@jayyuen66/dsh-ocr-review 0.1.4 → 0.1.6

package/client.js

@@ -20,7 +20,8 @@ const UI_MESSAGES = {
 		revert: "撤销",
 		saveFailed: "保存失败：",
 		saveRefused: "未写入（宿主拒收或跳过）：{fields}",
-		loadProvidersFailed: "加载 providers 失败：{error}（端点未就绪？重启 dsh 后重试）",
+		loadProvidersFailed: "加载 providers 失败：{error}（远程面未就绪？重启 dsh 后重试）",
+		remoteUnavailable: "远程服务不可用：宿主没有挂上本插件的设置通道。",
 		loadingProviders: "加载 providers…",
 		noKeySuffix: "（未配置 key）",
 		noModel: "（无模型）",
@@ -36,6 +37,7 @@ const UI_MESSAGES = {
 		noProvider: "当前未配置 provider",
 		noReason: "宿主未给出原因（重启 dsh 或重试可恢复）",
 		readProvidersFailed: "未能从 dsh 配置服务读取 provider 列表：{reason}",
+		endpointVerifyFailed: "装载期端点自检失败（配置仍可修改）：{reason}",
 		applied: "已应用：{provider} / {model}\n{test}",
 		notVerified: "（未自动验证，可点「测试连接」手动验证）",
 		llmTestPassed: "✓ ocr llm test 通过",
@@ -66,7 +68,30 @@ const UI_MESSAGES = {
 		configPathHint: "外部 open-code-review CLI 自己的配置位置；留空 = ~/.opencodereview/config.json。自定义时必须是 <X>/.opencodereview/config.json 布局（OCR 只认该形状，插件经 HOME 重定向让它生效）",
 		settingsLoading: "设置加载中，稍候可改",
 		keyDynamicHint: "key 走 get-cred.mjs 动态读取，OCR 配置不留明文",
-		keyScriptMissing: "⚠ get-cred 脚本缺失，api_key_cmd 无法工作"
+		keyScriptMissing: "⚠ get-cred 脚本缺失，api_key_cmd 无法工作",
+		binaryTitle: "外部 CLI（ocr）",
+		binaryUnknown: "状态未取到：刷新本页，或确认 dsh 的 web 服务已起来",
+		binaryBundled: "随本插件分发的兜底入口已就位：{path}（{channel}）",
+		binaryPath: "用 PATH 上的全局安装：{path}（{channel}）",
+		binaryNone: "未找到 ocr：PATH 与随包兜底两条路都没有可执行候选。装法与版本看下一行（由插件按核对版本给出）",
+		channelBrew: "brew formula",
+		channelNpm: "npm 全局包",
+		channelUnknown: "装法未识别",
+		versionExpected: "本插件的契约按 ocr {expected} 逐条核对",
+		versionMatched: "本机实测 {actual}，与核对版本一致",
+		versionDiverged: "本机实测 {actual}，与核对版本 {expected} 不一致：评论口径可能随版本漂移",
+		badgeDiverged: "ocr 版本不一致",
+		detectCli: "检测版本",
+		detecting: "检测中…",
+		probeVersion: "ocr 版本：{version}",
+		probeReason: "未取到版本号：{reason}",
+		badgeBundled: "ocr 走随包兜底",
+		badgePath: "ocr 来自 PATH",
+		badgeNone: "未找到 ocr",
+		badgeUnknown: "ocr 状态未取到",
+		binaryProbeHint: "版本号要在「配置」页点「检测版本」取——那要起一次 ocr 进程，不在本页顺手跑。",
+		binaryGuideDetails: "打开插件详情",
+		binaryGuideDismiss: "知道了"
 	},
 	en: {
 		cardTitle: "open-code-review code review",
@@ -79,7 +104,8 @@ const UI_MESSAGES = {
 		revert: "Revert",
 		saveFailed: "save failed: ",
 		saveRefused: "not written (host refused or skipped): {fields}",
-		loadProvidersFailed: "failed to load providers: {error} (endpoint not ready? restart dsh and retry)",
+		loadProvidersFailed: "failed to load providers: {error} (remote face not ready? restart dsh and retry)",
+		remoteUnavailable: "remote service unavailable: the host did not mount this plugin's settings channel",
 		loadingProviders: "loading providers…",
 		noKeySuffix: " (no key configured)",
 		noModel: " (no model)",
@@ -95,6 +121,7 @@ const UI_MESSAGES = {
 		noProvider: "No provider configured yet",
 		noReason: "the host gave no reason (restart dsh or retry to recover)",
 		readProvidersFailed: "Could not read the provider list from the dsh settings service: {reason}",
+		endpointVerifyFailed: "Startup endpoint check failed (the config is still editable): {reason}",
 		applied: "Applied: {provider} / {model}\n{test}",
 		notVerified: "(not verified automatically — use “Test connection” to check manually)",
 		llmTestPassed: "✓ ocr llm test passed",
@@ -125,16 +152,201 @@ const UI_MESSAGES = {
 		configPathHint: "Where the external open-code-review CLI keeps its own config; empty = ~/.opencodereview/config.json. A custom value must follow the <X>/.opencodereview/config.json layout (OCR only reads that shape; the plugin makes it effective via a HOME redirect)",
 		settingsLoading: "settings still loading — editable in a moment",
 		keyDynamicHint: "Keys are read dynamically via get-cred.mjs; OCR config keeps no plain text",
-		keyScriptMissing: "⚠ get-cred script missing, api_key_cmd cannot work"
+		keyScriptMissing: "⚠ get-cred script missing, api_key_cmd cannot work",
+		binaryTitle: "External CLI (ocr)",
+		binaryUnknown: "status not reported: reload this page, or check that the dsh web server is up",
+		binaryBundled: "bundled fallback entry in place: {path} ({channel})",
+		binaryPath: "using the global install on PATH: {path} ({channel})",
+		binaryNone: "ocr not found: neither PATH nor the bundled fallback has an executable candidate. The install command and version are on the next line (this plugin states the version its contract was verified against)",
+		channelBrew: "brew formula",
+		channelNpm: "npm global package",
+		channelUnknown: "install method unrecognised",
+		versionExpected: "this plugin's contract was verified against ocr {expected}",
+		versionMatched: "this machine reports {actual}, matching it",
+		versionDiverged: "this machine reports {actual}, which is not the verified {expected}: comment wording and severity may drift between versions",
+		badgeDiverged: "ocr version differs",
+		detectCli: "Detect version",
+		detecting: "Detecting...",
+		probeVersion: "ocr version: {version}",
+		probeReason: "no version read: {reason}",
+		badgeBundled: "ocr from bundled fallback",
+		badgePath: "ocr from PATH",
+		badgeNone: "ocr not found",
+		badgeUnknown: "ocr status unavailable",
+		binaryProbeHint: "the version comes from the Detect action on the configuration page — that spawns an ocr process, so it is not run here",
+		binaryGuideDetails: "Open plugin details",
+		binaryGuideDismiss: "Got it"
