dsh-claude-subscription 0.3.0 → 0.4.0

package/AGENTS.md

@@ -6,7 +6,7 @@ Use this guide when a user asks an Agent to install, update, verify, or remove
 ## Safety
 
 - Confirm the target DSH profile; use `web` only when it is the user's target.
-- Use the pinned `v0.3.0` release assets for a first install, never a moving branch.
+- Use the pinned `v0.4.0` release assets for a first install, never a moving branch.
 - Never print OAuth credentials, account IDs, authorization callbacks, or the
   credential store.
 - Do not start, stop, or restart DSH without explicit permission.
@@ -16,7 +16,7 @@ Use this guide when a user asks an Agent to install, update, verify, or remove
 
 ## Detect the installation
 
-This plugin release supports only DeepSeek Harness `0.1.2-alpha.5`. Run
+This plugin release supports only DeepSeek Harness `0.1.6-alpha.2`. Run
 `dsh --version` first and stop on any other version; do not upgrade DSH or
 ignore peer dependency warnings without explicit permission.
 
@@ -29,7 +29,7 @@ When `dsh`, Node.js, and pnpm are already available, install the pinned npm
 package directly:
 
 ```sh
-dsh plugin --profile web add dsh-claude-subscription@0.3.0
+dsh plugin --profile web add dsh-claude-subscription@0.4.0
 ```
 
 Update with `dsh plugin --profile web update dsh-claude-subscription`.
@@ -46,7 +46,7 @@ profile (`desktop`, `web`):
 
 1. `pnpm pack` the plugin into a tarball (or download the pinned release tarball).
 2. Copy the tarball into the profile directory.
-3. Add `"dsh-claude-subscription": "file:./dsh-claude-subscription-0.3.0.tgz"` to
+3. Add `"dsh-claude-subscription": "file:./dsh-claude-subscription-0.4.0.tgz"` to
    the profile's `package.json` `dependencies` and add `dsh-claude-subscription`
    to its `dsh.profile.bundles` array.
 4. Run `pnpm install` in the profile directory.
@@ -87,4 +87,18 @@ Claude model and confirm the reply.
 On any failure, report the sanitized command error, DSH version, selected
 profile, requested release, installation mode, what changed, cleanup status,
 and what remains unverified. Do not patch DSH, switch to another paid route,
-wipe credentials, delete a profile, or claim success from a partial check.
+wipe credentials, delete a profile, or claim success from a partial check.
+
+## Agent skills
+
+### Issue tracker
+
+Issues live in GitHub Issues. See `docs/agents/issue-tracker.md`.
+
+### Triage labels
+
+Default five-role vocabulary. See `docs/agents/triage-labels.md`.
+
+### Domain docs
+
+Single-context layout. See `docs/agents/domain.md`.

