@goodandready/dsh-clinebot 0.3.21 → 0.3.23

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to `@goodandready/dsh-clinebot` will be documented in this f
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.23] - 2026-09-24
+
+### Fixed
+- **React Error #185 Infinite Loop Fix (#74 / GitHub #6)**: Restored stable reference constant `SNAPSHOT_READY` in `SettingsPage.getSnapshot` for `useSyncExternalStore`. Returning an inline object literal caused `Object.is` mismatch on every render, triggering an infinite update depth loop (`Maximum update depth exceeded`). The snapshot fallback now returns frozen `SNAPSHOT_READY`, guaranteeing reference stability while keeping the page unblocked in standalone mode.
+- The settings page binds `configForms.get('dsh-clinebot')` on DSH 0.1.7. The removed `settingsScope` and `lanSettings` services are no longer consulted, so the plugin configuration page can render after install.
+- `GET /dsh-clinebot/status`, `/config`, `/usage`, and `/auth/status` use the same trusted-request check as the write routes. Usage responses keep the quota fields the card shows and omit the raw provider payload.
+- `/cline models` prints the model total in English.
+
+## [0.3.22] - 2026-09-24
+
+### Fixed
+- **SettingsPage Crash on Cordis Strict Context (#67 / GitHub #4)**: Fixed unhandled `TypeError: cannot get property "settingsScope" without inject` thrown when accessing `ctx?.settingsScope` under DSH 0.17+ / Cordis v3+ strict proxy contexts. Replaced bare property access with defensive `ctx.get('lanSettings') || ctx.get('settingsScope')` inside `try/catch` across both `settings-page.js` and `entry.js`.
+- **Standalone Unblocked UI Rendering**: When `settingsScope` / `lanSettings` service is absent or not injected in the client fiber, `SettingsPage` snapshot now defaults to `{ status: 'ready', view: null }` instead of permanently hanging on `status: 'loading'`. The settings page is entirely functional via its own HTTP REST endpoints (`/dsh-clinebot/status`, `/save-key`, `/models/toggle`, etc.).
+
 ## [0.3.21] - 2026-09-23
 
 ### Fixed

package/README.md

@@ -50,7 +50,7 @@ Integrating ClinePass into DeepSeek Harness (DSH) natively poses key challenges:
 * 🚀 **One-Click In-App Updater**: Upgrade `@goodandready/dsh-clinebot` directly from the DSH UI or trigger secure loopback updates via `/dsh-clinebot/update`.
 * ⚡ **SWR Quota & Health Caching**: Instantaneous response time (<2ms) on status queries with background revalidation.
 * 🔀 **Smart Quota-Aware Failover**: Automatic multi-account rotation skipping exhausted accounts and recovering when `resetsAt` is reached.
-* 🖥️ **Dedicated Settings Page**: Full-width page in DSH Settings (`Settings → ClineBot`).
+* 🖥️ **Plugin configuration page**: Open the installed ClineBot plugin and choose configure. The page shows the credential name, models, quota, and accounts. It is not a separate sidebar section.
 * 🔄 **Dynamic Subscription Model Sync**: Automatically pulls real models included in your ClinePass plan directly from `GET /api/v1/users/me/plan` with one-click DSH provider sync.
 * ⚠️ **Quota Exhaustion Alerts**: Real-time visual warning banners when 5-hour rolling limit reaches 80% (warning) and 95% (exhausted), complete with countdown to reset.
 * 📈 **Session Metrics Telemetry**: Live dashboard tracking request counts, token consumption estimates, latency, and last-request timestamp.
@@ -118,7 +118,7 @@ graph LR
 * **`lib/index.js`**:
   Cordis service module managing routes (including `POST /dsh-clinebot/models/sync`), quota warnings threshold evaluation, credentials, and registering the `/cline` slash command.
 * **`lib/client.js`**:
-  Full-featured dedicated Settings section (`settings.section`, order 28) with live quota bars, exhaustion warning banner, session metrics telemetry card, one-click plan sync button, and plugin accordion (`settings.plugin.item`).
+  Configuration page on the plugin row (`plugins.row.config`) with live quota bars, an exhaustion warning, session metrics, one-click plan sync, and a fallback plugins card (`settings.plugin.item`). There is no `settings.section` sidebar entry.
 
