@magpie-community/opencode-workbuddy-auth 0.1.38 → 0.1.40

package/README.md

@@ -124,7 +124,11 @@ estimate.
 
 Each chat carries WorkBuddy's headers:
 - `Authorization`, `X-User-Id`, `X-Domain`, `X-Product: SaaS`, `X-IDE-Type: WorkBuddy`;
-- `User-Agent: WorkBuddy/5.5.6`. Without it, WorkBuddy answers error 10085;
+- the desktop CLI's `User-Agent`, `WorkBuddy/<app> <appName>/<app> CLI/<cli>`:
+  `WorkBuddy/5.9.3 WorkBuddy/5.9.3 CLI/2.165.0` on the China build and
+  `WorkBuddy/5.8.4 workbuddy-ai/5.8.4 CLI/2.161.0` on WorkBuddy AI, each
+  build's current app on 2026-10-28; `X-IDE-Version` is the app's version.
+  A User-Agent not starting `WorkBuddy/<version>` is answered error 10085;
 - the client's, which WorkBuddy's usage list shows as the client that asked
   (使用端): `X-Agent-Purpose: conversation`, `X-IDE-Name: WorkBuddy`,
   `X-IDE-Version`, `X-Agent-Intent: craft`, `X-Requested-With`. Both builds
@@ -139,7 +143,15 @@ Each chat carries WorkBuddy's headers:
   else the chat's first user message; nothing is made up when neither names
   one, a made-up conversation of the request's own being what splits one
   conversation into many in the usage detail;
-- WorkBuddy AI also takes `X-Agent-Type: main`.
+- what the CLI adds to a model request alone: `X-Agent-Type: main` on both
+  builds, `X-Agent-Runtime: local-agent` on the China build (new in 5.9),
+  `Accept: application/json`, and the `X-Stainless-*` headers of the OpenAI
+  SDK it sends through (openai 6.25.0 on Electron 37's Node v22.21.1, a
+  1200s timeout, no retries).
+
+Not sent: `X-Device-Token`, which the desktop app gets from Tencent's
+native device SDK before each prompt, and a `traceparent`, which the CLI
+adds only while its server-side tracing is on.
 
 A chat that doesn't open with a system message is given WorkBuddy's
 default one, as the app does.
@@ -164,8 +176,12 @@ refusal rests the account.
 
 The loader also translates OpenAI-compatible request spellings WorkBuddy
 doesn't take: `max_completion_tokens` becomes `max_tokens`, `developer`
-messages become `system`, and an object `tool_choice` becomes WorkBuddy's
-string form.
+messages become `system`, an object `tool_choice` becomes WorkBuddy's
+string form, and an earlier assistant turn's `reasoning_content` (or
+`reasoning_details` text) goes as `reasoning`, the field WorkBuddy's own
+client sends. WorkBuddy drops `reasoning_content`, so a client such as Grok
+Build that sends it lost its earlier thinking; nothing is folded into the
+message's content.
 
 A chat's tools are given shapes WorkBuddy's models take. Without them
 WorkBuddy AI answers 400 "Invalid request parameters" (11133), DeepSeek's

package/index.mjs

@@ -6,7 +6,8 @@
 // the token as WorkBuddy's desktop app does) or is taken from WorkBuddy
 // desktop's own sign-in. Its chats are chat completions at <endpoint>/v2,
 // streamed only, with WorkBuddy's headers: a request whose User-Agent isn't
-// WorkBuddy/<version> is refused (error 10085).
+// WorkBuddy/<version> is refused (error 10085). Each build's headers are
+// those of its current desktop app (see SITES' app, cli and appName).
 
 import { createHash, randomBytes } from "node:crypto"
 import { readFileSync } from "node:fs"
@@ -14,7 +15,6 @@ import { homedir } from "node:os"
 import { join } from "node:path"
 
