dsh-connect-workbuddy 5.2.2 → 5.3.0

package/lib/client.js

@@ -530,7 +530,7 @@ window.__ModuleLoader__.load({
 					headers: { "Content-Type": "application/json" },
 					body: JSON.stringify({
 						field,
-						value: { [region]: value }
+						value: region === void 0 ? value : { [region]: value }
 					})
 				});
 			} catch (error) {
@@ -544,6 +544,56 @@ window.__ModuleLoader__.load({
 			return (await response.json().catch(() => void 0))?.value;
 		}
 		/**
+		* Read the committed CodeBuddy-CLI switch out of a settings snapshot.
+		*
+		* Only an explicit `true` is ON, matching the schema's `default(false)`: this
+		* switch authorizes a child process that edits files and spends CodeBuddy
+		* quota, so an absent value must never read as consent.
+		*/
+		function cliBridgeEnabledOf(configured) {
+			const bridge = configured?.cliBridge;
+			return typeof bridge === "object" && bridge !== null && bridge.enabled === true;
+		}
+		/**
+		* Write the GLOBAL CodeBuddy-CLI switch, verifying it landed.
+		*
+		* Deliberately NOT a region field: one route, one budget, one switch. The two
+		* writers are the same as everywhere else — the plugin's Host endpoint first
+		* (authoritative merge, so the tuned caps beside `enabled` survive), the
+		* settings scope second — because this namespace's browser mirror is documented
+		* as stale on the affected 0.1.7 deployments, and a switch that merely *looks*
+		* flipped is exactly the "关闭不了" class of report.
+		*
+		* @param scope - the bound settings scope for this plugin's namespace.
+		* @param enabled - the desired state.
+		* @throws {WorkBuddySettingsWriteError} when neither writer persists the value.
+		*/
+		async function writeCliBridgeEnabled(scope, enabled) {
+			let hostError;
+			try {
+				const authoritative = await saveViaHostEndpoint("cliBridge", void 0, { enabled });
+				if (authoritative !== void 0) try {
+					await scope.set("cliBridge", authoritative);
+				} catch {}
+				return;
+			} catch (error) {
+				hostError = error;
+			}
+			const stored = unwrapVolatileDeep(scope.getSnapshot().value?.cliBridge);
+			const next = {
+				...typeof stored === "object" && stored !== null ? stored : {},
+				enabled
+			};
+			let delivered = false;
+			try {
+				delivered = await scope.set("cliBridge", next) !== false;
+			} catch {
+				delivered = false;
+			}
+			if (delivered && cliBridgeEnabledOf(scope.getSnapshot().value)) return;
+			throw hostError instanceof Error ? hostError : new WorkBuddySettingsWriteError("cliBridge", "neither the Host save endpoint nor the settings scope persisted the value");
+		}
+		/**
 		* Write one volatile field, then confirm the value actually landed.
 		*
 		* ORDER MATTERS, and getting it wrong DELETES DATA. The two writers do not have
@@ -1014,6 +1064,29 @@ window.__ModuleLoader__.load({
 		*/
 		const DAYS_AT_MS = 2 * DAY_MS$1;
 		/**
+		* The recovery form of the same duration: "约 2 小时后恢复".
+		*
+		* The bare duration answers "how long?", but beside a red dot on an account row
+		* it left the most important half unsaid: what happens when it elapses. "约 2
+		* 小时后" reads equally well as "the limit lifts" and as "it expires into
+		* something else", and on a row whose whole job is to say whether the account
+		* can serve, that ambiguity is the question the reader came with.
+		*
+		* Same numbers, same rounding, same empty-string contract as
+		* {@link remainingText} — this only appends the verb. Kept as a separate
+		* function rather than a parameter so the two callers that must stay verbless
+		* (the card's "之后可再用" sentence, which already contains its own verb) cannot
+		* accidentally grow a second one.
+		*/
+		function recoversInText(t, untilMs, nowMs) {
+			const left = untilMs - nowMs;
+			if (left <= 0) return "";
+			if (left < MINUTE_MS$1) return t("row.recoversImminent");
+			if (left < HOUR_MS$1) return t("row.recoversMinutes", { count: Math.round(left / MINUTE_MS$1) });
+			if (left < DAYS_AT_MS) return t("row.recoversHours", { count: Math.round(left / HOUR_MS$1) });
+			return t("row.recoversDays", { count: Math.round(left / DAY_MS$1) });
+		}
+		/**
 		* A short "约 N 分钟后 / 约 N 小时后 / 约 N 天后", or `''` once the moment passed.
