dsh-workbuddy-connect 0.2.6 → 0.3.1

package/README.en.md

@@ -10,13 +10,13 @@ Brings every model in the WorkBuddy desktop app (GLM-5.3, GLM-5.2, DeepSeek-V4-P
 
 ![WorkBuddy models in the DSH model picker](assets/1.png)
 
-- **Image input**: image messages are admitted per the upstream's per-model capability flag — most models (GLM-5.3-Flash, GLM-5.2, the DeepSeek-V4 series, etc.) accept pasted or dragged-in images, while text-only models (e.g. GLM-5.1) keep a clear refusal.
+- **Image input**: most models accept images — paste or drop one straight into the conversation (GLM-5.3-Flash, GLM-5.2, the DeepSeek-V4 series, and more); the few text-only models (e.g. GLM-5.1) clearly say so.
 
-- **Thinking effort**: the model picker exposes the per-model effort levels the upstream declares (e.g. GLM-5.3 offers low / high / xhigh, GLM-5.3-Flash low / high / max), forwarded as `reasoning_effort` on the wire.
+- **Thinking effort**: the model picker lets you switch the thinking effort on models that support it — GLM-5.3 offers low / high / xhigh and GLM-5.3-Flash offers low / high / max. Models without the option cannot be adjusted and use WorkBuddy's default.
 
-- **Limited-time free at a glance**: the status card marks models that are currently free / limited-time free / on a night discount (following the upstream `credits` and `tags` live).
+- **Promo badges**: promo badges (`限时免费`, `夜间折扣`) ride the model name itself (e.g. `Hy4 preview · x0.00 · 限时免费`), visible wherever you pick a model; the status card also collects currently-discounted models. Per the WorkBuddy service data, synced each time DSH starts.
 
-- **Rate ratio at a glance**: every model in the selection list carries its credits multiplier on the name (e.g. `GLM-5.2 · x0.79`, `Hy3 · x0.00`), in both the `/model` popup and the composer seat; the status card adds a localized rate line too. The rate is display-only — requests always use the model id.
+- **Rate**: every model name carries its credits multiplier (e.g. `GLM-5.2 · x0.79`, `Hy3 · x0.00`) in both the `/model` popup and the composer's model dropdown. The rate is display-only and never affects requests.
 
 - **Info at a glance**: Settings → Plugins → DSH WorkBuddy Connect card
 
@@ -30,6 +30,16 @@ Expand the card to see the account, token validity, and remaining credit.
 
 Prerequisite: the WorkBuddy desktop app is installed and signed in (the plugin reuses the app's sign-in state and follows account switches automatically).
 
+**Match the plugin version to your DSH core** — a mismatched combination fails to start DSH:
+
+| Plugin | Required DSH core | Desktop app |
+|---|---|---|
+| **0.3.0+** | `0.1.2-rc.1` or newer | `2.0.5`+ recommended |
+| **0.2.6** | `0.1.1-rc.2` (older line) | `2.0.3` / `2.0.4` |
+
+- On DSH `0.1.2-rc.1` or newer, just install the latest: `dsh plugin --profile web add dsh-workbuddy-connect`
+- Still on DSH `0.1.1-rc.2`? Stay on the older release: `dsh plugin --profile web add dsh-workbuddy-connect@0.2.6`
+
 The plugin runs under all three DSH interfaces: **Web**, **Desktop**, and **TUI**. Pick the install command that matches the profile you use.
 
 ```sh
@@ -54,7 +64,9 @@ dsh plugin --profile dsh-tui add dsh-workbuddy-connect
 dsh --profile dsh-tui
 ```
 
-> Note: the `dsh-tui` profile requires pnpm 11 to install packages (a different pnpm on PATH fails with `ERR_PNPM_UNEXPECTED_STORE` — use `npx pnpm@11`); verified on dsh `0.1.1-rc.2`.
+> **TUI users should stay on 0.2.6**: in our testing, installing this plugin 0.3.0 on the TUI profile crashes startup with `events is not iterable` — the terminal UI package (`@deepseek-harness-tui/dsh-tui`) has not been adapted to the new DSH core yet (the fix is committed upstream, unreleased). We recommend TUI users keep DSH `0.1.1-rc.2` and plugin `0.2.6` for now, and upgrade to 0.3.0 once the terminal UI ships an adapted release.
+
+> Note: the `dsh-tui` profile requires pnpm 11 to install packages (a different pnpm on PATH fails with `ERR_PNPM_UNEXPECTED_STORE` — use `npx pnpm@11`).
 
 After installing, switch to a WorkBuddy model in the model picker of the interface you chose. On Web, the settings card (Settings → Plugins → DSH WorkBuddy Connect) shows the account, token validity, and remaining credit; on TUI, configure `authFile` in `/settings`.
 
@@ -64,7 +76,7 @@ After installing, switch to a WorkBuddy model in the model picker of the interfa
 
 ## Known limitations
 
-- Verified on macOS with the DSH Web / Desktop / TUI profile (`0.1.1-rc.2`+, Node 22+). Windows probes Local and Roaming AppData in order; WSL first reads credentials from the mounted Windows user profile. If the Windows and Linux user names differ and Windows environment variables are not forwarded into WSL, point `WORKBUDDY_AUTH_FILE` at the actual file.
+- Verified on macOS with the DSH Web / Desktop profiles (`0.1.2-rc.1`+, Node 22+); TUI pending a terminal-UI release adapted to 0.1.2 (see the Install section). Windows probes Local and Roaming AppData in order; WSL first reads credentials from the mounted Windows user profile. If the Windows and Linux user names differ and Windows environment variables are not forwarded into WSL, point `WORKBUDDY_AUTH_FILE` at the actual file.
 - Relies on WorkBuddy client interfaces (not a public API); the plugin may need updates as WorkBuddy changes.
 
 ## Disclaimer

package/README.md

@@ -15,16 +15,16 @@
 ![WorkBuddy 模型出现在 DSH 模型选择器中](assets/1.png)
 
 
-- **图片输入**：按上游逐模型声明的能力放行图片——绝大多数模型（含 GLM-5.3-Flash、GLM-5.2、DeepSeek-V4 系列等）可直接粘贴或拖入图片；个别纯文本模型（如 GLM-5.1）按上游声明仍会明确提示不支持。
+- **图片输入**：大部分模型支持发图，在对话里直接粘贴或拖入图片即可（GLM-5.3-Flash、GLM-5.2、DeepSeek-V4 系列等）；少数只支持文字的模型（如 GLM-5.1）会明确提示不支持。
 
 
-- **思考强度**：按上游每个模型声明的 `supportedEfforts` 提供思考等级选项（如 GLM-5.3 支持 low / high / xhigh，GLM-5.3-Flash 支持 low / high / max），在 DSH 模型选择器里即可切换，请求以 `reasoning_effort` 转发。
+- **思考强度**：模型选择器里可为支持的模型切换思考强度，例如 GLM-5.3 可选 low / high / xhigh，GLM-5.3-Flash 可选 low / high / max；没有出现选项的模型不支持调整，使用 WorkBuddy 的默认档位。
 
 
-- **限时免费一目了然**：状态卡片会标注当前免费 / 限时免费 / 夜间折扣的模型（跟随上游 `credits` 与 `tags` 实时更新）。
+- **徽章展示**：促销徽章（限时免费、夜间折扣）直接跟在模型名后面（如 `Hy4 preview · x0.00 · 限时免费`），选模型时一眼可见；设置卡片里也会汇总当前有优惠的模型。以 WorkBuddy 服务端的数据为准，每次启动 DSH 时同步。
 
