@us_momo/dsh-erp-analysis 0.0.0-stage → 1.2.2

package/README.md

@@ -1,3 +1,78 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# 公司 ERP 分析插件
+
+在 DeepSeek Harness（DSH）中使用本人 ERP 账号开展选品研究、经营、SKU、备货、广告和财务分析。插件提供统一的 12 套公司方法；业务数据由 ERP 按本人权限提供，模型由使用者在 DSH 中选择。
+
+当前版本：**1.2.2**。适用于 Windows DSH，最低版本 `0.2.1-rc.3`。
+
+## 从 npm 安装
+
+1. 在 DSH 打开“插件 → 添加插件”。
+2. 在“包名或地址”填写：
+
+   ```text
+   @us_momo/dsh-erp-analysis
+   ```
+
+3. 点击“安装”，安装完成后点击“立即启用”，按提示重启 DSH。
+4. 打开左侧“公司 ERP 分析”，点击“登录 ERP”，打开显示的链接并核对本人账号。浏览器账号不对时点击“换个账号登录”。
+5. 返回 DSH 刷新状态，确认当前账号后点击“开始公司分析”。
+
+如需固定安装本次版本，填写：
+
+```text
+@us_momo/dsh-erp-analysis@1.2.2
+```
+
+ERP 管理员须先为该账号开启“允许 DSH 接入”。安装插件本身不授予 ERP 数据权限。
+
+安装时可以在 DSH 的 Registry 选项中选择 npm 官方源或国内镜像。镜像可能晚于官方源同步新版本；插件包下载不需要 Git 或访问 GitHub。
+
+## 登录、切换与退出
+
+面板显示当前 ERP 账号，登录记住 30 天。同一人可以在多台电脑登录，电脑名称只用于识别登录来源。
+
+- **切换账号**：自动退出当前电脑的旧授权，再提供新登录链接。登录新账号后，新建公司分析对话。
+- **退出登录**：退出当前电脑的 ERP 授权，不影响其他电脑。
+- 浏览器中的 ERP 会话独立；确认页面的“换个账号登录”可退出该浏览器会话，再沿原 ERP 入口登录。
+
+旧分析连接在切换后停止 ERP 调用。待共享报告保留原归属，不会以新账号上传；原有聊天和工作文件保留在本机。
+
+## 更新插件
+
+使用 npm 包名安装后，完成当前分析，在 **DSH Market → 已安装** 中刷新检查，发现新版时点击 **更新**，按提示重启 DSH。新建公司分析对话使用新版。该按钮由 DSH Market 提供；未使用 DSH Market 时，在 DSH 插件管理中卸载后重新安装同一 npm 包名。刚发布的版本可能需要等待镜像同步或 DSH 的新版本等待策略允许安装。
+
+**旧版首次迁移**：从 GitHub、安装包直链或本地 `.tgz` 安装的旧公司插件，先在 DSH 中卸载一次，再用 `@us_momo/dsh-erp-analysis` 安装、立即启用并按提示重启。旧包名为 `@company/dsh-erp-analysis`，不能和新包同时启用。
+
+本机登录和工作资料位于 `%LOCALAPPDATA%/CompanyDSH`，与插件安装目录分开，正常更新和重新安装会保留。
+
+## GitHub 安装包备用入口
+
+也可以使用 GitHub Release 成品安装，不需要 Git：
+
+```text
+https://github.com/Huazhufather/DSH_USEC/releases/latest/download/company-dsh-erp-analysis.tgz
+```
+
+安装包直链仍采用卸载后重新安装的手动更新方式。需要 DSH Market 一键更新时，使用上面的 npm 包名安装。
+
+## 公司方法与报告
+
+插件内含选品研究、经营复盘、SKU 策略、库存与供给、运输方案、广告复盘、产品成本、平台利润、平台结算、公司财务、现金安排及企业知识方法。
+
+正式报告在用户明确要求生成或保存后集中共享，已开启 DSH 接入的成员均可读取完整报告，包含成本和利润。普通聊天、草稿和临时附件保留本机。公司知识与共享报告从 ERP 读取，内容变化无需重新安装插件。
+
+选品方向、类目主报告与专题、候选货源、样品评价和研究原件，可在用户明确保存后写入 ERP“选品管理”。新对话读取最新档案继续研究，报告按章节更新并保留历史。机会由人判断，不产生采购、上架或实际付款。
+
+## 仓库内容
+
+本仓库提供可直接安装的插件成品：`package.json` 和插件入口位于根目录，`release.json` 内嵌固定版本的工具及方法资源，安装时无需在同事电脑构建。
+
+1.2.2 增加 npm 发布入口并接入 DSH Market 版本检查和更新，保留 1.2.1 的服务繁忙提示修复。
+
+1.2.0 新增选品研究与原件共享，保留固定安装地址、账号切换和本机资料。
+
+1.1.6 修复未安装 Git 的电脑无法安装的问题：主入口改为 GitHub Release 安装包直链，账号与业务方法沿用原实现。
+
+## 已安装 Git 的环境
+
+也可以填写 `github:Huazhufather/DSH_USEC` 从仓库安装。直接填写仓库地址或此快捷地址需要 Git；普通同事使用上方 npm 包名即可。