 		*
 		* The empty string is the contract callers depend on: an elapsed cooldown means
@@ -1039,6 +1112,29 @@ window.__ModuleLoader__.load({
 		function outcomeOk(outcome) {
 			return outcome === "ok";
 		}
+		/**
+		* The MARK form of one probe outcome: the verdict alone, for a slot that cannot
+		* hold an explanation (issue #108).
+		*
+		* `outcomeText` is the right function wherever the reader has room — the pool
+		* card's probe column, the test log — and there the extra sentence earns its
+		* width. The composer panel is a different slot: one line, beside an account
+		* name, in a column about 180 px wide. `row.probeChannelRejected` is 88
+		* characters in Chinese and 179 in English, so it could never fit; with
+		* `nowrap` + `overflow:hidden` on the row it was cut mid-sentence, which the
+		* reporter read as broken rendering.
+		*
+		* So this function returns the SHORT label where one is declared and falls back
+		* to {@link outcomeText} otherwise. The full sentence is never lost: the row's
+		* `title` carries `availabilityLine`, which keeps every word and the absolute
+		* instant, and the pool card still prints it in full.
+		*/
+		function outcomeMarkText(t, outcome) {
+			switch (outcome) {
+				case "channel-rejected": return t("row.probeChannelRejectedShort");
+				default: return outcomeText(t, outcome);
+			}
+		}
 		/** A short, localizable label for one probe outcome. */
 		function outcomeText(t, outcome) {
 			switch (outcome) {
@@ -1123,11 +1219,11 @@ window.__ModuleLoader__.load({
 			const probe = account.probe;
 			if (probe !== void 0) {
 				if (probe.retryAtMs !== void 0) {
-					const left = remainingText(t, probe.retryAtMs, nowMs);
-					return left === "" ? outcomeText(t, probe.outcome) : `${outcomeText(t, probe.outcome)} · ${left}`;
+					const left = recoversInText(t, probe.retryAtMs, nowMs);
+					return left === "" ? outcomeMarkText(t, probe.outcome) : `${outcomeMarkText(t, probe.outcome)} · ${left}`;
 				}
-				if (probe.outcome === "rate-limited" || probe.outcome === "model-busy" || probe.outcome === "out-of-credit") return `${outcomeText(t, probe.outcome)} · ${t("row.poolRetryUnknown")}`;
-				return outcomeText(t, probe.outcome);
+				if (probe.outcome === "rate-limited" || probe.outcome === "model-busy" || probe.outcome === "out-of-credit") return `${outcomeMarkText(t, probe.outcome)} · ${t("row.poolRetryUnknown")}`;
+				return outcomeMarkText(t, probe.outcome);
 			}
 			if (account.excludedBy !== void 0) return exclusionLabel(t, account.excludedBy);
 		}
@@ -4154,7 +4250,7 @@ window.__ModuleLoader__.load({
    CONTRAST colour, so a ticked box painted itself as a heavy black pill — the
    loudest object in a section made of plain 13px text. */
 .dsm-workbuddy-pref input{flex:none;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
-.dsm-workbuddy-pref-check,.dsm-workbuddy-image-tool-check{inline-size:15px;block-size:15px;margin:3px 0 0}
+.dsm-workbuddy-pref-check,.dsm-workbuddy-image-tool-check,.dsm-workbuddy-cli-bridge-check{inline-size:15px;block-size:15px;margin:3px 0 0}
 .dsm-workbuddy-pref input:disabled{cursor:default}
 .dsm-workbuddy-pref:has(input:disabled){opacity:.6;cursor:default}
 /* The NAME and what it does are TWO lines, not one wrapped blob: first what the
@@ -4858,9 +4954,20 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-composer-panel-mark{
   display:flex;flex-wrap:wrap;align-items:baseline;
   font-size:11px;line-height:15px;
+  /* WRAP, do not clip (issue #108). The switch above sets white-space:nowrap
+     and overflow:hidden for the NAME, which must stay on one line and ellipsise.
+     Inherited here, those two rules cut the reason mark mid-sentence with no
+     ellipsis at all — the reporter saw "…不是这个账号—" and read it as broken
+     rendering, because a hard cut carries no signal that more exists. The mark
+     is the one part of this row whose length is NOT under the layout's control
+     (it is a translated sentence, and the two locales differ by 2x), so it
+     wraps instead: an extra line is a legible outcome, a severed stroke is not.
+     overflow-wrap:anywhere because Chinese has no spaces to break at. */
+  white-space:normal;
+  overflow-wrap:anywhere;
 }
 .dsm-workbuddy-composer-panel-mark-current{color:var(--dsw-alias-state-success-primary,#22a06b)}
-.dsm-workbuddy-composer-panel-mark-reason{color:var(--dsw-alias-state-warn-primary,#f59e0b)}
+.dsm-workbuddy-composer-panel-mark-reason{color:var(--dsw-alias-state-warn-primary,#f59e0b);min-width:0}
 .dsm-workbuddy-composer-panel-mark-current+.dsm-workbuddy-composer-panel-mark-reason::before{
   content:" · ";color:var(--dsw-alias-label-dimmed,rgba(127,127,127,.6));
 }
@@ -5369,6 +5476,14 @@ window.__ModuleLoader__.load({
 			*/
 			const [togglingCredits, setTogglingCredits] = (0, react.useState)(void 0);
 			/**
+			* The OPTIONAL CodeBuddy CLI route switch (global: one switch, one budget).
+			*
+			* `undefined` until the first Host answer arrives, so the box renders the
+			* committed value instead of guessing — the same rule as `creditsShownOn`.
+			*/
+			const [cliBridgeOn, setCliBridgeOn] = (0, react.useState)(void 0);
+			const [cliBridgeBusy, setCliBridgeBusy] = (0, react.useState)(false);
+			/**
 			* Probe results, keyed by region then model id.
 			*
 			* Kept per region for the same reason drafts are: the two tabs are separate
@@ -5796,6 +5911,39 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setTogglingCredits(void 0);
 				}
 			};
+			/**
+			* Whether the CLI route is mounted.
+			*
+			* Host answer first, settings mirror second, for the same measured reason as
+			* `imageToolOn`: this namespace's browser mirror goes stale on the affected
+			* deployments, and here a stale `true` would claim a spending capability is on.
+			*/
+			const cliBridgeSwitchedOn = () => {
+				if (cliBridgeOn !== void 0) return cliBridgeOn;
+				const fromHost = statusByRegion[activeRegion]?.cliBridgeEnabled;
+				if (typeof fromHost === "boolean") return fromHost;
+				return cliBridgeEnabledOf(settingsScope?.getSnapshot().value);
+			};
+			/**
+			* Flip the global CLI-route switch.
+			*
+			* The Host rebuilds only this route on the change (`cliBridge` is volatile),
+			* so no provider stack is disposed and no in-flight request is interrupted.
+			* Re-reads the usage afterwards so the box shows the COMMITTED value.
+			*/
+			const toggleCliBridge = async (enabled) => {
+				if (settingsScope === void 0) return;
+				setCliBridgeBusy(true);
+				try {
+					await writeCliBridgeEnabled(settingsScope, enabled);
+					if (mounted.current) setCliBridgeOn(enabled);
+					await refreshUsage(activeRegion);
+				} catch (error) {
+					if (mounted.current) setAccountError(error instanceof Error ? error.message : t("row.requestFailed"));
+				} finally {
+					if (mounted.current) setCliBridgeBusy(false);
+				}
+			};
 			const toggleImageTool = async (item, enabled) => {
 				if (settingsScope === void 0) return;
 				setTogglingCredits(item);
@@ -6139,6 +6287,17 @@ window.__ModuleLoader__.load({
 				}
 			};
 			/**
+			* Whether ANY speed run is in flight, for the sweep button's disabled state.
+			*
+			* NOT `tpsProbing !== undefined`. `tpsProbing` is a record that is ALWAYS an
+			* object, so that comparison is permanently true and the button was
+			* permanently disabled — the defect this corrects. The other two sweep buttons
+			* compare `sweeping !== undefined` because `sweeping` really is an
+			* `{done,total} | undefined` pair; this map has no such absent state, so the
+			* emptiness of its keys is what "busy" means.
+			*/
+			const tpsBusy = Object.keys(tpsProbing).length > 0;
+			/**
 			* Sweep speed for the models this region has ENABLED.
 			*
 			* Enabled-only rather than the whole catalog: a speed run is three real
@@ -6303,9 +6462,41 @@ window.__ModuleLoader__.load({
 					})]
 				})]
 			}) : null;
+			/**
+			* The CLI-route switch.
+			*
+			* GLOBAL, so it is not gated on the active tab's provider being on — the route
+			* pulls its credential from whichever region still has a signed-in account.
+			* Its own class (not `.dsm-workbuddy-pref-check`) for the same reason the image
+			* box has one: the credit-switch suite's "exactly one switch" selector must
+			* keep resolving to the credit box alone.
+			*/
+			const cliBridgePreference = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+				className: "dsm-workbuddy-pref",
+				title: t("row.cliBridgeHint"),
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+					type: "checkbox",
+					className: "dsm-workbuddy-cli-bridge-check",
+					checked: cliBridgeSwitchedOn(),
+					disabled: !canWrite || saving || poolBusy || cliBridgeBusy,
+					onChange: (event) => {
+						toggleCliBridge(event.target.checked);
+					}
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					className: "dsm-workbuddy-pref-copy",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsm-workbuddy-pref-label",
+						children: t("row.cliBridgeLabel")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsm-workbuddy-pref-hint",
+						children: t("row.cliBridgeHint")
+					})]
+				})]
+			});
 			const creditPreferences = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsm-workbuddy-prefs",
 				children: [
+					cliBridgePreference,
 					imageToolPreference,
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 						className: "dsm-workbuddy-pref",
@@ -6614,7 +6805,7 @@ window.__ModuleLoader__.load({
 														/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 															type: "button",
 															className: "dsm-btn dsm-btn-outline dsm-workbuddy-models-sweep",
-															disabled: busy || tpsSweeping !== void 0 || tpsProbing !== void 0 || activeEnabledIds.size === 0,
+															disabled: busy || tpsSweeping !== void 0 || tpsBusy || activeEnabledIds.size === 0,
 															title: t("row.tpsSweepEnabledHint"),
 															onClick: sweepTpsEnabledModels,
 															children: tpsSweeping === void 0 ? t("row.tpsSweepEnabled") : t("row.tpsTesting", {
@@ -8087,6 +8278,7 @@ window.__ModuleLoader__.load({
 			"row.probeCredentialRejected": "✗ WorkBuddy refused this account's token — sign in again or pick another account",
 			"row.probePolicyRejected": "✗ WorkBuddy's server refused this request under its content policy — re-signing in won't help; try the desktop app or another region/account",
 			"row.probeChannelRejected": "✗ The gateway refused the PROMPT itself, not this account — the opening of a system message matched its third-party-agent filter, so another account or region answers the same way",
+			"row.probeChannelRejectedShort": "✗ Gateway refused the prompt",
 			"row.probeNotFound": "✗ The upstream does not know this model",
 			"row.probeUnavailable": "✗ The upstream could not be reached — no usable answer came back",
 			"row.probeFailed": "✗ Test failed",
@@ -8184,6 +8376,10 @@ window.__ModuleLoader__.load({
 			"row.remainingMinutes": "in about {count} min",
 			"row.remainingHours": "in about {count} h",
 			"row.remainingDays": "in about {count} d",
+			"row.recoversImminent": "recovering any moment now",
+			"row.recoversMinutes": "recovers in about {count} min",
+			"row.recoversHours": "recovers in about {count} h",
+			"row.recoversDays": "recovers in about {count} d",
 			"row.poolProbeJustNow": "just now",
 			"row.poolProbeMinutesAgo": "{count} min ago",
 			"row.poolProbeHoursAgo": "{count} h ago",
@@ -8273,6 +8469,8 @@ window.__ModuleLoader__.load({
 			"row.poolRowRemoved": "{accountName}: hidden from the list. 「Detect accounts again」 re-adds it; the desktop app stays signed in.",
 			"row.poolRowRemoving": "Removing the account…",
 			"row.poolRowRemoveDesktopOnly": "{accountName}: hidden from the list — this account comes from the desktop app's own sign-in, which is left untouched. 「Detect accounts again」 re-adds it.",
+			"row.cliBridgeLabel": "Let the local CodeBuddy CLI do the work",
+			"row.cliBridgeHint": "Adds the codebuddy_ask tool and the /codebuddy command. Each call spends CodeBuddy quota (and, with injectResult on, one DSH turn). Off by default.",
 			"row.imageToolLabel": "Let the model draw images",
 			"row.imageToolHint": "Adds the workbuddy_draw_image tool, which the MODEL may call on its own — about 5.71 credits per image, with no per-call confirmation. Off means the tool is not registered at all.",
 			"row.showCreditsCn": "Show credits in the composer toolbar",
@@ -8446,6 +8644,7 @@ window.__ModuleLoader__.load({
 			"row.probeCredentialRejected": "✗ WorkBuddy 拒绝了这个账号的 token——请重新登录或换一个账号",
 			"row.probePolicyRejected": "✗ WorkBuddy 服务端按内容策略拒绝了这次请求——重新登录无效；可在桌面端验证或切换区域/账号",
 			"row.probeChannelRejected": "✗ 网关拦的是提示词本身，不是这个账号——某条 system 消息的开头命中了它的第三方 agent 过滤，换账号或换区域都会得到同一个答案（测试能过、聊天被拒，正是这个原因）",
+			"row.probeChannelRejectedShort": "✗ 网关拦的是提示词",
 			"row.probeNotFound": "✗ 上游不认识这个模型",
 			"row.probeUnavailable": "✗ 连不上上游——上游没有给出可用答复",
 			"row.probeFailed": "✗ 测试失败",
@@ -8543,6 +8742,10 @@ window.__ModuleLoader__.load({
 			"row.remainingMinutes": "约 {count} 分钟后",
 			"row.remainingHours": "约 {count} 小时后",
 			"row.remainingDays": "约 {count} 天后",
+			"row.recoversImminent": "即将恢复",
+			"row.recoversMinutes": "约 {count} 分钟后恢复",
+			"row.recoversHours": "约 {count} 小时后恢复",
+			"row.recoversDays": "约 {count} 天后恢复",
 			"row.poolProbeJustNow": "刚刚",
 			"row.poolProbeMinutesAgo": "{count} 分钟前",
 			"row.poolProbeHoursAgo": "{count} 小时前",
@@ -8632,6 +8835,8 @@ window.__ModuleLoader__.load({
 			"row.poolRowRemoved": "{accountName}：已从列表中隐藏。点「重新检测账号」会重新加入，桌面 App 的登录不受影响。",
 			"row.poolRowRemoving": "正在删除账号…",
 			"row.poolRowRemoveDesktopOnly": "{accountName}：已从列表中隐藏——这个账号来自桌面 App 自己的登录，该登录未被改动。点「重新检测账号」会重新加入。",
+			"row.cliBridgeLabel": "允许调用本机 CodeBuddy CLI 干活",
+			"row.cliBridgeHint": "开启后多出 codebuddy_ask 工具与 /codebuddy 指令；每次调用花 CodeBuddy 配额（injectResult 开着时还会再花一次 DSH token）。默认关闭。",
 			"row.imageToolLabel": "允许模型自主生图",
 			"row.imageToolHint": "开启后模型可以自己调用 workbuddy_draw_image 画图——约 5.71 积分/张，没有逐次确认。关闭时该工具根本不会注册。",
 			"row.showCreditsCn": "在输入框工具栏显示积分读数",

package/lib/{host-heartbeat-r1M_OXJI.js → host-heartbeat-_EvGiAek.js}

@@ -5861,7 +5861,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "5.2.2";
+const WORKBUDDY_CONNECT_VERSION = "5.3.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -1556,6 +1556,32 @@ declare class WorkBuddyCatalog {
   set(models: readonly WorkBuddyModelInfo[]): void;
 }
 //#endregion
+//#region src/cli-bridge/mount.d.ts
+/**
+ * The `cliBridge` settings as they arrive from the config schema.
+ *
+ * Every field is optional because the schema may hand over a partial object, and
+ * a user who edits only one key must not have to restate the rest.
+ */
+interface CliBridgeSettings {
+  enabled?: boolean;
+  binary?: string;
+  model?: string;
+  permissionMode?: string;
+  effort?: string;
+  maxTurns?: number;
+  timeoutSecs?: number;
+  regionOrder?: string;
+  workingDir?: string;
+  allowedDirs?: string;
+  appendSystemPrompt?: string;
+  allowUnattended?: boolean;
+  maxReplyChars?: number;
+  injectResult?: boolean;
+  maxTurnsPerSessionHour?: number;
+  maxTurnsPerHour?: number;
+}
+//#endregion
 //#region src/off-thinking.d.ts
 /**
  * Ids observed to REFUSE `reasoning_effort: "off"` with HTTP 400 despite
@@ -3104,6 +3130,17 @@ type WorkBuddyWebUsage =
    * after a switch-off that never landed.
    */
   imageToolEnabled?: boolean;
+  /**
+   * Whether the OPTIONAL CodeBuddy CLI route is mounted (tool `codebuddy_ask`
+   * + command `/codebuddy`).
+   *
+   * GLOBAL, not per region: the route has ONE switch for both regions, so the
+   * same value rides on every region's answer and the card reads it off the
+   * active tab. Absent reads as OFF — this switch authorizes a child process
+   * that edits files and spends CodeBuddy quota, so a Host that cannot answer
+   * must not be read as consent.
+   */
+  cliBridgeEnabled?: boolean;
   /** WHERE this region's readout sits (issue #62); absent means `composer`. */
   creditPosition?: WorkBuddyCreditPosition;
   message?: string;
@@ -3149,6 +3186,17 @@ type WorkBuddyWebUsage =
    * after a switch-off that never landed.
    */
   imageToolEnabled?: boolean;
+  /**
+   * Whether the OPTIONAL CodeBuddy CLI route is mounted (tool `codebuddy_ask`
+   * + command `/codebuddy`).
+   *
+   * GLOBAL, not per region: the route has ONE switch for both regions, so the
+   * same value rides on every region's answer and the card reads it off the
+   * active tab. Absent reads as OFF — this switch authorizes a child process
+   * that edits files and spends CodeBuddy quota, so a Host that cannot answer
+   * must not be read as consent.
+   */
+  cliBridgeEnabled?: boolean;
   /** WHERE this region's readout sits (issue #62); absent means `composer`. */
   creditPosition?: WorkBuddyCreditPosition;
   source?: 'desktop' | 'dsh';
@@ -3629,6 +3677,19 @@ interface WorkBuddyStatusRouteOptions {
    * cannot answer must not be read as consent.
    */
   imageToolEnabled?(region: WorkBuddyRegion): boolean;
+  /**
+   * Whether the OPTIONAL CodeBuddy CLI route is mounted (`codebuddy_ask` tool +
+   * `/codebuddy` command).
+   *
+   * GLOBAL rather than per region — one switch, one route — so it takes no
+   * argument. Optional, and absent reads as OFF: this switch authorizes a child
+   * process to edit files and spend CodeBuddy quota, so an older Host that
+   * cannot answer must not be read as consent. The card reads it off the Host's
+   * answer for the same measured reason as `imageToolEnabled`: the browser's
+   * settings mirror is stale for this namespace on the affected 0.1.7
+   * deployments, and a stale `true` here would claim a spending capability is on.
+   */
+  cliBridgeEnabled?(): boolean;
   /**
    * Send one real-volume request to each named model of a region and report what
    * came back.
@@ -4207,6 +4268,15 @@ interface Config {
   imageModelIds?: string[];
   /** @deprecated See {@link Config.lastCatalog}. */
   contextBudgets?: Record<string, WorkBuddyContextBudget>;
+  /**
+   * The optional CLI route: let the locally signed-in CodeBuddy CLI do the work
+   * in a separate agent instead of proxying the gateway.
+   *
+   * It is OFF by default and completely independent of the provider stacks, so a
+   * config that never mentions it behaves exactly as before. This is a
+   * client-fingerprint workaround, not an account one — see `cli-bridge/runner`.
+   */
+  cliBridge?: CliBridgeSettings;
 }
 /**
  * Mark a schema's field as volatile on the DSH lines that support it.
@@ -4224,28 +4294,6 @@ interface Config {
  * moved up — which is exactly how the volatile-path defect below went unseen.
  */
 declare function asVolatile<T>(schema: z<T>): z<T>;
-/**
- * Deep copy of a config value with every `{get(): T}` live reference replaced
- * by the value it resolves to.
- *
- * {@link unwrapVolatile} only peels the ONE level a caller reads, which is all
- * the ordinary read paths need. Handing a config object to a settings service
- * is different: the service validates and `structuredClone`s the WHOLE object,
- * so a reference surviving anywhere inside it fails schema validation with a
- * message that names the field but not the cause —
- * `$.authFile expected string but got [object Object]`.
- *
- * That is exactly what happened on the 0.1.5 line once volatile marking became
- * active: `installSection` received the raw config, whose volatile fields were
- * live references, and every field it validated threw. The namespace never
- * registered, so the card's settings silently disappeared.
- *
- * The implementation now lives in the node-free host<->client bridge, because
- * the browser half needs the SAME unwrap before it spreads a resolved field —
- * spreading a live reference is `{get: <function>}`, which drops every sibling
- * region. It is imported and re-exported from here so the Host entry keeps
- * exposing it as part of its public API.
- */
 declare const Config: z<Config>;
 /**
  * One region's saved model state. A config written before the region split has