@vibedev-si/dsh-vibedev 0.2.1 → 0.2.4

package/README.md

@@ -29,7 +29,7 @@
 
 - **VibeDev 应用**：已内置本插件，不用另装。VibeDev 账号就是应用的主账号：侧边栏最底下一行和设置里的第一项都是它，DeepSeek 账号作为第二个账号显示在它上方。
 
-新版本在 npm 上发布后的 24 小时内，只写包名可能装到上一个版本（pnpm 默认不装发布未满一天的版本），想马上用新版就写明版本号，例如 `@vibedev-si/dsh-vibedev@0.2.1`。
+新版本在 npm 上发布后的 24 小时内，只写包名可能装到上一个版本（pnpm 默认不装发布未满一天的版本），想马上用新版就写明版本号，例如 `@vibedev-si/dsh-vibedev@0.2.4`。
 
 ## 登录 VibeDev
 
@@ -37,6 +37,10 @@
 
 「设置 → VibeDev 账号」里能看到当前账号、余额和 VibeDev 模型的数量，可以充值、查看用量明细、退出登录。登录会自动续期；退出后 VibeDev 的模型会从选择器里消失，DeepSeek 账号不受影响。
 
+0.2.3 起修复了重启后再次要求登录的问题：启动时凭据服务未就绪或临时读取失败，会在服务就绪后恢复，不把空结果永久缓存；正常关闭应用保留登录。过去写到本地备用文件的会话在宿主凭据服务可用后迁入，宿主已有记录优先，显式退出会清理备用会话。VibeDev 应用内置的插件需要随应用升级到修复版；单独安装在 DeepSeek Harness 中的插件可直接升级。
+
+0.2.4 起在「设置 → VibeDev 账号」页尾加了「创作工具」一行：缺影视工作台或媒体预览时说明用途，都能用了就只留一个进入 VibeDev 插件中心的入口。是否显示按宿主真实的安装状态判断，已装或应用内置的组件不会再推荐安装；这里不会自动安装任何东西，装上、升级都由插件中心或插件页在你自己点击后完成。升级插件不影响已保存的剧本、分镜和作品文件，也不影响现有登录。
+
 ## VibeDev 的模型
 
 - 模型列表来自 VibeDev 网关，按你的账号下发，所以**未登录时不显示**，登录后立即出现，不用重启。
@@ -128,10 +132,14 @@ Sign in to VibeDev in DeepSeek Harness, next to the DeepSeek account:
 
 Everything is paid from your VibeDev balance; the DeepSeek account stays DeepSeek Harness's own, and the two do not affect each other. To create an account, register at [vibedev.jzsaas.com](https://vibedev.jzsaas.com). This plugin was renamed from `dsh-media`.
 
-**Install**: install `@vibedev-si/dsh-vibedev` by package name on the Plugins page (the `@vibedev-si/` scope is required), or from the [VibeDev Plugin Center](https://github.com/VibeDev-Si/dsh-ecosystem); from the command line, `dsh plugin add @vibedev-si/dsh-vibedev`, or `dsh plugin --profile desktop add @vibedev-si/dsh-vibedev` for the desktop app (quit it fully first). The VibeDev app ships with the plugin built in, and there the VibeDev account is the main account (the bottom row of the sidebar and the first Settings section), with the DeepSeek account as the second one. Within 24 hours of a release, name the version (e.g. `@vibedev-si/dsh-vibedev@0.2.1`): pnpm does not install versions younger than a day by default.
+**Install**: install `@vibedev-si/dsh-vibedev` by package name on the Plugins page (the `@vibedev-si/` scope is required), or from the [VibeDev Plugin Center](https://github.com/VibeDev-Si/dsh-ecosystem); from the command line, `dsh plugin add @vibedev-si/dsh-vibedev`, or `dsh plugin --profile desktop add @vibedev-si/dsh-vibedev` for the desktop app (quit it fully first). The VibeDev app ships with the plugin built in, and there the VibeDev account is the main account (the bottom row of the sidebar and the first Settings section), with the DeepSeek account as the second one. Within 24 hours of a release, name the version (e.g. `@vibedev-si/dsh-vibedev@0.2.4`): pnpm does not install versions younger than a day by default.
 
 **Signing in**: choose "Sign in to VibeDev" at the bottom of the sidebar or in Settings → VibeDev account. The VibeDev sign-in page opens in your system browser: you type your password on VibeDev's own page, never in the plugin. Settings → VibeDev account shows the account, the balance and how many VibeDev models are listed, and lets you top up, see usage and sign out.
 
+**Sign-in persistence (0.2.3)**: an early empty or failed startup read is retried when storage becomes ready, and committed credential changes restore the account and model route. A late read cannot overwrite a newly saved sign-in. Normal app exit keeps the sign-in. A session saved in the local fallback is migrated into an available host store without overwriting an existing host record; signing out clears the fallback as well. A built-in copy is upgraded by updating VibeDev, while a separately installed plugin can be upgraded directly.
+
+**Creator tools (0.2.4)**: Settings → VibeDev account ends with a Creator tools line that names the film workbench or the media viewer while one is missing, and otherwise offers the VibeDev plugin centre alone. What appears follows the Host's real inventory, so an installed or app-provided component is never offered again; nothing is installed automatically. Upgrading changes neither saved screenplays, boards and film files nor the existing sign-in.
+
 **Models**: the list comes from the VibeDev gateway for your account, so nothing is listed before you sign in; models appear right after, without a restart. Using a VibeDev model while signed out, or after the sign-in has ended, asks you to sign in; a used-up balance says so with the top-up link. These messages are separate from the DeepSeek account's. An expired access token is renewed and the request sent again, without repeating any output.
 
 **Web search**: the plugin registers the web search provider `vibedev-gateway`, signed in with your VibeDev account. Registering does not select it: DeepSeek Harness keeps its own search unless the profile sets `searchProvider: vibedev-gateway` on the `web` row (the VibeDev app does). Searching is free, but the gateway refuses every request, searches included, while the balance is zero.
@@ -150,6 +158,12 @@ Everything is paid from your VibeDev balance; the DeepSeek account stays DeepSee
 
 **Third-party code**: the model route in `src/llm/` is ported from the VibeDev app; `context.ts`, `replay.ts` and `stream.ts` are copied from DeepSeek Harness's `@deepseek-ai/dsh-llm-pi-ai` (MIT). The licences of the bundled pi-ai, Anthropic SDK, OpenAI SDK and their dependencies are in `THIRD-PARTY-NOTICES.txt`.
 
+## Maintainer releases
+
+Build, typecheck and test locally, pack the tested archive, tag the matching source version, and publish a GitHub Release with `vibedev-si-dsh-vibedev-<version>.tgz` attached. `.github/workflows/publish.yml` publishes that exact archive with npm OIDC; it does not rebuild the package. The job checks the source/tag/archive identities and Release asset digest, refuses an existing version with different bytes, and skips an identical already-published version. It verifies the complete npm tarball after publication. For a manual retry of an unpublished version, run the workflow on the version's tag ref.
+
+Configure npm Trusted Publisher with GitHub owner `VibeDev-Si`, repository `dsh-vibedev`, workflow `publish.yml`, no environment, and **Allow npm publish**. Enable **Allow npm dist-tag** as well to use the manual `dist-tag` operation for `latest` or `next`. No npm token is stored in this repository. Trusted publishing does not authorize `npm deprecate`; that maintenance operation still uses interactive authentication.
+
 ## License
 
 MIT

package/THIRD-PARTY-NOTICES.txt

@@ -1,4 +1,4 @@
-THIRD-PARTY NOTICES · @vibedev-si/dsh-vibedev 0.2.1
+THIRD-PARTY NOTICES · @vibedev-si/dsh-vibedev 0.2.4
 
 This package bundles code from the projects below. Each is used under the licence that
 follows its name; the licence texts are reproduced as the projects ship them.

package/client/client.js

@@ -246,7 +246,19 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 			sidebarMenu: "VibeDev 账号",
 			sidebarIntro: "登录后可用 VibeDev 的模型和媒体生成",
 			settings: "设置",
-			accountMenu: "VibeDev 账号菜单"
+			accountMenu: "VibeDev 账号菜单",
+			toolsTitle: "创作工具",
+			toolsIntro: "这个账号可以和影视工作台、媒体预览与画廊一起用，也能生成片子要做的一切；它们都列在插件中心，可以一并查看和升级。",
+			toolsQuiet: "装上或更新这些工具不会动你的登录、余额和进行中的任务。",
+			toolsMissingTitle: "再装上这两件，就能从头做片子",
+			toolsMissingIntro: "这个账号负责生成；下面这两件负责把生成的东西编排成片、看清楚。",
+			toolsMissingKeep: "补齐之后，登录、余额和进行中的任务都不受影响；升级插件也不会动工作区里的文件。",
+			"tools.film.missing": "影视工作台：剧本、分镜画布和导演台，Agent 还带 30 个影视工具。",
+			"tools.viewer.missing": "媒体预览与画廊：在右侧栏直接看视频、音频和 HTML，或按文件夹浏览媒体。",
+			toolsOpen: "在插件中心查看",
+			toolsManual: "也可以打开「插件 → 添加插件」，填入这个包名：",
+			toolsCopy: "复制包名",
+			toolsCopied: "已复制"
 		};
 		const en = {
 			spending: "Spending",
@@ -309,7 +321,19 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 			sidebarMenu: "VibeDev account",
 			sidebarIntro: "Sign in to use the VibeDev models and media generation",
 			settings: "Settings",
-			accountMenu: "VibeDev account menu"
+			accountMenu: "VibeDev account menu",
+			toolsTitle: "Tools for creators",
+			toolsIntro: "This account works with the film workbench and with Media Viewer, and it generates everything a film needs; all of them are listed in the plugin centre, where they can be reviewed and updated together.",
+			toolsQuiet: "Installing or updating these tools leaves your sign-in, balance and running tasks alone.",
+			toolsMissingTitle: "Two more tools turn this into film making end to end",
+			toolsMissingIntro: "This account generates; the two below arrange what you generated into a film, and let you watch it closely.",
+			toolsMissingKeep: "Adding them leaves your sign-in, balance and running tasks alone, and updating a plugin never touches the files in your workspace.",
+			"tools.film.missing": "Film workbench: screenplay, storyboard canvas and director desk, with 30 film tools for the agent.",
+			"tools.viewer.missing": "Media Viewer: play video, audio and HTML right in the sidebar, or browse a folder as a gallery.",
+			toolsOpen: "Open the plugin centre",
+			toolsManual: "You can also open Plugins → Add plugin and paste this package name:",
+			toolsCopy: "Copy package name",
+			toolsCopied: "Copied"
 		};
 		/**
 		* Fill `{name}` placeholders.
@@ -324,7 +348,9 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 		//#region src/client/AccountSection.tsx
 		/**
 		* Settings → VibeDev 账号: sign in to VibeDev, see who is signed in, the
-		* balance and how many VibeDev models the pickers list, top up, sign out.
+		* balance and how many VibeDev models the pickers list, top up, sign out; and,
+		* under all of that, the creator tools that work with this account — the film
+		* workbench and the media viewer — with the plugin centre as the way to them.
 		* The DeepSeek account keeps its own section; this one never touches it.
 		*/
 		const styles$1 = {
@@ -396,8 +422,102 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 				fontSize: 12,
 				lineHeight: 1.6,
 				color: "var(--dsw-alias-state-error-primary, #d4380d)"
+			},
+			spec: {
+				padding: "2px 6px",
+				borderRadius: 6,
+				background: "var(--dsw-alias-bg-l1, transparent)",
+				color: "var(--dsw-alias-label-primary)",
+				fontSize: 12,
+				userSelect: "text"
 			}
 		};
+		/**
+		* Draw the tools block from a settled read.
+		* @param props - the translated hint, the manual fallback and the two clicks.
+		* @returns the tools block.
+		*/
+		function creatorToolsView({ t, hint, manual, copied, onOpen, onCopy }) {
+			const missing = hint.kind === "missing";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+					style: styles$1.title,
+					children: t(missing ? "toolsMissingTitle" : "toolsTitle")
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					style: styles$1.intro,
+					children: missing ? t("toolsMissingIntro") : t("toolsIntro")
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					style: styles$1.card,
+					children: [
+						hint.missing.map((want) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: styles$1.line,
+							children: want.line
+						}, want.package)),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: styles$1.quiet,
+							children: missing ? t("toolsMissingKeep") : t("toolsQuiet")
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							style: styles$1.actions,
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+								variant: missing ? "primary" : "outline",
+								size: "sm",
+								onClick: onOpen,
+								children: t("toolsOpen")
+							})
+						}),
+						manual === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: styles$1.quiet,
+								children: t("toolsManual")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+								style: styles$1.spec,
+								children: manual.spec
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								style: styles$1.actions,
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+									variant: "ghost",
+									size: "sm",
+									onClick: () => {
+										onCopy(manual.spec);
+									},
+									children: t(copied ? "toolsCopied" : "toolsCopy")
+								})
+							})
+						] })
+					]
+				})
+			] });
+		}
+		function CreatorTools({ suite, t }) {
+			const { read, hint } = (0, react.useSyncExternalStore)(suite.subscribe, suite.getSnapshot, suite.getSnapshot);
+			/** Set once a click found nothing to open: the spec to copy is then on screen. */
+			const [manual, setManual] = (0, react.useState)(void 0);
+			const [copied, setCopied] = (0, react.useState)(false);
+			if (!read) return null;
+			const open = () => {
+				const target = suite.open();
+				setCopied(false);
+				setManual(target.kind === "manual" ? { spec: target.spec } : void 0);
+			};
+			const copy = (spec) => {
+				suite.copy(spec).then((written) => {
+					setCopied(written);
+				});
+			};
+			return creatorToolsView({
+				t,
+				hint,
+				manual,
+				copied,
+				onOpen: open,
+				onCopy: copy
+			});
+		}
 		/** The status dot for a state. */
 		function statusDot(state) {
 			const view = state.view;
@@ -416,10 +536,10 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 		}
 		/**
 		* The section.
-		* @param props - the dictionary, the shared account store and the route's display name.
+		* @param props - the dictionary, the shared account store, the route's display name and the entry's suite view.
 		* @returns the section content.
 		*/
-		function AccountSection({ t, store, routeName }) {
+		function AccountSection({ t, store, routeName, suite }) {
 			const state = (0, react.useSyncExternalStore)(store.subscribe, store.getSnapshot);
 			(0, react.useEffect)(() => {
 				store.refresh(true);
@@ -564,6 +684,10 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 								children: error
 							})
 						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CreatorTools, {
+						suite,
+						t
 					})
 				]
 			});
@@ -1204,6 +1328,302 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 			});
 		}
 		//#endregion
+		//#region src/client/suite.ts
+		/**
+		* The complementary VibeDev components this plugin's own work leans on, and the
+		* way to the plugin centre that lists the rest.
+		*
+		* What the Host actually has comes from its plugin inventory (a bundle the
+		* profile installed, or one the application provides itself); the centre's own
+		* page is opened where it is registered, and otherwise the Host's install
+		* entry, and otherwise the spec a person can paste into the Plugins page. Every
+		* service is read optionally through a property check, so a Host without a
+		* plugin manager, without a panel layout, or without the plugin navigation
+		* contract keeps this plugin working and simply shows no entry, or the manual
+		* one. Nothing here installs anything: the centre and the Plugins page own
+		* every install, approval and progress.
+		*
+		* Package names are the stable ones the centre's catalogue and the plugin
+		* manager know; no version is named here, because the catalogue and the install
+		* dialog are what discover the current one.
+		*/
+		/** The VibeDev components by package name; the centre is the way to all of them. */
+		const SUITE = {
+			account: "@vibedev-si/dsh-vibedev",
+			center: "@vibedev-si/dsh-ecosystem",
+			film: "dsh-film",
+			viewer: "@vibedev-si/dsh-media-viewer"
+		};
+		/** The package a person can add on the Plugins page when nothing can open the centre. */
+		const CENTER_SPEC = SUITE.center;
+		/** The main panel the VibeDev plugin centre registers its page under. */
+		const CENTER_PANEL = "vibedev-center";
+		/** A property value read as a record, without trusting its declared type. */
+		function asRecord(value) {
+			return typeof value === "object" && value !== null ? value : void 0;
+		}
+		/**
+		* One service of the client context, read optionally.
+		* `ctx.get(name)` answers for an absent or inactive service without the strict property read;
+		* a Host, or a service, whose own getter throws answers undefined here rather than failing the plugin.
+		* @param ctx - the client context.
+		* @param name - the service name.
+		* @returns the service, or undefined when this Host does not serve it.
+		*/
+		function service(ctx, name) {
+			const record = asRecord(ctx);
+			if (record === void 0) return void 0;
+			const get = record.get;
+			if (typeof get === "function") try {
+				const value = get.call(record, name);
+				if (value !== void 0) return value;
+			} catch (_error) {}
+			try {
+				return record[name];
+			} catch (_error) {
+				return;
+			}
+		}
+		/**
+		* Whether the Host has a bundle: the profile installed it, or the application provides it itself.
+		* @param bundle - one inventory row.
+		* @returns whether the component is usable without installing anything.
+		*/
+		function bundlePresent(bundle) {
+			return bundle.installed === true || bundle.removable === false && !bundle.source;
+		}