package/client.mjs

@@ -0,0 +1,258 @@
+import { generateKeyPairSync, createHash, randomUUID, sign } from "node:crypto";
+import { readFile, writeFile, mkdir, readdir, rename } from "node:fs/promises";
+import { join, basename, dirname } from "node:path";
+import { hostname, userInfo } from "node:os";
+import { execFileSync } from "node:child_process";
+import { trustedErpUrl, readJson, atomicJson } from "./release.mjs";
+export async function secureDirectory(path) {
+  await mkdir(path, { recursive: true, mode: 0o700 });
+  if (process.platform === "win32") {
+    const output = execFileSync(
+      "C:/Windows/System32/whoami.exe",
+      ["/user", "/fo", "csv", "/nh"],
+      { encoding: "utf8", windowsHide: true },
+    );
+    const sid = output.match(/S-1-5-[0-9-]+/);
+    if (!sid) throw new Error("无法确认当前 Windows 用户。");
+    execFileSync(
+      "C:/Windows/System32/icacls.exe",
+      [path, "/inheritance:r", "/grant:r", `*${sid[0]}:(OI)(CI)F`],
+      { windowsHide: true, stdio: "pipe" },
+    );
+  }
+}
+export class TeamClient {
+  constructor(root, config) {
+    this.root = root;
+    this.config = config;
+    this.state = join(root, "private");
+    trustedErpUrl(config.server);
+    this.base = new URL("/api/v1/dsh/", config.server);
+  }
+  async key() {
+    await secureDirectory(this.state);
+    const file = join(this.state, "device-key.pem");
+    let privateKey;
+    try {
+      privateKey = await readFile(file, "utf8");
+    } catch (e) {
+      if (e.code !== "ENOENT") throw e;
+      privateKey = generateKeyPairSync("ed25519", {
+        publicKeyEncoding: { type: "spki", format: "pem" },
+        privateKeyEncoding: { type: "pkcs8", format: "pem" },
+      }).privateKey;
+      await writeFile(file, privateKey, { flag: "wx", mode: 0o600 });
+    }
+    return privateKey;
+  }
+  checkIdentity(device, expectedDeviceId) {
+    if ((expectedDeviceId && device.deviceId !== expectedDeviceId) ||
+        (this.config.pinIdentity && this.boundDeviceId && device.deviceId !== this.boundDeviceId))
+      throw new Error("ERP 账号已切换，请新建公司分析对话。原账号的待共享报告已保留，不会以当前账号上传。");
+    if (this.config.pinIdentity) this.boundDeviceId ||= device.deviceId;
+  }
+  async request(path, { method = "GET", body, signed = true, expectedDeviceId } = {}) {
+    const url = new URL(path, this.base);
+    if (
+      url.origin !== this.base.origin ||
+      !url.pathname.startsWith(this.base.pathname)
+    )
+      throw new Error("无效的公司接口。");
+    const raw =
+      body === undefined ? Buffer.alloc(0) : Buffer.from(JSON.stringify(body));
+    const headers = { "Content-Type": "application/json" };
+    if (signed) {
+      const device = await readJson(join(this.state, "device.json"), null);
+      if (!device) throw new Error("请先关联本人 ERP 账号，再重试本次操作。");
+      this.checkIdentity(device, expectedDeviceId);
+      const time = String(Math.floor(Date.now() / 1000)),
+        nonce = randomUUID();
+      const canonical = [
+        time,
+        nonce,
+        method,
+        url.pathname + url.search,
+        createHash("sha256").update(raw).digest("hex"),
+      ].join("\n");
+      headers["X-DSH-Device"] = device.deviceId;
+      headers["X-DSH-Time"] = time;
+      headers["X-DSH-Nonce"] = nonce;
+      headers["X-DSH-Signature"] = sign(
+        null,
+        Buffer.from(canonical),
+        await this.key(),
+      ).toString("base64");
+    }
+    let response;
+    try {
+      response = await fetch(url, {
+        method,
+        headers,
+        body: method === "GET" ? undefined : raw,
+        redirect: "error",
+        signal: AbortSignal.timeout(120000),
+      });
+    } catch {
+      throw new Error("公司服务暂时无法连接，请保留当前操作后重试。");
+    }
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of response.body) {
+      size += chunk.length;
+      if (size > 32 * 1024 * 1024) throw new Error("服务响应超过限制。");
+      chunks.push(chunk);
+    }
+    let result;
+    try {
+      result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    } catch {
+      throw new Error("公司服务返回了无效响应。");
+    }
+    if (!response.ok) {
+      const code = result.error?.code || `HTTP_${response.status}`;
+      const requestId = typeof result.error?.requestId === "string" &&
+        /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(result.error.requestId)
+        ? result.error.requestId : undefined;
+      const message = response.status === 503 || code === "SERVICE_UNAVAILABLE"
+        ? "公司服务繁忙，请稍后重试。"
+        : `公司服务拒绝本次操作 (${code})`;
+      const e = new Error(message + (requestId ? `（请求编号：${requestId}）` : ""));
+      e.code = code;
+      e.status = response.status;
+      e.requestId = requestId;
+      throw e;
+    }
+    return result;
+  }
+  async connect(deviceName = hostname()) {
+    const previous = await readJson(join(this.state, "device.json"), null);
+    if (previous) {
+      const status = await this.status();
+      if (status.status === "active" || status.canRenew)
+        throw new Error("本机已登录 ERP，请使用续期或点击“切换账号”。");
