@us_momo/dsh-erp-analysis 0.0.0-stage → 1.3.0

package/README.md

@@ -1,3 +1,19 @@
-# Temporary Holding Version
+# 公司 ERP 分析插件
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+首版使用 Windows DSH，最低版本 `0.2.1-rc.3`。模型由使用者自行选择。
+
+1. 在 DSH 添加插件时选择 npm 官方源，包名为 `@us_momo/dsh-erp-analysis`；也可保存公司发放的同版 `.tgz` 文件，不要解压。
+2. 在 DSH 打开“插件 → 添加插件”，在“包名或地址”填写上述包名或该文件的完整本机路径，点击“安装”。
+3. 安装成功后点击“立即启用”，按提示重启 DSH。
+4. 点击左侧“公司 ERP 分析 → 登录 ERP”，打开显示的 ERP 链接，核对自己的账号并确认登录。浏览器中账号不对时点击“换个账号登录”。
+5. 返回公司入口刷新状态，点击“开始公司分析”。工作区自动准备，直接提问即可。
+
+ERP 账号须由管理员开启“允许 DSH 接入”。登录记住 30 天，同一账号可在多台电脑登录，电脑名只用于识别登录来源。原有旧 ERP 连接应先在 DSH 停用。
+
+面板显示当前账号。换人使用时点击“切换账号”，插件会自动退出当前电脑的旧账号，再提供新登录链接；不必到设备列表手动解绑。只想结束使用时点击“退出登录”。退出和切换不影响其他电脑，也不替你退出浏览器中的 ERP；确认页可选择“换个账号登录”。
+
+切换成功后新建公司分析对话。旧对话停止 ERP 调用，待共享报告保留原作者，不以新账号上传；原有聊天和工作文件保留在本机。
+
+先完成正在运行的分析，在 DSH Market 检查并更新，或更换同版 .tgz，重启后新建公司分析对话。旧 @company 包首次迁移须卸载后安装 @us_momo 包。
+设备授权与工作资料保存在当前 Windows 用户的 `%LOCALAPPDATA%/CompanyDSH`，与插件安装目录分开，更新和重新安装保留。
+正式报告自动集中共享，所有已启用成员可查看完整报告，包括成本和利润。聊天、草稿和临时附件各机保存。公司知识与共享报告从 ERP 中读取，内容变化无需重新安装插件。