 ---
 

package/README.ru.md

@@ -50,7 +50,7 @@
 * 🚀 **Обновление в один клик**: Обновление плагина прямо из интерфейса DSH или через защищённый loopback-эндпоинт `/dsh-clinebot/update`.
 * ⚡ **SWR-кэширование квот и здоровья**: Мгновенный ответ (<2 мс) на запросы статуса с фоновым обновлением данных без блокировки UI.
 * 🔀 **Smart Quota-Aware Failover**: Интеллектуальная ротация аккаунтов с обходом исчерпанных лимитов и авто-восстановлением при наступлении `resetsAt`.
-* 🖥️ **Отдельная страница в Настройках**: собственная полноэкранная страница в меню Настроек DSH (`Настройки → ClineBot`).
+* 🖥️ **Страница конфигурации плагина**: откройте установленный ClineBot и перейдите в настройки плагина. Там имя учётных данных, модели, квота и аккаунты. Отдельного пункта бокового меню нет.
 * 🔄 **Динамическая синхронизация моделей подписки**: автоматическое получение реального списка моделей из `GET /api/v1/users/me/plan` и мгновенное обновление провайдера DSH в один клик.
 * ⚠️ **Предупреждения об исчерпании квоты**: баннеры предупреждения при достижении 80% (внимание) и 95% (исчерпано) 5-часового лимита с таймером сброса.
 * 📈 **Метрики сессии**: учет количества запросов, расчетных токенов (Prompt / Completion), задержки и времени последнего вызова.
@@ -115,7 +115,7 @@ graph LR
   * `smokeChat`: замер задержки и тестовый пинг с фиксацией статистики.
   * `buildPiAiProvider`: генерация конфигурации провайдера для `llm-pi-ai` (`api: 'openai-completions'`).
 * **`lib/index.js`**: сервис Cordis, регистрация системных маршрутов (включая `/dsh-clinebot/models/sync`), расчет порогов предупреждения квоты и слэш-команды `/cline`.
-* **`lib/client.js`**: полнофункциональный раздел настроек (`settings.section`, order 28) с баннерами предупреждений, карточкой статистики сессии, кнопкой синхронизации моделей плана и аккордеоном плагина (`settings.plugin.item`).
+* **`lib/client.js`**: страница конфигурации строки плагина (`plugins.row.config`) с предупреждениями, статистикой сессии, синхронизацией моделей и запасной карточкой (`settings.plugin.item`). Пункта `settings.section` в боковом меню нет.
 
