dsh-llm-workbuddy 0.1.3 → 0.1.4

package/README.md

@@ -190,6 +190,29 @@ Web 登录后终端脚本也读得到同一份会话。
   - `authenticated && proxyUp` → 🟢 绿，显示 `WorkBuddy · <昵称>`
   - 否则 → 🔴 红，显示「登录」按钮；`proxyUp` 为 false 时额外提示 `代理未运行`
 
+> **关于 UI 挂载位置（临时做法说明）**
+>
+> 当前状态胶囊用 `position:fixed` 直接注入 `document.body`。DSH 官方的 UI
+> 组合机制是 **slot 系统**（`@deepseek-ai/dsh-client-ui-slots`，`ctx.slots.register`
+> 注册 React 组件进声明的 slot）。按官方「组合优先、不要假设/覆盖其他插件内部实现」
+> 的原则，理想做法是注册进官方 slot，而非直接改产品外壳。
+>
+> 评估结论：**当前 shell 声明的 slot 里没有专门的「右下角状态位」**；最接近的
+> `sidebar.footer.action`、`conversation.session.header.actions`、
+> `conversation.input.overlay` 都是 **React 组件位**，迁移意味着要把本插件从
+> 「零依赖原生 JS」改造成 **React + 构建流程**，并依赖 shell 暴露 `ctx.slots`
+> 服务。因此现阶段保留 DOM 注入（机制允许），**待官方 shell 提供合适的状态胶囊
+> slot 后再迁移**。以下是已知的迁移路径（供后续参考）：
+>
+> ```js
+> ctx.slots.inject("sidebar.footer.action", () => ctx.slots.register({
+>   name: "sidebar.footer.action",
+>   id: "workbuddy-status",
+>   locale: NS,
+>   inject: () => ({ /* 轮询句柄 / 登录回调 */ })
+> }, WorkBuddyStatusPill /* React 组件 */));
+> ```
+
 ### 为什么不需要构建
 
 DSH 的 `dsh.client` 机制只要求 `package.json` 里：

package/lib/index.js

@@ -769,77 +769,81 @@ async function probeProxy(baseURL) {
  * file appears and reports `authenticated: true`.
  */
 function registerWorkbuddyRoutes(ctx, config) {
-  // Probe the optional webServer service. In a headless profile it is absent
-  // and we skip the HTTP surface entirely — the adapter (registered in apply)
-  // still works. Because `webServer` is not in `inject`, this must be a
-  // runtime probe, not a dereference.
-  const webServer = ctx.get("webServer");
-  if (webServer === undefined) return;
-  const baseURL = config_baseURL();
-  const { sessionFile, loginScript } = resolveLoginPaths(config);
-  // The register() call returns a disposer. Wrapping it in ctx.effect ties it
-  // to the plugin fiber so config hot-edit / reload cleans the routes up
-  // instead of leaking them (a leaked route makes a duplicate re-register
-  // throw). Method filtering must be done inside the handler — the route API
-  // only accepts `{ kind, path, handler }`.
-  ctx.effect(() => webServer.register({
-    kind: "exact",
-    path: "/api/workbuddy/status",
-    async handler(req, res) {
-      if (req.method !== "GET") {
-        res.writeHead(405, { "content-type": "application/json" });
-        res.end(JSON.stringify({ error: "method not allowed" }));
-        return;
-      }
-      const session = readSessionStatus(sessionFile);
-      const proxy = await probeProxy(baseURL);
-      res.writeHead(200, { "content-type": "application/json" });
-      res.end(JSON.stringify({
-        ...session,
-        ...proxy,
-        loginScriptAvailable: existsSync(loginScript),
-      }));
-    },
-  }));
-  ctx.effect(() => webServer.register({
-    kind: "exact",
-    path: "/api/workbuddy/login",
-    async handler(req, res) {
-      if (req.method !== "POST") {
-        res.writeHead(405, { "content-type": "application/json" });
-        res.end(JSON.stringify({ error: "method not allowed" }));
-        return;
-      }
-      if (!existsSync(loginScript)) {
-        res.writeHead(503, { "content-type": "application/json" });
-        res.end(JSON.stringify({ error: "login_workbuddy.py not found" }));
-        return;
-      }
-      // Existing session is fine; no need to re-run the flow.
-      const existing = readSessionStatus(sessionFile);
-      if (existing.authenticated) {
+  // Delay registration until the webServer service exists. The plugin keeps
+  // `webServer` OUT of `inject` so headless profiles (no HTTP surface) still
+  // load — but a synchronous `ctx.get("webServer")` probe at apply time races
+  // the webserver plugin's own mount and can observe the service before it is
+  // provided, silently dropping the routes. `ctx.inject` runs this callback
+  // only once webServer is available, and skips it entirely when the service
+  // never appears (headless), preserving the original intent.
+  ctx.inject(["webServer"], (webCtx) => {
+    const webServer = webCtx.webServer;
+    const baseURL = config_baseURL();
+    const { sessionFile, loginScript } = resolveLoginPaths(config);
+    // The register() call returns a disposer. Wrapping it in ctx.effect ties
+    // it to the plugin fiber so config hot-edit / reload cleans the routes up
+    // instead of leaking them (a leaked route makes a duplicate re-register
+    // throw). Method filtering must be done inside the handler — the route API
+    // only accepts `{ kind, path, handler }`.
+    webCtx.effect(() => webServer.register({
+      kind: "exact",
+      path: "/api/workbuddy/status",
+      async handler(req, res) {
+        if (req.method !== "GET") {
+          res.writeHead(405, { "content-type": "application/json" });
+          res.end(JSON.stringify({ error: "method not allowed" }));
+          return;
+        }
+        const session = readSessionStatus(sessionFile);
+        const proxy = await probeProxy(baseURL);
         res.writeHead(200, { "content-type": "application/json" });
-        res.end(JSON.stringify({ alreadyLoggedIn: true, authUrl: null, ...existing }));
-        return;
-      }
-      // login_workbuddy.py is dependency-free (stdlib only), so we invoke it
-      // directly with the system Python — no uv runtime required.
-      const args = ["-u", loginScript, "--session-file", sessionFile];
-      const child = spawn("python3", args, { env: { ...process.env, PYTHONUNBUFFERED: "1" } });
-      let stdout = "";
-      let authUrl = null;
-      child.stdout.on("data", (chunk) => {
-        stdout += chunk.toString();
-        const m = stdout.match(/https?:\/\/\S+/);
-        if (m && authUrl === null) authUrl = m[0];
-      });
-      child.stderr.on("data", () => {});
-      // The device flow blocks until login or timeout; we hand back the URL
-      // immediately and let the widget poll /status for completion.
-      res.writeHead(200, { "content-type": "application/json" });
-      res.end(JSON.stringify({ authUrl, pending: true }));
-    },
-  }));
+        res.end(JSON.stringify({
+          ...session,
+          ...proxy,
+          loginScriptAvailable: existsSync(loginScript),
+        }));
+      },
+    }));
+    webCtx.effect(() => webServer.register({
+      kind: "exact",
+      path: "/api/workbuddy/login",
+      async handler(req, res) {
+        if (req.method !== "POST") {
+          res.writeHead(405, { "content-type": "application/json" });
+          res.end(JSON.stringify({ error: "method not allowed" }));
+          return;
+        }
+        if (!existsSync(loginScript)) {
+          res.writeHead(503, { "content-type": "application/json" });
+          res.end(JSON.stringify({ error: "login_workbuddy.py not found" }));
+          return;
+        }
+        // Existing session is fine; no need to re-run the flow.
+        const existing = readSessionStatus(sessionFile);
+        if (existing.authenticated) {
+          res.writeHead(200, { "content-type": "application/json" });
+          res.end(JSON.stringify({ alreadyLoggedIn: true, authUrl: null, ...existing }));
+          return;
+        }
+        // login_workbuddy.py is dependency-free (stdlib only), so we invoke it
+        // directly with the system Python — no uv runtime required.
+        const args = ["-u", loginScript, "--session-file", sessionFile];
+        const child = spawn("python3", args, { env: { ...process.env, PYTHONUNBUFFERED: "1" } });
+        let stdout = "";
+        let authUrl = null;
+        child.stdout.on("data", (chunk) => {
+          stdout += chunk.toString();
+          const m = stdout.match(/https?:\/\/\S+/);
+          if (m && authUrl === null) authUrl = m[0];
+        });
+        child.stderr.on("data", () => {});
+        // The device flow blocks until login or timeout; we hand back the URL
+        // immediately and let the widget poll /status for completion.
+        res.writeHead(200, { "content-type": "application/json" });
+        res.end(JSON.stringify({ authUrl, pending: true }));
+      },
+    }));
+  });
 }
 
 /** Lazily resolve the configured proxy base URL for the health probe. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-llm-workbuddy",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "WorkBuddy (via the local workbuddy2api proxy) LLM provider adapter for DeepSeek Harness, with a Web login-status widget",
   "type": "module",
   "main": "lib/index.js",