dsh-connect-workbuddy 2.0.14 → 2.1.0

package/CHANGELOG.md

@@ -1,5 +1,72 @@
 # Changelog
 
+## 2.1.0 (2026-09-25)
+
+### ⚠️ 版本基线：仅支持 DSH 0.1.7-rc.1 及以上
+
+**自本版起，本插件只支持 DeepSeek Harness 0.1.7-rc.1 及以上的宿主**（`@deepseek-ai/dsh-*` peer 依赖的最低版本已从 `>=0.1.5-rc.1` 提高到 `>=0.1.7-rc.1`，旧版宿主将无法通过依赖解析安装本版）。
+
+- **0.1.5 双线分支已移除**：宿主的 `installSection` 回落、客户端的 `settingsScope` 分支、`settings.plugin.item` 槽位注册已全部删除——`configure({auto}, owner)` 与 `configForms` 是唯一路径。
+- 如果你仍在 0.1.5 宿主上，请停留在 **2.0.15**（最后一个支持 0.1.5 的 GA 版本；2.0.16 / 2.0.17 的缺陷修复已并入本版）。
+
+### Bug Fixes
+
+#### provider 被宿主判定为「未配置」（DSH 0.1.7-rc.1）
+
+0.1.7 把设置模型整体重建（`SettingsProvider` → `SettingsForms`）后，**命名空间不再由插件自选**：宿主 `describe()` 以 **`ns: entry.options.id`**（Loader 条目 id）为键，而宿主按**精确匹配**查表 —— `namespaces.get(entry.settingsNs)`。我们此前硬编码 `settingsNs: 'workbuddy'`，而实测条目 id 是 **`include:dsh-connect-workbuddy`**，于是查表落空、provider 读作「未配置」，**不报错、只是静默失效**。
+
+- **修法**：新增 `settingsNamespaceOf(ctx)`，采用一线插件的权威范式
+  `const settingsNs = ctx.fiber.entry?.options.id ?? NS`（见 `dsh-llm-pi-ai`），并把全部 6 处用法改为解析值。`ctx.fiber.entry` 由 Loader 注入（非 Cordis 公共类型），因此保留探测 + 回落，并在无 Loader 条目时回落到声明常量。
+- **常量移入 `src/status-paths.ts`**：浏览器侧也需要同一个回落值，而它不能 import Node-only 的宿主入口。该模块本就是 host↔client 的无 node 依赖桥梁。`src/index.ts` 继续导出，**公共 API 不变**。
+- **回归测试**（`tests/settings-integration.spec.ts`，+4 例）：采纳 Loader 条目 id、无条目/空 id/非字符串时回落、以及**目录实际宣告的就是解析值**（断言目录条目而非常量，否则恒过）。**变异验证**：忽略 entry id 恒用常量 → **1 例立即变红**。
+
+#### 插件管理页 / 市场页的 logo 显示不对
+
+0.1.7 的插件管理页从插件包的 `package.json` 的 `icon` 字段读图标（`dsh-client-ui-plugin-manager` 渲染 `row.meta?.icon`，plugin-manager 契约含 `icon: z.string().optional()`），我们没有声明该字段 → 宿主无图可用。
+
+- **修法**（照同级 `dsh-ldvh` 的做法）：新增 `icons/` 目录（64px + 128px 真实 PNG，其中 64px 与既有卡片内嵌 base64 逐字节一致——同族 LD logo），`package.json` 声明 `"icon": "icons/dsh-connect-workbuddy-128.png"`，并把 `icons` 加入 `files` 白名单随包分发。
+- **验证**：`npm pack` 确认两个 PNG 进包（15 → 17 个文件）；desktop profile 的 link 安装下，`node_modules/dsh-connect-workbuddy/package.json` 已含该字段。
+
+### Compatibility（对运行中 0.1.7-rc.1 宿主实测，非推测）
+
+- **可用接缝**：宿主已识别本插件 Config（`status: "schema"`、`limitations: []`）；`authFile` / `accounts` / `regions` 的 `"x-cordis": {"volatile": true}` 齐备；客户端卡片在 `plugins.bundle.config` 与 `plugins.row.config` **均已注册且 active**；`settings.configure/describe/mutate` 三个方法签名逐字匹配；`loader/volatile-update` 事件仍在。
