dsh-connect-workbuddy 2.0.6 → 2.0.11

package/lib/client.js

@@ -41,6 +41,69 @@ window.__ModuleLoader__.load({
 			return `${path}?${WORKBUDDY_REGION_PARAM}=${region}`;
 		}
 		/**
+		* Narrow a settings value to the `regions` map. Accepts EITHER the whole
+		* settings section (the Host's resolved `Config`) OR the `regions` map itself,
+		* and unwraps the former. This tolerance is deliberate: passing the whole
+		* section where the map was expected was a real shipped bug in the sibling
+		* project — the lookup then read `section['cn']` (absent), so the card's
+		* checkbox reported `true` forever and clicking it appeared to do nothing even
+		* though the write succeeded.
+		*/
+		function regionsMapOf(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return {};
+			const record = value;
+			const nested = record["regions"];
+			if (typeof nested === "object" && nested !== null && !Array.isArray(nested)) return nested;
+			return record;
+		}
+		/** One region's stored slot as a plain object; any other shape reads as empty. */
+		function regionSlotOf(value, region) {
+			const slot = regionsMapOf(value)[region];
+			return typeof slot === "object" && slot !== null && !Array.isArray(slot) ? slot : {};
+		}
+		/**
+		* Whether one region's provider is switched on. Opt-out semantics: only an
+		* explicit `false` disables it, so a config written before this switch existed
+		* (and the pre-region-split flat fields, which never carry `enabled`) keep both
+		* providers running exactly as before. The Host reads the same rule through
+		* `regionStateOf`, so card and Host can never disagree about a region's state.
+		*
+		* `value` may be the whole settings section or the `regions` map (see
+		* {@link regionsMapOf}).
+		*/
+		function regionEnabledOf(value, region) {
+			return regionSlotOf(value, region)["enabled"] !== false;
+		}
+		/** Build the next `regions` settings value for a signed-in tab's save. */
+		function nextRegionSlots(regions, region, slot) {
+			return {
+				...typeof regions === "object" && regions !== null && !Array.isArray(regions) ? regions : {},
+				[region]: slot
+			};
+		}
+		/**
+		* Build the next `regions` settings value for a provider on/off toggle. ONLY
+		* the target region's `enabled` flag changes: every other field of that slot
+		* (its directory, selection, image opt-ins, context budgets) and every other
+		* region's slot are carried over verbatim, so switching a provider off never
+		* discards the user's model picks and switching it back on restores them.
+		*
+		* This is deliberately separate from {@link nextRegionSlots}: that helper
+		* writes a whole slot from a signed-in tab's draft, while this one must work
+		* for a region that is signed OUT — which is precisely the region a user wants
+		* to switch off (no international install, no international account).
+		*
+		* `value` may be the whole settings section or the `regions` map; the RETURN
+		* value is always the `regions` map, i.e. exactly what `settingsScope.set(
+		* 'regions', ...)` needs.
+		*/
+		function nextRegionEnabled(value, region, enabled) {
+			return nextRegionSlots(regionsMapOf(value), region, {
+				...regionSlotOf(value, region),
+				enabled
+			});
+		}
+		/**
 		* Project one card row into its persisted `lastCatalog` shape: the native
 		* context window becomes the stored `contextWindow`, and the card-only
 		* presentation fields (`nativeContextWindow`, `multimodal`) are removed BY
@@ -199,6 +262,12 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-tab:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
 .dsm-workbuddy-tab-active{color:var(--dsw-alias-label-primary,#e6e6e6);background:var(--dsw-alias-bg-layer-2,#232529);box-shadow:inset 0 0 0 1px var(--dsw-alias-border-l2,#3a3d45)}
 .dsm-workbuddy-tab-dot{display:inline-block;width:7px;height:7px;border-radius:50%;margin-right:6px;vertical-align:baseline}
+.dsm-workbuddy-tab-cell{display:flex;align-items:center;gap:2px;flex:1;min-width:0}
+.dsm-workbuddy-tab-switch{display:inline-flex;align-items:center;flex:none;padding:0 8px 0 2px;cursor:pointer}
+.dsm-workbuddy-tab-switch input{margin:0;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
+.dsm-workbuddy-tab-switch input:disabled{opacity:.4;cursor:default}
+.dsm-workbuddy-tab-off{opacity:.55}
+.dsm-workbuddy-tab-off-notice{color:var(--dsw-alias-label-tertiary,#999);font-size:12px;line-height:18px;margin:0 0 4px;padding:8px 10px;background:var(--dsw-alias-bg-layer-3,#2a2c33);border:1px solid var(--dsw-alias-border-l2,#36373b);border-radius:8px}
