1.3` runtime package;
 the platform-specific native addon is selected through its optional dependencies
 and remains external to the JavaScript bundle. Consumers do not need Rust or an
 `awiki-cli-rs2` checkout. See `THIRD_PARTY_NOTICES.md` for provenance and

package/README.zh.md

@@ -13,7 +13,7 @@ Rust 身份。
 - 在 Web UI 中注册一个部署级 AWiki 身份，根 Agent 与子 Agent 共用。
 - 点击 AWiki 面板左上角图标可打开账户菜单；普通退出只锁定本机会话，不删除加密身份或消息数据库，重新进入及重启 DSH 后仍恢复同一个 DID 和 Handle。
 - 注册失败时保留手机号、Handle、验证码和本机待注册密钥；注册未开放、验证码状态失效和提交冲突会给出对应的安全处理提示。
-- 私聊和已有群聊列表、未读角标、最新消息预览、时间更新与昵称持久化。打开会话时在消息区内显示加载状态并落到最新消息；向上阅读时显示下滑箭头，新消息到达后在同一控件中累计数量且不打断阅读位置。
+- 私聊和已有群聊列表、未读角标、最新消息预览、时间更新与昵称持久化。打开会话时在消息区内显示加载状态并落到最新消息；向上阅读时显示下滑箭头，新消息到达后在同一控件中累计数量且不打断阅读位置。只有最新一条已渲染消息到达可视区域底部后，当前会话才会自动标记为已读。
 - 文本和单附件消息；Enter 发送、Shift+Enter 换行，发送中立即显示带 loading 动画的乐观气泡，并支持图片预览、附件说明与 SHA 校验。
 - 圆形可拖动入口、自适应四角弹窗、深色模式和当前会话记忆。
 - 用户点击后才生成的 AI 对话总结：最多处理 50 条最近或未读消息，按会话保留本次运行期缓存，并支持过期提示、重试、复制与跳转原消息。
@@ -29,9 +29,15 @@ Rust 身份。
 安装公开发布的官方 npm 包：
 
 ```bash
-pnpm add @awiki/dsh-plugin@next
+dsh plugin --profile web add @awiki/dsh-plugin@latest
 ```
 
+Profile 安装器会同时添加包并激活 bundle layer。不要在 DSH CLI 项目根目录用
+npm 或 pnpm 添加插件；Profile 管理的插件会从当前 Harness 安装解析 Host 包。
+本发布线面向 `0.1.0-rc.6` 包族，并精确锁定这些 Host peer。Harness Profile
+设置了 `autoInstallPeers: false`，因此外部插件不会在 `rc.6` 部署中自动混入
+`rc.7` Host 包。
+
 从 `0.2.0-rc.4` 起，`@awiki/dsh-plugin` 是唯一规范包名。原
 `@awiki/dsh` registry 条目已被 unpublish，不再作为本发布线的安装来源。
 
@@ -87,6 +93,35 @@ MIME、大小和说明，不发送文件二进制；序列化后的对话内容
 调用模型。可替换的 `@awiki/dsh-plugin/summary-provider` 使用 Harness 当前默认 provider/model
 执行一次直接的 `ctx.llm.stream`，不会创建 Agent，也不会写入 Agent session。
 
+## 外部 HTTP ANP 身份认证
+
+可信的 DSH Host 同进程插件可以认证由外部 transport 发送的 HTTP 请求，而无需自行处理
+ANP 签名、Access Token、challenge 或重试：
+
+```ts
+const response = await ctx.awiki.externalHttpAuth.dispatch(
+  new Request('https://api.example.com/orders', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ productId: '123' }),
+  }),
+  request => fetch(request),
+)
+```
+
+回调函数仍是唯一网络 transport owner。AWiki 最多缓冲 4 MiB 精确 body bytes，强制 manual
+redirect，由 Rust 自动选择当前 origin 的进程内 Bearer Token 或新 HTTP Message Signature，
+只观察认证相关响应头，并且每个逻辑请求最多调用 transport 两次，第二次只能是一次受限的
+`401` 认证重试。最终 `Response` 正文不会被读取；transport rejection 保留原始错误对象。
+
+输入请求不得自行携带 `Authorization`、`Signature-Input`、`Signature` 或
+`Content-Digest`。生产目标必须使用 HTTPS；测试用 loopback HTTP 复用现有
+`allowInsecureLoopbackForTesting` 部署开关。Token 只接受成功响应中的
+`Authentication-Info`，并按当前 identity、signing key 和 origin 隔离；Harness 重启后不保留。
+
+`externalHttpAuth` 不进入 Browser Remote、Agent tools、Typert Remote 或 Web client bundle，
+避免形成跨不可信边界的签名 oracle。
+
 ## 开发与验证
 