+		/**
+		* The present package names of one inventory answer's rows.
+		* @param answer - the Host's answer to `listBundles`.
+		* @returns the names, empty when the answer carries no list.
+		*/
+		function presentFrom(answer) {
+			const rows = asRecord(answer)?.value;
+			if (!Array.isArray(rows)) return /* @__PURE__ */ new Set();
+			const names = /* @__PURE__ */ new Set();
+			for (const row of rows) {
+				const bundle = asRecord(row);
+				if (bundle === void 0 || !bundlePresent(bundle)) continue;
+				if (typeof bundle.name === "string" && bundle.name !== "") names.add(bundle.name);
+			}
+			return names;
+		}
+		/**
+		* What one inventory answer means. Only an accepted envelope carrying a list is an inventory:
+		* a refused answer (`ok: false` with an error) and a value that is not a list are both unread,
+		* never an empty Host, so nothing is ever reported missing on the strength of a failure.
+		* A Host that answers with the list itself is accepted as well.
+		* @param answer - the Host's answer to `listBundles`.
+		* @returns the read, with `ok` false when nothing could be learned.
+		*/
+		function presentFromAnswer(answer) {
+			const record = asRecord(answer);
+			if (record === void 0) return {
+				ok: false,
+				present: /* @__PURE__ */ new Set()
+			};
+			if (record.ok === true && Array.isArray(record.value)) return {
+				ok: true,
+				present: presentFrom(record)
+			};
+			if (Array.isArray(answer)) return {
+				ok: true,
+				present: presentFrom({ value: answer })
+			};
+			return {
+				ok: false,
+				present: /* @__PURE__ */ new Set()
+			};
+		}
+		/**
+		* Read the Host's plugin inventory once.
+		* @param ctx - the client context.
+		* @returns what is present, or `ok: false` when no inventory could be read.
+		*/
+		async function readPresence(ctx) {
+			const manager = asRecord(service(service(ctx, "remote"), "pluginManager"));
+			const listBundles = manager?.listBundles;
+			if (typeof listBundles !== "function") return {
+				ok: false,
+				present: /* @__PURE__ */ new Set()
+			};
+			try {
+				return presentFromAnswer(await listBundles.call(manager));
+			} catch (_error) {
+				return {
+					ok: false,
+					present: /* @__PURE__ */ new Set()
+				};
+			}
+		}
+		/**
+		* Hear about installs, removals and activations.
+		* @param ctx - the client context.
+		* @param listener - called after every change.
+		* @returns the unsubscribe, a no-op on a Host without the event bus.
+		*/
+		function observePresence(ctx, listener) {
+			const remote = asRecord(service(ctx, "remote"));
+			const on = remote?.$on;
+			if (typeof on !== "function") return () => {};
+			try {
+				const off = on.call(remote, "plugin-manager/changed", listener);
+				if (typeof off !== "function") return () => {};
+				const stop = off;
+				return () => {
+					stop();
+				};
+			} catch (_error) {
+				return () => {};
+			}
+		}
+		/**
+		* The centre's main panel, where this Host registered one.
+		* A slots entry keeps its identity in `options` (`options.key` is the panel id the layout
+		* selects); older shapes kept `key`/`id` at the top level, which is still read as a fallback.
+		* @param ctx - the client context.
+		* @returns the panel id the layout selects, or undefined when there is no centre page.
+		*/
+		function centerPanel(ctx) {
+			const slots = asRecord(service(ctx, "slots"));
+			const entries = slots?.entries;
+			if (typeof entries !== "function") return void 0;
+			const listed = entries.call(slots, "main");
+			if (!Array.isArray(listed)) return void 0;
+			for (const entry of listed) {
+				const record = asRecord(entry);
+				const options = asRecord(record?.options);
+				if ((options?.key ?? record?.key ?? options?.id ?? record?.id) === CENTER_PANEL) return CENTER_PANEL;
+			}
+		}
+		/**
+		* Send the person to the VibeDev plugin centre, or to the Host's own way of installing it.
+		* A panel that is gone, a layout that refuses, and a missing navigation contract each fall
+		* through to the next, and the last answer is the spec to paste.
+		* @param ctx - the client context.
+		* @returns what was opened.
+		*/
+		function openCenter(ctx) {
+			const panel = centerPanel(ctx);
+			const selectPanel = asRecord(service(ctx, "layout"))?.selectPanel;
+			if (panel !== void 0 && typeof selectPanel === "function") try {
+				selectPanel.call(service(ctx, "layout"), panel);
+				return { kind: "center" };
+			} catch (_error) {}
+			const navigation = asRecord(service(ctx, "pluginNavigation"));
+			const openBundle = navigation?.openBundle;
+			if (typeof openBundle === "function") try {
+				openBundle.call(navigation, SUITE.center);
+				return { kind: "plugins" };
+			} catch (_error) {}
+			const openInstall = navigation?.openInstall;
+			if (typeof openInstall === "function") try {
+				openInstall.call(navigation, { spec: CENTER_SPEC });
+				return { kind: "plugins" };
+			} catch (_error) {}
+			return {
+				kind: "manual",
+				spec: CENTER_SPEC
+			};
+		}
+		/**
+		* Which of `wanted` this Host does not have yet.
+		* @param present - what the Host has.
+		* @param wanted - the components, in the order the surface lists them.
+		* @returns the absent ones.
+		*/
+		function missingFrom(present, wanted) {
+			return wanted.filter((want) => !present.has(want.package));
+		}
+		/**
+		* What a surface says: the reasons something is absent, or the one way to the rest.
+		* An inventory that could not be read claims nothing and offers the centre.
+		* @param read - the inventory read.
+		* @param wanted - the components this surface leans on.
+		* @param translate - the entry's bound dictionary, so a card renders lines rather than keys.
+		* @returns the hint the card renders.
+		*/
+		function suiteHint(read, wanted, translate) {
+			if (!read.ok) return {
+				kind: "tools",
+				missing: []
+			};
+			const missing = missingFrom(read.present, wanted);
+			if (missing.length === 0) return {
+				kind: "tools",
+				missing: []
+			};
+			return {
+				kind: "missing",
+				missing: missing.map((want) => ({
+					package: want.package,
+					line: translate(want.key)
+				}))
+			};
+		}
+		/** Write text through the browser's clipboard, where the page has one. */
+		async function writeClipboard(text) {
+			const clipboard = asRecord(asRecord(globalThis)?.navigator)?.clipboard;
+			const writeText = asRecord(clipboard)?.writeText;
+			if (typeof writeText !== "function") return false;
+			try {
+				await writeText.call(clipboard, text);
+				return true;
+			} catch (_error) {
+				return false;
+			}
+		}
+		/**
+		* The entry's read of what this Host has, shared by every card it hands to the workbench.
+		* @param ctx - the client context.
+		* @param wanted - the components this plugin's own work leans on.
+		* @param translate - the entry's bound dictionary.
+		* @returns the store: subscribe and render through {@link SuiteView}, and start it inside an effect.
+		*/
+		function createSuiteStore(ctx, wanted, translate) {
+			let snapshot = {
+				read: false,
+				found: {
+					ok: false,
+					present: /* @__PURE__ */ new Set()
+				},
+				hint: {
+					kind: "tools",
+					missing: []
+				}
+			};
+			const listeners = /* @__PURE__ */ new Set();
+			const publish = (next) => {
+				snapshot = next;
+				for (const listener of [...listeners]) listener();
+			};
+			const read = async () => {
+				const found = await readPresence(ctx);
+				publish({
+					read: true,
+					found,
+					hint: suiteHint(found, wanted, translate)
+				});
+			};
+			return {
+				subscribe(listener) {
+					listeners.add(listener);
+					return () => {
+						listeners.delete(listener);
+					};
+				},
+				getSnapshot: () => snapshot,
+				open: () => openCenter(ctx),
+				copy: writeClipboard,
+				start: () => {
+					read();
+					return observePresence(ctx, () => {
+						read();
+					});
+				}
+			};
+		}
+		//#endregion
 		//#region src/client/index.ts
 		/**
 		* dsh-vibedev browser half:
@@ -1238,6 +1658,18 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 		const PRIMARY_SECTION_ORDER = -20;
 		/** Below the default the DeepSeek account launcher registers with, so this row is the one the foot shows. */
 		const LAUNCHER_PRIORITY = -1;
+		/**
+		* The creator tools that work with this account, offered under the account's own settings.
+		* The account itself is never listed: it is what the person is already looking at (and the
+		* VibeDev app ships with it built in), so only what is missing from the Host is named.
+		*/
+		const CREATOR_WANTED = [{
+			package: SUITE.film,
+			key: "tools.film.missing"
+		}, {
+			package: SUITE.viewer,
+			key: "tools.viewer.missing"
+		}];
 		const disposer = (value) => typeof value === "function" ? value : () => {};
 		const name = "dsh-vibedev";
 		const inject = ["slots", "locale"];
@@ -1270,6 +1702,8 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 			const t = ctx.locale.bind(LOCALE_NAMESPACE);
 			const account = new AccountStore(windowOptions());
 			ctx.effect(() => account.start(), "dsh-vibedev: account reads");
+			const creatorTools = createSuiteStore(ctx, CREATOR_WANTED, t);
+			ctx.effect(() => creatorTools.start(), "dsh-vibedev: creator tools presence");
 			const section = (order) => disposer(ctx.slots.inject("settings.section", () => ctx.slots.register({
 				name: "settings.section",
 				id: "vibedev-account",
@@ -1279,7 +1713,8 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 			}, () => (0, react.createElement)(AccountSection, {
 				t,
 				store: account,
-				routeName: ROUTE_NAME
+				routeName: ROUTE_NAME,
+				suite: creatorTools
 			}))));
 			const launcher = () => disposer(ctx.slots.inject("settings.launcher", () => ctx.slots.register({
 				name: "settings.launcher",
@@ -1360,6 +1795,7 @@ window.__ModuleLoader__.load({ id: "@vibedev-si/dsh-vibedev", factory: (require)
 			});
 		}
 		//#endregion
+		exports.CREATOR_WANTED = CREATOR_WANTED;
 		exports.apply = apply;
 		exports.inject = inject;
 		exports.name = name;

package/lib/auth/credentials.d.ts

@@ -36,6 +36,7 @@ export declare class CredentialChain {
      */
     reject(credential: GatewayCredential): Promise<void>;
 }
+export declare const GRANT_KEY: import("@deepseek-ai/dsh-credentials").CredentialKey;
 /**
  * Grant storage: the host's credential store when one is loaded (a grant
  * record the store keeps verbatim), else a private file in the state

package/lib/auth/login.d.ts

@@ -88,7 +88,9 @@ export declare function openInBrowser(url: string): Promise<boolean>;
 export declare class PluginLogin {
     private readonly options;
     private grant;
-    private loaded;
+    private reading;
+    private revision;
+    private readFailureReported;
     private refreshing;
     private pending;
     private readonly listeners;
@@ -98,7 +100,10 @@ export declare class PluginLogin {
      * @param options - gateway origin, storage and test seams.
      */
     constructor(options: PluginLoginOptions);
+    private readStored;
     private load;
+    /** Re-read after the credential provider becomes ready or its record changes, without starting a browser sign-in. */
+    restore(): Promise<void>;
     /** Take a grant as current and tell listeners when it changed. */
     private adopt;
     private save;

package/lib/index.js

@@ -569,27 +569,77 @@ function grantStorage(stateDir, credentials) {
 	const deviceFile = join(stateDir, "device.json");
 	let device;
 	const readFileGrant = async () => {
-		const parsed = await readFile(sessionFile, "utf8").then((text) => JSON.parse(text), () => void 0);
+		let text;
+		try {
+			text = await readFile(sessionFile, "utf8");
+		} catch (error) {
+			if (error.code === "ENOENT") return void 0;
+			throw error;
+		}
+		const parsed = JSON.parse(text);
 		return isGrant(parsed) ? parsed : void 0;
 	};
 	const writeFileGrant = (grant) => writeFileAtomic(sessionFile, new TextEncoder().encode(grant === void 0 ? "null" : JSON.stringify(grant)), { mode: 384 });
+	const clearFileGrant = async () => {
+		try {
+			await stat(sessionFile);
+		} catch (error) {
+			if (error.code === "ENOENT") return;
+			throw error;
+		}
+		await writeFileGrant(void 0);
+	};
+	const clearFileGrantQuietly = async () => {
+		try {
+			await clearFileGrant();
+		} catch {}
+	};
+	const readHostGrant = async (store) => {
+		const stored = await store.readRecord(GRANT_KEY);
+		if (stored !== void 0) {
+			const grant = stored.kind === "grant" && isGrant(stored.payload) ? stored.payload : void 0;
+			if (grant !== void 0) await clearFileGrantQuietly();
+			return grant;
+		}
+		try {
+			if ((await stat(sessionFile)).size <= 4) return void 0;
+		} catch (error) {
+			if (error.code === "ENOENT") return void 0;
+			throw error;
+		}
+		let adopted;
+		await store.modifyRecord(GRANT_KEY, async (current) => {
+			if (current !== void 0) {
+				adopted = current.kind === "grant" && isGrant(current.payload) ? current.payload : void 0;
+				return;
+			}
+			adopted = await readFileGrant();
+			return adopted === void 0 ? void 0 : {
+				kind: "grant",
+				payload: adopted
+			};
+		});
+		if (adopted !== void 0) await clearFileGrantQuietly();
+		return adopted;
+	};
 	return {
 		async read() {
 			const store = credentials();
-			if (store !== void 0) {
-				const stored = await store.readRecord(GRANT_KEY);
-				return stored?.kind === "grant" && isGrant(stored.payload) ? stored.payload : void 0;
-			}
-			return readFileGrant();
+			return store === void 0 ? readFileGrant() : readHostGrant(store);
 		},
 		async write(grant) {
 			const store = credentials();
 			if (store !== void 0) {
-				if (grant === void 0) await store.deleteRecord(GRANT_KEY);
-				else await store.modifyRecord(GRANT_KEY, () => Promise.resolve({
-					kind: "grant",
-					payload: grant
-				}));
+				if (grant === void 0) {
+					await clearFileGrant();
+					await store.deleteRecord(GRANT_KEY);
+				} else {
+					await store.modifyRecord(GRANT_KEY, () => Promise.resolve({
+						kind: "grant",
+						payload: grant
+					}));
+					await clearFileGrantQuietly();
+				}
 				return;
 			}
 			await writeFileGrant(grant);
@@ -597,6 +647,7 @@ function grantStorage(stateDir, credentials) {
 		async update(change) {
 			const store = credentials();
 			if (store !== void 0) {
+				await readHostGrant(store);
 				let remove = false;
 				await store.modifyRecord(GRANT_KEY, async (current) => {
 					const result = await change(current?.kind === "grant" && isGrant(current.payload) ? current.payload : void 0);
@@ -606,7 +657,10 @@ function grantStorage(stateDir, credentials) {
 					};
 					remove = result.kind === "delete";
 				});
-				if (remove) await store.deleteRecord(GRANT_KEY);
+				if (remove) {
+					await clearFileGrant();
+					await store.deleteRecord(GRANT_KEY);
+				}
 				return;
 			}
 			const result = await change(await readFileGrant());
@@ -709,7 +763,9 @@ const PAGE = (title, body) => `<!doctype html><html><head><meta charset="utf-8">
 var PluginLogin = class {
 	options;
 	grant;
-	loaded;
+	reading;
+	revision = 0;
+	readFailureReported = false;
 	refreshing;
 	pending;
 	listeners = /* @__PURE__ */ new Set();
@@ -723,14 +779,36 @@ var PluginLogin = class {
 		this.now = options.now ?? Date.now;
 		this.origin = options.origin.trim().replace(/\/+$/, "");
 	}
+	readStored(notify) {
+		if (this.reading !== void 0) return this.reading;
+		const revision = this.revision;
+		this.reading = this.options.storage.read().then((grant) => {
+			this.readFailureReported = false;
+			if (this.revision !== revision) return;
+			if (notify) this.adopt(grant);
+			else {
+				this.grant = grant;
+				this.revision++;
+			}
+		}, () => {
+			if (!this.readFailureReported) this.options.log?.("dsh-vibedev: stored sign-in is temporarily unreadable; it will be checked again");
+			this.readFailureReported = true;
+		}).finally(() => {
+			this.reading = void 0;
+		});
+		return this.reading;
+	}
 	load() {
-		this.loaded ??= this.options.storage.read().then((grant) => {
-			this.grant = grant;
-		}, () => void 0);
-		return this.loaded;
+		return this.grant === void 0 ? this.readStored(false) : Promise.resolve();
+	}
+	/** Re-read after the credential provider becomes ready or its record changes, without starting a browser sign-in. */
+	async restore() {
+		await this.reading;
+		await this.readStored(true);
 	}
 	/** Take a grant as current and tell listeners when it changed. */
 	adopt(grant) {
+		this.revision++;
 		const changed = this.grant?.accessToken !== grant?.accessToken;
 		this.grant = grant;
 		if (!changed) return;
@@ -7168,6 +7246,15 @@ function apply(ctx, config) {
 		client: config.client.trim() || "vibedev-plugin",
 		openBrowser: (url) => config.openBrowserOnSignIn ? openInBrowser(url) : Promise.resolve(false)
 	});
+	ctx.inject(["credentials"], (scoped) => {
+		scoped.on("credentials/record-updated", (key) => {
+			if (key === GRANT_KEY) login.restore();
+		});
+		scoped.effect(async () => {
+			await login.restore();
+			return () => {};
+		}, "dsh-vibedev: restore stored sign-in");
+	});
 	const chain = new CredentialChain({
 		origin,
 		plugin: login,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibedev-si/dsh-vibedev",
-  "version": "0.2.1",
+  "version": "0.2.4",
   "description": "VibeDev 账号与模型：在 DeepSeek Harness 里登录 VibeDev，与 DeepSeek 账号并存，使用 VibeDev 网关的模型（Claude、GPT 等），并生成图片、视频、音乐和播客 · VibeDev account and models for DeepSeek Harness: sign in to VibeDev next to the DeepSeek account and use the VibeDev gateway's models (Claude, GPT and more), plus image, video, music and podcast generation",
   "type": "module",
   "main": "lib/index.js",