+      if (status.status === "pending")
+        return {deviceId:previous.deviceId, expiresAt:status.expiresAt,
+          verificationUrl:new URL(`connect/${encodeURIComponent(previous.deviceId)}`,this.base).href};
+      if (status.status !== "revoked" || status.linked && !status.revoked)
+        throw new Error("尚未确认旧关联已解除，请先核对状态。");
+    }
+    const { createPublicKey } = await import("node:crypto");
+    const publicKey = createPublicKey(await this.key()).export({
+      type: "spki",
+      format: "pem",
+    });
+    const result = await this.request("devices/request", {
+      method: "POST",
+      signed: false,
+      body: { publicKey, deviceName },
+    });
+    await atomicJson(join(this.state, "device.json"), {
+      deviceId: result.deviceId,
+    });
+    const verification = trustedErpUrl(result.verificationUrl);
+    if (verification.origin !== this.base.origin)
+      throw new Error("确认地址与公司 ERP 不一致。");
+    return {
+      deviceId: result.deviceId,
+      verificationUrl: verification.href,
+      expiresAt: result.expiresAt,
+    };
+  }
+  async status() {
+    const device = await readJson(join(this.state, "device.json"), null);
+    if (!device) return { status: "unpaired" };
+    return this.request(
+      `devices/${encodeURIComponent(device.deviceId)}/status`,
+      { method: "POST", body: {} },
+    );
+  }
+  async logout() {
+    const device = await readJson(join(this.state, "device.json"), null);
+    if (device) {
+      const result = await this.request(`devices/${encodeURIComponent(device.deviceId)}/revoke`, {
+        method: "POST", body: {}, expectedDeviceId: device.deviceId,
+      });
+      if (result.status !== "revoked" || result.deviceId !== device.deviceId)
+        throw new Error("尚未确认当前账号已退出，请刷新状态后重试。");
+      await atomicJson(join(this.state, "device.json"), null);
+    }
+    return { status: "unpaired" };
+  }
+  async switchAccount() {
+    await this.logout();
+    return this.connect();
+  }
+  async tools() {
+    return this.request("tools");
+  }
+  async call(name, args = {}, { expectedDeviceId } = {}) {
+    return this.request("tools/call", {
+      method: "POST",
+      body: { name, arguments: args },
+      expectedDeviceId,
+    });
+  }
+  async saveReport(report) {
+    await secureDirectory(this.state);
+    const device = await readJson(join(this.state, "device.json"), null);
+    if (!device) throw new Error("请先关联本人 ERP 账号，再保存共享报告。");
+    this.checkIdentity(device);
+    const queue = join(this.state, "reports", device.deviceId);
+    await mkdir(queue, { recursive: true, mode: 0o700 });
+    const operationId = report.operationId || randomUUID();
+    if (
+      !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(
+        operationId,
+      )
+    )
+      throw new Error("报告操作编号必须是 UUID。");
+    const path = join(queue, operationId + ".json");
+    const pending = await readJson(path, null);
+    const original = pending || await readJson(path + ".shared", null);
+    const request = { ...report, operationId };
+    const generatedAt = original ? original.source?.generatedAt : new Date().toISOString();
+    if (generatedAt && report.source?.generatedAt === undefined)
+      request.source = { ...report.source, generatedAt };
+    if (original && JSON.stringify(original) !== JSON.stringify(request))
+      throw new Error("同一报告操作编号不能修改内容。");
+    if (!pending) await atomicJson(path, request);
+    return this.sendQueued(path, request);
+  }
+  async sendQueued(path, request) {
+    try {
+      const receipt = await this.call("company_reports_save", { request }, { expectedDeviceId: basename(dirname(path)) });
+      if (receipt.status !== "shared")
+        throw new Error("服务器尚未确认报告共享。");
+      await rename(path, path + ".shared");
+      return { ...receipt, operationId: request.operationId };
+    } catch (e) {
+      return {
+        status: "pending",
+        operationId: request.operationId,
+        message: e.message,
+      };
+    }
+  }
+  async flushReports() {
+    const device = await readJson(join(this.state, "device.json"), null);
+    if (!device) throw new Error("请先关联本人 ERP 账号，再保存共享报告。");
+    this.checkIdentity(device);
+    const queue = join(this.state, "reports", device.deviceId);
+    await mkdir(queue, { recursive: true });
+    const results = [];
+    for (const owner of await readdir(join(this.state, "reports"), { withFileTypes: true })) {
+      if (!owner.isDirectory() || owner.name === device.deviceId) continue;
+      const files = await readdir(join(this.state, "reports", owner.name));
+      const count = files.filter(name => name.endsWith(".json")).length;
+      if (count) results.push({status:"pending", reason:"different_device", count,
+        message:"原关联的待共享报告已保留，未以当前用户上传。"});
+    }
+    for (const name of await readdir(queue)) {
+      if (name.endsWith(".json")) {
+        const path = join(queue, name);
+        results.push(await this.sendQueued(path, await readJson(path)));
+      }
+    }
+    return results;
+  }
+}

