dsh-connect-workbuddy 1.0.0

package/lib/index.d.ts

@@ -0,0 +1,651 @@
+import z from "@deepseek-ai/schemastery";
+import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
+import { Context } from "@deepseek-ai/cordis";
+import { AttachmentStore } from "@deepseek-ai/dsh-attachment";
+//#region src/auth.d.ts
+/** Normalized WorkBuddy credential, timestamps in epoch milliseconds. */
+interface WorkBuddyCredential {
+  accessToken: string;
+  refreshToken: string;
+  expiresAtMs: number;
+  refreshExpiresAtMs?: number;
+  domain: string;
+  uid: string;
+  enterpriseId?: string;
+  nickname?: string;
+  uin?: string;
+  /** Which auth file this came from; refreshes are always `dsh`. */
+  source: 'desktop' | 'dsh';
+  /** Absolute path of the auth file this credential was read from. */
+  filePath: string;
+}
+/** Read-only sign-in summary for status and doctor output. */
+interface WorkBuddyAuthStatus {
+  state: 'signed-in' | 'signed-out';
+  expiresAtMs?: number;
+  refreshExpiresAtMs?: number;
+  nickname?: string;
+  domain?: string;
+  source?: 'desktop' | 'dsh';
+}
+/** Constructor options; only {@link refresh} is required. */
+interface WorkBuddyStoreOptions {
+  /** Explicit desktop auth-file path, overriding env and platform defaults. */
+  desktopPath?: string;
+  /** Explicit plugin-owned copy path, defaulting under `$DSH_HOME`. */
+  ownPath?: string;
+  /**
+   * Auth directories to scan, overriding the platform defaults. Injectable so
+   * the multi-account scan is testable without touching a real machine.
+   */
+  authDirs?: readonly string[];
+  /** Performs the upstream token refresh. */
+  refresh: (credential: WorkBuddyCredential) => Promise<WorkBuddyRefreshOutcome>;
+  /** Refresh this long before actual expiry; default five minutes. */
+  refreshMarginMs?: number;
+}
+/** One selectable local account, token-free. */
+interface WorkBuddyAccountChoice {
+  /** Stable id derived from `uin` (or `uid` when uin is absent). */
+  id: string;
+  accountName: string;
+  uin?: string;
+  domain: string;
+  source: 'desktop' | 'dsh';
+  tokenExpiresAtMs: number;
+  /** The auth file this account was read from; newest is preferred. */
+  filePath: string;
+  selected: boolean;
+}
+/** Basename of the plugin-owned credential copy inside the Harness home. */
+declare const WORKBUDDY_AUTH_FILENAME = ".workbuddy-auth.json";
+/** Env variable that overrides the desktop auth-file location. */
+declare const WORKBUDDY_AUTH_FILE_ENV = "WORKBUDDY_AUTH_FILE";
+/** Plugin-owned copy path inside the Harness home. */
+declare function workbuddyOwnAuthPath(): string;
+/**
+ * Platform-default directories holding the WorkBuddy desktop app's auth file.
+ *
+ * Windows and Linux prefer the OS-issued env location and fall back to the
+ * home-derived convention when it is unset, so a redirected profile (OneDrive
+ * folder backup, enterprise policy) still resolves. macOS has no equivalent
+ * env variable; the single Application Support path is used as-is.
+ *
+ * `platform`, `home`, and `env` are injectable so the platform branches are
+ * testable on any host without touching a real machine.
+ */
+declare function defaultDesktopAuthDirs(platform?: NodeJS.Platform, home?: string, env?: NodeJS.ProcessEnv): string[];
+/** The live auth file's platform candidates, in probe order. */
+declare function defaultDesktopAuthCandidates(): string[];
+/** First platform-default candidate; see {@link defaultDesktopAuthCandidates}. */
+declare function defaultDesktopAuthPath(): string | undefined;
+/**
+ * Parse a WorkBuddy auth document in either on-disk shape: the plugin OAuth
+ * nested form `{"auth":{...},"account":{...}}` and the flat panel form.
+ * Returns undefined when the document carries no access token.
+ */
+declare function parseWorkBuddyAuth(text: string, filePath: string): WorkBuddyCredential | undefined;
+/**
+ * Filename of a path regardless of the host separator: Windows paths use `\`
+ * and this helper must keep working when a Windows path is compared on a
+ * POSIX host (e.g. tests injecting a Windows-style auth dir).
+ */
+declare function authFileName(path: string): string;
+/**
+ * Stable account id. `uin` is the billing identity the upstream keys on and
+ * survives across re-login; `uid` is the fallback for documents without one.
+ */
+declare function workbuddyAccountId(credential: Pick<WorkBuddyCredential, 'uin' | 'uid' | 'nickname'>): string;
+/**
+ * Read-only credential store with demand-driven refresh and multi-account
+ * discovery.
+ *
+ * Refresh policy: refresh only when the access token is inside the margin
+ * (or already expired), keep the refreshed credential in the plugin-owned
+ * copy, and never write the desktop app's files. A failed refresh still
+ * returns a not-yet-expired token so an unreachable refresh endpoint does
+ * not take down a working session.
+ */
+declare class WorkBuddyCredentialStore {
+  private readonly refresh;
+  private readonly refreshMarginMs;
+  private readonly ownPath;
+  private readonly authDirs;
+  private desktopPathOverride;
+  private accountId;
+  /** Account ids with usable credit, tried first when nothing is selected. */
+  private preferIds;
+  private inflight;
+  constructor(options: WorkBuddyStoreOptions);
+  /** Repoint the desktop file or directory; applies on the next read. */
+  setDesktopPath(path: string | undefined): void;
+  /** Select an account by id; tokens stay outside settings. */
+  selectAccount(accountId: string | undefined): void;
+  /** Selected account id, for diagnostics and route assembly. */
+  selectedAccountId(): string | undefined;
+  /**
+   * Preferred account ordering used when no account is explicitly selected.
+   * An account with zero credit fails every chat request, so accounts with
+   * usable credit must win the default.
+   */
+  setPreferAccountIds(ids: readonly string[]): void;
+  /** The auth-file path candidates, in probe order. */
+  private resolveDesktopCandidates;
+  /** The resolved desktop auth-file path, for diagnostics. */
+  desktopAuthPath(): string | undefined;
+  /** The plugin-owned copy path, for diagnostics. */
+  ownAuthPath(): string;
+  /**
+   * Every auth file to scan: the live file plus the timestamped backups
+   * WorkBuddy leaves beside it.
+   *
+   * An explicitly configured path pins the *directory*: its siblings are
+   * still scanned, because a user who points the plugin at their auth file
+   * expects account switching to work the same way it does on the default
+   * path. Only the file ordering changes.
+   *
+   * A corrupt or signed-out file must never hide the others, so each read is
+   * independent and failures are skipped rather than propagated.
+   */
+  private candidateFiles;
+  /** Timestamped siblings of one auth file, newest first by filename. */
+  private backupsBeside;
+  /**
+   * Read every local credential, deduplicated by account id. Files are
+   * probed newest-first, so the first entry for an account is its freshest.
+   */
+  private readAll;
+  /**
+   * Preferred account first, else the live sign-in, else the freshest
+   * credential. Following the app's current sign-in is the documented default
+   * behaviour; the backups exist so the user can switch explicitly.
+   */
+  private preferred;
+  /** Token-free account list for the plugin card. */
+  accounts(): Promise<WorkBuddyAccountChoice[]>;
+  /** The freshest stored credential for the current selection, no refresh. */
+  current(): Promise<WorkBuddyCredential | undefined>;
+  /** The credential to send upstream: {@link current}, refreshed on demand. */
+  resolve(): Promise<WorkBuddyCredential>;
+  /** Read-only sign-in summary; never refreshes and never throws. */
+  status(): Promise<WorkBuddyAuthStatus>;
+  /** Remove the plugin-owned copy; the desktop files are untouched. */
+  logout(): Promise<void>;
+  private needsRefresh;
+  private refreshNow;
+  private saveOwn;
+  private readOwn;
+  /** Whether any candidate file exists as a regular file; diagnostics only. */
+  desktopFilePresent(): Promise<boolean>;
+}
+//#endregion
+//#region src/upstream.d.ts
+/** WorkBuddy region selected by the credential's login domain. */
+type WorkBuddyRegion = 'cn' | 'global';
+/** Upstream failure classes the shim maps onto distinct HTTP answers. */
+type UpstreamErrorKind = 'hard_credit' | 'soft_rate' | 'session_dead' | 'not_found' | 'server' | 'client';
+/** Reasoning capability as the upstream catalog declares it. */
+interface WorkBuddyReasoning {
+  supportedEfforts?: readonly string[];
+  defaultEffort?: string;
+  canDisableThinking?: boolean;
+}
+/** One CLI-usable model, carrying everything the plugin card displays. */
+interface WorkBuddyUpstreamModel {
+  id: string;
+  name: string;
+  contextWindow: number;
+  maxTokens: number;
+  /** Credit multiplier parsed from the upstream `credits` string. */
+  creditMultiplier?: number;
+  /**
+   * Image-input support decided by the user's explicit selection (imageModelIds),
+   * not inferred from the upstream `supportsImages`/`disabledMultimodal` flags,
+   * which proved insufficiently reliable. See `catalog.ts` / `index.ts`.
+   */
+  multimodal?: boolean;
+  reasoning?: WorkBuddyReasoning;
+  descriptionZh?: string;
+  descriptionEn?: string;
+  supportsToolCall?: boolean;
+}
+/** One billing package and its remaining credit, already aggregated. */
+/** One billing package as the upstream returns it, dates already parsed. */
+interface WorkBuddyCreditPackage {
+  packageName: string;
+  remain: number;
+  size: number;
+  /** CapacityType 4: refreshed every cycle and never expires. */
+  monthly: boolean;
+  /** Next cycle start (the monthly refresh point); only on monthly packages. */
+  refreshAtMs?: number;
+  /** One-off expiry; the package disappears from the account at this time. */
+  expiresAtMs?: number;
+}
+/** Aggregated credit answer for one credential. */
+interface WorkBuddyCredits {
+  total: number;
+  packages: readonly WorkBuddyCreditPackage[];
+  /** Credits expiring within 3 days across every package. */
+  expiringSoon: number;
+  /** When the nearest package expires, in ms. */
+  nearestExpiryMs?: number;
+}
+/** Daily check-in activity state. */
+interface WorkBuddyCheckinStatus {
+  active: boolean;
+  todayCheckedIn: boolean;
+  streakDays: number;
+  dailyCredit: number;
+  todayCredit: number;
+  isStreakDay: boolean;
+  nextStreakDay: number;
+  streakBonusDays: number;
+  streakBonusCredit: number;
+  claimButtonText?: string;
+}
+/** Daily check-in claim result. */
+interface WorkBuddyCheckinClaim {
+  credit: number;
+  streakDays: number;
+  isStreakDay: boolean;
+}
+/** Token refresh answer; fields the upstream omits stay absent. */
+interface WorkBuddyRefreshOutcome {
+  accessToken: string;
+  refreshToken?: string;
+  expiresInSec?: number;
+  domain?: string;
+}
+/** Chat answer: either a live SSE response or a classified failure. */
+type WorkBuddyChatResult = {
+  ok: true;
+  response: Response;
+} | {
+  ok: false;
+  status: number;
+  kind: UpstreamErrorKind;
+  message: string;
+};
+/** Classify an upstream failure from its HTTP status and body excerpt. */
+declare function classifyUpstreamError(status: number, body: string): UpstreamErrorKind;
+/** Region for a login domain; an empty domain means CN (matching upstream tooling). */
+declare function regionOf(domain: string): WorkBuddyRegion;
+/**
+ * Normalize an OpenAI chat-completions body for the WorkBuddy upstream:
+ * force `stream: true` (the upstream rejects non-streaming) and flatten
+ * `tool_choice` (the upstream's field is a string; object forms return 400).
+ */
+declare function prepareChatBody(source: string): string;
+/**
+ * Parse the upstream's `credits` string into a multiplier.
+ *
+ * Observed forms: `"x0.79 credits"`, `"x0.05"`, `"x0.00 credits"`,
+ * and absent. Unparsable values yield undefined rather than a guess — the
+ * card simply omits the rate instead of displaying a fabricated one.
+ */
+declare function parseCreditMultiplier(value: unknown): number | undefined;
+/** Parse the upstream's `reasoning` object; unknown shapes degrade to `{}`. */
+declare function parseReasoning(value: unknown): WorkBuddyReasoning | undefined;
+/** Parse one catalog entry; entries without usable token limits are dropped. */
+declare function parseUpstreamModel(value: unknown): WorkBuddyUpstreamModel | undefined;
+/**
+ * Upstream HTTP client. One instance serves the whole plugin; requests take
+ * the credential explicitly so token refreshes apply on the next call.
+ */
+declare class WorkBuddyUpstreamClient {
+  /** POST the chat endpoint; a successful answer is the raw SSE response. */
+  chatStream(credential: WorkBuddyCredential, bodyJson: string, signal?: AbortSignal): Promise<WorkBuddyChatResult>;
+  /** POST the token-refresh endpoint; the caller merges the outcome. */
+  refreshToken(credential: WorkBuddyCredential): Promise<WorkBuddyRefreshOutcome>;
+  /**
+   * GET the personal model catalog and keep the `cli` agent's models only,
+   * preserving the capability fields the plugin card displays.
+   */
+  fetchModels(credential: WorkBuddyCredential, signal?: AbortSignal): Promise<readonly WorkBuddyUpstreamModel[]>;
+  /** Query today's check-in status without changing account state. */
+  fetchCheckinStatus(credential: WorkBuddyCredential): Promise<WorkBuddyCheckinStatus>;
+  /** Claim today's check-in reward. The browser route guards this mutation. */
+  claimDailyCheckin(credential: WorkBuddyCredential): Promise<WorkBuddyCheckinClaim>;
+  /**
+   * POST the billing endpoint for the remaining credit, keeping every package
+   * separate: the card groups monthly-cycle packages itself and lists the
+   * nearest-expiring one-off packages, so aggregation here would lose the
+   * dates it needs.
+   */
+  fetchCredits(credential: WorkBuddyCredential): Promise<WorkBuddyCredits>;
+}
+//#endregion
+//#region src/catalog.d.ts
+/** One model entry the adapter exposes. */
+type WorkBuddyModelInfo = WorkBuddyUpstreamModel;
+/**
+ * Static CLI models captured from the CN endpoint (2026-08-30). The upstream
+ * refresh replaces this list at startup; it exists so the provider registers
+ * with a usable catalog even while the first fetch is in flight or offline.
+ */
+declare const FALLBACK_WORKBUDDY_MODELS: readonly WorkBuddyModelInfo[];
+/**
+ * Derive the runtime catalog from the last-refreshed directory plus the
+ * user's selection. This is the single source of truth for what DSH exposes,
+ * so saving only the selection is enough to rebuild it after a restart.
+ *
+ * An empty selection falls back to the whole directory: a plugin that has
+ * never been configured must still serve models rather than nothing.
+ */
+type WorkBuddyContextBudget = number;
+declare function deriveCatalog(catalog: readonly WorkBuddyModelInfo[], enabled: ReadonlySet<string>, budgets?: Readonly<Record<string, WorkBuddyContextBudget | undefined>>): WorkBuddyModelInfo[];
+/** Mutable catalog shared by the shim's `/v1/models` and the adapter. */
+declare class WorkBuddyCatalog {
+  private models;
+  /** Current entries; the fallback list until the upstream answer lands. */
+  current(): readonly WorkBuddyModelInfo[];
+  /** Replace the list; callers invalidate their adapter snapshot after this. */
+  set(models: readonly WorkBuddyModelInfo[]): void;
+}
+//#endregion
+//#region src/shim.d.ts
+/** Minimal logger surface the plugin context already provides. */
+interface ShimLogger {
+  warn(...args: unknown[]): void;
+  error(...args: unknown[]): void;
+}
+/** What the plugin needs from a running shim. */
+interface WorkBuddyShim {
+  /** Resolves once the listener is up; rejects if listening failed. */
+  ready: Promise<void>;
+  /** The shim origin, e.g. `http://127.0.0.1:39271`; valid after ready. */
+  baseUrl(): string;
+  /**
+   * The per-process shared secret the plugin's own client must carry as
+   * `Authorization: Bearer <token>`. Lives only in memory; the adapter
+   * resolves this instead of the upstream access token, because the shim
+   * resolves the real credential itself via the store.
+   */
+  token(): string;
+  /** Stop serving and destroy open connections. */
+  close(): Promise<void>;
+}
+/** Constructor dependencies. */
+interface WorkBuddyShimOptions {
+  store: WorkBuddyCredentialStore;
+  client: Pick<WorkBuddyUpstreamClient, 'chatStream'>;
+  catalog: WorkBuddyCatalog;
+  logger?: ShimLogger;
+}
+/**
+ * Start the loopback endpoint. Requests must carry the shim's shared secret;
+ * the loopback bind alone is not a trust boundary.
+ */
+declare function createWorkBuddyShim(options: WorkBuddyShimOptions): WorkBuddyShim;
+//#endregion
+//#region src/adapter.d.ts
+/** Provider route this bundle owns. */
+declare const WORKBUDDY_PROVIDER = "workbuddy";
+/** Provider idle ceiling while one stream read is outstanding. */
+declare const WORKBUDDY_STREAM_IDLE_TIMEOUT_MS = 300000;
+/** Constructor dependencies. */
+interface WorkBuddyAdapterOptions {
+  shim: WorkBuddyShim;
+  store: WorkBuddyCredentialStore;
+  catalog: WorkBuddyCatalog;
+  /** Resolve the durable attachment service at request time, when present. */
+  resolveAttachments?: () => AttachmentStore | undefined;
+}
+/** What {@link createWorkBuddyAdapter} hands back. */
+interface WorkBuddyAdapter {
+  adapter: PiAiAdapter;
+  /** Rebuild the adapter's provider snapshot; call after a catalog update. */
+  invalidate: () => void;
+}
+declare const THINKING_LEVELS: readonly ["minimal", "low", "medium", "high", "xhigh", "max"];
+type WorkBuddyThinkingLevel = typeof THINKING_LEVELS[number];
+type WorkBuddyThinkingLevelMap = Partial<Record<'off' | WorkBuddyThinkingLevel, string | null>>;
+/** pi-ai input modalities: images only when WorkBuddy advertises them. */
+declare function workBuddyModelInput(info: WorkBuddyModelInfo): ('text' | 'image')[];
+/** Map only levels advertised by WorkBuddy; undeclared DSH levels stay unavailable. */
+declare function workBuddyThinkingLevelMap(info: WorkBuddyModelInfo): WorkBuddyThinkingLevelMap | undefined;
+/**
+ * Assemble the adapter. The provider's `getModels` reads the live catalog,
+ * and every model's `baseUrl` is re-resolved per read so the shim's
+ * ephemeral port applies from the first snapshot after startup.
