dsh-cloudq 0.1.2 → 0.1.4

package/README.md

@@ -1,67 +1,69 @@
 # dsh-cloudq
 
-面向 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 的 CloudQ 集成插件。插件为 Web Profile 提供 CloudQ 模式，内置 `cloudq` Skill，并提供 CloudQ 用量、架构视图、本地凭证配置和插件管理能力。
+English | [简体中文](README-zh.md)
 
-## 截图
+CloudQ integration for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness). It adds a CloudQ mode to the Web profile, bundles the `cloudq` skill, and provides CloudQ usage and architecture views, local credential setup, and plugin management.
 
-![CloudQ 风险分析对话](assets/screenshots/chat-risk-analysis.png)
+## Screenshots
 
-![CloudQ 设置与插件管理](assets/screenshots/settings.png)
+![CloudQ risk analysis conversation](assets/screenshots/chat-risk-analysis.png)
 
-## 环境要求
+![CloudQ settings and plugin management](assets/screenshots/settings.png)
+
+## Requirements
 
 - Node.js `>=22.19.0`
-- DeepSeek Harness `0.1.1-rc.2` 或兼容的更高 `0.1.x` 版本
-- `dsh plugin` 命令可调用 `pnpm`
-- 可通过 `python3` 命令运行 Python 3
-- macOS 或 Linux
+- DeepSeek Harness `0.1.1-rc.2` or a compatible newer `0.1.x` release
+- `pnpm` available to the `dsh plugin` command
+- Python 3 available as `python3`
+- macOS or Linux
 
-## 安装
+## Install
 
 ```sh
 dsh plugin --profile web add dsh-cloudq
 ```
 
-安装完成后重启 Web Profile：
+Restart the Web profile after installation:
 
 ```sh
 dsh --profile web
 ```
 
-打开 DSH 输出的访问地址，即可在对话输入区和侧边栏看到 CloudQ 入口。也可以通过 `/cloudq` 显式调用内置 Skill。
+Open the URL printed by DSH. The conversation input area and sidebar will expose the CloudQ entry. You can also invoke the bundled skill explicitly with `/cloudq`.
 
-## 升级与卸载
+## Upgrade and remove
 
 ```sh
 dsh plugin --profile web update dsh-cloudq
 dsh plugin --profile web remove dsh-cloudq
 ```
 
-修改已安装的插件后，需要重启 Web Profile。
+Restart the Web profile after changing the installed package set.
 
-## 凭证配置
+## Credentials
 
-设置卡片支持配置腾讯云 `SecretId` 和 `SecretKey` 凭证。
+The settings card accepts a Tencent Cloud `SecretId`/`SecretKey` pair.
 
-- 凭证保存在本机 `~/.tencent-cloudq/credential.json`，文件权限仅允许当前用户访问。
-- 敏感凭证通过标准输入传递给 Python 辅助脚本，不会放入命令行参数。
-- 浏览器接口仅返回凭证状态和脱敏标识，不返回凭证内容或本地凭证路径。
-- 可通过退出登录操作删除本地凭证。
+- Credentials are stored locally at `~/.tencent-cloudq/credential.json` with owner-only permissions.
+- Secret values are sent to Python helpers through standard input, never command-line arguments.
+- Browser APIs return only credential state and masked identifiers; local credential paths and secret values are not returned.
+- Use the logout action to remove the stored credential.
 
-请遵循最小权限原则，只授予 CloudQ 操作所需的权限。内置 Skill 可以调用云管理的读写操作，请在批准前检查每项操作的具体内容。
+Follow least-privilege: grant only the permissions required for the CloudQ operations you intend to run. The bundled skill can invoke read and write cloud-management operations; review each action before approving it.
 
-## 安全机制
+## Security model
 
-- Host API 只接受来自回环地址的同源请求。
-- JSON 请求体大小限制为 64 KiB。
-- Python 辅助脚本的输出大小受到限制，非预期的内部错误不会返回到浏览器。
-- 远程数据通过 DOM 文本节点渲染，不使用 HTML 注入。
-- 下载链接必须使用 HTTPS。
-- npm 包不包含凭证、Token 或本地环境文件。
+- Host APIs accept only loopback, same-origin requests.
+- JSON request bodies are limited to 64 KiB.
+- Python helper output is bounded, and unexpected internal errors are not returned to the browser.
+- Remote values are inserted with DOM text nodes rather than HTML injection.
+- Download links require HTTPS.
+- No credentials, tokens, or local environment files are included in the npm package.
 
-如需报告安全问题，请通过 [GitHub Issues](https://github.com/TencentCloud/cloudq-for-dsh/issues) 提交，且不要附带真实凭证。
+Report security issues through [GitHub Issues](https://github.com/TencentCloud/cloudq-for-dsh/issues) without including live credentials.
 
-## 本地开发
+## Development
 
 ```sh
 pnpm install
@@ -73,28 +75,28 @@ pnpm run check:client
 npm pack --dry-run --registry=https://registry.npmjs.org/
 ```
 
-npm 包内包含预构建的 Host 和 Web Client 产物、Bundle Patch、CloudQ 运行时图标以及内置 Skill。用户从 Registry 安装时不需要执行构建脚本。
+The npm package ships prebuilt Host and Web client artifacts, the bundle patch, the runtime logo, and the bundled skill. Registry installation runs no build scripts.
 
-## 目录结构
+## Repository layout
 
 ```text
-src/                         Host 与 Web Client 源码
-skills/cloudq/               内置 CloudQ Skill 与 Python 辅助脚本
-assets/cloudq.png            Host 提供的运行时图标
-scripts/                     构建和发布检查脚本
-tests/                       单元测试、集成测试与包契约测试
-cordis.patch.yml             DSH Bundle 配置层
+src/                         Host and Web client source
+skills/cloudq/               Bundled CloudQ skill and Python helpers
+assets/cloudq.png            Runtime logo served by the Host
+scripts/                     Build and release checks
+tests/                       Unit, integration, and package-contract tests
+cordis.patch.yml             DSH bundle layer
 ```
 
-## 发布
+## Release
 
-源码在 [TencentCloud/cloudq-for-dsh](https://github.com/TencentCloud/cloudq-for-dsh) 完成评审和版本管理。只有仓库检查与安装包冒烟测试全部通过后，才可将 npm 版本发布到官方 Registry。
+Source is reviewed and versioned in [TencentCloud/cloudq-for-dsh](https://github.com/TencentCloud/cloudq-for-dsh). An npm version is published to the official registry only after the repository checks and the package-install smoke test pass.
 
-## 更多文档
+## More documentation
 
-- 更新日志：[`CHANGELOG.md`](CHANGELOG.md)
-- 开发与维护指南：[`DEVELOPMENT.md`](DEVELOPMENT.md)
+- Changelog: [`CHANGELOG.md`](CHANGELOG.md)
+- Development & maintenance guide: [`DEVELOPMENT.md`](DEVELOPMENT.md)
 
-## 许可证
+## License
 
-本项目采用 MIT 许可证，详情请参阅 [`LICENSE`](LICENSE)。
+MIT. See [`LICENSE`](LICENSE).

package/lib/client.js

@@ -2134,7 +2134,7 @@ display: none;
 				hint.className = "dsh-cloudq-panel__hint";
 				hint.textContent = "正在加载用量…";
 				tableWrap.appendChild(hint);
-				cloudqRequest(`${API_USAGE}?start=${encodeURIComponent(range.start)}&end=${encodeURIComponent(range.end)}`).then((data) => {
+				requireCloudqCredential().then(() => cloudqRequest(`${API_USAGE}?start=${encodeURIComponent(range.start)}&end=${encodeURIComponent(range.end)}`)).then((data) => {
 					if (panelView !== "usage" || !panelExpanded) return;
 					value.textContent = formatCredits(data.overview?.TotalCredits);
 					const rows = Array.isArray(data.detail) ? data.detail : [];
@@ -2300,7 +2300,7 @@ display: none;
 			hint.className = "dsh-cloudq-panel__hint";
 			hint.textContent = "正在加载灵感…";
 			list.appendChild(hint);
-			cloudqRequest(API_INSPIRATIONS).then((data) => {
+			requireCloudqCredential().then(() => cloudqRequest(API_INSPIRATIONS)).then((data) => {
 				inspirationCache = Array.isArray(data.inspirations) ? data.inspirations : [];
 				paint(inspirationCache);
 			}).catch((error) => {
@@ -2442,7 +2442,7 @@ display: none;
 			hint.className = "dsh-cloudq-panel__hint";
 			hint.textContent = "正在加载制品…";
 			panelBody.appendChild(hint);
-			cloudqRequest(API_ARTIFACTS).then((data) => {
+			requireCloudqCredential().then(() => cloudqRequest(API_ARTIFACTS)).then((data) => {
 				artifactCache = Array.isArray(data?.sessions) ? data.sessions : [];
 				artifactTotal = Number(data?.total) || artifactCache.length;
 				paint(artifactCache, artifactTotal);
@@ -2742,7 +2742,7 @@ display: none;
 				paintDirectories(architectureDirectoriesCache, architectureFirstFolderId);
 				return;
 			}
-			cloudqRequest(API_ARCH_DIRECTORIES).then((data) => {
+			requireCloudqCredential().then(() => cloudqRequest(API_ARCH_DIRECTORIES)).then((data) => {
 				architectureDirectoriesCache = Array.isArray(data?.folders) ? data.folders : [];
 				architectureFirstFolderId = Number(data?.firstFolderId) || null;
 				paintDirectories(architectureDirectoriesCache, architectureFirstFolderId);
@@ -3041,14 +3041,32 @@ display: none;
 				this.code = code;
 			}
 		};
+		const CLOUDQ_AUTH_ERROR_CODES = /* @__PURE__ */ new Set([
+			"NeedAuth",
+			"CredentialExpired",
+			"AuthFailure"
+		]);
 		/**
-		* Panel-facing error text. A missing credential gets an actionable pointer to
-		* the settings card instead of a raw load failure message.
+		* Panel-facing error text. Credential problems carry an actionable Host
+		* message and are shown directly instead of a raw load failure prefix.
 		*/
 		function cloudqPanelErrorText(error, prefix) {
-			if (error instanceof CloudQApiError && error.code === "NeedAuth") return "尚未配置 AK/SK，请前往「设置 → 插件 → CloudQ」完成配置后重试。";
+			if (error instanceof CloudQApiError && CLOUDQ_AUTH_ERROR_CODES.has(error.code)) return error.message;
 			return `${prefix}：${error instanceof Error ? error.message : "未知错误"}`;
 		}
+		/**
+		* Reject with an actionable NeedAuth error when no credential is configured,
+		* so data views show the settings guide without calling the CloudQ APIs.
+		* Returns undefined when the status check itself fails, letting the data
+		* request surface its own error.
+		*/
+		function requireCloudqCredential() {
+			return cloudqRequest(API_CREDENTIAL).then((response) => {
+				if (response.status?.logged_in !== true) throw new CloudQApiError("尚未配置 AK/SK，请前往「设置 → 插件 → CloudQ」完成配置后重试。", "NeedAuth");
+			}).catch((error) => {
+				if (error instanceof CloudQApiError && error.code === "NeedAuth") throw error;
+			});
+		}
 		async function cloudqRequest(url, init, timeoutMs = 2e4) {
 			const controller = new AbortController();
 			const timeout = window.setTimeout(() => controller.abort(), timeoutMs);

package/lib/index.js

@@ -424,7 +424,11 @@ async function runScript(scriptName, args, options) {
 	try {
 		return await runScript$1(resolve(skillDirectory(), "scripts"), scriptName, args, options);
 	} catch (error) {
-		if (error instanceof HttpError && error.code === "NeedAuth") throw new HttpError(401, "NeedAuth", "尚未配置 AK/SK，请前往「设置 → 插件 → CloudQ」完成配置。");
+		if (error instanceof HttpError) {
+			if (error.code === "NeedAuth") throw new HttpError(401, "NeedAuth", "尚未配置 AK/SK，请前往「设置 → 插件 → CloudQ」完成配置。");
+			if (error.code === "CredentialExpired") throw new HttpError(401, "CredentialExpired", "凭证已过期，请前往「设置 → 插件 → CloudQ」重新配置。");
+			if (typeof error.code === "string" && error.code.startsWith("AuthFailure")) throw new HttpError(401, "AuthFailure", "AK/SK 无效或权限不足，请前往「设置 → 插件 → CloudQ」检查配置。");
+		}
 		throw error;
 	}
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-cloudq",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "CloudQ integration for DeepSeek Harness with secure credential, workspace, and plugin-management surfaces",
   "license": "MIT",
   "type": "module",