@awiki/dsh-plugin 0.3.0-rc.1 → 0.3.0

package/README.md

@@ -23,12 +23,12 @@ TypeScript SDK `identity.json`; create a new Rust-backed identity after upgradin
 - Direct-message and existing-group conversation lists, unread counts, latest-message previews, and persisted display names. Core SQLite remains the persistent source of truth: the Host joins persisted peer profiles onto Direct roster rows, while the browser keeps the active identity's last trustworthy Direct profile and group title. Sparse polling identifiers therefore cannot overwrite a resolved display name or real group title. After an existing Handle is recovered, the Host synchronizes account projections before asking Core to restore old group memberships; pending or blocked groups expose a retryable status without disabling Direct messages or other groups. Opening a conversation renders the committed local timeline first, hydrates group sender labels from the Core display-profile cache, reconciles remote history and Direct profile data in the background, and keeps local messages visible if refresh fails. A failed background roster poll also leaves the usable local view quiet; explicit loads still surface their errors. This local-first path covers the newest projected page; loading older messages still requires the remote history service. Scrolling up reveals a latest-message control that counts newer arrivals without interrupting reading. A conversation is marked read only after its newest rendered message reaches the visible bottom.
 - Create a private-discovery, open-join, transport-protected group from the Web UI with a name and 1–50 initial Handle or DID members. The group opens immediately; members that could not be added are reported without hiding the successfully created group.
 - Text messages plus one attachment per message, with Enter-to-send, Shift+Enter line breaks, optimistic sending bubbles reconciled by an exact client message ID, image previews, and SHA verification. Verified image bytes use three bounded layers: a browser-runtime LRU makes conversation remounts immediate, identity-scoped IndexedDB survives full page reloads without a Host call, and the private Host disk cache survives browser-storage loss and Harness restarts. Clear Local Data removes all three layers.
-- A draggable circular launcher, adaptive popup placement, dark mode, and remembered active conversation.
+- A draggable circular launcher that defaults to the lower-left sidebar area, adaptive popup placement, dark mode, and remembered active conversation.
 - User-triggered AI summaries for up to 50 recent or unread messages, kept only in runtime memory with explicit stale, retry, copy, and source-navigation states.
 - OTP identity access keeps the verification form visible and disables resend with a visible server-directed cooldown countdown. Handle classification happens before OTP delivery, so each attempt sends exactly one purpose-correct registration or recovery code.
 - When the separate `@awiki/dsh-model-proxy` package is installed, an AWiki-hosted DeepSeek choice appears before the official API-key onboarding step only when Harness has no usable model provider, with an explicit opt-in and an unchanged API-key escape path. New sessions do not show AWiki model or payment prompts after the official or another provider is usable.
-- The optional model-proxy package owns the Host-only short-token flow registering `awiki-deepseek` with `deepseek-v4-flash` and `deepseek-v4-pro`; Flash is recommended and credentials never enter the Browser.
-- Advanced AWiki settings are always available. Account & Recharge and Usage tabs appear only when `@awiki/dsh-model-proxy` is loaded, exposing explicit model state and calculated versus charged usage.
+- The optional model-proxy package owns the Host short-token flow and every model-hosting Browser surface: onboarding plus Settings → Quick Recharge with Account & Recharge and Usage tabs. It registers `awiki-deepseek` with `deepseek-v4-flash` and `deepseek-v4-pro`; Flash is recommended and credentials never enter the Browser.
+- AWiki identity, domain, and local-data settings remain in the main package. Installing only the main package does not register model opt-in, recharge, usage, or model onboarding UI.
 - A typed second confirmation in the Settings danger zone before permanently clearing local AWiki identity, key, token, registration-draft, and message-index state.
 - Five messaging Agent tools: identity status, conversations, history, approved text send, and approved attachment send.
 - Five on-demand mail Agent tools: mailbox account, inbox, plain-text read, approved mark-read, and approved plain-text send.
@@ -65,7 +65,7 @@ dsh plugin --profile web add @awiki/dsh-plugin@latest
 ```
 
 The main package no longer installs the AWiki-hosted model provider. Add the
-independently versioned Host-only package only when that capability is wanted:
+independently versioned Model Proxy package only when that capability is wanted:
 
 ```bash
 dsh plugin --profile web add @awiki/dsh-model-proxy@latest
@@ -74,7 +74,7 @@ dsh plugin --profile web add @awiki/dsh-model-proxy@latest
 The profile installer both adds the package and activates its bundle layer. A
 plain `npm i @awiki/dsh-plugin` in a DSH project only installs the package; it
 does not activate the bundle, so the profile command remains the recommended
-installation path. This release line targets the `0.1.0-rc.7` package family
+installation path. This release line targets the `0.1.0-rc.8` package family
 and pins every direct Host peer exactly, preventing npm from mixing prerelease
 families in a DSH root dependency tree.
 
@@ -129,10 +129,11 @@ The former runtime import `@awiki/dsh-plugin/model-proxy` has been removed. Use
 model onboarding, account/recharge, and usage entry points hidden while leaving
 AWiki Advanced settings functional.
 
-This RC split starts with `@awiki/dsh-plugin@0.3.0-rc.1` and
-`@awiki/dsh-model-proxy@0.1.0-rc.1`. The optional package requires main `^0.3.0-rc.1`, so
-it cannot be combined with a `0.2.x` main package that still inserted the old
-runtime by default.
+The stable split-package line uses `@awiki/dsh-plugin@0.3.0`; the standalone
+`@awiki/dsh-model-proxy@0.1.0` package requires main `^0.3.0`. This lower
+bound is the first main package that provides the shared `awikiClient` Browser
+bridge, and it also prevents combining the standalone package with a `0.2.x`
+main package that still inserted the old runtime by default.
 
 The optional package owns these configuration variables:
 
@@ -143,7 +144,7 @@ The optional package owns these configuration variables:
 | `DSH_AWIKI_MODEL_MAX_TOKENS` | Maximum AWiki-hosted DeepSeek output | `8192` |
 | `DSH_AWIKI_MODEL_TOKEN_REFRESH_SKEW_SECONDS` | Early short-token refresh interval | `60` |
 
-AWiki-hosted DeepSeek is disabled by default. Only an explicit choice in onboarding or Settings → AWiki →
+AWiki-hosted DeepSeek is disabled by default. Only an explicit choice in onboarding or Settings → Quick Recharge →
 Account & Recharge registers the `awiki-deepseek` route and selects Flash. Disabling restores the
 previous provider, model, and reasoning effort. A successful recharge refreshes the balance but
 never enables AWiki or changes the selected model automatically.
@@ -153,10 +154,10 @@ disabled it reports the development restriction without blocking an account whos
 `model_access_available` flag is true. Development bypass displays calculated and charged amounts
 separately, with zero charged; it does not invent a price when no price table is active.
 Public recharge creation also has a client release gate in
-`src/client/recharge-availability.ts`. The gate is currently closed: recharge controls remain
-visible, but attempting to recharge shows a localized coming-soon dialog and sends no order RPC.
-Open that single gate only after the production collection account is ready; the existing payment,
-polling, and cancellation flows remain intact behind it.
+`packages/dsh-model-proxy/src/client/recharge-availability.ts`. The current stable line ships that gate open. Order creation still
+requires the account response to report `payments_available=true`; otherwise the UI reports that
+payments are unavailable and sends no order RPC. The gate remains a single emergency rollback for
+the existing payment, polling, and cancellation flows.
 Strict billing keeps the internal billing-mode label out of the normal account summary. When the
 backend reports `model_access_reason=insufficient_balance`, recharge becomes the primary action and
 model enablement is withheld until credit is available. The Host restores the newest pending order
@@ -168,7 +169,7 @@ failure leaves the existing payment action available, while a payment that wins
 the credited account instead of being reported as cancelled.
 
 The default Handle provider domain is `awiki.ai`. A local user can override it
-from Settings → AWiki → Advanced; DSH persists that choice in its settings document and
+from Settings → AWiki; DSH persists that choice in its settings document and
 applies it after the next Harness restart. The setting affects future identity
 registration and completion of short Handles. It does not rewrite an already
 registered DID or Handle.
@@ -178,7 +179,7 @@ accepts only from loopback. This keeps an independently installed `@awiki/dsh-pl
 compatible with stock DSH releases without adding AWiki to a core settings
 allowlist; non-local browser origins cannot read or mutate the Host setting.
 
-Settings → AWiki → Advanced → Danger zone clears only this installation's local AWiki
+Settings → AWiki → Danger zone clears only this installation's local AWiki
 state; it does not delete the server-side account or Handle. The dialog requires
 the displayed confirmation phrase. After success, the local DID keys, access
 token, registration draft, conversations, attachment index, and cached image previews cannot be

package/README.zh.md

@@ -2,7 +2,7 @@
 
 为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 提供 AWiki
 身份与消息能力。一个包同时包含 Host Service、Rust SDK Provider、Agent 工具，
-以及带可拖动 AWiki Me 悬浮入口的 Web 客户端。
+以及带可拖动 AWiki Me 悬浮入口的 Web 客户端；入口默认位于 DSH 左下角侧栏区域。
 
 Rust SDK 独占管理配置的 `stateRoot` 下的身份、SecretVault、数据库、缓存和元数据。
 本版本采用干净切换，不导入旧 TypeScript SDK 的 `identity.json`；升级后需创建新的
@@ -20,8 +20,8 @@ Rust 身份。
 - 用户点击后才生成的 AI 对话总结：最多处理 50 条最近或未读消息，按会话保留本次运行期缓存，并支持过期提示、重试、复制与跳转原消息。
 - OTP 身份入口会保留验证码输入表单，并按服务端返回的冷却时间显示重发倒计时、禁用提前重发；Handle 分流发生在发送前，因此每次只会发送一个用途正确的注册或恢复验证码。
 - 安装独立的 `@awiki/dsh-model-proxy` 后，仅在 Harness 没有任何可用模型时，首次引导才会在官方 API Key 步骤前提供 AWiki 托管模型选项；用户可以明确启用，也可以跳过并继续原版 API Key 流程。已经配置官方或其他 Provider 时，新会话不会显示 AWiki 模型或支付提示。
-- 可选 Model Proxy 包独占 Host 内部短期 Token 与 `awiki-deepseek` Provider，提供 `deepseek-v4-flash` 和 `deepseek-v4-pro`，默认推荐 Flash；Token 不进入 Browser。
-- “高级设置”始终可用；只有加载 `@awiki/dsh-model-proxy` 后才显示“账户与充值”和“用量明细”，用于显式启停模型并查看计算费用和实际扣费。
+- 可选 Model Proxy 包独占 Host 内部短期 Token 和全部模型托管界面：首次引导，以及“设置 → 快速充值”中的“账户与充值”“用量明细”。它提供 `deepseek-v4-flash` 和 `deepseek-v4-pro`，默认推荐 Flash；Token 不进入 Browser。
+- AWiki 主包只保留身份、域名和本地数据设置。只安装主包时，不会注册模型启停、充值、用量或模型首次引导界面。
 - 在设置页危险区域中，经输入确认词的二次确认后，永久清空本机 AWiki 身份、密钥、令牌、注册草稿和消息索引。
 - 五个消息 Agent 工具：身份、会话、历史、需审批的文本发送和需审批的附件发送。
 - 五个按需邮件 Agent 工具：邮箱账户、收件箱、纯文本读取、需审批的标记已读和需审批的纯文本发送。
@@ -55,7 +55,7 @@ dsh plugin --profile web add @awiki/dsh-plugin@latest
 ```
 
 主包不再默认安装 AWiki 托管模型 Provider。仅在需要该能力时，另行安装独立版本的
-Host-only 包：
+Model Proxy 包：
 
 ```bash
 dsh plugin --profile web add @awiki/dsh-model-proxy@latest
@@ -63,7 +63,7 @@ dsh plugin --profile web add @awiki/dsh-model-proxy@latest
 
 Profile 安装器会同时添加包并激活 bundle layer。在 DSH 项目根目录执行普通的
 `npm i @awiki/dsh-plugin` 只会安装依赖，不会激活 bundle，因此仍推荐使用上述
-Profile 命令。本发布线面向 `0.1.0-rc.7` 包族，并精确锁定所有直接 Host peer，
+Profile 命令。本发布线面向 `0.1.0-rc.8` 包族，并精确锁定所有直接 Host peer，
 防止 npm 在 DSH 根依赖树中混用不同的预发布版本族。
 
 从 `0.2.0-rc.4` 起，`@awiki/dsh-plugin` 是唯一规范包名。原
@@ -112,9 +112,10 @@ AWiki Host Service、Rust SDK Provider 和 Summary Provider；浏览器客户端
 `@awiki/dsh-plugin/model-proxy-contract`。只安装主包时，模型首次引导、账户/充值和
 用量入口保持隐藏，高级 AWiki 设置仍可正常使用。
 
-本次 RC 拆分从 `@awiki/dsh-plugin@0.3.0-rc.1` 与
-`@awiki/dsh-model-proxy@0.1.0-rc.1` 开始。可选包 peer 固定为主包 `^0.3.0-rc.1`，避免与仍会
-默认插入旧 runtime 的 `0.2.x` 主包组合后加载两个 Model Proxy。
+正式拆包版本为 `@awiki/dsh-plugin@0.3.0`；独立的
+`@awiki/dsh-model-proxy@0.1.0` 要求主包 `^0.3.0`。这是首个提供共享
+`awikiClient` Browser bridge 的主包版本，同时避免与仍会默认插入旧 runtime
+的 `0.2.x` 主包组合后加载两个 Model Proxy。
 
 以下环境变量归可选包所有：
 
@@ -125,13 +126,16 @@ AWiki Host Service、Rust SDK Provider 和 Summary Provider；浏览器客户端
 | `DSH_AWIKI_MODEL_MAX_TOKENS` | AWiki 托管模型单次最大输出 | `8192` |
 | `DSH_AWIKI_MODEL_TOKEN_REFRESH_SKEW_SECONDS` | 短期 Token 提前刷新秒数 | `60` |
 
-插件默认关闭 AWiki 托管模型。用户在首次引导或“设置 → AWiki → 账户与充值”明确启用后，
+插件默认关闭 AWiki 托管模型。用户在首次引导或“设置 → 快速充值 → 账户与充值”明确启用后，
 才注册 `awiki-deepseek` 路由并把 Flash 设为默认模型；停用时会恢复启用前的默认 Provider、
 模型和 reasoning effort。充值到账只刷新余额，不会自动启用 AWiki 或切换当前模型。
 
 设置页同时支持支付跳转和通企付 `ALI_QR` 二维码。支付功能关闭时会显示“开发环境暂未开放
 充值”，但只要账户响应中的 `model_access_available` 为真，仍可启用模型。开发绕过模式会
 展示计算费用和实际扣费的区别，实际扣费固定为 0；未激活价表时不显示臆造价格。
+客户端充值发布门禁位于 `packages/dsh-model-proxy/src/client/recharge-availability.ts`，当前正式版中已打开。创建订单仍要求账户响应返回
+`payments_available=true`；否则界面会提示充值不可用且不发送订单 RPC。该门禁继续作为
+现有支付、轮询和取消流程的紧急回退开关。
 正式计费时，账户摘要不会显示内部的“计费模式”项。后端返回
 `model_access_reason=insufficient_balance` 时，界面会把充值作为当前主要操作，余额到账前
 不显示误导性的启用按钮。Host 会在每次重新打开设置时恢复最新的待支付订单和支付入口，
@@ -140,7 +144,7 @@ AWiki Host Service、Rust SDK Provider 和 Summary Provider；浏览器客户端
 关闭支付平台订单，再恢复金额输入框，并且不会自动创建替代订单。关闭失败时原支付入口继续
 有效；若支付在关闭竞态中先完成，界面会刷新已入账账户，而不会误报订单已取消。
 
-Handle 提供方的默认域名为 `awiki.ai`。本机用户可以在“设置 → AWiki → 高级设置”中覆盖该值；
+Handle 提供方的默认域名为 `awiki.ai`。本机用户可以在“设置 → AWiki”中覆盖该值；
 DSH 会把选择写入自己的设置文件，并在下次重启 Harness 后生效。该设置影响后续
 身份注册和短 Handle 的域名补全，不会改写已经注册的 DID 或 Handle。
 
@@ -148,7 +152,7 @@ DSH 会把选择写入自己的设置文件，并在下次重启 Harness 后生
 因此独立安装的 `@awiki/dsh-plugin` 无需修改 DSH 核心设置白名单；非本机浏览器来源不能
 读取或修改这项 Host 设置。
 
-“设置 → AWiki → 高级设置 → 危险区域”中的清空操作只删除此安装的本地 AWiki 状态，不删除
+“设置 → AWiki → 危险区域”中的清空操作只删除此安装的本地 AWiki 状态，不删除
 服务端账号或 Handle。执行前必须在确认弹窗中输入指定确认词；成功后本机 DID 私钥、
 访问令牌、注册草稿、会话记录、附件索引和图片预览缓存无法通过应用恢复，原身份也可能无法再由本机使用。
 

package/THIRD_PARTY_NOTICES.md

@@ -19,10 +19,3 @@ manager as a normal exact-version runtime dependency.
 The embedded launcher artwork in `src/client/assets.ts` comes from the AWiki Me
 application maintained by the same project team. Its use here is limited to
 identifying the AWiki integration.
-
-## QR Code generation
-
-The browser bundle uses `qrcode@1.5.4` (node-qrcode) to render TongQiFu
-`ALI_QR` payment content as an image. The package and its bundled browser
-dependencies are distributed under their respective MIT licenses; their
-license text is retained by the package manager and source distribution.