dsh-connect-workbuddy 2.0.2 → 2.0.4

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## 2.0.4 (2026-09-21)
+
+### Fixes
+
+- **修复「保存的账号在本机消失后，界面自相矛盾」**（issue #10 的缺陷 3；其症状属实，但其声称的机制与严重性不准确）。显式选择的账号若在本机不再存在（WorkBuddy 更换登录或清理备份文件——`current()` 的注释早已点名这个成因），同一个状态下四条读取路径给出两种说法：
+
+  | 路径 | 修复前 | 修复后 |
+  |---|---|---|
+  | `accounts()` | 靠对象同一性比较**仍标记一个账号为 selected** | 无人生效时不标记任何行 |
+  | `current()` | 返回 `undefined`（拒绝计费，刻意不回退） | 不变（账单安全语义保留） |
+  | `status()` | `signed-out` | 不变 |
+  | 卡片下拉框 | `value` 取 signed-in 分支才有的 `accountId` → `''` → **空白**（选项仍在） | 显示「当前没有生效的账号」占位项 |
+
+  - **根因**：`accounts()` 与 `current()` 对「id 失配」的口径不一致。卡片渲染前者、计费走后者，于是面板同时出现「下拉框选中 Alpha」「状态栏未登录」「提示去桌面端登录一次」——而用户明明已登录，那句提示还把人指向唯一无法修复该问题的操作。commit `1279234` 移除 `current()` 的回退（`?? this.preferred()`）以避免账单落到别的账号，本修复保留该决定，只消除显示层矛盾。
+  - **`accounts()` 不再报告幽灵选中**：显式选择失配时不再回退到对象同一性比较（原写法依赖 `preferred()` 返回同一数组元素，能工作但语义脆弱）；未显式选择时仍如实标出正在跟随的默认账号。
+  - **新增 `selectionLost`**：usage 文档的 `signed-out` 分支新增该可选字段，区分「保存的选择已失效（凭据是好的，请重选或清除）」与「本机确实没有登录（去桌面端登录）」。仅前者为真时才显示新的说明文案，后者保留原文案。
+  - **卡片下拉框改从账号列表取选中值**（原先取 signed-in 文档的 `accountId`）。这是同一类问题的第二处：当保存的账号**仍然有效**、只是 token 过期且刷新失败时，`resolve()` 同样抛错，下拉框也会变空白——用户的完整选择看起来像消失了。现在由账号列表这一个来源决定，并以此区分「没有任何账号生效」与「已登录」。
+  - **新增「跟随 App 当前登录」按钮**：清除该区域的显式选择，回到文档承诺的默认行为。清除写入空字符串哨兵值，`selectAccount('')` 归一化为 `undefined`；此前空字符串会像任何失配 id 一样永久卡死（即「没有清除路径」）。
+  - **`rescanAccounts()` 不再写入选中的账号**：原先只要 `accounts()` 报告的选中项与保存值不同就回写设置，导致两点危害——无显式选择时把「跟随 App 登录」的默认行为固化成一个永久绑定（此后 App 换登录不再跟随，与 `README`/`DESIGN` 承诺不符），以及保存的 id 失配时静默把区域改绑到**另一个账号**（正是严格不回退规则要防的静默改选）。「重新检测」现在只重读，选择权归下拉框与清除按钮。
+
+### Tests
+
+测试总数 131 → 142（新增 11 例）：
+
+- `auth.spec.ts` 新增 7 例：失配选择不标记任何账号、未显式选择仍标出默认账号、有效选择在刷新失败时保持可见、`selectionLost` 的三种取值（无选择/有效选择/失配）、无本机登录时不报 `selectionLost`、空字符串哨兵恢复默认、以及区域隔离（一个区域失配不影响另一区域）。
+- `web-status.spec.ts` 新增 3 例：orphaned 选择标记 `selectionLost` 且保留账号列表、真正的未登录不标记、signed-in 文档不含该字段。
+- `settings-integration.spec.ts` 新增 1 例：空字符串哨兵经真实的 `settings.update` 链路写入后仍为 `''`，且两个 provider 继续正常服务。
+
+### Docs
+
+- `README.md` / `README.en.md` 的「已知限制 / Known limitations」补充账号失效后的表现与恢复方式，并说明重新登录桌面端无法修复该状态。
+
 ## 2.0.2 (2026-09-15)
 
