dsh-connect-workbuddy 2.0.10 → 2.0.12

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as isCredentialRejectedError, B as fetchAtRestKeyPayload, C as parseWorkBuddyAuth, D as WorkBuddyCredentialRejectedError, E as CREDENTIAL_REJECTED_CODE, F as regionOf, G as workbuddyAppExecutableCandidates, H as isEncryptedFieldWrapper, I as WORKBUDDY_APP_EXECUTABLE_ENV, L as clearAtRestKeyCache, M as parseReasoning, N as parseUpstreamModel, O as WorkBuddyUpstreamClient, P as prepareChatBody, R as deriveAtRestKey, S as legacyWorkbuddyOwnAuthPath, T as workbuddyOwnAuthPath, U as openEncryptedField, V as findWorkbuddyAppExecutable, W as readAtRestKey, _ as authFileName, a as readHostHeartbeat, b as defaultDesktopAuthPath, c as WORKBUDDY_CONNECT_VERSION, d as WorkBuddyCatalog, f as deriveCatalog, g as WorkBuddyCredentialStore, h as WORKBUDDY_AUTH_FILE_ENV, i as processStartTimeMs, j as parseCreditMultiplier, k as classifyUpstreamError, l as FALLBACK_WORKBUDDY_MODELS, m as WORKBUDDY_AUTH_FILENAME, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as fallbackModelsFor, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, v as defaultDesktopAuthCandidates, w as workbuddyAccountId, x as hasEncryptedCredentialFields, y as defaultDesktopAuthDirs, z as deriveAtRestKeyId } from "./host-heartbeat-DPbL9oi2.js";
+import { A as WorkBuddyCredentialRejectedError, B as clearAtRestKeyCache, C as hasEncryptedCredentialFields, D as workbuddyAccountId, E as parseWorkBuddyAuth, F as parseReasoning, G as isEncryptedFieldWrapper, H as deriveAtRestKeyId, I as parseUpstreamModel, J as macosNestedAppBundles, K as isWorkbuddyBundle, L as prepareChatBody, M as classifyUpstreamError, N as isCredentialRejectedError, O as workbuddyOwnAuthPath, P as parseCreditMultiplier, R as regionOf, S as defaultDesktopAuthPath, T as legacyWorkbuddyOwnAuthPath, U as fetchAtRestKeyPayload, V as deriveAtRestKey, W as findWorkbuddyAppExecutable, X as readAtRestKey, Y as openEncryptedField, Z as workbuddyAppExecutableCandidates, _ as WorkBuddyCredentialStore, a as readHostHeartbeat, b as defaultDesktopAuthCandidates, c as WORKBUDDY_CONNECT_VERSION, d as WorkBuddyCatalog, f as deriveCatalog, g as WORKBUDDY_AUTH_FILE_ENV, h as WORKBUDDY_AUTH_FILENAME, i as processStartTimeMs, j as WorkBuddyUpstreamClient, k as CREDENTIAL_REJECTED_CODE, l as FALLBACK_WORKBUDDY_MODELS, m as ENCRYPTED_CREDENTIAL_CODE, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as fallbackModelsFor, q as macosBundleExecutable, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, v as WorkBuddyEncryptedCredentialError, w as isEncryptedCredentialError, x as defaultDesktopAuthDirs, y as authFileName, z as WORKBUDDY_APP_EXECUTABLE_ENV } from "./host-heartbeat-ChtMu37E.js";
 import z from "@deepseek-ai/schemastery";
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { createProvider } from "@earendil-works/pi-ai";
@@ -715,6 +715,10 @@ async function searchedPaths(store) {
 		return {};
 	}
 }
+/** Reads schemastery's internal `meta.volatile` marker for one top-level field. */
+function volatileFlagOf(field) {
+	return Config.dict?.[field]?.meta?.volatile === true;
+}
 /**
 * Assemble one region's card document. `region` is the tab the card is on;
 * the region-scoped store already answers with only that region's accounts,
@@ -775,6 +779,12 @@ async function workBuddyWebStatus(deps, region) {
 	});
 	return {
 		status: "signed-in",
+		contextBudgets: Object.fromEntries(Object.entries(deps.contextBudgets(region)).filter(([, value]) => typeof value === "number")),
+		diagVolatile: {
+			regions: volatileFlagOf("regions"),
+			accounts: volatileFlagOf("accounts"),
+			authFile: volatileFlagOf("authFile")
+		},
 		...account,
 		...creditsResult.status === "fulfilled" ? { credits: toCredits(creditsResult.value) } : { creditsError: safeMessage(creditsResult.reason) },
 		...checkinResult.status === "fulfilled" ? { checkin: checkinResult.value } : { checkinError: safeMessage(checkinResult.reason) },
@@ -881,11 +891,59 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				}
 			}
 		});
+		const disposeDiagWrite = ctx.webServer.register({
+			kind: "exact",
+			path: "/plugins/dsh-connect-workbuddy/__save",
+			handler: async (req, res) => {
+				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
+				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
+				const settings = ctx.get?.("settings");
+				if (settings === void 0) return json(res, 503, { error: "settings service unavailable to this fiber" });
+				try {
+					const body = await new Promise((resolve, reject) => {
+						const chunks = [];
+						req.on("data", (chunk) => chunks.push(chunk));
+						req.on("end", () => {
+							try {
+								resolve(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+							} catch (e) {
+								reject(e);
+							}
+						});
+						req.on("error", reject);
+					});
+					const field = body.field;
+					if (field !== "regions" && field !== "accounts") return json(res, 400, { error: "field must be regions or accounts" });
+					const row = settings.describe().find((r) => String(r.ns).includes("workbuddy"));
+					if (row === void 0) return json(res, 503, { error: "workbuddy namespace missing from describe()" });
+					const current = row.value?.[field] ?? {};
+					const incoming = body.value ?? {};
+					const merged = {
+						...current,
+						...incoming
+					};
+					await settings.mutate(row.ns, [{
+						op: "set",
+						path: [field],
+						value: merged
+					}], void 0);
+					return json(res, 200, { ok: true });
+				} catch (error) {
+					const err = error;
+					return json(res, 500, {
+						ok: false,
+						errorName: err?.name ?? "unknown",
+						error: err?.message ?? String(error)
+					});
+				}
+			}
+		});
 		return () => {
 			disposeRefresh();
 			disposeCheckin();
 			disposeAccounts();
 			disposeUsage();
+			disposeDiagWrite();
 		};
 	}, "dsh-connect-workbuddy: Web status route");
 }
@@ -914,11 +972,63 @@ const accountSelectionConfig = z.object({
 	cn: z.string().description("Selected domestic (CN) account id (never a token)"),
 	global: z.string().description("Selected international account id (never a token)")
 });
+/**
+* Mark a schema's field as volatile on the DSH lines that support it.
+*
+* `volatile()` exists from schemastery 3.18.3 (the DSH 0.1.7 line, which is the
+* only line whose settings write gate reads the marker). Older pinning (3.18.2,
+* the 0.1.5 line) has no such method, and the schema must stay byte-identical to
+* the unmarked original there: hand-writing `meta.volatile = true` would bypass
+* schemastery's own validateVolatileSchema checks and produce a schema no 0.1.5
+* consumer understands — so on that line this degrades to an identity no-op.
+*
+* Exported so BOTH arms are testable on any machine. The capability is decided
+* by whichever schemastery the dependency tree resolves, so without a seam the
+* no-op arm would silently stop being exercised the moment the pinned version
+* moved up — which is exactly how the volatile-path defect below went unseen.
+*/
+function asVolatile(schema) {
+	if (typeof schema.volatile === "function") return schema.volatile();
+	return schema;
+}
+function unwrapVolatile(value) {
+	if (value !== null && typeof value === "object" && "get" in value && typeof value.get === "function") return value.get();
+	return value;
+}
+/**
+* Deep copy of a config value with every `{get(): T}` live reference replaced
+* by the value it resolves to.
+*
+* {@link unwrapVolatile} only peels the ONE level a caller reads, which is all
+* the ordinary read paths need. Handing a config object to a settings service
+* is different: the service validates and `structuredClone`s the WHOLE object,
+* so a reference surviving anywhere inside it fails schema validation with a
+* message that names the field but not the cause —
+* `$.authFile expected string but got [object Object]`.
+*
+* That is exactly what happened on the 0.1.5 line once volatile marking became
+* active: `installSection` received the raw config, whose volatile fields were
+* live references, and every field it validated threw. The namespace never
+* registered, so the card's settings silently disappeared.
+*
+* Non-reference values are recursed into so a nested volatile field is caught
+* too — arrays are rebuilt rather than mutated, so the caller's config object is
+* never touched.
+*/
+function unwrapVolatileDeep(value) {
+	if (value === null || typeof value !== "object") return value;
+	if (typeof value.get === "function") return unwrapVolatileDeep(value.get());
+	if (Array.isArray(value)) return value.map((entry) => unwrapVolatileDeep(entry));
+	const source = value;
+	const out = {};
+	for (const key of Object.keys(source)) out[key] = unwrapVolatileDeep(source[key]);
+	return out;
+}
 const Config = z.object({
-	authFile: z.string().description("WorkBuddy desktop auth file (defaults to the app's own location)"),
+	authFile: asVolatile(z.string().description("WorkBuddy desktop auth file (defaults to the app's own location)")),
 	accountId: z.string().description("Deprecated: pre-split account selector, attributed to its own region"),
-	accounts: accountSelectionConfig.description("Per-region account selections, keyed cn | global"),
-	regions: z.dict(regionStateConfig).default({}).description("Per-region model directory and selection, keyed cn | global"),
+	accounts: asVolatile(accountSelectionConfig.default({}).description("Per-region account selections, keyed cn | global")),
+	regions: asVolatile(z.dict(regionStateConfig).default({}).description("Per-region model directory and selection, keyed cn | global")),
 	lastCatalog: z.array(modelConfig).description("Deprecated: pre-region-split CN model directory"),
 	enabledModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN selection"),
 	imageModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN image opt-in"),
@@ -934,14 +1044,18 @@ const Config = z.object({
 * picks.
 */
 function regionStateOf(config, region) {
-	const stored = config.regions?.[region];
+	const stored = unwrapVolatile(config.regions)?.[region];
 	if (stored !== void 0) return stored;
 	if (region !== "cn") return {};
+	const lastCatalog = unwrapVolatile(config.lastCatalog);
+	const enabledModelIds = unwrapVolatile(config.enabledModelIds);
+	const imageModelIds = unwrapVolatile(config.imageModelIds);
+	const contextBudgets = unwrapVolatile(config.contextBudgets);
 	return {
-		...config.lastCatalog === void 0 ? {} : { lastCatalog: config.lastCatalog },
-		...config.enabledModelIds === void 0 ? {} : { enabledModelIds: config.enabledModelIds },
-		...config.imageModelIds === void 0 ? {} : { imageModelIds: config.imageModelIds },
-		...config.contextBudgets === void 0 ? {} : { contextBudgets: config.contextBudgets }
+		...lastCatalog === void 0 ? {} : { lastCatalog },
+		...enabledModelIds === void 0 ? {} : { enabledModelIds },
+		...imageModelIds === void 0 ? {} : { imageModelIds },
+		...contextBudgets === void 0 ? {} : { contextBudgets }
 	};
 }
 /**
@@ -978,14 +1092,15 @@ const REGION_KEYS = ["cn", "global"];
 * attribution yet) and every later one.
 */
 function selectAccountFor(region, value, legacyAccountRegion) {
-	const configured = value.accounts?.[region];
+	const configured = unwrapVolatile(value.accounts)?.[region];
 	if (configured === "") return void 0;
 	if (configured !== void 0) return configured;
-	return legacyAccountRegion === region ? value.accountId : void 0;
+	const accountId = unwrapVolatile(value.accountId);
+	return legacyAccountRegion === region ? accountId : void 0;
 }
 /** Whether a region carries the Clear sentinel rather than a saved choice. */
 function regionCleared(value, region) {
-	return value.accounts?.[region] === "";
+	return unwrapVolatile(value.accounts)?.[region] === "";
 }
 /**
 * Which region owns the pre-split `accountId`, or `undefined` when it cannot
@@ -1021,9 +1136,10 @@ function apply(ctx, config) {
 	const client = new WorkBuddyUpstreamClient();
 	const stacks = {};
 	for (const region of REGION_KEYS) {
+		const authFile = unwrapVolatile(config.authFile);
 		const store = new WorkBuddyCredentialStore({
 			region,
-			...config.authFile === void 0 ? {} : { desktopPath: config.authFile },
+			...authFile === void 0 ? {} : { desktopPath: authFile },
 			refresh: (credential) => client.refreshToken(credential)
 		});
 		const catalog = new WorkBuddyCatalog(region);
@@ -1071,8 +1187,9 @@ function apply(ctx, config) {
 	};
 	/** Push the current config into every region's store selection and catalog. */
 	const applySelection = (value) => {
+		const authFile = unwrapVolatile(value.authFile);
 		for (const region of REGION_KEYS) {
-			stacks[region].store.setDesktopPath(value.authFile);
+			stacks[region].store.setDesktopPath(authFile);
 			stacks[region].store.selectAccount(effectiveAccountFor(region, value));
 			stacks[region].catalog.set(configuredModels(value, region));
 		}
@@ -1153,13 +1270,26 @@ function apply(ctx, config) {
 			if (stacks[region].catalog.setRegionUsable(usable)) invalidateCatalog();
 		}
 	}));
-	ctx.settings.installSection(ctx, WORKBUDDY_SETTINGS_NS, Config, config, {
-		setSource(source) {
-			current = source;
-		},
-		onChange() {
-			applySelection(current());
+	ctx.inject(["settings"], (sctx) => {
+		const settings = sctx.settings;
+		if (typeof settings.configure === "function") {
+			settings.configure({ auto: true }, ctx.fiber);
+			return;
 		}
+		if (typeof settings.installSection === "function") {
+			const entry = unwrapVolatileDeep(config);
+			settings.installSection(ctx, WORKBUDDY_SETTINGS_NS, Config, entry, {
+				setSource(source) {
+					current = source;
+				},
+				onChange() {
+					applySelection(current());
+				}
+			});
+		}
+	});
+	ctx.on("loader/volatile-update", () => {
+		applySelection(current());
 	});
 	applySelection(config);
 	(async () => {
@@ -1270,4 +1400,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { CREDENTIAL_REJECTED_CODE, Config, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, WorkBuddyUpstreamClient, apply, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, inject, isCredentialRejectedError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, name, nextRegionEnabled, nextRegionSlots, openEncryptedField, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, toPersistedWorkBuddyModel, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { CREDENTIAL_REJECTED_CODE, Config, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, WorkBuddyEncryptedCredentialError, WorkBuddyUpstreamClient, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, name, nextRegionEnabled, nextRegionSlots, openEncryptedField, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, toPersistedWorkBuddyModel, unwrapVolatileDeep, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "Connect locally signed-in WorkBuddy models to DeepSeek Harness with a read-only credits overview and model management.",
-  "version": "2.0.10",
+  "version": "2.0.12",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",
@@ -32,6 +32,9 @@
     "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json"
   },
+  "dependencies": {
+    "@deepseek-ai/schemastery": "3.18.4"
+  },
   "files": [
     "lib",
     "docs/assets",