dsh-workbuddy-xdpool 1.6.1 → 1.7.0

package/lib/index.d.ts

@@ -1413,7 +1413,7 @@ export declare class WorkBuddyScheduler {
    * long before the settings section exists; a ledger written before that point
    * would have nowhere to go.
    */
-  setEarningsPersistence(save: (ledger: AutomationLedger) => void): void;
+  setEarningsPersistence(save: (ledger: AutomationLedger) => void | Promise<void>): void;
   /**
    * Fold a previously persisted ledger back in, when it belongs to today.
    *
@@ -2158,6 +2158,14 @@ export declare const modelSelectionKeyFor: (region: 'cn' | 'global') => string;
  * also why `contextBudgets` is a real dictionary (`z.dict`) - an open object
  * schema reads as "an object with no fields" and the fold then throws while
  * the provider row is rendered.
+ *
+ * Every field is wrapped in {@link asVolatile}: on the 0.1.7 line the settings
+ * write gate refuses an entry whose schema declares no volatile field at all
+ * ("Plugin entry ... has no volatile fields") and `describe()` skips such an
+ * entry — so an unmarked schema means the card can neither render nor save. On
+ * the 0.1.5 line the wrapper degrades to an identity no-op (see its JSDoc), and
+ * the value the running instance reads is a plain value either way once
+ * unwrapped.
  */
 export declare const Config: z<Config>;
 /** Everything the CLI needs from a live plugin instance. */

package/lib/index.js

@@ -1747,8 +1747,20 @@ const AAD_DOMAIN = Buffer.from("WB-AAD\0", "ascii");
 const SYMMETRIC_SCHEME = "sym-v1";
 /** Env override pointing at the WorkBuddy desktop executable. */
 const WORKBUDDY_APP_EXECUTABLE_ENV = "WORKBUDDY_APP_EXECUTABLE";
-/** How long the app is given to answer with its key payload. */
-const KEY_FETCH_TIMEOUT_MS = 1e4;
+/**
+* How long the app is given to answer with its key payload.
+*
+* 30s, not 10s: the child is the WorkBuddy Electron binary running as plain
+* Node, and its FIRST spawn on a cold machine costs several seconds on its own
+* (measured 4.5s here) before the endpoint security stack has warmed its scan
+* cache. Under load — a concurrent `pnpm install` from the market, a running
+* full-disk scan — that first spawn crosses a 10s budget, the fetch rejects,
+* `readAtRestKey` returns undefined, and every encrypted credential then reads
+* as `WorkBuddyEncryptedCredentialError` until the 60s negative cache expires.
+* A successful fetch is cached for the process lifetime, so the longer budget
+* is only ever paid once per process, and only when the app is present but slow.
+*/
+const KEY_FETCH_TIMEOUT_MS = 3e4;
 /**
 * Executable file names the desktop app ships under, in probe order.
 *
@@ -2003,6 +2015,7 @@ function windowsFallbackAppPaths(env) {
 		}
 		roots.add(join(drive, "Program Files"));
 		roots.add(join(drive, "Program Files (x86)"));
+		roots.add(drive);
 	}
 	for (const root of roots) for (const name of APP_EXECUTABLE_NAMES) {
 		out.push(join(root, "WorkBuddy", name));
@@ -4160,12 +4173,16 @@ var WorkBuddyScheduler = class {
 	*/
 	persistEarnings() {
 		if (this.saveEarningsFn === void 0) return;
+		const accounts = {};
+		for (const [id, entry] of this.earnings) accounts[id] = entry;
+		const ledger = {
+			date: this.earningsDate,
+			accounts
+		};
 		try {
-			const accounts = {};
-			for (const [id, entry] of this.earnings) accounts[id] = entry;
-			this.saveEarningsFn({
-				date: this.earningsDate,
-				accounts
+			const saved = this.saveEarningsFn(ledger);
+			if (saved !== void 0 && typeof saved.then === "function") saved.then(void 0, (error) => {
+				this.logger.warn?.("dsh-workbuddy-xdpool: could not persist automation earnings:", error);
 			});
 		} catch (error) {
 			this.logger.warn?.("dsh-workbuddy-xdpool: could not persist automation earnings:", error);
@@ -5962,6 +5979,56 @@ function automationOptions(automation) {
 * region that has never been saved stays absent so `applyConfigFromSource` can
 * fall back to the legacy flat keys.
