dsh-workbuddy-connect 0.5.3 → 0.6.0

package/lib/client.js

@@ -53,7 +53,13 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/WorkBuddyPluginCard.tsx
-		/** WorkBuddy status card contributed to Harness Plugin configuration. */
+		/**
+		* WorkBuddy status card, rendered on whichever settings surface the host
+		* provides: dispatched directly by DSH 0.1.5's settings Plugins tab (one card
+		* per variant), or mounted by the bundle configuration page DSH 0.1.6+'s
+		* Plugins page renders. The component itself is surface-agnostic — its props
+		* are only the injected copy and variant.
+		*/
 		/** CN WorkBuddy; the plugin's long-standing card and default. */
 		const CN_CARD_VARIANT = {
 			id: "workbuddy",
@@ -79,7 +85,8 @@ window.__ModuleLoader__.load({
 			overflow: "hidden",
 			border: "1px solid var(--dsw-alias-border-l2)",
 			borderRadius: 10,
-			background: "var(--dsw-alias-bg-module-platform)"
+			background: "var(--dsw-alias-bg-module-platform)",
+			listStyle: "none"
 		};
 		const headerStyle = {
 			boxSizing: "border-box",
@@ -217,6 +224,17 @@ window.__ModuleLoader__.load({
 			flexDirection: "column",
 			gap: 2
 		};
+		/**
+		* Left half of one merged context/visibility row: the visibility checkbox (when
+		* the account has one) beside the model's name and rate. Kept as a flex span so
+		* the capacity column stays flush right no matter how long the name runs.
+		*/
+		const contextRowMainStyle = {
+			display: "flex",
+			alignItems: "center",
+			gap: 9,
+			minWidth: 0
+		};
 		const modelBadgeChipStyle = {
 			padding: "1px 8px",
 			borderRadius: 999,
@@ -455,26 +473,41 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
-		* Context capacity, listed in full.
+		* Context window and model visibility, one row per catalog model.
+		*
+		* The list is driven by the full current catalog, not by context metadata:
+		* hiding a model is a statement about the picker, and a model without a
+		* declared window is still hideable — its row just shows an em dash where the
+		* capacity would be. Rows with a window keep the original ordering (largest
+		* first); rows without one trail at the end in catalog order.
 		*
-		* Every model the upstream reports a capacity for, largest first. A one-line
-		* summary with the exceptions on hover was tried and rejected: capacity is
-		* reference data you scan by model, and hiding most of it behind a hover made
-		* the common case (a model you already have in mind) the hard one to look up.
+		* Each row is one <label>, so the checkbox is named by its row without a
+		* duplicated aria string. The checkbox state comes from the status document
+		* only — no optimistic flip — so a save that fails leaves the box where the
+		* host's truth says it is, next to the failure notice `control` records.
+		* Checkboxes render only when the document carries a visibility section (a
+		* signed-in account with a stable user id); a uid-less credential shows the
+		* plain capacity list rather than editing a bucket every such account would
+		* share.
 		*
-		* Purely a report of the upstream's own numbers. The plugin offers no tier
-		* picker: the CN catalog declares one capacity per model and publishes no
-		* alternatives, so a menu there would mean inventing client-side policy. The
-		* international document does declare alternatives (`supportedLengths`), and
-		* they are shown as a secondary figure rather than merged into one number —
+		* Purely a report of the upstream's own numbers otherwise. The plugin offers
+		* no tier picker: the CN catalog declares one capacity per model and publishes
+		* no alternatives, so a menu there would mean inventing client-side policy.
+		* The international document does declare alternatives (`supportedLengths`),
+		* and they are shown as a secondary figure rather than merged into one number —
 		* the default is the budget actually requested, while the larger value is a
 		* ceiling the upstream would accept.
 		*/
-		function ContextTable({ models, t, useMaximumContextWindow, disabled, onUseMaximumContextWindow }) {
-			const known = (models ?? []).filter((model) => model.contextWindow !== void 0).sort((a, b) => b.contextWindow - a.contextWindow);
-			const canSelectMaximum = known.some((model) => model.maxContextWindow !== void 0 && model.maxContextWindow > (model.defaultContextWindow ?? model.contextWindow ?? 0));
+		function ContextTable({ models, t, useMaximumContextWindow, contextPreferenceDisabled, onUseMaximumContextWindow, visibility, visibilityControlsDisabled, visibilityToggling, onVisibilityToggle }) {
+			const rows = [...models ?? []].sort((a, b) => {
+				if (a.contextWindow === void 0) return b.contextWindow === void 0 ? 0 : 1;
+				if (b.contextWindow === void 0) return -1;
+				return b.contextWindow - a.contextWindow;
+			});
+			const canSelectMaximum = rows.some((model) => model.maxContextWindow !== void 0 && model.maxContextWindow > (model.defaultContextWindow ?? model.contextWindow ?? 0));
 			const showPreference = onUseMaximumContextWindow !== void 0 && (canSelectMaximum || useMaximumContextWindow === true);
-			if (known.length === 0 && !showPreference) return null;
+			if (rows.length === 0 && !showPreference) return null;
+			const hidden = new Set(visibility?.disabled ?? []);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				style: quotaListStyle,
 				children: [
@@ -487,7 +520,7 @@ window.__ModuleLoader__.load({
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 							type: "checkbox",
 							checked: useMaximumContextWindow === true,
-							disabled,
+							disabled: contextPreferenceDisabled,
 							onChange: (event) => {
 								onUseMaximumContextWindow(event.currentTarget.checked);
 							}
@@ -499,25 +532,65 @@ window.__ModuleLoader__.load({
 							})]
 						})]
 					}) : null,
-					known.map((model) => {
-						const capacity = model.contextWindow;
-						const alternative = model.maxContextWindow !== void 0 && model.maxContextWindow > capacity ? model.maxContextWindow : void 0;
-						return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							style: quotaLabelStyle,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-								style: modelOfferStyle,
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									style: { textAlign: "right" },
-									children: formatTokens(capacity)
-								}), alternative !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									style: modelRateStyle,
-									children: t("contextUpTo", { size: formatTokens(alternative) })
-								}) : model.defaultContextWindow !== void 0 && model.defaultContextWindow < capacity ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									style: modelRateStyle,
-									children: t("contextDefault", { size: formatTokens(model.defaultContextWindow) })
-								}) : null]
-							})]
-						}, model.id);
+					visibility === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: bodyStyle,
+						children: t("visibilityIntro")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						style: quotaGroupStyle,
+						children: rows.map((model) => {
+							const capacity = model.contextWindow;
+							const alternative = capacity !== void 0 && model.maxContextWindow !== void 0 && model.maxContextWindow > capacity ? model.maxContextWindow : void 0;
+							return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								style: quotaLabelStyle,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+									style: contextRowMainStyle,
+									children: [visibility === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: !hidden.has(model.id),
+										disabled: visibilityControlsDisabled || visibilityToggling.has(model.id),
+										onChange: (event) => {
+											onVisibilityToggle?.(model.id, event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+										style: modelOfferStyle,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											style: modelBadgeStyle,
+											children: [
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }),
+												model.badges?.map((badge) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: modelBadgeChipStyle,
+													children: modelBadgeLabel(badge, t)
+												}, badge)),
+												model.free === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: modelBadgeChipStyle,
+													children: t("freeModel")
+												}) : null
+											]
+										}), model.credits === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											style: modelRateStyle,
+											children: model.credits
+										})]
+									})]
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+									style: modelOfferStyle,
+									children: [capacity === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: modelRateStyle,
+										"aria-label": t("contextUnknown"),
+										children: "—"
+									}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { textAlign: "right" },
+										children: formatTokens(capacity)
+									}), alternative !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: modelRateStyle,
+										children: t("contextUpTo", { size: formatTokens(alternative) })
+									}) : capacity !== void 0 && model.defaultContextWindow !== void 0 && model.defaultContextWindow < capacity ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: modelRateStyle,
+										children: t("contextDefault", { size: formatTokens(model.defaultContextWindow) })
+									}) : null]
+								})]
+							}, model.id);
+						})
 					})
 				]
 			});
@@ -543,7 +616,7 @@ window.__ModuleLoader__.load({
 		*   parameter ("this model does not check it"), never as a statement that a
 		*   level is unsupported.