 需要 Node.js 22.19+（或 24+）以及 pnpm 11.7：
@@ -97,7 +132,7 @@ pnpm run verify
 pnpm pack --dry-run
 ```
 
-生产 Host 加载固定版本 `@awiki/im-core-node@0.1.2`；平台原生 addon 由它的
+生产 Host 加载固定版本 `@awiki/im-core-node@0.1.3`；平台原生 addon 由它的
 optional dependencies 选择，并保持在 JavaScript bundle 外。使用者无需安装 Rust，
 也无需检出 `awiki-cli-rs2`。来源与许可证见 `THIRD_PARTY_NOTICES.md`。
 

package/THIRD_PARTY_NOTICES.md

@@ -2,7 +2,7 @@
 
 ## AWiki Rust IM Core Node SDK
 
-`@awiki/im-core-node@0.1.2` and its target-specific optional package provide the
+`@awiki/im-core-node@0.1.3` and its target-specific optional package provide the
 Rust IM Core runtime used by the Host provider. These packages are distributed
 under AGPL-3.0-only. Each package carries its own `LICENSE`, `NOTICE.md`,
 `SOURCE.md`, CycloneDX SBOM, checksums, and build provenance. The corresponding

package/lib/client.js

@@ -5451,6 +5451,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			generation = 0;
 			disposed = false;
 			polling = false;
+			markReadInFlight = /* @__PURE__ */ new Map();
 			unreadAtOpen = /* @__PURE__ */ new Map();
 			summaryBaselines = /* @__PURE__ */ new Map();
 			/** @param remote - generated Host Remote namespace. */
@@ -5560,6 +5561,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				if (this.timer !== void 0) clearInterval(this.timer);
 				this.timer = void 0;
 				this.polling = false;
+				this.markReadInFlight.clear();
 			}
 			/**
 			* Request one phone verification challenge.
@@ -5716,24 +5718,51 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					})
 				});
 				if (!loaded.ok) return loaded;
-				const marked = await call(() => this.remote.markConversationRead({ conversationId }));
-				if (!marked.ok) return this.fail(marked.error);
-				if (!this.current(generation) || this.view.selectedConversationId !== conversationId) return {
+				return {
 					ok: true,
 					value: void 0
 				};
-				this.publish({
-					...this.view,
-					conversations: this.view.conversations.map((conversation) => conversation.id === conversationId ? {
-						...conversation,
-						unreadCount: 0
-					} : conversation),
-					error: null
-				});
-				return {
+			}
+			/**
+			* Mark the selected conversation read after the UI proves its newest message is visible.
+			* Repeated scroll and layout notifications share one Host request, while a failed
+			* background attempt keeps the unread badge so reaching the bottom can retry.
+			*/
+			async markSelectedConversationRead() {
+				if (this.disposed) return {
+					ok: false,
+					error: "AWiki 插件已卸载"
+				};
+				const conversation = this.selectedConversation();
+				if (conversation === void 0 || (conversation.unreadCount ?? 0) <= 0) return {
 					ok: true,
 					value: void 0
 				};
+				const existing = this.markReadInFlight.get(conversation.id);
+				if (existing !== void 0) return existing;
+				const conversationId = conversation.id;
+				const generation = this.generation;
+				const operation = (async () => {
+					const result = await call(() => this.remote.markConversationRead({ conversationId }));
+					if (!result.ok) return result;
+					if (this.current(generation)) this.publish({
+						...this.view,
+						conversations: this.view.conversations.map((current) => current.id === conversationId ? {
+							...current,
+							unreadCount: 0
+						} : current)
+					});
+					return {
+						ok: true,
+						value: void 0
+					};
+				})();
+				this.markReadInFlight.set(conversationId, operation);
+				try {
+					return await operation;
+				} finally {
+					if (this.markReadInFlight.get(conversationId) === operation) this.markReadInFlight.delete(conversationId);
+				}
 			}
 			/**