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@jayyuen66+dsh-plugin-shared@0.1.4_@deepseek-ai+cordis@4.0.5-alpha.1_@deepseek-ai+dsh-c_472a88c28a1052d4f20b6206ef930fa9/node_modules/@jayyuen66/dsh-plugin-shared/dist/record.js
-function e(e) {
+//#region node_modules/.pnpm/@jayyuen66+dsh-plugin-shared@0.1.6_@deepseek-ai+cordis@4.0.5_@deepseek-ai+dsh-client-lo_8c875f5679b30ed9bd8ed9c09e6b1478/node_modules/@jayyuen66/dsh-plugin-shared/dist/record.js
+function e$2(e) {
 	return typeof e == `object` && !!e && !Array.isArray(e);
 }
-function t(t, n) {
-	return e(t) ? t[n] : void 0;
+function n(t, n) {
+	return e$2(t) ? t[n] : void 0;
+}
+//#endregion
+//#region node_modules/.pnpm/@jayyuen66+dsh-plugin-shared@0.1.6_@deepseek-ai+cordis@4.0.5_@deepseek-ai+dsh-client-lo_8c875f5679b30ed9bd8ed9c09e6b1478/node_modules/@jayyuen66/dsh-plugin-shared/dist/card-apply.js
+function e$1(e, t, n) {
+	let r = globalThis;
+	if (Object.hasOwn(r, t) && r[t] === !0) return !1;
+	r[t] = !0;
+	try {
+		e.effect(() => () => {
+			r[t] = void 0;
+		}, n);
+	} catch (e) {
+		throw r[t] = void 0, e;
+	}
+	return !0;
+}
+//#endregion
+//#region node_modules/.pnpm/@jayyuen66+dsh-plugin-shared@0.1.6_@deepseek-ai+cordis@4.0.5_@deepseek-ai+dsh-client-lo_8c875f5679b30ed9bd8ed9c09e6b1478/node_modules/@jayyuen66/dsh-plugin-shared/dist/card-diff.js
+function e(e, t) {
+	let n = [];
+	for (let r of Object.keys(e)) JSON.stringify(e[r] ?? null) !== JSON.stringify(t[r] ?? null) && n.push(r);
+	return n;
+}
+//#endregion
+//#region lib/remote-shape.ts
+/** 宿主服务键 = 客户端线上命名空间（两侧共用的唯一来源）。 */
+const OCR_REMOTE_NAMESPACE = "ocrReview";
+//#endregion
+//#region src/remote.ts
+/** 网关给命名空间注册的**服务键**：`remote.<namespace>`。它在 `$mount` 完成之后才存在，
+*  所以只能在挂载后按这个键去读，而不是提前 inject。 */
+const OCR_SERVICE_KEY = `remote.${OCR_REMOTE_NAMESPACE}`;
+/** 卡片所在 bundle 的包名（`$mount` 的 `package` 位与槽位键同源，见 client-entry.ts 的 BUNDLE_PKG）。 */
+const PACKAGE_NAME = "@jayyuen66/dsh-ocr-review";
+/** 把宿主那五个方法挂到客户端远程面上的描述符（`id` 的形状照生成器：`<包>#<命名空间>/<方法>`）。
+*  导出它只为一件事：`test/remote.test.ts` 拿它与宿主侧 `remoteMethods()` 的标记对质
+*  —— 两侧分叉时卡片不会报错，只会"读不到"，所以那条比较必须在门禁里。 */
+const OCR_DESCRIPTORS = [
+	{
+		id: `${PACKAGE_NAME}#${OCR_REMOTE_NAMESPACE}/providers`,
+		service: OCR_REMOTE_NAMESPACE,
+		namespace: OCR_REMOTE_NAMESPACE,
+		method: "providers",
+		invocation: { kind: "direct" },
+		parameters: [],
+		result: { mode: "src-json" }
+	},
+	{
+		id: `${PACKAGE_NAME}#${OCR_REMOTE_NAMESPACE}/select`,
+		service: OCR_REMOTE_NAMESPACE,
+		namespace: OCR_REMOTE_NAMESPACE,
+		method: "select",
+		invocation: { kind: "direct" },
+		parameters: [{
+			name: "request",
+			wire: "request",
+			source: "json",
+			codec: {
+				mode: "strict",
+				typeSymbol: `${PACKAGE_NAME}#select-request`,
+				create: () => ({ parse(value) {
+					if (!e$2(value)) throw new TypeError("select request must be an object");
+					const { provider, model } = value;
+					if (typeof provider !== "string" || typeof model !== "string") throw new TypeError("select request requires string provider and model");
+					return {
+						provider,
+						model
+					};
+				} })
+			}
+		}],
+		result: { mode: "src-json" }
+	},
+	{
+		id: `${PACKAGE_NAME}#${OCR_REMOTE_NAMESPACE}/migrate`,
+		service: OCR_REMOTE_NAMESPACE,
+		namespace: OCR_REMOTE_NAMESPACE,
+		method: "migrate",
+		invocation: { kind: "direct" },
+		parameters: [],
+		result: { mode: "src-json" }
+	},
+	{
+		id: `${PACKAGE_NAME}#${OCR_REMOTE_NAMESPACE}/test`,
+		service: OCR_REMOTE_NAMESPACE,
+		namespace: OCR_REMOTE_NAMESPACE,
+		method: "test",
+		invocation: { kind: "direct" },
+		parameters: [],
+		result: { mode: "src-json" }
+	},
+	{
+		id: `${PACKAGE_NAME}#${OCR_REMOTE_NAMESPACE}/probe`,
+		service: OCR_REMOTE_NAMESPACE,
+		namespace: OCR_REMOTE_NAMESPACE,
+		method: "probe",
+		invocation: { kind: "direct" },
+		parameters: [],
+		result: { mode: "src-json" }
+	}
+];
+/** 这个值能当远程面用吗（只核我们要调的那一位；服务来自别的实现或版本时保守当作没有）。 */
+const isRemoteMounter = (value) => e$2(value) && typeof value["$mount"] === "function";
+/** 同上：命名空间服务（挂载之后才有，缺它说明网关没认这枚贡献）。 */
+const isOcrNamespace = (value) => e$2(value) && typeof value["providers"] === "function" && typeof value["select"] === "function" && typeof value["migrate"] === "function" && typeof value["test"] === "function" && typeof value["probe"] === "function";
+/** 网关回执 → 值；载体/网关失败抛（卡片那层按「请求失败」显示）。 */
+function unwrap(result) {
+	if (!result.ok) throw new Error(`${result.error.code}: ${result.error.message}`);
+	return result.value;
+}
+/**
+* 造出真正的读取器（挂载一次 + 每次读命名空间服务）。
+* @param ctx - 客户端上下文
+* @param remote - 已核过形状的远程面
+* @returns 读取器
+*/
+function buildOcrReader(ctx, remote) {
+	let mounted;
+	const namespaceOf = async () => {
+		mounted ??= remote.$mount({
+			package: PACKAGE_NAME,
+			descriptors: OCR_DESCRIPTORS
+		});
+		await mounted;
+		const namespace = ctx.get?.(OCR_SERVICE_KEY, false);
+		if (!isOcrNamespace(namespace)) throw new Error(`${OCR_SERVICE_KEY} 未提供：宿主网关没有挂上这枚命名空间`);
+		return namespace;
+	};
+	return {
+		async providers() {
+			return unwrap(await (await namespaceOf()).providers());
+		},
+		async select(provider, model) {
+			return unwrap(await (await namespaceOf()).select({
+				provider,
+				model
+			}));
+		},
+		async migrate() {
+			return unwrap(await (await namespaceOf()).migrate());
+		},
+		async test() {
+			return unwrap(await (await namespaceOf()).test());
+		},
+		async probe() {
+			return unwrap(await (await namespaceOf()).probe());
+		}
+	};
+}
+/**
+* 造一个「读/写宿主侧 OCR 配置」的读取器；**当前部署没有远程面时返回 `undefined`**
+* （卡片照常渲染，只是数据面显示读不到 —— 与 host 侧可选读面同一条口径）。
+*
+* `$mount` 是**幂等**的（挂进本 fiber，随卡片卸载自动撤），所以这里缓存那枚 promise：
+* 同一次会话里反复拉取只挂一次。
+*
+* @param ctx - 客户端上下文（只用 `get` 一位）
+* @returns 读取器；没有远程面时 `undefined`
+*/
+function createOcrReader(ctx) {
+	const remote = ctx.get?.("remote");
+	return isRemoteMounter(remote) ? buildOcrReader(ctx, remote) : void 0;
 }
 //#endregion
 //#region src/client-entry.ts
@@ -157,12 +369,6 @@ const NS = "ocr-review";
 * dsh-client-ui-settings/lib/client.js:1309-1315 把入参原样当 settings 命名空间用）。
 */
 const BUNDLE_PKG = "@jayyuen66/dsh-ocr-review";
-const PROVIDERS_URL = "/_dsh/ocr-review/providers";
-const SELECT_URL = "/_dsh/ocr-review/select";
-const MIGRATE_URL = "/_dsh/ocr-review/migrate";
-const TEST_URL = "/_dsh/ocr-review/test";
-/** 写端点 CSRF 头名（与 host.ts OCR_CSRF_HEADER 同源，改名要两端一起改）。 */
-const CSRF_HEADER = "x-ocr-csrf";
 /** 未知值 → 安全字符串（非字符串给 ''）。 */
 function strOf(value) {
 	return typeof value === "string" ? value : "";
@@ -177,49 +383,102 @@ function errorSummary(error) {
 }
 function modelOf(raw) {
 	return {
-		id: strOf(t(raw, "id")),
-		name: strOf(t(raw, "name"))
+		id: strOf(n(raw, "id")),
+		name: strOf(n(raw, "name"))
 	};
 }
 function providerOf(raw) {
-	const modelsArr = t(raw, "models");
+	const modelsArr = n(raw, "models");
 	const models = Array.isArray(modelsArr) ? modelsArr.map((item) => modelOf(item)) : [];
-	const apiKeyEnvRaw = t(raw, "apiKeyEnv");
+	const apiKeyEnvRaw = n(raw, "apiKeyEnv");
 	return {
-		name: strOf(t(raw, "name")),
-		displayName: strOf(t(raw, "displayName")),
+		name: strOf(n(raw, "name")),
+		displayName: strOf(n(raw, "displayName")),
 		apiKeyEnv: typeof apiKeyEnvRaw === "string" ? apiKeyEnvRaw : null,
-		baseURL: strOf(t(raw, "baseURL")),
+		baseURL: strOf(n(raw, "baseURL")),
 		models,
-		hasKey: t(raw, "hasKey") === true
+		hasKey: n(raw, "hasKey") === true
+	};
+}
+/** 可得性来源的合法域（与 host 侧 `OcrBinarySource` 同一份取值）。形状不合即「没报」。 */
+const BINARY_SOURCES = /* @__PURE__ */ new Set([
+	"bundled",
+	"path",
+	"none"
+]);
+/**
+* 解析宿主送的可得性对象。导出是为了让「wire 键名」这条契约能被钉住：卡片与 host
+*  两处各写一份键名时，写错了的症状是状态行永远显示「未取到」，而不是任何报错。
+*
+* 只有 `source` 是必需的：其余四样各管一句附加信息，缺了就少说那一句，而不是把整行判定
+* 作废——「宿主报了 PATH 却没报版本」仍然是一条用户要看的事实。`measuredVersion` 例外，
+* 它恒在（null = 还没测过），因为「没测过」与「旧宿主不带这字段」在卡片上是同一句话。
+*/
+function binaryOf(raw) {
+	if (!e$2(raw)) return null;
+	const source = strOf(raw["source"]);
+	if (!BINARY_SOURCES.has(source)) return null;
+	const path = strOf(raw["path"]);
+	const channel = strOf(raw["channel"]);
+	const expectedVersion = strOf(raw["expectedVersion"]);
+	const installHint = strOf(raw["installHint"]);
+	const measured = raw["measuredVersion"];
+	return {
+		source,
+		...path === "" ? {} : { path },
+		...channel === "" ? {} : { channel },
+		...expectedVersion === "" ? {} : { expectedVersion },
+		...installHint === "" ? {} : { installHint },
+		measuredVersion: typeof measured === "string" ? measured : null
 	};
 }
+/**
+* 详情页徽标/区块/启用指引共用的取数口：读同一条 providers 载荷的 `ocrBinary` 那半。
+* 判据只在 host 的 `resolveOcrAvailability` 一处，本包三个显示面都只翻译它的结论。
+* 读取器缺席（部署没装远程面）与传输失败都归成 null：这三处只负责显示。
+*/
+async function loadCliStatus(reader) {
+	if (reader === void 0) return null;
+	try {
+		return binaryOf(n(await reader.providers(), "ocrBinary"));
+	} catch {
+		return null;
+	}
+}
 function providersPayloadOf(json) {
-	const providersArr = t(json, "providers");
+	const providersArr = n(json, "providers");
 	const providers = Array.isArray(providersArr) ? providersArr.map((item) => providerOf(item)) : [];
-	const currentRaw = t(json, "current");
+	const currentRaw = n(json, "current");
 	const current = {
-		provider: strOf(t(currentRaw, "provider")),
-		model: strOf(t(currentRaw, "model")),
-		keyIsDynamic: t(currentRaw, "keyIsDynamic") === true,
-		url: strOf(t(currentRaw, "url"))
+		provider: strOf(n(currentRaw, "provider")),
+		model: strOf(n(currentRaw, "model")),
+		keyIsDynamic: n(currentRaw, "keyIsDynamic") === true,
+		url: strOf(n(currentRaw, "url"))
+	};
+	const sourceRaw = n(json, "source");
+	const verifyRaw = n(json, "endpointVerify");
+	const endpointVerify = verifyRaw === null || verifyRaw === void 0 ? null : {
+		ok: n(verifyRaw, "ok") === true,
+		message: strOf(n(verifyRaw, "message"))
 	};
-	const sourceRaw = t(json, "source");
 	return {
 		providers,
 		current,
-		getCredReady: t(json, "getCredReady") === true,
+		getCredReady: n(json, "getCredReady") === true,
 		source: {
-			status: strOf(t(sourceRaw, "status")),
-			message: strOf(t(sourceRaw, "message"))
+			status: strOf(n(sourceRaw, "status")),
+			message: strOf(n(sourceRaw, "message"))
 		},
-		csrf: strOf(t(json, "csrf"))
+		endpointVerify,
+		ocrBinary: binaryOf(n(json, "ocrBinary"))
 	};
 }
 /** 三行表单控件（数字/文本/下拉）共用的类名 = CARD_CSS 里 `.ocr-select{…}` 那条规则。
 *  抽出来是因为两处 input 与一处 select 必须同宽同边框：写三遍字面量时改一处漏两处，
 *  症状是设置卡里某一行的控件比其它行窄。 */
 const FORM_CONTROL_CLASS = "ocr-select";
+/** 小节标题的类名（卡片头、CLI 状态行、详情页区块共用；sonarjs 的重复字面量门禁）。 */
+const CARD_NAME_CLASS = "ocr-card-name";
 const CARD_CSS = [
 	".ocr-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}",
 	".ocr-card:hover{border-color:var(--dsw-alias-label-dimmed)}",
@@ -269,12 +528,6 @@ function cardStore(scope) {
 		}
 	};
 }
-/** touched 层与快照的差异字段（值语义比较；undefined 与缺失等价）。 */
-function diffTouched(touched, value) {
-	const out = [];
-	for (const key of Object.keys(touched)) if (JSON.stringify(touched[key] ?? null) !== JSON.stringify(value[key] ?? null)) out.push(key);
-	return out;
-}
 function SaveBar(props) {
 	const { t } = props;
 	const disabled = !props.writable || props.busy;
@@ -338,7 +591,7 @@ function OcrPluginCard(props) {
 	const { title, description, children } = props;
 	const [open, setOpen] = (0, react.useState)(false);
 	const pathKey = "d";
-	const headRow = (0, react.createElement)("span", { className: "ocr-card-head" }, (0, react.createElement)("span", { className: "ocr-card-name" }, title), (0, react.createElement)("span", { className: "ocr-card-desc" }, description));
+	const headRow = (0, react.createElement)("span", { className: "ocr-card-head" }, (0, react.createElement)("span", { className: CARD_NAME_CLASS }, title), (0, react.createElement)("span", { className: "ocr-card-desc" }, description));
 	const chevron = (0, react.createElement)("svg", {
 		width: 14,
 		height: 14,
@@ -469,6 +722,225 @@ function currentConfigText(t, current) {
 		keyPart: t(current.keyIsDynamic ? "dynamicKey" : "plainKeyWarning")
 	});
 }
+/** 装法枚举到文案键：查表而不是嵌套三元（本仓 lint 禁嵌套三元），查不到就是「未识别」那一档。 */
+const CHANNEL_KEYS = {
+	brew: "channelBrew",
+	npm: "channelNpm"
+};
+/** 那份 CLI 是怎么装上的，翻成人话。判不出来源（含 host 没报这一档）不猜。 */
+function channelText(t, channel) {
+	return t(CHANNEL_KEYS[channel ?? ""] ?? "channelUnknown");
+}
+/**
+* 外部 CLI 可得性那一行的文本。三档来源与「宿主没报」四种说法，判据全在 host 侧
+* （`lib/cli.ts` 的 resolveOcrAvailability），卡片只翻译结论——两处各算各的就会漂。
+*/
+function binaryStatusText(t, binary) {
+	if (binary === null) return t("binaryUnknown");
+	if (binary.source === "bundled") return t("binaryBundled", {
+		path: binary.path ?? "",
+		channel: channelText(t, binary.channel)
+	});
+	if (binary.source === "path") return t("binaryPath", {
+		path: binary.path ?? "",
+		channel: channelText(t, binary.channel)
+	});
+	return t("binaryNone");
+}
+/**
+* 版本核对那一行：「插件按哪一版核对」恒说，「本机是哪一版」只在测过之后才说。
+* 没测过时不编造任何结论，也不在这里重复「点检测」——那句在按钮本身与区块指路里已经有了。
+*/
+function cliVersionText(t, binary) {
+	if (binary?.expectedVersion === void 0) return "";
+	const expected = binary.expectedVersion;
+	const lines = [t("versionExpected", { expected })];
+	if (binary.measuredVersion !== null) lines.push(binary.measuredVersion === expected ? t("versionMatched", { actual: binary.measuredVersion }) : t("versionDiverged", {
+		actual: binary.measuredVersion,
+		expected
+	}));
+	return lines.join(" · ");
+}
+/**
+* 装法那一行：只在两条路都没有候选时出现。已装着的时候这条是噪音——那种情况下用户要的是
+* 「哪一份、什么版本、要不要换」，那两行已经说了。
+*/
+function cliInstallText(binary) {
+	if (binary?.source !== "none") return "";
+	return binary.installHint ?? "";
+}
+/** 一条错误提示行的类名（多处在用；sonarjs 的重复字面量门禁要求收成常量）。 */
+const STATUS_ERROR_CLASS = "ocr-status ocr-err";
+/** 一条成功/失败回执行的类名（动作条、探测回执共用）。 */
+function statusClass(ok) {
+	return `ocr-status ${ok ? "ocr-ok" : "ocr-err"}`;
+}
+/**
+* 外部 CLI 状态行：可得性 + 「检测」按钮 + 最近一次探测回执。
+*
+* 刻意画在 provider 表单**之外**（provider 源不可用时也要看得见）——「这台机器有没有
+* ocr」与「宿主能不能列出 provider」是两件事，混在一支里会让缺 CLI 的机器连原因都看不到。
+* 回执用 `.ocr-status`（`white-space:pre-wrap`）而不是输入框：那段文本里就有上游给的
+* `npm i -g …` 命令，要能选中复制，而本包不提供剪贴板 API（非安全上下文会静默失败）。
+*/
+function buildCliStatusRow(deps) {
+	const { t } = deps;
+	const label = (0, react.createElement)("div", { className: CARD_NAME_CLASS }, t("binaryTitle"));
+	const button = (0, react.createElement)("button", {
+		className: "ocr-btn",
+		type: "button",
+		disabled: deps.busy !== null,
+		onClick: deps.onProbe,
+		"data-field": "probe"
+	}, deps.busy === "probe" ? t("detecting") : t("detectCli"));
+	const row = (0, react.createElement)("div", {
+		className: "ocr-row",
+		style: {
+			justifyContent: "flex-start",
+			gap: 8
+		}
+	}, label, button);
+	const statusText = binaryStatusText(t, deps.binary);
+	const status = (0, react.createElement)("div", { className: "ocr-hint" }, statusText);
+	const versionText = cliVersionText(t, deps.binary);
+	const versionLine = versionText === "" ? null : (0, react.createElement)("div", { className: "ocr-hint" }, versionText);
+	const hintText = cliInstallText(deps.binary);
+	const installLine = hintText === "" ? null : (0, react.createElement)("div", { className: "ocr-hint" }, hintText);
+	const probe = deps.probeMsg ? (0, react.createElement)("div", {
+		className: statusClass(deps.probeMsg.ok),
+		"data-field": "probe-result"
+	}, deps.probeMsg.text) : null;
+	return (0, react.createElement)("div", {
+		style: { padding: "2px 0" },
+		"data-field": "cli-status"
+	}, row, status, versionLine, installLine, probe);
+}
+/**
+* 徽标用的短文案（标题旁那只标签放不下整句装法）。与 `binaryStatusText` 同一判据、
+* 不同长度：两处各算一份「哪一档」就会漂，所以入参仍是 host 送的那份 `OcrBinaryView`。
+*
+* 「实测过且与核对版本不一致」压过来源那一档：用户扫一眼列表要看到的结论是「这份 CLI
+* 与本插件不同版本」，来源在哪一行里已经写了。没实测过就不压——那时不一致与否无从谈起。
+*/
+function cliBadgeText(t, binary) {
+	if (binary === null) return t("badgeUnknown");
+	if (binary.expectedVersion !== void 0 && binary.measuredVersion !== null && binary.measuredVersion !== binary.expectedVersion) return t("badgeDiverged");
+	if (binary.source === "bundled") return t("badgeBundled");
+	if (binary.source === "path") return t("badgePath");
+	return t("badgeNone");
+}
+/** 这页说的是不是本包（bundle 页与它的行页都算；官方插件页 `item` 没有包名可比）。
+*  导出是因为「在别人插件的页上白拉一次自己的端点」这条判据只能在这里钉。 */
+function isOwnSubject(subject) {
+	return subject.kind !== "item" && subject.pkg.name === BUNDLE_PKG;
+}
+/** 徽标那枚元素（状态已到才画；取状态与 subject 过滤留给组件，用例才不必起渲染器）。 */
+function buildCliBadge(t, status) {
+	return (0, react.createElement)("span", {
+		className: "ocr-hint",
+		"data-field": "cli-badge"
+	}, cliBadgeText(t, status));
+}
+/**
+* 订阅一次外部 CLI 可得性（GET providers 的 `ocrBinary` 那半，纯 fs 判据、不起进程）。
+*
+* `active` 为假（这页说的不是本包）时既不发请求也不画东西：官方契约是「对无话可说的
+* subject 渲染 null」，在别人插件的页面上拉一次自己的端点属于白干的活。
+* @returns undefined = 还没回来（渲染 null，不闪「状态未知」）；null = 宿主没报。
+*/
+function useCliStatus(active, load) {
+	const [status, setStatus] = (0, react.useState)(void 0);
+	(0, react.useEffect)(() => {
+		let alive = true;
+		const settle = (value) => {
+			if (alive) setStatus(value);
+		};
+		const run = async () => {
+			try {
+				settle(await load());
+			} catch {
+				settle(null);
+			}
+		};
+		if (active) run();
+		return () => {
+			alive = false;
+		};
+	}, [active, load]);
+	return status;
+}
+/** 详情页标题旁的徽标：一句话说明外部 ocr 从哪条路来（或压根没有）。 */
+function OcrCliBadge(props) {
+	const mine = isOwnSubject(props.subject);
+	const status = useCliStatus(mine, props.loadCliStatus);
+	if (!mine || status === void 0) return null;
+	return buildCliBadge(props.t, status);
+}
+/** 区块体：标题 + 完整状态那一行 + 版本核对那一行 + 装法（没装时）+ 指路那一句。 */
+function buildCliSection(t, status) {
+	const title = (0, react.createElement)("div", { className: CARD_NAME_CLASS }, t("binaryTitle"));
+	const body = (0, react.createElement)("div", { className: "ocr-hint" }, binaryStatusText(t, status));
+	const versionText = cliVersionText(t, status);
+	const versionLine = versionText === "" ? null : (0, react.createElement)("div", { className: "ocr-hint" }, versionText);
+	const hintText = cliInstallText(status);
+	const installLine = hintText === "" ? null : (0, react.createElement)("div", { className: "ocr-hint" }, hintText);
+	const hint = (0, react.createElement)("div", { className: "ocr-hint" }, t("binaryProbeHint"));
+	return (0, react.createElement)("div", {
+		style: { padding: "8px 0" },
+		"data-field": "cli-section"
+	}, title, body, versionLine, installLine, hint);
+}
+/** 详情页下方的区块：完整状态 + 「版本号要在配置卡片里点检测」的指路。 */
+function OcrCliSection(props) {
+	const mine = isOwnSubject(props.subject);
+	const status = useCliStatus(mine, props.loadCliStatus);
+	if (!mine || status === void 0) return null;
+	return buildCliSection(props.t, status);
+}
+/**
+* 启用指引的内容：一句「两条路都没找到」+ 带版本的装法 + 去详情页 / 收起这两个动作。
+* 动作回调由宿主给（`onOpenDetails` 顺带把用户送到本包配置页，那里才有「检测」按钮）。
+* @param t - 文案口。
+* @param props - 只取那两个动作回调。
+* @param install - 装法那一句（host 按核对版本与部署偏好组好的原文）。
+*/
+function buildCliActivation(t, props, install) {
+	const text = (0, react.createElement)("div", { className: STATUS_ERROR_CLASS }, t("binaryNone"));
+	const installLine = install === "" ? null : (0, react.createElement)("div", { className: "ocr-hint" }, install);
+	const details = (0, react.createElement)("button", {
+		className: "ocr-btn",
+		type: "button",
+		onClick: props.onOpenDetails,
+		"data-field": "guide-details"
+	}, t("binaryGuideDetails"));
+	const dismiss = (0, react.createElement)("button", {
+		className: "ocr-btn",
+		type: "button",
+		onClick: props.onDismiss,
+		"data-field": "guide-dismiss"
+	}, t("binaryGuideDismiss"));
+	return (0, react.createElement)("div", {
+		style: {
+			padding: "8px 0",
+			display: "flex",
+			gap: 8
+		},
+		"data-field": "cli-activation"
+	}, text, installLine, details, dismiss);
+}
+/**
+* 启用后的一次性指引：只在「两条路都没找到 ocr」那一刻说话。
+*
+* 这是官方给第三方 bundle 的最外侧位置（`plugins.bundle.activation`，用户从列表启用本包
+* 后由页面渲染）。列表卡片上那排标签全部来自宿主对条目自身的判定，插件注入不进去，所以
+* 「装没装外部 CLI」能被显示的最外一处就是这里，外加详情页那只徽标。
+*/
+function OcrCliActivation(props) {
+	const mine = props.packageName === BUNDLE_PKG;
+	const status = useCliStatus(mine, props.loadCliStatus);
+	if (!mine || status?.source !== "none") return null;
+	return buildCliActivation(props.t, props, cliInstallText(status));
+}
 /** 数据齐（source.status === "ready"）那一支：provider/model 两行 + 三个动作按钮 +
 *  当前配置与 key 两行提示。拆出来是因为这一支画的是整块表单，与上面三条「一行提示」
 *  的降级支本就不是同一件事。 */
@@ -512,21 +984,21 @@ function buildReadyProviderSection(deps, data) {
 	const applyBtn = (0, react.createElement)("button", {
 		className: "ocr-btn ocr-btn-primary",
 		type: "button",
-		disabled: deps.busy,
+		disabled: deps.busy !== null,
 		onClick: deps.onApply,
 		"data-field": "apply"
-	}, deps.busy ? t("applying") : t("applyToOcr"));
+	}, deps.busy === "apply" ? t("applying") : t("applyToOcr"));
 	const testBtn = (0, react.createElement)("button", {
 		className: "ocr-btn",
 		type: "button",
-		disabled: deps.busy,
+		disabled: deps.busy !== null,
 		onClick: deps.onTest,
 		"data-field": "test"
 	}, t("testConnection"));
 	const migrateBtn = (0, react.createElement)("button", {
 		className: "ocr-btn",
 		type: "button",
-		disabled: deps.busy,
+		disabled: deps.busy !== null,
 		onClick: deps.onMigrate,
 		"data-field": "migrate"
 	}, t("migrateKeys"));
@@ -541,7 +1013,12 @@ function buildReadyProviderSection(deps, data) {
 	const currentHint = cur.provider === "" ? t("noProvider") : currentConfigText(t, cur);
 	const currentInfo = (0, react.createElement)("div", { className: "ocr-hint" }, currentHint);
 	const keyInfo = (0, react.createElement)("div", { className: "ocr-hint" }, deps.keyHint);
-	return (0, react.createElement)("div", {}, providerRow, modelRow, actionRow, currentInfo, keyInfo);
+	const verify = data.endpointVerify ?? null;
+	const verifyWarning = verify !== null && !verify.ok ? (0, react.createElement)("div", {
+		className: STATUS_ERROR_CLASS,
+		"data-field": "endpoint-verify"
+	}, t("endpointVerifyFailed", { reason: verify.message })) : null;