 
-- **费率比例直接可见**：模型选择列表里每个模型名后直接显示积分倍率（如 `GLM-5.2 · x0.79`、`Hy3 · x0.00`），`/model` 弹窗与 composer 下拉都能看到；设置卡片里也补充了倍率说明。倍率只影响显示，发送请求仍使用模型 id。
+- **费率比例**：模型选择列表里每个模型名后直接显示积分倍率（如 `GLM-5.2 · x0.79`、`Hy3 · x0.00`），`/model` 弹窗与输入框的模型下拉都能看到。倍率只是显示，不影响实际请求。
 
 
 - **信息查看**：设置 → 插件 → DSH WorkBuddy Connect 卡片
@@ -40,6 +40,16 @@
 
 前置：已安装并登录 WorkBuddy 桌面 App（插件复用 App 的登录状态，账号切换自动跟随）。
 
+**版本对应（重要）**：本插件与 DSH 核心版本一一对应，不可混用——不匹配的组合会导致 DSH 启动失败：
+
+| 插件版本 | 要求的 DSH 核心 | 桌面 App |
+|---|---|---|
+| **0.3.0+** | `0.1.2-rc.1` 及以上 | 建议 `2.0.5`+ |
+| **0.2.6** | `0.1.1-rc.2`（旧线） | `2.0.3` / `2.0.4` |
+
+- DSH `0.1.2-rc.1` 及以上的用户，正常安装最新版即可：`dsh plugin --profile web add dsh-workbuddy-connect`
+- 还在用 DSH `0.1.1-rc.2` 的用户，请安装旧版本并停留在 `0.2.6`：`dsh plugin --profile web add dsh-workbuddy-connect@0.2.6`
+
 插件在三种 DSH 界面下均可运行：**Web**、**Desktop**、**TUI**。根据你使用的 profile 选对应命令安装。
 
 ```sh
@@ -64,7 +74,9 @@ dsh plugin --profile dsh-tui add dsh-workbuddy-connect
 dsh --profile dsh-tui
 ```
 
-> 提示：`dsh-tui` profile 需用 pnpm 11 安装（PATH 里是其他版本会报 `ERR_PNPM_UNEXPECTED_STORE`，用 `npx pnpm@11` 即可）；已验证 dsh `0.1.1-rc.2`。
+> **TUI 用户请先留在 0.2.6**：实测在 TUI 上安装本插件 0.3.0 会导致启动崩溃（报 `events is not iterable`），原因是终端界面插件 `@deepseek-harness-tui/dsh-tui` 还没适配 DSH 新核心（修复已提交，尚未发版）。建议 TUI 用户暂时继续使用 DSH `0.1.1-rc.2` 和本插件 `0.2.6`，等终端界面插件发布适配版本后再升级 0.3.0。
+
+> 提示：`dsh-tui` profile 需用 pnpm 11 安装（PATH 里是其他版本会报 `ERR_PNPM_UNEXPECTED_STORE`，用 `npx pnpm@11` 即可）。
 
 安装后，在对应界面的模型选择器里切换到 WorkBuddy 模型即可使用；Web 下设置卡片（设置 → 插件 → DSH WorkBuddy Connect）可查看账号信息、令牌有效期与剩余积分，TUI 下可在 `/settings` 里配置 `authFile`。
 
@@ -74,7 +86,7 @@ dsh --profile dsh-tui
 
 ## 已知限制
 
-- 在 macOS 的 DSH Web / Desktop / TUI profile（`0.1.1-rc.2`+、Node 22+）下验证通过。Windows 会依次探测 Local 与 Roaming AppData；WSL 会优先从挂载的 Windows 用户目录读取登录凭据。若 Windows 与 Linux 用户名不同且 Windows 环境变量未传入 WSL，请通过 `WORKBUDDY_AUTH_FILE` 指定实际位置。
+- 在 macOS 的 DSH Web / Desktop profile（`0.1.2-rc.1`+、Node 22+）下验证通过；TUI 待终端界面插件发布 0.1.2 适配版后验证（见安装章节说明）。Windows 会依次探测 Local 与 Roaming AppData；WSL 会优先从挂载的 Windows 用户目录读取登录凭据。若 Windows 与 Linux 用户名不同且 Windows 环境变量未传入 WSL，请通过 `WORKBUDDY_AUTH_FILE` 指定实际位置。
 - 依赖 WorkBuddy 客户端接口（非官方开放 API），WorkBuddy 更新后插件可能需要随之调整。
 
