dsh-codearts 0.0.0-stage → 0.2.1

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# Register the CodeArts provider without changing the profile's current
+# default model. The plugin uses the embedded Huawei Cloud OAuth2 login
+# (PKCE + DPoP) or a pasted token; no separate CLI is required.
+- insert:
+    - id: llm-codearts
+      name: dsh-codearts

package/lib/bin.d.mts

@@ -0,0 +1 @@
+export {}

package/lib/bin.mjs

@@ -0,0 +1,373 @@
+#!/usr/bin/env node
+import { _ as CodeArtsAccountStore, c as fetchCallerIdentity, g as isBenefitModel, m as FALLBACK_CODEARTS_MODELS, n as codeartsUsagePath, r as discoverModels, t as CodeArtsUsageTracker, y as codeartsAccountsPath } from "./usage-ClRZWUS4.mjs";
+import { existsSync, statSync } from "node:fs";
+//#region src/version.ts
+const CODEARTS_VERSION = "0.2.1";
+//#endregion
+//#region src/bin.ts
+/**
+* dsh-codearts CLI: sign-in state, diagnostics and sign-out.
+*
+*   dsh plugin --profile web exec dsh-codearts status        # sign-in state + seed models
+*   dsh plugin --profile web exec dsh-codearts status --json # machine-readable
+*   dsh plugin --profile web exec dsh-codearts models        # discover the account's real models
+*   dsh plugin --profile web exec dsh-codearts models --json # machine-readable
+*   dsh plugin --profile web exec dsh-codearts usage         # local token accounting
+*   dsh plugin --profile web exec dsh-codearts usage --json  # machine-readable
+*   dsh plugin --profile web exec dsh-codearts identity      # stable upstream user ids per account
+*   dsh plugin --profile web exec dsh-codearts identity --fix # merge duplicate entries onto them
+*   dsh plugin --profile web exec dsh-codearts doctor        # secret-free diagnostics
+*   dsh plugin --profile web exec dsh-codearts logout        # drop the plugin's credential
+*
+* `models` asks the upstream for the account's real catalog (built-in, limited-time
+* benefit and agent-center sources) instead of printing the hand-maintained seed —
+* that is the first thing to run when a model is missing from the picker.
+*
+* `usage` reads the plugin's own ledger of requests this machine sent. CodeArts has
+* no quota API, so it is not an account balance.
+*
+* `identity` asks the gateway which account each stored credential belongs to. The
+* login response carries no user id, so credentials used to be keyed by their DPoP
+* key — which made a re-login of the same account look like a new one. This is the
+* command that reports and (with --fix) merges those duplicates.
+*
+* `doctor` never prints token material — only paths, booleans and versions —
+* so its output is safe to paste into a bug report. `logout` removes only this
+* plugin's own credential copy; nothing outside the plugin is touched.
+*
+* @module dsh-codearts/bin
+*/
+/** Bumped when a `--json` document changes shape (5: identity backfill). */
+const JSON_SCHEMA_VERSION = 5;
+/**
+* 一句话描述一个账号，供人类可读输出用。
+*
+* 注意空串也要当「没有」：`credentialFromOAuth` 会把上游返回的空 `user_name` /
+* `user_id` 原样写进 label，用 `??` 兜底会得到一个空名字，于是 `status` 打印出
+* `-   (expires …)` 这种认不出是哪个账号的行。
+*/
+function describeAccount(account) {
+	const name = firstNonEmpty(account.label, account.userName, `${account.id.slice(0, 12)}…`);
+	const notes = [];
+	if (account.stale) notes.push("needs sign-in");
+	else if (typeof account.expiration === "string") notes.push(`expires ${account.expiration}`);
+	if (!account.signable) notes.push("no AK/SK");
+	return notes.length === 0 ? name : `${name}  (${notes.join(", ")})`;
+}
+/** 第一个非空（去空白后）的字符串。 */
+function firstNonEmpty(...values) {
+	for (const value of values) if (typeof value === "string" && value.trim() !== "") return value.trim();
