dsh-connect-workbuddy 5.8.5 → 5.9.0

package/lib/{host-heartbeat-4Ao_1fKu.js → host-heartbeat-C1tVU2IN.js}

@@ -1467,8 +1467,27 @@ function text(value) {
 *
 * Any other malformed value is left to the caller to drop — a wrong window
 * would hide a live promotion, and guessing is not this parser's job.
+*
+* THE TYPE GUARD IS LOAD-BEARING, NOT DEFENSIVE DECORATION (issue #139). The
+* upstream feeds a string, and `parseDaily`'s own `text()` would already have
+* dropped a number — but the SAVED `lastCatalog` is a second, independent
+* entrance to this function, and nothing on that path type-checks. A promotion
+* object rides through `toPersistedWorkBuddyModel` untouched (the settings
+* schema keeps unknown keys), survives `resolveRoster`, and reaches the
+* renderer's `selectPromoBadge`. A numeric `start` there used to throw
+* `value.trim is not a function` DURING RENDER, which the host's slot error
+* boundary turned into a blank configuration section — the page looked as if
+* the plugin had never installed.
+*
+* Refusing a non-string is the same answer the parser already gives every
+* other unreadable shape: drop the window rather than guess. Interpreting a
+* number as "minutes since midnight" was considered and rejected — `1380`
+* happens to mean 23:00, but no upstream has ever published that shape, and
+* inventing hours for a promotion the upstream never described is exactly the
+* overstatement this module exists to prevent.
 */
 function minutesOfClock(value) {
+	if (typeof value !== "string") return void 0;
 	const match = /^(\d{1,2}):(\d{2})$/.exec(value.trim());
 	if (match === null) return void 0;
 	const hours = Number(match[1]);
@@ -1528,8 +1547,27 @@ function parseHover(value) {
 		...textEn === void 0 ? {} : { textEn }
 	};
 }
-/** The upstream's `schedule.daily` → the windows this plugin can evaluate. */
-function parseDaily(value) {
+/**
+* What an unreadable endpoint actually was, for the one diagnostic line below.
+*
+* Deliberately coarse: a NUMBER is the shape a future upstream format change
+* would plausibly take (minutes since midnight), so it is named separately
+* from "some other non-string". Reporting the typeof is enough to tell the two
+* apart in a log without ever echoing upstream content into the console.
+*/
+function shapeOf(value) {
+	if (typeof value === "number") return "number";
+	if (value === null) return "null";
+	if (Array.isArray(value)) return "array";
+	return typeof value;
+}
+/**
+* The upstream's `schedule.daily` → the windows this plugin can evaluate.
+*
+* `label` names the entry for the diagnostic line and is passed in rather than
+* read from `value`: the entry id lives one level up, in `parsePromo`.
+*/
+function parseDaily(value, label) {
 	if (!Array.isArray(value)) return void 0;
 	const windows = [];
 	for (const entry of value) {
@@ -1537,8 +1575,12 @@ function parseDaily(value) {
 		if (raw === void 0) continue;
 		const start = text(raw["start"]);
 		const end = text(raw["end"]);
-		if (start === void 0 || end === void 0) continue;
-		if (minutesOfClock(start) === void 0 || minutesOfClock(end) === void 0) continue;
+		if (start === void 0 || end === void 0 || minutesOfClock(start) === void 0 || minutesOfClock(end) === void 0) {
+			try {
+				console.warn(`[dsh-connect-workbuddy] promotion "${label}": dropped an unreadable daily window (start: ${shapeOf(raw["start"])}, end: ${shapeOf(raw["end"])}); the upstream may have changed the time format`);
+			} catch {}
+			continue;
+		}
 		windows.push({
 			start,
 			end
@@ -1578,13 +1620,13 @@ function parseDiscount(value) {
 	};
 }
 /** The upstream's `schedule` → this plugin's schedule shape. */
-function parseSchedule(value) {
+function parseSchedule(value, label) {
 	const raw = record(value);
 	if (raw === void 0) return void 0;
 	const timezone = text(raw["timezone"]);
 	const validFrom = parseInstant(raw["validFrom"]);
 	const validUntil = parseInstant(raw["validUntil"]);
-	const daily = parseDaily(raw["daily"]);
+	const daily = parseDaily(raw["daily"], label);
 	const dailyUnusable = daily === void 0 && Array.isArray(raw["daily"]) && raw["daily"].length > 0;
 	if (timezone === void 0 && validFrom === void 0 && validUntil === void 0 && daily === void 0 && !dailyUnusable) return void 0;
 	return {
@@ -1605,11 +1647,12 @@ function parsePromo(value, source) {
 	const badge = parseBadge(raw["badge"]);
 	if (badge === void 0) return void 0;
 	const hover = parseHover(raw["hover"]);
-	const schedule = parseSchedule(raw["schedule"]);
+	const id = text(raw["id"]) ?? `${source}:${modelIds.join(",")}`;
+	const schedule = parseSchedule(raw["schedule"], id);
 	const discount = parseDiscount(raw["discount"]);
 	const priority = typeof raw["priority"] === "number" && Number.isFinite(raw["priority"]) ? raw["priority"] : 0;
 	return {
-		id: text(raw["id"]) ?? `${source}:${modelIds.join(",")}`,
+		id,
 		source,
 		modelIds,
 		badge,
@@ -6940,7 +6983,7 @@ function describeRosterSeenPayload(raw) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "5.8.5";
+const WORKBUDDY_CONNECT_VERSION = "5.9.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as parseCreditMultiplier, A as isEncryptedCredentialError, At as isEncryptedFieldWrapper, B as WorkBuddyCredentialRejectedError, Bt as writeFileAtomic, C as WorkBuddyCredentialStore, Ct as WORKBUDDY_APP_EXECUTABLE_ENV, D as defaultDesktopAuthDirs, Dt as fetchAtRestKeyPayload, E as defaultDesktopAuthCandidates, Et as deriveAtRestKeyId, F as workbuddyAccountId, Ft as readAtRestKey, G as forceNeutralHead, H as channelGateMemberOf, I as workbuddyOwnAuthPath, It as workbuddyAppExecutableCandidates, J as isCredentialRejectedError, K as isContextTooLongBody, L as CONTEXT_OVERFLOW_MARKER, M as legacyWorkbuddyOwnAuthPath, Mt as macosBundleExecutable, N as parseWorkBuddyAuth, Nt as macosNestedAppBundles, O as defaultDesktopAuthPath, Ot as findWorkbuddyAppExecutable, P as preferredAccountName, Pt as openEncryptedField, Q as openingEvidenceOfBody, R as CREDENTIAL_REJECTED_CODE, Rt as resolveDshHome, S as WORKBUDDY_AUTH_FILE_ENV, St as nativeModalityOf, T as authFileName, Tt as deriveAtRestKey, U as classifyUpstreamError, V as WorkBuddyUpstreamClient, W as declaredTools, X as knownRegionOf, Y as isFirstMessageGateBody, Z as modelIdOfBody, _ as deriveCatalog, _t as pickImageModel, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as NATIVE_MODALITY_BY_MODEL_ID, c as WORKBUDDY_CONNECT_VERSION, ct as REFUSES_OFF_MODEL_IDS, dt as offDefaultFor, et as parseReasoning, f as piAiRuntimeInfo, ft as offRefused, g as applyContextBudgets, gt as WorkBuddyImageError, h as WorkBuddyCatalog, ht as DEFAULT_IMAGE_SIZE, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as isWorkbuddyBundle, k as hasEncryptedCredentialFields, l as createFileRosterSeenStore, lt as defaultOffModelIds, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as withEffectiveOff, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as rewriteSessionTitleModel, p as FALLBACK_WORKBUDDY_MODELS, pt as recordRefusal, q as isConversationIdGateBody, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as attachBusyLevels, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as parseUpstreamModel, ut as lastRefusalFor, v as fallbackModelsFor, vt as parseQueueAnswer, w as WorkBuddyEncryptedCredentialError, wt as clearAtRestKeyCache, x as WORKBUDDY_AUTH_FILENAME, xt as imageDefaultFor, y as withoutRouters, yt as queueNoticeText, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as withFileLock } from "./host-heartbeat-4Ao_1fKu.js";
+import { $ as parseCreditMultiplier, A as isEncryptedCredentialError, At as isEncryptedFieldWrapper, B as WorkBuddyCredentialRejectedError, Bt as writeFileAtomic, C as WorkBuddyCredentialStore, Ct as WORKBUDDY_APP_EXECUTABLE_ENV, D as defaultDesktopAuthDirs, Dt as fetchAtRestKeyPayload, E as defaultDesktopAuthCandidates, Et as deriveAtRestKeyId, F as workbuddyAccountId, Ft as readAtRestKey, G as forceNeutralHead, H as channelGateMemberOf, I as workbuddyOwnAuthPath, It as workbuddyAppExecutableCandidates, J as isCredentialRejectedError, K as isContextTooLongBody, L as CONTEXT_OVERFLOW_MARKER, M as legacyWorkbuddyOwnAuthPath, Mt as macosBundleExecutable, N as parseWorkBuddyAuth, Nt as macosNestedAppBundles, O as defaultDesktopAuthPath, Ot as findWorkbuddyAppExecutable, P as preferredAccountName, Pt as openEncryptedField, Q as openingEvidenceOfBody, R as CREDENTIAL_REJECTED_CODE, Rt as resolveDshHome, S as WORKBUDDY_AUTH_FILE_ENV, St as nativeModalityOf, T as authFileName, Tt as deriveAtRestKey, U as classifyUpstreamError, V as WorkBuddyUpstreamClient, W as declaredTools, X as knownRegionOf, Y as isFirstMessageGateBody, Z as modelIdOfBody, _ as deriveCatalog, _t as pickImageModel, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as NATIVE_MODALITY_BY_MODEL_ID, c as WORKBUDDY_CONNECT_VERSION, ct as REFUSES_OFF_MODEL_IDS, dt as offDefaultFor, et as parseReasoning, f as piAiRuntimeInfo, ft as offRefused, g as applyContextBudgets, gt as WorkBuddyImageError, h as WorkBuddyCatalog, ht as DEFAULT_IMAGE_SIZE, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as isWorkbuddyBundle, k as hasEncryptedCredentialFields, l as createFileRosterSeenStore, lt as defaultOffModelIds, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as withEffectiveOff, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as rewriteSessionTitleModel, p as FALLBACK_WORKBUDDY_MODELS, pt as recordRefusal, q as isConversationIdGateBody, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as attachBusyLevels, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as parseUpstreamModel, ut as lastRefusalFor, v as fallbackModelsFor, vt as parseQueueAnswer, w as WorkBuddyEncryptedCredentialError, wt as clearAtRestKeyCache, x as WORKBUDDY_AUTH_FILENAME, xt as imageDefaultFor, y as withoutRouters, yt as queueNoticeText, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as withFileLock } from "./host-heartbeat-C1tVU2IN.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -85,6 +85,10 @@ import { isIP } from "node:net";
 * `supportsImages` ride along for the same reason: the upstream publishes
 * them, the saved copy is a snapshot of one moment, and a stale multiplier is
 * a wrong PRICE shown to the user.
+*
+* `promos` is NOT in this list — see {@link overlayLiveCapabilities} for why it
+* needs a different rule (it must be able to CLEAR a saved value, which this
+* loop cannot express).
 */
 const LIVE_OWNED_FIELDS = [
 	"reasoning",
@@ -110,6 +114,31 @@ const LIVE_OWNED_FIELDS = [
 * and the user's effective choice is stamped over it by `withEffectiveOff`
 * afterwards. So the overlay restores the declaration, and the user's tick
 * still wins.
+*
+* `promos` IS LIVE-OWNED TOO, AND IS REPLACED UNCONDITIONALLY. It cannot use
+* the loop above, because that loop only writes a field the live entry HAS —
+* which would keep a saved promotion forever once the upstream withdrew it.
+* Both directions were observed to be wrong before this rule existed:
+*
+*   - saved WITHOUT `promos`, live WITH them → the live promotions were
+*     dropped entirely, so a model on a night discount drew no badge at all;
+*   - saved WITH old `promos`, live with new ones → the saved ones won, so a
+*     promotion whose hours the upstream had since changed kept advertising
+*     the OLD hours.
+*
+* The card persists `promos` into `lastCatalog` (the settings schema keeps
+* unknown keys), so a user who saved the directory once had their badges
+* frozen at that moment — the exact opposite of what `src/promo.ts` promises
+* ("a badge is a function of the clock, not of the fetch"). The upstream's
+* current answer therefore REPLACES the saved one, including when that answer
+* is "no promotions at all": a badge the upstream no longer publishes must
+* stop being drawn, and a standing entry with no schedule has no absolute
+* window to expire it on its own.
+*
+* The key is DELETED rather than set to `undefined` when the live entry has
+* no promotions, for the same reason `resolveRoster` deletes `busyLevel`: an
+* explicit `undefined` survives `structuredClone` and the settings write
+* path's strict JSON codec rejects the whole save.
 */
 function overlayLiveCapabilities(saved, live) {
 	if (live === void 0) return saved;
@@ -118,9 +147,20 @@ function overlayLiveCapabilities(saved, live) {
 		const value = live[field];
 		if (value !== void 0) overlay[field] = value;
 	}
-	if (Object.keys(overlay).length === 0) return saved;
+	const livePromos = live.promos;
+	const savedPromos = saved.promos;
+	const promosDiffer = livePromos !== savedPromos && (livePromos !== void 0 || savedPromos !== void 0);
+	if (Object.keys(overlay).length === 0 && !promosDiffer) return saved;
+	if (livePromos !== void 0) {
+		overlay["promos"] = livePromos;
+		return {
+			...saved,
+			...overlay
+		};
+	}
+	const { promos: _stalePromos, ...rest } = saved;
 	return {
-		...saved,
+		...rest,
 		...overlay
 	};
 }

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness：每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。",
-  "version": "5.8.5",
+  "version": "5.9.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",