 ## 免责声明

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { S as workbuddyOwnAuthPath, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, l as WorkBuddyUpstreamClient, m as FALLBACK_WORKBUDDY_MODELS, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, v as WorkBuddyCredentialStore } from "./host-heartbeat-sa98SyZ9.js";
+import { S as workbuddyOwnAuthPath, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, l as WorkBuddyUpstreamClient, m as FALLBACK_WORKBUDDY_MODELS, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, v as WorkBuddyCredentialStore } from "./host-heartbeat-9FtwMcIF.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -470,7 +470,18 @@ window.__ModuleLoader__.load({
 		//#region src/client/index.tsx
 		/** Stable browser-plugin name. */
 		const name = "dsh-workbuddy-connect-client";
-		/** Client services required by the Plugin configuration contribution. */
+		/**
+		* Client services required by the Plugin configuration contribution.
+		*
+		* DSH 0.1.2 removed `@deepseek-ai/dsh-client-runtime` (the package that used to
+		* hold the browser `ClientContext` alias and the `slots` service). The services
+		* this card relies on now come from narrower packages: the `slots` registry
+		* moved to `@deepseek-ai/dsh-client-ui-renderer`, `locale` stayed in
+		* `@deepseek-ai/dsh-client-locale`, and the `settings.plugin.item` slot is
+		* declared by `@deepseek-ai/dsh-client-ui-settings-plugins`. All three are
+		* named in the package's `dsh.client.inject` list, so cordis has activated
+		* them before this plugin's fiber starts.
+		*/
 		const inject = ["slots", "locale"];
 		/**
 		* Register card copy and the WorkBuddy card under Plugin configuration.

package/lib/{host-heartbeat-sa98SyZ9.js → host-heartbeat-9FtwMcIF.js}

@@ -142,10 +142,21 @@ function parseOwnDocument(text) {
 	const document = parsed;
 	if (document["version"] !== OWN_FORMAT_VERSION) return void 0;
 	if (typeof document["credential"] !== "object" || document["credential"] === null) return void 0;
-	const credential = parseWorkBuddyAuth(JSON.stringify({ auth: document["credential"] }));
-	if (credential === void 0) return void 0;
+	const stored = document["credential"];
+	const accessToken = typeof stored["accessToken"] === "string" ? stored["accessToken"] : "";
+	if (accessToken === "") return void 0;
+	const refreshExpiresAtMs = typeof stored["refreshExpiresAtMs"] === "number" ? stored["refreshExpiresAtMs"] : void 0;
+	const enterpriseId = optionalString(stored["enterpriseId"]);
+	const nickname = optionalString(stored["nickname"]);
 	return {
-		...credential,
+		accessToken,
+		refreshToken: typeof stored["refreshToken"] === "string" ? stored["refreshToken"] : "",
+		expiresAtMs: typeof stored["expiresAtMs"] === "number" ? stored["expiresAtMs"] : 0,
+		...refreshExpiresAtMs === void 0 ? {} : { refreshExpiresAtMs },
+		domain: optionalString(stored["domain"]) ?? "",
+		uid: optionalString(stored["uid"]) ?? "",
+		...enterpriseId === void 0 ? {} : { enterpriseId },
+		...nickname === void 0 ? {} : { nickname },
 		source: "dsh"
 	};
 }
@@ -1041,7 +1052,7 @@ var WorkBuddyUpstreamClient = class {
 };
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_CONNECT_VERSION = "0.2.6";
+const WORKBUDDY_CONNECT_VERSION = "0.3.1";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -1,6 +1,7 @@
 import z from "@deepseek-ai/schemastery";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
 import { Context } from "@deepseek-ai/cordis";
+import { SettingsNamespace } from "@deepseek-ai/dsh-settings";
 import { AttachmentStore } from "@deepseek-ai/dsh-attachment";
 //#region src/upstream.d.ts
 /** WorkBuddy region selected by the credential's login domain. */
@@ -407,8 +408,19 @@ declare function isHeartbeatProcessAlive(heartbeat: WorkBuddyHostHeartbeat): boo
 declare const name = "llm-workbuddy";
 /** The model registry required before the provider can register. */
 declare const inject: string[];
-/** Settings namespace reserved for the future configuration card. */
-declare const WORKBUDDY_SETTINGS_NS: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+/**
+ * Settings namespace owning the configuration card.
+ *
+ * DSH 0.1.2 dropped the `settingsNamespace()` branding function: a namespace is
+ * now a nominal string, validated by the type system where it is used rather
+ * than at runtime by a function call. The brand is compile-time only, so this
+ * stays the plain string it always was — every comparison, descriptor lookup,
+ * and `dsh` config file still sees `'workbuddy'`. It is cast once here so the
+ * public constant carries the seam's type without pulling the brand helper
+ * into this package (upstream DSH plugins, `dsh-llm-pi-ai` included, pass
+ * their namespaces as plain string literals).
+ */
+declare const WORKBUDDY_SETTINGS_NS: SettingsNamespace;
 /** Plugin configuration. */
 interface Config {
   /** Explicit WorkBuddy desktop auth-file path, overriding env and platform defaults. */

package/lib/index.js

@@ -1,6 +1,5 @@
-import { S as workbuddyOwnAuthPath, _ as WORKBUDDY_AUTH_FILE_ENV, a as readHostHeartbeat, b as defaultDesktopAuthPath, d as normalizeCredits, f as prepareChatBody, g as WORKBUDDY_AUTH_FILENAME, h as WorkBuddyCatalog, i as processStartTimeMs, l as WorkBuddyUpstreamClient, m as FALLBACK_WORKBUDDY_MODELS, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as regionOf, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as classifyUpstreamError, v as WorkBuddyCredentialStore, x as parseWorkBuddyAuth, y as defaultDesktopAuthCandidates } from "./host-heartbeat-sa98SyZ9.js";
+import { S as workbuddyOwnAuthPath, _ as WORKBUDDY_AUTH_FILE_ENV, a as readHostHeartbeat, b as defaultDesktopAuthPath, d as normalizeCredits, f as prepareChatBody, g as WORKBUDDY_AUTH_FILENAME, h as WorkBuddyCatalog, i as processStartTimeMs, l as WorkBuddyUpstreamClient, m as FALLBACK_WORKBUDDY_MODELS, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as regionOf, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as classifyUpstreamError, v as WorkBuddyCredentialStore, x as parseWorkBuddyAuth, y as defaultDesktopAuthCandidates } from "./host-heartbeat-9FtwMcIF.js";
 import z from "@deepseek-ai/schemastery";
-import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
 import { createProvider } from "@earendil-works/pi-ai";
 import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
 import { resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
@@ -74,11 +73,12 @@ const RATE_SEPARATOR = " · ";
 /**
 * Append the billing rate to one model's display name.
 *
-* The rate rides the *name* alone because the DSH model surfaces disagree
-* about which field they render: the composer's model seat (`ModelSelect`)
-* renders `model.name` only and never reads `description`, while the `/model`
-* popup renders BOTH — a rate in `description` would show it twice there, so
-* `description` stays untouched.
+* The rate AND the declared promo badges ride the *name* alone: since DSH
+* 0.1.2 the composer's model seat (`ModelSelect`) renders `model.name` only —
+* `description` is no longer read there at all (the 0.1.1-era client rendered
+* it, which is why the badges used to be visible in the seat). The `/model`
+* popup renders the name too, so a separate `description` copy would either
+* duplicate (rate) or vanish (badges) depending on client generation.
 *
 * This is display-only and cannot affect routing: the wire request is built
 * from `model.id` (pi-ai's completions API sets `model: model.id`), the
@@ -87,19 +87,20 @@ const RATE_SEPARATOR = " · ";
 * contents. Nothing in the host resolves a model *by* name.
 */
 /**
-* The declared promo badges (`限时免费`, `夜间折扣`) as a display string for the
-* `/model` popup's description slot, which the name does not cover. The
-* labels are the upstream's own spellings and the host seam has no locale
-* service, so non-Chinese UIs see them verbatim — accepted until the picker
-* grows a localized badge slot.
+* The catalog display suffix: the billing rate followed by the declared promo
+* badges (`限时免费`, `夜间折扣`), or undefined when the row carries neither.
+* The badge labels are the upstream's own spellings and the host seam has no
+* locale service, so non-Chinese UIs see them verbatim — accepted until the
+* picker grows a localized badge slot.
 */
-function promoDescription(info) {
-	const badges = info.billing?.badges;
-	return badges === void 0 || badges.length === 0 ? void 0 : badges.join(" · ");
+function displaySuffix(info) {
+	const parts = [normalizeCredits(info.billing?.credits), ...info.billing?.badges ?? []].filter((part) => part !== void 0 && part !== "");
+	return parts.length === 0 ? void 0 : parts.join(" · ");
 }
-function withRate(name, info) {
-	const rate = normalizeCredits(info.billing?.credits);
-	return rate === void 0 ? name : `${name}${RATE_SEPARATOR}${rate}`;
+/** Append the catalog display suffix to one model's display name. */
+function withCatalogDisplay(name, info) {
+	const suffix = displaySuffix(info);
+	return suffix === void 0 ? name : `${name}${RATE_SEPARATOR}${suffix}`;
 }
 /**
 * Resolve a WorkBuddy model's reasoning capability into pi-ai's
@@ -235,11 +236,9 @@ var WorkBuddyPiAiAdapter = class extends PiAiAdapter {
 		return (await super.listModels(provider)).map((model) => {
 			const info = this.infoFor(model.id);
 			if (info === void 0) return model;
-			const promo = promoDescription(info);
 			return {
 				...model,
-				name: withRate(model.name, info),
-				...promo === void 0 ? {} : { description: promo }
+				name: withCatalogDisplay(model.name, info)
 			};
 		});
 	}
@@ -247,34 +246,22 @@ var WorkBuddyPiAiAdapter = class extends PiAiAdapter {
 		const resolved = await super.resolveModel(provider, model, signal);
 		const info = this.infoFor(model);
 		if (info === void 0) return resolved;
-		const promo = promoDescription(info);
 		return {
 			...resolved,
-			name: withRate(resolved.name, info),
-			...promo === void 0 ? {} : { description: promo }
+			name: withCatalogDisplay(resolved.name, info)
 		};
 	}
 };
 //#endregion
-//#region src/shim.ts
+//#region src/loopback.ts
 /**
-* Loopback OpenAI-compatible endpoint. The pi-ai provider points here; the
-* shim applies the WorkBuddy wire quirks (forced streaming, string
-* `tool_choice`, CLI-shaped headers) and forwards to the real upstream.
-* It binds 127.0.0.1 only and never serves another interface.
-*
-* Inbound hardening: the loopback bind alone is not a trust boundary (any
-* local process or a DNS-rebinding page can reach 127.0.0.1), so every
-* request must carry a loopback Host header, browser-sent Origins must be
-* loopback, chat POSTs must be application/json, and the Authorization
-* header must carry the shim's per-process shared secret. The plugin's
-* own client satisfies all four by construction; local attackers cannot
-* read the secret out of the plugin process's memory.
+* Shared loopback gates for the plugin's local HTTP surfaces: the loopback
+* shim and the same-origin web-status route. Both are only ever meant to be
+* addressed through the machine's loopback interface.
 *
-* @module dsh-workbuddy-connect/shim
+* @module dsh-workbuddy-connect/loopback
 */
-const REQUEST_BODY_LIMIT = 67108864;
-/** Loopback hostnames the shim's own in-process client uses. */
+/** Loopback hostnames a local plugin surface may be addressed by. */
 const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
 	"127.0.0.1",
 	"localhost",
@@ -288,7 +275,7 @@ function hostnameOfHost(host) {
 		return end === -1 ? hostname : hostname.slice(0, end + 1);
 	}
 	const colon = hostname.lastIndexOf(":");
-	if (colon !== -1 && /^\d+$/.test(hostname.slice(colon + 1))) hostname = hostname.slice(0, colon);
+	if (colon !== -1 && !hostname.slice(0, colon).includes(":") && /^\d+$/.test(hostname.slice(colon + 1))) hostname = hostname.slice(0, colon);
 	return hostname;
 }
 /**
@@ -313,6 +300,25 @@ function originIsLoopback(origin) {
 		return false;
 	}
 }
+//#endregion
+//#region src/shim.ts
+/**
+* Loopback OpenAI-compatible endpoint. The pi-ai provider points here; the
+* shim applies the WorkBuddy wire quirks (forced streaming, string
+* `tool_choice`, CLI-shaped headers) and forwards to the real upstream.
+* It binds 127.0.0.1 only and never serves another interface.
+*
+* Inbound hardening: the loopback bind alone is not a trust boundary (any
+* local process or a DNS-rebinding page can reach 127.0.0.1), so every
+* request must carry a loopback Host header, browser-sent Origins must be
+* loopback, chat POSTs must be application/json, and the Authorization
+* header must carry the shim's per-process shared secret. The plugin's
+* own client satisfies all four by construction; local attackers cannot
+* read the secret out of the plugin process's memory.
+*
+* @module dsh-workbuddy-connect/shim
+*/
+const REQUEST_BODY_LIMIT = 67108864;
 /** Chat-completion POSTs must carry a JSON body type (simple-request CSRF drops here). */
 function isJsonContentType(req) {
 	const type = req.headers["content-type"];
@@ -503,16 +509,14 @@ function json(res, status, body) {
 	});
 	res.end(payload);
 }
-/** Loopback browser origins only; other devices are refused until trusted origins exist. */
-function loopbackOrigin(req) {
-	const origin = req.headers.origin;
-	if (origin === void 0) return true;
-	try {
-		const { hostname } = new URL(origin);
-		return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]" || hostname === "::1";
-	} catch {
-		return false;
-	}
+/**
+* The request must be addressed to the loopback interface, and a
+* browser-attached Origin must be loopback too. The Host check drops
+* DNS-rebinding pages (their Host is the attacker's domain, not loopback);
+* the card's same-origin fetches carry no Origin and pass on Host alone.
+*/
+function loopbackRequest(req) {
+	return hostIsLoopback(req.headers.host) && originIsLoopback(req.headers.origin);
 }
 /**
 * Assemble the card's status document. Sign-in state is read-only; credit is
@@ -560,27 +564,31 @@ async function workBuddyWebStatus(deps) {
 	}
 	return statusWithModels;
 }
+/** The status route's request handler, extracted so tests can mount it on a bare server. */
+function workBuddyStatusHandler(deps) {
+	return async (req, res) => {
+		if (req.method !== "GET") {
+			json(res, 405, { error: "method not allowed" });
+			return;
+		}
+		if (!loopbackRequest(req)) {
+			json(res, 403, { error: "request-not-trusted" });
+			return;
+		}
+		try {
+			json(res, 200, await workBuddyWebStatus(deps));
+		} catch (error) {
+			json(res, 500, { error: safeMessage(error) });
+		}
+	};
+}
 /** Mount the GET status route on an optional webServer context. */
 function registerWorkBuddyStatusRoute(ctx, deps) {
 	ctx.effect(() => {
 		const dispose = ctx.webServer.register({
 			kind: "exact",
 			path: WORKBUDDY_STATUS_PATH,
-			handler: async (req, res) => {
-				if (req.method !== "GET") {
-					json(res, 405, { error: "method not allowed" });
-					return;
-				}
-				if (!loopbackOrigin(req)) {
-					json(res, 403, { error: "origin-not-trusted" });
-					return;
-				}
-				try {
-					json(res, 200, await workBuddyWebStatus(deps));
-				} catch (error) {
-					json(res, 500, { error: safeMessage(error) });
-				}