package/README.en.md

@@ -1,101 +1,118 @@
-# DSH Claude Subscription
-
-[![npm version](https://img.shields.io/npm/v/dsh-claude-subscription?logo=npm&label=npm)](https://www.npmjs.com/package/dsh-claude-subscription)
-[![License: MIT](https://img.shields.io/badge/license-MIT-111111.svg)](LICENSE)
-
-[繁體中文](README.md)
-
-Sign in to a Claude Pro / Max subscription directly in DeepSeek Harness, with
-no Anthropic API key required. Sign-in and token refresh use the official
-Anthropic OAuth flow (the same one Claude Code uses). Credentials stay in
-DSH's host credential service: no token extraction, no resale, no extra billing.
-
-[Agent install](#let-an-agent-install-it-recommended) · [Manual install](#manual-install) · [Update and uninstall](#update-and-uninstall)
-
-## What it does
-
-- Uses your Claude Pro / Max subscription directly inside DSH, with no Anthropic API key required;
-- Signs in to claude.ai from the Anthropic card under **Settings -> Models** or from **Settings -> Claude subscription**, using the official OAuth flow and keeping credentials on the host;
-- Refreshes the access token automatically with the refresh token;
-- Shows sign-in status and token expiry;
-- Shows the **subscription quota**: remaining percentage and reset time for the 5-hour, 7-day, Opus, and Sonnet windows;
-- Adds a **composer quota** toggle (off by default) that shows the current model's remaining quota next to the message input;
-- Fails visibly when subscription routing is unavailable instead of silently using another paid route.
-
-## Prepare DSH
-
-This plugin currently supports only DeepSeek Harness `0.1.2-alpha.5` and
-requires a Claude Pro, Max, Team, or Enterprise subscription. DSH remains a
-developer preview; an npm `latest` or `next` release other than
-`0.1.2-alpha.5` is outside this plugin version's supported range.
-
-Run `dsh --version` before installation. Do not merely ignore peer dependency
-warnings.
-
-## Install
-
-### Let an Agent install it (recommended)
-
-Send the following URL directly to your Agent. The guide contains install,
-update, uninstall, and verification steps. It preserves the DSH profile and
-sign-in and never restarts DSH without permission:
-
-[Open the Agent installation guide](https://raw.githubusercontent.com/x5427876/dsh-claude-subscription/main/AGENTS.md)
-
-```text
-https://raw.githubusercontent.com/x5427876/dsh-claude-subscription/main/AGENTS.md
-```
-
-### Manual install
-
-When the `dsh` command is available:
-
-```sh
-dsh plugin --profile web add dsh-claude-subscription
-dsh plugin --profile web list dsh-claude-subscription --depth 0
-dsh --profile web --dump-config
-```
-
-For DSH Desktop, put the `pnpm pack` tarball into
-`~/.dsh/profiles/<profile>/`, add the `file:` dependency and the
-`dsh.profile.bundles` entry in that profile's `package.json`, run
-`pnpm install` there, then restart DSH. After install:
-
-1. Open **Settings -> Models** and find Anthropic. Full quota details remain
-   under **Settings -> Claude subscription**.
-2. If not signed in, click **Browser sign-in** and authorize on claude.ai.
-3. Pick a Claude model under the `anthropic` provider in the model picker.
-4. Turn on **Composer quota** on the same page when you want it.
-
-## Quota display
-
-The **Subscription quota** card in **Settings -> Claude subscription** shows the
-quota windows reported by Anthropic. The host reads them; the browser receives
-only a percentage projection, and the access token never leaves the machine.
-Results are cached for 60 seconds, and **Refresh** reads them again immediately.
-
-With **Composer quota** on, a Claude model shows the tightest applicable window
-next to the message input (Opus and Sonnet models also count their 7-day
-window). Nothing is rendered when you are signed out or when the account
-reports no quota windows.
-
-## Update and uninstall
-
-```sh
-dsh plugin --profile web update dsh-claude-subscription
-dsh plugin --profile web remove dsh-claude-subscription
-```
-
-## Usage note
-
-- Subscriptions are for the subscriber's own use; usage from this plugin
-  counts against your subscription quota.
-- Anthropic terms allow third-party access "at Anthropic's discretion" and
-  reserve the right to charge such usage against usage credits instead of
-  subscription limits. Follow [Anthropic's terms](https://support.claude.com/en/articles/13189465-log-in-to-your-claude-account).
-- This plugin never extracts Claude Code's local OAuth token; sign-in always
-  goes through browser authorization.
-
-## License
-
+# DSH Claude Subscription
+
+[![npm version](https://img.shields.io/npm/v/dsh-claude-subscription?logo=npm&label=npm)](https://www.npmjs.com/package/dsh-claude-subscription)
+[![License: MIT](https://img.shields.io/badge/license-MIT-111111.svg)](LICENSE)
+
+[繁體中文](README.md)
+
+Sign in to a Claude Pro / Max subscription directly in DeepSeek Harness, with
+no Anthropic API key required. Sign-in and token refresh use the official
+Anthropic OAuth flow (the same one Claude Code uses). Credentials stay in
+DSH's host credential service: no token extraction, no resale, no extra billing.
+
+[Agent install](#let-an-agent-install-it-recommended) · [Manual install](#manual-install) · [Update and uninstall](#update-and-uninstall)
+
+## What it does
+
+- Uses your Claude Pro / Max subscription directly inside DSH, with no Anthropic API key required;
+- Signs in to claude.ai from the Anthropic card under **Settings -> Models** or from **Settings -> Claude subscription**, using the official OAuth flow and keeping credentials on the host;
+- Refreshes the access token automatically with the refresh token;
+- Shows sign-in status and token expiry;
+- Shows the **subscription quota**: remaining percentage and reset time for the 5-hour, 7-day, Opus, and Sonnet windows;
+- Adds a **composer quota** toggle (off by default) that shows the current model's remaining quota next to the message input;
+- Fails visibly when subscription routing is unavailable instead of silently using another paid route.
+
+## Prepare DSH
+
+This plugin release `0.4.0` supports only DeepSeek Harness `0.1.6-alpha.2`
+and requires a Claude Pro, Max, Team, or Enterprise subscription. DSH remains
+a developer preview; other npm channels and versions are outside this plugin
+release's supported range.
+
+Run `dsh --version` before installation. Do not merely ignore peer dependency
+warnings.
+
+## Install
+
+### Let an Agent install it (recommended)
+
+Send the following URL directly to your Agent. The guide contains install,
+update, uninstall, and verification steps. It preserves the DSH profile and
+sign-in and never restarts DSH without permission:
+
+[Open the Agent installation guide](https://raw.githubusercontent.com/x5427876/dsh-claude-subscription/main/AGENTS.md)
+
+```text
+https://raw.githubusercontent.com/x5427876/dsh-claude-subscription/main/AGENTS.md
+```
+
+### Manual install
+
+When the `dsh` command is available:
+
+```sh
+dsh plugin --profile web add dsh-claude-subscription
+dsh plugin --profile web list dsh-claude-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+For DSH Desktop, put the `pnpm pack` tarball into
+`~/.dsh/profiles/<profile>/`, add the `file:` dependency and the
+`dsh.profile.bundles` entry in that profile's `package.json`, run
+`pnpm install` there, then restart DSH. After install:
+
+1. Open **Settings -> Models** and find Anthropic. Full quota details remain
+   under **Settings -> Claude subscription**.
+2. If not signed in, click **Browser sign-in** and authorize on claude.ai.
+3. Pick a Claude model under the `anthropic` provider in the model picker.
+4. Turn on **Composer quota** on the same page when you want it.
+
+## Quota display
+
+The model picker shows only models returned by the Anthropic Models API. The
+**Subscription quota** card in **Settings -> Claude subscription** shows only
+windows and labels returned by the Anthropic usage API. The host reads them,
+and the access token never leaves the machine. Results are cached for 60
+seconds, and **Refresh** reads them again immediately.
+
+With **Composer quota** on, the input shows the tightest API window explicitly
+marked as global or applicable to the current model. A window without API scope
+metadata is not used for composer quota.
+
+## Update and uninstall
+
+```sh
+dsh plugin --profile web update dsh-claude-subscription
+dsh plugin --profile web remove dsh-claude-subscription
+```
+
+## Usage note
+
+- Subscriptions are for the subscriber's own use; usage from this plugin
+  counts against your subscription quota.
+- Anthropic terms allow third-party access "at Anthropic's discretion" and
+  reserve the right to charge such usage against usage credits instead of
+  subscription limits. Follow [Anthropic's terms](https://support.claude.com/en/articles/13189465-log-in-to-your-claude-account).
+- This plugin never extracts Claude Code's local OAuth token; sign-in always
+  goes through browser authorization.
+
+## Development
+
+Edit `src/*.ts`, never `lib/` directly (`lib/` is the built publish artifact):
+
+```sh
+pnpm run typecheck  # strict tsc check (including client)
+pnpm run build      # tsc (host: lib/*.js + lib/types/**) + client assembly (lib/client.js)
+pnpm run test       # builds automatically first, runs TS sources via tsx
+pnpm run check      # typecheck → build → tests → pack
+```
+
+The host is emitted directly by tsc as ESM (`lib/*.js`) with declarations
+(`lib/types/**/*.d.ts`); the client `ModuleLoader.load` shell is still
+assembled by `scripts/build.mjs` from tsc output (tsc does not understand
+that shell). Build rules (allowlist-based; unrecognized import/export lines
+fail loudly) are documented in the header comment of `scripts/build.mjs`.
+
+## License
+
 MIT License

package/README.md

@@ -1,94 +1,110 @@
-# DSH Claude Subscription
-
-[![npm version](https://img.shields.io/npm/v/dsh-claude-subscription?logo=npm&label=npm)](https://www.npmjs.com/package/dsh-claude-subscription)
-[![License: MIT](https://img.shields.io/badge/license-MIT-111111.svg)](LICENSE)
-
-[English](README.en.md)
-
-在 DeepSeek Harness 中直接登入 Claude Pro / Max 訂閱並使用 Claude 模型，
-不需要 Anthropic API Key。登入與 token 續期走 Anthropic 官方 OAuth 流程
-（與 Claude Code 相同），憑證保留在 DSH 本機 credential service，
-不抽取、不轉售、不額外計費。
-
-[交給 Agent 安裝](#交給-agent推薦) · [手動安裝](#手動安裝) · [更新與解除安裝](#更新與解除安裝)
-
-## 能做什麼
-
-- 在 DSH 中直接使用 Claude Pro / Max 訂閱，不需要 Anthropic API Key；
-- 在**設定 → 模型**的 Anthropic 卡片或**設定 → Claude 訂閱**中，以官方 OAuth 流程登入 claude.ai，憑證保留在 DSH 本機；
-- access token 過期時自動以 refresh token 續期，不需手動處理；
-- 顯示登入狀態；
-- 顯示**訂閱額度**：5 小時、7 天、Opus 與 Sonnet 的剩餘百分比與重置時間；
-- **輸入框額度**開關（預設關閉）：開啟後在對話輸入框右側顯示目前模型的剩餘額度；
-- 訂閱路由不可用時明確報錯，不會靜默切換到其他付費路由。
-
-## 準備 DSH
-
-本插件目前僅適配 DeepSeek Harness `0.1.2-alpha.5`，需要一個 Claude Pro、
-Max、Team 或 Enterprise 訂閱帳號。DSH 仍在 developer preview；npm 的
-`latest` / `next` 通道若不是 `0.1.2-alpha.5`，不在本版本的支援範圍。
-
-安裝前請先以 `dsh --version` 確認版本；不要只忽略 peer dependency 警告。
-
-## 安裝
-
-### 交給 Agent（推薦）
-
-把下面的連結直接發給 Agent。文件包含安裝、更新、解除安裝與驗收步驟；
-它不會刪除 DSH profile、登入資訊，也不會未經許可重啟 DSH。
-
-[開啟 Agent 安裝文件](https://raw.githubusercontent.com/x5427876/dsh-claude-subscription/main/AGENTS.md)
-
-```text
-https://raw.githubusercontent.com/x5427876/dsh-claude-subscription/main/AGENTS.md
-```
-
-### 手動安裝
-
-已有 `dsh` 指令時：
-
-```sh
-dsh plugin --profile web add dsh-claude-subscription
-dsh plugin --profile web list dsh-claude-subscription --depth 0
-dsh --profile web --dump-config
-```
-
-DSH Desktop（桌面版）時，把 `pnpm pack` 產出的 tarball 放進
-`~/.dsh/profiles/<profile>/`，在該 profile 的 `package.json` 加入
-`file:` 依賴與 `dsh.profile.bundles` 條目，然後在該目錄執行
-`pnpm install`，最後重啟 DSH。安裝後：
-
-1. 開啟 DSH 的**設定 → 模型**，找到 Anthropic；完整額度資訊仍位於
-   **設定 → Claude 訂閱**。
-2. 若尚未登入，按**瀏覽器登入**，在 claude.ai 完成授權。
-3. 在模型選單選擇 `anthropic` provider 下的 Claude 模型。
-4. 需要時，在同一頁打開**輸入框額度**開關。
-
-## 額度顯示
-
-**設定 → Claude 訂閱**的**訂閱額度**卡片顯示 Anthropic 回報的額度視窗。
-資料由 host 端讀取，瀏覽器只收到百分比投影，access token 不會離開本機。
-額度結果快取 60 秒，按**重新整理**可立即重新讀取。
-
-打開**輸入框額度**後，選用 Claude 模型時，輸入框右側顯示最緊的那個額度視窗
-（Opus 或 Sonnet 模型會納入對應的 7 天視窗）。未登入、或帳號走 API Key 計費
-而沒有額度視窗時，該處不顯示任何內容。
-
-## 更新與解除安裝
-
-```sh
-dsh plugin --profile web update dsh-claude-subscription
-dsh plugin --profile web remove dsh-claude-subscription
-```
-
-## 使用注意
-
-- 訂閱方案僅供訂閱者本人使用；本插件產生的用量會計入你的訂閱額度。
-- Anthropic 條款允許「Anthropic 自行決定」是否讓訂閱者透過第三方工具
-  存取服務，並保留改從使用額度扣款的權利。請遵守
-  [Anthropic 的使用條款](https://support.claude.com/zh-TW/articles/13189465-登入您的-claude-帳戶)。
-- 本插件不抽取 Claude Code 本機的 OAuth token；登入一律透過瀏覽器授權。
-
-## 授權
-
+# DSH Claude Subscription
+
+[![npm version](https://img.shields.io/npm/v/dsh-claude-subscription?logo=npm&label=npm)](https://www.npmjs.com/package/dsh-claude-subscription)
+[![License: MIT](https://img.shields.io/badge/license-MIT-111111.svg)](LICENSE)
+
+[English](README.en.md)
+
+在 DeepSeek Harness 中直接登入 Claude Pro / Max 訂閱並使用 Claude 模型，
+不需要 Anthropic API Key。登入與 token 續期走 Anthropic 官方 OAuth 流程
+（與 Claude Code 相同），憑證保留在 DSH 本機 credential service，
+不抽取、不轉售、不額外計費。
+
+[交給 Agent 安裝](#交給-agent推薦) · [手動安裝](#手動安裝) · [更新與解除安裝](#更新與解除安裝)
+
+## 能做什麼
+
+- 在 DSH 中直接使用 Claude Pro / Max 訂閱，不需要 Anthropic API Key；
+- 在**設定 → 模型**的 Anthropic 卡片或**設定 → Claude 訂閱**中，以官方 OAuth 流程登入 claude.ai，憑證保留在 DSH 本機；
+- access token 過期時自動以 refresh token 續期，不需手動處理；
+- 顯示登入狀態；
+- 顯示**訂閱額度**：5 小時、7 天、Opus 與 Sonnet 的剩餘百分比與重置時間；
+- **輸入框額度**開關（預設關閉）：開啟後在對話輸入框右側顯示目前模型的剩餘額度；
+- 訂閱路由不可用時明確報錯，不會靜默切換到其他付費路由。
+
+## 準備 DSH
+
+本插件 `0.4.0` 目前僅適配 DeepSeek Harness `0.1.6-alpha.2`，需要一個
+Claude Pro、Max、Team 或 Enterprise 訂閱帳號。DSH 仍在 developer
+preview；其他 npm 通道或版本不在本版本的支援範圍。
+
+安裝前請先以 `dsh --version` 確認版本；不要只忽略 peer dependency 警告。
+
+## 安裝
+
+### 交給 Agent（推薦）
+
+把下面的連結直接發給 Agent。文件包含安裝、更新、解除安裝與驗收步驟；
+它不會刪除 DSH profile、登入資訊，也不會未經許可重啟 DSH。
+
+[開啟 Agent 安裝文件](https://raw.githubusercontent.com/x5427876/dsh-claude-subscription/main/AGENTS.md)
+
+```text
+https://raw.githubusercontent.com/x5427876/dsh-claude-subscription/main/AGENTS.md
+```
+
+### 手動安裝
+
+已有 `dsh` 指令時：
+
+```sh
+dsh plugin --profile web add dsh-claude-subscription
+dsh plugin --profile web list dsh-claude-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+DSH Desktop（桌面版）時，把 `pnpm pack` 產出的 tarball 放進
+`~/.dsh/profiles/<profile>/`，在該 profile 的 `package.json` 加入
+`file:` 依賴與 `dsh.profile.bundles` 條目，然後在該目錄執行
+`pnpm install`，最後重啟 DSH。安裝後：
+
+1. 開啟 DSH 的**設定 → 模型**，找到 Anthropic；完整額度資訊仍位於
+   **設定 → Claude 訂閱**。
+2. 若尚未登入，按**瀏覽器登入**，在 claude.ai 完成授權。
+3. 在模型選單選擇 `anthropic` provider 下的 Claude 模型。
+4. 需要時，在同一頁打開**輸入框額度**開關。
+
+## 額度顯示
+
+模型選單只顯示 Anthropic Models API 回傳的模型。**設定 → Claude 訂閱**的
+**訂閱額度**卡片只顯示 Anthropic usage API 回傳的額度視窗與名稱。
+資料由 host 端讀取，access token 不會離開本機。結果快取 60 秒，
+按**重新整理**可立即重新讀取。
+
+打開**輸入框額度**後，輸入框右側顯示 API 明確標示為全域或適用於目前模型的
+最緊額度視窗。API 未提供適用範圍時，該視窗不會用於輸入框額度。
+
+## 更新與解除安裝
+
+```sh
+dsh plugin --profile web update dsh-claude-subscription
+dsh plugin --profile web remove dsh-claude-subscription
+```
+
+## 使用注意
+
+- 訂閱方案僅供訂閱者本人使用；本插件產生的用量會計入你的訂閱額度。
+- Anthropic 條款允許「Anthropic 自行決定」是否讓訂閱者透過第三方工具
+  存取服務，並保留改從使用額度扣款的權利。請遵守
+  [Anthropic 的使用條款](https://support.claude.com/zh-TW/articles/13189465-登入您的-claude-帳戶)。
+- 本插件不抽取 Claude Code 本機的 OAuth token；登入一律透過瀏覽器授權。
+
+## 開發
+
+改 `src/*.ts`，不要直接改 `lib/`（`lib/` 是發佈產物，由構建產生）：
+
+```sh
+pnpm run typecheck  # tsc 嚴格型別檢查（含 client）
+pnpm run build      # tsc（host：lib/*.js + lib/types/**）＋ 組裝 client（lib/client.js）
+pnpm run test       # 會先自動 build，以 tsx 跑 TS 來源測試
+pnpm run check      # typecheck → build → tests → pack
+```
+
+Host 由 tsc 直接輸出 ESM（`lib/*.js`）與宣告（`lib/types/**/*.d.ts`）；
+client 的 `ModuleLoader.load` 外殼仍由 `scripts/build.mjs` 從 tsc 輸出組裝
+（tsc 不懂該外殼）。構建規則（allowlist 制，無法識別的 import/export
+會直接報錯）見 `scripts/build.mjs` 檔頭註解。
+
+## 授權
+
 MIT License

package/docs/assets/README.md

@@ -1,12 +1,12 @@
-# docs
-
-Press material for the DSH Claude subscription plugin.
-
-## assets
-
-Drop settings-page screenshots here and reference them from the READMEs with
-the release-asset URL pattern used by the CI release workflow:
-
-```text
-https://github.com/x5427876/dsh-claude-subscription/releases/latest/download/settings.png
+# docs
+
+Press material for the DSH Claude subscription plugin.
+
+## assets
+
+Drop settings-page screenshots here and reference them from the READMEs with
+the release-asset URL pattern used by the CI release workflow:
+
+```text
+https://github.com/x5427876/dsh-claude-subscription/releases/latest/download/settings.png
 ```