 ### Fixes

package/README.en.md

@@ -115,6 +115,7 @@ Marketplace screenshots and GitHub README badges are two separate mechanisms:
 
 - The plugin depends on WorkBuddy client endpoints (not an official public API), so a WorkBuddy update may require adjustments.
 - **Account switching** relies on the historical auth files the WorkBuddy desktop app leaves behind (the app's own backups), not an official multi-account API. Following the app's current sign-in remains the default; switching is an explicit opt-in, and historical credentials can be invalidated by the app's cleanup or sign-out.
+  - If an explicitly selected account disappears locally (the app replaced its login or cleaned up its backups), the plugin does **not** silently switch to another account — that would bill a different account. The card says the saved account no longer exists; pick an account again, or use "Follow the app's sign-in" to clear the saved choice. **Signing in again in the desktop app will not fix this**: the credentials are fine, it is the saved account id that no longer matches.
 - Windows and Linux credential paths are derived from platform conventions and are not verified on real hardware; set `WORKBUDDY_AUTH_FILE` if yours lives elsewhere.
 
 ## Disclaimer

package/README.md

@@ -123,6 +123,7 @@ dsh plugin --profile desktop add /Users/dmh2002/DshProject/dsh-connect-workbuddy
 
 - 依赖 WorkBuddy 客户端接口（非官方开放 API），WorkBuddy 更新后插件可能需要随之调整。
 - **账号切换**基于 WorkBuddy 桌面端留下的历史 auth 文件（App 自身的备份产物），并非官方多账号 API。默认行为仍是跟随 App 当前登录；切换账号是显式选项，且历史凭据可能因 App 清理或退出登录而失效。
+  - 显式选择的账号若在本机消失（App 更换登录或清理备份文件），插件**不会**静默改选其他账号——那样会让账单落到另一个账号上。卡片会明确说明「保存的账号已不存在」，此时重新选择一个账号，或点「跟随 App 当前登录」清除该选择即可恢复。**重新登录桌面端 App 无法修复这种状态**：凭据本身是好的，失效的只是保存下来的账号标识。
 - Windows / Linux 的凭据默认路径为按平台约定推导，未经真机验证；必要时可通过环境变量 `WORKBUDDY_AUTH_FILE` 指定实际位置。
 
 ## 免责声明

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { T as WorkBuddyUpstreamClient, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, g as WorkBuddyCredentialStore, h as WORKBUDDY_AUTH_FILE_ENV, l as FALLBACK_WORKBUDDY_MODELS, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, v as defaultDesktopAuthCandidates, w as workbuddyOwnAuthPath, x as legacyWorkbuddyOwnAuthPath, y as defaultDesktopAuthDirs } from "./host-heartbeat-CaS5Koaw.js";
+import { T as WorkBuddyUpstreamClient, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, g as WorkBuddyCredentialStore, h as WORKBUDDY_AUTH_FILE_ENV, l as FALLBACK_WORKBUDDY_MODELS, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, v as defaultDesktopAuthCandidates, w as workbuddyOwnAuthPath, x as legacyWorkbuddyOwnAuthPath, y as defaultDesktopAuthDirs } from "./host-heartbeat-CPIHUxKL.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -356,6 +356,19 @@ window.__ModuleLoader__.load({
 				refreshUsage,
 				status.status
 			]);
+			/**
+			* Re-detect the local sign-ins and refresh the panel.
+			*
+			* This deliberately writes NO account selection. It used to persist whatever
+			* row the store reported as "selected" whenever that differed from the saved
+			* value, which had two harmful effects: with no explicit choice it turned the
+			* documented default (follow the app's current sign-in) into a permanent
+			* explicit binding — so a later sign-in in the app was no longer followed —
+			* and with an orphaned saved id it silently re-bound the region to a
+			* different account, which is the silent switch that the strict
+			* no-fallback rule exists to prevent. Re-detecting and re-picking are
+			* separate actions now; the picker and Clear button own the selection.
+			*/
 			const rescanAccounts = async () => {
 				setBusy(true);
 				try {
@@ -366,13 +379,6 @@ window.__ModuleLoader__.load({
 					});
 					const body = await response.json();
 					if (!response.ok || !Array.isArray(body.accounts)) throw new Error(`HTTP ${response.status}`);
-					const selected = body.accounts.find((account) => account.selected)?.id;
-					const configuredAccounts = configuredAccountsOf(settingsScope?.getSnapshot().value);
-					const configuredId = configuredAccounts[activeRegion];
-					if (selected !== void 0 && selected !== configuredId && settingsScope?.getSnapshot().writable === true) await settingsScope.set("accounts", {
-						...configuredAccounts,
-						[activeRegion]: selected
-					});
 					await refreshUsage(activeRegion);
 				} finally {
 					if (mounted.current) setBusy(false);
@@ -392,6 +398,26 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setSwitchingAccount(false);
 				}
 			};
+			/**
+			* Drop the explicit choice so the region returns to its documented default:
+			* follow whatever the WorkBuddy app is currently signed in as. The empty
+			* string is the settings-level sentinel for "no explicit selection" (the
+			* store normalizes it away); the account id itself is never written here.
+			*/
+			const clearAccount = async () => {
+				if (settingsScope === void 0) return;
+				setSwitchingAccount(true);
+				try {
+					const configuredAccounts = configuredAccountsOf(settingsScope.getSnapshot().value);
+					await settingsScope.set("accounts", {
+						...configuredAccounts,
+						[activeRegion]: ""
+					});
+					await refreshUsage(activeRegion);
+				} finally {
+					if (mounted.current) setSwitchingAccount(false);
+				}
+			};
 			const claimDailyCheckin = async () => {
 				setCheckingIn(true);
 				setCheckinActionError(void 0);
@@ -536,6 +562,8 @@ window.__ModuleLoader__.load({
 			};
 			const title = t("row.title");
 			const label = status.status === "signed-in" ? t("row.signedIn", { accountName: status.accountName }) : status.status === "error" ? t("row.requestFailed") : t("row.signedOut");
+			/** The saved choice no longer matches a local sign-in (tokens are fine). */
+			const selectionLost = status.status === "signed-out" && status.selectionLost === true;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				className: `dsm-plugin-card${open ? " dsm-plugin-card-open" : ""}`,
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
@@ -621,6 +649,10 @@ window.__ModuleLoader__.load({
 										status.status === "error" || status.status === "signed-in" && status.creditsError !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 											className: "dsm-workbuddy-usage-hint",
