dsh-workbuddy-connect 0.5.1 → 0.5.3

package/README.en.md

@@ -22,13 +22,15 @@ Both the CN **WorkBuddy** and the international **WorkBuddy AI** apps are suppor
 
 - **Status and detection**: Settings → Plugins → the matching card shows the account, token validity, remaining credit, and model offers. It also lets you refresh the model list manually and shows whether the current list came from the upstream or from the built-in fallback, and provides manual reasoning-level detection for eligible models.
 
+- **Enterprise credit**: on the CN product, enterprise accounts (non-empty `enterpriseId`) read their cycle quota from the enterprise billing endpoint, and the card shows an "enterprise quota" row with the cycle reset time.
+
 - **Rate**: every model name carries its credits multiplier (e.g. `GLM-5.2 · x0.79`, `Hy3 · x0.00`) in both the `/model` popup and the composer's model dropdown. The rate is display-only and never affects requests.
 
 - **Promo badges**: promo badges (`限时免费`, `夜间折扣`) ride the model name itself (e.g. `Hy4 preview · x0.00 · 限时免费`), visible wherever you pick a model; the status card also collects currently-discounted models. Per the WorkBuddy service data, synced each time DSH starts. The international version's promotions come from the service's `modelPromotions` (which carry an effective window). Once a promotion lapses its badge is withdrawn; because the service writes the discounted value into the model's own rate field, the original price cannot be reconstructed, so that model then reports "price unavailable — refresh to update" rather than repeating the discounted rate or claiming the model is free.
 
 ![Settings card showing the plugin](assets/2.png)
 
-The expanded card has three tabs: **Status** shows the account, token validity, total credit, catalog source, and reasoning-level detection; **Context** lists each model's context window (the international version distinguishes the default window from a larger selectable one); **Details** shows per-package credit and model offers. The CN and international versions each get their own card, showing their own account's information.
+The expanded card has three tabs: **Status** shows the account, token validity, total credit, catalog source, and reasoning-level detection; **Context** lists each model's context window (where the international version offers a larger declared window, the "Use the largest declared context window" switch lives here — it is **on by default**, so DSH sizes context compression to the largest window the upstream declares; turn it off to follow the upstream default instead, and the preference persists across restarts); **Details** shows per-package credit and model offers. The CN and international versions each get their own card, showing their own account's information.
 
 ![Settings card showing account and remaining credit](assets/3.png)
 
@@ -110,6 +112,7 @@ dsh plugin --profile web exec dsh-workbuddy-connect doctor --provider workbuddy-
 - **The international version's model catalog comes from the app's own interface**: the service splits it by User-Agent, which is a private implementation detail that a server-side change can break. When that happens the plugin degrades to this account's last successful catalog and then to its built-in roster, showing the source (live / saved / built-in), the fetch time, and the failure reason on the card — but long-term compatibility is not guaranteed. The CN version's catalog uses the same interface as the official CLI and is unaffected.
 - **International-version environments not yet covered**: on Windows / WSL / Linux no reliable source for the international app's version has been located yet, so the saved value or the built-in default is used. On macOS, real-shim checks covered complete GPT-family replies, tool calls, and continued turns.
 - **Behaviour change with no credentials**: a version whose app was never signed in — and that left no plugin-owned copy — no longer shows a model group. The CN version used to display a built-in fallback list, but every model on it failed when selected.
+- **The enterprise credit path currently covers the CN product only**: the international enterprise billing interface is unverified, so those accounts still read through the personal endpoint pending measurement. The enterprise branch could not be tested locally (the development machine holds a personal account); it was implemented from the official app's interface contract, and reports from enterprise users are welcome.
 - Relies on WorkBuddy client interfaces (not a public API); the plugin may need updates as WorkBuddy changes.
 
 ## Disclaimer

package/README.md

@@ -30,6 +30,8 @@
 
 - **信息查看与检测**：设置 → 插件 → 对应卡片可查看账号、令牌有效期、剩余积分和模型优惠；也可以手动刷新模型列表，并在卡片上看到当前列表来自上游还是内置兜底。对于可检测模型，也可以在这里手动检测推理档位。
 
+- **企业账号积分**：国内版企业账号（`enterpriseId` 非空）走企业专用计费接口读取周期额度，卡片显示「企业额度」与周期重置时间。
+
 - **费率比例**：模型选择列表里每个模型名后直接显示积分倍率（如 `GLM-5.2 · x0.79`、`Hy3 · x0.00`），`/model` 弹窗与输入框的模型下拉都能看到。倍率只是显示，不影响实际请求。
 
 
@@ -37,7 +39,7 @@
 
 ![设置卡片显示插件](assets/2.png)
 
-卡片展开后分为「状态 / 上下文 / 明细」三个标签：状态页展示账号、令牌有效期、合计积分、模型列表来源与推理档位检测；上下文页列出各模型的上下文窗口（国际版会区分默认窗口与可选的更大窗口）；明细页展示各套餐余量与模型优惠。国内版与国际版各有一张自己的卡片，各显示自己账号的信息。
+卡片展开后分为「状态 / 上下文 / 明细」三个标签：状态页展示账号、令牌有效期、合计积分、模型列表来源与推理档位检测；上下文页列出各模型的上下文窗口。国际版在上游声明了更大可选窗口时，可在这里切换「使用上游声明的最大上下文窗口」；该开关**默认开启**，DSH 会按上游声明的最大窗口安排上下文压缩；想改用上游的默认窗口就在这里关掉，偏好会持久化，重启后保持。明细页展示各套餐余量与模型优惠。国内版与国际版各有一张自己的卡片，各显示自己账号的信息。
 
 ![设置卡片显示账号与剩余积分](assets/3.png)
 
@@ -120,6 +122,7 @@ dsh plugin --profile web exec dsh-workbuddy-connect doctor --provider workbuddy-
 - **国际版的模型目录来自 App 界面接口**：服务端按 User-Agent 分流下发，属私有实现，上游改动可能使其失效。届时插件按「本账号上次成功目录 → 内置目录」降级，并在卡片上标明来源（实时 / 已保存 / 内置）、更新时间与失败原因，但不能保证长期兼容。国内版目录走官方 CLI 同款接口，不受此影响。
 - **国际版仍未覆盖的环境**：Windows / WSL / Linux 下国际版 App 的版本读取尚未找到可靠来源，会退回最近保存的版本或内置值。macOS 上已通过真实 shim 验证 GPT 系完整回复、工具调用与续轮。
 - **无凭据时的行为变化**：某版 App 从未登录、也没留下插件自留副本时，该版模型分组不再显示。此前国内版会显示一份内置兜底列表，但那些模型选了必然报错。
+- **企业账号积分目前仅覆盖国内版**：国际版企业账号的计费接口尚未验证，仍按个人版接口读取；待有实测结论后再扩展。企业账号分支在本机无法自测（开发机为个人账号），依据官方 App 的接口契约实现，欢迎企业账号用户反馈实测结果。
 - 依赖 WorkBuddy 客户端接口（非官方开放 API），WorkBuddy 更新后插件可能需要随之调整。
 
