dsh-connect-workbuddy 2.0.10 → 2.0.12

package/lib/client.js

@@ -5,7 +5,6 @@ window.__ModuleLoader__.load({
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
-		let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
 		let react_jsx_runtime = require("react/jsx-runtime");
 		//#region src/status-paths.ts
 		/**
@@ -130,16 +129,75 @@ window.__ModuleLoader__.load({
 		var WorkBuddySettingsWriteError = class extends Error {
 			/** The settings field that did not land. */
 			field;
-			constructor(field) {
-				super(`workbuddy: settings field "${field}" was not persisted by the settings write`);
+			constructor(field, reason) {
+				super(`workbuddy: settings field "${field}" was not persisted by the settings write${reason === void 0 ? "" : `: ${reason}`}`);
 				this.name = "WorkBuddySettingsWriteError";
 				this.field = field;
 			}
 		};
-		/** Read the per-region account selections out of the settings snapshot. */
-		function configuredAccountsOf(configured) {
-			const accounts = configured?.accounts;
-			return typeof accounts === "object" && accounts !== null ? accounts : {};
+		/** Read one settings field's current object value from the scope snapshot. */
+		function fieldSnapshotOf(scope, field) {
+			const value = scope.getSnapshot().value?.[field];
+			return typeof value === "object" && value !== null ? value : {};
+		}
+		/**
+		* Fallback write: POST the field to the plugin's own Host endpoint.
+		*
+		* The endpoint handler runs the settings mutate inside the Host process and
+		* reports the raw refusal exception, so a failure here names its cause instead
+		* of arriving as a swallowed `ok:false`. It merges the posted region key into
+		* the field's live value, preserving the other region.
+		*/
+		async function saveViaHostEndpoint(field, region, value) {
+			let response;
+			try {
+				response = await fetch("/plugins/dsh-connect-workbuddy/__save", {
+					method: "POST",
+					headers: { "Content-Type": "application/json" },
+					body: JSON.stringify({
+						field,
+						value: { [region]: value }
+					})
+				});
+			} catch (error) {
+				throw new WorkBuddySettingsWriteError(field, `Host save endpoint unreachable: ${String(error)}`);
+			}
+			if (!response.ok) {
+				const detail = await response.json().catch(() => ({ error: `HTTP ${String(response.status)}` }));
+				const reason = `${String(detail.errorName ?? "")} ${String(detail.error ?? "")}`.trim();
+				throw new WorkBuddySettingsWriteError(field, `Host save refused: ${reason === "" ? String(detail.error) : reason}`);
+			}
+		}
+		/**
+		* Write one volatile field, then confirm the value actually landed.
+		*
+		* The bound settings scope is the official path and is tried FIRST: it keeps
+		* the browser mirror in sync, and it is the only writer needed on hosts whose
+		* ConfigForm is healthy. On the affected DSH 0.1.7 deployment that scope
+		* settles without delivering anything — its `set()` resolves `false` while the
+		* Host's own mutate is perfectly healthy (proven by a direct in-Host probe) —
+		* so a write that does not read back falls through to the plugin's Host
+		* endpoint, which performs the mutate inside the Host process.
+		*
+		* `landed` decides whether a value read back from the scope is the value that
+		* was written; it is per-field because `''` (a cleared account slot) and an
+		* absent key are different states, and a truncated model catalog must not pass
+		* a shallow "is anything there?" check.
+		*
+		* @throws {WorkBuddySettingsWriteError} when neither path persists the value.
+		*/
+		async function writeField(scope, field, region, value, landed) {
+			let scopeDelivered = false;
+			try {
+				scopeDelivered = await scope.set(field, {
+					...fieldSnapshotOf(scope, field),
+					[region]: value
+				}) !== false;
+			} catch {
+				scopeDelivered = false;
+			}
+			if (scopeDelivered && landed(fieldSnapshotOf(scope, field)[region])) return;
+			await saveViaHostEndpoint(field, region, value);
 		}
 		/**
 		* Write one region's account slot, then confirm the value actually landed.
@@ -168,12 +226,7 @@ window.__ModuleLoader__.load({
 		*   something else — i.e. the write silently did not persist.
 		*/
 		async function writeAccountSlot(scope, region, value) {
-			const accounts = configuredAccountsOf(scope.getSnapshot().value);
-			await scope.set("accounts", {
-				...accounts,
-				[region]: value
-			});
-			if (configuredAccountsOf(scope.getSnapshot().value)[region] !== value) throw new WorkBuddySettingsWriteError("accounts");
+			await writeField(scope, "accounts", region, value, (readBack) => readBack === value);
 		}
 		/**
 		* Write one region's saved model state, then confirm it actually landed.
@@ -194,16 +247,43 @@ window.__ModuleLoader__.load({
 		* @throws {WorkBuddySettingsWriteError} when the catalog does not read back.
 		*/
 		async function writeRegionModels(scope, region, payload) {
-			const configured = scope.getSnapshot().value?.regions;
-			const regions = typeof configured === "object" && configured !== null ? configured : {};
-			await scope.set("regions", {
-				...regions,
-				[region]: payload
-			});
-			const landed = scope.getSnapshot().value?.regions?.[region];
 			const written = payload.lastCatalog.map((model) => model.id);
-			const stored = landed?.lastCatalog?.map((model) => model.id);
-			if (!(stored !== void 0 && stored.length === written.length && stored.every((id, index) => id === written[index]))) throw new WorkBuddySettingsWriteError("regions");
+			await writeField(scope, "regions", region, payload, (readBack) => {
+				const stored = readBack?.lastCatalog?.map((model) => model.id);
+				return stored !== void 0 && stored.length === written.length && stored.every((id, index) => id === written[index]);
+			});
+		}
+		/**
+		* Switch one region's provider off or on, with the same landed-check as every
+		* other settings write.
+		*
+		* This exists because the toggle was the ONE write that still called
+		* `scope.set()` directly. On the affected 0.1.7 deployments that scope settles
+		* without storing anything, so flipping a provider off appeared to work and
+		* then silently reverted — the exact silent-failure mode
+		* {@link writeAccountSlot} and {@link writeRegionModels} were written to
+		* prevent for their own fields. Routing it through {@link writeField} gives it
+		* the same scope-first-then-Host-endpoint path, so the switch either lands or
+		* reports why it did not.
+		*
+		* The write carries the region's whole slot through untouched — only `enabled`
+		* changes — so the user's directory, model picks, image opt-ins and budgets
+		* survive the round trip. The Host withdraws or restores the provider route on
+		* the next `onChange`, which is what actually removes it from DSH's model
+		* picker.
+		*
+		* @param scope - the bound settings scope for this plugin's namespace.
+		* @param region - the region being switched.
+		* @param enabled - the desired state.
+		* @param slot - the region's COMPLETE next slot (the caller owns the snapshot
+		*   read and the whole-slot merge, so this stays a pure write).
+		* @throws {WorkBuddySettingsWriteError} when neither writer persists the value.
+		*/
+		async function writeRegionEnabled(scope, region, enabled, slot) {
+			await writeField(scope, "regions", region, slot, (readBack) => {
+				const stored = readBack;
+				return stored !== null && stored !== void 0 && stored["enabled"] === enabled;
+			});
 		}
 		//#endregion
 		//#region src/client/icon.ts
@@ -244,7 +324,11 @@ window.__ModuleLoader__.load({
 .dsm-plugin-card-head{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}
 .dsm-plugin-card-title{color:var(--dsw-alias-label-primary,#e6e6e6);font-size:15px;font-weight:600;line-height:1.4}
 .dsm-plugin-card-description{color:var(--dsw-alias-label-tertiary,#999);font-size:13px;line-height:1.5}
-.dsm-plugin-card-chevron{color:var(--dsw-alias-label-tertiary,#999);flex:none;display:inline-flex;transition:transform .16s}
+/* Pure-CSS caret: the host primitives' chevron icon names differ per DSH line
+   (0.1.5 Outline14 vs 0.1.7 OutlineRegular), so no static import can serve
+   both. A border caret in the plugin's own CSS is version-proof. */
+.dsm-plugin-card-chevron{color:var(--dsw-alias-label-tertiary,#999);flex:none;width:16px;height:16px;position:relative;transition:transform .16s}
+.dsm-plugin-card-chevron::before{content:"";display:block;position:absolute;left:4px;top:5px;width:7px;height:7px;border-right:1.6px solid currentColor;border-bottom:1.6px solid currentColor;transform:rotate(45deg)}
 .dsm-plugin-card-chevron-open{transform:rotate(180deg)}
 .dsm-plugin-card-body{border-top:1px solid var(--dsw-alias-border-l2,#36373b);margin:0 16px;padding:0 0 8px}
 .dsm-plugin-card-icon{width:32px;height:32px;flex:none;border-radius:7px}
@@ -291,7 +375,6 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-searched-reason{color:var(--dsw-alias-label-tertiary,#999);font-size:11px}
 .dsm-workbuddy-searched-reason-encrypted{color:var(--dsw-alias-state-warning-primary,#e0a13a)}
 .dsm-workbuddy-searched-reason-wrong-region{color:var(--dsw-alias-brand-primary,#5686fe)}
-.dsm-workbuddy-searched-notice{margin:6px 0 0;padding:8px 10px;border:1px solid var(--dsw-alias-border-l2,#36373b);border-radius:8px;background:var(--dsw-alias-bg-layer-3,#2a2c33);color:var(--dsw-alias-label-secondary,#c6c9d0);font-size:12px;line-height:18px}
 .dsm-workbuddy-searched-more{margin-top:6px;padding:0;border:0;background:none;color:var(--dsw-alias-brand-primary,#5686fe);font:inherit;font-size:12px;line-height:18px;cursor:pointer;text-align:left}
 .dsm-workbuddy-searched-more:hover{text-decoration:underline}
 .dsm-workbuddy-usage-error{margin:0;font-size:14px;line-height:22px;color:var(--dsw-alias-state-error-primary,#ef4444)}
@@ -386,6 +469,12 @@ window.__ModuleLoader__.load({
 		* Order within each group is preserved from the Host: the store reports
 		* candidates in probe order, which is meaningful (the live file before its
 		* timestamped backups).
+		*
+		* There is deliberately no `encrypted` flag here. There used to be, for a
+		* notice rendered inside the list; that notice is gone because
+		* {@link signedOutNotice} now answers the encrypted cause in the paragraph, so
+		* the flag would have had no consumer — and a derived field kept "just in
+		* case" is how the list and the paragraph drift apart again.
 		*/
 		function searchedView(items) {
 			const interesting = items.filter((item) => INTERESTING_REASONS.includes(item.reason));
@@ -393,7 +482,6 @@ window.__ModuleLoader__.load({
 				interesting,
 				missing: items.filter((item) => !INTERESTING_REASONS.includes(item.reason)),
 				missingOpen: interesting.length === 0,
-				encrypted: items.some((item) => item.reason === "encrypted"),
 				total: items.length
 			};
 		}
@@ -440,10 +528,17 @@ window.__ModuleLoader__.load({
 		*
 		* `selectionLost` still wins outright: there the tokens are healthy and the
 		* advice is to re-pick an account, which no path list can replace.
+		*
+		* `encrypted` also outranks the generic hint, and for the same reason
+		* `wrong-region` does: the generic copy tells the user to sign in again, which
+		* is precisely the action that cannot work when the credential exists but is
+		* encrypted. Leaving it in the collapsed list meant the headline contradicted
+		* the detail below it — and the headline is the only part most users read.
 		*/
 		function signedOutNotice(input) {
 			if (input.selectionLost) return { key: "row.selectionLostMessage" };
 			if (input.searched.some((item) => item.reason === "wrong-region")) return { key: "row.signedOutWrongRegion" };
+			if (input.searched.some((item) => item.reason === "encrypted")) return { key: "row.signedOutEncrypted" };
 			if (input.searched.length > 0) return { key: "row.signedOutHint" };
 			return input.message === void 0 ? { key: "row.signedOutHint" } : {
 				key: "row.signedOutHint",
@@ -521,9 +616,12 @@ window.__ModuleLoader__.load({
 		* buried under a dozen "not found" lines. When nothing interesting was found
 		* the absent list IS the explanation, so it opens directly.
 		*
-		* An `encrypted` failure additionally raises a notice: it is the one cause
-		* where the user is very likely already signed in, and telling them to sign in
-		* again sends them to an action that cannot work.
+		* An `encrypted` failure deliberately adds NO notice of its own. It used to,
+		* because the paragraph above still said "sign in once in the desktop app" —
+		* the one action that cannot work when the credential exists but is encrypted.
+		* `signedOutNotice` now answers that cause in the paragraph itself, so a second
+		* copy here would restate it: the paragraph states the situation, this list
+		* supplies the detail, and the per-entry label already says what each path is.
 		*/
 		function SearchedPaths({ items, t }) {
 			const view = searchedView(items);
@@ -542,11 +640,6 @@ window.__ModuleLoader__.load({
 						className: "dsm-workbuddy-searched-hint",
 						children: t("row.searchedHint")
 					}),
-					view.encrypted ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: "dsm-workbuddy-searched-notice",
-						role: "status",
-						children: t("row.searchedEncryptedNotice")
-					}) : null,
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("ul", {
 						className: "dsm-workbuddy-searched-list",
 						children: [view.interesting.map((item) => renderSearchedItem(item, t)), showMissing ? view.missing.map((item) => renderSearchedItem(item, t)) : null]
@@ -596,9 +689,9 @@ window.__ModuleLoader__.load({
 			return { background: status === "signed-in" ? "var(--dsw-alias-state-success-primary, #22a06b)" : status === "error" ? "var(--dsw-alias-state-error-primary, #d92d20)" : "var(--dsw-alias-label-dimmed, #9aa0a6)" };
 		}
 		/** Render WorkBuddy sign-in state, credits, and model selection as one card. */
-		function WorkBuddyCard({ t, settingsScope }) {
+		function WorkBuddyCard({ t, settingsScope, view }) {
 			if (t === void 0) throw new Error("WorkBuddy plugin card requires its translation function");
-			const [open, setOpen] = (0, react.useState)(false);
+			const [open, setOpen] = (0, react.useState)(view === "page");
 			/** The region whose tab is on screen; each tab is its own provider stack. */
 			const [activeRegion, setActiveRegion] = (0, react.useState)("cn");
 			/**
@@ -767,12 +860,19 @@ window.__ModuleLoader__.load({
 			* directory, model picks, image opt-ins and budgets survive a round trip.
 			* The Host withdraws or restores the provider route on the next `onChange`,
 			* which is what actually removes it from DSH's model picker.
+			*
+			* Goes through `writeRegionEnabled` rather than calling `scope.set()`
+			* directly: on the affected 0.1.7 deployments that scope settles without
+			* storing anything, so a direct write appeared to succeed and then silently
+			* reverted. The helper adds the landed-check and the Host-endpoint fallback
+			* that every other settings write already had.
 			*/
 			const toggleRegion = async (item, enabled) => {
-				if (settingsScope === void 0 || settingsScope.getSnapshot().writable !== true) return;
+				if (settingsScope === void 0) return;
 				setTogglingRegion(item);
 				try {
-					await settingsScope.set("regions", nextRegionEnabled(settingsScope.getSnapshot().value, item, enabled));
+					const slot = nextRegionEnabled(settingsScope.getSnapshot().value, item, enabled)[item];
+					await writeRegionEnabled(settingsScope, item, enabled, typeof slot === "object" && slot !== null ? slot : {});
 				} finally {
 					if (mounted.current) setTogglingRegion(void 0);
 				}
@@ -845,13 +945,22 @@ window.__ModuleLoader__.load({
 			const activeEnabledIds = draft?.enabledIds ?? savedEnabledIds;
 			const savedImageIds = status.status === "signed-in" ? new Set(status.imageModelIds) : /* @__PURE__ */ new Set();
 			const activeImageIds = draft?.imageIds ?? savedImageIds;
-			const configured = settingsScope?.getSnapshot().value;
-			const configuredRegion = status.status === "signed-in" ? configured?.regions?.[status.region] : void 0;
-			const legacyContextBudgets = status.status === "signed-in" && status.region === "cn" ? configured?.contextBudgets : void 0;
-			const savedContextBudgetsSource = configuredRegion?.contextBudgets ?? legacyContextBudgets;
-			const savedContextBudgets = typeof savedContextBudgetsSource === "object" && savedContextBudgetsSource !== null ? savedContextBudgetsSource : {};
+			settingsScope?.getSnapshot().value;
+			const savedContextBudgets = status.status === "signed-in" ? status.contextBudgets ?? {} : {};
 			const activeContextBudgets = draft?.contextBudgets ?? savedContextBudgets;
 			const dirty = draft !== void 0;
+			/**
+			* Whether the card's inputs accept edits.
+			*
+			* Deliberately NOT the settings scope's own `writable` flag: on the affected
+			* DSH 0.1.7 deployment that flag stays false (the scope initialises it false
+			* and only raises it once its mirror loads as a Host-backed form), which left
+			* every input `disabled` — clicking them did nothing at all. Writes no longer
+			* depend on that flag: `writeField` tries the scope and falls back to the
+			* plugin's own Host endpoint, which performs the mutate in the Host process.
+			* A bound scope is therefore all that is required to accept an edit.
+			*/
+			const canWrite = settingsScope !== void 0;
 			const editDraft = (edit) => {
 				setDrafts((prev) => ({
 					...prev,
@@ -982,8 +1091,7 @@ window.__ModuleLoader__.load({
 						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 							"aria-hidden": "true",
-							className: `dsm-plugin-card-chevron${open ? " dsm-plugin-card-chevron-open" : ""}`,
-							children: (0, react.createElement)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { size: 14 })
+							className: `dsm-plugin-card-chevron${open ? " dsm-plugin-card-chevron-open" : ""}`
 						})
 					]
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -1021,7 +1129,7 @@ window.__ModuleLoader__.load({
 											children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 												type: "checkbox",
 												checked: regionOnState,
-												disabled: togglingRegion === region || settingsScope?.getSnapshot().writable !== true,
+												disabled: togglingRegion === region || !canWrite,
 												"aria-label": t("row.tabSwitchAria", { region: region === "cn" ? t("row.tabCn") : t("row.tabGlobal") }),
 												onChange: (event) => {
 													toggleRegion(region, event.target.checked);
@@ -1085,7 +1193,7 @@ window.__ModuleLoader__.load({
 										children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
 											className: "dsm-workbuddy-usage-select",
 											value: status.accounts.find((account) => account.selected)?.id ?? "",
-											disabled: switchingAccount || settingsScope?.getSnapshot().writable !== true,
+											disabled: switchingAccount || !canWrite,
 											onChange: (event) => {
 												switchAccount(event.currentTarget.value);
 											},
@@ -1194,7 +1302,7 @@ window.__ModuleLoader__.load({
 										status.recovery?.usableAccount === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
 											className: "dsm-btn dsm-btn-outline",
-											disabled: switchingAccount || settingsScope?.getSnapshot().writable !== true,
+											disabled: switchingAccount || !canWrite,
 											onClick: () => {
 												const target = status.recovery?.usableAccount;
 												if (target !== void 0) switchAccount(target.accountId);
@@ -1241,7 +1349,7 @@ window.__ModuleLoader__.load({
 															children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 																type: "checkbox",
 																checked: activeEnabledIds.has(model.id),
-																disabled: settingsScope?.getSnapshot().writable !== true || saving,
+																disabled: !canWrite || saving,
 																onChange: () => {
 																	toggleModel(model.id);
 																}
@@ -1266,7 +1374,7 @@ window.__ModuleLoader__.load({
 															children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 																type: "checkbox",
 																checked: activeImageIds.has(model.id),
-																disabled: settingsScope?.getSnapshot().writable !== true || saving,
+																disabled: !canWrite || saving,
 																onChange: () => {
 																	toggleImage(model.id);
 																}
@@ -1279,7 +1387,7 @@ window.__ModuleLoader__.load({
 																type: "radio",
 																name: `context-${model.id}`,
 																checked: (activeContextBudgets[model.id] ?? 2e5) === 2e5,
-																disabled: settingsScope?.getSnapshot().writable !== true || saving,
+																disabled: !canWrite || saving,
 																onChange: () => {
 																	setContextBudget(model.id, 2e5);
 																}
@@ -1287,7 +1395,7 @@ window.__ModuleLoader__.load({
 																type: "radio",
 																name: `context-${model.id}`,
 																checked: model.nativeContextWindow <= 2e5 || activeContextBudgets[model.id] === model.nativeContextWindow,
-																disabled: model.nativeContextWindow <= 2e5 || settingsScope?.getSnapshot().writable !== true || saving,
+																disabled: model.nativeContextWindow <= 2e5 || !canWrite || saving,
 																onChange: () => {
 																	setContextBudget(model.id, model.nativeContextWindow);
 																}
@@ -1395,6 +1503,7 @@ window.__ModuleLoader__.load({
 			"row.signedOut": "Not signed in",
 			"row.signedOutHint": "Sign in once in the WorkBuddy desktop app; this plugin follows that sign-in automatically.",
 			"row.signedOutWrongRegion": "Your WorkBuddy sign-in was found, but it belongs to the other region tab. Switch tabs above to use it — there is nothing to sign in again.",
+			"row.signedOutEncrypted": "Your WorkBuddy sign-in is present, but its token fields are encrypted and the plugin could not read the key. Install the WorkBuddy desktop app, or set WORKBUDDY_APP_EXECUTABLE to its executable — signing in again will not change this.",
 			"row.searchedTitle": "Paths checked",
 			"row.searchedHint": "If your WorkBuddy keeps its login somewhere else, point the plugin at it with the WORKBUDDY_AUTH_FILE environment variable.",
 			"row.reasonMissing": "not found",
@@ -1404,7 +1513,6 @@ window.__ModuleLoader__.load({
 			"row.reasonWrongRegion": "belongs to the other region",
 			"row.sourceDesktop": "desktop app",
 			"row.sourceDsh": "plugin copy",
-			"row.searchedEncryptedNotice": "The credential file is there, but its token fields are encrypted and the key could not be read. Install the WorkBuddy desktop app, or set WORKBUDDY_APP_EXECUTABLE to its executable — signing in again on its own will not help.",
 			"row.searchedMore": "Show the {count} path(s) that were not found",
 			"row.signedIn": "Signed in: {accountName}",
 			"row.tokenExpiry": "Access token expires {expiresAt} (auto-renewal)",
@@ -1470,6 +1578,7 @@ window.__ModuleLoader__.load({
 			"row.signedOut": "未登录",
 			"row.signedOutHint": "在 WorkBuddy 桌面 App 里登录一次即可，插件会自动跟随当前登录的账号。",
 			"row.signedOutWrongRegion": "找到了你的 WorkBuddy 登录信息，但它属于另一个地区的标签页。切换到上方对应标签页即可使用——不需要重新登录。",
+			"row.signedOutEncrypted": "你的 WorkBuddy 登录信息在，但其中的 token 字段是加密的，插件拿不到密钥。请安装 WorkBuddy 桌面 App，或用环境变量 WORKBUDDY_APP_EXECUTABLE 指定它的可执行文件——重新登录无法解决这个问题。",
 			"row.searchedTitle": "已检查的路径",
 			"row.searchedHint": "如果你的 WorkBuddy 把登录信息存在别处，可以用环境变量 WORKBUDDY_AUTH_FILE 指定。",
 			"row.reasonMissing": "不存在",
@@ -1479,7 +1588,6 @@ window.__ModuleLoader__.load({
 			"row.reasonWrongRegion": "属于另一个地区",
 			"row.sourceDesktop": "桌面 App",
 			"row.sourceDsh": "插件副本",
-			"row.searchedEncryptedNotice": "凭据文件在，但其中的 token 字段是加密的，插件拿不到密钥。请安装 WorkBuddy 桌面 App，或用环境变量 WORKBUDDY_APP_EXECUTABLE 指定它的可执行文件——单纯重新登录解决不了这个问题。",
 			"row.searchedMore": "显示另外 {count} 条「不存在」的路径",
 			"row.signedIn": "已登录：{accountName}",
 			"row.tokenExpiry": "访问令牌 {expiresAt} 过期（自动续期）",
@@ -1535,12 +1643,17 @@ window.__ModuleLoader__.load({
 		//#region src/client/index.tsx
 		/** Stable browser-plugin name. */
 		const name = "dsh-connect-workbuddy-client";
-		/** Client services required by the Plugin configuration contribution. */
-		const inject = [
-			"slots",
-			"locale",
-			"settingsScope"
-		];
+		/**
+		* Client services required by the Plugin configuration contribution.
+		*
+		* Deliberately only the two services that exist on BOTH host lines. The
+		* settings surface differs by line — 0.1.5 provides `settingsScope`, 0.1.7
+		* replaces it with `configForms` — and Cordis' dependency gate is hard: any
+		* inject entry the running line does not provide keeps `apply` from ever
+		* running. Probing both via `ctx.get()` (which returns undefined, never
+		* throws, for an absent service) is what lets one build serve both lines.
+		*/
+		const inject = ["slots", "locale"];
 		/** Register card copy and the WorkBuddy card under Plugin configuration. */
 		function apply(ctx) {
 			try {
@@ -1550,16 +1663,36 @@ window.__ModuleLoader__.load({
 					en
 				}), "dsh-connect-workbuddy: settings copy");
 				const t = ctx.locale.bind(namespace);
-				const settingsScope = ctx.settingsScope.bind({ namespace: "workbuddy" });
-				ctx.slots.inject("settings.plugin.item", () => ctx.slots.register({
-					name: "settings.plugin.item",
-					key: "workbuddy",
-					priority: 30,
-					inject: () => ({
-						t,
-						settingsScope
-					})
-				}, WorkBuddyCard));
+				const softGet = (name) => ctx.get(name);
+				let settingsScope;
+				const forms = softGet("configForms");
+				const legacy = softGet("settingsScope");
+				if (forms !== void 0) {
+					let ns = "workbuddy";
+					try {
+						const served = (forms.describe().getSnapshot().view?.namespaces ?? []).find((entry) => entry.ns === "workbuddy" || /workbuddy/i.test(entry.ns));
+						if (served !== void 0) ns = served.ns;
+					} catch {}
+					settingsScope = forms.get(ns);
+				} else if (legacy !== void 0) settingsScope = legacy.bind({ namespace: "workbuddy" });
+				const registerCard = (slotName, key) => {
+					try {
+						ctx.slots.inject(slotName, () => ctx.slots.register({
+							name: slotName,
+							key,
+							priority: 30,
+							inject: () => settingsScope === void 0 ? { t } : {
+								t,
+								settingsScope
+							}
+						}, WorkBuddyCard));
+					} catch (error) {
+						console.error(`[dsh-connect-workbuddy] card slot "${slotName}" failed to register (host provider unaffected):`, error);
+					}
+				};
+				registerCard("plugins.bundle.config", "dsh-connect-workbuddy");
+				registerCard("plugins.row.config", "dsh-connect-workbuddy#dsh-connect-workbuddy");
+				registerCard("settings.plugin.item", "workbuddy");
 			} catch (error) {
 				console.error("[dsh-connect-workbuddy] client card failed to load (host provider unaffected):", error);
 			}