 ---
 

package/README.zh.md

@@ -50,7 +50,7 @@
 * 🚀 **应用内一键更新**：直接在 DSH 界面检查并升级插件，或通过受保护的 `/dsh-clinebot/update` 进行本地安全更新。
 * ⚡ **SWR 配额与健康状态缓存**：状态查询毫秒级响应（<2ms），并在后台静默更新，不阻塞前端渲染。
 * 🔀 **智能配额故障转移 (Smart Failover)**：多账号池自动轮询，避开耗尽账号并在 `resetsAt` 到达后自动恢复。
-* 🖥️ **专属设置大页**：在 DSH 设置中提供全宽独立页面（`设置 → ClineBot`）。
+* 🖥️ **插件配置页**：打开已安装的 ClineBot，进入配置。页面包含凭据名、模型、配额和账号，不单独占用侧边栏。
 * 🔄 **订阅模型动态同步**：从官方 `GET /api/v1/users/me/plan` 自动提取真实包含模型，一键原子级同步至 DSH 提供商配置，无需等待插件更新。
 * ⚠️ **额度耗尽实时预警**：当 5 小时滑动窗口达到 80%（警告黄色）和 95%（即将耗尽红色）时展示醒目预警横幅与重置倒计时。
 * 📈 **会话统计与指标看板**：实时追踪请求调用次数、预估 Token（Prompt / Completion）、最近延迟及最后调用时间。
@@ -115,7 +115,7 @@ graph LR
   * `smokeChat`：毫秒级网络探活与非流式延迟测试，并记录会话指标。
   * `buildPiAiProvider`：构建 DSH `llm-pi-ai` 兼容的服务商定义 (`api: 'openai-completions'`)。
 * **`lib/index.js`**：Cordis 插件主生命周期服务，注册后端 REST API 路由（含 `/dsh-clinebot/models/sync`）、额度预警计算与 `/cline` 聊天斜杠指令。
-* **`lib/client.js`**：前端设置面板（`settings.section` 序号 28），内含预警横幅、会话指标卡片、一键模型同步按钮及插件折叠卡片。
+* **`lib/client.js`**：插件行配置页（`plugins.row.config`），含预警横幅、会话指标、一键模型同步，以及后备插件卡片（`settings.plugin.item`）。没有 `settings.section` 侧边栏项。
 
 ---
 

package/lib/client.js

@@ -14,7 +14,11 @@ const NS = 'dsh-clinebot'
 const ROW_ID = 'dsh-clinebot'
 const ROW_CONFIG_KEY = '@goodandready/dsh-clinebot#' + ROW_ID
 const ROUTE_PREFIX = '/dsh-clinebot'
-const SNAPSHOT_LOADING = { status: 'loading', view: null }
+const SNAPSHOT_LOADING = Object.freeze({ status: 'loading', view: null })
+// Stable (frozen) fallback reference: useSyncExternalStore compares snapshots by
+// identity (Object.is), so returning a fresh object literal causes an infinite render loop
+// (React error #185 "Maximum update depth exceeded"). Keep this module-level.
+const SNAPSHOT_READY = Object.freeze({ status: 'ready', view: null })
 
 // --- src/client/locales.js ---
 const en = {
@@ -834,16 +838,27 @@ Response: ${smokeResult.preview || '(empty)'}`
 }
 
 // --- src/client/settings-page.js ---
+function readConfigForms(ctx) {
+  if (!ctx || typeof ctx.get !== 'function') return undefined
+  try {
+    return ctx.get('configForms') || undefined
+  } catch (err) {
+    console.warn('[dsh-clinebot] configForms is not available:', err)
+    return undefined
+  }
+}
+
 function SettingsPage(props) {
   const ctx = props?.ctx
   const t = props?.t || makeT(en, en)
 
   const scope = React.useMemo(() => {
-    const s = (ctx?.get && ctx.get('lanSettings')) || ctx?.settingsScope
-    if (!s?.bind) return undefined
+    const svc = readConfigForms(ctx)
+    if (!svc || typeof svc.get !== 'function') return undefined
     try {
-      return s.bind({ namespace: NS })
-    } catch (_) {
+      return svc.get(NS)
+    } catch (err) {
+      console.warn('[dsh-clinebot] configForms.get failed:', err)
       return undefined
     }
   }, [ctx])
@@ -860,18 +875,19 @@ function SettingsPage(props) {
   }, [scope])
 
   const getSnapshot = React.useCallback(() => {
-    if (!scope?.getSnapshot) return SNAPSHOT_LOADING
+    if (!scope?.getSnapshot) return SNAPSHOT_READY
     try {
-      return scope.getSnapshot() || SNAPSHOT_LOADING
-    } catch (_) {
-      return SNAPSHOT_LOADING
+      return scope.getSnapshot() || SNAPSHOT_READY
+    } catch (err) {
+      console.warn('[dsh-clinebot] settings snapshot failed:', err)
+      return SNAPSHOT_READY
     }
   }, [scope])
 
   const snapshot = React.useSyncExternalStore(
     subscribe,
     getSnapshot,
-    React.useCallback(() => SNAPSHOT_LOADING, [])
+    React.useCallback(() => SNAPSHOT_READY, [])
   )
   const snapshotStatus = snapshot?.status || 'loading'
 
@@ -1368,29 +1384,14 @@ function PluginCard(props) {
 }
 
 // --- src/client/entry.js ---
-function refreshMirrorUntilVisible(ctx) {
-  const visible = () => {
-    try {
-      const s = (ctx?.get && ctx.get('lanSettings')) || ctx?.settingsScope
-      const view = s?.describe?.()?.getSnapshot?.()?.view
-      return !!view && Array.isArray(view.namespaces) && view.namespaces.some((row) => row.ns === NS)
-    } catch (_) {
-      return false
-    }
+function ensureSettingsForm(ctx) {
+  const svc = readConfigForms(ctx)
+  if (!svc || typeof svc.get !== 'function') return
+  try {
+    svc.get(NS)
+  } catch (err) {
+    console.warn('[dsh-clinebot] configForms.get failed:', err)
   }
-  if (visible()) return () => {}
-  let tries = 0
-  const timer = setInterval(() => {
-    if (visible() || tries >= 15) { clearInterval(timer); return }
-    tries += 1
-    try {
-      const s = (ctx?.get && ctx.get('lanSettings')) || ctx?.settingsScope
-      s?.describe?.()?.load?.()
-    } catch (e) {
-      console.debug?.('[dsh-clinebot] Polling settings mirror:', e)
-    }
-  }, 1000)
-  return () => clearInterval(timer)
 }
 
 function apply(ctx) {
@@ -1415,8 +1416,8 @@ function apply(ctx) {
 
   if (typeof ctx.effect === 'function') {
     ctx.effect(
-      () => refreshMirrorUntilVisible(ctx),
-      'dsh-clinebot: re-read the settings mirror until our namespace appears',
+      () => { ensureSettingsForm(ctx) },
+      'dsh-clinebot: open the settings form for this namespace',
     )
   }
 
@@ -1494,7 +1495,7 @@ function apply(ctx) {
   )
 }
 
-module.exports = { apply, inject: ['slots', 'locale'] }
+module.exports = { apply, inject: ['slots', 'locale', 'configForms'] }
 
     return module.exports
   },

package/lib/http.js

@@ -92,3 +92,34 @@ export function isTrustedSettingsRequest(request) {
 
   return false
 }
+
+export function publicUsage(usage) {
+  if (!usage || typeof usage !== 'object') return null
+  const windowView = (window) => {
+    if (!window || typeof window !== 'object') return null
+    return {
+      percentUsed: window.percentUsed,
+      remainingPercent: window.remainingPercent,
+      resetsAt: window.resetsAt || null,
+    }
+  }
+  if (usage.ok === false) {
+    return {
+      ok: false,
+      error: typeof usage.error === 'string' ? usage.error : 'usage unavailable',
+      checkedAt: usage.checkedAt,
+    }
+  }
+  return {
+    ok: true,
+    plan: usage.plan || null,
+    user: { email: usage.user?.email || null },
+    windows: {
+      fiveHour: windowView(usage.windows?.fiveHour),
+      weekly: windowView(usage.windows?.weekly),
+      monthly: windowView(usage.windows?.monthly),
+    },
+    checkedAt: usage.checkedAt,
+  }
+}
+

package/lib/provider-sync.js

@@ -1,6 +1,7 @@
 import os from 'node:os'
 import path from 'node:path'
 import { publicConfig, Config, LLM_PI_AI_NS } from './config.js'
+import { publicUsage } from './http.js'
 import {
   PROVIDER_ID,
   PROVIDER_DISPLAY_NAME,
@@ -109,7 +110,7 @@ export async function buildStatus(ctx, cfg) {
     })),
     activeAccount: activeAcc.apiKeyEnv,
     health,
-    usage,
+    usage: publicUsage(usage),
     quotaWarning,
     sessionStats: { ...sessionStats },
     isRegistered,