 			* Load one older history page before the currently rendered messages.
@@ -6991,6 +7020,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const summaryPanelId = (0, react.useId)();
 			selectedConversationId.current = view.selectedConversationId;
 			const visibleSendingDraft = sendingDraft?.conversationId === view.selectedConversationId ? sendingDraft : null;
+			const markSelectedConversationReadAtBottom = () => {
+				const node = history.current;
+				const newestRendered = view.messages.at(-1);
+				if (node === null || selected === void 0 || newestRendered === void 0 || (selected.unreadCount ?? 0) <= 0 || view.pending === "加载消息" || selected.lastMessageAt !== void 0 && newestRendered.sentAt < selected.lastMessageAt || node.scrollHeight - node.scrollTop - node.clientHeight > HISTORY_BOTTOM_THRESHOLD) return;
+				props.markSelectedConversationRead();
+			};
 			const scrollHistoryToLatest = (smooth) => {
 				const node = history.current;
 				if (node === null) return;
@@ -7003,6 +7038,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				historyPinnedToBottom.current = true;
 				setHistoryAwayFromBottom(false);
 				setUnseenMessageCount(0);
+				if (!smooth || reduceMotion || typeof node.scrollTo !== "function") markSelectedConversationReadAtBottom();
 			};
 			const syncHistoryPosition = () => {
 				const node = history.current;
@@ -7010,8 +7046,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				const atBottom = node.scrollHeight - node.scrollTop - node.clientHeight <= HISTORY_BOTTOM_THRESHOLD;
 				historyPinnedToBottom.current = atBottom;
 				setHistoryAwayFromBottom(!atBottom);
-				if (atBottom) setUnseenMessageCount(0);
+				if (atBottom) {
+					setUnseenMessageCount(0);
+					markSelectedConversationReadAtBottom();
+				}
 			};
+			(0, react.useLayoutEffect)(() => {
+				markSelectedConversationReadAtBottom();
+			}, [
+				selected?.id,
+				selected?.lastMessageAt,
+				selected?.unreadCount,
+				view.messages,
+				view.pending
+			]);
 			(0, react.useLayoutEffect)(() => {
 				const conversationId = view.selectedConversationId;
 				if (conversationId !== previousConversationId.current) {
@@ -7036,7 +7084,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						messageId: view.messages.at(-1)?.id ?? null
 					};
 					scrollHistoryToLatest(false);
-					if (pendingInitialImages.current.size === 0) conversationAwaitingBottom.current = null;
+					if (pendingInitialImages.current.size === 0) {
+						conversationAwaitingBottom.current = null;
+						markSelectedConversationReadAtBottom();
+					}
 					return;
 				}
 				const previous = previousMessageTail.current;
@@ -7067,6 +7118,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				if (!pendingInitialImages.current.delete(messageId)) return;
 				if (history.current !== null) scrollHistoryToLatest(false);
 				if (pendingInitialImages.current.size === 0) conversationAwaitingBottom.current = null;
+				if (pendingInitialImages.current.size === 0) markSelectedConversationReadAtBottom();
 			};
 			const viewSummarySource = (messageId) => {
 				if (selected === void 0) return;
@@ -8522,6 +8574,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							loadMoreConversations: () => controller.loadMoreConversations(),
 							startDirectChat: (handle) => controller.startDirectChat(handle),
 							selectConversation: (conversationId) => controller.selectConversation(conversationId),
+							markSelectedConversationRead: () => controller.markSelectedConversationRead(),
 							loadOlderHistory: () => controller.loadOlderHistory(),
 							summarizeConversation: () => controller.summarizeConversation(),
 							setSummaryCollapsed: (conversationId, collapsed) => {