 */
+function asVolatile(schema) {
+	const candidate = schema;
+	return typeof candidate.volatile === "function" ? candidate.volatile() : schema;
+}
+/**
+* Peel one live volatile reference.
+*
+* On 0.1.7 a volatile field is handed back as `{ get(): T }` rather than a
+* plain value, so a running instance observes a settings edit without being
+* remounted. Every read of a marked field therefore has to unwrap: passing the
+* reference onward compares an object against a string and reports the field as
+* unset. On 0.1.5 the field is already a plain value, so this is a no-op.
+*
+* The test is duck-typed on purpose — importing `isVolatile` would add a
+* dependency the 0.1.5 line does not carry.
+*/
+function unwrapVolatile(value) {
+	if (value !== null && typeof value === "object" && typeof value.get === "function") return value.get();
+	return value;
+}
+/**
+* Deep copy of a config value with every live `{get(): T}` reference replaced
+* by the value it resolves to.
+*
+* {@link unwrapVolatile} peels only the one level an ordinary read needs. A
+* settings service is different: it validates and `structuredClone`s the WHOLE
+* object, so a reference surviving anywhere inside it fails schema validation
+* with a message that names the field but not the cause —
+* `$.authFile expected string but got [object Object]`. That is what makes the
+* namespace fail to register and the card silently disappear, which is why the
+* object handed to `installSection` goes through this first.
+*/
+function unwrapVolatileDeep(value) {
+	const peeled = unwrapVolatile(value);
+	if (Array.isArray(peeled)) return peeled.map((entry) => unwrapVolatileDeep(entry));
+	if (peeled !== null && typeof peeled === "object") {
+		const out = {};
+		for (const [key, entry] of Object.entries(peeled)) out[key] = unwrapVolatileDeep(entry);
+		return out;
+	}
+	return peeled;
+}
+/**
+* One region's model-selection schema.
+*
+* Every field is optional on purpose: an absent field keeps its documented
+* meaning ("all enabled" / "follow the upstream image flag" / "no cap"), and a
+* region that has never been saved stays absent so `applyConfigFromSource` can
+* fall back to the legacy flat keys.
+*/
 const modelSelectionSchema = z.object({
 	enabledModelIds: z.array(z.string()).description("Model ids enabled in this region's picker (absent = all)"),
 	imageModelIds: z.array(z.string()).description("Model ids accepting image input in this region (absent = follow upstream)"),
@@ -5999,24 +6066,32 @@ const modelSelectionKeyFor = (region) => region === "cn" ? "modelSelectionCn" :
 * also why `contextBudgets` is a real dictionary (`z.dict`) - an open object
 * schema reads as "an object with no fields" and the fold then throws while
 * the provider row is rendered.
+*
+* Every field is wrapped in {@link asVolatile}: on the 0.1.7 line the settings
+* write gate refuses an entry whose schema declares no volatile field at all
+* ("Plugin entry ... has no volatile fields") and `describe()` skips such an
+* entry — so an unmarked schema means the card can neither render nor save. On
+* the 0.1.5 line the wrapper degrades to an identity no-op (see its JSDoc), and
+* the value the running instance reads is a plain value either way once
+* unwrapped.
 */
 const Config = z.object({
-	authFile: z.string().description("WorkBuddy desktop auth file (defaults to the app own location)"),
-	cooldownMs: z.number().step(1).min(1e3).default(6e4).description("Rate-limit cooldown per account, in milliseconds"),
-	distribution: z.union([
+	authFile: asVolatile(z.string().description("WorkBuddy desktop auth file (defaults to the app own location)")),
+	cooldownMs: asVolatile(z.number().step(1).min(1e3).default(6e4).description("Rate-limit cooldown per account, in milliseconds")),
+	distribution: asVolatile(z.union([
 		"priority",
 		"round-robin",
 		"balanced"
-	]).default("priority").description("How requests are spread: priority (drain one), round-robin (in order), or balanced (idle-weighted random)"),
-	disabledAccountIds: z.array(z.string()).default([]).description("Account ids excluded from the pool (empty = every discovered account participates)"),
-	creditReserves: z.dict(z.number().step(1).min(0)).default({}).description("Per-account credit floor: stop using an account once its balance reaches this value"),
-	enabledModelIds: z.array(z.string()).default([]).description("Legacy shared model-id list; used by a region that has no per-region selection yet"),
-	imageModelIds: z.array(z.string()).default([]).description("Legacy shared image-id list; used by a region that has no per-region selection yet"),
-	contextBudgets: z.dict(z.number().step(1).min(1)).default({}).description("Legacy shared context budgets; used by a region with no per-region selection yet"),
-	modelSelectionCn: modelSelectionSchema.description("Model selection for the domestic gateway"),
-	modelSelectionGlobal: modelSelectionSchema.description("Model selection for the international gateway"),
-	automation: automationSchema.description("Daily points automation (activity report, task claiming, check-in)"),
-	automationEarnings: z.any().description("Automation earnings ledger (written by the scheduler)")
+	]).default("priority").description("How requests are spread: priority (drain one), round-robin (in order), or balanced (idle-weighted random)")),
+	disabledAccountIds: asVolatile(z.array(z.string()).default([]).description("Account ids excluded from the pool (empty = every discovered account participates)")),
+	creditReserves: asVolatile(z.dict(z.number().step(1).min(0)).default({}).description("Per-account credit floor: stop using an account once its balance reaches this value")),
+	enabledModelIds: asVolatile(z.array(z.string()).default([]).description("Legacy shared model-id list; used by a region that has no per-region selection yet")),
+	imageModelIds: asVolatile(z.array(z.string()).default([]).description("Legacy shared image-id list; used by a region that has no per-region selection yet")),
+	contextBudgets: asVolatile(z.dict(z.number().step(1).min(1)).default({}).description("Legacy shared context budgets; used by a region with no per-region selection yet")),
+	modelSelectionCn: asVolatile(modelSelectionSchema.description("Model selection for the domestic gateway")),
+	modelSelectionGlobal: asVolatile(modelSelectionSchema.description("Model selection for the international gateway")),
+	automation: asVolatile(automationSchema.description("Daily points automation (activity report, task claiming, check-in)")),
+	automationEarnings: asVolatile(z.any().description("Automation earnings ledger (written by the scheduler)"))
 });
 /** Live API, published for the CLI. */
 let api;
@@ -6073,10 +6148,21 @@ function apply(ctx, config = {}) {
 	/** The domestic adapter, published for the CLI after registration. */
 	let builtAdapter;
 	let invalidateCatalog = () => {};
-	let current = () => config;
+	/**
+	* The effective config with every live volatile reference peeled.
+	*
+	* On 0.1.7 a field marked volatile is handed to the plugin as `{get(): T}` so
+	* a settings edit is observed without a remount, and the loader keeps the
+	* reference live. Every read below therefore goes through this view: a raw
+	* reference compared against a string reports the field as unset, which is
+	* how a saved reserve would read back as "0" while the file holds the value.
+	* On 0.1.5 there is nothing to peel and this is the identity.
+	*/
+	let rawCurrent = () => config;
+	const current = () => unwrapVolatileDeep(rawCurrent());
 	const sectionHooks = {
 		setSource(source) {
-			current = source;
+			rawCurrent = source;
 		},
 		onChange() {
 			applyConfigFromSource();
@@ -6102,8 +6188,12 @@ function apply(ctx, config = {}) {
 		core.scheduler.applyConfig(automationOptions(automation));
 	};
 	const settingsService = ctx.settings;
-	if (typeof settingsService.installSection === "function") settingsService.installSection(ctx, WORKBUDDY_POOL_SETTINGS_NS, Config, config, sectionHooks);
-	else ctx.logger.warn?.("dsh-workbuddy-xdpool: settings service has no installSection; card will not mount");
+	if (typeof settingsService.installSection === "function") settingsService.installSection(ctx, WORKBUDDY_POOL_SETTINGS_NS, Config, unwrapVolatileDeep(config), sectionHooks);
+	if (typeof settingsService.configure === "function") ctx.effect(() => settingsService.configure?.({ auto: true }, ctx.fiber) ?? (() => {}));
+	if (typeof settingsService.installSection !== "function" && typeof settingsService.configure !== "function") ctx.logger.warn?.("dsh-workbuddy-xdpool: settings service exposes neither installSection nor configure; the card will not mount");
+	ctx.on("loader/volatile-update", () => {
+		applyConfigFromSource();
+	});
 	/**
 	* Write one key of the plugin's own settings section. Only ever called with
 	* the three model-selection keys, so the settings file cannot be steered from
@@ -6139,11 +6229,31 @@ function apply(ctx, config = {}) {
 		if (typeof value === "object" && value !== null) return `{${Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, entry]) => `${JSON.stringify(key)}:${canonicalJson(entry)}`).join(",")}}`;
 		return JSON.stringify(value);
 	}
+	/**
+	* The namespace `settings.update` expects on the running line.
+	*
+	* 0.1.5 resolves writers by the NAMESPACE the plugin registered through
+	* `installSection`, so the plugin picks it. 0.1.7 resolves them by the HOST
+	* PLUGIN ENTRY ID instead (`configEditor.entries().find(row => row.options.id
+	* === ns)`), and the profile patch chooses that id — the live Desktop host
+	* mounts this plugin as `llm-workbuddy-xdpool`, but a marketplace install can
+	* wrap it (`mkt-...`) or mount it through an `include` row. Asking the fiber
+	* for its own entry id is therefore the only correct answer there; guessing
+	* our own namespace makes every save throw `No configurable plugin entry`.
+	*/
+	const settingsWriteNs = typeof settingsService.installSection === "function" ? WORKBUDDY_POOL_SETTINGS_NS : (() => {
+		try {
+			const entryId = ctx.fiber?.entry?.options?.id;
+			return entryId === void 0 || entryId === "" ? WORKBUDDY_POOL_SETTINGS_NS : entryId;
+		} catch {
+			return WORKBUDDY_POOL_SETTINGS_NS;
+		}
+	})();
 	const setSetting = async (key, value, expected) => {
 		if (value === void 0) return;
 		const update = settingsService?.update;
 		if (update === void 0) throw new Error(`settings service has no update(); ${key} was not saved`);
-		await update.call(settingsService, WORKBUDDY_POOL_SETTINGS_NS, { [key]: value });
+		await update.call(settingsService, settingsWriteNs, { [key]: value });
 		if (expected !== void 0) {
 			const stored = current()[key];
 			if (!stableJsonEqual(stored, expected)) throw new Error(`settings field "${key}" was not persisted`);
@@ -6339,7 +6449,9 @@ function apply(ctx, config = {}) {
 				ctx.logger.warn(`dsh-workbuddy-xdpool: ${region} model catalog unavailable; using static fallback`, error);
 			}
 			invalidateCatalog();
-		})();
+		})().catch((error) => {
+			ctx.logger.warn("dsh-workbuddy-xdpool: account catalog seed failed", error);
+		});
 	}, (error) => {
 		ctx.logger.error("dsh-workbuddy-xdpool: shim failed to listen", error);
 	});

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-xdpool",
   "displayName": "DSH WorkBuddy XD Pool",
   "description": "Merge every locally signed-in WorkBuddy account into DeepSeek Harness as one auto-failing-over model pool (multi-account rotation, live credits, daily check-in and model catalog).",
-  "version": "1.6.1",
+  "version": "1.7.0",
   "license": "MIT",
   "author": "XDTrees",
   "homepage": "https://github.com/XDTrees/dsh-workbuddy-xdpool#readme",
@@ -24,7 +24,8 @@
   ],
   "type": "module",
   "engines": {
-    "node": "^22.19.0 || >=24.0.0"
+    "node": "^22.19.0 || >=24.0.0",
+    "dsh": ">=0.1.5-rc.1 <0.2.0"
   },
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -63,7 +64,6 @@
     },
     "client": {
       "inject": [
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-slots",
         "@deepseek-ai/dsh-client-ui-settings-plugins",