package/client.mjs

@@ -0,0 +1,265 @@
+import { generateKeyPairSync, createHash, randomUUID, sign } from "node:crypto";
+import { readFile, writeFile, mkdir, readdir, rename } from "node:fs/promises";
+import { join, basename, dirname } from "node:path";
+import { hostname, userInfo } from "node:os";
+import { execFileSync } from "node:child_process";
+import { trustedErpUrl, readJson, atomicJson } from "./release.mjs";
+export async function secureDirectory(path) {
+  await mkdir(path, { recursive: true, mode: 0o700 });
+  if (process.platform === "win32") {
+    const output = execFileSync(
+      "C:/Windows/System32/whoami.exe",
+      ["/user", "/fo", "csv", "/nh"],
+      { encoding: "utf8", windowsHide: true },
+    );
+    const sid = output.match(/S-1-5-[0-9-]+/);
+    if (!sid) throw new Error("无法确认当前 Windows 用户。");
+    execFileSync(
+      "C:/Windows/System32/icacls.exe",
+      [path, "/inheritance:r", "/grant:r", `*${sid[0]}:(OI)(CI)F`],
+      { windowsHide: true, stdio: "pipe" },
+    );
+  }
+}
+export class TeamClient {
+  constructor(root, config) {
+    this.root = root;
+    this.config = config;
+    this.state = join(root, "private");
+    trustedErpUrl(config.server);
+    this.base = new URL("/api/v1/dsh/", config.server);
+  }
+  async key() {
+    await secureDirectory(this.state);
+    const file = join(this.state, "device-key.pem");
+    let privateKey;
+    try {
+      privateKey = await readFile(file, "utf8");
+    } catch (e) {
+      if (e.code !== "ENOENT") throw e;
+      privateKey = generateKeyPairSync("ed25519", {
+        publicKeyEncoding: { type: "spki", format: "pem" },
+        privateKeyEncoding: { type: "pkcs8", format: "pem" },
+      }).privateKey;
+      await writeFile(file, privateKey, { flag: "wx", mode: 0o600 });
+    }
+    return privateKey;
+  }
+  checkIdentity(device, expectedDeviceId) {
+    if ((expectedDeviceId && device.deviceId !== expectedDeviceId) ||
+        (this.config.pinIdentity && this.boundDeviceId && device.deviceId !== this.boundDeviceId))
+      throw new Error("ERP 账号已切换，请新建公司分析对话。原账号的待共享报告已保留，不会以当前账号上传。");
+    if (this.config.pinIdentity) this.boundDeviceId ||= device.deviceId;
+  }
+  async request(path, { method = "GET", body, signed = true, expectedDeviceId } = {}) {
+    const url = new URL(path, this.base);
+    if (
+      url.origin !== this.base.origin ||
+      !url.pathname.startsWith(this.base.pathname)
+    )
+      throw new Error("无效的公司接口。");
+    const raw =
+      body === undefined ? Buffer.alloc(0) : Buffer.from(JSON.stringify(body));
+    const headers = { "Content-Type": "application/json" };
+    if (signed) {
+      const device = await readJson(join(this.state, "device.json"), null);
+      if (!device) throw new Error("请先关联本人 ERP 账号，再重试本次操作。");
+      this.checkIdentity(device, expectedDeviceId);
+      const time = String(Math.floor(Date.now() / 1000)),
+        nonce = randomUUID();
+      const canonical = [
+        time,
+        nonce,
+        method,
+        url.pathname + url.search,
+        createHash("sha256").update(raw).digest("hex"),
+      ].join("\n");
+      headers["X-DSH-Device"] = device.deviceId;
+      headers["X-DSH-Time"] = time;
+      headers["X-DSH-Nonce"] = nonce;
+      headers["X-DSH-Signature"] = sign(
+        null,
+        Buffer.from(canonical),
+        await this.key(),
+      ).toString("base64");
+    }
+    let response;
+    try {
+      response = await fetch(url, {
+        method,
+        headers,
+        body: method === "GET" ? undefined : raw,
+        redirect: "error",
+        signal: AbortSignal.timeout(120000),
+      });
+    } catch {
+      throw new Error("公司服务暂时无法连接，请保留当前操作后重试。");
+    }
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of response.body) {
+      size += chunk.length;
+      if (size > 32 * 1024 * 1024) throw new Error("服务响应超过限制。");
+      chunks.push(chunk);
+    }
+    let result;
+    try {
+      result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    } catch {
+      throw new Error("公司服务返回了无效响应。");
+    }
+    if (!response.ok) {
+      const code = result.error?.code || `HTTP_${response.status}`;
+      const requestId = typeof result.error?.requestId === "string" &&
+        /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(result.error.requestId)
+        ? result.error.requestId : undefined;
+      const message = response.status === 503 || code === "SERVICE_UNAVAILABLE"
+        ? "公司服务繁忙，请稍后重试。"
+        : `公司服务拒绝本次操作 (${code})`;
+      const fieldErrors = Array.isArray(result.error?.fieldErrors)
+        ? result.error.fieldErrors.slice(0, 20).filter(item =>
+            typeof item.field === "string" && /^\$(?:\.[A-Za-z][A-Za-z0-9]*|\[\d+\])*$/.test(item.field) &&
+            typeof item.message === "string" && item.message.length <= 300)
+          .map(item => ({ field: item.field, reason: item.message })) : [];
+      const e = new Error(message + (requestId ? `（请求编号：${requestId}）` : "") +
+        (fieldErrors.length ? ` details=${JSON.stringify(fieldErrors)}` : ""));
+      e.code = code;
+      e.status = response.status;
+      e.requestId = requestId;
+      e.details = fieldErrors;
+      throw e;
+    }
+    return result;
+  }
+  async connect(deviceName = hostname()) {