package/company-public.json

@@ -0,0 +1 @@
+{"server": "http://211.97.68.49:10020"}

package/package.json

@@ -1,6 +1,47 @@
-{
-  "name": "@us_momo/dsh-erp-analysis",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "@us_momo/dsh-erp-analysis",
+  "version": "1.2.2",
+  "description": "公司 ERP 分析：选品研究、个人账号关联、统一方法、共享知识与报告。",
+  "type": "module",
+  "files": [
+    "client.mjs",
+    "company-public.json",
+    "plugin/",
+    "release.json",
+    "release.mjs"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "dsh": ">=0.2.1-rc.3 <0.3.0"
+  },
+  "exports": {
+    ".": "./plugin/index.mjs",
+    "./client": "./plugin/client.js",
+    "./locale/*.json": "./plugin/locale/*.json",
+    "./icon": "./plugin/icon.svg"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./plugin/cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar",
+        "@deepseek-ai/dsh-client-ui-workspace"
+      ]
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Huazhufather/DSH_USEC.git"
+  },
+  "homepage": "https://github.com/Huazhufather/DSH_USEC#readme"
+}

package/plugin/client.js

@@ -0,0 +1,185 @@
+window.__ModuleLoader__.load({
+  id: "@us_momo/dsh-erp-analysis",
+  factory(require) {
+    const React = require("react"), h = React.createElement;
+    const words = {
+      zh: {
+        title: "公司 ERP 分析", intro: "经营复盘、SKU、备货和财务分析，自动选用公司方法。",
+        refresh: "刷新状态", connect: "登录 ERP", continue: "继续登录", renew: "续期登录",
+        switchAccount: "切换账号", logout: "退出登录", signedOut: "已退出当前电脑的 ERP 登录。", accountChanged: "请在 ERP 确认新账号；登录后新建公司分析对话。",
+        authorize: "打开 ERP 登录并确认", awaiting: "在 ERP 完成确认后，返回这里刷新状态。",
+        unpaired: "先登录本人的 ERP 账号，再开始公司分析。", active: "当前账号：", expired: "登录已到期或权限已变更，请续期或切换账号。",
+        revoked: "当前登录已退出，可以重新登录。", pending: "等待本人在 ERP 页面确认登录。",
+        unavailable: "公司服务暂时无法连接，请稍后刷新。", loading: "正在读取公司接入状态…",
+        start: "开始公司分析", account: "个人 ERP 账号", devices: "我的设备", revoke: "解除此设备",
+        revokedDevice: "已解除", expires: "有效期至", version: "公司方法版本", needReload: "新版已准备好，完成当前任务后重启 DSH。",
+        methods: "使用统一公司方法；模型由你在 DSH 中自行选择。",
+        reports: "共享正式报告", loadReports: "读取共享报告", retry: "恢复待共享报告", queue: "份报告待共享",
+        sharing: "生成或保存正式报告后自动共享，所有已启用成员均可查看完整内容，包括成本和利润。聊天、草稿和临时附件仅保存在本机。",
+        noReports: "暂无共享报告。", reportTitle: "报告", author: "作者", reportVersion: "版本", time: "生成时间", download: "下载",
+        previousPage: "上一页", nextPage: "下一页", page: "页码",
+        retryDone: "已恢复共享报告", local: "本机公司资料目录", update: "安装更新",
+        updateHelp: "完成当前分析后，在 DSH Market 的已安装插件中刷新检查，发现新版时点击“更新”，按提示重启 DSH 并新建公司分析对话。旧 GitHub 或本地安装包首次迁移时，先卸载公司插件，再用 @us_momo/dsh-erp-analysis 安装并启用；ERP 登录和本机资料保留。",
+        failed: "操作未完成，请重试。", mismatch: "报告文件校验失败，请重新下载。", refreshing: "正在办理…",
+      },
+      en: {
+        title: "Company ERP Analysis", intro: "Business reviews, SKU, supply and finance analysis using company methods.",
+        refresh: "Refresh", connect: "Sign in to ERP", continue: "Continue sign-in", renew: "Renew sign-in",
+        switchAccount: "Switch account", logout: "Sign out", signedOut: "Signed out of ERP on this computer.", accountChanged: "Confirm the new ERP account, then start a new company analysis conversation.",
+        authorize: "Sign in and confirm in ERP", awaiting: "Confirm in ERP, then return here and refresh.",
+        unpaired: "Sign in with your own ERP account to begin.", active: "Current account:", expired: "Sign-in expired or permissions changed. Renew or switch accounts.",
+        revoked: "Signed out. You may sign in again.", pending: "Waiting for your ERP sign-in confirmation.",
+        unavailable: "The company service is unavailable. Refresh later.", loading: "Loading connection status…",
+        start: "Start company analysis", account: "Your ERP account", devices: "My devices", revoke: "Revoke device",
+        revokedDevice: "Revoked", expires: "Valid until", version: "Company method version", needReload: "An update is ready. Finish your work, then restart DSH.",
+        methods: "Company methods are managed centrally. Choose your own model in DSH.",
+        reports: "Shared formal reports", loadReports: "Load shared reports", retry: "Retry pending reports", queue: "reports pending upload",
+        sharing: "Formal reports are shared automatically with every enabled member, including costs and profit. Chats, drafts and temporary attachments stay on this computer.",
+        noReports: "No shared reports yet.", reportTitle: "Report", author: "Author", reportVersion: "Version", time: "Created", download: "Download",