+- **确认不受影响的破坏性变更**：`settings.plugin.item` 槽位删除（我们各自独立 try/catch，不牵连其他槽位）、`settingsScope` 客户端服务删除（改用 `configForms`）、**`dsh-client-ui-primitives` 图标命名族改名**（本插件不从该包取任何具名图标，折叠箭头早已改为纯 CSS）、`agent/session-start` 删除（未监听）、会话格式 V3→V4（不读写会话文件）。
+- 核对明细见 `.dsh-npm-cache/compat-017-audit.md`。
+- **测试基座改为手动 `apply(ctx, config)`**：`ctx.plugin(WorkBuddy, config)` 会让 Cordis 校验出 frozen 代理对象，测试无法再就地写入；改为直接调用 `apply()` 让 config 由测试与所选 settings 服务共享同一引用（模拟 0.1.7 Loader 的就地提交语义），`loader/volatile-update` 事件用正确的单参形式触发。
+
+### Tests
+
+- 349 → 348（删 2 例 0.1.5 形态用例：`installSection` 引用清理、0.1.5 回落；加 1 例 0.1.7 `configure` 唯一路径；命名空间 +4、其余不变）。
+
+## 2.0.15 (2026-09-24)
+
+### Bug Fixes
+
+- **不能正确取消（或启用）国际版 / 国内版区域开关**（用户实报：「我发现现在不能正确取消国际或者国内版本」）。**写入其实一直是成功的**——用户机器上的 `settings.yaml` 已经写着 `regions.global.enabled: false`——失败的是**开关控件没能反映这个事实**，所以看起来像「点了没用」。
+
+  - **根因（两处，都在读取侧）**：
+
+    1. **开关读的是浏览器镜像，而写入落在 Host。** 2.0.14 把设置写入改为 **Host 端点优先**（那是唯一不会删掉兄弟区域的写入方），而**端点写入不会更新浏览器的 settings 镜像**——这一滞后在本仓库别处早已注明。开关的勾选态却是从镜像读的：
+
+       ```tsx
+       checked={regionEnabledOf(settingsScope?.getSnapshot().value, region)}
+       ```
+
+       于是 Host 已经提交了 `enabled: false`，复选框**仍显示为开**。这同时解释了为什么此前「读法」与「写入顺序」两轮修复都没有暴露它：**写入一直是对的，错的是回显**。
+
+    2. **切换后不重新读取 Host。** `toggleRegion()` 写完就结束，从不重新拉取状态，因此新值根本没有机会进入卡片。
+
+  - **修法**：
+    - 开关改为**以 Host 的值为准**——Host 在状态载荷里已经送回它按自身 config 判定的 `enabled`（`deps.regionEnabled`）。镜像降级为**兜底**：老版本 Host 没这个字段、或状态尚未加载时，仍按存储文档渲染，而不是靠猜。两边用的是**同一条 opt-out 规则**（只有显式 `false` 才算关闭），因此两个来源不可能互相矛盾——只可能其中一个**过期**。
+    - `toggleRegion()` 在写入后 **`await refreshUsage(item)`**，重新读取 Host；失败时**显式报错**，而不是让开关静静地不动。
+    - 面板打开时**两个区域都拉取**，而不是只拉当前标签页。两个开关**始终**渲染在标签栏上，只拉当前区域会让另一个开关一直停在镜像兜底上——正是本次要摆脱的那个过期来源。
+
+  - **回归测试**（`tests/volatile-scope.spec.ts`，9 → 13 例）：断言 Host 已提交关闭而镜像仍说开时开关显示为**关**（反向同理）、Host 未应答时回落到镜像、以及兜底路径仍能容忍 `{get(): T}` 活引用（否则会退回「永远显示开」的老毛病）。**变异验证**：把读取改回「只看镜像」→ **2 例立即变红**。
+
+### Tests
+
+- 341 → 345（新增 4 例：区域开关以 Host 真值为准、镜像仅兜底）。
+
 ## 2.0.14 (2026-09-23)
 
 ### Bug Fixes

package/README.en.md

@@ -54,6 +54,8 @@ Credentials are read (read-only) from the WorkBuddy desktop app's own auth file.
 
 ## Install
 
+> ⚠️ **Version requirement: DSH 0.1.7-rc.1 or newer.** Since v2.1.0 this plugin only supports hosts on DSH 0.1.7-rc.1 and above (older hosts cannot resolve the dependencies to install this version); hosts on 0.1.5 and earlier should stay on v2.0.15.
+
 Prerequisite: the WorkBuddy desktop app is installed and signed in (the plugin reuses the app's sign-in state).
 
 ```sh

package/README.md

@@ -60,6 +60,8 @@ DSH PiAiAdapter（每个 provider 一套）
 
 ## 安装
 
+> ⚠️ **版本要求：DSH 0.1.7-rc.1 及以上。** 自 v2.1.0 起本插件只支持 DSH 0.1.7-rc.1 及以上的宿主（旧版宿主无法通过依赖解析安装本版）；0.1.5 及更早的宿主请停留在 v2.0.15。
+
 前置：已安装并登录 WorkBuddy 桌面 App（插件复用 App 的登录状态）。
 
 推荐使用 DSH 插件命令安装 npm 已发布版本：

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { O as workbuddyOwnAuthPath, T as legacyWorkbuddyOwnAuthPath, W as findWorkbuddyAppExecutable, _ as WorkBuddyCredentialStore, a as readHostHeartbeat, b as defaultDesktopAuthCandidates, c as WORKBUDDY_CONNECT_VERSION, g as WORKBUDDY_AUTH_FILE_ENV, j as WorkBuddyUpstreamClient, l as FALLBACK_WORKBUDDY_MODELS, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, x as defaultDesktopAuthDirs, z as WORKBUDDY_APP_EXECUTABLE_ENV } from "./host-heartbeat-SQNmYRNj.js";
+import { O as workbuddyOwnAuthPath, T as legacyWorkbuddyOwnAuthPath, W as findWorkbuddyAppExecutable, _ as WorkBuddyCredentialStore, a as readHostHeartbeat, b as defaultDesktopAuthCandidates, c as WORKBUDDY_CONNECT_VERSION, g as WORKBUDDY_AUTH_FILE_ENV, j as WorkBuddyUpstreamClient, l as FALLBACK_WORKBUDDY_MODELS, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, x as defaultDesktopAuthDirs, z as WORKBUDDY_APP_EXECUTABLE_ENV } from "./host-heartbeat-CH6_J1Ee.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -159,6 +159,20 @@ window.__ModuleLoader__.load({
 			for (const key of Object.keys(source)) out[key] = unwrapVolatileDeep(source[key]);
 			return out;
 		}
+		/**
+		* The plugin's DECLARED settings namespace — the fallback name, not the value
+		* the host necessarily serves.
+		*
+		* On 0.1.7 the settings service keys every form by the plugin's Loader entry id
+		* (`describe()` returns `ns: entry.options.id`), and the harness resolves a
+		* provider's namespace by EXACT match. The entry id is chosen by the profile
+		* patch, so a plugin cannot know it in advance — the live Desktop host mounts
+		* this one as `include:dsh-connect-workbuddy`.
+		*
+		* Lives here, not in the Host entry, because the browser half needs the same
+		* fallback and must not import Node-only host code.
+		*/
+		const WORKBUDDY_SETTINGS_NS = "workbuddy";
 		//#endregion
 		//#region src/client/account-selection.ts
 		/**
@@ -865,7 +879,7 @@ window.__ModuleLoader__.load({
 			(0, react.useEffect)(() => {
 				if (!open) return;
 				const controller = new AbortController();
-				refreshUsage(activeRegion, controller.signal);
+				for (const region of WORKBUDDY_REGIONS) refreshUsage(region, controller.signal);
 				return () => {
 					controller.abort();
 				};
@@ -937,19 +951,29 @@ window.__ModuleLoader__.load({
 				}
 			};
 			/**
-			* Whether one region's provider is switched on, read off the SAME committed
-			* settings document the Host reads (`regionEnabledOf` mirrors the Host's
-			* `regionStateOf` opt-out rule: only an explicit `false` disables). Reading
-			* the stored value rather than echoing local state means a rejected write,
-			* another window's change, or a restart all converge on the truth.
+			* Whether one region's provider is switched on.
 			*
-			* The whole settings section is passed deliberately: `regionEnabledOf`
-			* accepts either it or the bare `regions` map, because passing the section
-			* where the map was expected was a shipped bug (the lookup read
-			* `section['cn']`, found nothing, and reported `true` forever — the checkbox
-			* stayed checked and clicking it appeared dead while the write succeeded).
+			* The HOST's answer wins, because on this deployment it is the only writer
+			* that lands: the switch goes through the plugin's Host save endpoint (that
+			* endpoint is the only writer that cannot drop the sibling region), and a
+			* write made there does NOT update the browser settings mirror. Reading the
+			* mirror therefore left the checkbox stuck ON after a successful disable —
+			* "不能正确取消国际版/国内版" — even though `enabled: false` was already in
+			* settings.yaml. The Host sends the committed value it derives from its own
+			* config (`status.enabled`, see `deps.regionEnabled`), so the card renders
+			* that.
+			*
+			* The mirror stays as the FALLBACK: a host that predates the field, or a
+			* status that has not loaded yet, still renders from the stored document
+			* rather than guessing. Both rules are the same opt-out rule (only an
+			* explicit `false` disables), so the two sources cannot disagree — only one
+			* of them can be stale.
 			*/
-			const regionOn = (item) => regionEnabledOf(settingsScope?.getSnapshot().value, item);
+			const regionOn = (item) => {
+				const fromHost = statusByRegion[item]?.enabled;
+				if (typeof fromHost === "boolean") return fromHost;
+				return regionEnabledOf(settingsScope?.getSnapshot().value, item);
+			};
 			const activeRegionOn = regionOn(activeRegion);
 			/**
 			* Switch one region's provider off or on. The write carries the region's
@@ -970,6 +994,9 @@ window.__ModuleLoader__.load({
 				try {
 					const slot = nextRegionEnabled(settingsScope.getSnapshot().value, item, enabled)[item];
 					await writeRegionEnabled(settingsScope, item, enabled, typeof slot === "object" && slot !== null ? slot : {});
+					await refreshUsage(item);
+				} catch (error) {
+					if (mounted.current) setAccountError(error instanceof Error ? error.message : t("row.requestFailed"));
 				} finally {
 					if (mounted.current) setTogglingRegion(void 0);
 				}
@@ -1738,6 +1765,29 @@ window.__ModuleLoader__.load({
 		};
 		//#endregion
 		//#region src/client/index.tsx
+		/**
+		* Browser half: WorkBuddy credits and model management inside Plugin
+		* configuration.
+		*
+		* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
+		*   — 浏览器插件的注册形态（`slots` / `locale` / `settingsScope` 三项注入、
+		*     `LocaleNamespaceMap` 的模块增强、`settings.plugin.item` 槽位与
+		*     `key` / `priority` 的 rc.7 写法、以及整个 apply 体包 try/catch
+		*     以便槽位 API 变更时降级为 console.error 而不触发
+		*     "Failed to load plugins" 红色横幅）来自该项目，
+		*     其亦注明沿用 corrinehu/dsh-workbuddy-connect 的同一模式。
+		* 改动：无实质改动，仅改为本插件的命名空间与组件名。
+		*
+		* NOTE: the try/catch boundary of this function is mirrored (duplicated) in
+		* `tests/client-fallback.spec.ts`, because the real client entry imports
+		* browser-only DSH packages that cannot load in the Node test environment.
+		* That test therefore does not import this function — it replicates its
+		* shape. If you change the guarded body or the `console.error` message here,
+		* update the mirrored `apply()` in that spec too, or the fallback test will
+		* silently diverge from this real implementation.
+		*
+		* @module dsh-connect-workbuddy/client
+		*/
 		/** Stable browser-plugin name. */
 		const name = "dsh-connect-workbuddy-client";
 		/**
@@ -1763,15 +1813,14 @@ window.__ModuleLoader__.load({
 				const softGet = (name) => ctx.get(name);
 				let settingsScope;
 				const forms = softGet("configForms");
-				const legacy = softGet("settingsScope");
 				if (forms !== void 0) {
-					let ns = "workbuddy";
+					let ns = WORKBUDDY_SETTINGS_NS;
 					try {
 						const served = (forms.describe().getSnapshot().view?.namespaces ?? []).find((entry) => entry.ns === "workbuddy" || /workbuddy/i.test(entry.ns));
 						if (served !== void 0) ns = served.ns;
 					} catch {}
 					settingsScope = forms.get(ns);
-				} else if (legacy !== void 0) settingsScope = legacy.bind({ namespace: "workbuddy" });
+				}
 				const registerCard = (slotName, key) => {
 					try {
 						ctx.slots.inject(slotName, () => ctx.slots.register({
@@ -1789,7 +1838,6 @@ window.__ModuleLoader__.load({
 				};
 				registerCard("plugins.bundle.config", "dsh-connect-workbuddy");
 				registerCard("plugins.row.config", "dsh-connect-workbuddy#dsh-connect-workbuddy");
-				registerCard("settings.plugin.item", "workbuddy");
 			} catch (error) {
 				console.error("[dsh-connect-workbuddy] client card failed to load (host provider unaffected):", error);
 			}

package/lib/{host-heartbeat-SQNmYRNj.js → host-heartbeat-CH6_J1Ee.js}

@@ -2208,7 +2208,7 @@ var WorkBuddyCatalog = class {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "2.0.14";
+const WORKBUDDY_CONNECT_VERSION = "2.1.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -1390,6 +1390,20 @@ type WorkBuddyWebUsage =
  * value is never touched.
  */
 declare function unwrapVolatileDeep<T>(value: T): T;
+/**
+ * The plugin's DECLARED settings namespace — the fallback name, not the value
+ * the host necessarily serves.
+ *
+ * On 0.1.7 the settings service keys every form by the plugin's Loader entry id
+ * (`describe()` returns `ns: entry.options.id`), and the harness resolves a
+ * provider's namespace by EXACT match. The entry id is chosen by the profile
+ * patch, so a plugin cannot know it in advance — the live Desktop host mounts
+ * this one as `include:dsh-connect-workbuddy`.
+ *
+ * Lives here, not in the Host entry, because the browser half needs the same
+ * fallback and must not import Node-only host code.
+ */
+declare const WORKBUDDY_SETTINGS_NS: "workbuddy";
 //#endregion
 //#region src/web-status.d.ts
 /** Constructor dependencies. */
@@ -1458,8 +1472,30 @@ declare function registerWorkBuddyStatusRoute(ctx: Context, deps: WorkBuddyStatu
 declare const name = "dsh-connect-workbuddy";
 /** The model registry required before the provider can register. */
 declare const inject: string[];
-/** Settings namespace for the plugin configuration card. */
-declare const WORKBUDDY_SETTINGS_NS: SettingsNamespace;
+/**
+ * Settings namespace for the plugin configuration card.
+ *
+ * (历史注记：0.1.5 线上插件自选命名空间并经 `installSection` 注册；自
+ * 2.1.0 起只支持 0.1.7 线，该路径已移除。) 0.1.7 的 settings 服务自行推导
+ * 命名空间 —— `describe()` 返回 `ns: entry.options.id`，即 Loader 条目 id
+ * —— 因此插件不再能自选。此常量仅作为「宿主不暴露条目 id」时的回落值；
+ * 实际生效值来自 {@link settingsNamespaceOf}。
+ *
+ * 这个区分不是装饰性的。宿主按**精确匹配**查表
+ * （模型设置页的 `namespaces.get(entry.settingsNs)`），所以宣告
+ * `workbuddy` 而宿主实际服务 `include:dsh-connect-workbuddy` 时，provider
+ * 会被判为「未配置」：配置入口与模型发现双双静默失效。
+ */
+/**
+ * The namespace the HOST actually serves this plugin under.
+ *
+ * `ctx.fiber.entry` is added by the Loader, not by Cordis itself, so it is not
+ * in Cordis's public types and is absent on hosts that mount a plugin without a
+ * Loader entry (a test harness, or `ctx.plugin()` called directly). Hence the
+ * probe plus the documented fallback, mirroring the first-party plugins:
+ * `const settingsNs = ctx.fiber.entry?.options.id ?? NS`.
+ */
+declare function settingsNamespaceOf(ctx: unknown): SettingsNamespace;
 /** One region's model directory and the user's selection within it. */
 interface WorkBuddyRegionState {
   /**
@@ -1624,4 +1660,4 @@ declare function legacyAttributionRegion(value: Config, accountsFor: (region: Wo
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { CREDENTIAL_REJECTED_CODE, Config, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, type WorkBuddyCandidateFailure, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, type WorkBuddyCredentialRecovery, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, WorkBuddyEncryptedCredentialError, type WorkBuddyEncryptedField, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyProbeStore, type WorkBuddyReasoning, type WorkBuddyRecoveryCandidate, type WorkBuddyRefreshOutcome, WorkBuddyRegionState, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyUsabilityProbeOptions, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, name, nextRegionEnabled, nextRegionSlots, openEncryptedField, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, toPersistedWorkBuddyModel, unwrapVolatileDeep, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { CREDENTIAL_REJECTED_CODE, Config, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, type WorkBuddyCandidateFailure, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, type WorkBuddyCredentialRecovery, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, WorkBuddyEncryptedCredentialError, type WorkBuddyEncryptedField, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyProbeStore, type WorkBuddyReasoning, type WorkBuddyRecoveryCandidate, type WorkBuddyRefreshOutcome, WorkBuddyRegionState, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyUsabilityProbeOptions, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, name, nextRegionEnabled, nextRegionSlots, openEncryptedField, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as WorkBuddyCredentialRejectedError, B as clearAtRestKeyCache, C as hasEncryptedCredentialFields, D as workbuddyAccountId, E as parseWorkBuddyAuth, F as parseReasoning, G as isEncryptedFieldWrapper, H as deriveAtRestKeyId, I as parseUpstreamModel, J as macosNestedAppBundles, K as isWorkbuddyBundle, L as prepareChatBody, M as classifyUpstreamError, N as isCredentialRejectedError, O as workbuddyOwnAuthPath, P as parseCreditMultiplier, R as regionOf, S as defaultDesktopAuthPath, T as legacyWorkbuddyOwnAuthPath, U as fetchAtRestKeyPayload, V as deriveAtRestKey, W as findWorkbuddyAppExecutable, X as readAtRestKey, Y as openEncryptedField, Z as workbuddyAppExecutableCandidates, _ as WorkBuddyCredentialStore, a as readHostHeartbeat, b as defaultDesktopAuthCandidates, c as WORKBUDDY_CONNECT_VERSION, d as WorkBuddyCatalog, f as deriveCatalog, g as WORKBUDDY_AUTH_FILE_ENV, h as WORKBUDDY_AUTH_FILENAME, i as processStartTimeMs, j as WorkBuddyUpstreamClient, k as CREDENTIAL_REJECTED_CODE, l as FALLBACK_WORKBUDDY_MODELS, m as ENCRYPTED_CREDENTIAL_CODE, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as fallbackModelsFor, q as macosBundleExecutable, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, v as WorkBuddyEncryptedCredentialError, w as isEncryptedCredentialError, x as defaultDesktopAuthDirs, y as authFileName, z as WORKBUDDY_APP_EXECUTABLE_ENV } from "./host-heartbeat-SQNmYRNj.js";
+import { A as WorkBuddyCredentialRejectedError, B as clearAtRestKeyCache, C as hasEncryptedCredentialFields, D as workbuddyAccountId, E as parseWorkBuddyAuth, F as parseReasoning, G as isEncryptedFieldWrapper, H as deriveAtRestKeyId, I as parseUpstreamModel, J as macosNestedAppBundles, K as isWorkbuddyBundle, L as prepareChatBody, M as classifyUpstreamError, N as isCredentialRejectedError, O as workbuddyOwnAuthPath, P as parseCreditMultiplier, R as regionOf, S as defaultDesktopAuthPath, T as legacyWorkbuddyOwnAuthPath, U as fetchAtRestKeyPayload, V as deriveAtRestKey, W as findWorkbuddyAppExecutable, X as readAtRestKey, Y as openEncryptedField, Z as workbuddyAppExecutableCandidates, _ as WorkBuddyCredentialStore, a as readHostHeartbeat, b as defaultDesktopAuthCandidates, c as WORKBUDDY_CONNECT_VERSION, d as WorkBuddyCatalog, f as deriveCatalog, g as WORKBUDDY_AUTH_FILE_ENV, h as WORKBUDDY_AUTH_FILENAME, i as processStartTimeMs, j as WorkBuddyUpstreamClient, k as CREDENTIAL_REJECTED_CODE, l as FALLBACK_WORKBUDDY_MODELS, m as ENCRYPTED_CREDENTIAL_CODE, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as fallbackModelsFor, q as macosBundleExecutable, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, v as WorkBuddyEncryptedCredentialError, w as isEncryptedCredentialError, x as defaultDesktopAuthDirs, y as authFileName, z as WORKBUDDY_APP_EXECUTABLE_ENV } from "./host-heartbeat-CH6_J1Ee.js";
 import z from "@deepseek-ai/schemastery";
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { createProvider } from "@earendil-works/pi-ai";
@@ -656,6 +656,20 @@ function unwrapVolatileDeep(value) {
 	for (const key of Object.keys(source)) out[key] = unwrapVolatileDeep(source[key]);
 	return out;
 }
+/**
+* The plugin's DECLARED settings namespace — the fallback name, not the value
+* the host necessarily serves.
+*
+* On 0.1.7 the settings service keys every form by the plugin's Loader entry id
+* (`describe()` returns `ns: entry.options.id`), and the harness resolves a
+* provider's namespace by EXACT match. The entry id is chosen by the profile
+* patch, so a plugin cannot know it in advance — the live Desktop host mounts
+* this one as `include:dsh-connect-workbuddy`.
+*
+* Lives here, not in the Host entry, because the browser half needs the same
+* fallback and must not import Node-only host code.
+*/
+const WORKBUDDY_SETTINGS_NS = "workbuddy";
 //#endregion
 //#region src/web-status.ts
 /** Redact token-like content before it crosses to the browser. */
@@ -997,8 +1011,33 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 const name = "dsh-connect-workbuddy";
 /** The model registry required before the provider can register. */
 const inject = ["llm", "settings"];
-/** Settings namespace for the plugin configuration card. */
-const WORKBUDDY_SETTINGS_NS = "workbuddy";
+/**
+* Settings namespace for the plugin configuration card.
+*
+* (历史注记：0.1.5 线上插件自选命名空间并经 `installSection` 注册；自
+* 2.1.0 起只支持 0.1.7 线，该路径已移除。) 0.1.7 的 settings 服务自行推导
+* 命名空间 —— `describe()` 返回 `ns: entry.options.id`，即 Loader 条目 id
+* —— 因此插件不再能自选。此常量仅作为「宿主不暴露条目 id」时的回落值；
+* 实际生效值来自 {@link settingsNamespaceOf}。
+*
+* 这个区分不是装饰性的。宿主按**精确匹配**查表
+* （模型设置页的 `namespaces.get(entry.settingsNs)`），所以宣告
+* `workbuddy` 而宿主实际服务 `include:dsh-connect-workbuddy` 时，provider
+* 会被判为「未配置」：配置入口与模型发现双双静默失效。
+*/
+/**
+* The namespace the HOST actually serves this plugin under.
+*
+* `ctx.fiber.entry` is added by the Loader, not by Cordis itself, so it is not
+* in Cordis's public types and is absent on hosts that mount a plugin without a
+* Loader entry (a test harness, or `ctx.plugin()` called directly). Hence the
+* probe plus the documented fallback, mirroring the first-party plugins:
+* `const settingsNs = ctx.fiber.entry?.options.id ?? NS`.
+*/
+function settingsNamespaceOf(ctx) {
+	const id = ctx?.fiber?.entry?.options?.id;
+	return typeof id === "string" && id !== "" ? id : WORKBUDDY_SETTINGS_NS;
+}
 const modelConfig = z.object({
 	id: z.string().required(),
 	name: z.string().required(),
@@ -1171,6 +1210,7 @@ async function legacyAttributionRegion(value, accountsFor) {
 */
 function apply(ctx, config) {
 	const client = new WorkBuddyUpstreamClient();
+	const settingsNs = settingsNamespaceOf(ctx);
 	const stacks = {};
 	for (const region of REGION_KEYS) {
 		const authFile = unwrapVolatile(config.authFile);
@@ -1288,7 +1328,7 @@ function apply(ctx, config) {
 		registration.cn.directory?.replace(REGION_KEYS.filter((region) => regionEnabled(value, region)).map((region) => ({
 			provider: WORKBUDDY_PROVIDERS[region],
 			displayName: WORKBUDDY_PROVIDER_DISPLAY_NAMES[region],
-			settingsNs: WORKBUDDY_SETTINGS_NS,
+			settingsNs,
 			settingsPath: [],
 			declared: false
 		})));
@@ -1309,21 +1349,7 @@ function apply(ctx, config) {
 	}));
 	ctx.inject(["settings"], (sctx) => {
 		const settings = sctx.settings;
-		if (typeof settings.configure === "function") {
-			settings.configure({ auto: true }, ctx.fiber);
-			return;
-		}
-		if (typeof settings.installSection === "function") {
-			const entry = unwrapVolatileDeep(config);
-			settings.installSection(ctx, WORKBUDDY_SETTINGS_NS, Config, entry, {
-				setSource(source) {
-					current = source;
-				},
-				onChange() {
-					applySelection(current());
-				}
-			});
-		}
+		ctx.effect(() => settings.configure({ auto: true }, ctx.fiber));
 	});
 	ctx.on("loader/volatile-update", () => {
 		applySelection(current());
@@ -1367,13 +1393,13 @@ function apply(ctx, config) {
 				releaseDirectory = registration.cn.directory = ctx.llm.registerConfigurableProviders([{
 					provider: WORKBUDDY_PROVIDER,
 					displayName: WORKBUDDY_PROVIDER_DISPLAY_NAMES.cn,
-					settingsNs: WORKBUDDY_SETTINGS_NS,
+					settingsNs,
 					settingsPath: [],
 					declared: false
 				}, {
 					provider: WORKBUDDY_GLOBAL_PROVIDER,
 					displayName: WORKBUDDY_PROVIDER_DISPLAY_NAMES.global,
-					settingsNs: WORKBUDDY_SETTINGS_NS,
+					settingsNs,
 					settingsPath: [],
 					declared: false
 				}]);
@@ -1396,7 +1422,7 @@ function apply(ctx, config) {
 				releaseDirectory?.();
 			}
 			syncRegionRegistration(current());
-			ctx.llm.registerModelDiscovery(WORKBUDDY_SETTINGS_NS, async (request, signal) => {
+			ctx.llm.registerModelDiscovery(settingsNs, async (request, signal) => {
 				const region = regionOfProvider(request.provider ?? "");
 				if (region === void 0) return [];
 				if (!regionEnabled(current(), region)) return [];
@@ -1437,4 +1463,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { CREDENTIAL_REJECTED_CODE, Config, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, WorkBuddyEncryptedCredentialError, WorkBuddyUpstreamClient, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, name, nextRegionEnabled, nextRegionSlots, openEncryptedField, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, toPersistedWorkBuddyModel, unwrapVolatileDeep, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { CREDENTIAL_REJECTED_CODE, Config, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, WorkBuddyEncryptedCredentialError, WorkBuddyUpstreamClient, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, name, nextRegionEnabled, nextRegionSlots, openEncryptedField, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "Connect locally signed-in WorkBuddy models to DeepSeek Harness with a read-only credits overview and model management.",
-  "version": "2.0.14",
+  "version": "2.1.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",
@@ -23,6 +23,7 @@
   "bin": {
     "dsh-connect-workbuddy": "lib/bin.js"
   },
+  "icon": "icons/dsh-connect-workbuddy-128.png",
   "exports": {
     ".": {
       "types": "./lib/index.d.ts",
@@ -37,6 +38,7 @@
   },
   "files": [
     "lib",
+    "icons",
     "docs/assets",
     "screenshots.json",
     "cordis.patch.yml",
@@ -78,36 +80,36 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1-rc.1 <5.0.0 || >=4.0.2 <5.0.0",
-    "@deepseek-ai/dsh-atomic-write": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-attachment": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-home-paths": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-llm": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-settings": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-atomic-write": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-attachment": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-home-paths": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-llm": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-settings": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.7-rc.1 <0.2.0",
     "@deepseek-ai/schemastery": ">=3.18.1-rc.1 <4.0.0 || >=3.18.2 <4.0.0",
     "@earendil-works/pi-ai": ">=0.85.0 <0.86.0",
     "react": "^18.2.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1 <5.0.0 || >=4.0.2 <5.0.0",
-    "@deepseek-ai/dsh-atomic-write": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-attachment": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-home-paths": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-llm": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-settings": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-atomic-write": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-attachment": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-home-paths": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-llm": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-settings": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.7-rc.1 <0.2.0",
     "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.5-rc.1 <0.2.0 || >=0.1.2-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.7-rc.1 <0.2.0",
     "@deepseek-ai/schemastery": ">=3.18.1 <4.0.0 || >=3.18.2 <4.0.0",
     "@earendil-works/pi-ai": ">=0.85.0 <0.86.0",
     "react": "^18.3.1",