+	return "";
+}
+function store() {
+	return new CodeArtsAccountStore(codeartsAccountsPath());
+}
+async function status(jsonOutput) {
+	const accounts = await store().list();
+	const cred = await store().current();
+	const out = {
+		schemaVersion: JSON_SCHEMA_VERSION,
+		version: CODEARTS_VERSION,
+		signedIn: accounts.length > 0,
+		signable: accounts.some((account) => account.signable),
+		accounts,
+		models: FALLBACK_CODEARTS_MODELS.map((m) => ({
+			id: m.id,
+			name: m.name
+		}))
+	};
+	if (cred !== void 0) {
+		if (cred.label !== void 0) out.label = cred.label;
+		if (cred.storedAt !== void 0) out.storedAt = cred.storedAt;
+		if (cred.expiration !== void 0) out.expiration = cred.expiration;
+		if (cred.stale === true) out.stale = true;
+	}
+	if (jsonOutput) {
+		process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+		return out.signedIn ? 0 : 1;
+	}
+	if (out.signedIn) {
+		process.stdout.write(`signed in — ${accounts.length} account${accounts.length === 1 ? "" : "s"}:\n`);
+		for (const account of accounts) process.stdout.write(`  - ${describeAccount(account)}\n`);
+		if (!out.signable) process.stdout.write("warning: no account carries AK/SK, so requests cannot be signed and chats will be rejected\n");
+	} else process.stdout.write("not signed in (no account stored; sign in from the CodeArts settings card)\n");
+	process.stdout.write(`models (${out.models.length}):\n`);
+	for (const m of out.models) process.stdout.write(`  - ${m.id}  ${m.name}\n`);
+	return out.signedIn ? 0 : 1;
+}
+/**
+* 动态发现当前可用模型（三路：内置 / 限时福利 / agent-center）。
+*
+* 这是排查「模型选择器里没有某个模型」的第一手段：它打印的是上游真实返回，
+* 而不是插件里那份手维护的种子清单。未登录时退回种子清单并说明原因。
+*/
+async function models(jsonOutput) {
+	if ((await store().list()).length === 0) {
+		if (jsonOutput) process.stdout.write(JSON.stringify({
+			schemaVersion: JSON_SCHEMA_VERSION,
+			version: CODEARTS_VERSION,
+			discovered: false,
+			reason: "not signed in",
+			models: FALLBACK_CODEARTS_MODELS.map((m) => ({
+				id: m.id,
+				name: m.name,
+				benefit: isBenefitModel(m.id)
+			}))
+		}, null, 2) + "\n");
+		else {
+			process.stdout.write("not signed in — showing the built-in seed catalog\n");
+			for (const m of FALLBACK_CODEARTS_MODELS) process.stdout.write(`  - ${m.id}  ${m.name}${isBenefitModel(m.id) ? "  [benefit]" : ""}\n`);
+		}
+		return 1;
+	}
+	const outcome = await discoverModels(store());
+	if (jsonOutput) {
+		process.stdout.write(JSON.stringify({
+			schemaVersion: JSON_SCHEMA_VERSION,
+			version: CODEARTS_VERSION,
+			discovered: outcome.anySucceeded,
+			accounts: outcome.accounts.map((account) => ({
+				accountId: account.accountId,
+				label: account.label,
+				ok: account.ok,
+				sources: account.sources,
+				modelCount: account.models.length,
+				errors: account.errors
+			})),
+			models: outcome.models.map((m) => ({
+				id: m.id,
+				name: m.name,
+				contextWindow: m.contextWindow,
+				maxTokens: m.maxTokens,
+				supportsImages: m.supportsImages,
+				benefit: m.benefit === true || isBenefitModel(m.id)
+			}))
+		}, null, 2) + "\n");
+		return outcome.anySucceeded ? 0 : 1;
+	}
+	for (const account of outcome.accounts) {
+		const name = account.label ?? account.accountId;
+		process.stdout.write(account.ok ? `discovered ${account.models.length} model(s) for ${name} via ${account.sources.join(", ")}\n` : `discovery failed for ${name}: ${account.errors.map((e) => `${e.source}: ${e.message}`).join("; ")}\n`);
+		for (const error of account.ok ? account.errors : []) process.stdout.write(`  warning: ${error.source} source failed (${error.message})\n`);
+	}
+	if (!outcome.anySucceeded) {
+		process.stdout.write("no account could be queried; nothing to list\n");
+		return 1;
+	}
+	process.stdout.write(`models (${outcome.models.length}):\n`);
+	for (const m of outcome.models) {
+		const flags = [
+			m.benefit === true || isBenefitModel(m.id) ? "benefit" : "",
+			m.supportsImages ? "images" : "",
+			`max ${m.maxTokens}`,
+			`ctx ${m.contextWindow}`
+		].filter(Boolean).join(", ");
+		process.stdout.write(`  - ${m.id}  ${m.name}  (${flags})\n`);
+	}
+	return 0;
+}
+/**
+* 本机用量账本（插件自己记的，不是账号额度）。
+*
+* 为什么要用 CLI 暴露它：账本是插件进程边跑边写的，GUI 卡片能看，但这个命令让
+* 「今天到底花了多少 token」在无图形界面时也能查，且输出可以直接贴进问题反馈。
+*/
+async function usage(jsonOutput) {
+	const tracker = new CodeArtsUsageTracker({ path: codeartsUsagePath() });
+	await tracker.load();
+	const snapshot = tracker.snapshot();
+	if (jsonOutput) {
+		process.stdout.write(JSON.stringify({
+			schemaVersion: JSON_SCHEMA_VERSION,
+			version: CODEARTS_VERSION,
+			today: snapshot.today,
+			allTime: snapshot.allTime,
+			byModelToday: snapshot.byModelToday,
+			byAccountToday: snapshot.byAccountToday,
+			days: snapshot.days,
+			lastAt: snapshot.lastAt
+		}, null, 2) + "\n");
+		return 0;
+	}
+	if (snapshot.allTime.requests === 0) {
+		process.stdout.write("no usage recorded yet (nothing this plugin has sent)\n");
+		return 0;
+	}
+	process.stdout.write(`today      ${snapshot.today.requests} request(s), in ${snapshot.today.promptTokens} / out ${snapshot.today.completionTokens} tokens\n`);
+	process.stdout.write(`all time   ${snapshot.allTime.requests} request(s), in ${snapshot.allTime.promptTokens} / out ${snapshot.allTime.completionTokens} tokens (${snapshot.days} day(s) kept)\n`);
+	if (snapshot.byModelToday.length > 0) {
+		process.stdout.write("today by model:\n");
+		for (const entry of snapshot.byModelToday) process.stdout.write(`  - ${entry.id}  ${entry.totals.requests} req  in ${entry.totals.promptTokens} / out ${entry.totals.completionTokens}\n`);
+	}
+	const accounts = Object.entries(snapshot.byAccountToday);
+	if (accounts.length > 0) {
+		process.stdout.write("today by account:\n");
+		for (const [id, totals] of accounts) process.stdout.write(`  - ${id.slice(0, 12)}…  ${totals.requests} req  in ${totals.promptTokens} / out ${totals.completionTokens}\n`);
+	}
+	process.stdout.write("note: CodeArts exposes no quota API; this counts requests this machine sent through the plugin\n");
+	return 0;
+}
+/**
+* 身份回填与重复账号清理。
+*
+* 背景：上游登录响应里的 `user_id` 是空串，插件原先只能拿 DPoP 公钥当账号键，
+* 于是「对同一个账号重新登录」会多出一条记录（旧的那条之后因凭据失效而停用）。
+* `/snap-manager/v1/current/user` 能给出稳定 user_id，所以：
+*   - 新登录会自动带上身份（见 web-status 的登录流程）；
+*   - 历史遗留的条目用 `identity --fix` 合并到稳定键上。
+*/
+async function identity(jsonOutput, fix) {
+	const accounts = await store();
+	const ids = await accounts.ids();
+	if (ids.length === 0) {
+		if (jsonOutput) process.stdout.write(JSON.stringify({
+			schemaVersion: JSON_SCHEMA_VERSION,
+			fixed: fix,
+			duplicateIdentities: 0,
+			accounts: []
+		}, null, 2) + "\n");
+		else process.stdout.write("not signed in — nothing to inspect\n");
+		return 1;
+	}
+	const rows = [];
+	for (const id of ids) {
+		const resolved = await accounts.resolve(id);
+		if (resolved === void 0) {
+			rows.push({
+				id,
+				ok: false,
+				error: "credential unavailable (sign in again)"
+			});
+			continue;
+		}
+		try {
+			const found = await fetchCallerIdentity(resolved);
+			const action = fix ? await accounts.adoptIdentity(id, found) : void 0;
+			rows.push({
+				id,
+				userId: found.userId,
+				...found.userName === "" ? {} : { userName: found.userName },
+				ok: true,
+				...action === void 0 ? {} : { action }
+			});
+		} catch (error) {
+			rows.push({
+				id,