 .dsm-workbuddy-usage-account{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:12px 14px;border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:14px;background:var(--dsw-alias-bg-layer-2,#24262c)}
 .dsm-workbuddy-usage-account-copy{display:flex;flex-direction:column;gap:3px;min-width:0}
 .dsm-workbuddy-usage-expiry{padding-left:19px;color:var(--dsw-alias-label-tertiary,#9aa0a8);font-size:12px;line-height:18px}
@@ -213,6 +282,17 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-usage-select:disabled{opacity:.6;cursor:default}
 .dsm-workbuddy-usage-select-wrap::after{content:"";position:absolute;top:50%;right:12px;width:7px;height:7px;transform:translateY(-65%) rotate(45deg);border-right:1.6px solid var(--dsw-alias-label-secondary,#c6c9d0);border-bottom:1.6px solid var(--dsw-alias-label-secondary,#c6c9d0);pointer-events:none}
 .dsm-workbuddy-usage-text{margin:0;font-size:14px;line-height:22px;color:var(--dsw-alias-label-secondary,#b8b8b8)}
+.dsm-workbuddy-searched{margin-top:8px;font-size:12px;line-height:18px;color:var(--dsw-alias-label-tertiary,#999)}
+.dsm-workbuddy-searched>summary{cursor:pointer;color:var(--dsw-alias-label-secondary,#b8b8b8);user-select:none}
+.dsm-workbuddy-searched-hint{margin:6px 0 4px;color:var(--dsw-alias-label-tertiary,#999)}
+.dsm-workbuddy-searched-list{margin:0;padding:0;list-style:none;display:flex;flex-direction:column;gap:4px}
+.dsm-workbuddy-searched-list li{display:flex;flex-direction:column;gap:1px;min-width:0}
+.dsm-workbuddy-searched-list code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;line-height:16px;color:var(--dsw-alias-label-secondary,#b8b8b8);word-break:break-all}
+.dsm-workbuddy-searched-reason{color:var(--dsw-alias-label-tertiary,#999);font-size:11px}
+.dsm-workbuddy-searched-reason-encrypted{color:var(--dsw-alias-state-warning-primary,#e0a13a)}
+.dsm-workbuddy-searched-reason-wrong-region{color:var(--dsw-alias-brand-primary,#5686fe)}
+.dsm-workbuddy-searched-more{margin-top:6px;padding:0;border:0;background:none;color:var(--dsw-alias-brand-primary,#5686fe);font:inherit;font-size:12px;line-height:18px;cursor:pointer;text-align:left}
+.dsm-workbuddy-searched-more:hover{text-decoration:underline}
 .dsm-workbuddy-usage-error{margin:0;font-size:14px;line-height:22px;color:var(--dsw-alias-state-error-primary,#ef4444)}
 .dsm-workbuddy-usage-dot{width:9px;height:9px;border-radius:50%;flex:0 0 auto}
 .dsm-workbuddy-usage-status{display:flex;align-items:center;gap:10px;font-size:15px;font-weight:500;color:var(--dsw-alias-label-primary,#e6e6e6)}
@@ -272,6 +352,126 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-usage-cheer:hover{color:var(--dsw-alias-label-primary,#e6e6e6)}
 .dsm-workbuddy-usage-cheer:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:2px}
 `;
+		//#endregion
+		//#region src/client/searched-paths.ts
+		/**
+		* Reasons that explain a failure, as opposed to merely recording an absence.
+		*
+		* `missing` is the normal state of most candidates on any machine — the app
+		* writes one file while the platform offers several possible directories — so
+		* it is the one reason that gets hidden by default. Everything else is a real
+		* finding: the file is there and unreadable, present but not a credential, or
+		* present and encrypted without a key.
+		*
+		* `encrypted` is WorkBuddy-specific and the most important of the three: the
+		* user is very likely signed in already, and the plugin simply cannot open the
+		* token fields without the desktop app present. "Sign in again" is the one
+		* action that cannot help, so this reason must never be hidden behind a toggle.
+		*
+		* `wrong-region` is equally a finding and equally actionable: the sign-in is
+		* real and readable, it just belongs to the other tab. That is why it must be
+		* shown up front — hidden among the absences it would look like "nothing here",
+		* when it is in fact the whole explanation, and the cheapest possible fix.
+		*/
+		const INTERESTING_REASONS = [
+			"encrypted",
+			"invalid",
+			"unreadable",
+			"wrong-region"
+		];
+		/**
+		* Partition one region's probe failures for display.
+		*
+		* Order within each group is preserved from the Host: the store reports
+		* candidates in probe order, which is meaningful (the live file before its
+		* timestamped backups).
+		*
+		* There is deliberately no `encrypted` flag here. There used to be, for a
+		* notice rendered inside the list; that notice is gone because
+		* {@link signedOutNotice} now answers the encrypted cause in the paragraph, so
+		* the flag would have had no consumer — and a derived field kept "just in
+		* case" is how the list and the paragraph drift apart again.
