@magpie-community/opencode-workbuddy-auth 0.1.26 → 0.1.28

package/README.md

@@ -83,6 +83,13 @@ Each chat carries WorkBuddy's headers:
 A chat that doesn't open with a system message is given WorkBuddy's
 default one, as the app does.
 
+WorkBuddy refuses some agents' identity lines as an "unapproved channel"
+(11128), so those lines are reworded before a chat goes out. Since 0.1.27
+(#279) that includes DeepSeek Harness's opening line. A refusal of words
+not reworded yet ends in a hint that names no one client (since 0.1.28):
+WorkBuddy refused words in this client's prompt; use it from Hermes,
+OpenCode or Pi, or add another provider to the group.
+
 The loader also translates OpenAI-compatible request spellings WorkBuddy
 doesn't take: `max_completion_tokens` becomes `max_tokens`, `developer`
 messages become `system`, and an object `tool_choice` becomes WorkBuddy's

package/index.mjs

@@ -463,6 +463,10 @@ const FLAGGED = [
   [/You are Claude Code, Anthropic['’]s official CLI for Claude/gi, "You are Claude Code, Anthropic's CLI for Claude"],
   [/Main branch \(you will usually use this for PRs\)/gi, "Main branch (usually the base for PRs)"],
   [/(?<!the )Codex CLI is an open source project led by OpenAI\./gi, "The Codex CLI is an open source project led by OpenAI."],
+  // DeepSeek Harness (DSH) opens its system prompt with this line, which
+  // WorkBuddy refuses as 11128 (magpie-community/plugins#279; the same
+  // refusal traced in smart-open/TraeWorkAssistant#125).
+  [/You are an AI agent powered by DeepSeek Harness\.?/gi, "You are an AI agent that helps the user with programming tasks."],
 ]
 
 function unflagged(text) {
@@ -1695,11 +1699,15 @@ function makePlugin(site) {
 
 // REFUSED_HINT is what the user can do about WorkBuddy's "Illegal API
 // invocation from an unapproved channel": both builds answer it to a chat
-// holding words of Codex's or Claude Code's own (magpie #182), whatever the
-// headers. FLAGGED rewrites the ones known; this is for one it doesn't know. It ends the error's message, as magpie's built-in
-// put it (provider.WBRefusedHint), so magpie's routing page says it apart.
+// holding words they turn away, whatever the headers. Codex's and Claude
+// Code's were the first (magpie #182), DeepSeek Harness's and Claude
+// Desktop's came later (#279, #170), and WorkBuddy reads every message, so
+// it names no client. FLAGGED rewrites the words known; this is for ones it
+// doesn't know. It ends the error's message word for word as magpie's
+// Routing page has it (WB_REFUSED in its routing client.js), which says it
+// apart from WorkBuddy's own words.
 const REFUSED_HINT =
-  "WorkBuddy refuses chats from Codex and Claude Code (their system prompt); use it from Hermes, OpenCode or Pi, or add another provider to this group"
+  "WorkBuddy refused words in this client's prompt (most often its system prompt); use it from Hermes, OpenCode or Pi, or add another provider to this group"
 const REFUSED = /unapproved channel|illegal api invocation/i
 
 // RESTRICTED_HINT is what the user can do about WorkBuddy's 403 code 11140

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magpie-community/opencode-workbuddy-auth",
-  "version": "0.1.26",
+  "version": "0.1.28",
   "description": "OpenCode provider plugins for WorkBuddy's plans: WorkBuddy (CodeBuddy, copilot.tencent.com) and WorkBuddy AI (www.workbuddy.ai)",
   "type": "module",
   "main": "./index.mjs",