dsh-connect-workbuddy 3.6.0 → 4.0.0

package/lib/{host-heartbeat-Cg2ahl1n.js → host-heartbeat-vvVjdY_q.js}

@@ -2855,7 +2855,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "3.6.0";
+const WORKBUDDY_CONNECT_VERSION = "4.0.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -1983,6 +1983,17 @@ type WorkBuddyWebUsage =
   accounts: readonly WorkBuddyWebAccount[];
   /** Whether this region's provider is currently offered to DSH. */
   enabled?: boolean;
+  /**
+   * Whether this region's sidebar credit line is shown.
+   *
+   * Carried on the Host's answer rather than read from the browser settings
+   * mirror, for the same measured reason as `contextBudgets`: on the affected
+   * 0.1.7 deployment the mirror never picks up this plugin's writes (a save
+   * through the Host endpoint leaves it stale), so a control reading it kept
+   * showing the old value and looked like it could not be turned off — the
+   * "关闭不了" report.
+   */
+  showCreditsInMainUi?: boolean;
   message?: string;
   /** The persisted account id matches no local account. */
   selectionLost?: boolean;
@@ -2011,6 +2022,12 @@ type WorkBuddyWebUsage =
   region: WorkBuddyWebRegion;
   /** Whether this region's provider is currently offered to DSH. */
   enabled?: boolean;
+  /**
+   * Whether this region's sidebar credit line is shown. See the signed-out
+   * variant for why this travels on the Host's answer instead of the browser
+   * settings mirror.
+   */
+  showCreditsInMainUi?: boolean;
   source?: 'desktop' | 'dsh';
   tokenExpiresAtMs: number;
   /** A saved per-region choice is in effect (false = following the app). */
@@ -2317,6 +2334,19 @@ interface WorkBuddyStatusRouteOptions {
    * committed settings value rather than a local guess.
    */
   regionEnabled(region: WorkBuddyRegion): boolean;
+  /**
+   * Whether the region's sidebar credit line is shown.
+   *
+   * Read from the COMMITTED settings value here rather than in the browser, for
+   * the same reason as `regionEnabled` — and additionally because the browser's
+   * settings mirror is documented as stale for this namespace on the affected
+   * 0.1.7 deployments, which made the checkbox appear unable to turn the line
+   * off ("关闭不了"). The card reads this field off the Host's answer.
+   *
+   * Optional so a Host that predates the setting still satisfies the interface;
+   * absent reads as ON, matching the schema's `default(true)`.
+   */
+  showCreditsInMainUi?(region: WorkBuddyRegion): boolean;
   /**
    * Send one real-volume request to each named model of a region and report what
    * came back.
@@ -2359,6 +2389,18 @@ interface WorkBuddyStatusRouteOptions {
    * probe.
    */
   accountUsable?(region: WorkBuddyRegion, account: WorkBuddyRecoveryCandidate): Promise<boolean>;
+  /**
+   * Why each of the region's accounts cannot serve right now, keyed by account
+   * id. Absent key (or an absent dep) means "no reason known" — the composer
+   * panel then marks nothing, which is the honest answer for an account that has
+   * never been measured.
+   *
+   * The rule is the SAME one the pool ranks by (`exclusionOf`), including its
+   * cooldown-expiry handling, so an account the pool calls usable and one the
+   * panel calls rate-limited can never be the same account at the same moment.
+   * Reimplementing the expiry check here would let the two drift.
+   */
+  accountExclusions?(region: WorkBuddyRegion): Promise<Readonly<Record<string, WorkBuddyWebPoolExclusion>>>;
   /**
    * The region's account pool, assembled on the Host.
    *
@@ -2508,6 +2550,15 @@ interface WorkBuddyRegionState {
    * row (see `syncRegionRegistration`).
    */
   enabled?: boolean;
+  /**
+   * Whether this region's credit balance shows at the DSH sidebar foot.
+   *
+   * Per-region, independently switched: WB CN and WB AI are separate accounts
+   * on separate gateways, so a user holding only one of them must be able to
+   * show exactly that one. Opt-out — an absent value reads as ON, so a config
+   * written before this switch existed keeps whatever the default was.
+   */
+  showCreditsInMainUi?: boolean;
   /** The last-refreshed directory for this region; what the card displays. */
   lastCatalog?: WorkBuddyModelInfo[];
   /** The user's selection in this region, as model ids. */

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as macosNestedAppBundles, A as workbuddyOwnAuthPath, B as parseUpstreamModel, C as defaultDesktopAuthDirs, D as legacyWorkbuddyOwnAuthPath, E as isEncryptedCredentialError, F as classifyUpstreamError, G as deriveAtRestKey, H as regionOf, I as declaredTools, J as findWorkbuddyAppExecutable, K as deriveAtRestKeyId, L as isCredentialRejectedError, M as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, N as WorkBuddyCredentialRejectedError, O as parseWorkBuddyAuth, P as WorkBuddyUpstreamClient, Q as macosBundleExecutable, R as parseCreditMultiplier, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as WORKBUDDY_APP_EXECUTABLE_ENV, V as prepareChatBody, W as clearAtRestKeyCache, X as isEncryptedFieldWrapper, Z as isWorkbuddyBundle, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as openEncryptedField, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, j as CREDENTIAL_REJECTED_CODE, k as workbuddyAccountId, l as piAiRuntimeInfo, m as deriveCatalog, n as clearHostHeartbeat, nt as workbuddyAppExecutableCandidates, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as fetchAtRestKeyPayload, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as readAtRestKey, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as parseReasoning } from "./host-heartbeat-Cg2ahl1n.js";
+import { $ as macosNestedAppBundles, A as workbuddyOwnAuthPath, B as parseUpstreamModel, C as defaultDesktopAuthDirs, D as legacyWorkbuddyOwnAuthPath, E as isEncryptedCredentialError, F as classifyUpstreamError, G as deriveAtRestKey, H as regionOf, I as declaredTools, J as findWorkbuddyAppExecutable, K as deriveAtRestKeyId, L as isCredentialRejectedError, M as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, N as WorkBuddyCredentialRejectedError, O as parseWorkBuddyAuth, P as WorkBuddyUpstreamClient, Q as macosBundleExecutable, R as parseCreditMultiplier, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as WORKBUDDY_APP_EXECUTABLE_ENV, V as prepareChatBody, W as clearAtRestKeyCache, X as isEncryptedFieldWrapper, Z as isWorkbuddyBundle, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as openEncryptedField, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, j as CREDENTIAL_REJECTED_CODE, k as workbuddyAccountId, l as piAiRuntimeInfo, m as deriveCatalog, n as clearHostHeartbeat, nt as workbuddyAppExecutableCandidates, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as fetchAtRestKeyPayload, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as readAtRestKey, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as parseReasoning } from "./host-heartbeat-vvVjdY_q.js";
 import z from "@deepseek-ai/schemastery";
 import { readFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -2832,6 +2832,18 @@ async function writePoolProbes(region, updates) {
 */
 /** Plugin-owned usage endpoint consumed by its browser half. */
 const WORKBUDDY_USAGE_PATH = "/plugins/dsh-connect-workbuddy/usage";
+/**
+* Per-account credit balances for one region, read ONLY while the composer
+* panel is open.
+*
+* Separate from {@link WORKBUDDY_USAGE_PATH} because its cost is different in
+* kind: the usage document is one upstream read for the selected account, while
+* this is one read PER account in the region. Folding it into the usage route
+* would make every 5-minute refresh pay for a table nobody is looking at, so it
+* is fetched on demand instead — the same principle the pool applies to its
+* per-account figures.
+*/
+const WORKBUDDY_ACCOUNT_CREDITS_PATH = "/plugins/dsh-connect-workbuddy/account-credits";
 /** Plugin-owned live model refresh endpoint. */
 const WORKBUDDY_MODELS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/models/refresh";
 /** Plugin-owned local account rescan endpoint. */
@@ -3158,6 +3170,39 @@ function volatileFlagOf(field) {
 	return Config.dict?.[field]?.meta?.volatile === true;
 }
 /**
+* Per-account credit balances for one region, for the composer panel's table.