 ## 免责声明

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { E as WorkBuddyUpstreamClient, J as resolveAppVersion, b as WorkBuddyCredentialStore, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, l as readHostHeartbeat, n as CN_VARIANT, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, u as workbuddyHostHeartbeatPath } from "./variants-CE_2IvEG.js";
+import { E as WorkBuddyUpstreamClient, J as resolveAppVersion, b as WorkBuddyCredentialStore, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, l as readHostHeartbeat, n as CN_VARIANT, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, u as workbuddyHostHeartbeatPath } from "./variants-CdmzOPIT.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts
@@ -118,7 +118,13 @@ async function status(jsonOutput, variant) {
 	let credits;
 	try {
 		const credential = await store.current();
-		if (credential !== void 0) credits = { total: (await client.fetchCredits(credential)).total };
+		if (credential !== void 0) {
+			const fetched = await client.fetchCredits(credential);
+			credits = {
+				total: fetched.total,
+				...fetched.unlimited === true ? { unlimited: true } : {}
+			};
+		}
 	} catch (error) {
 		credits = {
 			total: 0,
@@ -138,6 +144,7 @@ async function status(jsonOutput, variant) {
 			...authStatus.domain === void 0 || authStatus.domain === "" ? {} : { domain: authStatus.domain },
 			source: authStatus.source,
 			credits: credits?.total,
+			...credits?.unlimited === true ? { creditsUnlimited: true } : {},
 			...credits?.error === void 0 ? {} : { creditsError: credits.error },
 			hostBundle: hostState
 		});
@@ -146,7 +153,7 @@ async function status(jsonOutput, variant) {
 	process.stdout.write([
 		`${variant.displayName} Connect: signed in${authStatus.nickname === void 0 ? "" : ` as ${authStatus.nickname}`}`,
 		...expiresAt === void 0 ? [] : [`Access token expires ${expiresAt} (refresh is automatic)`],
-		credits?.error === void 0 ? `Remaining credit: ${credits?.total ?? "unknown"}` : `Remaining credit: unavailable (${credits.error})`,
+		credits?.error !== void 0 ? `Remaining credit: unavailable (${credits.error})` : credits?.unlimited === true ? "Remaining credit: unlimited" : `Remaining credit: ${credits?.total ?? "unknown"}`,
 		`Host bundle: ${hostAlive ? `running (pid ${heartbeat.pid})` : hostState === "stale" ? "stale heartbeat (DSH process exited)" : "not started in this profile"}`,
 		"Client card: load failures are logged to the browser console only; the host provider is unaffected.",
 		""