 		*/
-		function ProbeSection({ probe, t, onDetect, onClear, busy }) {
+		function ProbeSection({ probe, models, t, onDetect, onClear, busy }) {
 			const [pending, setPending] = (0, react.useState)();
 			const [runningModel, setRunningModel] = (0, react.useState)();
 			(0, react.useEffect)(() => {
@@ -590,7 +663,7 @@ window.__ModuleLoader__.load({
 						style: quotaGroupStyle,
 						children: probe.candidates.map((id) => {
 							const result = probe.results.find((entry) => entry.id === id);
-							const name = result?.name ?? id;
+							const name = models?.find((model) => model.id === id)?.name ?? result?.name ?? id;
 							return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: modelOfferStyle,
 								children: [
@@ -608,7 +681,7 @@ window.__ModuleLoader__.load({
 												onClick: () => {
 													setPending(id);
 												},
-												children: runningModel === id ? t("probeRunning", { model: id }) : t(result === void 0 ? "probeStart" : "probeRedetect")
+												children: runningModel === id ? t("probeRunning", { model: name }) : t(result === void 0 ? "probeStart" : "probeRedetect")
 											})]
 										})]
 									}),
@@ -688,6 +761,17 @@ window.__ModuleLoader__.load({
 			*/
 			const [readFailure, setReadFailure] = (0, react.useState)();
 			const [busy, setBusy] = (0, react.useState)(false);
+			/**
+			* The model ids whose visibility writes are in flight, empty when none are.
+			* Deliberately NOT the card-wide `busy` (that flag drives the Refresh
+			* buttons' labels, which must not claim a refresh the user never pressed)
+			* and deliberately per-row rather than whole-list: a visibility write only
+			* adds or removes one model's id, so the rows are independent — locking
+			* every checkbox for one row's write made the whole list visibly blink for
+			* no correctness gain. A set, because two writes can be open at once when
+			* the user moves down the list; only the rows being written lock.
+			*/
+			const [togglingModels, setTogglingModels] = (0, react.useState)(() => /* @__PURE__ */ new Set());
 			const [tab, setTab] = (0, react.useState)("status");
 			const mounted = (0, react.useRef)(true);
 			/**
@@ -843,14 +927,16 @@ window.__ModuleLoader__.load({
 			const control = (0, react.useCallback)(async (action) => {
 				const key = status?.status === "signed-in" ? status.probeKey : void 0;
 				if (key === void 0) return;
-				setBusy(true);
+				const visibility = action.action === "set-model-visibility";
+				if (visibility) setTogglingModels((previous) => new Set(previous).add(action.model));
+				else setBusy(true);
 				const controller = trackController();
 				try {
 					const response = await fetch(variant.probePath, {
 						method: "POST",
 						headers: {
 							"Content-Type": "application/json",
-							"X-WorkBuddy-Probe-Key": key
+							"X-Workbuddy-Probe-Key": key
 						},
 						credentials: "same-origin",
 						signal: controller.signal,
@@ -861,7 +947,12 @@ window.__ModuleLoader__.load({
 						const message = typeof value === "object" && value !== null && "error" in value ? String(value["error"]) : `HTTP ${response.status}`;
 						throw new Error(message);
 					}
-					if (action.action === "set-maximum-context-window" && (typeof value !== "object" || value === null || value["state"] !== "updated")) {
+					if ((action.action === "set-maximum-context-window" || action.action === "set-model-visibility") && (typeof value !== "object" || value === null || value["state"] !== "updated")) {
+						const state = typeof value === "object" && value !== null ? value["state"] : void 0;
+						if (action.action === "set-model-visibility" && state === "stale-account") {
+							await refresh(controller.signal);
+							throw new Error(t("visibilityStaleAccount"));
+						}
 						const reason = typeof value === "object" && value !== null && "reason" in value ? String(value["reason"]) : t("requestFailed");
 						throw new Error(reason);
 					}
@@ -870,7 +961,13 @@ window.__ModuleLoader__.load({
 					if (mounted.current && controller.signal.aborted !== true) setReadFailure(error instanceof Error ? error.message : t("requestFailed"));
 				} finally {
 					manualControllers.current.delete(controller);
-					if (mounted.current) setBusy(false);
+					if (!mounted.current) return;
+					if (visibility) setTogglingModels((previous) => {
+						const next = new Set(previous);
+						next.delete(action.model);
+						return next;
+					});
+					else setBusy(false);
 				}
 			}, [
 				refresh,
@@ -1019,6 +1116,7 @@ window.__ModuleLoader__.load({
 									}),
 									status.probe === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ProbeSection, {
 										probe: status.probe,
+										models: status.models,
 										t,
 										busy,
 										onDetect: confirmDetect,
@@ -1032,14 +1130,27 @@ window.__ModuleLoader__.load({
 								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ContextTable, {
 									models: status.models,
 									t,
-									disabled: busy,
-									...status.useMaximumContextWindow === void 0 ? {} : { useMaximumContextWindow: status.useMaximumContextWindow },
-									...variant.id === AI_CARD_VARIANT.id ? { onUseMaximumContextWindow: (enabled) => {
+									contextPreferenceDisabled: busy,
+									...variant.id === AI_CARD_VARIANT.id && status.useMaximumContextWindow !== void 0 ? {
+										useMaximumContextWindow: status.useMaximumContextWindow,
+										onUseMaximumContextWindow: (enabled) => {
+											control({
+												action: "set-maximum-context-window",
+												enabled
+											});
+										}
+									} : {},
+									visibility: status.visibility,
+									visibilityControlsDisabled: busy,
+									visibilityToggling: togglingModels,
+									onVisibilityToggle: (modelId, visible) => {
 										control({
-											action: "set-maximum-context-window",
-											enabled
+											action: "set-model-visibility",
+											model: modelId,
+											visible,
+											account: status.visibility?.account ?? ""
 										});
-									} } : {}
+									}
 								})
 							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: tabPanelStyle,
@@ -1510,6 +1621,44 @@ window.__ModuleLoader__.load({
 			return t("probeNoteUnknown");
 		}
 		//#endregion
+		//#region src/client/WorkBuddyConfigPage.tsx
+		/**
+		* The cards' list; the page supplies no other chrome. A semantic `<ul>` —
+		* each card below is an `<li>` — with the user-agent list defaults cleared so
+		* only the column/gap rhythm remains, keeping the layout identical to the
+		* flex column it replaced while giving the page real list semantics.
+		*/
+		const pageStyle = {
+			display: "flex",
+			flexDirection: "column",
+			gap: 12,
+			listStyle: "none",
+			margin: 0,
+			padding: 0
+		};
+		/**
+		* Render the bundle's configuration: one status card per WorkBuddy variant.
+		*
+		* Both variants share one page. DSH 0.1.6 replaced the settings section's
+		* keyed `settings.plugin.item` slot — dispatched once per served settings
+		* namespace, which is why the two variants used to be two cards — with the
+		* Plugins page's `plugins.bundle.config`, keyed by the bundle's package name.
+		* A bundle therefore carries exactly one configuration entry, so the cards are
+		* stacked here instead of being dispatched separately. (The 0.1.5 settings tab
+		* and its two dispatched cards still exist on 0.1.5 hosts; this page only
+		* mounts where the Plugins page declares its slot.)
+		*/
+		function WorkBuddyConfigPage({ view, t }) {
+			if (view === "summary") return t("intro");
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+				style: pageStyle,
+				children: CARD_VARIANTS.map((variant) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WorkBuddyPluginCard, {
+					t,
+					variant
+				}, variant.id))
+			});
+		}
+		//#endregion
 		//#region src/client/locales.ts
 		/** Plugin-card copy registered under the settings.workbuddy locale namespace. */
 		const en = {
@@ -1557,8 +1706,11 @@ window.__ModuleLoader__.load({
 			contextHeading: "Context window",
 			contextUpTo: "up to {size}",
 			contextDefault: "default {size}",
+			contextUnknown: "no declared context window",
 			useMaximumContextWindow: "Use the largest declared context window",
 			useMaximumContextWindowHint: "Applies to WorkBuddy AI models that offer a larger window.",
+			visibilityIntro: "Uncheck a model to hide it from the model picker. Saved per signed-in account; chats already using a hidden model keep working.",
+			visibilityStaleAccount: "The signed-in account changed — this change was not saved.",
 			freeModel: "Free",
 			badgeLimitedFree: "Limited-time free",
 			badgeNightDiscount: "Night discount",
@@ -1640,8 +1792,11 @@ window.__ModuleLoader__.load({
 			contextHeading: "上下文窗口",
 			contextUpTo: "最高 {size}",
 			contextDefault: "默认 {size}",
+			contextUnknown: "未声明上下文窗口",
 			useMaximumContextWindow: "使用上游声明的最大上下文窗口",
 			useMaximumContextWindowHint: "仅作用于 WorkBuddy AI 中声明了更大窗口的模型。",
+			visibilityIntro: "取消勾选即可在模型选择器中隐藏该模型；按当前登录账号分别保存，已在用该模型的会话不受影响。",
+			visibilityStaleAccount: "登录账号已切换——本次修改未保存。",
 			freeModel: "免费",
 			badgeLimitedFree: "限时免费",
 			badgeNightDiscount: "夜间折扣",
@@ -1683,16 +1838,26 @@ window.__ModuleLoader__.load({
 		/** Stable browser-plugin name. */
 		const name = "dsh-workbuddy-connect-client";
 		/**
-		* Client services required by the Plugin configuration contribution.
+		* The bundle's package name, which is also this half's configuration key.
+		*
+		* The Plugins page dispatches `plugins.bundle.config` by the bundle's package
+		* name, so the key has to spell exactly what the profile installs.
+		*/
+		const BUNDLE_NAME = "dsh-workbuddy-connect";
+		/**
+		* Client services required by this browser half.
 		*
 		* DSH 0.1.2 removed `@deepseek-ai/dsh-client-runtime` (the package that used to
-		* hold the browser `ClientContext` alias and the `slots` service). The services
-		* this card relies on now come from narrower packages: the `slots` registry
-		* moved to `@deepseek-ai/dsh-client-ui-renderer`, `locale` stayed in
-		* `@deepseek-ai/dsh-client-locale`, and the `settings.plugin.item` slot is
-		* declared by `@deepseek-ai/dsh-client-ui-settings-plugins`. All three are
-		* named in the package's `dsh.client.inject` list, so cordis has activated
-		* them before this plugin's fiber starts.
+		* hold the browser `ClientContext` alias and the `slots` service), so the
+		* services come from narrower packages: the `slots` registry lives in
+		* `@deepseek-ai/dsh-client-ui-renderer` and `locale` in
+		* `@deepseek-ai/dsh-client-locale`. Neither slot owner is named here on
+		* purpose: `settings.plugin.item`'s declarer (`…-ui-settings-plugins`) is
+		* absent from 0.1.6+ hosts and `plugins.bundle.config`'s declarer
+		* (`…-ui-plugin-manager`) is absent from 0.1.5 hosts, and the seam choice is
+		* made by slot-declaration lifetime, not by activation order — `ctx.slots.inject`
+		* fires whenever the declaring package commits the slot, before or after this
+		* fiber starts.
 		*/
 		const inject = [
 			"slots",
@@ -1700,57 +1865,105 @@ window.__ModuleLoader__.load({
 			"remote",
 			"remote.session"
 		];
+		/** Prefix every guarded client contribution's degradation logs with this. */
+		const CLIENT_CONTRIBUTION_FAILED = "[dsh-workbuddy-connect] client contribution failed to load (host provider unaffected):";
+		/** Disposer handed back when a deferred registration degraded: nothing to undo. */
+		const NOOP_DISPOSER = () => {};
 		/**
-		* Register card copy and the WorkBuddy card under Plugin configuration.
+		* Run ONE browser-side contribution, degrading its failure to a `console.error`
+		* instead of throwing into the DSH loader. Returns the contribution's own
+		* value on success, or `undefined` when it degraded — the deferred slot
+		* callbacks below substitute `NOOP_DISPOSER` for that, because the slot
+		* runtime always expects a disposer back.
+		*
+		* Every contribution is guarded at BOTH boundaries where it can throw:
 		*
-		* The entire body is wrapped so that a DSH slot-API breaking change (for
-		* example the rc.6→rc.7 `id`→`key` / `order`→`priority` rename) degrades
-		* to a `console.error` instead of throwing into the DSH loader and raising
-		* the red "Failed to load plugins" banner. The host provider keeps working:
-		* the `workbuddy` model channel is unaffected, and `dsh-workbuddy-connect
-		* status` reports host health via the heartbeat file.
+		* 1. the eager `ctx.slots.inject(...)` / `ctx.inject(...)` call itself, which
+		*    runs synchronously inside `apply()` — e.g. a slot-API shape break such as
+		*    the rc.6→rc.7 `id`→`key` rename;
+		* 2. the deferred callback, which the slot runtime invokes later — when the
+		*    owner commits the slot's declaration, or when the injected services
+		*    arrive — long after `apply()` has returned, where no enclosing try/catch
+		*    could still catch it.
 		*
-		* NOTE: the try/catch boundary of this function is mirrored (duplicated) in
-		* `tests/client-fallback.spec.ts`, because the real client entry imports
-		* browser-only DSH packages that cannot load in the Node test environment.
-		* That test therefore does not import this function — it replicates its
-		* shape. If you change the guarded body or the `console.error` message here,
-		* update the mirrored `apply()` in that spec too, or the fallback test will
-		* silently diverge from this real implementation.
+		* The pair is what makes the contributions independent: a failure in one
+		* settings seam, or in the probe control, leaves every other registration
+		* intact. Guards are for THIS browser half only; the host half reports its own
+		* errors through `ctx.logger`.
 		*/
-		function apply(ctx) {
+		function guardClientContribution(label, fn) {
 			try {
-				const namespace = "settings.workbuddy";
+				return fn();
+			} catch (error) {
+				console.error(`${CLIENT_CONTRIBUTION_FAILED} ${label}`, error);
+				return;
+			}
+		}
+		/**
+		* Register the card copy and both settings-surface seams, one guarded
+		* contribution at a time.
+		*
+		* A DSH slot-API breaking change degrades to a `console.error` per
+		* contribution instead of throwing into the DSH loader and raising the red
+		* "Failed to load plugins" banner; because each contribution carries its own
+		* guard, one failing registration never takes the others with it (the old
+		* settings cards survive a broken Plugins-page seam, and the probe control
+		* survives either). The host provider keeps working throughout: the
+		* `workbuddy` model channel is unaffected, and `dsh-workbuddy-connect status`
+		* reports host health via the heartbeat file.
+		*
+		* The tests import this function directly (`tests/client-fallback.spec.ts`),
+		* so its isolation semantics are pinned against the real entry — keep any
+		* change to the guarded structure in sync with that spec.
+		*/
+		function apply(ctx) {
+			const namespace = "settings.workbuddy";
+			guardClientContribution("settings copy", () => {
 				ctx.effect(() => ctx.locale.register(namespace, {
 					zh,
 					en
 				}), "dsh-workbuddy-connect: settings copy");
-				const t = ctx.locale.bind(namespace);
-				for (const [index, variant] of CARD_VARIANTS.entries()) ctx.slots.inject("settings.plugin.item", () => ctx.slots.register({
-					name: "settings.plugin.item",
-					key: variant.id,
-					priority: 30 - index,
-					inject: () => ({
-						t,
-						variant
-					})
-				}, WorkBuddyPluginCard));
-				ctx.inject(["modelDirectories"], (scope) => {
-					scope.slots.inject("conversation.input.right", () => scope.slots.register({
-						name: "conversation.input.right",
-						id: "workbuddy-probe",
-						order: 10,
-						inject: (sessionId) => ({
-							directory: scope.modelDirectories.directoryFor(sessionId).store,
-							t
+			});
+			const t = ctx.locale.bind(namespace);
+			for (const [index, variant] of CARD_VARIANTS.entries()) {
+				const label = `settings.plugin.item card "${variant.id}"`;
+				guardClientContribution(label, () => {
+					ctx.slots.inject("settings.plugin.item", () => guardClientContribution(label, () => ctx.slots.register({
+						name: "settings.plugin.item",
+						key: variant.id,
+						priority: 30 - index,
+						inject: () => ({
+							t,
+							variant
 						})
-					}, WorkBuddyProbeControl));
+					}, WorkBuddyPluginCard)) ?? NOOP_DISPOSER);
 				});
-			} catch (error) {
-				console.error("[dsh-workbuddy-connect] client card failed to load (host provider unaffected):", error);
 			}
+			guardClientContribution("plugins.bundle.config page", () => {
+				ctx.slots.inject("plugins.bundle.config", () => guardClientContribution("plugins.bundle.config page", () => ctx.slots.register({
+					name: "plugins.bundle.config",
+					key: "dsh-workbuddy-connect",
+					locale: namespace
+				}, WorkBuddyConfigPage)) ?? NOOP_DISPOSER);
+			});
+			guardClientContribution("conversation probe control", () => {
+				ctx.inject(["modelDirectories"], (scope) => {
+					guardClientContribution("conversation probe control", () => {
+						scope.slots.inject("conversation.input.right", () => guardClientContribution("conversation probe control", () => scope.slots.register({
+							name: "conversation.input.right",
+							id: "workbuddy-probe",
+							order: 10,
+							inject: (sessionId) => ({
+								directory: scope.modelDirectories.directoryFor(sessionId).store,
+								t
+							})
+						}, WorkBuddyProbeControl)) ?? NOOP_DISPOSER);
+					});
+				});
+			});
 		}
 		//#endregion
+		exports.BUNDLE_NAME = BUNDLE_NAME;
 		exports.apply = apply;
 		exports.inject = inject;
 		exports.name = name;