+		*/
+		function searchedView(items) {
+			const interesting = items.filter((item) => INTERESTING_REASONS.includes(item.reason));
+			return {
+				interesting,
+				missing: items.filter((item) => !INTERESTING_REASONS.includes(item.reason)),
+				missingOpen: interesting.length === 0,
+				total: items.length
+			};
+		}
+		/** Every reason's locale key, so no reason can silently fall through to a wrong one. */
+		const REASON_KEYS = {
+			missing: "row.reasonMissing",
+			unreadable: "row.reasonUnreadable",
+			invalid: "row.reasonInvalid",
+			encrypted: "row.reasonEncrypted",
+			"wrong-region": "row.reasonWrongRegion"
+		};
+		/** The reason's short label; `missing`/`unreadable`/`invalid`/`encrypted`/`wrong-region`. */
+		function searchReasonKey(reason) {
+			return REASON_KEYS[reason] ?? "row.reasonInvalid";
+		}
+		/**
+		* One entry's cause line: which store the path belongs to, and why it failed.
+		*
+		* The source matters because the two are fixed differently — a desktop-app path
+		* is about the app's installation and sign-in, a plugin-owned copy is about the
+		* plugin's own storage.
+		*/
+		function searchReasonLabel(item, t) {
+			return `${t(item.source === "desktop" ? "row.sourceDesktop" : "row.sourceDsh")} · ${t(searchReasonKey(item.reason))}`;
+		}
+		/**
+		* Choose the signed-out paragraph's copy.
+		*
+		* This exists because the card was saying the same thing twice. `resolve()`
+		* refuses with a message that already ENUMERATES every path it tried
+		* (`expected <Local>\workbuddy-desktop.info or <Roaming>\... or
+		* WORKBUDDY_AUTH_FILE`), and the probed-path `<details>` right below it listed
+		* those same paths with a per-entry reason. Both hint keys also opened with a
+		* variant of "no sign-in was found", so one screen carried four statements of
+		* one fact and the user's eye had nowhere to land.
+		*
+		* The rule: the paragraph states the situation, the list supplies the detail.
+		* Whenever a list is rendered, the enumeration in `message` is redundant by
+		* construction — the list is the same paths, with strictly better reasons — so
+		* the paragraph falls back to the concise hint. Measured against the real
+		* `resolve()` branches, the only content this drops is "or refresh an existing
+		* session", which is vacuous exactly here: `searched` is attached only when
+		* there are zero accounts, so there is no session to refresh.
+		*
+		* `selectionLost` still wins outright: there the tokens are healthy and the
+		* advice is to re-pick an account, which no path list can replace.
+		*
+		* `encrypted` also outranks the generic hint, and for the same reason
+		* `wrong-region` does: the generic copy tells the user to sign in again, which
+		* is precisely the action that cannot work when the credential exists but is
+		* encrypted. Leaving it in the collapsed list meant the headline contradicted
+		* the detail below it — and the headline is the only part most users read.
+		*/
+		function signedOutNotice(input) {
+			if (input.selectionLost) return { key: "row.selectionLostMessage" };
+			if (input.searched.some((item) => item.reason === "wrong-region")) return { key: "row.signedOutWrongRegion" };
+			if (input.searched.some((item) => item.reason === "encrypted")) return { key: "row.signedOutEncrypted" };
+			if (input.searched.length > 0) return { key: "row.signedOutHint" };
+			return input.message === void 0 ? { key: "row.signedOutHint" } : {
+				key: "row.signedOutHint",
+				fallback: input.message
+			};
+		}
+		/**
+		* The paragraph's final text: the localized copy, plus the Host message only
+		* when {@link signedOutNotice} decided nothing supersedes it.
+		*
+		* Kept here rather than inline in the JSX so the anti-duplication guarantee can
+		* be asserted on the string that is actually rendered, not on its inputs.
+		*/
+		function signedOutText(notice, t) {
+			const hint = t(notice.key);
+			return notice.fallback === void 0 ? hint : `${hint} (${notice.fallback})`;
+		}
 		//#endregion
 		//#region src/client/WorkBuddyCard.tsx
 		/**
@@ -311,6 +511,66 @@ window.__ModuleLoader__.load({
 				document.head.appendChild(styleTag);
 			}
 		}
+		/**
+		* One probed path, with its cause. The presentation rules — which entries are
+		* worth showing up front, and how a reason is labelled — live in
+		* `./searched-paths.ts` so they are unit-testable without a DOM.
+		*/
+		function renderSearchedItem(item, t) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: item.path }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+				className: `dsm-workbuddy-searched-reason${item.reason === "encrypted" ? " dsm-workbuddy-searched-reason-encrypted" : item.reason === "wrong-region" ? " dsm-workbuddy-searched-reason-wrong-region" : ""}`,
+				children: [searchReasonLabel(item, t), item.message === void 0 ? null : ` · ${item.message}`]
+			})] }, `${item.source}:${item.path}`);
+		}
+		/**
+		* The probed-path list behind a signed-out card.
+		*
+		* Collapsed by default because it is a diagnostic, not a headline. The
+		* interesting failures (encrypted / invalid / unreadable) are listed up front;
+		* the merely-absent candidates — most of them, on any normal machine — sit
+		* behind a second toggle, so the one entry that explains the failure is not
+		* buried under a dozen "not found" lines. When nothing interesting was found
+		* the absent list IS the explanation, so it opens directly.
