dsh-connect-workbuddy 5.4.0 → 5.5.1

package/lib/{host-heartbeat-D5FWM_8k.js → host-heartbeat-BhgyeZWV.js}

@@ -1784,6 +1784,16 @@ const GLOBAL_CONFIG_PATH = "/v3/config";
 * host- and identity-insensitive on the CN side (measured 2026-10-21 on all
 * three CN hosts, under both the CLI and the app user agent: byte-identical),
 * so it is asked as the chat channel's own identity.
+*
+* IT DOES NOT EXIST ON THE GLOBAL GATEWAY. Measured 2026-10-22: this exact POST
+* against `www.workbuddy.ai` answers 404 `Route Not Found` (as do the four
+* neighbouring spellings tried under both POST and GET), while the same
+* credential reads that gateway's `/v3/config` normally and finds no load field
+* on any model. {@link WorkBuddyUpstreamClient.fetchModelBusy} is therefore
+* expected to THROW for that region — `withBusyLevels` in `src/index.ts` catches
+* it and ships the roster without levels. Kept as-is rather than region-gated:
+* the day upstream adds it, this needs no change, and the cost today is one
+* 404 per refresh that never blocks anything.
 */
 const MODEL_BUSY_PATH = "/v2/chat/busy";
 /**
@@ -5956,7 +5966,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "5.4.0";
+const WORKBUDDY_CONNECT_VERSION = "5.5.1";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -792,6 +792,22 @@ interface WorkBuddyPromo {
  * `/v3/config`, this endpoint is not channel-sensitive, so the plugin asks it as
  * the CLI agent it already is on the chat path — no product identity needed.
  *
+ * THE GLOBAL GATEWAY DOES NOT HAVE IT (measured 2026-10-22, and the reason the
+ * README says "CN only"). `www.workbuddy.ai` answers that same POST with
+ * `404 {"error_msg":"404 Route Not Found"}`, and so do `/v3/chat/busy`,
+ * `/v2/models/busy`, `/v2/chat/model/busy` and `/v1/chat/busy` under both POST
+ * and GET — twelve path/method pairs, twelve 404s. The credential is fine: the
+ * SAME token reads that gateway's `/v3/config` (200, 28 models), and none of
+ * those models carries a field whose name mentions busy / load / queue / wait /
+ * level / pressure. So this is not a wrong path, a wrong identity or a
+ * permission problem — upstream never published the fact for that region. The
+ * probe therefore fails there on every refresh; it is caught (see
+ * `withBusyLevels` in `src/index.ts`), logged once, and the roster ships with
+ * no levels, which the card renders as no badge. Deliberately NOT "fixed" by
+ * inferring a level from latency or credits: a made-up load badge is worse than
+ * no badge, and the plugin's whole rule here is to never state a fact the
+ * upstream did not state.
+ *
  * THE LEVELS ARE THE APP'S OWN ENUM, and anything outside it is `unknown`:
  * `idle` / `normal` / `busy` / `congested` / `unavailable`. The app's own words
  * (from its `im-channels` bundle, `chatInput.modelSelector.busy.*`) are
@@ -1597,6 +1613,7 @@ interface CliBridgeSettings {
   allowUnattended?: boolean;
   maxReplyChars?: number;
   injectResult?: boolean;
+  sessionContinuity?: string;
   maxTurnsPerSessionHour?: number;
   maxTurnsPerHour?: number;
 }
@@ -2894,6 +2911,57 @@ declare function withWorkBuddyRegion(path: string, region: WorkBuddyWebRegion):
  * answer 400 instead of guessing.
  */
 declare function regionOfStatusUrl(url: string): WorkBuddyWebRegion | undefined;
+/**
+ * Narrow a settings value to the `regions` map. Accepts EITHER the whole
+ * settings section (the Host's resolved `Config`) OR the `regions` map itself,
+ * and unwraps the former. This tolerance is deliberate: passing the whole
+ * section where the map was expected was a real shipped bug in the sibling
+ * project — the lookup then read `section['cn']` (absent), so the card's
+ * checkbox reported `true` forever and clicking it appeared to do nothing even
+ * though the write succeeded.
+ *
+ * The resolved section delivers `regions` as a `{get(): T}` LIVE reference, and
+ * a live reference is `typeof === 'object'` and not an array — so it passes a
+ * naive object check and gets returned as if it were the map. Every lookup on
+ * it is then `undefined`: the enabled flag reads back as "on" forever (the very
+ * symptom described above), and a merge that spreads this map silently drops
+ * the region it was not editing. Unwrap before narrowing.
+ *
+ * THE HOP IS CONDITIONAL, and that is the whole point (a saved manual pool
+ * order "disappearing"). "Has a `regions` key" is NOT sufficient evidence that
+ * the caller passed the whole section: the `regions` MAP can legitimately carry
+ * a `regions` key of its own, because an earlier build could write a sibling
+ * field name into it — a live profile was found with `accounts`, `regions` and
+ * `cliBridge` sitting beside `cn` / `global`. Hopping there means reading a
+ * DIFFERENT, older copy of the same region: measured, the same document returned
+ * `['c','a','b']` when read as a section and `[]` when read as a map. So a value
+ * counts as the whole section only when it shows a key that is neither a region
+ * id nor a known sibling — i.e. it looks like a settings document. A plain (or
+ * dirty) `cn` / `global` map is returned as-is.
+ *
+ * THE RESULT IS HEALED, not merely narrowed — see {@link healedRegionsMap}.
+ * Returning the map "as-is" is what let a corrupted document keep reading as
+ * half-empty: the field held `cn` at level 0 and `global` only one level down,
+ * so every `global` question answered "never configured" even though the file
+ * still had the answer. Reads and writes both come through here, so healing
+ * here fixes both halves at once (the Host's `regionStateOf`, the card's
+ * `nextRegion*` write bases, and the catalog repair's write).
+ */
+declare function regionsMapOf(value: unknown): Record<string, unknown>;
+/**
+ * Whether the stored `regions` FIELD still carries the debris described at
+ * {@link REGION_MAP_FOREIGN_KEYS}.
+ *
+ * Pass the field itself (`Config['regions']`), not the whole section: the
+ * section legitimately has `accounts` / `cliBridge` beside `regions`, so asking
+ * that question of a section would always answer "corrupt".
+ *
+ * The catalog repair uses it to write even when the model directory already
+ * matches: without that, a profile whose directory is in agreement would never
+ * be cleaned — the very shape that made the pool look unsaved would outlive the
+ * fix that stops producing it.
+ */
+declare function regionsFieldIsCorrupt(value: unknown): boolean;
 /**
  * Whether one region's provider is switched on. Opt-out semantics: only an
  * explicit `false` disables it, so a config written before this switch existed
@@ -3802,6 +3870,16 @@ interface WorkBuddyStatusRouteOptions {
    * probe.
    */
   accountUsable?(region: WorkBuddyRegion, account: WorkBuddyRecoveryCandidate): Promise<boolean>;
+  /**
+   * The CLI route's live turns, for the composer readout.
+   *
+   * A READ of the bridge's in-memory board, not a computation: the route exists
+   * so a turn that is still running has somewhere to be observed from, and the
+   * board is the only thing that knows. Absent (the bridge is switched off, or
+   * this Host mounted the status routes without it) means "no live turns", which
+   * the chip renders as nothing at all.
+   */
+  cliLive?(): unknown;
   /**
    * Why each of the region's accounts cannot serve right now, keyed by account
    * id. Absent key (or an absent dep) means "no reason known" — the composer
@@ -4419,4 +4497,4 @@ declare function legacyAttributionRegion(value: Config, accountsFor: (region: Wo
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { CREDENTIAL_REJECTED_CODE, Config, DEFAULT_PROBE_INPUT_TOKENS, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, NATIVE_MODALITY_BY_MODEL_ID, PROBE_INPUT_TOKEN_CHOICES, PROBE_MAX_TOKENS, PROBE_SYSTEM_PROMPT, REFUSES_OFF_MODEL_IDS, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROBE_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_TPS_PATH, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, type WorkBuddyCandidateFailure, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, type WorkBuddyCredentialRecovery, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, WorkBuddyEncryptedCredentialError, type WorkBuddyEncryptedField, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyNativeModality, WorkBuddyPoolPreferences, type WorkBuddyProbeClient, type WorkBuddyProbeOutcome, type WorkBuddyProbeResult, type WorkBuddyProbeStore, type WorkBuddyReasoning, type WorkBuddyRecoveryCandidate, type WorkBuddyRefreshOutcome, WorkBuddyRegionState, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyUsabilityProbeOptions, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, cooldownOf, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, creditOfStream, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, defaultOffModelIds, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, imageDefaultFor, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, knownRegionOf, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, modelIdOfBody, name, nativeModalityOf, nextRegionEnabled, nextRegionSlots, offDefaultFor, openEncryptedField, outcomeOfFailure, parseCreditMultiplier, parseReasoning, parseRetryAfter, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, probeModel, probeRequestBody, probeSucceeded, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withEffectiveOff, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { CREDENTIAL_REJECTED_CODE, Config, DEFAULT_PROBE_INPUT_TOKENS, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, NATIVE_MODALITY_BY_MODEL_ID, PROBE_INPUT_TOKEN_CHOICES, PROBE_MAX_TOKENS, PROBE_SYSTEM_PROMPT, REFUSES_OFF_MODEL_IDS, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROBE_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_TPS_PATH, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, type WorkBuddyCandidateFailure, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, type WorkBuddyCredentialRecovery, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, WorkBuddyEncryptedCredentialError, type WorkBuddyEncryptedField, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyNativeModality, WorkBuddyPoolPreferences, type WorkBuddyProbeClient, type WorkBuddyProbeOutcome, type WorkBuddyProbeResult, type WorkBuddyProbeStore, type WorkBuddyReasoning, type WorkBuddyRecoveryCandidate, type WorkBuddyRefreshOutcome, WorkBuddyRegionState, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyUsabilityProbeOptions, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, cooldownOf, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, creditOfStream, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, defaultOffModelIds, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, imageDefaultFor, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, knownRegionOf, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, modelIdOfBody, name, nativeModalityOf, nextRegionEnabled, nextRegionSlots, offDefaultFor, openEncryptedField, outcomeOfFailure, parseCreditMultiplier, parseReasoning, parseRetryAfter, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, probeModel, probeRequestBody, probeSucceeded, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, regionsFieldIsCorrupt, regionsMapOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withEffectiveOff, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };