dsh-workbuddy-bridge 0.1.0

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 Corrine Hu
+Copyright (c) 2026 zlZayn
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -0,0 +1,15 @@
+# dsh-workbuddy-bridge — 来源与版权归属
+
+本仓是 [corrinehu/dsh-workbuddy-connect](https://github.com/corrinehu/dsh-workbuddy-connect) 的重做版本。
+目录结构、命名与提交历史按本仓维护者规范重建，代码在原有基础上继续维护。
+
+## 原始作者与版权
+
+- Copyright (c) 2026 Corrine Hu
+- 原始分支与提交：`refactor/official-ui-architecture` @ `3dad637`
+- 原 MIT 许可证与版权声明**完整保留**于 [LICENSE](LICENSE)
+
+## 本仓维护者
+
+- Copyright (c) 2026 zlZayn
+- 仓库：<https://github.com/zlZayn/dsh-workbuddy-bridge>

package/README.md

@@ -0,0 +1,226 @@
+<p align="center">
+  <h1 align="center">dsh-workbuddy-bridge</h1>
+</p>
+
+<div align="center">
+  <p><strong>把 WorkBuddy 桌面 App 的模型接进 DSH 对话窗口</strong></p>
+  <p><em>WorkBuddy desktop models in DeepSeek Harness</em></p>
+
+  <p>
+    <a href="https://github.com/deepseek-ai/deepseek-harness"><img src="https://img.shields.io/badge/DeepSeek%20Harness-Plugin-4176E6?style=flat" alt="DeepSeek Harness Plugin"></a>
+    <a href="https://github.com/zlZayn/dsh-workbuddy-bridge/actions/workflows/ci.yml"><img src="https://github.com/zlZayn/dsh-workbuddy-bridge/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+    <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="MIT 许可证"></a>
+  </p>
+
+  <p>
+    <strong><a href="README.md">简体中文</a></strong> · <a href="README_en.md">English</a>
+  </p>
+</div>
+
+---
+
+> [!NOTE]
+> **凭据不出本机**：登录状态取自 WorkBuddy 桌面 App 自己的凭据文件，插件只在本机留一份加密副本；
+> 浏览器半边拿不到令牌，界面里也永远不出现凭据原文。
+
+国内版 **WorkBuddy** 与国际版 **WorkBuddy AI** 并存：装哪个就出现哪个模型分组，两个都装就两组并排，
+各自用自己的账号与积分。模型直接出现在 DSH 的模型选择器里，不必为它单独配一个 provider。
+
+<p align="center">
+  <img src="assets/1.png" alt="WorkBuddy 模型出现在 DSH 模型选择器中" width="330">
+  <br>
+  <em>国内版在模型选择器中自成一组（含积分倍率与促销徽章），与 DSH 自带分组并排；装国际版则出现「WorkBuddy AI」组。</em>
+</p>
+
+## 能力
+
+- **开箱即用**：装完启用，模型分组自己出现，没有必填项。
+- **两版互不串号**：国内版是「WorkBuddy」分组、国际版是「WorkBuddy AI」分组，模型、账号与积分互不混用；
+  **各自只跟随自己那版 App 的登录状态** —— 退出其中一版，对应分组消失，另一版不受影响。
+- **图片输入**：多数模型可直接粘贴或拖入图片（GLM-5.3-Flash、GLM-5.2、DeepSeek-V4 系列等）；
+  少数纯文字模型（如 GLM-5.1）会明确说明不支持。
+- **推理档位**：上游声明了档位的模型直接可选（如 GLM-5.3 / GLM-5.3-Flash 的 low / high / max）；
+  没声明的模型可在 Web 与 Desktop 上**手动检测**（见[为什么是手动检测](#为什么是手动检测)）。
+  未检测或没有可用档位的模型继续用 WorkBuddy 的默认档位。
+- **模型显隐**：卡片的「模型」标签里勾选哪些模型出现在选择器里；**按登录账号分别保存**，
+  切换账号自动切换各自的配置。隐藏只影响可选择性，**已在用该模型的会话照常继续**。
+- **账号与积分**：插件页里看账号、令牌有效期（自动续期）、剩余积分与模型优惠，可手动刷新模型列表，
+  并看到当前列表来自上游还是内置兜底。
+- **费率与促销**：模型名后直接跟积分倍率（如 `GLM-5.2 · x0.79`）与促销徽章（限时免费 / 夜间折扣），
+  `/model` 弹窗与输入框下拉都能看到。倍率只是显示，不影响请求。
+- **企业账号**：国内版企业账号走企业专用计费接口读周期额度，卡片显示「企业额度」与周期重置时间。
+- **三种界面**：Web / Desktop / TUI 都能跑；只有 TUI 不提供手动检测。
+- **插件页里以显示名出现**：`DSH WorkBuddy Bridge`（中英界面同名），标题下面另有一行代码体写着包名
+  `dsh-workbuddy-bridge` —— 两处都要能对上，才不会在插件列表里认错。
+
+## 安装
+
+### 前置
+
+- 已安装并登录 **WorkBuddy 桌面 App**（国际版为 WorkBuddy AI App）。插件复用 App 的登录状态，
+  账号切换自动跟随；两版互不影响。
+- DSH 的版本范围以 [package.json](package.json) 的 `engines` 与 `peerDependencies` 为准 —— 本仓只跟 **DSH `0.1.7` 线**。
+- Node 22+（同上，真源是 `engines.node`）。
+
+### 从 npm 安装
+
+```sh
+dsh plugin --profile web add dsh-workbuddy-bridge
+dsh web
+```
+
+### 从源码安装
+
+```sh
+git clone https://github.com/zlZayn/dsh-workbuddy-bridge.git
+cd dsh-workbuddy-bridge
+pnpm install && pnpm build
+
+dsh plugin --profile web add "$PWD"
+dsh web
+```
+
+### 三种界面
+
+```sh
+# Desktop（DSH Desktop 桌面版）
+dsh plugin --profile desktop add dsh-workbuddy-bridge
+dsh --profile desktop
+```
+
+```sh
+# TUI（终端界面）
+dsh plugin --profile dsh-tui add dsh-workbuddy-bridge
+dsh --profile dsh-tui
+```
+
+> **TUI 的版本搭配**：终端界面插件 `@deepseek-harness-tui/dsh-tui` 需 **`0.10.0-beta.5` 及以上** ——
+> 更早的版本装了本插件会启动失败，报 `events is not iterable`。先用 TUI 自带的方式把壳升上去，再装本插件。
+
+> **TUI 的 pnpm**：`dsh-tui` profile 需用 pnpm 11 安装（PATH 里是其他版本会报 `ERR_PNPM_UNEXPECTED_STORE`，
+> 用 `npx pnpm@11` 即可）。
+
+### 发现与安装
+
+- **GitHub**：[`zlZayn/dsh-workbuddy-bridge`](https://github.com/zlZayn/dsh-workbuddy-bridge)
+- 仓库带 GitHub topic `dsh-plugin`，插件市场据此自动发现。
+
+## 版本兼容
+
+- 本仓只支持 **DSH `0.1.7` 线**（实测在 `0.1.7-rc.2` 上通过）；下限见 [package.json](package.json) 的 `engines.dsh`，本文不重抄。
+- **不提供跨代兼容**：宿主换线时本仓跟着抬下限，不在一份代码里同时伺候两条线。
+- 本仓**不查宿主版本号**：它按宿主声明的契约注册（槽、服务、配置接缝），没有防御性包装；
+  接缝缺席时对应功能静默不出现，不会拖垮界面。
+
+## 配置
+
+侧边栏 **插件（Plugins）** →「已安装（Installed）」→ 点插件名进详情页 ——
+**配置区就在描述下面，直接可改**，那一行上没有第二个 Configure 步骤：
+
+- **配置表单**：`authFile`（国内版登录文件路径）、`authFileAI`（国际版）、**允许推理档位检测**、
+  **使用上游声明的最大上下文窗口**。前两项留空即用 App 自己的位置。
+- **两张卡片**：国内版与国际版各一张，各显示自己账号的信息。账号、令牌有效期与模型列表来源常驻展开区顶部，
+  下面三个标签按「读者要做什么」划分：
+  - **积分**：合计、周期重置与各套餐余量，一处读完。
+  - **模型**：完整目录一张表 —— **模型显隐**勾选、上下文窗口、积分倍率与促销徽章。
+  - **检测**：推理档位检测，一模型一行；没有可检测的模型时这一页为空。
+
+<p align="center">
+  <img src="assets/2.png" alt="插件详情页：配置表单与两张状态卡片" width="480">
+  <br>
+  <em>配置表单与两张卡片上下排列；国内版与国际版各一张，各自跟随自己 App 的登录状态。</em>
+</p>
+
+<p align="center">
+  <img src="assets/3.png" alt="积分标签：合计与套餐余量" width="420">
+  <img src="assets/6.png" alt="模型标签：显隐、窗口、倍率" width="420">
+  <img src="assets/7.png" alt="检测标签：推理档位检测" width="420">
+  <br>
+  <em>卡片展开分三个标签：积分（合计与套餐余量）、模型（显隐、窗口、倍率）、检测（推理档位）。</em>
+</p>
+
+保存即生效。**配置改动不需要重启宿主**（配置是 volatile 引用）；**改了插件代码才需要**。
+
+> 设置弹窗里的「内置插件」页是**只读清单**（名称与运行状态），没有配置入口 —— 别在那里找配置。
+
+## 为什么是手动检测
+
+WorkBuddy 的推理档位信息分散在上游接口与客户端私有 UI 逻辑里，且模型目录变化很快。
+若插件按经验给所有未声明模型补齐一套统一档位，就得持续追赶没有稳定契约的未公开逻辑。
+
+实测还发现：有些模型**接受** `reasoning_effort` 却忽略未知值、回退到默认行为 ——
+一次请求成功并不能证明某个档位真的可用。
+
+<p align="center">
+  <img src="assets/4.png" alt="输入框模型选择器旁的「推理等级」检测控件" width="620">
+  <br>
+  <em>检测控件就在模型选择器旁；结果显示在模型下拉里，也回写到卡片上。</em>
+</p>
+
+所以对没有声明档位的模型，Web 与 Desktop 改为**先授权、再按需检测**：先确认上游会校验这个参数，
+再逐项确认哪些规范档位被接受。检测会发送少量请求、可能消耗积分；结果只表示**上游当前接受该档位**，
+不承诺它改变推理效果、速度或积分消耗。
+
+## 命令行
+
+```sh
+dsh plugin --profile <web|desktop|dsh-tui> exec dsh-workbuddy-bridge status
+```
+
+登录状态与剩余积分；`--json` 输出机器可读格式，另有 `doctor`（诊断）与 `logout`（清理凭据）。
+
+默认操作国内版，加 `--provider workbuddy-ai` 操作国际版：
+
+```sh
+dsh plugin --profile web exec dsh-workbuddy-bridge status --provider workbuddy-ai
+dsh plugin --profile web exec dsh-workbuddy-bridge doctor --provider workbuddy-ai
+```
+
+`logout` 只删除该版插件自留的凭据副本，不动桌面 App 自己的登录，也不承诺模型分组一定消失
+（App 的凭据文件仍在时依然生效）。
+
+## 安全与边界
+
+- **凭据只在本机**：从 App 的凭据文件读出后，插件自留一份**静态加密**的副本；
+  浏览器半边永远拿不到令牌、文件路径或平台事实。
+- **界面里不出现凭据原文**：卡片只报账号与状态。
+- **只访问 WorkBuddy 自己的接口**，不代理、不转发其他流量。
+- 依赖的是 **WorkBuddy 客户端接口（非公开 API）**，上游改动可能使其失效；届时按
+  「本账号上次成功目录 → 内置目录」降级，并在卡片上标明来源与失败原因。
+
+## 已知限制
+
+- 在 macOS 的 DSH Web / Desktop / TUI 下验证通过。Windows 依次探测 Local 与 Roaming AppData；
+  WSL 优先从挂载的 Windows 用户目录读取登录凭据。Windows 与 Linux 用户名不同、且 Windows 环境变量
+  未传入 WSL 时，用 `WORKBUDDY_AUTH_FILE`（国际版 `WORKBUDDY_AI_AUTH_FILE`）指定实际位置。
+- **国际版的模型目录来自 App 界面接口**：服务端按 User-Agent 分流，属私有实现，改动可能使其失效；
+  国内版走官方 CLI 同款接口，不受此影响。
+- **国际版仍未覆盖的环境**：Windows / WSL / Linux 下国际版 App 的版本读取尚未找到可靠来源，
+  会退回最近保存的版本或内置值。
+- **无凭据时的行为**：某版 App 从未登录、也没留下插件自留副本时，该版模型分组不再显示
+  （此前国内版会显示一份内置兜底列表，但那些模型选了必然报错）。
+- **企业账号积分目前仅覆盖国内版**：国际版企业计费接口尚未验证，仍按个人版接口读取。
+- 手动检测只在 Web 与 Desktop 提供，TUI 没有。
+
+## 免责声明
+
+- 本项目**仅供个人学习和研究使用**，仅驱动使用者自己的 WorkBuddy 账号在本机调用，请勿用于商业用途或超出个人合理使用的场景。
+- 使用者需遵守 WorkBuddy 的服务条款；因使用本项目产生的任何后果（包括但不限于账号被限制、额度被清空、服务中断），由使用者自行承担。
+- 本项目作者不对任何因使用或滥用本项目产生的直接或间接损失负责。
+- 本项目与腾讯、WorkBuddy、DeepSeek 均无关联，未获其授权或认可；文中出现的名称仅用于描述兼容关系，其商标权利归各自所有。
+
+## 致谢
+
+- [Sliverkiss/workbuddy2api](https://github.com/Sliverkiss/workbuddy2api)（MIT）— WorkBuddy 上游协议的参照实现。
+- [franksong2702/dsh-codex-connect](https://github.com/franksong2702/dsh-codex-connect)（Apache-2.0）— DSH 插件结构与 provider 注册的参照。
+
+## 许可
+
+[MIT](LICENSE)。
+
+## 贡献
+
+报缺陷请附 DSH 版本、插件版本与复现步骤；提功能前先翻 [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) 看设计取舍。
+
+设计取向 → [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md)；发布流程与版本号判定 → [docs/PUBLISHING.md](docs/PUBLISHING.md)；
+维护者文档地图 → [AGENTS.md](AGENTS.md)。

package/README_en.md

@@ -0,0 +1,249 @@
+<p align="center">
+  <h1 align="center">dsh-workbuddy-bridge</h1>
+</p>
+
+<div align="center">
+  <p><strong>WorkBuddy desktop models in your DSH chat</strong></p>
+  <p><em>把 WorkBuddy 桌面 App 的模型接进 DSH 对话窗口</em></p>
+
+  <p>
+    <a href="https://github.com/deepseek-ai/deepseek-harness"><img src="https://img.shields.io/badge/DeepSeek%20Harness-Plugin-4176E6?style=flat" alt="DeepSeek Harness Plugin"></a>
+    <a href="https://github.com/zlZayn/dsh-workbuddy-bridge/actions/workflows/ci.yml"><img src="https://github.com/zlZayn/dsh-workbuddy-bridge/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+    <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="MIT License"></a>
+  </p>
+
+  <p>
+    <a href="README.md">简体中文</a> · <strong><a href="README_en.md">English</a></strong>
+  </p>
+</div>
+
+---
+
+> [!NOTE]
+> **Credentials never leave your machine**: the sign-in state is read from the WorkBuddy desktop
+> app's own credential file and kept as one encrypted local copy. The browser half never receives
+> the token, and no credential text ever reaches the UI.
+
+The CN **WorkBuddy** and the international **WorkBuddy AI** apps live side by side: whichever you
+have installed shows up as its own model group, and both installed shows both groups, each with its
+own account and credit. The models appear directly in the DSH model picker — no separate provider to configure.
+
+<p align="center">
+  <img src="assets/1.png" alt="WorkBuddy models in the DSH model picker" width="330">
+  <br>
+  <em>The CN version forms its own group in the model picker (with credit rates and promo badges), beside DSH's
+  own groups; installing the international version adds a "WorkBuddy AI" group the same way.</em>
+</p>
+
+## Capabilities
+
+- **Works out of the box**: install and enable — the model groups appear on their own, with nothing required to fill in.
+- **The two versions never mix**: the CN app is the "WorkBuddy" group and the international one is "WorkBuddy AI";
+  models, accounts, and credit stay separate. **Each group follows only its own app's sign-in** — sign out of one
+  and that group disappears, leaving the other untouched.
+- **Image input**: most models accept pasted or dropped images (GLM-5.3-Flash, GLM-5.2, the DeepSeek-V4 series, and more);
+  the few text-only models (e.g. GLM-5.1) say so explicitly.
+- **Reasoning levels**: models that declare levels expose them directly (low / high / max on GLM-5.3 and GLM-5.3-Flash);
+  models that do not can be **checked manually** on Web and Desktop (see [Why detection is manual](#why-detection-is-manual)).
+  Models without a check result or usable levels keep WorkBuddy's default.
+- **Model visibility**: the card's "Models" tab selects which models appear in the picker; the choice is
+  **saved per signed-in account** and follows account switches. Hiding only affects pickability — **chats already
+  using that model keep working**.
+- **Account and credit**: the plugin page shows the account, token validity (auto-renewed), remaining credit, and model
+  offers; it can refresh the model list and shows whether the list came from the upstream or the built-in fallback.
+- **Rates and promos**: each model name carries its credit multiplier (e.g. `GLM-5.2 · x0.79`) and promo badges
+  (limited-time free / night discount) in both the `/model` popup and the composer dropdown. The rate is display-only.
+- **Enterprise accounts**: CN enterprise accounts read their cycle quota from the enterprise billing endpoint, and the
+  card shows an "enterprise quota" row with the reset time.
+- **The plugin page shows a display name**: `DSH WorkBuddy Bridge` (the same in both UI languages), with the
+  package name `dsh-workbuddy-bridge` on the code-style line beneath it.
+
+## Install
+
+### Prerequisites
+
+- The **WorkBuddy desktop app** is installed and signed in (WorkBuddy AI for the international version). The plugin
+  reuses the app's sign-in state and follows account switches; the two versions do not affect each other.
+- The DSH version range is whatever [package.json](package.json) declares in `engines` and `peerDependencies` —
+  this repository tracks the **DSH `0.1.7` line** only.
+- Node 22+ (same source: `engines.node`).
+
+### From npm
+
+```sh
+dsh plugin --profile web add dsh-workbuddy-bridge
+dsh web
+```
+
+### From source
+
+```sh
+git clone https://github.com/zlZayn/dsh-workbuddy-bridge.git
+cd dsh-workbuddy-bridge
+pnpm install && pnpm build
+
+dsh plugin --profile web add "$PWD"
+dsh web
+```
+
+### Other interfaces
+
+```sh
+# Desktop (the DSH Desktop app)
+dsh plugin --profile desktop add dsh-workbuddy-bridge
+dsh --profile desktop
+```
+
+```sh
+# TUI (terminal UI)
+dsh plugin --profile dsh-tui add dsh-workbuddy-bridge
+dsh --profile dsh-tui
+```
+
+> **TUI version pairing**: the terminal UI package `@deepseek-harness-tui/dsh-tui` must be **`0.10.0-beta.5` or newer** —
+> older versions fail at startup with `events is not iterable` once this plugin is installed. Update the shell first.
+
+> **TUI and pnpm**: the `dsh-tui` profile needs pnpm 11 (a different pnpm on PATH fails with
+> `ERR_PNPM_UNEXPECTED_STORE` — use `npx pnpm@11`).
+
+### Discovery
+
+- **GitHub**: [`zlZayn/dsh-workbuddy-bridge`](https://github.com/zlZayn/dsh-workbuddy-bridge)
+- The repository carries the GitHub topic `dsh-plugin`, which the plugin market uses for discovery.
+
+## Version compatibility
+
+- This repository supports the **DSH `0.1.7` line** only, verified on `0.1.7-rc.2`; the floor lives in
+  [package.json](package.json) (`engines.dsh`) and is not copied here.
+- **No cross-generation compatibility**: when the host moves lines, this repository moves its floor with it rather
+  than serving two lines from one codebase.
+- The plugin **never probes the host version**: it registers against the contracts the host declares (slots, services,
+  the configuration seam) with no defensive wrappers. Where a seam is absent the corresponding feature quietly does not
+  appear, and nothing else is dragged down with it.
+
+## Configuration
+
+Sidebar **Plugins** → "Installed" → click the plugin name to open its detail page — **the configuration area sits right
+under the description and is editable in place**, with no second Configure step on that row:
+
+- **Configuration form**: `authFile` (CN sign-in file), `authFileAI` (international), **allow reasoning-level detection**,
+  and **use the largest context window the upstream declares**. Leave the first two blank to use the app's own location.
+- **Two cards**: one per version, each reporting its own account. The account, token validity and catalog source
+  sit above the tabs; the three tabs below split by what a reader came to do:
+  - **Credits**: total, cycle reset, and per-package allowances in one place.
+  - **Models**: the full catalog in one table — **visibility** checkboxes, context windows, credit rates and badges.
+  - **Detection**: reasoning-level detection, one row per model; empty when nothing needs detecting.
+
+<p align="center">
+  <img src="assets/2.png" alt="Plugin detail page: the configuration form and the two status cards" width="480">
+  <br>
+  <em>The configuration form sits above the two cards — one per version, each following its own app's sign-in.</em>
+</p>
+
+<p align="center">
+  <img src="assets/3.png" alt="Credits tab: total and per-package allowances" width="420">
+  <img src="assets/6.png" alt="Models tab: visibility, windows, rates" width="420">
+  <img src="assets/7.png" alt="Detection tab: reasoning-level detection" width="420">
+  <br>
+  <em>Expanding a card shows three tabs: Credits (total and per-package), Models (visibility, windows, rates), and Detection (reasoning levels).</em>
+</p>
+
+Saving takes effect immediately. **Configuration changes do not need a host restart** (configuration is a volatile
+reference); **changing the plugin's code does**.
+
+> The "Built-in Plugins" page in the settings dialog is a **read-only inventory** (name and runtime status) with no
+> configuration entry — do not look for configuration there.
+
+## Why detection is manual
+
+WorkBuddy's reasoning-level information is split between upstream API responses and private UI logic in the client,
+while the model catalog changes quickly. Filling in one uniform set of levels for every undeclared model would mean
+chasing unpublished product logic with no stable contract.
+
+Testing also found that some models **accept** `reasoning_effort` while ignoring unknown values and falling back to
+their default — so one successful request does not prove that a level is actually usable.
+
+<p align="center">
+  <img src="assets/4.png" alt="The reasoning-level control beside the composer's model picker" width="620">
+  <br>
+  <em>The control sits next to the model picker; results land in the model dropdown and are written back to the card.</em>
+</p>
+
+For models without declared levels, Web and Desktop therefore use **authorize first, then detect on demand**: confirm
+that the upstream validates the parameter, then check which standard levels it accepts. Detection sends a few requests
+and may consume credit; the result means only that **the upstream currently accepts that level** — it does not promise
+a change in reasoning quality, speed, or credit use.
+
+## CLI
+
+```sh
+dsh plugin --profile <web|desktop|dsh-tui> exec dsh-workbuddy-bridge status
+```
+
+Sign-in state and remaining credit; `--json` for machine-readable output, plus `doctor` (diagnostics) and `logout`
+(credential cleanup).
+
+Both target the CN version by default; add `--provider workbuddy-ai` for the international one:
+
+```sh
+dsh plugin --profile web exec dsh-workbuddy-bridge status --provider workbuddy-ai
+dsh plugin --profile web exec dsh-workbuddy-bridge doctor --provider workbuddy-ai
+```
+
+`logout` removes only that version's plugin-owned credential copy. It leaves the desktop app's own sign-in alone and
+does not promise the model group will disappear (the app's credential file still supplies one).
+
+## Security and boundaries
+
+- **Credentials stay local**: read from the app's credential file, then kept as one **encrypted** plugin-owned copy.
+  The browser half never receives the token, file paths, or platform facts.
+- **No credential text in the UI**: the cards report the account and status only.
+- **Only WorkBuddy's own endpoints are contacted** — no proxying or forwarding of other traffic.
+- The plugin depends on **WorkBuddy client interfaces (not a public API)**; upstream changes can break it. When that
+  happens it degrades to "this account's last successful catalog → built-in roster" and labels the source and failure
+  reason on the card.
+
+## Known limitations
+
+- Verified on macOS with the DSH Web / Desktop / TUI profiles. Windows probes Local and Roaming AppData in order; WSL
+  first reads credentials from the mounted Windows user profile. If the Windows and Linux user names differ and Windows
+  environment variables are not forwarded into WSL, point `WORKBUDDY_AUTH_FILE` (or `WORKBUDDY_AI_AUTH_FILE`) at the
+  actual file.
+- **The international version's catalog comes from the app's own interface**: the service splits it by User-Agent, a
+  private implementation detail a server-side change can break. The CN version uses the same interface as the official
+  CLI and is unaffected.
+- **International-version environments not yet covered**: on Windows / WSL / Linux no reliable source for the
+  international app's version has been located, so the saved value or the built-in default is used.
+- **Behaviour with no credentials**: a version whose app was never signed in — and that left no plugin-owned copy —
+  no longer shows a model group. (The CN version used to display a built-in fallback list, but every model on it failed
+  when selected.)
+- **The enterprise credit path currently covers the CN product only**: the international enterprise billing interface is
+  unverified, so those accounts still read through the personal endpoint.
+- Manual detection is available on Web and Desktop only; TUI has none.
+
+## Disclaimer
+
+- This project is for **personal learning and research only**, driving your own WorkBuddy account on your own machine.
+  Do not use it commercially or beyond reasonable personal use.
+- Users must comply with the WorkBuddy terms of service. Any consequence of using this project (including but not limited
+  to account restrictions, depleted credit, or service interruption) is borne by the user.
+- The author is not liable for any direct or indirect loss arising from the use or misuse of this project.
+- This project is not affiliated with, endorsed by, or sponsored by Tencent, WorkBuddy, or DeepSeek. Product names are
+  used for compatibility description only; trademarks belong to their respective owners.
+
+## Acknowledgements
+
+- [Sliverkiss/workbuddy2api](https://github.com/Sliverkiss/workbuddy2api) (MIT) — reference implementation of the WorkBuddy upstream protocol.
+- [franksong2702/dsh-codex-connect](https://github.com/franksong2702/dsh-codex-connect) (Apache-2.0) — reference for the DSH plugin structure and provider registration.
+
+## License
+
+[MIT](LICENSE).
+
+## Contributing
+
+Bug reports should include the DSH version, the plugin version, and reproduction steps. Before proposing a feature, read
+[docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) for the design trade-offs.
+
+Design → [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md); release process and version semantics → [docs/PUBLISHING.md](docs/PUBLISHING.md);
+maintainer doc map → [AGENTS.md](AGENTS.md).

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# Register the WorkBuddy provider without changing the profile's current
+# default model. The plugin reuses the WorkBuddy desktop app's sign-in; no
+# separate OAuth flow is started.
+- insert:
+    - id: llm-workbuddy
+      name: dsh-workbuddy-bridge

package/icon.svg

@@ -0,0 +1,31 @@
+<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <!--
+    dsh-workbuddy-bridge 的插件页图标：与输入区那个「推理档位检测」控件**同一个字形**
+    （src/client/probe-control.tsx 用宿主自己的 IconThinkOutlineRegular），放大到官方 36 格。
+
+    **边距是关键，不是把墨迹拉满格**。量了宿主三个官方图标的内容范围：
+      auto-review  上下 6 / 左右 8.5    voice-input  约 7.7 / 7.6    agent-team  上下 8.5–9.4 / 左右 9
+    即内容落在离边 6–9 之间。本文件取 7：16 格的墨迹（外接框 0.6233–15.3767）落到 7–29。
+      scale     = 22 / (15.3767 − 0.6233) = 1.4912
+      translate = 7 − 0.6233 × 1.4912     = 6.0706
+    原先写的是 translate(2 2) scale(2)（内容 2–34，四周只留 2）—— 看起来就是「太大、太挤」。
+
+    线宽：组内给 1.5，落到画布约 2.24，与宿主「16 格里 1px」的视觉重量一致（1/16 × 36 = 2.25）。
+
+    选色：图标是宿主直读的静态资源，**不跟随主题**，所以颜色只能烘死。
+    墨迹 #7F8287（亮暗两块主题下都落在宿主中性色附近）；圆心那一点 #F59E0B
+    （宿主 warn 档语义色，亮暗同值）—— 语义是「正在检测的那一档」。
+    取色判据与 dsh-ds-balance 的 icon.svg 同一套。
+
+    形状真源是宿主：组件直接渲染 IconThinkOutlineRegular，本文件是它按官方边距放大后的副本。
+    宿主换字形时这里要同批跟（红线 test/redlines.spec.ts 对着三处路径逐字核）。
+  -->
+  <g transform="translate(6.0706 6.0706) scale(1.4912)">
+    <g stroke="#7F8287" stroke-width="1.5" fill="none">
+      <path d="M10.7554 5.24466C13.9891 8.4783 15.3769 12.3333 13.8552 13.8551C12.3335 15.3768 8.4785 13.989 5.24478 10.7553C2.01111 7.52165 0.623307 3.66664 2.14504 2.14491C3.66676 0.623189 7.52178 2.01099 10.7554 5.24466Z" />
+      <path d="M10.7554 10.7553C7.52178 13.989 3.66676 15.3768 2.14504 13.8551C0.623307 12.3333 2.01111 8.4783 5.24478 5.24466C8.4785 2.01099 12.3335 0.623189 13.8552 2.14491C15.3769 3.66664 13.9891 7.52165 10.7554 10.7553Z" />
+    </g>
+    <!-- 圆心那一点：宿主原字形的第三条路径，填色而非描边，所以跟着同一组一起缩放。 -->
+    <path d="M8.9587 8.00025C8.9587 8.52835 8.5306 8.95655 8.0024 8.95655C7.47429 8.95655 7.04614 8.52835 7.04614 8.00025C7.04614 7.47209 7.47429 7.04395 8.0024 7.04395C8.5306 7.04395 8.9587 7.47209 8.9587 8.00025Z" fill="#F59E0B" />
+  </g>
+</svg>

package/lib/bin.d.ts

@@ -0,0 +1,6 @@
+//#region src/cli/bin.d.ts
+/** Standalone status/diagnostics CLI for the dsh-workbuddy-bridge bundle. */
+/** Execute one boot-free command. */
+declare function run(argv: readonly string[]): Promise<number>;
+//#endregion
+export { run };