+		*
+		* An `encrypted` failure deliberately adds NO notice of its own. It used to,
+		* because the paragraph above still said "sign in once in the desktop app" —
+		* the one action that cannot work when the credential exists but is encrypted.
+		* `signedOutNotice` now answers that cause in the paragraph itself, so a second
+		* copy here would restate it: the paragraph states the situation, this list
+		* supplies the detail, and the per-entry label already says what each path is.
+		*/
+		function SearchedPaths({ items, t }) {
+			const view = searchedView(items);
+			const [explicitOpen, setExplicitOpen] = (0, react.useState)(void 0);
+			const showMissing = explicitOpen ?? view.missingOpen;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
+				className: "dsm-workbuddy-searched",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("summary", { children: [
+						t("row.searchedTitle"),
+						" (",
+						view.total,
+						")"
+					] }),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-workbuddy-searched-hint",
+						children: t("row.searchedHint")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("ul", {
+						className: "dsm-workbuddy-searched-list",
+						children: [view.interesting.map((item) => renderSearchedItem(item, t)), showMissing ? view.missing.map((item) => renderSearchedItem(item, t)) : null]
+					}),
+					showMissing || view.missing.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "dsm-workbuddy-searched-more",
+						onClick: () => {
+							setExplicitOpen(true);
+						},
+						children: t("row.searchedMore", { count: view.missing.length })
+					})
+				]
+			});
+		}
 		function formatNumber(value) {
 			return new Intl.NumberFormat(void 0, {
 				minimumFractionDigits: 0,
@@ -379,12 +639,12 @@ window.__ModuleLoader__.load({
 			/** Save failure surfaced next to the buttons; cleared by the next attempt. */
 			const [saveError, setSaveError] = (0, react.useState)(void 0);
 			const [switchingAccount, setSwitchingAccount] = (0, react.useState)(false);
-			/** Set right after a CONFIRMED Clear so the dropped choice is stated. */
-			const [accountNote, setAccountNote] = (0, react.useState)(void 0);
 			/** A refused account write (silently unpersisted settings on a locked file). */
 			const [accountError, setAccountError] = (0, react.useState)(void 0);
 			const [checkingIn, setCheckingIn] = (0, react.useState)(false);
 			const [checkinActionError, setCheckinActionError] = (0, react.useState)(void 0);
+			/** Region whose on/off checkbox write is in flight, so its box can't race. */
+			const [togglingRegion, setTogglingRegion] = (0, react.useState)(void 0);
 			const mounted = (0, react.useRef)(true);
 			(0, react.useEffect)(() => {
 				mounted.current = true;
@@ -485,7 +745,6 @@ window.__ModuleLoader__.load({
 			const switchAccount = async (accountId) => {
 				if (settingsScope === void 0) return;
 				setSwitchingAccount(true);
-				setAccountNote(void 0);
 				setAccountError(void 0);
 				try {
 					await writeAccountSlot(settingsScope, activeRegion, accountId);
@@ -497,36 +756,40 @@ window.__ModuleLoader__.load({
 				}
 			};
 			/**
-			* Drop the explicit choice so the region returns to its documented default:
-			* follow whatever the WorkBuddy app is currently signed in as. The empty
-			* string is the settings-level sentinel for "no explicit selection" (the
-			* store normalizes it away, and the host's legacy attribution treats it as a
-			* deliberate clear rather than an unset key); the account id itself is never
-			* written here.
+			* Whether one region's provider is switched on, read off the SAME committed
+			* settings document the Host reads (`regionEnabledOf` mirrors the Host's
+			* `regionStateOf` opt-out rule: only an explicit `false` disables). Reading
+			* the stored value rather than echoing local state means a rejected write,
+			* another window's change, or a restart all converge on the truth.
 			*
-			* The confirmation is only shown once the write is CONFIRMED. That matters
-			* twice over: the restored default is usually the very account that was
-			* saved, so the state line is the only feedback the user gets — and on
-			* Windows the atomic replace of `settings.yaml` can fail outright (locked by
-			* an antivirus scanner or a sync client), in which case claiming "cleared"
-			* would be a lie that the old selection silently contradicts.
+			* The whole settings section is passed deliberately: `regionEnabledOf`
+			* accepts either it or the bare `regions` map, because passing the section
+			* where the map was expected was a shipped bug (the lookup read
+			* `section['cn']`, found nothing, and reported `true` forever — the checkbox
+			* stayed checked and clicking it appeared dead while the write succeeded).
 			*/
-			const clearAccount = async () => {
-				if (settingsScope === void 0) return;
-				setSwitchingAccount(true);
-				setAccountError(void 0);
+			const regionOn = (item) => regionEnabledOf(settingsScope?.getSnapshot().value, item);
+			const activeRegionOn = regionOn(activeRegion);
+			/**
+			* Switch one region's provider off or on. The write carries the region's
+			* whole slot through untouched — only `enabled` changes — so the user's
+			* directory, model picks, image opt-ins and budgets survive a round trip.
+			* The Host withdraws or restores the provider route on the next `onChange`,
+			* which is what actually removes it from DSH's model picker.
+			*/
+			const toggleRegion = async (item, enabled) => {
+				if (settingsScope === void 0 || settingsScope.getSnapshot().writable !== true) return;
+				setTogglingRegion(item);
 				try {
-					await writeAccountSlot(settingsScope, activeRegion, "");
-					await refreshUsage(activeRegion);
-					if (mounted.current) setAccountNote("cleared");
-				} catch (error) {
-					if (!mounted.current) return;
-					setAccountNote(void 0);
-					setAccountError(error instanceof Error ? error.message : t("row.requestFailed"));
+					await settingsScope.set("regions", nextRegionEnabled(settingsScope.getSnapshot().value, item, enabled));
 				} finally {
-					if (mounted.current) setSwitchingAccount(false);
+					if (mounted.current) setTogglingRegion(void 0);
 				}
 			};
+			/**
+			* Claim the daily check-in reward for the active region. The action endpoint
+			* is region-scoped; the response only refreshes this tab's check-in state.
+			*/
 			const claimDailyCheckin = async () => {
 				setCheckingIn(true);
 				setCheckinActionError(void 0);
@@ -652,6 +915,7 @@ window.__ModuleLoader__.load({
 				setSaveError(void 0);
 				try {
 					await writeRegionModels(settingsScope, status.region, {
+						enabled: activeRegionOn,
 						lastCatalog: visibleModels.map(toPersistedWorkBuddyModel),
 						enabledModelIds: [...activeEnabledIds],
 						imageModelIds: [...activeImageIds],
@@ -666,10 +930,35 @@ window.__ModuleLoader__.load({
 				}
 			};
 			const title = t("row.title");
-			const label = status.status === "signed-in" ? t("row.signedIn", { accountName: status.accountName }) : status.status === "error" ? t("row.requestFailed") : t("row.signedOut");
+			/**
+			* Show a name, or a placeholder when the desktop app recorded none.
+			*
+			* The Host sends `''` rather than an identifier, because a `uin`/`uid` shown
+			* where a name belongs reads as "the plugin does not know who this is" — the
+			* placeholder says the honest thing instead.
+			*/
+			const nameOf = (value) => value === "" ? t("row.accountUnnamed") : value;
+			const label = status.status === "signed-in" ? t("row.signedIn", { accountName: nameOf(status.accountName) }) : status.status === "error" ? t("row.requestFailed") : t("row.signedOut");
 			/** The saved choice no longer matches a local sign-in (tokens are fine). */
 			const selectionLost = status.status === "signed-out" && status.selectionLost === true;
 			/**
+			* The paths the Host probed, on the branch where nothing was found at all.
+			* Absent on the legacy card payload (an older Host), so it defaults empty
+			* rather than rendering an empty diagnostic.
+			*/
+			const searched = status.status === "signed-out" ? status.searched ?? [] : [];
+			/**
+			* What the signed-out paragraph says, and whether to append the Host's raw
+			* error. The rule lives in `./searched-paths.ts` because it is the fix for a
+			* real duplication: `resolve()`'s message already enumerated every path, and
+			* the list below enumerates them again with better reasons.
+			*/
+			const notice = signedOutNotice({
+				selectionLost,
+				message: status.status === "signed-out" ? status.message : void 0,
+				searched
+			});
+			/**
 			* Whether this region runs a saved choice, per the Host. `undefined` only on
 			* the error branch, which renders no picker and therefore no state line.
 			*/
@@ -718,21 +1007,36 @@ window.__ModuleLoader__.load({
 								"aria-label": title,
 								children: WORKBUDDY_REGIONS.map((region) => {
 									const regionStatus = statusByRegion[region];
-									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
-										type: "button",
-										role: "tab",
-										"aria-selected": region === activeRegion,
-										className: `dsm-workbuddy-tab${region === activeRegion ? " dsm-workbuddy-tab-active" : ""}`,
-										onClick: () => {
-											setActiveRegion(region);
-											setAccountNote(void 0);
-											setAccountError(void 0);
-										},
-										children: [regionStatus === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-											"aria-hidden": "true",
-											className: "dsm-workbuddy-tab-dot",
-											style: dotStyle(regionStatus.status)
-										}), region === "cn" ? t("row.tabCn") : t("row.tabGlobal")]
+									const regionOnState = regionOn(region);
+									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										className: "dsm-workbuddy-tab-cell",
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+											type: "button",
+											role: "tab",
+											"aria-selected": region === activeRegion,
+											className: `dsm-workbuddy-tab${region === activeRegion ? " dsm-workbuddy-tab-active" : ""}${regionOnState ? "" : " dsm-workbuddy-tab-off"}`,
+											onClick: () => {