 											children: t("row.reloginHint")
+										}) : null,
+										selectionLost ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											className: "dsm-workbuddy-usage-hint",
+											children: t("row.selectionLostHint")
 										}) : null
 									]
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
@@ -633,24 +665,36 @@ window.__ModuleLoader__.load({
 									children: busy ? t("row.accountsScanning") : t("row.accountsRescan")
 								})]
 							}),
-							status.status !== "error" && status.accounts.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
+							status.status !== "error" && status.accounts.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 								className: "dsm-workbuddy-account-picker",
 								"aria-label": t("row.accountsTitle"),
-								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 									className: "dsm-workbuddy-usage-select-wrap",
-									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
+									children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
 										className: "dsm-workbuddy-usage-select",
-										value: status.status === "signed-in" ? status.accountId : "",
+										value: status.accounts.find((account) => account.selected)?.id ?? "",
 										disabled: switchingAccount || settingsScope?.getSnapshot().writable !== true,
 										onChange: (event) => {
 											switchAccount(event.currentTarget.value);
 										},
-										children: status.accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("option", {
+										children: [status.accounts.some((account) => account.selected) ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+											value: "",
+											disabled: true,
+											children: t("row.accountNoneInEffect")
+										}), status.accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("option", {
 											value: account.id,
 											children: [account.accountName, account.domain === "" ? "" : ` · ${account.domain}`]
-										}, account.id))
+										}, account.id))]
 									})
-								})
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsm-btn dsm-btn-outline",
+									disabled: switchingAccount || settingsScope?.getSnapshot().writable !== true,
+									onClick: () => {
+										clearAccount();
+									},
+									children: t("row.accountsFollowApp")
+								})]
 							}) : null,
 							status.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 								status.credits === void 0 ? null : (() => {
@@ -876,7 +920,7 @@ window.__ModuleLoader__.load({
 							] }) : null,
 							status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-workbuddy-usage-text",
-								children: status.message ?? t("row.signedOutHint")
+								children: selectionLost ? t("row.selectionLostMessage") : status.message ?? t("row.signedOutHint")
 							}) : null,
 							status.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-workbuddy-usage-error",
@@ -929,6 +973,10 @@ window.__ModuleLoader__.load({
 			"row.accountsHint": "Choose from locally detected sign-ins. Tokens are never shown or saved in DSH settings.",
 			"row.accountsRescan": "Detect accounts again",
 			"row.accountsScanning": "Detecting…",
+			"row.accountsFollowApp": "Follow the app's sign-in",
+			"row.accountNoneInEffect": "No account in effect",
+			"row.selectionLostHint": "The saved account no longer exists locally.",
+			"row.selectionLostMessage": "The account saved for this region is no longer among the local sign-ins (WorkBuddy replaced its login or cleaned up backups). Your other sign-ins are fine — pick one above, or choose \"Follow the app's sign-in\" to clear the saved choice. Signing in again in the desktop app will not fix this.",
 			"row.modelsTitle": "Models",
 			"row.modelsSummary": "{count} enabled",
 			"row.modelsRefresh": "Refresh from WorkBuddy",
@@ -977,6 +1025,10 @@ window.__ModuleLoader__.load({
 			"row.accountsHint": "选择本机检测到的登录账号；Token 不会显示，也不会保存到 DSH 设置。",
 			"row.accountsRescan": "重新检测账号",
 			"row.accountsScanning": "正在检测…",
+			"row.accountsFollowApp": "跟随 App 当前登录",
+			"row.accountNoneInEffect": "当前没有生效的账号",
+			"row.selectionLostHint": "已保存的账号在本机已不存在。",
+			"row.selectionLostMessage": "该区域保存的账号已不在本机登录列表中（WorkBuddy 更换了登录或清理了备份文件）。本机其他登录仍然可用——请在上方选择一个，或点「跟随 App 当前登录」清除已保存的选择。重新登录桌面端 App 无法修复此问题。",
 			"row.modelsTitle": "模型",
 			"row.modelsSummary": "已启用 {count} 个",
 			"row.modelsRefresh": "从 WorkBuddy 刷新",

package/lib/{host-heartbeat-CaS5Koaw.js → host-heartbeat-CPIHUxKL.js}

@@ -271,13 +271,56 @@ function parseCreditMultiplier(value) {
 	const parsed = Number(match[1]);
 	return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
 }
-/** Parse the upstream's `reasoning` object; unknown shapes degrade to `{}`. */
+/**
+* The effort vocabulary the upstream's plural-form payloads declare across both
+* gateways (live union of every `supportedEfforts` list seen; `minimal` has
+* never appeared). Both gateways also accept every level in it on
+* singular-form models — medium/xhigh fold into high, low/max answer with
+* their own budgets — so the singular `effort` value is a DEFAULT, never the
+* model's only level.
+*/
+const SINGULAR_EFFORT_LADDER = [
+	"low",
+	"medium",
+	"high",
+	"xhigh",
+	"max"
+];
+/**
+* The singular spelling of reasoning metadata: `effort` (plus the ignored
+* `summary`) and none of the plural-form fields. Observed on CN
+* `deepseek-v4.1-flash`/`kimi-k3-1`/`glm-5.2`… and global
+* `deepseek-v4.1-flash`/`kimi-k3`/`gemini-3.5-flash`… (issue #7).
+*/
+function isSingularEffortForm(raw) {
+	return typeof raw["effort"] === "string" && !Array.isArray(raw["supportedEfforts"]) && typeof raw["defaultEffort"] !== "string" && typeof raw["canDisableThinking"] !== "boolean";
+}
+/**
+* Fold a singular-form `effort` into the plural shape the rest of the plugin
+* already understands. Live probes on both gateways (issue #7) show these
+* models answer with distinct `reasoning_content` across the whole ladder —
+* and think NOT AT ALL when no `reasoning_effort` is sent — so the fold
+* widens `supportedEfforts` and carries the declared value into
+* `defaultEffort`. An unrecognized `effort` value passes through as the lone
+* level, leaving its fate to the adapter's known-level filter.
+*/
+function singularEffortLadder(raw) {
+	const effort = typeof raw["effort"] === "string" ? raw["effort"] : void 0;
+	if (effort === void 0) return void 0;
+	return SINGULAR_EFFORT_LADDER.includes(effort) ? [...SINGULAR_EFFORT_LADDER] : [effort];
+}
+/**
+* Parse the upstream's `reasoning` object; unknown shapes degrade to `{}`.
+* Both spellings normalize here: the plural form passes through as declared,
+* and the singular `effort` form folds via {@link singularEffortLadder}.
+*/
 function parseReasoning(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
 	const raw = value;
-	const supportedEfforts = Array.isArray(raw["supportedEfforts"]) ? raw["supportedEfforts"].filter((effort) => typeof effort === "string") : void 0;
-	const defaultEffort = typeof raw["defaultEffort"] === "string" ? raw["defaultEffort"] : void 0;
-	const canDisableThinking = typeof raw["canDisableThinking"] === "boolean" ? raw["canDisableThinking"] : void 0;
+	const effort = typeof raw["effort"] === "string" ? raw["effort"] : void 0;
+	const supportedEfforts = Array.isArray(raw["supportedEfforts"]) ? raw["supportedEfforts"].filter((entry) => typeof entry === "string") : singularEffortLadder(raw);
+	const defaultEffort = typeof raw["defaultEffort"] === "string" ? raw["defaultEffort"] : effort;
+	const canDisableThinking = typeof raw["canDisableThinking"] === "boolean" ? raw["canDisableThinking"] : isSingularEffortForm(raw) ? true : void 0;
 	if (supportedEfforts === void 0 && defaultEffort === void 0 && canDisableThinking === void 0) return;
 	return {
 		...supportedEfforts === void 0 || supportedEfforts.length === 0 ? {} : { supportedEfforts },
@@ -871,9 +914,17 @@ var WorkBuddyCredentialStore = class {
 		this.desktopPathOverride = path;
 		this.inflight = void 0;
 	}
-	/** Select an account by id; tokens stay outside settings. */
+	/**
+	* Select an account by id; tokens stay outside settings.
+	*
+	* The empty string is the settings-level sentinel for "no explicit
+	* selection" (the card's Clear action writes it), so it is normalized here
+	* rather than being kept as an id that can never match an account. Every
+	* caller therefore gets the documented default — follow the app's current
+	* sign-in — instead of a dead selection.
+	*/
 	selectAccount(accountId) {
-		this.accountId = accountId;
+		this.accountId = accountId === "" ? void 0 : accountId;
 		this.inflight = void 0;
 	}
 	/** Selected account id, for diagnostics and route assembly. */
@@ -971,11 +1022,25 @@ var WorkBuddyCredentialStore = class {
 		if (credentials.length === 0) return void 0;
 		return credentials.reduce((best, credential) => isFresher(credential, best) ? credential : best);
 	}
-	/** Token-free account list for the plugin card. */
+	/**
+	* Token-free account list for the plugin card.
+	*
+	* `selected` answers one question only: which row is the account the plugin
+	* is actually going to use? That is exactly what {@link current} decides, so
+	* the two must never disagree — the card renders this list while the shim
+	* bills through `current()`, and a row marked "selected" that `current()`
+	* refuses to use is what made the dropdown look healthy while every request
+	* failed with 401.
+	*
+	* So an explicit selection that matches NO local account marks nothing as
+	* selected (no silent fallback to a different account — see {@link current}).
+	* The implicit default is marked only when nothing was explicitly chosen.
+	*/
 	async accounts() {
 		const credentials = await this.readAll();
 		if (credentials.length === 0) return [];
-		const selectedExists = this.accountId !== void 0 && credentials.some((credential) => workbuddyAccountId(credential) === this.accountId);
+		const hasExplicitSelection = this.accountId !== void 0;
+		const selectedExists = hasExplicitSelection && credentials.some((credential) => workbuddyAccountId(credential) === this.accountId);
 		const defaultSelected = this.preferred(credentials);
 		return credentials.map((credential) => {
 			const id = workbuddyAccountId(credential);
@@ -987,10 +1052,26 @@ var WorkBuddyCredentialStore = class {
 				source: credential.source,
 				tokenExpiresAtMs: credential.expiresAtMs,
 				filePath: credential.filePath,
-				selected: selectedExists ? id === this.accountId : credential === defaultSelected
+				selected: selectedExists ? id === this.accountId : !hasExplicitSelection && credential === defaultSelected
 			};
 		});
 	}
+	/**
+	* Whether a persisted selection exists that matches no local account, while
+	* other local sign-ins ARE available to choose from.
+	*
+	* The card uses this to explain the state honestly (the account is signed in,
+	* but the SAVED choice is gone) instead of showing the generic "sign in
+	* again" hint, which misdirects: the token is usually perfectly healthy and
+	* signing in again does not repair an orphaned id. When no local sign-in is
+	* available at all, that hint IS accurate and this returns false.
+	*/
+	async selectionLost() {
+		if (this.accountId === void 0) return false;
+		const credentials = await this.readAll();
+		if (credentials.length === 0) return false;
+		return !credentials.some((credential) => workbuddyAccountId(credential) === this.accountId);
+	}
 	/** The freshest stored credential for the current selection, no refresh. */
 	async current() {
 		const credentials = await this.readAll();
@@ -1370,7 +1451,7 @@ var WorkBuddyCatalog = class {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "2.0.2";
+const WORKBUDDY_CONNECT_VERSION = "2.0.4";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -175,7 +175,15 @@ declare class WorkBuddyCredentialStore {
   private ownCandidates;
   /** Repoint the desktop file or directory; applies on the next read. */
   setDesktopPath(path: string | undefined): void;
-  /** Select an account by id; tokens stay outside settings. */
+  /**
+   * Select an account by id; tokens stay outside settings.
+   *
+   * The empty string is the settings-level sentinel for "no explicit
+   * selection" (the card's Clear action writes it), so it is normalized here
+   * rather than being kept as an id that can never match an account. Every
+   * caller therefore gets the documented default — follow the app's current
+   * sign-in — instead of a dead selection.
+   */
   selectAccount(accountId: string | undefined): void;
   /** Selected account id, for diagnostics and route assembly. */
   selectedAccountId(): string | undefined;
@@ -215,8 +223,32 @@ declare class WorkBuddyCredentialStore {
    * remaining credit.
    */
   private preferred;
-  /** Token-free account list for the plugin card. */
+  /**
+   * Token-free account list for the plugin card.
+   *
+   * `selected` answers one question only: which row is the account the plugin
+   * is actually going to use? That is exactly what {@link current} decides, so
+   * the two must never disagree — the card renders this list while the shim
+   * bills through `current()`, and a row marked "selected" that `current()`
+   * refuses to use is what made the dropdown look healthy while every request
+   * failed with 401.
+   *
+   * So an explicit selection that matches NO local account marks nothing as
+   * selected (no silent fallback to a different account — see {@link current}).
+   * The implicit default is marked only when nothing was explicitly chosen.
+   */
   accounts(): Promise<WorkBuddyAccountChoice[]>;
+  /**
+   * Whether a persisted selection exists that matches no local account, while
+   * other local sign-ins ARE available to choose from.
+   *
+   * The card uses this to explain the state honestly (the account is signed in,
+   * but the SAVED choice is gone) instead of showing the generic "sign in
+   * again" hint, which misdirects: the token is usually perfectly healthy and
+   * signing in again does not repair an orphaned id. When no local sign-in is
+   * available at all, that hint IS accurate and this returns false.
+   */
+  selectionLost(): Promise<boolean>;
   /** The freshest stored credential for the current selection, no refresh. */
   current(): Promise<WorkBuddyCredential | undefined>;
   /** The credential to send upstream: {@link current}, refreshed on demand. */
@@ -360,7 +392,11 @@ declare function prepareChatBody(source: string): string;
  * card simply omits the rate instead of displaying a fabricated one.
  */
 declare function parseCreditMultiplier(value: unknown): number | undefined;
-/** Parse the upstream's `reasoning` object; unknown shapes degrade to `{}`. */
+/**
+ * Parse the upstream's `reasoning` object; unknown shapes degrade to `{}`.
+ * Both spellings normalize here: the plural form passes through as declared,
+ * and the singular `effort` form folds via {@link singularEffortLadder}.
+ */
 declare function parseReasoning(value: unknown): WorkBuddyReasoning | undefined;
 /** Parse one catalog entry; entries without usable token limits are dropped. */
 declare function parseUpstreamModel(value: unknown): WorkBuddyUpstreamModel | undefined;
@@ -721,10 +757,22 @@ type WorkBuddyWebPackage = WorkBuddyWebCreditPackage;
  */
 type WorkBuddyWebRegion = 'cn' | 'global';
 /** The JSON document the plugin card renders. */
-type WorkBuddyWebUsage = {
+type WorkBuddyWebUsage =
+/**
+ * Not usable right now. `accounts` is still populated so the picker can
+ * offer a way out, and `selectionLost` separates the two very different
+ * reasons this happens: local sign-ins exist but the SAVED choice no longer
+ * matches any of them (re-select it, or clear it to follow the app's current
+ * sign-in again), versus nothing usable was found at all (sign in in the
+ * desktop app). Only the latter makes the "sign in again" hint truthful —
+ * re-signing in does not repair an orphaned id.
+ */
+{
   status: 'signed-out';
   accounts: readonly WorkBuddyWebAccount[];
   message?: string;
+  /** The persisted account id matches no local account. */
+  selectionLost?: boolean;
 } | {
   status: 'signed-in';
   accountId: string;

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as prepareChatBody, C as workbuddyAccountId, D as parseCreditMultiplier, E as classifyUpstreamError, O as parseReasoning, S as parseWorkBuddyAuth, T as WorkBuddyUpstreamClient, _ as authFileName, a as readHostHeartbeat, b as defaultDesktopAuthPath, c as WORKBUDDY_CONNECT_VERSION, d as WorkBuddyCatalog, f as deriveCatalog, g as WorkBuddyCredentialStore, h as WORKBUDDY_AUTH_FILE_ENV, i as processStartTimeMs, j as regionOf, k as parseUpstreamModel, l as FALLBACK_WORKBUDDY_MODELS, m as WORKBUDDY_AUTH_FILENAME, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as fallbackModelsFor, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, v as defaultDesktopAuthCandidates, w as workbuddyOwnAuthPath, x as legacyWorkbuddyOwnAuthPath, y as defaultDesktopAuthDirs } from "./host-heartbeat-CaS5Koaw.js";
+import { A as prepareChatBody, C as workbuddyAccountId, D as parseCreditMultiplier, E as classifyUpstreamError, O as parseReasoning, S as parseWorkBuddyAuth, T as WorkBuddyUpstreamClient, _ as authFileName, a as readHostHeartbeat, b as defaultDesktopAuthPath, c as WORKBUDDY_CONNECT_VERSION, d as WorkBuddyCatalog, f as deriveCatalog, g as WorkBuddyCredentialStore, h as WORKBUDDY_AUTH_FILE_ENV, i as processStartTimeMs, j as regionOf, k as parseUpstreamModel, l as FALLBACK_WORKBUDDY_MODELS, m as WORKBUDDY_AUTH_FILENAME, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as fallbackModelsFor, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS_GLOBAL, v as defaultDesktopAuthCandidates, w as workbuddyOwnAuthPath, x as legacyWorkbuddyOwnAuthPath, y as defaultDesktopAuthDirs } from "./host-heartbeat-CPIHUxKL.js";
 import z from "@deepseek-ai/schemastery";
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { createProvider } from "@earendil-works/pi-ai";
@@ -572,7 +572,8 @@ async function workBuddyWebStatus(deps, region) {
 		return {
 			status: "signed-out",
 			accounts: accounts.map(toWebAccount),
-			message: safeMessage(error)
+			message: safeMessage(error),
+			...await store.selectionLost() ? { selectionLost: true } : {}
 		};
 	}
 	const account = {

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "Connect locally signed-in WorkBuddy models to DeepSeek Harness with a read-only credits overview and model management.",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",