-			}
+			handler: workBuddyStatusHandler(deps)
 		});
 		return () => {
 			dispose();
@@ -593,8 +601,19 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 const name = "llm-workbuddy";
 /** The model registry required before the provider can register. */
 const inject = ["llm"];
-/** Settings namespace reserved for the future configuration card. */
-const WORKBUDDY_SETTINGS_NS = settingsNamespace("workbuddy");
+/**
+* Settings namespace owning the configuration card.
+*
+* DSH 0.1.2 dropped the `settingsNamespace()` branding function: a namespace is
+* now a nominal string, validated by the type system where it is used rather
+* than at runtime by a function call. The brand is compile-time only, so this
+* stays the plain string it always was — every comparison, descriptor lookup,
+* and `dsh` config file still sees `'workbuddy'`. It is cast once here so the
+* public constant carries the seam's type without pulling the brand helper
+* into this package (upstream DSH plugins, `dsh-llm-pi-ai` included, pass
+* their namespaces as plain string literals).
+*/
+const WORKBUDDY_SETTINGS_NS = "workbuddy";
 const Config = z.object({ authFile: z.string().description("WorkBuddy desktop auth file (defaults to the app's own location)") });
 /**
 * Start the loopback endpoint, register the `workbuddy` provider, and
@@ -621,14 +640,16 @@ function apply(ctx, config) {
 		models: () => catalog.current()
 	}));
 	let current = () => config;
-	installSettingsSection(ctx, WORKBUDDY_SETTINGS_NS, Config, config, {
-		setSource(source) {
-			current = source;
-		},
-		onChange() {
-			const next = current().authFile;
-			store.setDesktopPath(next);
-		}
+	ctx.inject(["settings"], (settingsCtx) => {
+		settingsCtx.settings.installSection(ctx, WORKBUDDY_SETTINGS_NS, Config, config, {
+			setSource(source) {
+				current = source;
+			},
+			onChange() {
+				const next = current().authFile;
+				store.setDesktopPath(next);
+			}
+		});
 	});
 	let stopped = false;
 	ctx.effect(() => () => {

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-connect",
   "displayName": "DSH WorkBuddy Connect",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.2.6",
+  "version": "0.3.1",
   "author": "corrinehu",
   "keywords": [
     "dsh-plugin",
@@ -56,8 +56,7 @@
     },
     "client": {
       "inject": [
-        "@deepseek-ai/dsh-client-runtime",
-        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-ui-renderer",
         "@deepseek-ai/dsh-client-ui-settings-plugins",
         "@deepseek-ai/dsh-client-locale"
       ],
@@ -65,39 +64,39 @@
     }
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "0.82.1",
-    "@deepseek-ai/cordis": "^4.0.1-rc.1",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/schemastery": "^3.18.1-rc.1",
+    "@earendil-works/pi-ai": "^0.84.2",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.2-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
     "react": "^18.2.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "0.82.1",
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/schemastery": "3.18.1",
+    "@earendil-works/pi-ai": "^0.84.2",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.2-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
     "react": "^18.2.0",
     "tsdown": "^0.22.2",
     "typescript": "^5.9.3",
-    "vitest": "^4.1.8"
+    "vitest": "^4.1.8",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.2-rc.1"
   }
-}
+}