+												setActiveRegion(region);
+												setAccountError(void 0);
+											},
+											children: [regionStatus === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												"aria-hidden": "true",
+												className: "dsm-workbuddy-tab-dot",
+												style: dotStyle(regionStatus.status)
+											}), region === "cn" ? t("row.tabCn") : t("row.tabGlobal")]
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+											className: "dsm-workbuddy-tab-switch",
+											title: t("row.tabSwitchHint"),
+											children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												type: "checkbox",
+												checked: regionOnState,
+												disabled: togglingRegion === region || settingsScope?.getSnapshot().writable !== true,
+												"aria-label": t("row.tabSwitchAria", { region: region === "cn" ? t("row.tabCn") : t("row.tabGlobal") }),
+												onChange: (event) => {
+													toggleRegion(region, event.target.checked);
+												}
+											})
+										})]
 									}, region);
 								})
 							}),
@@ -740,6 +1044,10 @@ window.__ModuleLoader__.load({
 								className: "dsm-workbuddy-models-summary",
 								children: t("row.tabHint")
 							}),
+							!activeRegionOn ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-workbuddy-tab-off-notice",
+								children: t("row.tabOffNotice")
+							}) : null,
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								className: "dsm-workbuddy-usage-account",
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -758,7 +1066,7 @@ window.__ModuleLoader__.load({
 											className: "dsm-workbuddy-usage-expiry",
 											children: t("row.tokenExpiry", { expiresAt: formatDateTime(status.tokenExpiresAtMs) })
 										}) : null,
-										status.status === "error" || status.status === "signed-in" && status.creditsError !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										status.status === "error" || status.status === "signed-in" && status.creditsError !== void 0 ? status.status === "signed-in" && status.credentialRejected === true ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 											className: "dsm-workbuddy-usage-hint",
 											children: t("row.reloginHint")
 										}) : null,
@@ -796,23 +1104,14 @@ window.__ModuleLoader__.load({
 												children: t("row.accountNoneInEffect")
 											}), status.accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("option", {
 												value: account.id,
-												children: [account.accountName, account.domain === "" ? "" : ` · ${account.domain}`]
+												children: [nameOf(account.accountName), account.domain === "" ? "" : ` · ${account.domain}`]
 											}, account.id))]
 										})
 									}),
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-										type: "button",
-										className: "dsm-btn dsm-btn-outline",
-										disabled: switchingAccount || settingsScope?.getSnapshot().writable !== true,
-										onClick: () => {
-											clearAccount();
-										},
-										children: t("row.accountsFollowApp")
-									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 										className: "dsm-workbuddy-account-state",
 										role: "status",
-										children: accountNote === "cleared" ? t("row.accountsCleared") : selectionExplicit === false ? t("row.accountsFollowingApp") : selectionExplicit === true ? t("row.accountsSavedChoice") : ""
+										children: selectionExplicit === true ? t("row.accountsSavedChoice") : ""
 									}),
 									accountError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 										className: "dsm-workbuddy-account-error",
@@ -894,6 +1193,25 @@ window.__ModuleLoader__.load({
 										})]
 									});
 								})(),
+								status.credentialRejected === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+									className: "dsm-workbuddy-usage-error",
+									role: "alert",
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("row.credentialRejectedTitle") }),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.credentialRejectedIntro", { accountName: nameOf(status.accountName) }) }),
+										status.recovery?.usableAccount !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.credentialRejectedSwitch", { accountName: nameOf(status.recovery.usableAccount.accountName) }) }) : status.recovery?.reloginRequired === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.credentialRejectedRelogin") }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.credentialRejectedChoose") }),
+										status.recovery?.usableAccount === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "dsm-btn dsm-btn-outline",
+											disabled: switchingAccount || settingsScope?.getSnapshot().writable !== true,
+											onClick: () => {
+												const target = status.recovery?.usableAccount;
+												if (target !== void 0) switchAccount(target.accountId);
+											},
+											children: switchingAccount ? t("row.accountsScanning") : t("row.credentialRejectedSwitchAction", { accountName: nameOf(status.recovery.usableAccount.accountName) })
+										})
+									]
+								}) : null,
 								status.creditsError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 									className: "dsm-workbuddy-usage-error",
 									children: t("row.creditsError", { message: status.creditsError })
@@ -1043,10 +1361,13 @@ window.__ModuleLoader__.load({
 									]
 								})
 							] }) : null,
-							status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-workbuddy-usage-text",
-								children: selectionLost ? t("row.selectionLostMessage") : status.message ?? t("row.signedOutHint")
-							}) : null,
+								children: signedOutText(notice, t)
+							}), searched.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SearchedPaths, {
+								items: searched,
+								t
+							}) : null] }) : null,
 							status.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-workbuddy-usage-error",
 								children: status.message
@@ -1077,11 +1398,32 @@ window.__ModuleLoader__.load({
 			"row.tabCn": "Domestic",
 			"row.tabGlobal": "Global",
 			"row.tabHint": "Each tab is a separate provider (workbuddy / workbuddy-global) with its own account, credits, and models. Both sides are live at once: different sessions can pick from either side, and changes on one tab never touch the other.",
+			"row.tabSwitchHint": "Uncheck to switch this provider off. Its models disappear from the DSH model picker; your account, credits, and model settings are kept and return when you check it again.",
+			"row.tabSwitchAria": "Offer the {region} provider to DSH",
+			"row.tabOffNotice": "This provider is switched off: none of its models are offered to DSH. Your account, credits, and model settings are kept — check the box above the tab to bring it back.",
 			"row.signedOut": "Not signed in",
 			"row.signedOutHint": "Sign in once in the WorkBuddy desktop app; this plugin follows that sign-in automatically.",
+			"row.signedOutWrongRegion": "Your WorkBuddy sign-in was found, but it belongs to the other region tab. Switch tabs above to use it — there is nothing to sign in again.",
+			"row.signedOutEncrypted": "Your WorkBuddy sign-in is present, but its token fields are encrypted and the plugin could not read the key. Install the WorkBuddy desktop app, or set WORKBUDDY_APP_EXECUTABLE to its executable — signing in again will not change this.",
+			"row.searchedTitle": "Paths checked",
+			"row.searchedHint": "If your WorkBuddy keeps its login somewhere else, point the plugin at it with the WORKBUDDY_AUTH_FILE environment variable.",
+			"row.reasonMissing": "not found",
+			"row.reasonUnreadable": "unreadable",
+			"row.reasonInvalid": "no usable token",
+			"row.reasonEncrypted": "encrypted — needs the desktop app",
+			"row.reasonWrongRegion": "belongs to the other region",
+			"row.sourceDesktop": "desktop app",
+			"row.sourceDsh": "plugin copy",
+			"row.searchedMore": "Show the {count} path(s) that were not found",
 			"row.signedIn": "Signed in: {accountName}",
 			"row.tokenExpiry": "Access token expires {expiresAt} (auto-renewal)",
 			"row.reloginHint": "If errors occur, sign back in to the WorkBuddy app.",
+			"row.credentialRejectedTitle": "WorkBuddy refused this account's token",
+			"row.credentialRejectedIntro": "The token for \"{accountName}\" is no longer accepted by the upstream, so credits and check-in are unavailable. Signing in again only helps if the problem is the token itself — here is what actually applies:",
+			"row.credentialRejectedSwitch": "Another sign-in on this machine answered the upstream: \"{accountName}\". Switching to it fixes this — no need to sign in again.",
+			"row.credentialRejectedSwitchAction": "Switch to \"{accountName}\"",
+			"row.credentialRejectedRelogin": "No other local sign-in exists to switch to. Sign in again in the WorkBuddy desktop app.",
+			"row.credentialRejectedChoose": "Other local sign-ins exist but none of them answered the upstream just now. Try switching to one above; if none works, sign in again in the desktop app.",
 			"row.requestFailed": "Request failed",
 			"row.creditsTotalLabel": "Total remaining credits",
 			"row.creditsMonthlyRemain": "Remaining {remain} / {size} · Refreshes {at}",
@@ -1095,17 +1437,15 @@ window.__ModuleLoader__.load({
 			"row.refresh": "Refresh",
 			"row.refreshing": "Refreshing…",
 			"row.accountsTitle": "WorkBuddy account",
+			"row.accountUnnamed": "Unnamed account",
 			"row.accountsHint": "Choose from locally detected sign-ins. Tokens are never shown or saved in DSH settings.",
 			"row.accountsRescan": "Detect accounts again",
 			"row.accountsScanning": "Detecting…",
-			"row.accountsFollowApp": "Follow the app's sign-in",
 			"row.accountNoneInEffect": "No account in effect",
 			"row.accountsSavedChoice": "Using the account saved for this region.",
-			"row.accountsFollowingApp": "Following the app's current sign-in — no account is saved for this region.",
-			"row.accountsCleared": "Saved choice cleared. This region follows the app's current sign-in again.",
 			"row.accountsWriteFailed": "The account change was not saved: {message} — the settings file could not be updated (on Windows it may be locked by an antivirus scanner or a sync client). Your previous choice is still in effect; close whatever holds settings.yaml and try again.",
 			"row.selectionLostHint": "The saved account no longer exists locally.",
-			"row.selectionLostMessage": "The account saved for this region is no longer among the local sign-ins (WorkBuddy replaced its login or cleaned up backups). Your other sign-ins are fine — pick one above, or choose \"Follow the app's sign-in\" to clear the saved choice. Signing in again in the desktop app will not fix this.",
+			"row.selectionLostMessage": "The account saved for this region is no longer among the local sign-ins (WorkBuddy replaced its login or cleaned up backups). Your other sign-ins are fine — pick a current one from the list above. Signing in again in the desktop app will not fix this.",
 			"row.modelsTitle": "Models",
 			"row.modelsSummary": "{count} enabled",
 			"row.modelsRefresh": "Refresh from WorkBuddy",
@@ -1133,11 +1473,32 @@ window.__ModuleLoader__.load({
 			"row.tabCn": "国内版",
 			"row.tabGlobal": "国际版",
 			"row.tabHint": "每个 tab 是一个独立供应商（workbuddy / workbuddy-global），各有自己的账号、积分与模型。两边同时生效：不同会话可各选一边，一侧的改动不影响另一侧。",
+			"row.tabSwitchHint": "取消勾选即关闭该供应商：它的模型不再出现在 DSH 模型选择器里；账号、积分与模型设置都会保留，重新勾选即恢复。",
+			"row.tabSwitchAria": "是否向 DSH 提供{region}供应商",
+			"row.tabOffNotice": "该供应商已关闭：它的模型不会提供给 DSH。账号、积分与模型设置均已保留——勾选上方复选框即可恢复。",
 			"row.signedOut": "未登录",
 			"row.signedOutHint": "在 WorkBuddy 桌面 App 里登录一次即可，插件会自动跟随当前登录的账号。",
+			"row.signedOutWrongRegion": "找到了你的 WorkBuddy 登录信息，但它属于另一个地区的标签页。切换到上方对应标签页即可使用——不需要重新登录。",
+			"row.signedOutEncrypted": "你的 WorkBuddy 登录信息在，但其中的 token 字段是加密的，插件拿不到密钥。请安装 WorkBuddy 桌面 App，或用环境变量 WORKBUDDY_APP_EXECUTABLE 指定它的可执行文件——重新登录无法解决这个问题。",
+			"row.searchedTitle": "已检查的路径",
+			"row.searchedHint": "如果你的 WorkBuddy 把登录信息存在别处，可以用环境变量 WORKBUDDY_AUTH_FILE 指定。",
+			"row.reasonMissing": "不存在",
+			"row.reasonUnreadable": "无法读取",
+			"row.reasonInvalid": "没有可用的 token",
+			"row.reasonEncrypted": "已加密——需要桌面 App",
+			"row.reasonWrongRegion": "属于另一个地区",
+			"row.sourceDesktop": "桌面 App",
+			"row.sourceDsh": "插件副本",
+			"row.searchedMore": "显示另外 {count} 条「不存在」的路径",
 			"row.signedIn": "已登录：{accountName}",
 			"row.tokenExpiry": "访问令牌 {expiresAt} 过期（自动续期）",
 			"row.reloginHint": "出现错误，重新登录 WorkBuddy APP 即可。",
+			"row.credentialRejectedTitle": "WorkBuddy 拒绝了这个账号的 token",
+			"row.credentialRejectedIntro": "「{accountName}」的 token 已不被上游接受，所以积分与签到都用不了。重新登录只在「确实是 token 的问题」时才有用——当前实际适用的是下面这一条：",
+			"row.credentialRejectedSwitch": "本机另一个账号「{accountName}」刚刚实测可用，切换到它即可恢复，不必重新登录。",
+			"row.credentialRejectedSwitchAction": "切换到「{accountName}」",
+			"row.credentialRejectedRelogin": "本机没有其他账号可切换。请在 WorkBuddy 桌面端重新登录。",
+			"row.credentialRejectedChoose": "本机还有其他账号，但刚才都没能通过上游校验。可以在上方切换一个试试；如果都不行，请在桌面端重新登录。",
 			"row.requestFailed": "请求失败",
 			"row.creditsTotalLabel": "总剩余积分",
 			"row.creditsMonthlyRemain": "剩余 {remain} / {size} · {at} 刷新",
@@ -1151,17 +1512,15 @@ window.__ModuleLoader__.load({
 			"row.refresh": "刷新",
 			"row.refreshing": "正在刷新…",
 			"row.accountsTitle": "WorkBuddy 账号",
+			"row.accountUnnamed": "未命名账号",
 			"row.accountsHint": "选择本机检测到的登录账号；Token 不会显示，也不会保存到 DSH 设置。",
 			"row.accountsRescan": "重新检测账号",
 			"row.accountsScanning": "正在检测…",
-			"row.accountsFollowApp": "跟随 App 当前登录",
 			"row.accountNoneInEffect": "当前没有生效的账号",
 			"row.accountsSavedChoice": "正在使用该区域保存的账号。",
-			"row.accountsFollowingApp": "正在跟随 App 当前登录——该区域没有保存账号。",
-			"row.accountsCleared": "已清除保存的选择，该区域重新跟随 App 当前登录。",
 			"row.accountsWriteFailed": "账号改动未保存：{message} —— 设置文件写入失败（Windows 上可能被杀毒软件或同步盘占用）。当前仍是原来保存的选择，请先关闭占用 settings.yaml 的程序再重试。",
 			"row.selectionLostHint": "已保存的账号在本机已不存在。",
-			"row.selectionLostMessage": "该区域保存的账号已不在本机登录列表中（WorkBuddy 更换了登录或清理了备份文件）。本机其他登录仍然可用——请在上方选择一个，或点「跟随 App 当前登录」清除已保存的选择。重新登录桌面端 App 无法修复此问题。",
+			"row.selectionLostMessage": "该区域保存的账号已不在本机登录列表中（WorkBuddy 更换了登录或清理了备份文件）。本机其他登录仍然可用——请在上方列表中重新选择一个当前账号。重新登录桌面端 App 无法修复此问题。",
 			"row.modelsTitle": "模型",
 			"row.modelsSummary": "已启用 {count} 个",
 			"row.modelsRefresh": "从 WorkBuddy 刷新",