+*
+* ONE upstream read per account, which is exactly why this is its own route:
+* the panel calls it only while it is open, so the 5-minute readout never
+* multiplies its cost by the account count.
+*
+* Every account is listed even when its balance cannot be read — a credential
+* that no longer resolves, or an upstream that refused — because the panel's
+* job is to show which accounts exist and let the user switch. Such a row
+* carries NO `credits` field rather than `0`, so the panel renders "—" instead
+* of telling the user they are out of credits.
+*
+* Failures are contained per account: one dead credential must not blank the
+* table for the accounts that are fine.
+*/
+async function workBuddyAccountCredits(deps, region) {
+	const store = deps.store(region);
+	const accounts = await store.accounts();
+	const exclusions = await deps.accountExclusions?.(region).catch(() => void 0) ?? {};
+	return Promise.all(accounts.map(async (account) => {
+		const credential = await store.credentialFor(account.id).catch(() => void 0);
+		const credits = credential === void 0 ? void 0 : await deps.client.fetchCredits(credential).then((answer) => answer.total).catch(() => void 0);
+		const excludedBy = exclusions[account.id];
+		return {
+			id: account.id,
+			accountName: account.accountName,
+			selected: account.selected,
+			...credits === void 0 ? {} : { credits },
+			...excludedBy === void 0 ? {} : { excludedBy }
+		};
+	}));
+}
+/**
 * Assemble one region's card document. `region` is the tab the card is on;
 * the region-scoped store already answers with only that region's accounts,
 * so the document's model slots and account list are that region's by
@@ -3169,13 +3214,15 @@ async function workBuddyWebStatus(deps, region) {
 	const accounts = await store.accounts();
 	deps.regionUsable?.(region, accounts.length > 0);
 	const enabled = deps.regionEnabled(region);
+	const showCreditsInMainUi = deps.showCreditsInMainUi?.(region) ?? true;
 	const authStatus = await store.status();
 	const selectionExplicit = store.hasExplicitSelection();
 	if (authStatus.state !== "signed-out" && accounts.length === 0) return {
 		status: "signed-out",
 		accounts: [],
 		selectionExplicit,
-		enabled
+		enabled,
+		showCreditsInMainUi
 	};
 	let credential;
 	try {
@@ -3188,6 +3235,7 @@ async function workBuddyWebStatus(deps, region) {
 			message: safeMessage(error),
 			selectionExplicit,
 			enabled,
+			showCreditsInMainUi,
 			...await store.selectionLost() ? { selectionLost: true } : {},
 			...webAccounts.length === 0 ? await searchedPaths(store) : {}
 		};
@@ -3202,6 +3250,7 @@ async function workBuddyWebStatus(deps, region) {
 		tokenExpiresAtMs: credential.expiresAtMs,
 		selectionExplicit,
 		enabled,
+		showCreditsInMainUi,
 		accounts: accounts.map(toWebAccount),
 		models: deps.displayModels(region).map((model) => toWebModel(model, deps.contextBudgets(region))),
 		enabledModelIds: [...deps.enabledModelIds(region)],
@@ -3354,6 +3403,21 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				}
 			}
 		});
+		const disposeAccountCredits = ctx.webServer.register({
+			kind: "exact",
+			path: WORKBUDDY_ACCOUNT_CREDITS_PATH,
+			handler: async (req, res) => {
+				if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
+				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
+				const region = requestRegion(req, res);
+				if (region === void 0) return;
+				try {
+					json(res, 200, { accounts: await workBuddyAccountCredits(deps, region) });
+				} catch (error) {
+					json(res, 500, { error: safeMessage(error) });
+				}
+			}
+		});
 		const disposeAccounts = ctx.webServer.register({
 			kind: "exact",
 			path: WORKBUDDY_ACCOUNTS_REFRESH_PATH,
@@ -3586,6 +3650,7 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 			disposeCheckin();
 			disposeAccounts();
 			disposeUsage();
+			disposeAccountCredits();
 			disposeProbe();
 			disposePool();
 			disposeDiagWrite();
@@ -3785,6 +3850,22 @@ const poolConfig = z.object({
 });
 const regionStateConfig = z.object({
 	enabled: z.boolean().default(true).description("Whether this region's provider is offered to DSH (opt-out; false withdraws it entirely)"),
+	/**
+	* Whether this region's credit line shows at the DSH sidebar foot.