+ */
+declare function createWorkBuddyAdapter(options: WorkBuddyAdapterOptions): WorkBuddyAdapter;
+//#endregion
+//#region src/host-heartbeat.d.ts
+/**
+ * Host-side heartbeat: a small JSON file written under `$DSH_HOME` once the
+ * `workbuddy` provider is registered. The status CLI reads it to report
+ * whether the host bundle is alive, independent of the browser card.
+ *
+ * 参考：corrinehu/dsh-workbuddy-connect（MIT，Copyright (c) 2026 Corrine Hu）
+ *   — 该机制由其设计：浏览器端无法写文件，其健康只能靠 console.error 上报，
+ *     因此由宿主写心跳文件，缺失即代表宿主从未启动；崩溃后的陈旧心跳
+ *     通过 PID 存活检查识别。
+ * 改动：无。机制本身已完备，原样沿用。
+ *
+ * @module dsh-connect-workbuddy/host-heartbeat
+ */
+/** Basename of the host heartbeat file inside the Harness home. */
+declare const WORKBUDDY_HOST_HEARTBEAT_FILENAME = ".workbuddy-host-heartbeat.json";
+/** Current on-disk heartbeat format; readers reject others. */
+declare const HEARTBEAT_FORMAT_VERSION = 1;
+/** On-disk shape of the heartbeat. */
+interface WorkBuddyHostHeartbeat {
+  version: typeof HEARTBEAT_FORMAT_VERSION;
+  package: 'dsh-connect-workbuddy';
+  pluginVersion: string;
+  /** Epoch milliseconds when the host registered the provider. */
+  registeredAt: number;
+  /** Host process PID, to distinguish a stale heartbeat after a crash. */
+  pid: number;
+}
+/** Absolute path of the host heartbeat file. */
+declare function workbuddyHostHeartbeatPath(): string;
+/**
+ * Process start time in epoch milliseconds; undefined when unavailable.
+ *
+ * POSIX reads `ps -o lstart=`; Windows has no such command, so the creation
+ * time is taken from PowerShell's `Get-Process` StartTime, emitted as UTC ISO
+ * 8601 so `Date.parse` understands it without locale assumptions. Absent or
+ * unqueryable processes (other users' processes) degrade to undefined.
+ */
+declare function processStartTimeMs(pid: number): number | undefined;
+/**
+ * Whether the recorded host process still matches the heartbeat's PID.
+ *
+ * A PID can be reused after a crash, so the recorded start time is compared
+ * against the live process: a different start time means a different process.
+ */
+declare function isHeartbeatProcessAlive(heartbeat: WorkBuddyHostHeartbeat): boolean;
+/** Read the heartbeat; absent or unparsable files report undefined. */
+declare function readHostHeartbeat(): Promise<WorkBuddyHostHeartbeat | undefined>;
+/** Write the heartbeat for the current process. */
+declare function writeHostHeartbeat(): Promise<void>;
+/** Remove the heartbeat; called when the plugin is disposed. */
+declare function clearHostHeartbeat(): Promise<void>;
+//#endregion
+//#region src/version.d.ts
+/**
+ * Package version, injected at build time by `tsdown.config.ts`.
+ *
+ * 参考：corrinehu/dsh-workbuddy-connect（MIT）— 版本由构建期 define 注入，
+ *   而非运行时读 package.json（发布包只含 lib/，不含 package.json 的
+ *   可解析路径）。沿用该做法。
+ *
+ * @module dsh-connect-workbuddy/version
+ */
+/** The npm package version this build was produced from. */
+declare const WORKBUDDY_CONNECT_VERSION: string;
+//#endregion
+//#region src/status-paths.d.ts
+/**
+ * Node-free constants and types shared by the Host and browser halves.