package/lib/routes/auth.js

@@ -38,6 +38,7 @@ export function registerAuthRoutes(ctx, { live, getSettingsApi, syncProviderStat
     path: '/dsh-clinebot/auth/status',
     handler: async (req, res) => {
       if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET only' })
+      if (!assertTrustedSettingsRequest(req, res)) return
       writeJson(res, 200, {
         ok: true,
         status: authSession?.state || 'idle',

package/lib/routes/models.js

@@ -4,6 +4,7 @@ import { publicConfig, Config } from '../config.js'
 import { resolveActiveAccountKey, resolvePathWithHome } from '../provider-sync.js'
 import { getAllModels, saveModelsDiskCache } from '../models.js'
 import { fetchUsageLimits } from '../cline-client.js'
+import { publicUsage } from '../http.js'
 
 export function registerModelsRoutes(ctx, { live, getSettingsApi, syncProviderState }) {
   // POST /dsh-clinebot/models/sync — dynamically load models from plan
@@ -103,6 +104,7 @@ export function registerModelsRoutes(ctx, { live, getSettingsApi, syncProviderSt
     path: '/dsh-clinebot/usage',
     handler: async (req, res) => {
       if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET only' })
+      if (!assertTrustedSettingsRequest(req, res)) return
       try {
         const pub = publicConfig(live())
         const activeKey = await resolveActiveAccountKey(ctx, live())
@@ -113,7 +115,7 @@ export function registerModelsRoutes(ctx, { live, getSettingsApi, syncProviderSt
           timeoutMs: pub.timeoutMs,
           bypassCache: true,
         })
-        writeJson(res, usageData.ok ? 200 : 502, usageData)
+        writeJson(res, usageData.ok ? 200 : 502, publicUsage(usageData))
       } catch (err) {
         writeJson(res, 500, { ok: false, error: String(err?.message || err) })
       }

package/lib/routes/settings.js

@@ -11,6 +11,7 @@ export function registerSettingsRoutes(ctx, { live, getSettingsApi, syncProvider
     path: '/dsh-clinebot/status',
     handler: async (req, res) => {
       if (req.method !== 'GET') return writeJson(res, 405, { ok: false, error: 'GET only' })
+      if (!assertTrustedSettingsRequest(req, res)) return
       try {
         const st = await buildStatus(ctx, live())
         writeJson(res, 200, st)
@@ -26,6 +27,7 @@ export function registerSettingsRoutes(ctx, { live, getSettingsApi, syncProvider
     path: '/dsh-clinebot/config',
     handler: async (req, res) => {
       if (req.method === 'GET') {
+        if (!assertTrustedSettingsRequest(req, res)) return
         return writeJson(res, 200, { ok: true, config: publicConfig(live()) })
       }
       if (req.method !== 'PUT') {

package/lib/slash-command.js

@@ -39,7 +39,7 @@ export function registerSlashCommand(ctx, { live, getSettingsApi, syncProviderSt
           const disabledSet = new Set(pub.disabledModels || [])
           const lines = [
             '### 🎯 ClinePass Models Catalog',
-            `* **Всего моделей**: ${allModels.length} (${allModels.filter((m) => !disabledSet.has(m.id)).length} активно)`,
+            `* **Total models**: ${allModels.length} (${allModels.filter((m) => !disabledSet.has(m.id)).length} active)`,
             '',
           ]
           for (const m of allModels) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-clinebot",
-  "version": "0.3.21",
+  "version": "0.3.23",
   "description": "DeepSeek Harness companion for ClineBot / ClinePass: dynamic subscription models sync, quota exhaustion warnings, session metrics, dedicated settings page, live usage limits, and /cline slash-command.",
   "license": "MIT",
   "type": "module",
@@ -49,7 +49,11 @@
     },
     "client": {
       "platform": "web",
-      "inject": []
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings"
+      ]
     }
   },
   "peerDependencies": {