+    const previous = await readJson(join(this.state, "device.json"), null);
+    if (previous) {
+      const status = await this.status();
+      if (status.status === "active" || status.canRenew)
+        throw new Error("本机已登录 ERP，请使用续期或点击“切换账号”。");
+      if (status.status === "pending")
+        return {deviceId:previous.deviceId, expiresAt:status.expiresAt,
+          verificationUrl:new URL(`connect/${encodeURIComponent(previous.deviceId)}`,this.base).href};
+      if (status.status !== "revoked" || status.linked && !status.revoked)
+        throw new Error("尚未确认旧关联已解除，请先核对状态。");
+    }
+    const { createPublicKey } = await import("node:crypto");
+    const publicKey = createPublicKey(await this.key()).export({
+      type: "spki",
+      format: "pem",
+    });
+    const result = await this.request("devices/request", {
+      method: "POST",
+      signed: false,
+      body: { publicKey, deviceName },
+    });
+    await atomicJson(join(this.state, "device.json"), {
+      deviceId: result.deviceId,
+    });
+    const verification = trustedErpUrl(result.verificationUrl);
+    if (verification.origin !== this.base.origin)
+      throw new Error("确认地址与公司 ERP 不一致。");
+    return {
+      deviceId: result.deviceId,
+      verificationUrl: verification.href,
+      expiresAt: result.expiresAt,
+    };
+  }
+  async status() {
+    const device = await readJson(join(this.state, "device.json"), null);
+    if (!device) return { status: "unpaired" };
+    return this.request(
+      `devices/${encodeURIComponent(device.deviceId)}/status`,
+      { method: "POST", body: {} },
+    );
+  }
+  async logout() {
+    const device = await readJson(join(this.state, "device.json"), null);
+    if (device) {
+      const result = await this.request(`devices/${encodeURIComponent(device.deviceId)}/revoke`, {
+        method: "POST", body: {}, expectedDeviceId: device.deviceId,
+      });
+      if (result.status !== "revoked" || result.deviceId !== device.deviceId)
+        throw new Error("尚未确认当前账号已退出，请刷新状态后重试。");
+      await atomicJson(join(this.state, "device.json"), null);
+    }
+    return { status: "unpaired" };
+  }
+  async switchAccount() {
+    await this.logout();
+    return this.connect();
+  }
+  async tools() {
+    return this.request("tools");
+  }
+  async call(name, args = {}, { expectedDeviceId } = {}) {
+    return this.request("tools/call", {
+      method: "POST",
+      body: { name, arguments: args },
+      expectedDeviceId,
+    });
+  }
+  async saveReport(report) {
+    await secureDirectory(this.state);
+    const device = await readJson(join(this.state, "device.json"), null);
+    if (!device) throw new Error("请先关联本人 ERP 账号，再保存共享报告。");
+    this.checkIdentity(device);
+    const queue = join(this.state, "reports", device.deviceId);
+    await mkdir(queue, { recursive: true, mode: 0o700 });
+    const operationId = report.operationId || randomUUID();
+    if (
+      !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(
+        operationId,
+      )
+    )
+      throw new Error("报告操作编号必须是 UUID。");
+    const path = join(queue, operationId + ".json");
+    const pending = await readJson(path, null);
+    const original = pending || await readJson(path + ".shared", null);
+    const request = { ...report, operationId };
+    const generatedAt = original ? original.source?.generatedAt : new Date().toISOString();
+    if (generatedAt && report.source?.generatedAt === undefined)
+      request.source = { ...report.source, generatedAt };
+    if (original && JSON.stringify(original) !== JSON.stringify(request))
+      throw new Error("同一报告操作编号不能修改内容。");
+    if (!pending) await atomicJson(path, request);
+    return this.sendQueued(path, request);
+  }
+  async sendQueued(path, request) {
+    try {
+      const receipt = await this.call("company_reports_save", { request }, { expectedDeviceId: basename(dirname(path)) });
+      if (receipt.status !== "shared")
+        throw new Error("服务器尚未确认报告共享。");
+      await rename(path, path + ".shared");
+      return { ...receipt, operationId: request.operationId };
+    } catch (e) {
+      return {
+        status: "pending",
+        operationId: request.operationId,
+        message: e.message,
+      };
+    }
+  }
+  async flushReports() {
+    const device = await readJson(join(this.state, "device.json"), null);
+    if (!device) throw new Error("请先关联本人 ERP 账号，再保存共享报告。");
+    this.checkIdentity(device);
+    const queue = join(this.state, "reports", device.deviceId);
+    await mkdir(queue, { recursive: true });
+    const results = [];
+    for (const owner of await readdir(join(this.state, "reports"), { withFileTypes: true })) {
+      if (!owner.isDirectory() || owner.name === device.deviceId) continue;
+      const files = await readdir(join(this.state, "reports", owner.name));
+      const count = files.filter(name => name.endsWith(".json")).length;
+      if (count) results.push({status:"pending", reason:"different_device", count,
+        message:"原关联的待共享报告已保留，未以当前用户上传。"});
+    }
+    for (const name of await readdir(queue)) {
+      if (name.endsWith(".json")) {
+        const path = join(queue, name);
+        results.push(await this.sendQueued(path, await readJson(path)));
+      }
+    }
+    return results;
+  }
+}