+        previousPage: "Previous page", nextPage: "Next page", page: "Page",
+        retryDone: "Reports shared", local: "Local company workspace", update: "Install updates",
+        updateHelp: "Finish your analysis, refresh installed plugins in DSH Market, and select Update when a newer release is available. Restart DSH as prompted and start a new company analysis conversation. To migrate a GitHub or local archive installation, uninstall the company plugin once, then install and enable @us_momo/dsh-erp-analysis. ERP sign-in and local files are retained.",
+        failed: "The operation did not finish. Retry.", mismatch: "Report verification failed. Download again.", refreshing: "Working…",
+      },
+    };
+    const css = `.company-erp-panel{height:100%;overflow:auto;padding:36px clamp(20px,4vw,56px);color:var(--dsw-alias-label-primary,CanvasText);font:inherit;box-sizing:border-box}.company-erp-panel>div{max-width:1000px;margin:auto}.company-erp-panel h1{font-size:26px;line-height:1.3;margin:0 0 10px;font-weight:600}.company-erp-panel h2{font-size:18px;margin:0 0 12px;font-weight:600}.company-erp-panel p{line-height:1.7;max-width:72ch;margin:10px 0}.company-erp-panel header,.company-erp-panel .company-row{display:flex;gap:12px;align-items:center;flex-wrap:wrap}.company-erp-panel header{justify-content:space-between;align-items:flex-start}.company-erp-panel section{padding:28px 0;border-bottom:1px solid color-mix(in srgb,currentColor 18%,transparent)}.company-erp-panel button,.company-erp-panel a.company-button{font:inherit;min-height:38px;padding:8px 14px;border:1px solid color-mix(in srgb,currentColor 25%,transparent);border-radius:6px;background:transparent;color:inherit;cursor:pointer;text-decoration:none;display:inline-flex;align-items:center;box-sizing:border-box}.company-erp-panel button:hover,.company-erp-panel a.company-button:hover{background:color-mix(in srgb,currentColor 7%,transparent)}.company-erp-panel button.primary{background:#205eaa;border-color:#205eaa;color:#fff}.company-erp-panel button:disabled{opacity:.5;cursor:default}.company-erp-panel button:focus-visible,.company-erp-panel a:focus-visible{outline:2px solid #3e8ce0;outline-offset:3px}.company-erp-panel .company-message{min-height:28px;margin-top:16px;line-height:1.6}.company-erp-panel .company-error{color:light-dark(#a52420,#ffaaa4)}.company-erp-panel table{border-collapse:collapse;width:100%;font-size:14px}.company-erp-panel th,.company-erp-panel td{text-align:left;padding:12px 10px;border-bottom:1px solid color-mix(in srgb,currentColor 15%,transparent);overflow-wrap:anywhere}.company-erp-panel th{font-weight:600}.company-erp-panel .company-table{overflow-x:auto}.company-erp-panel small{font-size:13px}.company-erp-panel .company-path{overflow-wrap:anywhere}.company-erp-panel ::selection{background:#b7d6fa;color:#122b48}@media(max-width:700px){.company-erp-panel{padding:24px 18px}.company-erp-panel h1{font-size:23px}.company-erp-panel section{padding:22px 0}}`;
+    function Icon() {
+      return h("svg", { width: 18, height: 18, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: 1.7, "aria-hidden": true },
+        h("path", { d: "M4 20V4h12v16M2 20h20M8 8h4M8 12h4M8 16h2M18 8h3v12" }));
+    }
+    return {
+      inject: ["connection", "slots", "locale", "layout", "uiWorkspace", "workspaces"],
+      apply(ctx) {
+        ctx.effect(() => ctx.locale.register("company-erp", words));
+        const t = ctx.locale.bind("company-erp");
+        async function api(action, body = {}) {
+          const response = await ctx.connection.rpc.call("/api", "company-erp/control", { action, body });
+          if (!response.ok) {
+            const error = new Error(response.error?.message || t("failed"));
+            error.code = response.error?.code; error.status = response.error?.details?.status;
+            throw error;
+          }
+          return response.value;
+        }
+        function CompanyPanel() {
+          const [state, setState] = React.useState(null), [busy, setBusy] = React.useState(false);
+          const [message, setMessage] = React.useState(""), [error, setError] = React.useState(false);
+          const [verification, setVerification] = React.useState(null), [devices, setDevices] = React.useState(null);
+          const [reports, setReports] = React.useState(null);
+          const [reportPage, setReportPage] = React.useState(1), [hasMoreReports, setHasMoreReports] = React.useState(false);
