dsh-packycode-api 1.2.11 → 1.3.1

package/SECURITY.md

@@ -11,16 +11,14 @@
 ## Network
 
 - Balance requests carry a timeout (`AbortSignal.timeout`) and `redirect: 'error'`, and go only to the configured hosts plus the PackyAPI fallback host.
-- Model traffic goes to the configured model host through the host's own pi-ai adapter, with the harness attribution headers, exactly like a configured provider route.
+- Model traffic goes to the configured model host through the plugin's pi-ai adapter. Protocol-specific compatibility headers are applied host-side; credentials remain scoped to the selected plugin key.
 
-## Claude CLI MCP search bridge
+## Native Claude requests
 
-- Each CLI invocation owns a temporary HTTP MCP server bound exclusively to `127.0.0.1` on a random port. Every method requires an independent cryptographically random capability; Host/Origin validation rejects rebinding and cross-origin browser requests. No CORS access is granted.
-- The owner-only temporary MCP config (private directory, file mode 0600 on POSIX) contains only this local capability. The search API keys remain in the host's key ring and are never placed in MCP configuration, argv, schemas, tool results or raw diagnostics. Result/CLI redaction handles escaped keys and secrets split across text deltas.
-- The endpoint offers only bounded `web_search`; models cannot supply backend, API host, credentials, session IDs, shell commands or arbitrary fetch requests. Input size, query size, concurrency, search count, output size and an end-to-end timeout are bounded. Run stop and tool cancellation abort the provider.
-- Native CLI WebSearch is denied even in full mode. Read-only/edit modes add only the exact MCP search tool to their auto-approval lists. Existing MCP/settings and user/managed deny rules remain effective; `--allowedTools` is not an exclusive whitelist. Hooks, other trusted MCP servers and full-permission commands remain part of the CLI's existing trust boundary.
-- The local capability and owner-only files reduce accidental exposure; they do **not** isolate the service from a compromised process or customization running as the same OS user. Do not run the delegated CLI in an untrusted workspace with hostile hooks/MCP configuration.
-- Startup cancellation also revokes an already-bound listener while filesystem setup is pending. Completed/failed/abandoned invocations and plugin unload close the server and clean up only their own temporary config directory.
+- Claude uses the plugin's HTTP Messages route. The plugin has no Claude CLI runner, installer, delegation tool or local MCP bridge. Existing standalone Claude Code installations and configuration are untouched.
+- The compatibility headers and session metadata do not load a CLI login or external configuration. Bearer authentication uses only the plugin's selected conversation key; images keep their separate credential record.
+- DSH owns tool execution, permissions, plan mode, attachments and history. Wire tool aliases are restored only for tools offered on that request; unknown aliases are not decoded into host tools. Saved images from older CLI-backed sessions remain readable without executing their old tools.
+- Captured client-policy refusals do not disable keys or switch providers. The specific pre-stream anomalies covered by the native transport may replay the exact bytes and credential once; ordinary policy refusals, HTTP 429 and accepted streams are excluded. Cancellation aborts the replay.
 
 ## Reporting
 

package/lib/client.js

@@ -144,29 +144,6 @@ window.__ModuleLoader__.load({
 			composerUnread: "余额读取失败",
 			composerStale: "上次读取于 {time}，本次读取失败",
 			quotaReadAt: "更新于 {time}",
-			cliTitle: "Claude Code CLI",
-			cliChecking: "正在检测本机的 Claude Code CLI…",
-			cliInstalled: "已安装",
-			cliVersion: "版本",
-			cliPath: "位置",
-			cliRecheck: "重新检测",
-			cliMissing: "未检测到 Claude Code CLI",
-			cliMissingHint: "不安装将无法正常使用 Claude 模型（claude-opus-5-5、claude-sonnet-5-5、claude-haiku-5-5）：PackyCode 只把 Claude 模型提供给官方 Claude Code CLI，插件需要调用本机的 CLI 来运行它。其它模型不受影响。",
-			cliConfiguredMissing: "设置里指定的 CLI 路径不存在：{path}",
-			cliBroken: "找到了 CLI，但无法运行",
-			cliInstall: "安装 Claude Code CLI",
-			cliReinstall: "重新安装",
-			cliInstalling: "正在安装…（通常需要一两分钟，请勿关闭 DSH）",
-			cliInstallCommand: "将在本机执行：{command}（需要 Node.js 18 或更高版本）",
-			cliInstallSucceeded: "安装完成。",
-			cliInstallFailed: "安装失败",
-			cliNpmMissing: "没有找到 npm。请先从 https://nodejs.org 安装 Node.js（18 或更高版本），然后再点安装。",
-			cliPermission: "npm 没有权限写入全局目录。请在终端执行 sudo {command}，或把 npm 的全局目录改到用户目录后重试。",
-			cliPermissionWindows: "npm 没有权限写入全局目录。请以管理员身份打开终端执行 {command}，然后点「重新检测」。",
-			cliNetwork: "下载失败，请检查网络或 npm 镜像设置后重试。",
-			cliTimeout: "安装超时，请检查网络后重试。",
-			cliNotFoundAfterInstall: "npm 显示安装完成，但仍找不到 claude 命令。请在终端执行 claude --version 确认，然后点「重新检测」。",
-			cliWindowsNote: "Windows 上 Claude Code 还需要 Git for Windows（https://git-scm.com/downloads/win）。",
 			versionTitle: "插件版本",
 			versionCurrent: "当前版本",
 			versionLatest: "最新版本",
@@ -202,8 +179,7 @@ window.__ModuleLoader__.load({
 			diagError: "生成诊断信息失败",
 			searchTitle: "网页搜索",
 			searchScope: "DSH 全局设置",
-			searchIntro: "DSH 的 web_search 和 Claude CLI 的 MCP 搜索可使用这里选择的 DeepSeek/GPT 后端。每次搜索是独立的模型调用，用插件保存的 Key 计费。",
-			searchCliHint: "Claude CLI 始终通过 MCP 使用这里的搜索后端，原生 WebSearch 已禁用。下面的路由选项只控制 DSH 全局搜索，不影响 CLI。",
+			searchIntro: "DSH 的 web_search 可使用这里选择的 DeepSeek/GPT 后端，Claude 与其它模型遵循相同的路由设置。每次搜索是独立的模型调用，用插件保存的 Key 计费。",
 			searchChecking: "正在读取搜索设置…",
 			searchLoadFailed: "搜索设置读取或保存失败",
 			searchModeTitle: "DSH 路由",
@@ -223,7 +199,7 @@ window.__ModuleLoader__.load({
 			searchApplyFailed: "写入搜索补丁失败：{error}",
 			searchForeign: "检测到 {names} 订阅插件：它们接管的模型仍按各自的搜索设置，其余请求才会到达这里的选择。",
 			searchOverridden: "基础搜索现在是 {base}，不是 PackyCode：可能还在热加载，或被其他插件的补丁覆盖。",
-			searchUnavailable: "当前运行环境没有 DSH 网页搜索服务，全局路由暂不生效；Claude CLI 的 MCP 搜索不受影响。",
+			searchUnavailable: "当前运行环境没有 DSH 网页搜索服务，搜索路由暂不生效。",
 			searchNotWritable: "当前 profile 不允许写入设置。",
 			searchUnknown: "未知"
 		};
@@ -336,29 +312,6 @@ window.__ModuleLoader__.load({
 			composerUnread: "Balance unavailable",
 			composerStale: "Last read at {time}; this read failed",
 			quotaReadAt: "Updated at {time}",
-			cliTitle: "Claude Code CLI",
-			cliChecking: "Checking this device for the Claude Code CLI…",
-			cliInstalled: "Installed",
-			cliVersion: "Version",
-			cliPath: "Location",
-			cliRecheck: "Check again",
-			cliMissing: "Claude Code CLI not found",
-			cliMissingHint: "Without it the Claude models (claude-opus-5-5, claude-sonnet-5-5, claude-haiku-5-5) cannot work: PackyCode serves Claude models only to the official Claude Code CLI, so the plugin runs the CLI on this device. Other models are unaffected.",
-			cliConfiguredMissing: "The CLI path set in settings does not exist: {path}",
-			cliBroken: "The CLI was found but could not run",
-			cliInstall: "Install Claude Code CLI",
-			cliReinstall: "Reinstall",
-			cliInstalling: "Installing… (usually a minute or two; keep DSH open)",
-			cliInstallCommand: "Runs on this device: {command} (requires Node.js 18 or later)",
-			cliInstallSucceeded: "Installed.",
-			cliInstallFailed: "Install failed",
-			cliNpmMissing: "npm was not found. Install Node.js 18 or later from https://nodejs.org, then click Install again.",
-			cliPermission: "npm cannot write its global directory. Run sudo {command} in a terminal, or point npm’s global prefix at a folder you own, then retry.",
-			cliPermissionWindows: "npm cannot write its global directory. Open a terminal as administrator, run {command}, then click Check again.",
-			cliNetwork: "The download failed. Check your network or npm registry settings and retry.",
-			cliTimeout: "The install timed out. Check your network and retry.",
-			cliNotFoundAfterInstall: "npm reported success, but the claude command still cannot be found. Run claude --version in a terminal, then click Check again.",
-			cliWindowsNote: "On Windows, Claude Code also needs Git for Windows (https://git-scm.com/downloads/win).",
 			versionTitle: "Plugin version",
 			versionCurrent: "Current version",
 			versionLatest: "Latest version",
@@ -394,8 +347,7 @@ window.__ModuleLoader__.load({
 			diagError: "Could not generate diagnostics",
 			searchTitle: "Web search",
 			searchScope: "DSH-wide setting",
-			searchIntro: "DSH’s web_search and Claude CLI’s MCP search can use the DeepSeek/GPT backend selected here. Each search is a separate model call billed to the plugin-stored keys.",
-			searchCliHint: "Claude CLI always uses this backend through MCP; native WebSearch is disabled. The routing options below only control DSH-wide search, not CLI search.",
+			searchIntro: "DSH’s web_search can use the DeepSeek/GPT backend selected here. Claude follows the same routing settings as other models. Each search is a separate model call billed to the plugin-stored keys.",
 			searchChecking: "Reading the search preference…",
 			searchLoadFailed: "Could not read or save the search preference",
 			searchModeTitle: "DSH routing",
@@ -415,7 +367,7 @@ window.__ModuleLoader__.load({
 			searchApplyFailed: "Could not write the search patch: {error}",
 			searchForeign: "{names} subscription plugin detected: the models it routes keep its own search choice; only the other requests reach the choice made here.",
 			searchOverridden: "The base search is {base}, not PackyCode: the reload may still be running, or another plugin’s patch overrides it.",
-			searchUnavailable: "This runtime has no DSH web search service; global routing has no effect. Claude CLI’s MCP search is unaffected.",
+			searchUnavailable: "This runtime has no DSH web search service; search routing has no effect.",
 			searchNotWritable: "This profile does not allow settings writes.",
 			searchUnknown: "unknown"
 		};
@@ -640,10 +592,9 @@ window.__ModuleLoader__.load({
 		* Totals across the keys a balance read returned.
 		*
 		* The per-key quota (`/api/usage/token/`) is what a key can spend, so the
-		* combined figure is the sum of those rows. PackyCode also reports account
-		* level billing (`/v1/dashboard/billing/*`), which is a different scope — it
-		* counts every token on the account — and is deliberately not what this sum
-		* shows.
+		* combined figure is the sum of those rows. An API key cannot read the
+		* PackyCode account's own balance, so tokens on the same account that are not
+		* stored here never appear in it.
 		*
 		* @module dsh-packycode-api/totals
 		*/
@@ -1936,7 +1887,6 @@ window.__ModuleLoader__.load({
 		const REFRESH_MS = 6e4;
 		/** PackyCode registration through the author's invite link, offered only until a key is stored. */
 		const INVITE_URL = "https://www.packyapi.ai/register?aff=Im3l";
-		const INSTALL_POLL_MS = 2e3;
 		/** How long after a search change the panel re-reads what DSH applied (the patch hot-reloads). */
 		const SEARCH_SETTLE_MS = 1500;
 		const OWN_SEARCH_IDS = {
@@ -2521,10 +2471,6 @@ window.__ModuleLoader__.load({
 						className: "pkc-note",
 						children: t("searchIntro")
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: "pkc-note",
-						children: t("searchCliHint")
-					}),
 					state === void 0 && error === void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: "pkc-note",
 						role: "status",
@@ -2629,157 +2575,6 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
-		const INSTALL_FAILURES = {
-			"npm-missing": () => "cliNpmMissing",
-			permission: (cli) => cli.platform === "win32" ? "cliPermissionWindows" : "cliPermission",
-			network: () => "cliNetwork",
-			timeout: () => "cliTimeout",
-			"not-found-after-install": () => "cliNotFoundAfterInstall"
-		};
-		/** The sentence explaining a failed install, by the code the host classified. */
-		function installFailure(cli, t) {
-			const key = INSTALL_FAILURES[cli.install?.code]?.(cli);
-			return key === void 0 ? void 0 : fill(t(key), { command: cli.command ?? "" });
-		}
-		/**
-		* Whether this device has the Claude Code CLI, which version, and — when it
-		* has none — a button that installs it with npm.
-		*/
-		function ClaudeCliCard({ call, t }) {
-			const [cli, setCli] = react.useState();
-			const [checking, setChecking] = react.useState(false);
-			const [error, setError] = react.useState();
-			const check = react.useCallback((force = false) => {
-				setChecking(true);
-				setError(void 0);
-				return call("claude-cli/status", { force }).then(setCli).catch((failure) => setError(clearMessage(failure))).finally(() => setChecking(false));
-			}, [call]);
-			react.useEffect(() => {
-				check(false);
-			}, [check]);
-			const running = cli?.install?.state === "running";
-			react.useEffect(() => {
-				if (!running) return void 0;
-				let live = true;
-				const timer = window.setInterval(() => {
-					call("claude-cli/status").then((value) => {
-						if (live) setCli(value);
-					}).catch(() => void 0);
-				}, INSTALL_POLL_MS);
-				return () => {
-					live = false;
-					window.clearInterval(timer);
-				};
-			}, [call, running]);
-			const install = () => {
-				setError(void 0);
-				call("claude-cli/install").then(setCli).catch((failure) => setError(clearMessage(failure)));
-			};
-			const usable = cli?.installed === true && cli.version !== void 0;
-			const failed = cli?.install?.state === "failed";
-			const failure = cli === void 0 ? void 0 : installFailure(cli, t);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Card, {
-				title: t("cliTitle"),
-				aside: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
-					disabled: checking || running,
-					onClick: () => check(true),
-					children: checking ? t("refreshing") : t("cliRecheck")
-				}),
-				children: [
-					cli === void 0 && error === void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: "pkc-note",
-						children: t("cliChecking")
-					}),
-					usable && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "pkc-status",
-							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "pkc-dot",
-									"data-tone": "success"
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("cliInstalled") }),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("b", { children: `${t("cliVersion")} ${cli.version}` })
-							]
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-							className: "pkc-meta",
-							children: [
-								t("cliPath"),
-								" ",
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "pkc-mono",
-									children: cli.path
-								})
-							]
-						}),
-						cli.install?.state === "succeeded" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-							className: "pkc-note",
-							children: t("cliInstallSucceeded")
-						})
-					] }),
-					cli !== void 0 && !usable && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "pkc-callout",
-						children: [
-							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								className: "pkc-status",
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "pkc-dot",
-									"data-tone": cli.installed ? "danger" : "warn"
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("b", { children: cli.installed ? t("cliBroken") : t("cliMissing") })]
-							}),
-							cli.installed && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-								className: "pkc-meta",
-								children: [
-									t("cliPath"),
-									" ",
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "pkc-mono",
-										children: cli.path
-									})
-								]
-							}), cli.error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
-								className: "pkc-detail",
-								children: cli.error
-							})] }),
-							cli.configuredPath !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								className: "pkc-note",
-								children: fill(t("cliConfiguredMissing"), { path: cli.configuredPath })
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								className: "pkc-note",
-								children: t("cliMissingHint")
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-								className: "pkc-split",
-								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
-									variant: "primary",
-									size: "md",
-									disabled: running || checking,
-									onClick: install,
-									children: running ? t("cliInstalling") : cli.installed ? t("cliReinstall") : t("cliInstall")
-								})
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
-								className: "pkc-note",
-								children: [fill(t("cliInstallCommand"), { command: cli.command ?? "" }), cli.platform === "win32" && ` ${t("cliWindowsNote")}`]
-							})
-						]
-					}),
-					failed && !usable && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: "pkc-error",
-						children: failure === void 0 ? t("cliInstallFailed") : `${t("cliInstallFailed")} · ${failure}`
-					}), cli.install.detail !== void 0 && cli.install.detail !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
-						className: "pkc-detail",
-						children: cli.install.detail
-					})] }),
-					error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: "pkc-error",
-						children: `${t("error")}: ${error}`
-					})
-				]
-			});
-		}
 		function VersionCard({ call, t }) {
 			const [info, setInfo] = react.useState();
 			const [loading, setLoading] = react.useState(true);
@@ -2938,10 +2733,6 @@ window.__ModuleLoader__.load({
 						call,
 						t
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ClaudeCliCard, {
-						call,
-						t
-					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(VersionCard, {
 						call,
 						t