package/lib/client.js

@@ -31,6 +31,27 @@ window.__ModuleLoader__.load({
 		const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-connect/ai/status";
 		const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-connect/ai/probe";
 		//#endregion
+		//#region src/client/status-document.ts
+		/**
+		* Whether a parsed status response really is a status document.
+		*
+		* A 200 is not a promise about the body: it may be empty, literal `null`, a
+		* non-JSON page from a proxy, or an array. Both halves of the browser plugin
+		* read the same route, so both must agree on what is valid — storing an
+		* unreadable value puts something in state that the next render dereferences.
+		*
+		* The check is deliberately limited to the discriminator (plus `error`'s
+		* `message`, which the error paragraph renders): validating optional fields
+		* here would reject documents the host legitimately omits fields from.
+		*/
+		function isWorkBuddyWebStatus(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+			const wrapped = value;
+			const status = wrapped["status"];
+			if (status === "signed-out" || status === "signed-in") return true;
+			return status === "error" && typeof wrapped["message"] === "string";
+		}
+		//#endregion
 		//#region src/client/WorkBuddyPluginCard.tsx
 		/** WorkBuddy status card contributed to Harness Plugin configuration. */
 		/** CN WorkBuddy; the plugin's long-standing card and default. */
@@ -42,15 +63,17 @@ window.__ModuleLoader__.load({
 			statusPath: WORKBUDDY_STATUS_PATH,
 			probePath: WORKBUDDY_PROBE_PATH
 		};
-		/** Both cards, in display order. */
-		const CARD_VARIANTS = [CN_CARD_VARIANT, {
+		/** International WorkBuddy AI. */
+		const AI_CARD_VARIANT = {
 			id: "workbuddy-ai",
 			titleKey: "titleAI",
 			introKey: "introAI",
 			signedOutKey: "signedOutHintAI",
 			statusPath: WORKBUDDY_AI_STATUS_PATH,
 			probePath: WORKBUDDY_AI_PROBE_PATH
-		}];
+		};
+		/** Both cards, in display order. */
+		const CARD_VARIANTS = [CN_CARD_VARIANT, AI_CARD_VARIANT];
 		const POLL_INTERVAL_MS = 6e4;
 		const cardStyle = {
 			overflow: "hidden",
@@ -178,6 +201,22 @@ window.__ModuleLoader__.load({
 			lineHeight: "18px",
 			color: "var(--dsw-alias-label-tertiary)"
 		};
+		const contextPreferenceStyle = {
+			display: "flex",
+			alignItems: "flex-start",
+			gap: 9,
+			padding: "10px 12px",
+			border: "1px solid var(--dsw-alias-border-l2)",
+			borderRadius: 8,
+			color: "var(--dsw-alias-label-primary)",
+			fontSize: 13,
+			lineHeight: "20px"
+		};
+		const contextPreferenceCopyStyle = {
+			display: "flex",
+			flexDirection: "column",
+			gap: 2
+		};
 		const modelBadgeChipStyle = {
 			padding: "1px 8px",
 			borderRadius: 999,
@@ -291,6 +330,12 @@ window.__ModuleLoader__.load({
 				background: "var(--dsw-alias-brand-primary, #1677ff)"
 			};
 		}
+		/**
+		* Status dot colour. Takes `'loading'` as well as the document's own states:
+		* before the first response the card knows nothing about the account, so it must
+		* not borrow the signed-out grey — that would read as "nothing is wrong, nobody
+		* is signed in" when the truth is "not read yet".
+		*/
 		function dotStyle(status) {
 			return {
 				width: 9,
@@ -309,29 +354,67 @@ window.__ModuleLoader__.load({
 				timeStyle: "short"
 			}).format(new Date(ms));
 		}
-		/** One billing package as a labeled progress bar. */
-		function CreditBar({ label, remain, size, t }) {
-			const detail = size > 0 ? t("exactRemaining", {
+		function formatCycleReset(time) {
+			const parsed = Date.parse(time);
+			if (!Number.isNaN(parsed)) return formatTime(parsed);
+			return time;
+		}
+		/**
+		* One billing package as a labeled progress bar.
+		*
+		* A package whose allowance the upstream never reported (`size` not positive)
+		* has no percentage to state. It must not fall back to 100%: the plugin would be
+		* claiming a full quota it knows nothing about, which is the opposite of the
+		* honest "remaining N" line printed below it. Unknown size therefore renders the
+		* percent slot as unknown copy and an unfilled, indeterminate track.
+		*/
+		function CreditBar({ label, remain, size, unlimited, t }) {
+			if (unlimited === true) {
+				const quotaText = t("unlimitedQuota");
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					style: quotaGroupStyle,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: quotaLabelStyle,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: quotaText })]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							style: progressTrackStyle,
+							role: "progressbar",
+							"aria-label": label,
+							"aria-valuetext": quotaText
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: bodyStyle,
+							children: quotaText
+						})
+					]
+				});
+			}
+			const sizeKnown = size > 0;
+			const detail = sizeKnown ? t("exactRemaining", {
 				remain: formatNumber(remain),
 				size: formatNumber(size)
 			}) : t("creditPackageUnknownSize", { remain: formatNumber(remain) });
-			const percent = size > 0 ? remain / size * 100 : 100;
-			const display = new Intl.NumberFormat(void 0, { maximumFractionDigits: 1 }).format(percent);
+			const percent = sizeKnown ? remain / size * 100 : void 0;
+			const display = percent === void 0 ? t("percentUnknown") : t("percentRemaining", { percent: new Intl.NumberFormat(void 0, { maximumFractionDigits: 1 }).format(percent) });
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				style: quotaGroupStyle,
 				children: [
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						style: quotaLabelStyle,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("percentRemaining", { percent: display }) })]
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: display })]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 						style: progressTrackStyle,
 						role: "progressbar",
 						"aria-label": label,
-						"aria-valuemin": 0,
-						"aria-valuemax": 100,
-						"aria-valuenow": percent,
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { style: progressFillStyle(percent) })
+						...percent === void 0 ? { "aria-valuetext": detail } : {
+							"aria-valuemin": 0,
+							"aria-valuemax": 100,
+							"aria-valuenow": percent
+						},
+						children: percent === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { style: progressFillStyle(percent) })
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						style: bodyStyle,
@@ -387,31 +470,56 @@ window.__ModuleLoader__.load({
 		* the default is the budget actually requested, while the larger value is a
 		* ceiling the upstream would accept.
 		*/
-		function ContextTable({ models, t }) {
+		function ContextTable({ models, t, useMaximumContextWindow, disabled, onUseMaximumContextWindow }) {
 			const known = (models ?? []).filter((model) => model.contextWindow !== void 0).sort((a, b) => b.contextWindow - a.contextWindow);
-			if (known.length === 0) return null;
+			const canSelectMaximum = known.some((model) => model.maxContextWindow !== void 0 && model.maxContextWindow > (model.defaultContextWindow ?? model.contextWindow ?? 0));
+			const showPreference = onUseMaximumContextWindow !== void 0 && (canSelectMaximum || useMaximumContextWindow === true);
+			if (known.length === 0 && !showPreference) return null;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				style: quotaListStyle,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
-					style: quotaTitleStyle,
-					children: t("contextHeading")
-				}), known.map((model) => {
-					const capacity = model.contextWindow;
-					const alternative = model.maxContextWindow !== void 0 && model.maxContextWindow > capacity ? model.maxContextWindow : void 0;
-					return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						style: quotaLabelStyle,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-							style: modelOfferStyle,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								style: { textAlign: "right" },
-								children: formatTokens(capacity)
-							}), alternative === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+						style: quotaTitleStyle,
+						children: t("contextHeading")
+					}),
+					showPreference && onUseMaximumContextWindow !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+						style: contextPreferenceStyle,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+							type: "checkbox",
+							checked: useMaximumContextWindow === true,
+							disabled,
+							onChange: (event) => {
+								onUseMaximumContextWindow(event.currentTarget.checked);
+							}
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							style: contextPreferenceCopyStyle,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("useMaximumContextWindow") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								style: modelRateStyle,
-								children: t("contextUpTo", { size: formatTokens(alternative) })
+								children: t("useMaximumContextWindowHint")
 							})]
 						})]
-					}, model.id);
-				})]
+					}) : null,
+					known.map((model) => {
+						const capacity = model.contextWindow;
+						const alternative = model.maxContextWindow !== void 0 && model.maxContextWindow > capacity ? model.maxContextWindow : void 0;
+						return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: quotaLabelStyle,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+								style: modelOfferStyle,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: { textAlign: "right" },
+									children: formatTokens(capacity)
+								}), alternative !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: modelRateStyle,
+									children: t("contextUpTo", { size: formatTokens(alternative) })
+								}) : model.defaultContextWindow !== void 0 && model.defaultContextWindow < capacity ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: modelRateStyle,
+									children: t("contextDefault", { size: formatTokens(model.defaultContextWindow) })
+								}) : null]
+							})]
+						}, model.id);
+					})
+				]
 			});
 		}
 		/**
@@ -555,17 +663,72 @@ window.__ModuleLoader__.load({
 		function WorkBuddyPluginCard({ t, variant = CN_CARD_VARIANT }) {
 			if (t === void 0) throw new Error("WorkBuddy plugin card requires its translation function");
 			const [open, setOpen] = (0, react.useState)(false);
-			const [status, setStatus] = (0, react.useState)({ status: "signed-out" });
+			/**
+			* The document to render. `undefined` means *not read yet*, which is a
+			* distinct state from "signed out": seeding this with a signed-out document
+			* told an already-signed-in user they were signed out for the whole first
+			* round trip (and forever, if the read never settled).
+			*/
+			const [status, setStatus] = (0, react.useState)();
+			/**
+			* Whether the last **successful** read found a usable credential.
+			*
+			* Kept apart from `status` because the poll's liveness must depend on what the
+			* account actually is, not on what the card last displayed: a failed read
+			* leaves this untouched, so a transient failure cannot disarm the interval,
+			* while a genuine signed-out answer still stops it.
+			*
+			* `undefined` therefore means "no successful read yet", which is also the
+			* condition that decides whether a failed read has anything to preserve.
+			*/
+			const [signedIn, setSignedIn] = (0, react.useState)();
+			/**
+			* Why the most recent read failed, when it did. Rendered as a notice beside
+			* whatever document is still on screen, rather than replacing it.
+			*/
+			const [readFailure, setReadFailure] = (0, react.useState)();
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [tab, setTab] = (0, react.useState)("status");
 			const mounted = (0, react.useRef)(true);
+			/**
+			* Identity of the newest read that may write. Assigned when a read *starts*,
+			* so a response is superseded by anything begun after it — "the response whose
+			* request started last wins". Without this, a slow poll begun before a manual
+			* action could settle after the action's own refresh and restore the older
+			* document.
+			*/
+			const readSeq = (0, react.useRef)(0);
+			/** Manual requests in flight, so unmount can abort them like the poll's. */
+			const manualControllers = (0, react.useRef)(/* @__PURE__ */ new Set());
 			(0, react.useEffect)(() => {
 				mounted.current = true;
 				return () => {
 					mounted.current = false;
+					for (const controller of manualControllers.current) controller.abort();
+					manualControllers.current.clear();
 				};
 			}, []);
+			/** Register a manual request's controller so unmount aborts it. */
+			const trackController = (0, react.useCallback)(() => {
+				const controller = new AbortController();
+				manualControllers.current.add(controller);
+				return controller;
+			}, []);
+			/**
+			* Read the status document and apply it under the two policies the card's
+			* correctness rests on:
+			*
+			* - a non-document body (empty, `null`, a non-JSON page) is a failed read, not
+			*   something to store and then dereference in the render;
+			* - a failed read never discards a document already on screen. It is recorded
+			*   and shown as a notice beside that document; only when nothing has been
+			*   read yet does the failure itself become the rendered state.
+			*
+			* Returns whether this read produced the current document.
+			*/
 			const refresh = (0, react.useCallback)(async (signal) => {
+				const seq = ++readSeq.current;
+				const current = () => mounted.current && signal?.aborted !== true && seq === readSeq.current;
 				try {
 					const response = await fetch(variant.statusPath, {
 						headers: { accept: "application/json" },
@@ -574,12 +737,23 @@ window.__ModuleLoader__.load({
 					});
 					const value = await response.json().catch(() => void 0);
 					if (!response.ok) throw new Error(`HTTP ${response.status}`);
-					if (mounted.current && signal?.aborted !== true) setStatus(value);
+					if (!isWorkBuddyWebStatus(value)) throw new Error(t("statusResponseInvalid"));
+					if (!current()) return false;
+					setStatus(value);
+					if (value.status === "signed-in") setSignedIn(true);
+					else if (value.status === "signed-out") setSignedIn(false);
+					setReadFailure(void 0);
+					return true;
 				} catch (error) {
-					if (mounted.current && signal?.aborted !== true) setStatus({
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					});
+					const message = error instanceof Error ? error.message : t("requestFailed");
+					if (current()) {
+						setReadFailure(message);
+						setStatus((previous) => previous === void 0 ? {
+							status: "error",
+							message
+						} : previous);
+					}
+					return false;
 				}
 			}, [t, variant.statusPath]);
 			(0, react.useEffect)(() => {
@@ -591,7 +765,7 @@ window.__ModuleLoader__.load({
 				};
 			}, [open, refresh]);
 			(0, react.useEffect)(() => {
-				if (!open || status.status !== "signed-in") return;
+				if (!open || signedIn === false) return;
 				const controller = new AbortController();
 				const timer = window.setInterval(() => {
 					refresh(controller.signal);
@@ -603,13 +777,15 @@ window.__ModuleLoader__.load({
 			}, [
 				open,
 				refresh,
-				status.status
+				signedIn
 			]);
 			const manualRefresh = async () => {
 				setBusy(true);
+				const controller = trackController();
 				try {
-					await refresh();
+					await refresh(controller.signal);
 				} finally {
+					manualControllers.current.delete(controller);
 					if (mounted.current) setBusy(false);
 				}
 			};
@@ -622,9 +798,10 @@ window.__ModuleLoader__.load({
 			* than thrown away, so the reason survives the round trip.
 			*/
 			const refreshModels = (0, react.useCallback)(async () => {
-				const key = status.status === "signed-in" ? status.probeKey : void 0;
+				const key = status?.status === "signed-in" ? status.probeKey : void 0;
 				if (key === void 0) return;
 				setBusy(true);
+				const controller = trackController();
 				try {
 					const response = await fetch(variant.probePath, {
 						method: "POST",
@@ -633,23 +810,27 @@ window.__ModuleLoader__.load({
 							"X-WorkBuddy-Probe-Key": key
 						},
 						credentials: "same-origin",
+						signal: controller.signal,
 						body: JSON.stringify({ action: "refresh" })
 					});
 					if (!response.ok) throw new Error(`HTTP ${response.status}`);
 				} catch (error) {
-					if (mounted.current) setStatus((previous) => ({
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					}));
+					if (mounted.current && controller.signal.aborted !== true) setReadFailure(error instanceof Error ? error.message : t("requestFailed"));
+					manualControllers.current.delete(controller);
 					return;
 				} finally {
 					if (mounted.current) setBusy(false);
 				}
-				await refresh();
+				try {
+					await refresh(controller.signal);
+				} finally {
+					manualControllers.current.delete(controller);
+				}
 			}, [
 				refresh,
 				status,
 				t,
+				trackController,
 				variant.probePath
 			]);
 			/**
@@ -660,9 +841,10 @@ window.__ModuleLoader__.load({
 			* catalog from here.
 			*/
 			const control = (0, react.useCallback)(async (action) => {
-				const key = status.status === "signed-in" ? status.probeKey : void 0;
+				const key = status?.status === "signed-in" ? status.probeKey : void 0;
 				if (key === void 0) return;
 				setBusy(true);
+				const controller = trackController();
 				try {
 					const response = await fetch(variant.probePath, {
 						method: "POST",
@@ -671,6 +853,7 @@ window.__ModuleLoader__.load({
 							"X-WorkBuddy-Probe-Key": key
 						},
 						credentials: "same-origin",
+						signal: controller.signal,
 						body: JSON.stringify(action)
 					});
 					const value = await response.json().catch(() => void 0);
@@ -678,19 +861,22 @@ window.__ModuleLoader__.load({
 						const message = typeof value === "object" && value !== null && "error" in value ? String(value["error"]) : `HTTP ${response.status}`;
 						throw new Error(message);
 					}
-					await refresh();
+					if (action.action === "set-maximum-context-window" && (typeof value !== "object" || value === null || value["state"] !== "updated")) {
+						const reason = typeof value === "object" && value !== null && "reason" in value ? String(value["reason"]) : t("requestFailed");
+						throw new Error(reason);
+					}
+					await refresh(controller.signal);
 				} catch (error) {
-					if (mounted.current) setStatus((previous) => ({
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					}));
+					if (mounted.current && controller.signal.aborted !== true) setReadFailure(error instanceof Error ? error.message : t("requestFailed"));
 				} finally {
+					manualControllers.current.delete(controller);
 					if (mounted.current) setBusy(false);
 				}
 			}, [
 				refresh,
 				status,
 				t,
+				trackController,
 				variant.probePath
 			]);
 			/**
@@ -704,7 +890,7 @@ window.__ModuleLoader__.load({
 				});
 			}, [control]);
 			const title = t(variant.titleKey);
-			const label = status.status === "signed-in" ? status.nickname === void 0 ? t("signedInAs", { nickname: "" }).trimEnd().replace(/[:：]$/, "") : t("signedInAs", { nickname: status.nickname }) : status.status === "error" ? t("requestFailed") : t("signedOut");
+			const label = status === void 0 ? t("loading") : status.status === "signed-in" ? status.nickname === void 0 ? t("signedInAs", { nickname: "" }).trimEnd().replace(/[:：]$/, "") : t("signedInAs", { nickname: status.nickname }) : status.status === "error" ? t("requestFailed") : t("signedOut");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				style: cardStyle,
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
@@ -744,9 +930,10 @@ window.__ModuleLoader__.load({
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: statusStyle,
 								role: "status",
+								"aria-busy": status === void 0,
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 									"aria-hidden": "true",
-									style: dotStyle(status.status)
+									style: dotStyle(status === void 0 ? "loading" : status.status)
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label })]
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
@@ -758,7 +945,11 @@ window.__ModuleLoader__.load({
 								children: busy ? t("refreshing") : t("refresh")
 							})]
 						}),
-						status.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+						readFailure === void 0 || signedIn === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: errorStyle,
+							children: t("statusRefreshFailed", { message: readFailure })
+						}),
+						status?.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 							status.expiresAt === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								style: bodyStyle,
 								children: t("accessTokenExpires", { time: formatTime(status.expiresAt) })
@@ -806,18 +997,21 @@ window.__ModuleLoader__.load({
 							tab === "status" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: tabPanelStyle,
 								children: [
-									status.credits === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									status.credits === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 										style: quotaListStyle,
-										children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 											style: rowStyle,
 											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
 												style: quotaTitleStyle,
 												children: t("creditsHeading")
 											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 												style: bodyStyle,
-												children: t("creditsTotal", { total: formatNumber(status.credits.total) })
+												children: status.credits.unlimited === true ? t("creditsTotalUnlimited") : t("creditsTotal", { total: formatNumber(status.credits.total) })
 											})]
-										})
+										}), status.credits.cycleResetTime === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											style: descriptionStyle,
+											children: t("cycleResetAt", { time: formatCycleReset(status.credits.cycleResetTime) })
+										})]
 									}),
 									status.creditsError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 										style: errorStyle,
@@ -837,7 +1031,15 @@ window.__ModuleLoader__.load({
 								style: tabPanelStyle,
 								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ContextTable, {
 									models: status.models,
-									t
+									t,
+									disabled: busy,
+									...status.useMaximumContextWindow === void 0 ? {} : { useMaximumContextWindow: status.useMaximumContextWindow },
+									...variant.id === AI_CARD_VARIANT.id ? { onUseMaximumContextWindow: (enabled) => {
+										control({
+											action: "set-maximum-context-window",
+											enabled
+										});
+									} } : {}
 								})
 							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: tabPanelStyle,
@@ -846,10 +1048,11 @@ window.__ModuleLoader__.load({
 									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
 										style: quotaTitleStyle,
 										children: t("creditsDetailHeading")
-									}), status.credits.accounts.filter((account) => account.remain > 0).map((account, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CreditBar, {
-										label: account.packageName,
+									}), status.credits.accounts.filter((account) => account.packageName === "enterprise" || account.remain > 0 || account.unlimited === true).map((account, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CreditBar, {
+										label: account.packageName === "enterprise" ? t("packageEnterprise") : account.packageName,
 										remain: account.remain,
 										size: account.size,
+										unlimited: account.unlimited,
 										t
 									}, `${account.packageName}-${String(index)}`))]
 								}), status.models === void 0 || status.models.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -864,11 +1067,11 @@ window.__ModuleLoader__.load({
 								})]
 							})
 						] }) : null,
-						status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						status?.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: status.reason === void 0 ? bodyStyle : errorStyle,
 							children: status.reason ?? t(variant.signedOutKey)
 						}) : null,
-						status.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						status?.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: errorStyle,
 							children: status.message
 						}) : null
@@ -1064,15 +1267,24 @@ window.__ModuleLoader__.load({
 		/**
 		* The one-line tooltip: current state first, then what a click does — the same
 		* two-part shape Fast Mode uses.
+		*
+		* A recorded result outranks a remembered failure. `failed` only means "the last
+		* run from this control did not complete"; the host can record a result for the
+		* same model at any time (a detection started from the settings card, another
+		* conversation, or a finished sweep), and the levels the user paid for are the
+		* more useful answer than the stale failure. Failure copy is what remains when
+		* there is no result to report.
 		*/
 		function tooltipText(t, model, state) {
 			if (state.busy) return t("probeRunning", { model });
-			if (state.failed) return t("probeTooltipRetry");
 			const result = state.result;
-			if (result === void 0) return t("probeTooltipIdle", { model });
-			if (result.validation === "validating" && result.efforts.length > 0) return t("probeTooltipVerified", { levels: result.efforts.join(" / ") });
-			if (result.validation === "non-validating") return t("probeTooltipNotValidating");
-			return t("probeTooltipRetry");
+			if (result !== void 0) {
+				if (result.validation === "validating" && result.efforts.length > 0) return t("probeTooltipVerified", { levels: result.efforts.join(" / ") });
+				if (result.validation === "non-validating") return t("probeTooltipNotValidating");
+				return t("probeTooltipRetry");
+			}
+			if (state.failed) return t("probeTooltipRetry");
+			return t("probeTooltipIdle", { model });
 		}
 		/** Model-independent shell: resolves the selection, then delegates per model. */
 		function WorkBuddyProbeControl({ directory, t }) {
@@ -1097,17 +1309,20 @@ window.__ModuleLoader__.load({
 			const [note, setNote] = (0, react.useState)();
 			const inFlight = (0, react.useRef)(false);
 			const mounted = (0, react.useRef)(false);
+			const readSeq = (0, react.useRef)(0);
 			const tooltipId = (0, react.useId)();
 			const refresh = (0, react.useCallback)(async (signal) => {
+				const seq = ++readSeq.current;
 				const response = await fetch(card.statusPath, {
 					credentials: "same-origin",
 					headers: { accept: "application/json" },
 					...signal === void 0 ? {} : { signal }
 				});
 				if (!response.ok) throw new Error(`HTTP ${response.status}`);
-				const value = await response.json();
-				if (mounted.current && !signal?.aborted) setStatus(value);
-			}, [card.statusPath]);
+				const value = await response.json().catch(() => void 0);
+				if (!isWorkBuddyWebStatus(value)) throw new Error(t("statusResponseInvalid"));
+				if (mounted.current && !signal?.aborted && seq === readSeq.current) setStatus(value);
+			}, [card.statusPath, t]);
 			(0, react.useEffect)(() => {
 				mounted.current = true;
 				const controller = new AbortController();
@@ -1128,6 +1343,9 @@ window.__ModuleLoader__.load({
 			const key = status?.status === "signed-in" ? status.probeKey : void 0;
 			const result = status === void 0 ? void 0 : resultFor(status, model);
 			const visible = probe?.candidates.includes(model) === true || result !== void 0;
+			(0, react.useEffect)(() => {
+				if (result !== void 0) setFailed(false);
+			}, [result]);
 			(0, react.useEffect)(() => {
 				setConfirming(false);
 				setNote(void 0);
@@ -1313,7 +1531,12 @@ window.__ModuleLoader__.load({
 			tabDetails: "Credit details",
 			creditsDetailHeading: "By package",
 			creditsTotal: "Total: {total}",
+			creditsTotalUnlimited: "Total: Unlimited",
+			unlimitedQuota: "Unlimited",
+			packageEnterprise: "Enterprise quota",
+			cycleResetAt: "Resets {time}",
 			percentRemaining: "{percent}% remaining",
+			percentUnknown: "Remaining share unknown",
 			exactRemaining: "{remain} / {size} remaining",
 			creditPackageUnknownSize: "{remain} remaining",
 			creditsError: "Credit unavailable: {message}",
@@ -1327,10 +1550,15 @@ window.__ModuleLoader__.load({
 			catalogError: "Last update failed: {message}",
 			catalogAppVersion: "App version {version}",
 			requestFailed: "Request failed",
+			statusRefreshFailed: "Refresh failed: {message} — showing the last known state",
+			statusResponseInvalid: "WorkBuddy returned an unreadable status reply",
 			accountHeading: "Account",
 			modelsHeading: "Model offers",
 			contextHeading: "Context window",
 			contextUpTo: "up to {size}",
+			contextDefault: "default {size}",
+			useMaximumContextWindow: "Use the largest declared context window",
+			useMaximumContextWindowHint: "Applies to WorkBuddy AI models that offer a larger window.",
 			freeModel: "Free",
 			badgeLimitedFree: "Limited-time free",
 			badgeNightDiscount: "Night discount",
@@ -1386,7 +1614,12 @@ window.__ModuleLoader__.load({
 			tabDetails: "积分详情",
 			creditsDetailHeading: "按套餐",
 			creditsTotal: "合计：{total}",
+			creditsTotalUnlimited: "合计：不限额",
+			unlimitedQuota: "不限额",
+			packageEnterprise: "企业额度",
+			cycleResetAt: "重置时间：{time}",
 			percentRemaining: "剩余 {percent}%",
+			percentUnknown: "剩余占比未知",
 			exactRemaining: "剩余 {remain} / {size}",
 			creditPackageUnknownSize: "剩余 {remain}",
 			creditsError: "积分查询失败：{message}",
@@ -1400,10 +1633,15 @@ window.__ModuleLoader__.load({
 			catalogError: "上次更新失败：{message}",
 			catalogAppVersion: "App 版本 {version}",
 			requestFailed: "请求失败",
+			statusRefreshFailed: "刷新失败：{message} — 当前显示的是上次成功获取的状态",
+			statusResponseInvalid: "WorkBuddy 返回的状态数据无法识别",
 			accountHeading: "账号",
 			modelsHeading: "模型优惠",
 			contextHeading: "上下文窗口",
 			contextUpTo: "最高 {size}",
+			contextDefault: "默认 {size}",
+			useMaximumContextWindow: "使用上游声明的最大上下文窗口",
+			useMaximumContextWindowHint: "仅作用于 WorkBuddy AI 中声明了更大窗口的模型。",
 			freeModel: "免费",
 			badgeLimitedFree: "限时免费",
 			badgeNightDiscount: "夜间折扣",

package/lib/index.d.ts

@@ -225,6 +225,8 @@ interface WorkBuddyUpstreamModel {
   id: string;
   name: string;
   contextWindow: number;
+  /** The upstream's preferred window before an optional maximum is selected. */
+  defaultContextWindow?: number;
   maxInputTokens?: number;
   supportedContextWindows?: readonly number[];
   promotions?: readonly WorkBuddyPromotion[];
@@ -295,11 +297,24 @@ interface WorkBuddyCreditAccount {
   packageName: string;
   remain: number;
   size: number;
+  unlimited?: true;
 }
 /** Aggregated credit answer for one credential. */
 interface WorkBuddyCredits {
   total: number;
   accounts: readonly WorkBuddyCreditAccount[];
+  /**
+   * The account's cycle quota is uncapped (`limitNum === -1` on the CN
+   * enterprise endpoint).
+   *
+   * A separate flag rather than a `-1`/`0` sentinel in {@link total}: the two
+   * mean opposite things to a reader ("no limit" vs "nothing left"), and the
+   * existing negative-clamp in the personal branch would turn a sentinel into
+   * a plausible-looking zero. Every renderer must therefore test this flag
+   * first and not fall back to `total` when it is set.
+   */
+  unlimited?: true;
+  cycleResetTime?: string;
 }
 /** Token refresh answer; fields the upstream omits stay absent. */
 interface WorkBuddyRefreshOutcome {
@@ -409,8 +424,41 @@ declare class WorkBuddyUpstreamClient {
    * such rather than as a generic catalog failure.
    */
   fetchModels(credential: WorkBuddyCredential, signal?: AbortSignal): Promise<readonly WorkBuddyUpstreamModel[]>;
-  /** POST the billing endpoint for the aggregated remaining credit. */
+  /**
+   * POST the billing endpoint for the aggregated remaining credit.
+   *
+   * Two upstream shapes, chosen by account type:
+   *
+   * - **CN enterprise** (`regionOf === 'cn'` and `enterpriseId` non-empty) asks
+   *   `/v2/billing/meter/get-enterprise-user-usage`, which answers with a single
+   *   cycle quota. The personal endpoint serves these accounts an empty
+   *   `Accounts` list, which the card then renders as "0 credit" — a wrong
+   *   number rather than a visible failure (issue #31).
+   * - **Everyone else** keeps the personal endpoint unchanged.
+   *
+   * The region gate is load-bearing: the enterprise endpoint is unverified for
+   * the global region, so an international credential that happens to carry an
+   * `enterpriseId` must stay on the measured personal path instead of being
+   * moved onto an unmeasured one.
+   */
   fetchCredits(credential: WorkBuddyCredential): Promise<WorkBuddyCredits>;
+  /**
+   * CN enterprise credit read: a single cycle quota instead of a package list.
+   *
+   * Verified against the WorkBuddy desktop app (`app.asar`,
+   * `BackendProvider.getEnterpriseUsage` and `CloudAccountRepo.billing`): the
+   * body is an empty object and the account identity travels only in the
+   * headers. The two official call sites disagree on the field spelling
+   * (`limitNum`/`credit` vs `limit_num`/`used_num`), so both are accepted.
+   *
+   * A body carrying no recognisable quota field is a hard error rather than a
+   * zero. Rendering `0` for "we did not understand the answer" is exactly how
+   * issue #31 stayed invisible while users saw a plausible wrong number.
+   *
+   * The error names fields and types only: it reaches the browser, and the
+   * response body may describe the account's usage.
+   */
+  private fetchEnterpriseCredits;
   /**
    * One probe request: a real streaming chat call carrying the effort under
    * test.
@@ -704,6 +752,7 @@ declare const FALLBACK_WORKBUDDY_AI_MODELS: readonly WorkBuddyModelInfo[];
 declare class WorkBuddyCatalog {
   private models;
   private visible;
+  private useMaximumContextWindow;
   constructor(initial?: readonly WorkBuddyModelInfo[]);
   /** Current entries; empty while the variant has no usable credential. */
   current(): readonly WorkBuddyModelInfo[];
@@ -716,6 +765,8 @@ declare class WorkBuddyCatalog {
    * caller can skip an invalidation that would re-render an identical list.
    */
   setVisible(visible: boolean): boolean;
+  /** Select the largest declared international window where the upstream offers one. */
+  setUseMaximumContextWindow(useMaximum: boolean): boolean;
   /** Models to fall back to when the upstream fetch fails; ignores visibility. */
   fallback(): readonly WorkBuddyModelInfo[];
 }
@@ -1126,6 +1177,8 @@ interface Config {
    * until the user explicitly agrees.
    */
   probeConsent?: boolean;
+  /** Use the largest context window the international catalog explicitly offers. */
+  useMaximumContextWindow?: boolean;
 }
 declare const Config: z<Config>;
 /**

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as parseModelCatalog, B as fallbackChatIdentity, C as desktopAuthCandidatesFor, D as classifyUpstreamError, E as WorkBuddyUpstreamClient, F as probeModel, G as appUserAgent, H as resolveChatIdentity, I as randomSentinel, J as resolveAppVersion, K as installedAppVersion, L as CN_APP_VERSION_FILENAME, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as FALLBACK_CN_APP_VERSION, S as defaultDesktopAuthPath, T as workbuddyOwnAuthPath, U as validCliVersion, V as readCliVersion, W as WORKBUDDY_APP_VERSION_FILENAME, Y as validAppVersion, _ as WorkBuddyCatalog, a as WORKBUDDY_HOST_HEARTBEAT_FILENAME, b as WorkBuddyCredentialStore, c as processStartTimeMs, d as writeHostHeartbeat, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, j as prepareChatBody, k as normalizeCredits, l as readHostHeartbeat, n as CN_VARIANT, o as clearHostHeartbeat, q as readBundleVersion, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, t as AI_VARIANT, u as workbuddyHostHeartbeatPath, v as WORKBUDDY_AUTH_FILENAME, w as parseWorkBuddyAuth, x as defaultDesktopAuthCandidates, y as WORKBUDDY_AUTH_FILE_ENV, z as chatUserAgent } from "./variants-CE_2IvEG.js";
+import { A as parseModelCatalog, B as fallbackChatIdentity, C as desktopAuthCandidatesFor, D as classifyUpstreamError, E as WorkBuddyUpstreamClient, F as probeModel, G as appUserAgent, H as resolveChatIdentity, I as randomSentinel, J as resolveAppVersion, K as installedAppVersion, L as CN_APP_VERSION_FILENAME, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as FALLBACK_CN_APP_VERSION, S as defaultDesktopAuthPath, T as workbuddyOwnAuthPath, U as validCliVersion, V as readCliVersion, W as WORKBUDDY_APP_VERSION_FILENAME, Y as validAppVersion, _ as WorkBuddyCatalog, a as WORKBUDDY_HOST_HEARTBEAT_FILENAME, b as WorkBuddyCredentialStore, c as processStartTimeMs, d as writeHostHeartbeat, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, j as prepareChatBody, k as normalizeCredits, l as readHostHeartbeat, n as CN_VARIANT, o as clearHostHeartbeat, q as readBundleVersion, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, t as AI_VARIANT, u as workbuddyHostHeartbeatPath, v as WORKBUDDY_AUTH_FILENAME, w as parseWorkBuddyAuth, x as defaultDesktopAuthCandidates, y as WORKBUDDY_AUTH_FILE_ENV, z as chatUserAgent } from "./variants-CdmzOPIT.js";
 import z from "@deepseek-ai/schemastery";
 import { dirname, join, resolve } from "node:path";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
@@ -1001,6 +1001,7 @@ async function workBuddyWebStatus(deps) {
 		const rate = normalizeCredits(model.billing?.credits);
 		const supported = model.supportedContextWindows ?? [];
 		const maxContextWindow = supported.length > 0 ? Math.max(...supported) : void 0;
+		const defaultContextWindow = model.defaultContextWindow ?? model.contextWindow;
 		return {
 			id: model.id,
 			name: model.name,
@@ -1009,7 +1010,8 @@ async function workBuddyWebStatus(deps) {
 			...rate === void 0 ? {} : { credits: rate },
 			...model.billing?.rateUnknown === true ? { rateUnknown: true } : {},
 			...typeof model.contextWindow === "number" && model.contextWindow > 0 ? { contextWindow: model.contextWindow } : {},
-			...maxContextWindow === void 0 || maxContextWindow === model.contextWindow ? {} : { maxContextWindow },
+			...typeof defaultContextWindow === "number" && defaultContextWindow > 0 && defaultContextWindow < model.contextWindow ? { defaultContextWindow } : {},
+			...maxContextWindow === void 0 || maxContextWindow <= defaultContextWindow ? {} : { maxContextWindow },
 			...typeof model.maxInputTokens === "number" && model.maxInputTokens > 0 ? { maxInputTokens: model.maxInputTokens } : {}
 		};
 	});
@@ -1025,7 +1027,8 @@ async function workBuddyWebStatus(deps) {
 	const probed = deps.probe === void 0 ? statusWithModels : {
 		...statusWithModels,
 		probe: deps.probe(),
-		...deps.probeKey === void 0 ? {} : { probeKey: deps.probeKey }
+		...deps.probeKey === void 0 ? {} : { probeKey: deps.probeKey },
+		...deps.useMaximumContextWindow === void 0 ? {} : { useMaximumContextWindow: deps.useMaximumContextWindow() }
 	};
 	try {
 		const credential = await deps.store.current();
@@ -1145,6 +1148,10 @@ function parseAction(text) {
 	const action = wrapped["action"];
 	if (action === "clear") return { action: "clear" };
 	if (action === "refresh") return { action: "refresh" };
+	if (action === "set-maximum-context-window") return typeof wrapped["enabled"] === "boolean" ? {
+		action: "set-maximum-context-window",
+		enabled: wrapped["enabled"]
+	} : void 0;
 	if (action === "probe") {
 		const model = wrapped["model"];
 		if (typeof model !== "string" || model.trim() === "") return void 0;
@@ -1196,6 +1203,14 @@ function workBuddyProbeHandler(deps, key) {
 				json(res, 200, await deps.refresh());
 				return;
 			}
+			if (action.action === "set-maximum-context-window") {
+				if (deps.setMaximumContextWindow === void 0) {
+					json(res, 404, { error: "context-window-setting-not-supported" });
+					return;
+				}
+				json(res, 200, await deps.setMaximumContextWindow(action.enabled === true));
+				return;
+			}
 			json(res, 200, await deps.probe(action.model));
 		} catch (error) {
 			json(res, 500, { error: error instanceof Error ? error.message : String(error) });
@@ -1292,10 +1307,12 @@ const AUTH_FILE_FIELD = z.string().description("WorkBuddy desktop auth file (def
 const AUTH_FILE_AI_FIELD = z.string().description("WorkBuddy AI desktop auth file (defaults to the app's own location)");
 /** Probe authorization (shared by the plugin schema and the CN section). */
 const PROBE_CONSENT_FIELD = z.boolean().default(false).description("Authorize reasoning-effort probes (each probe sends real requests that may consume credit)");
+const MAXIMUM_CONTEXT_WINDOW_FIELD = z.boolean().default(true).description("Use the largest context window declared by WorkBuddy AI when alternatives are available (on by default)");
 const Config = z.object({
 	authFile: AUTH_FILE_FIELD,
 	authFileAI: AUTH_FILE_AI_FIELD,
-	probeConsent: PROBE_CONSENT_FIELD
+	probeConsent: PROBE_CONSENT_FIELD,
+	useMaximumContextWindow: MAXIMUM_CONTEXT_WINDOW_FIELD
 });
 /**
 * The CN card's settings section: only the fields that card edits.
@@ -1310,8 +1327,11 @@ const CN_SECTION = z.object({
 	authFile: AUTH_FILE_FIELD,
 	probeConsent: PROBE_CONSENT_FIELD
 });
-/** The international card's settings section: only its own auth-file path. */
-const AI_SECTION = z.object({ authFileAI: AUTH_FILE_AI_FIELD });
+/** The international card's settings section and its context-window preference. */
+const AI_SECTION = z.object({
+	authFileAI: AUTH_FILE_AI_FIELD,
+	useMaximumContextWindow: MAXIMUM_CONTEXT_WINDOW_FIELD
+});
 /** Stable identity key used by credentials, probe records, and catalog entries. */
 function credentialIdentity(credential) {
 	return `${credential.uid}:${credential.enterpriseId ?? ""}`;
@@ -1345,6 +1365,7 @@ function createVariantRuntime(config, variant, current, identityOf) {
 	});
 	const fallback = fallbackFor(variant);
 	const catalog = new WorkBuddyCatalog(fallback);
+	if (variant.id !== CN_VARIANT.id) catalog.setUseMaximumContextWindow(config.useMaximumContextWindow === true);
 	catalog.setVisible(false);
 	const probeStore = new WorkBuddyProbeStore({
 		pluginVersion: WORKBUDDY_CONNECT_VERSION,
@@ -1520,6 +1541,7 @@ function apply(ctx, config) {
 	const lastIdentities = /* @__PURE__ */ new Map();
 	const runtimes = WORKBUDDY_VARIANTS.map((variant) => createVariantRuntime(config, variant, () => current(), (id) => lastIdentities.get(id)));
 	const probeKey = createProbeKey();
+	let setMaximumContextWindow;
 	/**
 	* Point a variant at an account identity, invalidating whatever the previous
 	* one left behind.
@@ -1586,7 +1608,8 @@ function apply(ctx, config) {
 				models: () => runtime.catalog.current(),
 				catalog: () => catalogSection(runtime),
 				probe: () => probeSection(runtime, current().probeConsent === true),
-				probeKey
+				probeKey,
+				...runtime.variant.id === CN_VARIANT.id ? {} : { useMaximumContextWindow: () => current().useMaximumContextWindow === true }
 			});
 			registerWorkBuddyProbeRoute(webCtx, {
 				path: runtime.variant.probePath,
@@ -1627,7 +1650,14 @@ function apply(ctx, config) {
 						state: "failed",
 						reason: runtime.catalogError
 					};
-				}
+				},
+				...runtime.variant.id === CN_VARIANT.id ? {} : { setMaximumContextWindow: async (enabled) => {
+					if (setMaximumContextWindow === void 0) return {
+						state: "failed",
+						reason: "settings are unavailable"
+					};
+					return setMaximumContextWindow(enabled);
+				} }
 			}, probeKey);
 		}
 	});
@@ -1641,10 +1671,16 @@ function apply(ctx, config) {
 		const merged = () => ({
 			...sources.cn().authFile === void 0 ? {} : { authFile: sources.cn().authFile },
 			...sources.cn().probeConsent === void 0 ? {} : { probeConsent: sources.cn().probeConsent },
-			...sources.ai().authFileAI === void 0 ? {} : { authFileAI: sources.ai().authFileAI }
+			...sources.ai().authFileAI === void 0 ? {} : { authFileAI: sources.ai().authFileAI },
+			...sources.ai().useMaximumContextWindow === void 0 ? {} : { useMaximumContextWindow: sources.ai().useMaximumContextWindow }
 		});
+		const applyMaximumContextWindow = (next) => {
+			const runtime = runtimes.find((candidate) => candidate.variant.id !== CN_VARIANT.id);
+			if (runtime?.catalog.setUseMaximumContextWindow(next.useMaximumContextWindow === true)) runtime.invalidate();
+		};
 		const repointStores = () => {
 			const next = merged();
+			applyMaximumContextWindow(next);
 			for (const runtime of runtimes) runtime.store.setDesktopPath(configuredAuthFile(next, runtime.variant));
 		};
 		settingsCtx.settings.installSection(ctx, WORKBUDDY_SETTINGS_NS, CN_SECTION, config, {
@@ -1661,6 +1697,10 @@ function apply(ctx, config) {
 			},
 			onChange: repointStores
 		});
+		setMaximumContextWindow = async (enabled) => {
+			await settingsCtx.settings.update(WORKBUDDY_AI_SETTINGS_NS, { useMaximumContextWindow: enabled });
+			return { state: "updated" };
+		};
 	});
 	ctx.effect(() => () => {
 		stopped = true;

