dsh-workbuddy-bridge 0.2.0 → 0.3.0

package/lib/{variants-DP0Ho0Tc.js → variants-3SmUZ0e_.js}

@@ -12,9 +12,8 @@ import { accessSync, constants, realpathSync, statSync } from "node:fs";
 * The international desktop app's version, used as the `/v3/config` UA.
 *
 * The App-shaped catalog is served only to a User-Agent carrying the product
-* name (see `docs/workbuddy-ai-international-research-2026-09-11.md` §2.7).
-* That document's conclusion recommended the space form `WorkBuddy AI/<v>`;
-* re-measured on 2026-09-11 the *space* form is rejected (HTTP 400, code
+* name. The 2026-09-11 research recommended the space form `WorkBuddy AI/<v>`;
+* re-measured the same day the *space* form is rejected (HTTP 400, code
 * 12403) while the terse `WorkBuddyAI/<v>` form — with or without the space
 * removed — returns the 21-model App document. The UA is therefore built from
 * the form verified in code, not from the earlier prose.
@@ -150,8 +149,9 @@ function appUserAgent(version) {
 //#endregion
 //#region src/protocol/client-identity.ts
 /**
-* The desktop-client identity chat requests present as (phase 1 of
-* `docs/upstream-identity-alignment-plan.md`).
+* The desktop-client identity chat requests present as (phase 1 of the upstream
+* identity alignment — unit-covered by `tests/client-identity.spec.ts`, and
+* re-checked against the real upstream by `scripts/client-identity-live-matrix.mjs`).
 *
 * Chat and its probe sibling carry the User-Agent shape the official desktop
 * client composes — `WorkBuddy/<v> <product>/<v> CLI/<cli>` — where the
@@ -163,7 +163,7 @@ function appUserAgent(version) {
 * a missing extension).
 *
 * Scope: chat and probe requests ONLY. Refresh, catalog, and billing keep
-* the headers they have always sent; the plan holds the blast radius to this
+* the headers they have always sent; this phase holds the blast radius to
 * one variable so the live verification matrix stays readable.
 *
 * @module dsh-workbuddy-bridge/client-identity
@@ -500,7 +500,7 @@ function parseJson(body) {
 * The reasoning-effort probe: decide whether a model's `reasoning_effort`
 * parameter is actually validated, and if so which canonical values it accepts.
 *
-* Implements `docs/reasoning-effort-probe-plan.md` §4. The order matters and is
+* The order below is what `tests/probe.spec.ts` asserts. It matters and is
 * not an optimization:
 *
 * 1. **Baseline** (no `reasoning_effort`) proves the model, credential, and
@@ -774,10 +774,10 @@ function originReferer(credential) {
 /** Headers every upstream request shares. */
 function commonHeaders(credential) {
 	return {
-		"Accept": "application/json, text/plain, */*",
+		Accept: "application/json, text/plain, */*",
 		"X-Requested-With": "XMLHttpRequest",
-		"Origin": originReferer(credential),
-		"Referer": `${originReferer(credential)}/`,
+		Origin: originReferer(credential),
+		Referer: `${originReferer(credential)}/`,
 		"User-Agent": CLIENT_UA
 	};
 }
@@ -812,8 +812,8 @@ function refreshHeaders(credential) {
 /** Billing request headers. */
 function billingHeaders(credential) {
 	const headers = {
-		"Authorization": `Bearer ${credential.accessToken}`,
-		"Accept": "application/json",
+		Authorization: `Bearer ${credential.accessToken}`,
+		Accept: "application/json",
 		"Content-Type": "application/json"
 	};
 	if (credential.uid !== "") headers["X-User-Id"] = credential.uid;
@@ -952,7 +952,7 @@ var WorkBuddyUpstreamClient = class {
 				method: "POST",
 				headers: {
 					...chatHeaders(credential, userAgent),
-					"Authorization": `Bearer ${credential.accessToken}`
+					Authorization: `Bearer ${credential.accessToken}`
 				},
 				body: region === "global" ? prepareInternationalChatBody(bodyJson) : bodyJson,
 				...signal === void 0 ? {} : { signal }
@@ -1288,7 +1288,7 @@ var WorkBuddyUpstreamClient = class {
 				method: "POST",
 				headers: {
 					...chatHeaders(credential, userAgent),
-					"Authorization": `Bearer ${credential.accessToken}`
+					Authorization: `Bearer ${credential.accessToken}`
 				},
 				body: JSON.stringify(payload),
 				signal
@@ -2663,7 +2663,7 @@ var WorkBuddyCredentialStore = class {
 			return refreshed;
 		} catch (error) {
 			if (credential.expiresAtMs > Date.now() + 3e4) return credential;
-			throw new Error(`workbuddy: token refresh failed and the access token is expired (${String(error)}); open the WorkBuddy desktop app once to sign in again`);
+			throw new Error(`workbuddy: token refresh failed and the access token is expired (${String(error)}); open the WorkBuddy desktop app once to sign in again`, { cause: error });
 		}
 	}
 	async saveOwn(credential) {
@@ -3563,7 +3563,7 @@ const WORKBUDDY_STATUS_PATH = "/plugins/dsh-workbuddy-bridge/status";
 * Separate from the status route because it accepts writes: the status route's
 * loopback Host/Origin guard protects against a DNS-rebinding *page*, which is
 * not the same as authorizing a state-changing action. This route therefore
-* also requires the in-process key the browser half receives with the status
+* also requires the in-memory key the browser half receives with the status
 * document.
 */
 const WORKBUDDY_PROBE_PATH = "/plugins/dsh-workbuddy-bridge/probe";
@@ -3577,9 +3577,31 @@ const WORKBUDDY_PROBE_PATH = "/plugins/dsh-workbuddy-bridge/probe";
 */
 const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-bridge/ai/status";
 const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-bridge/ai/probe";
+/**
+* Plugin-owned per-message credit route.
+*
+* A read-only GET taking `?sessionId=…`, answering `messageId → credit` for one
+* Session. It is its own route rather than a field of the status document
+* because the two have different lifetimes: the status document is per
+* *account* and is re-read when the account changes, while credit accounting
+* is per *Session* and grows as messages are sent.
+*
+* **One route for both variants, on purpose.** The accounting is attributed to
+* a DSH `messageId` before it is stored, and a message id belongs to one
+* Session regardless of which provider served it — a conversation can switch
+* between the two WorkBuddy products (or away from both) mid-thread. A route
+* per variant would force the message row to know which provider answered a
+* message *it is merely labelling*, and would strand every message whose turn
+* ran under the other variant.
+*
+* No key is required: the route only reads what this plugin already observed on
+* its own loopback stream, carries no credential material, and answers loopback
+* requests through the same Host/Origin guard as the status route.
+*/
+const WORKBUDDY_CREDIT_PATH = "/plugins/dsh-workbuddy-bridge/credit";
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_BRIDGE_VERSION = "0.2.0";
+const WORKBUDDY_BRIDGE_VERSION = "0.3.0";
 //#endregion
 //#region src/web/heartbeat.ts
 /**
@@ -3804,4 +3826,4 @@ function variantFor(id) {
 	return WORKBUDDY_VARIANTS.find((variant) => variant.id === id);
 }
 //#endregion
-export { normalizeCredits as A, FALLBACK_CN_APP_VERSION as B, desktopAuthCandidatesFor as C, cnAppDiscovery as D, WorkBuddyAtRestKeyProvider as E, PROBE_EFFORT_CANDIDATES as F, validCliVersion as G, fallbackChatIdentity as H, probeModel as I, installedAppVersion as J, WORKBUDDY_APP_VERSION_FILENAME as K, randomSentinel as L, prepareChatBody as M, prepareInternationalChatBody as N, WorkBuddyUpstreamClient as O, regionOf as P, classifyUpstreamError as R, defaultDesktopAuthPath as S, workbuddyOwnAuthPath as T, readCliVersion as U, chatUserAgent as V, resolveChatIdentity as W, resolveAppVersion as X, readBundleVersion as Y, validAppVersion as Z, WorkBuddyCatalog as _, WORKBUDDY_HOST_HEARTBEAT_FILENAME as a, WorkBuddyCredentialStore as b, processStartTimeMs as c, writeHostHeartbeat as d, WORKBUDDY_BRIDGE_VERSION as f, FALLBACK_WORKBUDDY_MODELS as g, FALLBACK_WORKBUDDY_AI_MODELS as h, variantFor as i, parseModelCatalog as j, modelWithCurrentPromotion as k, readHostHeartbeat as l, WORKBUDDY_STATUS_PATH as m, CN_VARIANT as n, clearHostHeartbeat as o, WORKBUDDY_PROBE_PATH as p, appUserAgent as q, WORKBUDDY_VARIANTS as r, isHeartbeatProcessAlive as s, AI_VARIANT as t, workbuddyHostHeartbeatPath as u, WORKBUDDY_AUTH_FILENAME as v, parseWorkBuddyAuth as w, defaultDesktopAuthCandidates as x, WORKBUDDY_AUTH_FILE_ENV as y, CN_APP_VERSION_FILENAME as z };
+export { modelWithCurrentPromotion as A, CN_APP_VERSION_FILENAME as B, defaultDesktopAuthPath as C, WorkBuddyAtRestKeyProvider as D, workbuddyOwnAuthPath as E, regionOf as F, resolveChatIdentity as G, chatUserAgent as H, PROBE_EFFORT_CANDIDATES as I, appUserAgent as J, validCliVersion as K, probeModel as L, parseModelCatalog as M, prepareChatBody as N, cnAppDiscovery as O, prepareInternationalChatBody as P, validAppVersion as Q, randomSentinel as R, defaultDesktopAuthCandidates as S, parseWorkBuddyAuth as T, fallbackChatIdentity as U, FALLBACK_CN_APP_VERSION as V, readCliVersion as W, readBundleVersion as X, installedAppVersion as Y, resolveAppVersion as Z, FALLBACK_WORKBUDDY_MODELS as _, WORKBUDDY_HOST_HEARTBEAT_FILENAME as a, WORKBUDDY_AUTH_FILE_ENV as b, processStartTimeMs as c, writeHostHeartbeat as d, WORKBUDDY_BRIDGE_VERSION as f, FALLBACK_WORKBUDDY_AI_MODELS as g, WORKBUDDY_STATUS_PATH as h, variantFor as i, normalizeCredits as j, WorkBuddyUpstreamClient as k, readHostHeartbeat as l, WORKBUDDY_PROBE_PATH as m, CN_VARIANT as n, clearHostHeartbeat as o, WORKBUDDY_CREDIT_PATH as p, WORKBUDDY_APP_VERSION_FILENAME as q, WORKBUDDY_VARIANTS as r, isHeartbeatProcessAlive as s, AI_VARIANT as t, workbuddyHostHeartbeatPath as u, WorkBuddyCatalog as v, desktopAuthCandidatesFor as w, WorkBuddyCredentialStore as x, WORKBUDDY_AUTH_FILENAME as y, classifyUpstreamError as z };

package/locale/README.md

@@ -0,0 +1,10 @@
+# locale/ — 包展示元数据
+
+- 职责：宿主直读的**包展示元数据**（插件页上的标题与一句话说明）。
+  不是插件界面文案 —— 那在 [../src/client/locales.ts](../src/client/locales.ts)，运行时经 `ctx.locale` 注册。
+- `en.json`：`meta.title` + `meta.description` 的英文。宿主先解析这一份，它不在就不会读其他语言文件。
+- `zh.json`：同一键集的中文。
+- 生效条件：随包发布（`package.json` 的 `files` 收了 `locale/*.json`），宿主从 `<包名>/locale/<语言>.json` 读；
+  不进 `lib/`，本仓代码一个字节都不读它。
+- 被谁依赖：宿主插件页；发布面断言在 [../scripts/check-release.mjs](../scripts/check-release.mjs)。
+- 回落链、字段形状、改动波及面（规则层）→ 见 [AGENTS.md](AGENTS.md)

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-bridge",
   "displayName": "DSH WorkBuddy Bridge",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "author": "zlZayn",
   "keywords": [
     "dsh",
@@ -20,17 +20,16 @@
   },
   "icon": "./icon.svg",
   "main": "lib/index.js",
-  "types": "lib/types/index.d.ts",
+  "types": "./lib/index.d.ts",
   "bin": {
     "dsh-workbuddy-bridge": "lib/bin.js"
   },
   "exports": {
     ".": {
-      "types": "./lib/types/index.d.ts",
+      "types": "./lib/index.d.ts",
       "default": "./lib/index.js"
     },
     "./client": {
-      "types": "./lib/types/client/index.d.ts",
       "default": "./lib/client.js"
     },
     "./cordis.patch.yml": "./cordis.patch.yml",
@@ -68,7 +67,8 @@
         "@deepseek-ai/dsh-client-ui-renderer",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-conversation",
-        "@deepseek-ai/dsh-client-ui-model-selection"
+        "@deepseek-ai/dsh-client-ui-model-selection",
+        "@deepseek-ai/dsh-client-ui-chat"
       ],
       "platform": "web"
     }
@@ -80,6 +80,7 @@
     "@deepseek-ai/dsh-attachment": ">=0.1.7-rc.2",
     "@deepseek-ai/dsh-client-locale": ">=0.1.7-rc.2",
     "@deepseek-ai/dsh-client-store": ">=0.1.7-rc.2",
+    "@deepseek-ai/dsh-client-ui-chat": ">=0.1.7-rc.2",
     "@deepseek-ai/dsh-client-ui-plugin-manager": ">=0.1.7-rc.2",
     "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.7-rc.2",
     "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.7-rc.2",
@@ -97,36 +98,42 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.4",
-    "@deepseek-ai/dsh-api-remotes": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-atomic-write": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-attachment": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-store": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-plugin-manager": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-session": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-home-paths": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-settings": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-util-code-language": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-util-workspace-path": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-atomic-write": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-plugin-manager": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-util-code-language": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-util-workspace-path": "0.2.0-rc.2",
     "@deepseek-ai/schemastery": "3.18.4",
-    "@earendil-works/pi-ai": "0.85.1",
+    "@earendil-works/pi-ai": "^0.87.1",
+    "@eslint/js": "^10.0.1",
     "@shikijs/langs": "^4.4.3",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.7",
     "@types/react-test-renderer": "^18.3.1",
+    "@vitest/coverage-v8": "^4.1.11",
     "anser": "^2.3.5",
     "clsx": "^2.1.1",
     "diff": "^9.0.0",
+    "eslint": "^10.11.0",
+    "eslint-config-prettier": "^10.1.8",
+    "globals": "^17.12.0",
     "immer": "^11.1.18",
     "katex": "^0.16.47",
     "lightningcss": "^1.33.0",
@@ -141,6 +148,7 @@
     "micromark-util-classify-character": "^2.0.1",
     "micromark-util-sanitize-uri": "^2.0.1",
     "micromark-util-symbol": "^2.0.1",
+    "prettier": "^3.9.9",
     "react": "^18.2.0",
     "react-dom": "^18.3.1",
     "react-test-renderer": "18.3.1",
@@ -148,15 +156,19 @@
     "simple-icons": "^16.32.0",
     "tsdown": "^0.22.2",
     "typescript": "^5.9.3",
+    "typescript-eslint": "^8.70.1",
     "unrun": "^0.3.1",
-    "vitest": "^4.1.8",
+    "vitest": "^4.1.11",
     "zustand": "^5.0.15"
   },
   "scripts": {
     "build": "tsdown",
     "test": "vitest run",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
     "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
     "check:release": "node scripts/check-release.mjs",
-    "check": "pnpm run typecheck && pnpm run test && pnpm run build"
+    "check": "pnpm run typecheck && pnpm run build && pnpm run test"
   }
 }