+	*
+	* Per-REGION rather than one global switch, because the two sides are
+	* independent providers the user may hold only one account on: a CN-only user
+	* has nothing to read from the international line and vice versa, and a
+	* single shared switch would force them to either show a permanently empty
+	* row or lose the one that works.
+	*
+	* ON by default (opt-out). The plugin card is not reachable in every host —
+	* a market plugin can own the Plugins tab and never render
+	* `plugins.bundle.config` — so a feature that is off until discovered would be
+	* off forever for those users. The line carries its own `×` in the sidebar,
+	* which is reachable exactly where the feature renders.
+	*/
+	showCreditsInMainUi: z.boolean().default(true).description("Show this region's remaining credits at the DSH sidebar foot (opt-out; the line carries its own hide button)"),
 	lastCatalog: z.array(modelConfig).default([]),
 	enabledModelIds: z.array(z.string()).default([]),
 	imageModelIds: z.array(z.string()).default([]),
@@ -4140,6 +4221,25 @@ function apply(ctx, config) {
 		store: (region) => stacks[region].store,
 		client,
 		accountUsable: accountUsabilityProbe,
+		/**
+		* Why each of the region's accounts cannot serve right now, for the composer
+		* panel's table.
+		*
+		* Runs the SAME `exclusionOf` the pool ranks by, against every account the
+		* region knows — not only pool members. Deriving it any other way (a second
+		* expiry comparison, or `probe.outcome` read raw) would let the panel call an
+		* account rate-limited while the pool has already moved past its cooldown.
+		*/
+		accountExclusions: async (region) => {
+			const probes = await readPoolProbes(region);
+			const nowMs = Date.now();
+			const out = {};
+			for (const [accountId, probe] of Object.entries(probes)) {
+				const excludedBy = exclusionOf(probe, nowMs);
+				if (excludedBy !== void 0) out[accountId] = excludedBy;
+			}
+			return out;
+		},
 		displayModels: (region) => displayModels(current(), region),
 		enabledModelIds: (region) => regionStateOf(current(), region).enabledModelIds ?? [],
 		imageModelIds: (region) => regionStateOf(current(), region).imageModelIds ?? [],
@@ -4148,6 +4248,13 @@ function apply(ctx, config) {
 		discoverModels,
 		regionEnabled: (region) => regionEnabled(current(), region),
 		/**
+		* The region's committed sidebar-credit flag, read from the same config the
+		* card writes. Exposed on the Host's answer because the browser settings
+		* mirror goes stale for this namespace on the affected 0.1.7 deployments,
+		* which made the switch look unable to turn the line off ("关闭不了").
+		*/
+		showCreditsInMainUi: (region) => regionStateOf(current(), region).showCreditsInMainUi !== false,
+		/**
 		* One minimal request per named model, through the region's own credential.
 		*
 		* Resolved here rather than in the route so the browser half never touches a

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型接入 DeepSeek Harness，并提供只读的积分概览与模型管理。",
-  "version": "3.6.0",
+  "version": "4.0.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",

package/screenshots.json

@@ -1,4 +1,5 @@
 [
   "docs/assets/dsh-connect-workbuddy-usage-card.png",
-  "docs/assets/dsh-connect-workbuddy-account-pool.png"
+  "docs/assets/dsh-connect-workbuddy-account-pool.png",
+  "docs/assets/dsh-connect-workbuddy-composer-credits.png"
 ]