+          const alive = React.useRef(true), accountEpoch = React.useRef(0);
+          const refresh = async () => {
+            const epoch = accountEpoch.current;
+            const next = await api("status");
+            if (alive.current && epoch === accountEpoch.current) {
+              setState(next);
+              if (next.connection.status !== "active") { setReports(null); setDevices(null); }
+            }
+            return next;
+          };
+          React.useEffect(() => {
+            alive.current = true;
+            refresh().catch((e) => { if (alive.current) { setMessage(e.message); setError(true); } });
+            return () => { alive.current = false; };
+          }, []);
+          async function action(fn) {
+            setBusy(true); setError(false); setMessage(t("refreshing"));
+            try { await fn(); }
+            catch (e) { if (alive.current) {
+              if (e.status === 401 || e.status === 403) {
+                setReports(null); setDevices(null); setVerification(null);
+                setState((previous) => previous && { ...previous, connection: { status: "unavailable", message: e.message } });
+              }
+              setError(true); setMessage(e.message);
+            } }
+            finally { if (alive.current) setBusy(false); }
+          }
+          const connection = state?.connection, active = connection?.status === "active";
+          const canRenew = connection?.canRenew;
+          const user = connection?.user?.login && connection.user.login !== connection.user.displayName
+            ? `${connection.user.displayName} (${connection.user.login})`
+            : connection?.user?.login || connection?.user?.displayName || "";
+          const status = !connection ? t("loading") : active
+            ? `${t("active")} ${user}${connection.expiresAt ? ` · ${t("expires")} ${new Date(connection.expiresAt).toLocaleString()}` : ""}`
+            : connection.message || t(canRenew ? "expired" : connection.status) || t("unavailable");
+          function button(label, fn, disabled = false, primary = false) {
+            return h("button", { type: "button", disabled: busy || disabled, className: primary ? "primary" : undefined,
+              onClick: () => action(fn) }, label);
+          }
+          async function link(renew) {
+            const result = await api(renew ? "renew" : "connect");
+            setVerification(result.verificationUrl); setMessage(t("awaiting")); await refresh();
+          }
+          async function changeAccount(switching) {
+            accountEpoch.current++;
+            setReports(null); setDevices(null); setVerification(null); setState(null);
+            setReportPage(1); setHasMoreReports(false);
+            try {
+              const result = await api(switching ? "switch" : "logout");
+              setVerification(result.verificationUrl || null);
+              setMessage(t(switching ? "accountChanged" : "signedOut"));
+            } finally { await refresh(); }
+          }
+          async function loadReports(page = 1) {
+            const result = await api("reports", { page });
+            setReports(result.items || []); setReportPage(result.page);
+            setHasMoreReports(result.hasMore); setMessage("");
+          }
+          async function download(report) {
+            const file = await api("report", { reportId: report.reportId || report.id, version: report.version });
+            const bytes = Uint8Array.from(atob(file.contentBase64), (c) => c.charCodeAt(0));
+            const digest = Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes)), (b) => b.toString(16).padStart(2, "0")).join("");
+            if (digest !== file.sha256) throw new Error(t("mismatch"));
+            const url = URL.createObjectURL(new Blob([bytes], { type: "application/octet-stream" }));
+            const link = document.createElement("a"); link.href = url; link.download = file.filename.split(/[\\/]/).pop(); link.click();
+            setTimeout(() => URL.revokeObjectURL(url), 1000); setMessage("");
+          }
+          return h("main", { className: "company-erp-panel" }, h("style", null, css), h("div", null,
+            h("header", null, h("div", null, h("h1", null, t("title")), h("p", null, t("intro"))),
+              button(t("refresh"), async () => { await refresh(); setMessage(""); })),
+            h("div", { role: error ? "alert" : "status", "aria-live": "polite", className: `company-message${error ? " company-error" : ""}` }, message),