+ *
+ * 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
+ *   — 「3 条同源只读路由（usage / models:refresh / accounts:refresh）+ 一份
+ *     与浏览器共享的 node-free 类型定义」的 host↔client 桥梁形态来自该项目
+ *     （其 `status-paths.ts` 亦如此，并注明沿用
+ *     corrinehu/dsh-workbuddy-connect 的 status-route 模式）。
+ * 改动：路由路径改用本插件 id；类型字段按 WorkBuddy 上游实际给出的能力
+ *   （积分倍率、多模态、推理档位）调整，不保留 trae 的 1M 变体字段。
+ *
+ * @module dsh-connect-workbuddy/status-paths
+ */
+/** Plugin-owned usage endpoint consumed by its browser half. */
+declare const WORKBUDDY_USAGE_PATH = "/plugins/dsh-connect-workbuddy/usage";
+/** Plugin-owned live model refresh endpoint. */
+declare const WORKBUDDY_MODELS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/models/refresh";
+/** Plugin-owned local account rescan endpoint. */
+declare const WORKBUDDY_ACCOUNTS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/accounts/refresh";
+/** Plugin-owned daily check-in action endpoint. */
+declare const WORKBUDDY_CHECKIN_PATH = "/plugins/dsh-connect-workbuddy/checkin";
+/** One credit package as the upstream returns it, node-free. */
+interface WorkBuddyWebCreditPackage {
+  packageName: string;
+  remain: number;
+  size: number;
+  /** CapacityType 4: refreshed every cycle and never expires. */
+  monthly: boolean;
+  /** Next cycle start (the monthly refresh point) in ms; only on monthly packages. */
+  cycleRefreshMs?: number;
+  /** One-off expiry in ms; the package disappears from the account then. */
+  expiresAtMs?: number;
+}
+/** Aggregated credit answer rendered by the plugin card. */
+interface WorkBuddyWebCredits {
+  total: number;
+  packages: readonly WorkBuddyWebCreditPackage[];
+  /** Credits expiring within 3 days across every package. */
+  expiringSoon: number;
+  /** When the nearest package expires, in ms. */
+  nearestExpiryMs?: number;
+}
+/** Daily check-in state rendered below total remaining credits. */
+interface WorkBuddyWebCheckin {
+  active: boolean;
+  todayCheckedIn: boolean;
+  streakDays: number;
+  dailyCredit: number;
+  todayCredit: number;
+  isStreakDay: boolean;
+  nextStreakDay: number;
+  streakBonusDays: number;
+  streakBonusCredit: number;
+  claimButtonText?: string;
+}
+/** Editable WorkBuddy model row rendered by the plugin-owned settings card. */
+interface WorkBuddyWebModel {
+  id: string;
+  name: string;
+  /** Effective DSH context after applying the saved local budget. */
+  contextWindow: number;
+  /** Native maximum advertised by WorkBuddy; models above 200K expose 200K/max. */
+  nativeContextWindow: number;
+  maxTokens: number;
+  creditMultiplier?: number;
+  multimodal?: boolean;
+  reasoning?: {
+    supportedEfforts?: readonly string[];
+    defaultEffort?: string;
+  };
+  description?: string;
+}
+/** One selectable local account, token-free. */
+interface WorkBuddyWebAccount {
+  id: string;
+  accountName: string;
+  uin?: string;
+  domain: string;
+  source: 'desktop' | 'dsh';
+  tokenExpiresAtMs: number;
+  selected: boolean;
+}
+type WorkBuddyWebPackage = WorkBuddyWebCreditPackage;
+/** The JSON document the plugin card renders. */
+type WorkBuddyWebUsage = {
+  status: 'signed-out';
+  accounts: readonly WorkBuddyWebAccount[];
+  message?: string;
+} | {
+  status: 'signed-in';
+  accountId: string;
+  accountName: string;
+  uin?: string;
+  domain?: string;
+  source?: 'desktop' | 'dsh';
+  tokenExpiresAtMs: number;
+  accounts: readonly WorkBuddyWebAccount[];
+  models: readonly WorkBuddyWebModel[];
+  enabledModelIds: readonly string[];
+  imageModelIds: readonly string[];
+  credits?: WorkBuddyWebCredits;
+  creditsError?: string;
+  checkin?: WorkBuddyWebCheckin;
+  checkinError?: string;
+} | {
+  status: 'error';
+  message: string;
+};
+//#endregion
+//#region src/web-status.d.ts
+/** Constructor dependencies. */
+interface WorkBuddyStatusRouteOptions {
+  store: WorkBuddyCredentialStore;
+  client: Pick<WorkBuddyUpstreamClient, 'fetchCredits' | 'fetchCheckinStatus' | 'claimDailyCheckin'>;
+  /** The last-refreshed model directory (unfiltered) for card display. */
+  displayModels(): readonly WorkBuddyModelInfo[];
+  /** The user's selection, stored as model ids. */
+  enabledModelIds(): readonly string[];
+  /** Model ids the user opted into image input. */
+  imageModelIds(): readonly string[];
+  /** Saved local DSH context budgets by model id. */
+  contextBudgets(): Readonly<Record<string, number | undefined>>;
+  /** Re-read the live catalog from the upstream. */
+  discoverModels?(signal?: AbortSignal): Promise<readonly WorkBuddyModelInfo[]>;
+}
+/**
+ * Assemble the card's usage document. Sign-in state is read-only; credit is a
+ * live billing answer whose failure degrades to `creditsError` rather than
+ * failing the whole document.
+ */
+declare function workBuddyWebStatus(deps: WorkBuddyStatusRouteOptions): Promise<WorkBuddyWebUsage>;
+/**
+ * Mount the read-only routes on a context where `webServer` is available.
+ * The caller uses `ctx.inject(['webServer'], ...)`, so Desktop startup order
+ * cannot make this registration disappear.
+ */
+declare function registerWorkBuddyStatusRoute(ctx: Context, deps: WorkBuddyStatusRouteOptions): void;
+//#endregion
+//#region src/index.d.ts
+/** Stable Cordis plugin name. */
+declare const name = "dsh-connect-workbuddy";
+/** The model registry required before the provider can register. */
+declare const inject: string[];
+/** Settings namespace for the plugin configuration card. */
+declare const WORKBUDDY_SETTINGS_NS: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+/** Plugin configuration. */
+interface Config {
+  /** Explicit WorkBuddy desktop auth-file path, overriding env and platform defaults. */
+  authFile?: string;
+  /** Stable local account selector; tokens remain outside settings. */
+  accountId?: string;
+  /** The last-refreshed model directory; what the plugin card displays. */
+  lastCatalog?: WorkBuddyModelInfo[];
+  /** The user's selection, as model ids. */
+  enabledModelIds?: string[];
+  /** Model ids the user explicitly opted into image input. */
+  imageModelIds?: string[];
+  /** Local DSH context budget per model; models above 200K default to 200K. */
+  contextBudgets?: Record<string, WorkBuddyContextBudget>;
+}
+declare const Config: z<Config>;
+/**
+ * Start the loopback endpoint, register the `workbuddy` provider, and
+ * refresh the model catalog from the upstream once credentials allow it.
+ * The static fallback catalog serves from the first moment, so an offline
+ * upstream never leaves the provider empty.
+ */
+declare function apply(ctx: Context, config: Config): void;
+//#endregion
+export { Config, FALLBACK_WORKBUDDY_MODELS, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyReasoning, type WorkBuddyRefreshOutcome, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyWebAccount, type WorkBuddyWebCheckin, type WorkBuddyWebCredits, type WorkBuddyWebModel, type WorkBuddyWebPackage, type WorkBuddyWebUsage, apply, authFileName, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveCatalog, inject, isHeartbeatProcessAlive, name, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readHostHeartbeat, regionOf, registerWorkBuddyStatusRoute, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };