dsh-workbuddy-connect 0.5.4 → 0.6.1

package/lib/client.js

@@ -30,6 +30,21 @@ window.__ModuleLoader__.load({
 		*/
 		const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-connect/ai/status";
 		const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-connect/ai/probe";
+		/** Every reason code, for validation without trusting a wire value. */
+		const SIGNED_OUT_REASON_CODES = [
+			"no-credential",
+			"credential-region-mismatch",
+			"encrypted-credential-unreadable",
+			"electron-binary-not-found",
+			"electron-binary-ambiguous",
+			"electron-binary-unavailable",
+			"electron-path-invalid",
+			"electron-discovery-incomplete"
+		];
+		/** Whether a value is one of the closed set of signed-out reason codes. */
+		function isWorkBuddySignedOutReasonCode(value) {
+			return typeof value === "string" && SIGNED_OUT_REASON_CODES.includes(value);
+		}
 		//#endregion
 		//#region src/client/status-document.ts
 		/**
@@ -43,6 +58,11 @@ window.__ModuleLoader__.load({
 		* The check is deliberately limited to the discriminator (plus `error`'s
 		* `message`, which the error paragraph renders): validating optional fields
 		* here would reject documents the host legitimately omits fields from.
+		*
+		* `reasonCode` is therefore *not* rejected here — a card renders `reason`
+		* either way — but every reader must narrow it with
+		* `isWorkBuddySignedOutReasonCode` before branching on it, since the wire
+		* value is not guaranteed to be inside the enum.
 		*/
 		function isWorkBuddyWebStatus(value) {
 			if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
@@ -53,7 +73,13 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/WorkBuddyPluginCard.tsx
-		/** WorkBuddy status card contributed to Harness Plugin configuration. */
+		/**
+		* WorkBuddy status card, rendered on whichever settings surface the host
+		* provides: dispatched directly by DSH 0.1.5's settings Plugins tab (one card
+		* per variant), or mounted by the bundle configuration page DSH 0.1.6+'s
+		* Plugins page renders. The component itself is surface-agnostic — its props
+		* are only the injected copy and variant.
+		*/
 		/** CN WorkBuddy; the plugin's long-standing card and default. */
 		const CN_CARD_VARIANT = {
 			id: "workbuddy",
@@ -61,7 +87,9 @@ window.__ModuleLoader__.load({
 			introKey: "intro",
 			signedOutKey: "signedOutHint",
 			statusPath: WORKBUDDY_STATUS_PATH,
-			probePath: WORKBUDDY_PROBE_PATH
+			probePath: WORKBUDDY_PROBE_PATH,
+			appName: "WorkBuddy",
+			unavailableKey: "assistUnavailableCN"
 		};
 		/** International WorkBuddy AI. */
 		const AI_CARD_VARIANT = {
@@ -70,16 +98,125 @@ window.__ModuleLoader__.load({
 			introKey: "introAI",
 			signedOutKey: "signedOutHintAI",
 			statusPath: WORKBUDDY_AI_STATUS_PATH,
-			probePath: WORKBUDDY_AI_PROBE_PATH
+			probePath: WORKBUDDY_AI_PROBE_PATH,
+			appName: "WorkBuddy AI",
+			unavailableKey: "assistUnavailableAI"
 		};
 		/** Both cards, in display order. */
 		const CARD_VARIANTS = [CN_CARD_VARIANT, AI_CARD_VARIANT];
 		const POLL_INTERVAL_MS = 6e4;
+		/**
+		* The reason codes whose failures the Agent assist block covers: the plugin
+		* cannot reach a decryption program, for any of the five reasons in §5.5.
+		*
+		* This is the *only* place the card decides whether the block applies. It
+		* branches on the code, never on `reason` text: the prose is written for a
+		* human and is expected to change, so matching it would silently stop
+		* matching after any wording edit.
+		*
+		* `encrypted-credential-unreadable` is deliberately absent — the app was found
+		* and ran, so "look for the app" is not the fix for it.
+		*/
+		const ASSIST_REASON_CODES = [
+			"electron-binary-not-found",
+			"electron-binary-ambiguous",
+			"electron-binary-unavailable",
+			"electron-path-invalid",
+			"electron-discovery-incomplete"
+		];
+		/** Locale key for one failure's summary inside the Agent prompt. */
+		function assistSummaryKey(code, variant) {
+			switch (code) {
+				case "electron-binary-not-found": return "assistNotFound";
+				case "electron-binary-ambiguous": return "assistAmbiguous";
+				case "electron-discovery-incomplete": return "assistIncomplete";
+				case "electron-path-invalid": return "assistPathInvalid";
+				default: return variant.unavailableKey;
+			}
+		}
+		/** Copy text to the clipboard, reporting whether it worked. */
+		async function copyPrompt(text) {
+			try {
+				if (navigator.clipboard?.writeText === void 0) return false;
+				await navigator.clipboard.writeText(text);
+				return true;
+			} catch {
+				return false;
+			}
+		}
+		/**
+		* The Agent assist block for a path failure: what is wrong, one copyable
+		* request, and a re-check. Rendered only for the codes above.
+		*/
+		function AssistBlock({ t, variant, code, busy, onRecheck }) {
+			const [copied, setCopied] = (0, react.useState)(false);
+			const [copyFailed, setCopyFailed] = (0, react.useState)(false);
+			const prompt = t("assistantPrompt", {
+				appName: variant.appName,
+				failureSummary: t(assistSummaryKey(code, variant))
+			});
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				style: assistStyle,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
+						style: assistHeadingStyle,
+						children: t("assistantHeading")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: bodyStyle,
+						children: t("assistantIntro")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: assistPromptRowStyle,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: assistPromptStyle,
+							children: prompt
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							style: buttonStyle$1,
+							onClick: () => {
+								(async () => {
+									const ok = await copyPrompt(prompt);
+									setCopied(ok);
+									setCopyFailed(!ok);
+								})();
+							},
+							children: t("assistantCopy")
+						})]
+					}),
+					copied ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: assistFeedbackStyle,
+						role: "status",
+						children: t("assistantCopied")
+					}) : null,
+					copyFailed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: assistFeedbackStyle,
+						role: "status",
+						children: t("assistantCopyFailed")
+					}) : null,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: bodyStyle,
+						children: t("assistantAfter")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						style: rowStyle,
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							style: buttonStyle$1,
+							disabled: busy,
+							onClick: onRecheck,
+							children: busy ? t("assistantRechecking") : t("assistantRecheck")
+						})
+					})
+				]
+			});
+		}
 		const cardStyle = {
 			overflow: "hidden",
 			border: "1px solid var(--dsw-alias-border-l2)",
 			borderRadius: 10,
-			background: "var(--dsw-alias-bg-module-platform)"
+			background: "var(--dsw-alias-bg-module-platform)",
+			listStyle: "none"
 		};
 		const headerStyle = {
 			boxSizing: "border-box",
@@ -217,6 +354,64 @@ window.__ModuleLoader__.load({
 			flexDirection: "column",
 			gap: 2
 		};
+		/**
+		* The Agent assist block. Sits beside the existing error line rather than
+		* replacing it: the short diagnosis stays the headline, this adds the way out.
+		*/
+		const assistStyle = {
+			display: "flex",
+			flexDirection: "column",
+			gap: 10,
+			padding: "12px 14px",
+			marginTop: 12,
+			border: "1px solid var(--dsw-alias-border-l2)",
+			borderRadius: 10,
+			background: "var(--dsw-alias-bg-layer-2, rgba(0, 0, 0, 0.04))"
+		};
+		const assistHeadingStyle = {
+			margin: 0,
+			fontSize: 14,
+			lineHeight: "20px",
+			fontWeight: 600,
+			color: "var(--dsw-alias-label-primary)"
+		};
+		const assistPromptRowStyle = {
+			display: "flex",
+			flexWrap: "wrap",
+			alignItems: "flex-start",
+			gap: 8,
+			padding: "8px 9px 8px 11px",
+			borderRadius: 7,
+			background: "var(--dsw-alias-bg-layer-1)"
+		};
+		const assistPromptStyle = {
+			flex: "1 1 220px",
+			minWidth: 0,
+			margin: 0,
+			color: "var(--dsw-alias-label-primary)",
+			fontSize: 12,
+			lineHeight: "19px",
+			whiteSpace: "pre-wrap",
+			overflowWrap: "anywhere",
+			userSelect: "text"
+		};
+		const assistFeedbackStyle = {
+			margin: 0,
+			fontSize: 12,
+			lineHeight: "19px",
+			color: "var(--dsw-alias-label-secondary)"
+		};
+		/**
+		* Left half of one merged context/visibility row: the visibility checkbox (when
+		* the account has one) beside the model's name and rate. Kept as a flex span so
+		* the capacity column stays flush right no matter how long the name runs.
+		*/
+		const contextRowMainStyle = {
+			display: "flex",
+			alignItems: "center",
+			gap: 9,
+			minWidth: 0
+		};
 		const modelBadgeChipStyle = {
 			padding: "1px 8px",
 			borderRadius: 999,
@@ -455,26 +650,41 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
-		* Context capacity, listed in full.
+		* Context window and model visibility, one row per catalog model.
+		*
+		* The list is driven by the full current catalog, not by context metadata:
+		* hiding a model is a statement about the picker, and a model without a
+		* declared window is still hideable — its row just shows an em dash where the
+		* capacity would be. Rows with a window keep the original ordering (largest
+		* first); rows without one trail at the end in catalog order.
 		*
-		* Every model the upstream reports a capacity for, largest first. A one-line
-		* summary with the exceptions on hover was tried and rejected: capacity is
-		* reference data you scan by model, and hiding most of it behind a hover made
-		* the common case (a model you already have in mind) the hard one to look up.
+		* Each row is one <label>, so the checkbox is named by its row without a
+		* duplicated aria string. The checkbox state comes from the status document
+		* only — no optimistic flip — so a save that fails leaves the box where the
+		* host's truth says it is, next to the failure notice `control` records.
+		* Checkboxes render only when the document carries a visibility section (a
+		* signed-in account with a stable user id); a uid-less credential shows the
+		* plain capacity list rather than editing a bucket every such account would
+		* share.
 		*
-		* Purely a report of the upstream's own numbers. The plugin offers no tier
-		* picker: the CN catalog declares one capacity per model and publishes no
-		* alternatives, so a menu there would mean inventing client-side policy. The
-		* international document does declare alternatives (`supportedLengths`), and
-		* they are shown as a secondary figure rather than merged into one number —
+		* Purely a report of the upstream's own numbers otherwise. The plugin offers
+		* no tier picker: the CN catalog declares one capacity per model and publishes
+		* no alternatives, so a menu there would mean inventing client-side policy.
+		* The international document does declare alternatives (`supportedLengths`),
+		* and they are shown as a secondary figure rather than merged into one number —
 		* the default is the budget actually requested, while the larger value is a
 		* ceiling the upstream would accept.
 		*/
-		function ContextTable({ models, t, useMaximumContextWindow, disabled, onUseMaximumContextWindow }) {
-			const known = (models ?? []).filter((model) => model.contextWindow !== void 0).sort((a, b) => b.contextWindow - a.contextWindow);
-			const canSelectMaximum = known.some((model) => model.maxContextWindow !== void 0 && model.maxContextWindow > (model.defaultContextWindow ?? model.contextWindow ?? 0));
+		function ContextTable({ models, t, useMaximumContextWindow, contextPreferenceDisabled, onUseMaximumContextWindow, visibility, visibilityControlsDisabled, visibilityToggling, onVisibilityToggle }) {
+			const rows = [...models ?? []].sort((a, b) => {
+				if (a.contextWindow === void 0) return b.contextWindow === void 0 ? 0 : 1;
+				if (b.contextWindow === void 0) return -1;
+				return b.contextWindow - a.contextWindow;
+			});
+			const canSelectMaximum = rows.some((model) => model.maxContextWindow !== void 0 && model.maxContextWindow > (model.defaultContextWindow ?? model.contextWindow ?? 0));
 			const showPreference = onUseMaximumContextWindow !== void 0 && (canSelectMaximum || useMaximumContextWindow === true);
-			if (known.length === 0 && !showPreference) return null;
+			if (rows.length === 0 && !showPreference) return null;
+			const hidden = new Set(visibility?.disabled ?? []);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				style: quotaListStyle,
 				children: [
@@ -487,7 +697,7 @@ window.__ModuleLoader__.load({
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 							type: "checkbox",
 							checked: useMaximumContextWindow === true,
-							disabled,
+							disabled: contextPreferenceDisabled,
 							onChange: (event) => {
 								onUseMaximumContextWindow(event.currentTarget.checked);
 							}
@@ -499,25 +709,65 @@ window.__ModuleLoader__.load({
 							})]
 						})]
 					}) : null,
-					known.map((model) => {
-						const capacity = model.contextWindow;
-						const alternative = model.maxContextWindow !== void 0 && model.maxContextWindow > capacity ? model.maxContextWindow : void 0;
-						return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							style: quotaLabelStyle,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-								style: modelOfferStyle,
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									style: { textAlign: "right" },
-									children: formatTokens(capacity)
-								}), alternative !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									style: modelRateStyle,
-									children: t("contextUpTo", { size: formatTokens(alternative) })
-								}) : model.defaultContextWindow !== void 0 && model.defaultContextWindow < capacity ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									style: modelRateStyle,
-									children: t("contextDefault", { size: formatTokens(model.defaultContextWindow) })
-								}) : null]
-							})]
-						}, model.id);
+					visibility === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: bodyStyle,
+						children: t("visibilityIntro")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						style: quotaGroupStyle,
+						children: rows.map((model) => {
+							const capacity = model.contextWindow;
+							const alternative = capacity !== void 0 && model.maxContextWindow !== void 0 && model.maxContextWindow > capacity ? model.maxContextWindow : void 0;
+							return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								style: quotaLabelStyle,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+									style: contextRowMainStyle,
+									children: [visibility === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: !hidden.has(model.id),
+										disabled: visibilityControlsDisabled || visibilityToggling.has(model.id),
+										onChange: (event) => {
+											onVisibilityToggle?.(model.id, event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+										style: modelOfferStyle,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											style: modelBadgeStyle,
+											children: [
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }),
+												model.badges?.map((badge) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: modelBadgeChipStyle,
+													children: modelBadgeLabel(badge, t)
+												}, badge)),
+												model.free === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: modelBadgeChipStyle,
+													children: t("freeModel")
+												}) : null
+											]
+										}), model.credits === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											style: modelRateStyle,
+											children: model.credits
+										})]
+									})]
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+									style: modelOfferStyle,
+									children: [capacity === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: modelRateStyle,
+										"aria-label": t("contextUnknown"),
+										children: "—"
+									}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { textAlign: "right" },
+										children: formatTokens(capacity)
+									}), alternative !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: modelRateStyle,
+										children: t("contextUpTo", { size: formatTokens(alternative) })
+									}) : capacity !== void 0 && model.defaultContextWindow !== void 0 && model.defaultContextWindow < capacity ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: modelRateStyle,
+										children: t("contextDefault", { size: formatTokens(model.defaultContextWindow) })
+									}) : null]
+								})]
+							}, model.id);
+						})
 					})
 				]
 			});
@@ -543,7 +793,7 @@ window.__ModuleLoader__.load({
 		*   parameter ("this model does not check it"), never as a statement that a
 		*   level is unsupported.
 		*/
-		function ProbeSection({ probe, t, onDetect, onClear, busy }) {
+		function ProbeSection({ probe, models, t, onDetect, onClear, busy }) {
 			const [pending, setPending] = (0, react.useState)();
 			const [runningModel, setRunningModel] = (0, react.useState)();
 			(0, react.useEffect)(() => {
@@ -590,7 +840,7 @@ window.__ModuleLoader__.load({
 						style: quotaGroupStyle,
 						children: probe.candidates.map((id) => {
 							const result = probe.results.find((entry) => entry.id === id);
-							const name = result?.name ?? id;
+							const name = models?.find((model) => model.id === id)?.name ?? result?.name ?? id;
 							return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: modelOfferStyle,
 								children: [
@@ -608,7 +858,7 @@ window.__ModuleLoader__.load({
 												onClick: () => {
 													setPending(id);
 												},
-												children: runningModel === id ? t("probeRunning", { model: id }) : t(result === void 0 ? "probeStart" : "probeRedetect")
+												children: runningModel === id ? t("probeRunning", { model: name }) : t(result === void 0 ? "probeStart" : "probeRedetect")
 											})]
 										})]
 									}),
@@ -688,6 +938,17 @@ window.__ModuleLoader__.load({
 			*/
 			const [readFailure, setReadFailure] = (0, react.useState)();
 			const [busy, setBusy] = (0, react.useState)(false);
+			/**
+			* The model ids whose visibility writes are in flight, empty when none are.
+			* Deliberately NOT the card-wide `busy` (that flag drives the Refresh
+			* buttons' labels, which must not claim a refresh the user never pressed)
+			* and deliberately per-row rather than whole-list: a visibility write only
+			* adds or removes one model's id, so the rows are independent — locking
+			* every checkbox for one row's write made the whole list visibly blink for
+			* no correctness gain. A set, because two writes can be open at once when
+			* the user moves down the list; only the rows being written lock.
+			*/
+			const [togglingModels, setTogglingModels] = (0, react.useState)(() => /* @__PURE__ */ new Set());
 			const [tab, setTab] = (0, react.useState)("status");
 			const mounted = (0, react.useRef)(true);
 			/**
@@ -843,14 +1104,16 @@ window.__ModuleLoader__.load({
 			const control = (0, react.useCallback)(async (action) => {
 				const key = status?.status === "signed-in" ? status.probeKey : void 0;
 				if (key === void 0) return;
-				setBusy(true);
+				const visibility = action.action === "set-model-visibility";
+				if (visibility) setTogglingModels((previous) => new Set(previous).add(action.model));
+				else setBusy(true);
 				const controller = trackController();
 				try {
 					const response = await fetch(variant.probePath, {
 						method: "POST",
 						headers: {
 							"Content-Type": "application/json",
-							"X-WorkBuddy-Probe-Key": key
+							"X-Workbuddy-Probe-Key": key
 						},
 						credentials: "same-origin",
 						signal: controller.signal,
@@ -861,7 +1124,12 @@ window.__ModuleLoader__.load({
 						const message = typeof value === "object" && value !== null && "error" in value ? String(value["error"]) : `HTTP ${response.status}`;
 						throw new Error(message);
 					}
-					if (action.action === "set-maximum-context-window" && (typeof value !== "object" || value === null || value["state"] !== "updated")) {
+					if ((action.action === "set-maximum-context-window" || action.action === "set-model-visibility") && (typeof value !== "object" || value === null || value["state"] !== "updated")) {
+						const state = typeof value === "object" && value !== null ? value["state"] : void 0;
+						if (action.action === "set-model-visibility" && state === "stale-account") {
+							await refresh(controller.signal);
+							throw new Error(t("visibilityStaleAccount"));
+						}
 						const reason = typeof value === "object" && value !== null && "reason" in value ? String(value["reason"]) : t("requestFailed");
 						throw new Error(reason);
 					}
@@ -870,7 +1138,13 @@ window.__ModuleLoader__.load({
 					if (mounted.current && controller.signal.aborted !== true) setReadFailure(error instanceof Error ? error.message : t("requestFailed"));
 				} finally {
 					manualControllers.current.delete(controller);
-					if (mounted.current) setBusy(false);
+					if (!mounted.current) return;
+					if (visibility) setTogglingModels((previous) => {
+						const next = new Set(previous);
+						next.delete(action.model);
+						return next;
+					});
+					else setBusy(false);
 				}
 			}, [
 				refresh,
@@ -890,6 +1164,13 @@ window.__ModuleLoader__.load({
 				});
 			}, [control]);
 			const title = t(variant.titleKey);
+			/**
+			* The failure the assist block covers, when this document has one. Computed
+			* once so the block and the header's refresh button agree on whether the
+			* block owns the re-check action — showing both would put two buttons with
+			* the same effect side by side.
+			*/
+			const assistCode = status?.status === "signed-out" && isWorkBuddySignedOutReasonCode(status.reasonCode) && ASSIST_REASON_CODES.includes(status.reasonCode) ? status.reasonCode : void 0;
 			const label = status === void 0 ? t("loading") : status.status === "signed-in" ? status.nickname === void 0 ? t("signedInAs", { nickname: "" }).trimEnd().replace(/[:：]$/, "") : t("signedInAs", { nickname: status.nickname }) : status.status === "error" ? t("requestFailed") : t("signedOut");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				style: cardStyle,
@@ -935,7 +1216,7 @@ window.__ModuleLoader__.load({
 									"aria-hidden": "true",
 									style: dotStyle(status === void 0 ? "loading" : status.status)
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label })]
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							}), assistCode === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
 								style: buttonStyle$1,
 								disabled: busy,
@@ -943,7 +1224,7 @@ window.__ModuleLoader__.load({
 									manualRefresh();
 								},
 								children: busy ? t("refreshing") : t("refresh")
-							})]
+							}) : null]
 						}),
 						readFailure === void 0 || signedIn === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: errorStyle,
@@ -1019,6 +1300,7 @@ window.__ModuleLoader__.load({
 									}),
 									status.probe === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ProbeSection, {
 										probe: status.probe,
+										models: status.models,
 										t,
 										busy,
 										onDetect: confirmDetect,
@@ -1032,14 +1314,27 @@ window.__ModuleLoader__.load({
 								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ContextTable, {
 									models: status.models,
 									t,
-									disabled: busy,
-									...status.useMaximumContextWindow === void 0 ? {} : { useMaximumContextWindow: status.useMaximumContextWindow },
-									...variant.id === AI_CARD_VARIANT.id ? { onUseMaximumContextWindow: (enabled) => {
+									contextPreferenceDisabled: busy,
+									...variant.id === AI_CARD_VARIANT.id && status.useMaximumContextWindow !== void 0 ? {
+										useMaximumContextWindow: status.useMaximumContextWindow,
+										onUseMaximumContextWindow: (enabled) => {
+											control({
+												action: "set-maximum-context-window",
+												enabled
+											});
+										}
+									} : {},
+									visibility: status.visibility,
+									visibilityControlsDisabled: busy,
+									visibilityToggling: togglingModels,
+									onVisibilityToggle: (modelId, visible) => {
 										control({
-											action: "set-maximum-context-window",
-											enabled
+											action: "set-model-visibility",
+											model: modelId,
+											visible,
+											account: status.visibility?.account ?? ""
 										});
-									} } : {}
+									}
 								})
 							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: tabPanelStyle,
@@ -1067,10 +1362,18 @@ window.__ModuleLoader__.load({
 								})]
 							})
 						] }) : null,
-						status?.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						status?.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: status.reason === void 0 ? bodyStyle : errorStyle,
 							children: status.reason ?? t(variant.signedOutKey)
-						}) : null,
+						}), assistCode === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AssistBlock, {
+							t,
+							variant,
+							code: assistCode,
+							busy,
+							onRecheck: () => {
+								manualRefresh();
+							}
+						})] }) : null,
 						status?.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: errorStyle,
 							children: status.message
@@ -1510,6 +1813,44 @@ window.__ModuleLoader__.load({
 			return t("probeNoteUnknown");
 		}
 		//#endregion
+		//#region src/client/WorkBuddyConfigPage.tsx
+		/**
+		* The cards' list; the page supplies no other chrome. A semantic `<ul>` —
+		* each card below is an `<li>` — with the user-agent list defaults cleared so
+		* only the column/gap rhythm remains, keeping the layout identical to the
+		* flex column it replaced while giving the page real list semantics.
+		*/
+		const pageStyle = {
+			display: "flex",
+			flexDirection: "column",
+			gap: 12,
+			listStyle: "none",
+			margin: 0,
+			padding: 0
+		};
+		/**
+		* Render the bundle's configuration: one status card per WorkBuddy variant.
+		*
+		* Both variants share one page. DSH 0.1.6 replaced the settings section's
+		* keyed `settings.plugin.item` slot — dispatched once per served settings
+		* namespace, which is why the two variants used to be two cards — with the
+		* Plugins page's `plugins.bundle.config`, keyed by the bundle's package name.
+		* A bundle therefore carries exactly one configuration entry, so the cards are
+		* stacked here instead of being dispatched separately. (The 0.1.5 settings tab
+		* and its two dispatched cards still exist on 0.1.5 hosts; this page only
+		* mounts where the Plugins page declares its slot.)
+		*/
+		function WorkBuddyConfigPage({ view, t }) {
+			if (view === "summary") return t("intro");
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+				style: pageStyle,
+				children: CARD_VARIANTS.map((variant) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WorkBuddyPluginCard, {
+					t,
+					variant
+				}, variant.id))
+			});
+		}
+		//#endregion
 		//#region src/client/locales.ts
 		/** Plugin-card copy registered under the settings.workbuddy locale namespace. */
 		const en = {
@@ -1557,8 +1898,11 @@ window.__ModuleLoader__.load({
 			contextHeading: "Context window",
 			contextUpTo: "up to {size}",
 			contextDefault: "default {size}",
+			contextUnknown: "no declared context window",
 			useMaximumContextWindow: "Use the largest declared context window",
 			useMaximumContextWindowHint: "Applies to WorkBuddy AI models that offer a larger window.",
+			visibilityIntro: "Uncheck a model to hide it from the model picker. Saved per signed-in account; chats already using a hidden model keep working.",
+			visibilityStaleAccount: "The signed-in account changed — this change was not saved.",
 			freeModel: "Free",
 			badgeLimitedFree: "Limited-time free",
 			badgeNightDiscount: "Night discount",
@@ -1593,7 +1937,22 @@ window.__ModuleLoader__.load({
 			probeResultUnknown: "Detection did not complete",
 			probeResultAt: "Detected {time}",
 			probeResultEmpty: "No detectable models right now.",
-			probeFailed: "Detection failed: {message}"
+			probeFailed: "Detection failed: {message}",
+			assistantHeading: "Let an Agent sort this out",
+			assistantIntro: "Send the request below to your Agent; it will check the app location and the launch configuration for you.",
+			assistantCopy: "Copy for Agent",
+			assistantCopied: "Copied",
+			assistantCopyFailed: "Copy failed — select the text above and copy it manually",
+			assistantAfter: "When your Agent is done, come back and check again. If the DSH launch environment was changed, restart DSH first as instructed.",
+			assistantRecheck: "Done — check again",
+			assistantRechecking: "Checking…",
+			assistantPrompt: "DSH's dsh-workbuddy-connect cannot use my {appName}: {failureSummary}. Please check the actual installation location and any existing path configuration, help the plugin use it correctly, and verify recovery. If the DSH launch environment must be changed or DSH restarted, give me clear steps; do not only set an environment variable temporarily in the current shell.",
+			assistNotFound: "no usable decryption program was found",
+			assistAmbiguous: "more than one WorkBuddy copy was found and none could be chosen safely",
+			assistIncomplete: "the automatic search could not be completed",
+			assistPathInvalid: "the configured program path is not usable",
+			assistUnavailableCN: "no decryption program is configured for this platform",
+			assistUnavailableAI: "no decryption program is configured for WorkBuddy AI"
 		};
 		const zh = {
 			title: "DSH WorkBuddy Connect",
@@ -1640,8 +1999,11 @@ window.__ModuleLoader__.load({
 			contextHeading: "上下文窗口",
 			contextUpTo: "最高 {size}",
 			contextDefault: "默认 {size}",
+			contextUnknown: "未声明上下文窗口",
 			useMaximumContextWindow: "使用上游声明的最大上下文窗口",
 			useMaximumContextWindowHint: "仅作用于 WorkBuddy AI 中声明了更大窗口的模型。",
+			visibilityIntro: "取消勾选即可在模型选择器中隐藏该模型；按当前登录账号分别保存，已在用该模型的会话不受影响。",
+			visibilityStaleAccount: "登录账号已切换——本次修改未保存。",
 			freeModel: "免费",
 			badgeLimitedFree: "限时免费",
 			badgeNightDiscount: "夜间折扣",
@@ -1676,23 +2038,48 @@ window.__ModuleLoader__.load({
 			probeResultUnknown: "检测未完成",
 			probeResultAt: "检测于 {time}",
 			probeResultEmpty: "当前没有可检测的模型。",
-			probeFailed: "检测失败：{message}"
+			probeFailed: "检测失败：{message}",
+			assistantHeading: "让 Agent 帮你处理",
+			assistantIntro: "把下面这段请求发给你的 Agent，它会协助检查应用位置和启动配置。",
+			assistantCopy: "复制给 Agent",
+			assistantCopied: "已复制",
+			assistantCopyFailed: "复制失败，请手动选择上方文字复制",
+			assistantAfter: "Agent 处理完成后，回到这里重新检查；如果修改了 DSH 的启动环境，请先按指引重启 DSH。",
+			assistantRecheck: "已处理，重新检查",
+			assistantRechecking: "正在检查…",
+			assistantPrompt: "DSH 的 dsh-workbuddy-connect 无法使用我的 {appName}：{failureSummary}。请帮我检查实际安装位置和已有路径配置，让插件能正确使用它，并验证恢复结果；如果需要修改 DSH 的启动环境或重启，请给我明确的操作步骤，不要只在当前 shell 临时设置环境变量。",
+			assistNotFound: "没有找到可用的解密程序",
+			assistAmbiguous: "找到了多个 WorkBuddy 副本，无法安全自动选择",
+			assistIncomplete: "自动定位未能完成",
+			assistPathInvalid: "指定的程序路径不可用",
+			assistUnavailableCN: "当前平台尚未配置解密程序",
+			assistUnavailableAI: "尚未配置 WorkBuddy AI 的解密程序"
 		};
 		//#endregion
 		//#region src/client/index.tsx
 		/** Stable browser-plugin name. */
 		const name = "dsh-workbuddy-connect-client";
 		/**
-		* Client services required by the Plugin configuration contribution.
+		* The bundle's package name, which is also this half's configuration key.
+		*
+		* The Plugins page dispatches `plugins.bundle.config` by the bundle's package
+		* name, so the key has to spell exactly what the profile installs.
+		*/
+		const BUNDLE_NAME = "dsh-workbuddy-connect";
+		/**
+		* Client services required by this browser half.
 		*
 		* DSH 0.1.2 removed `@deepseek-ai/dsh-client-runtime` (the package that used to
-		* hold the browser `ClientContext` alias and the `slots` service). The services
-		* this card relies on now come from narrower packages: the `slots` registry
-		* moved to `@deepseek-ai/dsh-client-ui-renderer`, `locale` stayed in
-		* `@deepseek-ai/dsh-client-locale`, and the `settings.plugin.item` slot is
-		* declared by `@deepseek-ai/dsh-client-ui-settings-plugins`. All three are
-		* named in the package's `dsh.client.inject` list, so cordis has activated
-		* them before this plugin's fiber starts.
+		* hold the browser `ClientContext` alias and the `slots` service), so the
+		* services come from narrower packages: the `slots` registry lives in
+		* `@deepseek-ai/dsh-client-ui-renderer` and `locale` in
+		* `@deepseek-ai/dsh-client-locale`. Neither slot owner is named here on
+		* purpose: `settings.plugin.item`'s declarer (`…-ui-settings-plugins`) is
+		* absent from 0.1.6+ hosts and `plugins.bundle.config`'s declarer
+		* (`…-ui-plugin-manager`) is absent from 0.1.5 hosts, and the seam choice is
+		* made by slot-declaration lifetime, not by activation order — `ctx.slots.inject`
+		* fires whenever the declaring package commits the slot, before or after this
+		* fiber starts.
 		*/
 		const inject = [
 			"slots",
@@ -1700,57 +2087,105 @@ window.__ModuleLoader__.load({
 			"remote",
 			"remote.session"
 		];
+		/** Prefix every guarded client contribution's degradation logs with this. */
+		const CLIENT_CONTRIBUTION_FAILED = "[dsh-workbuddy-connect] client contribution failed to load (host provider unaffected):";
+		/** Disposer handed back when a deferred registration degraded: nothing to undo. */
+		const NOOP_DISPOSER = () => {};
 		/**
-		* Register card copy and the WorkBuddy card under Plugin configuration.
+		* Run ONE browser-side contribution, degrading its failure to a `console.error`
+		* instead of throwing into the DSH loader. Returns the contribution's own
+		* value on success, or `undefined` when it degraded — the deferred slot
+		* callbacks below substitute `NOOP_DISPOSER` for that, because the slot
+		* runtime always expects a disposer back.
 		*
-		* The entire body is wrapped so that a DSH slot-API breaking change (for
-		* example the rc.6→rc.7 `id`→`key` / `order`→`priority` rename) degrades
-		* to a `console.error` instead of throwing into the DSH loader and raising
-		* the red "Failed to load plugins" banner. The host provider keeps working:
-		* the `workbuddy` model channel is unaffected, and `dsh-workbuddy-connect
-		* status` reports host health via the heartbeat file.
+		* Every contribution is guarded at BOTH boundaries where it can throw:
 		*
-		* NOTE: the try/catch boundary of this function is mirrored (duplicated) in
-		* `tests/client-fallback.spec.ts`, because the real client entry imports
-		* browser-only DSH packages that cannot load in the Node test environment.
-		* That test therefore does not import this function — it replicates its
-		* shape. If you change the guarded body or the `console.error` message here,
-		* update the mirrored `apply()` in that spec too, or the fallback test will
-		* silently diverge from this real implementation.
+		* 1. the eager `ctx.slots.inject(...)` / `ctx.inject(...)` call itself, which
+		*    runs synchronously inside `apply()` — e.g. a slot-API shape break such as
+		*    the rc.6→rc.7 `id`→`key` rename;
+		* 2. the deferred callback, which the slot runtime invokes later — when the
+		*    owner commits the slot's declaration, or when the injected services
+		*    arrive — long after `apply()` has returned, where no enclosing try/catch
+		*    could still catch it.
+		*
+		* The pair is what makes the contributions independent: a failure in one
+		* settings seam, or in the probe control, leaves every other registration
+		* intact. Guards are for THIS browser half only; the host half reports its own
+		* errors through `ctx.logger`.
 		*/
-		function apply(ctx) {
+		function guardClientContribution(label, fn) {
 			try {
-				const namespace = "settings.workbuddy";
+				return fn();
+			} catch (error) {
+				console.error(`${CLIENT_CONTRIBUTION_FAILED} ${label}`, error);
+				return;
+			}
+		}
+		/**
+		* Register the card copy and both settings-surface seams, one guarded
+		* contribution at a time.
+		*
+		* A DSH slot-API breaking change degrades to a `console.error` per
+		* contribution instead of throwing into the DSH loader and raising the red
+		* "Failed to load plugins" banner; because each contribution carries its own
+		* guard, one failing registration never takes the others with it (the old
+		* settings cards survive a broken Plugins-page seam, and the probe control
+		* survives either). The host provider keeps working throughout: the
+		* `workbuddy` model channel is unaffected, and `dsh-workbuddy-connect status`
+		* reports host health via the heartbeat file.
+		*
+		* The tests import this function directly (`tests/client-fallback.spec.ts`),
+		* so its isolation semantics are pinned against the real entry — keep any
+		* change to the guarded structure in sync with that spec.
+		*/
+		function apply(ctx) {
+			const namespace = "settings.workbuddy";
+			guardClientContribution("settings copy", () => {
 				ctx.effect(() => ctx.locale.register(namespace, {
 					zh,
 					en
 				}), "dsh-workbuddy-connect: settings copy");
-				const t = ctx.locale.bind(namespace);
-				for (const [index, variant] of CARD_VARIANTS.entries()) ctx.slots.inject("settings.plugin.item", () => ctx.slots.register({
-					name: "settings.plugin.item",
-					key: variant.id,
-					priority: 30 - index,
-					inject: () => ({
-						t,
-						variant
-					})
-				}, WorkBuddyPluginCard));
-				ctx.inject(["modelDirectories"], (scope) => {
-					scope.slots.inject("conversation.input.right", () => scope.slots.register({
-						name: "conversation.input.right",
-						id: "workbuddy-probe",
-						order: 10,
-						inject: (sessionId) => ({
-							directory: scope.modelDirectories.directoryFor(sessionId).store,
-							t
+			});
+			const t = ctx.locale.bind(namespace);
+			for (const [index, variant] of CARD_VARIANTS.entries()) {
+				const label = `settings.plugin.item card "${variant.id}"`;
+				guardClientContribution(label, () => {
+					ctx.slots.inject("settings.plugin.item", () => guardClientContribution(label, () => ctx.slots.register({
+						name: "settings.plugin.item",
+						key: variant.id,
+						priority: 30 - index,
+						inject: () => ({
+							t,
+							variant
 						})
-					}, WorkBuddyProbeControl));
+					}, WorkBuddyPluginCard)) ?? NOOP_DISPOSER);
 				});
-			} catch (error) {
-				console.error("[dsh-workbuddy-connect] client card failed to load (host provider unaffected):", error);
 			}
+			guardClientContribution("plugins.bundle.config page", () => {
+				ctx.slots.inject("plugins.bundle.config", () => guardClientContribution("plugins.bundle.config page", () => ctx.slots.register({
+					name: "plugins.bundle.config",
+					key: "dsh-workbuddy-connect",
+					locale: namespace
+				}, WorkBuddyConfigPage)) ?? NOOP_DISPOSER);
+			});
+			guardClientContribution("conversation probe control", () => {
+				ctx.inject(["modelDirectories"], (scope) => {
+					guardClientContribution("conversation probe control", () => {
+						scope.slots.inject("conversation.input.right", () => guardClientContribution("conversation probe control", () => scope.slots.register({
+							name: "conversation.input.right",
+							id: "workbuddy-probe",
+							order: 10,
+							inject: (sessionId) => ({
+								directory: scope.modelDirectories.directoryFor(sessionId).store,
+								t
+							})
+						}, WorkBuddyProbeControl)) ?? NOOP_DISPOSER);
+					});
+				});
+			});
 		}
 		//#endregion
+		exports.BUNDLE_NAME = BUNDLE_NAME;
 		exports.apply = apply;
 		exports.inject = inject;
 		exports.name = name;