+	return (0, react.createElement)("div", {}, verifyWarning, providerRow, modelRow, actionRow, currentInfo, keyInfo);
 }
 /** Provider / Model 选择与应用区：三条降级各出一行提示（数据未就绪/读取失败/
 *  数据源不可用），只有 source.status === "ready" 才交给 buildReadyProviderSection 画表单。 */
@@ -549,13 +1026,13 @@ function buildProviderSection(deps) {
 	const { t } = deps;
 	if (deps.fetchError !== null) {
 		const reason = t("loadProvidersFailed", { error: deps.fetchError });
-		return (0, react.createElement)("div", { className: "ocr-status ocr-err" }, reason);
+		return (0, react.createElement)("div", { className: STATUS_ERROR_CLASS }, reason);
 	}
 	if (deps.data === null) return (0, react.createElement)("div", { className: "ocr-status ocr-muted" }, t("loadingProviders"));
 	if (deps.data.source.status !== "ready") {
 		const sourceMessage = deps.data.source.message;
 		const line = t("readProvidersFailed", { reason: sourceMessage === "" ? t("noReason") : sourceMessage });
-		return (0, react.createElement)("div", { className: "ocr-status ocr-err" }, line);
+		return (0, react.createElement)("div", { className: STATUS_ERROR_CLASS }, line);
 	}
 	return buildReadyProviderSection(deps, deps.data);
 }
@@ -693,16 +1170,21 @@ function buildSettingsSection(deps, writable, setField) {
 	const statusHintNode = deps.statusHint !== null && deps.statusHint !== "" ? (0, react.createElement)("div", { className: "ocr-hint" }, deps.statusHint) : null;
 	return (0, react.createElement)("div", { style: { padding: "2px 0" } }, statusHintNode, effortRow, languageRow, verifyRow, maxCommentsRow, timeoutRow, configPathRow, saveRow);
 }
-/** 读 providers 端点（卡片唯一的 GET）：失败只落 fetchError 文本，不抛穿渲染。 */
-async function refreshProviders(sinks) {
+/**
+* 读设置页载荷（卡片唯一的数据入口）：失败只落 fetchError 文本，不抛穿渲染。
+* 拒绝回执（`ok:false`）里的 error 就是「为什么读不到」的可读原因；只报一句
+* 「读取失败」等于把最有用的半句丢掉。
+*/
+async function refreshProviders(reader, t, sinks) {
 	sinks.setFetchError(null);
 	try {
-		const res = await fetch(PROVIDERS_URL, { headers: { accept: "application/json" } });
-		if (!res.ok) {
-			const detail = strOf(t(await res.json().catch(() => ({})), "error"));
-			throw new Error(detail === "" ? `HTTP ${res.status}` : detail);
+		if (reader === void 0) throw new Error(t("remoteUnavailable"));
+		const json = await reader.providers();
+		if (n(json, "ok") === false) {
+			const detail = strOf(n(json, "error"));
+			throw new Error(detail === "" ? t("remoteUnavailable") : detail);
 		}
-		const payload = providersPayloadOf(await res.json());
+		const payload = providersPayloadOf(json);
 		sinks.setData(payload);
 		return payload;
 	} catch (error) {
@@ -710,49 +1192,58 @@ async function refreshProviders(sinks) {
 		return null;
 	}
 }
-/**
-* 写端点统一出口：回填宿主下发的 x-ocr-csrf token（宿主只接受带 token 的
-* POST，sec-fetch-site 挡不住本地进程）。宿主每次 apply 会换 token，页面开着
-* 时它可能已过期 → 403 就重取 token 重试一次，避免卡片变成「点什么都没反应」。
-*/
-async function postWithCsrf(url, body, deps) {
-	const request = (token) => fetch(url, {
-		method: "POST",
-		headers: {
-			[CSRF_HEADER]: token,
-			...body === void 0 ? {} : { "content-type": "application/json" }
-		},
-		...body === void 0 ? {} : { body }
-	});
-	const first = await request(deps.csrf);
-	if (first.status !== 403) return first;
-	return await request((await deps.refresh())?.csrf ?? "");
+/** 把读取器接成动作函数认的那个 `post` 形状：拒绝回执原样交回，传输失败才抛。 */
+function readerPost(reader, t) {
+	return async (action, body) => {
+		if (reader === void 0) throw new Error(t("remoteUnavailable"));
+		switch (action) {
+			case "select": {
+				const provider = strOf(n(body, "provider"));
+				const model = strOf(n(body, "model"));
+				const reply = await reader.select(provider, model);
+				return { json: () => Promise.resolve(reply) };
+			}
+			case "migrate": {
+				const reply = await reader.migrate();
+				return { json: () => Promise.resolve(reply) };
+			}
+			case "test": {
+				const reply = await reader.test();
+				return { json: () => Promise.resolve(reply) };
+			}
+			case "probe": {
+				const reply = await reader.probe();
+				return { json: () => Promise.resolve(reply) };
+			}
+			default: throw new Error(`unknown remote action: ${String(action)}`);
+		}
+	};
 }
 /** POST select：把选中的 provider/model 写进 OCR 配置，回执里按 autoVerify 决定是否带 llm test。 */
 async function runApplySelection(deps) {
-	const { t: t$1, effectiveProvider, effectiveModel } = deps;
+	const { t, effectiveProvider, effectiveModel } = deps;
 	if (!effectiveProvider || !effectiveModel) {
 		deps.setActionMsg({
 			ok: false,
-			text: t$1("pickProviderModel")
+			text: t("pickProviderModel")
 		});
 		return;
 	}
-	deps.setBusy(true);
+	deps.setBusy("apply");
 	deps.setActionMsg(null);
 	try {
-		const selJson = await (await deps.post(SELECT_URL, JSON.stringify({
+		const selJson = await (await deps.post("select", {
 			provider: effectiveProvider,
 			model: effectiveModel
-		}))).json();
-		if (t(selJson, "ok") === true) {
+		})).json();
+		if (n(selJson, "ok") === true) {
 			let testText;
-			const llmTestRaw = t(selJson, "llmTest");
-			if (e(llmTestRaw)) {
-				const testOutput = strOf(t(llmTestRaw, "output")).slice(0, 400);
-				testText = t(llmTestRaw, "ok") === true ? t$1("llmTestPassed") : `${t$1("llmTestFailed")}${testOutput}`;
-			} else testText = t$1("notVerified");
-			const appliedText = t$1("applied", {
+			const llmTestRaw = n(selJson, "llmTest");
+			if (e$2(llmTestRaw)) {
+				const testOutput = strOf(n(llmTestRaw, "output")).slice(0, 400);
+				testText = n(llmTestRaw, "ok") === true ? t("llmTestPassed") : `${t("llmTestFailed")}${testOutput}`;
+			} else testText = t("notVerified");
+			const appliedText = t("applied", {
 				provider: effectiveProvider,
 				model: effectiveModel,
 				test: testText
@@ -763,71 +1254,105 @@ async function runApplySelection(deps) {
 			});
 			deps.refresh();
 		} else {
-			const failure = strOf(t(selJson, "error"));
+			const failure = strOf(n(selJson, "error"));
 			deps.setActionMsg({
 				ok: false,
-				text: failure === "" ? t$1("applyFailed") : failure
+				text: failure === "" ? t("applyFailed") : failure
 			});
 		}
 	} catch (error) {
-		const failedText = `${t$1("requestFailed")}${errorSummary(error)}`;
+		const failedText = `${t("requestFailed")}${errorSummary(error)}`;
 		deps.setActionMsg({
 			ok: false,
 			text: failedText
 		});
 	} finally {
-		deps.setBusy(false);
+		deps.setBusy(null);
 	}
 }
 /** POST migrate：明文 api_key 一键迁到 api_key_cmd，回执把迁移/跳过两个名单拼成一行。 */
 async function runMigrateKeys(deps) {
-	const { t: t$2 } = deps;
-	deps.setBusy(true);
+	const { t } = deps;
+	deps.setBusy("migrate");
 	deps.setActionMsg(null);
 	try {
-		const json = await (await deps.post(MIGRATE_URL)).json();
-		const migratedVal = t(json, "migrated");
-		const skippedVal = t(json, "skippedUnknown");
+		const json = await (await deps.post("migrate")).json();
+		const migratedVal = n(json, "migrated");
+		const skippedVal = n(json, "skippedUnknown");
 		const migrated = Array.isArray(migratedVal) ? migratedVal.filter((item) => typeof item === "string") : [];
 		const skipped = Array.isArray(skippedVal) ? skippedVal.filter((item) => typeof item === "string") : [];
-		const ok = t(json, "ok") === true;
-		const head = ok ? (migrated.length > 0 ? t$2("migratedPrefix") + migrated.join(", ") : t$2("noPlainKey")) + (skipped.length > 0 ? t$2("skippedPrefix") + skipped.join(", ") : "") : t$2("migrateFailed");
+		const ok = n(json, "ok") === true;
+		const head = ok ? (migrated.length > 0 ? t("migratedPrefix") + migrated.join(", ") : t("noPlainKey")) + (skipped.length > 0 ? t("skippedPrefix") + skipped.join(", ") : "") : t("migrateFailed");
 		deps.setActionMsg({
 			ok,
 			text: head
 		});
 		deps.refresh();
 	} catch (error) {
-		const failedText = `${t$2("requestFailed")}${errorSummary(error)}`;
+		const failedText = `${t("requestFailed")}${errorSummary(error)}`;
 		deps.setActionMsg({
 			ok: false,
 			text: failedText
 		});
 	} finally {
-		deps.setBusy(false);
+		deps.setBusy(null);
 	}
 }
 /** POST test：手动触发 ocr llm test，输出原样回显在动作条上。 */
 async function runTestConnection(deps) {
-	const { t: t$3 } = deps;
-	deps.setBusy(true);
+	const { t } = deps;
+	deps.setBusy("test");
 	deps.setActionMsg(null);
 	try {
-		const json = await (await deps.post(TEST_URL)).json();
-		const ok = t(json, "ok") === true;
-		const testOutput = strOf(t(json, "output"));
+		const json = await (await deps.post("test")).json();
+		const ok = n(json, "ok") === true;
+		const testOutput = strOf(n(json, "output"));
 		deps.setActionMsg({
 			ok,
-			text: (ok ? t$3("llmTestPassed") : t$3("llmTestFailed")) + testOutput
+			text: (ok ? t("llmTestPassed") : t("llmTestFailed")) + testOutput
 		});
 	} catch (error) {
-		const failedText = `${t$3("requestFailed")}${errorSummary(error)}`;
+		const failedText = `${t("requestFailed")}${errorSummary(error)}`;
 		deps.setActionMsg({
 			ok: false,
 			text: failedText
 		});
 	} finally {
-		deps.setBusy(false);
+		deps.setBusy(null);
+	}
+}
+/**
+* POST probe：跑一次 `ocr version`。
+*
+* 回执里的 `output` 原样附上，不从中抽「有新版本」那句——那是上游的措辞，抽一次就多
+* 一处会跟着漂的判据；那段文本本来就带在页面上供人选中复制（含上游给的 `npm i -g …`）。
+*/
+async function runProbe(deps) {
+	const { t } = deps;
+	deps.setBusy("probe");
+	deps.setProbeMsg(null);
+	try {
+		const json = await (await deps.post("probe")).json();
+		const ok = n(json, "ok") === true;
+		const head = ok ? t("probeVersion", { version: strOf(n(json, "version")) }) : t("probeReason", { reason: strOf(n(json, "reason")) });
+		const output = strOf(n(json, "output"));
+		const lines = [
+			head,
+			strOf(n(json, "changeText")),
+			output
+		].filter((line) => line !== "");
+		deps.setProbeMsg({
+			ok,
+			text: lines.join("\n")
+		});
+		deps.refresh();
+	} catch (error) {
+		deps.setProbeMsg({
+			ok: false,
+			text: `${t("requestFailed")}${errorSummary(error)}`
+		});
+	} finally {
+		deps.setBusy(null);
 	}
 }
 /** 只写差异字段：touched 值为 undefined → 写 null（= 清回 schema 默认）。
@@ -836,7 +1361,7 @@ async function runTestConnection(deps) {
 *  传输失败仍以 rejection 表达。 */
 async function saveSettingsDraft(deps) {
 	const { t, value, touched } = deps;
-	const keys = diffTouched(touched, value);
+	const keys = e(touched, value);
 	if (keys.length === 0) return;
 	deps.setSettingsBusy(true);
 	deps.setSaveError(null);
@@ -885,7 +1410,7 @@ function cardHints(t, ready, status, data) {
 function buildProviderPanel(deps) {
 	const { actionMsg } = deps;
 	const providerSection = buildProviderSection(deps);
-	const actionMsgNode = actionMsg ? (0, react.createElement)("div", { className: `ocr-status ${actionMsg.ok ? "ocr-ok" : "ocr-err"}` }, actionMsg.text) : null;
+	const actionMsgNode = actionMsg ? (0, react.createElement)("div", { className: statusClass(actionMsg.ok) }, actionMsg.text) : null;
 	return (0, react.createElement)("div", { style: { padding: "2px 0" } }, providerSection, actionMsgNode);
 }
 function OcrCard(props) {
@@ -896,19 +1421,17 @@ function OcrCard(props) {
 	const writable = snap.writable && ready;
 	const [data, setData] = (0, react.useState)(null);
 	const [fetchError, setFetchError] = (0, react.useState)(null);
-	const [busy, setBusy] = (0, react.useState)(false);
+	const [busy, setBusy] = (0, react.useState)(null);
 	const [actionMsg, setActionMsg] = (0, react.useState)(null);
-	const refresh = async () => refreshProviders({
+	const [probeMsg, setProbeMsg] = (0, react.useState)(null);
+	const refresh = (0, react.useCallback)(async () => refreshProviders(props.reader, t, {
 		setData,
 		setFetchError
-	});
+	}), [props.reader, t]);
 	(0, react.useEffect)(() => {
 		refresh();
-	}, []);
-	const post = async (url, body) => postWithCsrf(url, body, {
-		csrf: data?.csrf ?? "",
-		refresh
-	});
+	}, [refresh]);
+	const post = readerPost(props.reader, t);
 	const [selProvider, setSelProvider] = (0, react.useState)("");
 	const [selModel, setSelModel] = (0, react.useState)("");
 	const { effectiveProvider, effectiveModel, chosenProvider, modelOptions } = resolveSelection(data?.providers ?? [], data?.current, selProvider, selModel);
@@ -930,7 +1453,7 @@ function OcrCard(props) {
 	const [touched, setTouched] = (0, react.useState)({});
 	const [settingsBusy, setSettingsBusy] = (0, react.useState)(false);
 	const [saveError, setSaveError] = (0, react.useState)(null);
-	const dirty = diffTouched(touched, value).length > 0;
+	const dirty = e(touched, value).length > 0;
 	const setField = (field, draft) => {
 		setTouched((prev) => ({
 			...prev,
@@ -954,6 +1477,8 @@ function OcrCard(props) {
 		chosenProvider,
 		modelOptions,
 		...cardHints(t, ready, snap.status, data),
+		binary: data?.ocrBinary ?? null,
+		probeMsg,
 		...draftFieldsOf(touched, value),
 		dirty,
 		settingsBusy,
@@ -969,6 +1494,15 @@ function OcrCard(props) {
 		onMigrate: () => {
 			runMigrateKeys(actions);
 		},
+		onProbe: () => {
+			runProbe({
+				t,
+				post,
+				refresh,
+				setBusy,
+				setProbeMsg
+			});
+		},
 		onField: setField,
 		onSave: () => {
 			saveSettingsDraft({
@@ -984,13 +1518,14 @@ function OcrCard(props) {
 		onDiscard: discard
 	};
 	const providerPanel = buildProviderPanel(deps);
+	const cliStatus = buildCliStatusRow(deps);
 	const settingsSection = buildSettingsSection(deps, writable, setField);
 	const headTitle = t("cardTitle");
 	const headDesc = t("cardDescription");
 	return (0, react.createElement)(OcrPluginCard, {
 		title: headTitle,
 		description: headDesc
-	}, providerPanel, settingsSection);
+	}, cliStatus, providerPanel, settingsSection);
 }
 const inject = [
 	"slots",
@@ -998,11 +1533,7 @@ const inject = [
 	"locale"
 ];
 function apply(ctx) {
-	if (globalThis.ocrReviewCardApplied === true) return;
-	globalThis.ocrReviewCardApplied = true;
-	ctx.effect(() => () => {
-		globalThis.ocrReviewCardApplied = void 0;
-	}, "ocr-review-card: apply claim");
+	if (!e$1(ctx, "ocrReviewCardApplied", "ocr-review-card: apply claim")) return;
 	ctx.effect(() => {
 		const tag = document.createElement("style");
 		tag.id = "ocr-review-card-css";
@@ -1016,6 +1547,7 @@ function apply(ctx) {
 	const store = cardStore(scope);
 	ctx.effect(() => ctx.locale.register(NS, UI_MESSAGES), "ocr-review-card: locale dictionaries");
 	const t = ctx.locale.bind(NS);
+	const reader = createOcrReader(ctx);
 	ctx.slots.inject("plugins.bundle.config", () => {
 		return ctx.slots.register({
 			name: "plugins.bundle.config",
@@ -1023,22 +1555,60 @@ function apply(ctx) {
 			inject: () => ({
 				t,
 				hooks: { card: store },
-				set: (field, value) => scope.set(field, value)
+				set: (field, value) => scope.set(field, value),
+				...reader === void 0 ? {} : { reader }
 			})
 		}, OcrCard);
 	});
+	const cliShare = {
+		t,
+		loadCliStatus: () => loadCliStatus(reader)
+	};
+	ctx.slots.inject("plugins.detail.badge", () => ctx.slots.register({
+		name: "plugins.detail.badge",
+		id: `${NS}-cli-badge`,
+		order: 100,
+		label: "ocr-review CLI badge",
+		inject: () => cliShare
+	}, OcrCliBadge));
+	ctx.slots.inject("plugins.detail.section", () => ctx.slots.register({
+		name: "plugins.detail.section",
+		id: `${NS}-cli-section`,
+		order: 100,
+		label: "ocr-review CLI section",
+		inject: () => cliShare
+	}, OcrCliSection));
+	ctx.slots.inject("plugins.bundle.activation", () => ctx.slots.register({
+		name: "plugins.bundle.activation",
+		key: BUNDLE_PKG,
+		inject: () => cliShare
+	}, OcrCliActivation));
 }
 //#endregion
 exports.OcrCard = OcrCard;
+exports.OcrCliActivation = OcrCliActivation;
+exports.OcrCliBadge = OcrCliBadge;
+exports.OcrCliSection = OcrCliSection;
 exports.SaveBar = SaveBar;
 exports.apply = apply;
+exports.binaryOf = binaryOf;
+exports.binaryStatusText = binaryStatusText;
+exports.buildCliActivation = buildCliActivation;
+exports.buildCliBadge = buildCliBadge;
+exports.buildCliSection = buildCliSection;
+exports.buildCliStatusRow = buildCliStatusRow;
 exports.buildProviderSection = buildProviderSection;
 exports.buildSettingsSection = buildSettingsSection;
 exports.cardStore = cardStore;
+exports.cliBadgeText = cliBadgeText;
+exports.cliInstallText = cliInstallText;
+exports.cliVersionText = cliVersionText;
 exports.currentConfigText = currentConfigText;
-exports.diffTouched = diffTouched;
 exports.inject = inject;
+exports.isOwnSubject = isOwnSubject;
+exports.loadCliStatus = loadCliStatus;
 exports.providerOptionLabel = providerOptionLabel;
+exports.runProbe = runProbe;
     return module.exports;
   },
 });