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			});
+		}
+	}
+	const byUser = /* @__PURE__ */ new Map();
+	for (const row of rows) if (row.userId !== void 0) byUser.set(row.userId, (byUser.get(row.userId) ?? 0) + 1);
+	const duplicates = [...byUser.entries()].filter(([, count]) => count > 1).length;
+	if (jsonOutput) {
+		process.stdout.write(JSON.stringify({
+			schemaVersion: JSON_SCHEMA_VERSION,
+			fixed: fix,
+			duplicateIdentities: duplicates,
+			accounts: rows
+		}, null, 2) + "\n");
+		return 0;
+	}
+	for (const row of rows) {
+		if (!row.ok) {
+			process.stdout.write(`  - ${row.id.slice(0, 12)}…  identity probe failed: ${row.error}\n`);
+			continue;
+		}
+		const label = row.userName === void 0 ? "" : ` (${row.userName})`;
+		const acted = row.action === void 0 ? "" : `  [${row.action}]`;
+		process.stdout.write(`  - ${row.id.slice(0, 12)}…  -> ${row.userId}${label}${acted}\n`);
+	}
+	if (fix) process.stdout.write("identity backfilled; duplicate entries were merged into the stable user id\n");
+	else if (duplicates > 0) process.stdout.write(`found ${duplicates} user id(s) stored more than once; re-run with --fix to merge them\n`);
+	else process.stdout.write("no duplicate accounts found\n");
+	return 0;
+}
+async function doctor(jsonOutput) {
+	const accountsPath = codeartsAccountsPath();
+	const exists = existsSync(accountsPath);
+	const accounts = await store().list();
+	const signable = accounts.some((account) => account.signable);
+	const hints = [];
+	if (accounts.length === 0) hints.push("No account stored yet: sign in from the CodeArts settings card.");
+	else {
+		const stale = accounts.filter((account) => account.stale);
+		if (stale.length > 0) hints.push(`${stale.length} of ${accounts.length} account(s) were marked stale after a failed refresh; sign in again.`);
+		if (!signable) hints.push("No account carries AK/SK. CodeArts rejects unsigned chat requests — sign in with the OAuth flow rather than pasting a bare token.");
+	}
+	if (!process.env.DSH_HOME) hints.push("DSH_HOME is unset; the credential path fell back to ~/.dsh — set DSH_HOME if your harness lives elsewhere.");
+	const out = {
+		schemaVersion: JSON_SCHEMA_VERSION,
+		version: CODEARTS_VERSION,
+		node: process.version,
+		platform: `${process.platform} ${process.arch}`,
+		authPath: accountsPath,
+		authFileExists: exists,
+		signedIn: accounts.length > 0,
+		signable,
+		accounts,
+		hints
+	};
+	if (jsonOutput) {
+		process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+		return hints.length === 0 ? 0 : 1;
+	}
+	process.stdout.write(`dsh-codearts ${out.version}  (node ${out.node}, ${out.platform})\n`);
+	process.stdout.write(`accounts: ${out.authPath}\n`);
+	process.stdout.write(`  file exists : ${out.authFileExists ? "yes" : "no"}${exists ? ` (${statSync(accountsPath).size} bytes)` : ""}\n`);
+	process.stdout.write(`  accounts    : ${accounts.length}\n`);
+	for (const account of accounts) process.stdout.write(`    - ${describeAccount(account)}\n`);
+	process.stdout.write(`  signable    : ${out.signable ? "yes (AK/SK present)" : "no (no AK/SK)"}\n`);
+	if (hints.length === 0) process.stdout.write("no issues found\n");
+	else {
+		process.stdout.write("hints:\n");
+		for (const hint of hints) process.stdout.write(`  - ${hint}\n`);
+	}
+	return hints.length === 0 ? 0 : 1;
+}
+async function logout(jsonOutput) {
+	const accountsPath = codeartsAccountsPath();
+	const removed = (await store().list()).length;
+	await store().clear();
+	if (jsonOutput) process.stdout.write(JSON.stringify({
+		schemaVersion: JSON_SCHEMA_VERSION,
+		signedOut: true,
+		removed,
+		authPath: accountsPath
+	}, null, 2) + "\n");
+	else process.stdout.write(`signed out; removed ${removed} account${removed === 1 ? "" : "s"}\n`);
+	return 0;
+}
+async function main() {
+	const args = process.argv.slice(2);
+	const jsonOutput = args.includes("--json");
+	const fix = args.includes("--fix");
+	const positional = args.filter((arg) => !arg.startsWith("--"));
+	const unknown = args.filter((arg) => arg.startsWith("--") && arg !== "--json" && arg !== "--fix");
+	const raw = positional[0] ?? "status";
+	if (![
+		"doctor",
+		"identity",
+		"logout",
+		"models",
+		"status",
+		"usage"
+	].includes(raw)) {
+		process.stderr.write(`dsh-codearts: expected doctor, identity, logout, models, status, or usage; got ${JSON.stringify(raw)}\n`);
+		process.exit(2);
+	}
+	if (unknown.length > 0) {
+		process.stderr.write(`dsh-codearts: unknown flag ${JSON.stringify(unknown[0])} (only --json and --fix are supported)\n`);
+		process.exit(2);
+	}
+	const action = raw;
+	const code = action === "doctor" ? await doctor(jsonOutput) : action === "identity" ? await identity(jsonOutput, fix) : action === "logout" ? await logout(jsonOutput) : action === "models" ? await models(jsonOutput) : action === "usage" ? await usage(jsonOutput) : await status(jsonOutput);
+	process.exit(code);
+}
+main().catch((error) => {
+	process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+	process.exit(1);
+});
+//#endregion
+export {};

package/lib/client/index.d.cts

@@ -0,0 +1,86 @@
+import { Context } from "@deepseek-ai/cordis";
+//#region src/client/locales.d.ts
+interface CodeArtsSettingsKey {
+  tabLabel: string;
+  cardTitle: string;
+  statusSignedIn: string;
+  statusSignedOut: string;
+  statusExpired: string;
+  descSignedIn: string;
+  descSignedOut: string;
+  storedMeta: string;
+  storedMetaNoLabel: string;
+  refresh: string;
+  clearToken: string;
+  tokenLabel: string;
+  tokenPlaceholder: string;
+  labelLabel: string;
+  labelPlaceholder: string;
+  saveToken: string;
+  expiredHint: string;
+  accountsTitle: string;
+  accountRemove: string;
+  addAccount: string;
+  accountsRotateHint: string;
+  accountNeedsSignIn: string;
+  accountNoKey: string;
+  accountStored: string;
+  accountExpires: string;
+  accountExpired: string;
+  modelsTitle: string;
+  optionalModelsHint: string;
+  optionalModelsAllHint: string;
+  selectedCount: string;
+  selectAll: string;
+  free: string;
+  saveModels: string;
+  saving: string;
+  saved: string;
+  signIn: string;
+  signingIn: string;
+  openManually: string;
+  manualToken: string;
+  loginFailed: string;
+  modelsLoading: string;
+  usageTitle: string;
+  usageToday: string;
+  usageRequests: string;
+  usageTokens: string;
+  usageAllTime: string;
+  usageByModel: string;
+  usageSlots: string;
+  usageStateOk: string;
+  usageStateCapped: string;
+  usageStateCooling: string;
+  usageStateDisabled: string;
+  usageNoQuota: string;
+  usageEmpty: string;
+  [key: string]: string;
+}
+//#endregion
+//#region src/client/index.d.ts
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+  interface LocaleNamespaceMap {
+    'settings.codearts': CodeArtsSettingsKey;
+  }
+  /**
+   * rc.2 宿主把插件配置页挂在 plugins.bundle.config（按 bundle 包名取 key）。
+   * 这个槽位只在宿主运行时声明 —— 连 0.2.0-rc.2 的 settings-plugins 类型里都没有
+   * （它导出的槽位是 settings.plugins.tab / settings.general.item 那一组），
+   * 所以只能我们自己补，让类型跟运行时的真槽位对上。
+   */
+  interface SlotMap {
+    'plugins.bundle.config': {
+      kind: 'keyed';
+      scope: 'root';
+      owner: {
+        children?: never;
+      };
+    };
+  }
+}
+declare const name = "dsh-codearts-client";
+declare const inject: string[];
+declare function apply(ctx: Context): void;
+//#endregion
+export { apply, inject, name };