package/company-public.json

@@ -0,0 +1 @@
+{"server": "http://211.97.68.49:10020"}

package/package.json

@@ -1,6 +1,47 @@
 {
   "name": "@us_momo/dsh-erp-analysis",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "1.3.0",
+  "description": "公司 ERP 分析：选品研究、个人账号关联、统一方法、共享知识与报告。",
+  "type": "module",
+  "files": [
+    "client.mjs",
+    "company-public.json",
+    "plugin/",
+    "release.json",
+    "release.mjs"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "dsh": ">=0.2.1-rc.3 <0.3.0"
+  },
+  "exports": {
+    ".": "./plugin/index.mjs",
+    "./client": "./plugin/client.js",
+    "./locale/*.json": "./plugin/locale/*.json",
+    "./icon": "./plugin/icon.svg"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./plugin/cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar",
+        "@deepseek-ai/dsh-client-ui-workspace"
+      ]
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Huazhufather/DSH_USEC.git"
+  },
+  "homepage": "https://github.com/Huazhufather/DSH_USEC#readme"
 }

package/plugin/client.js

@@ -0,0 +1,185 @@
+window.__ModuleLoader__.load({
+  id: "@us_momo/dsh-erp-analysis",
+  factory(require) {
+    const React = require("react"), h = React.createElement;
+    const words = {
+      zh: {
+        title: "公司 ERP 分析", intro: "经营复盘、SKU、备货和财务分析，自动选用公司方法。",
+        refresh: "刷新状态", connect: "登录 ERP", continue: "继续登录", renew: "续期登录",
+        switchAccount: "切换账号", logout: "退出登录", signedOut: "已退出当前电脑的 ERP 登录。", accountChanged: "请在 ERP 确认新账号；登录后新建公司分析对话。",
+        authorize: "打开 ERP 登录并确认", awaiting: "在 ERP 完成确认后，返回这里刷新状态。",
+        unpaired: "先登录本人的 ERP 账号，再开始公司分析。", active: "当前账号：", expired: "登录已到期或权限已变更，请续期或切换账号。",
+        revoked: "当前登录已退出，可以重新登录。", pending: "等待本人在 ERP 页面确认登录。",
+        unavailable: "公司服务暂时无法连接，请稍后刷新。", loading: "正在读取公司接入状态…",
+        start: "开始公司分析", account: "个人 ERP 账号", devices: "我的设备", revoke: "解除此设备",
+        revokedDevice: "已解除", expires: "有效期至", version: "公司方法版本", needReload: "新版已准备好，完成当前任务后重启 DSH。",
+        methods: "使用统一公司方法；模型由你在 DSH 中自行选择。",
+        reports: "共享正式报告", loadReports: "读取共享报告", retry: "恢复待共享报告", queue: "份报告待共享",
+        sharing: "生成或保存正式报告后自动共享，所有已启用成员均可查看完整内容，包括成本和利润。聊天、草稿和临时附件仅保存在本机。",
+        noReports: "暂无共享报告。", reportTitle: "报告", author: "作者", reportVersion: "版本", time: "生成时间", download: "下载",
+        previousPage: "上一页", nextPage: "下一页", page: "页码",
+        retryDone: "已恢复共享报告", local: "本机公司资料目录", update: "安装更新",
+        updateHelp: "完成当前分析后，在 DSH Market 的已安装插件中刷新检查，发现新版时点击“更新”，按提示重启 DSH 并新建公司分析对话。旧 GitHub 或本地安装包首次迁移时，先卸载公司插件，再用 @us_momo/dsh-erp-analysis 安装并启用；ERP 登录和本机资料保留。",
+        failed: "操作未完成，请重试。", mismatch: "报告文件校验失败，请重新下载。", refreshing: "正在办理…",
+      },
+      en: {
+        title: "Company ERP Analysis", intro: "Business reviews, SKU, supply and finance analysis using company methods.",
+        refresh: "Refresh", connect: "Sign in to ERP", continue: "Continue sign-in", renew: "Renew sign-in",
+        switchAccount: "Switch account", logout: "Sign out", signedOut: "Signed out of ERP on this computer.", accountChanged: "Confirm the new ERP account, then start a new company analysis conversation.",
+        authorize: "Sign in and confirm in ERP", awaiting: "Confirm in ERP, then return here and refresh.",
+        unpaired: "Sign in with your own ERP account to begin.", active: "Current account:", expired: "Sign-in expired or permissions changed. Renew or switch accounts.",
+        revoked: "Signed out. You may sign in again.", pending: "Waiting for your ERP sign-in confirmation.",
+        unavailable: "The company service is unavailable. Refresh later.", loading: "Loading connection status…",
+        start: "Start company analysis", account: "Your ERP account", devices: "My devices", revoke: "Revoke device",
+        revokedDevice: "Revoked", expires: "Valid until", version: "Company method version", needReload: "An update is ready. Finish your work, then restart DSH.",
+        methods: "Company methods are managed centrally. Choose your own model in DSH.",
+        reports: "Shared formal reports", loadReports: "Load shared reports", retry: "Retry pending reports", queue: "reports pending upload",
+        sharing: "Formal reports are shared automatically with every enabled member, including costs and profit. Chats, drafts and temporary attachments stay on this computer.",
+        noReports: "No shared reports yet.", reportTitle: "Report", author: "Author", reportVersion: "Version", time: "Created", download: "Download",
+        previousPage: "Previous page", nextPage: "Next page", page: "Page",
+        retryDone: "Reports shared", local: "Local company workspace", update: "Install updates",
+        updateHelp: "Finish your analysis, refresh installed plugins in DSH Market, and select Update when a newer release is available. Restart DSH as prompted and start a new company analysis conversation. To migrate a GitHub or local archive installation, uninstall the company plugin once, then install and enable @us_momo/dsh-erp-analysis. ERP sign-in and local files are retained.",
+        failed: "The operation did not finish. Retry.", mismatch: "Report verification failed. Download again.", refreshing: "Working…",
+      },
+    };
+    const css = `.company-erp-panel{height:100%;overflow:auto;padding:36px clamp(20px,4vw,56px);color:var(--dsw-alias-label-primary,CanvasText);font:inherit;box-sizing:border-box}.company-erp-panel>div{max-width:1000px;margin:auto}.company-erp-panel h1{font-size:26px;line-height:1.3;margin:0 0 10px;font-weight:600}.company-erp-panel h2{font-size:18px;margin:0 0 12px;font-weight:600}.company-erp-panel p{line-height:1.7;max-width:72ch;margin:10px 0}.company-erp-panel header,.company-erp-panel .company-row{display:flex;gap:12px;align-items:center;flex-wrap:wrap}.company-erp-panel header{justify-content:space-between;align-items:flex-start}.company-erp-panel section{padding:28px 0;border-bottom:1px solid color-mix(in srgb,currentColor 18%,transparent)}.company-erp-panel button,.company-erp-panel a.company-button{font:inherit;min-height:38px;padding:8px 14px;border:1px solid color-mix(in srgb,currentColor 25%,transparent);border-radius:6px;background:transparent;color:inherit;cursor:pointer;text-decoration:none;display:inline-flex;align-items:center;box-sizing:border-box}.company-erp-panel button:hover,.company-erp-panel a.company-button:hover{background:color-mix(in srgb,currentColor 7%,transparent)}.company-erp-panel button.primary{background:#205eaa;border-color:#205eaa;color:#fff}.company-erp-panel button:disabled{opacity:.5;cursor:default}.company-erp-panel button:focus-visible,.company-erp-panel a:focus-visible{outline:2px solid #3e8ce0;outline-offset:3px}.company-erp-panel .company-message{min-height:28px;margin-top:16px;line-height:1.6}.company-erp-panel .company-error{color:light-dark(#a52420,#ffaaa4)}.company-erp-panel table{border-collapse:collapse;width:100%;font-size:14px}.company-erp-panel th,.company-erp-panel td{text-align:left;padding:12px 10px;border-bottom:1px solid color-mix(in srgb,currentColor 15%,transparent);overflow-wrap:anywhere}.company-erp-panel th{font-weight:600}.company-erp-panel .company-table{overflow-x:auto}.company-erp-panel small{font-size:13px}.company-erp-panel .company-path{overflow-wrap:anywhere}.company-erp-panel ::selection{background:#b7d6fa;color:#122b48}@media(max-width:700px){.company-erp-panel{padding:24px 18px}.company-erp-panel h1{font-size:23px}.company-erp-panel section{padding:22px 0}}`;
+    function Icon() {
+      return h("svg", { width: 18, height: 18, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: 1.7, "aria-hidden": true },
+        h("path", { d: "M4 20V4h12v16M2 20h20M8 8h4M8 12h4M8 16h2M18 8h3v12" }));
+    }
+    return {
+      inject: ["connection", "slots", "locale", "layout", "uiWorkspace", "workspaces"],
+      apply(ctx) {
+        ctx.effect(() => ctx.locale.register("company-erp", words));
+        const t = ctx.locale.bind("company-erp");
+        async function api(action, body = {}) {
+          const response = await ctx.connection.rpc.call("/api", "company-erp/control", { action, body });
+          if (!response.ok) {
+            const error = new Error(response.error?.message || t("failed"));
+            error.code = response.error?.code; error.status = response.error?.details?.status;
+            throw error;
+          }
+          return response.value;
+        }
+        function CompanyPanel() {
+          const [state, setState] = React.useState(null), [busy, setBusy] = React.useState(false);
+          const [message, setMessage] = React.useState(""), [error, setError] = React.useState(false);
+          const [verification, setVerification] = React.useState(null), [devices, setDevices] = React.useState(null);
+          const [reports, setReports] = React.useState(null);
+          const [reportPage, setReportPage] = React.useState(1), [hasMoreReports, setHasMoreReports] = React.useState(false);
+          const alive = React.useRef(true), accountEpoch = React.useRef(0);
+          const refresh = async () => {
+            const epoch = accountEpoch.current;
+            const next = await api("status");
+            if (alive.current && epoch === accountEpoch.current) {
+              setState(next);
+              if (next.connection.status !== "active") { setReports(null); setDevices(null); }
+            }
+            return next;
+          };
+          React.useEffect(() => {
+            alive.current = true;
+            refresh().catch((e) => { if (alive.current) { setMessage(e.message); setError(true); } });
+            return () => { alive.current = false; };
+          }, []);
+          async function action(fn) {
+            setBusy(true); setError(false); setMessage(t("refreshing"));
+            try { await fn(); }
+            catch (e) { if (alive.current) {
+              if (e.status === 401 || e.status === 403) {
+                setReports(null); setDevices(null); setVerification(null);
+                setState((previous) => previous && { ...previous, connection: { status: "unavailable", message: e.message } });
+              }
+              setError(true); setMessage(e.message);
+            } }
+            finally { if (alive.current) setBusy(false); }
+          }
+          const connection = state?.connection, active = connection?.status === "active";
+          const canRenew = connection?.canRenew;
+          const user = connection?.user?.login && connection.user.login !== connection.user.displayName
+            ? `${connection.user.displayName} (${connection.user.login})`
+            : connection?.user?.login || connection?.user?.displayName || "";
+          const status = !connection ? t("loading") : active
+            ? `${t("active")} ${user}${connection.expiresAt ? ` · ${t("expires")} ${new Date(connection.expiresAt).toLocaleString()}` : ""}`
+            : connection.message || t(canRenew ? "expired" : connection.status) || t("unavailable");
+          function button(label, fn, disabled = false, primary = false) {
+            return h("button", { type: "button", disabled: busy || disabled, className: primary ? "primary" : undefined,
+              onClick: () => action(fn) }, label);
+          }
+          async function link(renew) {
+            const result = await api(renew ? "renew" : "connect");
+            setVerification(result.verificationUrl); setMessage(t("awaiting")); await refresh();
+          }
+          async function changeAccount(switching) {
+            accountEpoch.current++;
+            setReports(null); setDevices(null); setVerification(null); setState(null);
+            setReportPage(1); setHasMoreReports(false);
+            try {
+              const result = await api(switching ? "switch" : "logout");
+              setVerification(result.verificationUrl || null);
+              setMessage(t(switching ? "accountChanged" : "signedOut"));
+            } finally { await refresh(); }
+          }
+          async function loadReports(page = 1) {
+            const result = await api("reports", { page });
+            setReports(result.items || []); setReportPage(result.page);
+            setHasMoreReports(result.hasMore); setMessage("");
+          }
+          async function download(report) {
+            const file = await api("report", { reportId: report.reportId || report.id, version: report.version });
+            const bytes = Uint8Array.from(atob(file.contentBase64), (c) => c.charCodeAt(0));
+            const digest = Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes)), (b) => b.toString(16).padStart(2, "0")).join("");
+            if (digest !== file.sha256) throw new Error(t("mismatch"));
+            const url = URL.createObjectURL(new Blob([bytes], { type: "application/octet-stream" }));
+            const link = document.createElement("a"); link.href = url; link.download = file.filename.split(/[\\/]/).pop(); link.click();
+            setTimeout(() => URL.revokeObjectURL(url), 1000); setMessage("");
+          }
+          return h("main", { className: "company-erp-panel" }, h("style", null, css), h("div", null,
+            h("header", null, h("div", null, h("h1", null, t("title")), h("p", null, t("intro"))),
+              button(t("refresh"), async () => { await refresh(); setMessage(""); })),
+            h("div", { role: error ? "alert" : "status", "aria-live": "polite", className: `company-message${error ? " company-error" : ""}` }, message),
+            h("section", null, h("h2", null, t("account")), h("p", null, status),
+              h("div", { className: "company-row" },
+                button(connection?.status === "pending" ? t("continue") : t("connect"), () => link(false), active || canRenew || !state || connection?.status === "unavailable"),
+                button(t("renew"), () => link(true), !active && !canRenew),
+                button(t("switchAccount"), () => changeAccount(true), !connection?.deviceId),
+                button(t("logout"), () => changeAccount(false), !connection?.deviceId),
+                button(t("start"), async () => {
+                  const workspace = await ctx.workspaces.create({ path: state.workspace });
+                  if (workspace.title === "workspace") await ctx.workspaces.rename(workspace.workspaceId, t("title"));
+                  await ctx.uiWorkspace.openWorkspace(workspace.workspaceId, undefined, { agentPreset: "company-erp-analysis" });
+                  setMessage("");
+                }, !active || state?.pendingReload, true)),
+              verification ? h("p", null, h("a", { className: "company-button", href: verification, target: "_blank", rel: "noreferrer noopener" }, t("authorize"))) : null,
+              h("p", null, h("small", null, `${t("version")} ${state?.version || "—"} · ${t("methods")}`)),
+              state?.pendingReload ? h("p", { role: "status" }, t("needReload")) : null),
+            h("section", null, h("h2", null, t("reports")), h("p", null, t("sharing")),
+              h("div", { className: "company-row" },
+                button(t("loadReports"), () => loadReports(), !active),
+                button(t("retry"), async () => { const r = await api("retry"); await refresh(); setMessage(`${t("retryDone")}: ${r.receipts.filter((x) => x.status === "shared").length}`); }, !active),
+                state?.pendingReports ? h("span", null, `${state.pendingReports} ${t("queue")}`) : null),
+              reports ? reports.length ? h("div", { className: "company-table" }, h("table", null,
+                h("thead", null, h("tr", null, ...["reportTitle", "author", "reportVersion", "time", "download"].map((key) => h("th", { key, scope: "col" }, t(key))))),
+                h("tbody", null, ...reports.map((report) => h("tr", { key: report.reportId || report.id },
+                  h("td", null, report.title), h("td", null, report.authorName || report.author?.name || "—"),
+                  h("td", null, report.version || report.currentVersion || "—"),
+                  h("td", null, report.generatedAt ? new Date(report.generatedAt).toLocaleString() : "—"),
+                  h("td", null, button(t("download"), () => download(report)))))))) : h("p", null, t("noReports")) : null,
+              reports && h("div", { className: "company-row" },
+                button(t("previousPage"), () => loadReports(reportPage - 1), reportPage <= 1 || !active),
+                h("span", { "aria-live": "polite" }, `${t("page")} ${reportPage}`),
+                button(t("nextPage"), () => loadReports(reportPage + 1), !hasMoreReports || !active))),
+            h("section", null, h("h2", null, t("devices")),
+              button(t("devices"), async () => { const r = await api("devices"); setDevices(r.items || r.devices || []); setMessage(""); }, !active),
+              devices?.map((device) => h("div", { className: "company-row", key: device.deviceId || device.id },
+                h("p", null, device.deviceName || device.name, " · ", device.revoked ? t("revokedDevice") : `${t("expires")} ${new Date(device.expiresAt).toLocaleString()}`),
+                button(t("revoke"), async () => { await api("revoke", { deviceId: device.deviceId || device.id }); await refresh(); setDevices(null); setReports(null); setVerification(null); setMessage(""); }, device.revoked)))),
+            h("section", null, h("h2", null, t("update")), h("p", null, t("updateHelp")),
+              h("p", null, h("small", null, t("local")), h("br"), h("span", { className: "company-path" }, state?.workspace || "—")))));
+        }
+        ctx.slots.inject("main", () => ctx.slots.register({ name: "main", key: "company-erp-analysis" }, CompanyPanel));
+        ctx.slots.inject("sidebar.panellist", () => ctx.slots.register({ name: "sidebar.panellist", id: "company-erp-analysis", order: 5, label: () => t("title") }, Icon));
+      },
+    };
+  },
+});