+            h("section", null, h("h2", null, t("account")), h("p", null, status),
+              h("div", { className: "company-row" },
+                button(connection?.status === "pending" ? t("continue") : t("connect"), () => link(false), active || canRenew || !state || connection?.status === "unavailable"),
+                button(t("renew"), () => link(true), !active && !canRenew),
+                button(t("switchAccount"), () => changeAccount(true), !connection?.deviceId),
+                button(t("logout"), () => changeAccount(false), !connection?.deviceId),
+                button(t("start"), async () => {
+                  const workspace = await ctx.workspaces.create({ path: state.workspace });
+                  if (workspace.title === "workspace") await ctx.workspaces.rename(workspace.workspaceId, t("title"));
+                  await ctx.uiWorkspace.openWorkspace(workspace.workspaceId, undefined, { agentPreset: "company-erp-analysis" });
+                  setMessage("");
+                }, !active || state?.pendingReload, true)),
+              verification ? h("p", null, h("a", { className: "company-button", href: verification, target: "_blank", rel: "noreferrer noopener" }, t("authorize"))) : null,
+              h("p", null, h("small", null, `${t("version")} ${state?.version || "—"} · ${t("methods")}`)),
+              state?.pendingReload ? h("p", { role: "status" }, t("needReload")) : null),
+            h("section", null, h("h2", null, t("reports")), h("p", null, t("sharing")),
+              h("div", { className: "company-row" },
+                button(t("loadReports"), () => loadReports(), !active),
+                button(t("retry"), async () => { const r = await api("retry"); await refresh(); setMessage(`${t("retryDone")}: ${r.receipts.filter((x) => x.status === "shared").length}`); }, !active),
+                state?.pendingReports ? h("span", null, `${state.pendingReports} ${t("queue")}`) : null),
+              reports ? reports.length ? h("div", { className: "company-table" }, h("table", null,
+                h("thead", null, h("tr", null, ...["reportTitle", "author", "reportVersion", "time", "download"].map((key) => h("th", { key, scope: "col" }, t(key))))),
+                h("tbody", null, ...reports.map((report) => h("tr", { key: report.reportId || report.id },
+                  h("td", null, report.title), h("td", null, report.authorName || report.author?.name || "—"),
+                  h("td", null, report.version || report.currentVersion || "—"),
+                  h("td", null, report.generatedAt ? new Date(report.generatedAt).toLocaleString() : "—"),
+                  h("td", null, button(t("download"), () => download(report)))))))) : h("p", null, t("noReports")) : null,
+              reports && h("div", { className: "company-row" },
+                button(t("previousPage"), () => loadReports(reportPage - 1), reportPage <= 1 || !active),
+                h("span", { "aria-live": "polite" }, `${t("page")} ${reportPage}`),
+                button(t("nextPage"), () => loadReports(reportPage + 1), !hasMoreReports || !active))),
+            h("section", null, h("h2", null, t("devices")),
+              button(t("devices"), async () => { const r = await api("devices"); setDevices(r.items || r.devices || []); setMessage(""); }, !active),
+              devices?.map((device) => h("div", { className: "company-row", key: device.deviceId || device.id },
+                h("p", null, device.deviceName || device.name, " · ", device.revoked ? t("revokedDevice") : `${t("expires")} ${new Date(device.expiresAt).toLocaleString()}`),
+                button(t("revoke"), async () => { await api("revoke", { deviceId: device.deviceId || device.id }); await refresh(); setDevices(null); setReports(null); setVerification(null); setMessage(""); }, device.revoked)))),
+            h("section", null, h("h2", null, t("update")), h("p", null, t("updateHelp")),
+              h("p", null, h("small", null, t("local")), h("br"), h("span", { className: "company-path" }, state?.workspace || "—")))));
+        }
+        ctx.slots.inject("main", () => ctx.slots.register({ name: "main", key: "company-erp-analysis" }, CompanyPanel));
+        ctx.slots.inject("sidebar.panellist", () => ctx.slots.register({ name: "sidebar.panellist", id: "company-erp-analysis", order: 5, label: () => t("title") }, Icon));
+      },
+    };
+  },
+});

package/plugin/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: company-erp-analysis
+      name: '@us_momo/dsh-erp-analysis'

package/plugin/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32" fill="none" stroke="#2765b8" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M6 25V7h14v18M4 25h24M10 11h6M10 15h6M10 19h3M21 12h5v13"/><path d="m17 22 4-4 3 2 4-6"/></svg>

package/plugin/index.mjs

@@ -0,0 +1,27 @@
+import { prepareCompany, companyPreset, companyActions } from "./runtime.mjs";
+export const inject = ["agentPresets", "connection"];
+export async function apply(ctx) {
+  const runtime = await prepareCompany();
+  const dispose = await ctx.agentPresets.register(await companyPreset(runtime));
+  ctx.effect(() => dispose);
+  const action = companyActions(runtime);
+  // Connection owns browser authentication, request trust, owner access and Desktop IPC.
+  ctx.connection.fetch.register({
+    path: "/api/company-erp/control", methods: ["POST"], requestBody: "buffered",
+    async fetch(request) {
+      const message = await request.json();
+      if (message?.type !== "client-request" || message.method !== "company-erp/control" ||
+          typeof message.rpcId !== "string" || typeof message.payload?.action !== "string")
+        return new Response("Invalid company request", { status: 400 });
+      let result;
+      try {
+        request.signal.throwIfAborted();
+        result = { ok: true, value: await action(message.payload.action, message.payload.body) };
+      } catch (error) {
+        result = { ok: false, error: { code: error.code || "company/action-failed", message: error.message,
+          details: Number.isInteger(error.status) ? { status: error.status } : {} } };
+      }
+      return Response.json({ type: "server-response", rpcId: message.rpcId, result });
+    },
+  });
+}

package/plugin/locale/en.json

@@ -0,0 +1 @@
+{"meta":{"title":"Company ERP Analysis","description":"Connect your ERP identity to company methods, knowledge and shared reports."}}

package/plugin/locale/zh.json

@@ -0,0 +1 @@
+{"meta":{"title":"公司 ERP 分析","description":"关联本人 ERP，使用统一专家方法、公司知识和共享正式报告。"}}