package/lib/{variants-CE_2IvEG.js → variants-CdmzOPIT.js}

@@ -485,6 +485,33 @@ async function probeModel(options) {
 const CN_CHAT_BASE = "https://copilot.tencent.com";
 const CN_BILLING_BASE = "https://www.codebuddy.cn";
 const GLOBAL_BASE = "https://www.workbuddy.ai";
+/**
+* Display name for the single synthetic row the enterprise endpoint produces.
+*
+* The endpoint reports one cycle quota, not the personal endpoint's list of
+* named packages, so the card's "by package" table has exactly one row.
+*/
+const enterprisePackageName = "enterprise";
+/**
+* Field names and value types of a response document, for diagnostics.
+*
+* Names and `typeof` only. This string ends up in the status route and then in
+* the browser, and the response describes the account's own usage; the values
+* themselves must never travel. Only the document and its `data` member are
+* described, so the output stays small.
+*/
+function describeShape(document) {
+	if (typeof document !== "object" || document === null || Array.isArray(document)) return typeof document;
+	const record = document;
+	const at = (source) => {
+		const keys = Object.keys(source).slice(0, 24);
+		return keys.length === 0 ? "(empty)" : keys.map((key) => `${key}:${typeof source[key]}`).join(", ");
+	};
+	const top = `top-level { ${at(record)} }`;
+	const data = record["data"];
+	if (typeof data !== "object" || data === null || Array.isArray(data)) return top;
+	return `${top}; data { ${at(data)} }`;
+}
 /** Shared CLI-form User-Agent for refresh and the CN catalog; chat and probe present the desktop identity (client-identity.ts). */
 const CLIENT_UA = "CLI/2.63.2 CodeBuddy/2.63.2";
 const JSON_TIMEOUT_MS = 3e4;
@@ -882,8 +909,25 @@ var WorkBuddyUpstreamClient = class {
 		};
 		return models;
 	}
-	/** POST the billing endpoint for the aggregated remaining credit. */
+	/**
+	* POST the billing endpoint for the aggregated remaining credit.
+	*
+	* Two upstream shapes, chosen by account type:
+	*
+	* - **CN enterprise** (`regionOf === 'cn'` and `enterpriseId` non-empty) asks
+	*   `/v2/billing/meter/get-enterprise-user-usage`, which answers with a single
+	*   cycle quota. The personal endpoint serves these accounts an empty
+	*   `Accounts` list, which the card then renders as "0 credit" — a wrong
+	*   number rather than a visible failure (issue #31).
+	* - **Everyone else** keeps the personal endpoint unchanged.
+	*
+	* The region gate is load-bearing: the enterprise endpoint is unverified for
+	* the global region, so an international credential that happens to carry an
+	* `enterpriseId` must stay on the measured personal path instead of being
+	* moved onto an unmeasured one.
+	*/
 	async fetchCredits(credential) {
+		if (regionOf(credential.domain) === "cn" && credential.enterpriseId !== void 0 && credential.enterpriseId !== "") return await this.fetchEnterpriseCredits(credential);
 		const now = /* @__PURE__ */ new Date();
 		const format = (date) => [
 			date.getFullYear().toString().padStart(4, "0"),
@@ -941,6 +985,75 @@ var WorkBuddyUpstreamClient = class {
 		};
 	}
 	/**
+	* CN enterprise credit read: a single cycle quota instead of a package list.
+	*
+	* Verified against the WorkBuddy desktop app (`app.asar`,
+	* `BackendProvider.getEnterpriseUsage` and `CloudAccountRepo.billing`): the
+	* body is an empty object and the account identity travels only in the
+	* headers. The two official call sites disagree on the field spelling
+	* (`limitNum`/`credit` vs `limit_num`/`used_num`), so both are accepted.
+	*
+	* A body carrying no recognisable quota field is a hard error rather than a
+	* zero. Rendering `0` for "we did not understand the answer" is exactly how
+	* issue #31 stayed invisible while users saw a plausible wrong number.
+	*
+	* The error names fields and types only: it reaches the browser, and the
+	* response body may describe the account's usage.
+	*/
+	async fetchEnterpriseCredits(credential) {
+		const response = await fetch(`${CN_BILLING_BASE}/v2/billing/meter/get-enterprise-user-usage`, {
+			method: "POST",
+			headers: billingHeaders(credential),
+			body: JSON.stringify({}),
+			signal: AbortSignal.timeout(JSON_TIMEOUT_MS)
+		});
+		const envelope = await readEnvelope(response);
+		if (!response.ok || envelope.code !== 0) throw envelopeError(response.status, envelope);
+		const sources = [];
+		for (const candidate of [envelope.data, envelope.document]) {
+			if (typeof candidate !== "object" || candidate === null || Array.isArray(candidate)) continue;
+			const record = candidate;
+			if (typeof record["data"] === "object" && record["data"] !== null && !Array.isArray(record["data"])) sources.push(record["data"]);
+			sources.push(record);
+		}
+		const numberAt = (source, key) => typeof source[key] === "number" ? source[key] : void 0;
+		let limit;
+		let used;
+		let resetTime;
+		for (const source of sources) {
+			const candidate = numberAt(source, "limitNum") ?? numberAt(source, "limit_num");
+			if (candidate === void 0) continue;
+			limit = candidate;
+			used = numberAt(source, "credit") ?? numberAt(source, "used_num");
+			if (typeof source["cycleResetTime"] === "string" && source["cycleResetTime"] !== "") resetTime = source["cycleResetTime"];
+			break;
+		}
+		if (limit === void 0) throw new Error(`workbuddy enterprise billing response carried no recognised quota field (expected limitNum/limit_num + credit/used_num; received ${describeShape(envelope.document)})`);
+		if (limit === -1) return {
+			total: 0,
+			accounts: [{
+				packageName: enterprisePackageName,
+				remain: 0,
+				size: 0,
+				unlimited: true
+			}],
+			unlimited: true,
+			...resetTime === void 0 ? {} : { cycleResetTime: resetTime }
+		};
+		if (used === void 0) throw new Error(`workbuddy enterprise billing response carried a quota limit but no recognised usage field (expected credit/used_num alongside limitNum/limit_num; received ${describeShape(envelope.document)})`);
+		let remain = limit - used;
+		if (remain < 0) remain = 0;
+		return {
+			total: remain,
+			accounts: [{
+				packageName: enterprisePackageName,
+				remain,
+				size: limit
+			}],
+			...resetTime === void 0 ? {} : { cycleResetTime: resetTime }
+		};
+	}
+	/**
 	* One probe request: a real streaming chat call carrying the effort under
 	* test.
 	*
@@ -1092,6 +1205,7 @@ function parseModelCatalog(data, international = false) {
 			name: typeof wrapped["name"] === "string" && wrapped["name"] !== "" ? wrapped["name"] : id,
 			contextWindow: international && isObject(wrapped["contextWindow"]) && positive(wrapped["contextWindow"]["defaultLength"]) ? wrapped["contextWindow"]["defaultLength"] : input,
 			...international ? {
+				...isObject(wrapped["contextWindow"]) && positive(wrapped["contextWindow"]["defaultLength"]) ? { defaultContextWindow: wrapped["contextWindow"]["defaultLength"] } : {},
 				maxInputTokens: input,
 				supportedContextWindows: isObject(wrapped["contextWindow"]) && Array.isArray(wrapped["contextWindow"]["supportedLengths"]) ? wrapped["contextWindow"]["supportedLengths"].filter(positive) : [],
 				promotions: parsePromotions(data["modelPromotions"], id)
@@ -1636,7 +1750,7 @@ const FALLBACK_WORKBUDDY_MODELS = [
 	},
 	{
 		id: "hy3-x",
-		name: "Hy3",
+		name: "Hy3-X",
 		contextWindow: 192e3,
 		maxTokens: 64e3,
 		supportsImages: true,
@@ -1971,6 +2085,8 @@ const FALLBACK_WORKBUDDY_AI_MODELS = [
 		id: "hy4-preview-f",
 		name: "Hy4 preview",
 		contextWindow: 3e5,
+		defaultContextWindow: 3e5,
+		supportedContextWindows: [3e5, 1e6],
 		maxTokens: 64e3,
 		supportsImages: true,
 		reasoning: {
@@ -2007,6 +2123,8 @@ const FALLBACK_WORKBUDDY_AI_MODELS = [
 		id: "deepseek-v4.1-flash",
 		name: "Deepseek-V4.1-Flash",
 		contextWindow: 3e5,
+		defaultContextWindow: 3e5,
+		supportedContextWindows: [3e5, 1e6],
 		maxTokens: 128e3,
 		supportsImages: true,
 		reasoning: {
@@ -2024,6 +2142,8 @@ const FALLBACK_WORKBUDDY_AI_MODELS = [
 		id: "gpt-6-astra",
 		name: "GPT-6-Astra",
 		contextWindow: 4e5,
+		defaultContextWindow: 4e5,
+		supportedContextWindows: [4e5, 1e6],
 		maxTokens: 128e3,
 		supportsImages: true,
 		reasoning: {
@@ -2287,13 +2407,22 @@ const FALLBACK_WORKBUDDY_AI_MODELS = [
 var WorkBuddyCatalog = class {
 	models;
 	visible = true;
+	useMaximumContextWindow = false;
 	constructor(initial = FALLBACK_WORKBUDDY_MODELS) {
 		this.models = initial;
 	}
 	/** Current entries; empty while the variant has no usable credential. */
 	current() {
 		if (!this.visible) return [];
-		return this.models.map((model) => modelWithCurrentPromotion(model));
+		return this.models.map((model) => {
+			const current = modelWithCurrentPromotion(model);
+			const maximum = current.supportedContextWindows === void 0 ? void 0 : Math.max(...current.supportedContextWindows);
+			return this.useMaximumContextWindow && maximum !== void 0 && maximum > current.contextWindow ? {
+				...current,
+				defaultContextWindow: current.defaultContextWindow ?? current.contextWindow,
+				contextWindow: maximum
+			} : current;
+		});
 	}
 	/** Replace the list; callers invalidate their adapter snapshot after this. */
 	set(models) {
@@ -2312,6 +2441,12 @@ var WorkBuddyCatalog = class {
 		this.visible = visible;
 		return true;
 	}
+	/** Select the largest declared international window where the upstream offers one. */
+	setUseMaximumContextWindow(useMaximum) {
+		if (this.useMaximumContextWindow === useMaximum) return false;
+		this.useMaximumContextWindow = useMaximum;
+		return true;
+	}
 	/** Models to fall back to when the upstream fetch fails; ignores visibility. */
 	fallback() {
 		return this.models;
@@ -2344,7 +2479,7 @@ const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-connect/ai/status";
 const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-connect/ai/probe";
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_CONNECT_VERSION = "0.5.1";
+const WORKBUDDY_CONNECT_VERSION = "0.5.3";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-connect",
   "displayName": "DSH WorkBuddy Connect",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "author": "corrinehu",
   "keywords": [
     "dsh-plugin",