package/plugin/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: company-erp-analysis
+      name: '@us_momo/dsh-erp-analysis'

package/plugin/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32" fill="none" stroke="#2765b8" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M6 25V7h14v18M4 25h24M10 11h6M10 15h6M10 19h3M21 12h5v13"/><path d="m17 22 4-4 3 2 4-6"/></svg>

package/plugin/index.mjs

@@ -0,0 +1,27 @@
+import { prepareCompany, companyPreset, companyActions } from "./runtime.mjs";
+export const inject = ["agentPresets", "connection"];
+export async function apply(ctx) {
+  const runtime = await prepareCompany();
+  const dispose = await ctx.agentPresets.register(await companyPreset(runtime));
+  ctx.effect(() => dispose);
+  const action = companyActions(runtime);
+  // Connection owns browser authentication, request trust, owner access and Desktop IPC.
+  ctx.connection.fetch.register({
+    path: "/api/company-erp/control", methods: ["POST"], requestBody: "buffered",
+    async fetch(request) {
+      const message = await request.json();
+      if (message?.type !== "client-request" || message.method !== "company-erp/control" ||
+          typeof message.rpcId !== "string" || typeof message.payload?.action !== "string")
+        return new Response("Invalid company request", { status: 400 });
+      let result;
+      try {
+        request.signal.throwIfAborted();
+        result = { ok: true, value: await action(message.payload.action, message.payload.body) };
+      } catch (error) {
+        result = { ok: false, error: { code: error.code || "company/action-failed", message: error.message,
+          details: Number.isInteger(error.status) ? { status: error.status } : {} } };
+      }
+      return Response.json({ type: "server-response", rpcId: message.rpcId, result });
+    },
+  });
+}

package/plugin/locale/en.json

@@ -0,0 +1 @@
+{"meta":{"title":"Company ERP Analysis","description":"Connect your ERP identity to company methods, knowledge and shared reports."}}

package/plugin/locale/zh.json

@@ -0,0 +1 @@
+{"meta":{"title":"公司 ERP 分析","description":"关联本人 ERP，使用统一专家方法、公司知识和共享正式报告。"}}