 const APP_VERSION = "2.0.0" // the version WorkBuddy's sign-in page is opened with
-const UA_VERSION = "5.5.6" // WorkBuddy/<this> is the User-Agent the API takes
 const POLL_MS = 1000
 const SIGN_IN_MS = 5 * 60 * 1000
 const EARLY_MS = 60 * 1000 // a token this close to its end is refreshed before a request
@@ -67,6 +67,16 @@ const SITES = {
     authID: "workbuddy-desktop",
     platform: "workbuddy",
     ai: false,
+    // the desktop app the requests are WorkBuddy's own client's of: its
+    // version, its bundled CLI's (@genie/agent-cli), and the CLI's
+    // product.json applicationName. Read from WorkBuddy 5.9.3.42398134,
+    // the update feed's current build on 2026-10-28.
+    app: "5.9.3",
+    cli: "2.165.0",
+    appName: "WorkBuddy",
+    // 5.9's CLI says on each chat where the agent runs; the desktop's own
+    // is "local-agent" (X-Agent-Runtime, absent in 5.8)
+    runtime: "local-agent",
     // where this build's API keys are made (see keyAccount)
     keys: "https://www.workbuddy.cn/profile/keys",
     models: CN_MODELS,
@@ -81,6 +91,11 @@ const SITES = {
     authID: "workbuddy-desktop-ai",
     platform: "workbuddy-ai",
     ai: true,
+    // WorkBuddy AI 5.8.4.41366630, its update feed's current build on
+    // 2026-10-28 (see the China build's)
+    app: "5.8.4",
+    cli: "2.161.0",
+    appName: "workbuddy-ai",
     keys: "https://www.workbuddy.ai/profile/keys",
     models: AI_MODELS,
     // models whose images WorkBuddy AI drops though its config says they
@@ -155,7 +170,7 @@ async function call(site, method, path, headers = {}, body) {
     headers: {
       "Content-Type": "application/json",
       Accept: "application/json",
-      "User-Agent": "WorkBuddy/" + UA_VERSION,
+      "User-Agent": "WorkBuddy/" + site.app,
       ...headers,
     },
     body: body === undefined ? undefined : JSON.stringify(body),
@@ -312,15 +327,51 @@ function sign(site, a, headers) {
   }
   headers.set("X-Product", "SaaS")
   headers.set("X-IDE-Type", "WorkBuddy")
-  headers.set("User-Agent", "WorkBuddy/" + UA_VERSION)
+  headers.set("User-Agent", cliAgent(site))
   headers.set("X-Requested-With", "XMLHttpRequest")
   headers.set("X-Agent-Intent", "craft")
   headers.set("X-Agent-Purpose", "conversation")
   headers.set("X-IDE-Name", "WorkBuddy")
-  headers.set("X-IDE-Version", UA_VERSION)
+  headers.set("X-IDE-Version", site.app)
   for (const [k, v] of Object.entries(enterpriseHeaders(a))) headers.set(k, v)
-  if (!site.ai) return
+}
+
+// cliAgent is the User-Agent WorkBuddy's desktop CLI sends its API calls
+// (a chat, the product config) with: UserAgentHttpInterceptor's
+// buildUserAgent puts the platform (CLIENT_INFO_PLATFORM "WorkBuddy", at
+// the app's version) first, then the CLI's applicationName at the same
+// version, then CLIENT_INFO_USER_AGENT_EXTENSION, "CLI/<its version>".
+function cliAgent(site) {
+  return `WorkBuddy/${site.app} ${site.appName}/${site.app} CLI/${site.cli}`
+}
+
+// OPENAI_SDK and NODE are what the CLI's chats go out through: the OpenAI
+// SDK it bundles (openai 6.25.0) and the Node its Electron runs it on
+// (Electron 37.10.3, ELECTRON_RUN_AS_NODE).
+const OPENAI_SDK = "6.25.0"
+const NODE = "v22.21.1"
+const SDK_OS = { darwin: "MacOS", win32: "Windows", linux: "Linux", freebsd: "FreeBSD", openbsd: "OpenBSD", android: "Android" }
+const SDK_ARCH = { x64: "x64", arm64: "arm64", arm: "arm", ia32: "x32", x32: "x32" }
+
+// chatHeaders sets on a chat what WorkBuddy's CLI adds to its model
+// requests alone (axiosToFetchAdapter, both builds): the agent type
+// (resolveModelCallAgentType, "main" for the conversation's own agent),
+// the runtime where a build sends one, and the OpenAI SDK's own headers,
+// which the CLI's fetch passes on. Its client has a 1200s timeout and
+// no retries of its own.
+function chatHeaders(site, headers) {
   headers.set("X-Agent-Type", "main")
+  if (site.runtime) headers.set("X-Agent-Runtime", site.runtime)
+  else headers.delete("X-Agent-Runtime")
+  headers.set("Accept", "application/json")
+  headers.set("X-Stainless-Retry-Count", "0")
+  headers.set("X-Stainless-Timeout", "1200")
+  headers.set("X-Stainless-Lang", "js")
+  headers.set("X-Stainless-Package-Version", OPENAI_SDK)
+  headers.set("X-Stainless-OS", SDK_OS[process.platform] ?? (process.platform ? `Other:${process.platform}` : "Unknown"))
+  headers.set("X-Stainless-Arch", SDK_ARCH[process.arch] ?? (process.arch ? `other:${process.arch}` : "unknown"))
+  headers.set("X-Stainless-Runtime", "node")
+  headers.set("X-Stainless-Runtime-Version", NODE)
 }
 
 // keyAccount is the account an API key (OpenCode's {type: "api", key}) is
@@ -705,6 +756,36 @@ function unflag(messages) {
 // OpenAI-compatible client normally uses max_completion_tokens and may call a
 // reasoning prompt developer; WorkBuddy's endpoint takes max_tokens and
 // system instead.
+// An earlier turn's thinking goes back as `reasoning`, the field WorkBuddy's
+// own client (CodeBuddy's agents converter) sets on an assistant message.
+// WorkBuddy drops `reasoning_content`, which Grok Build, DeepSeek-style
+// clients and magpie's own replies use: measured 2026-10-27 on
+// www.workbuddy.ai, a codeword in reasoning_content reached none of
+// kimi-k2.6, kimi-k3, glm-5.3, deepseek-v4.1-flash and minimax-m3, while
+// the same words as `reasoning` reached kimi-k2.6 and minimax-m3.
+// OpenRouter-style reasoning_details are read for their text the same way.
+function reasoningOf(m) {
+  if (typeof m.reasoning_content === "string" && m.reasoning_content) return m.reasoning_content
+  if (Array.isArray(m.reasoning_details)) {
+    const text = m.reasoning_details.map((d) => (typeof d?.text === "string" ? d.text : typeof d?.summary === "string" ? d.summary : "")).join("")
+    if (text) return text
+  }
+  return ""
+}
+
+function asReasoning(messages) {
+  let changed = false
+  for (const m of messages) {
+    if (m?.role !== "assistant" || (m.reasoning_content === undefined && m.reasoning_details === undefined)) continue
+    const text = reasoningOf(m)
+    if (text && !(typeof m.reasoning === "string" && m.reasoning)) m.reasoning = text
+    delete m.reasoning_content
+    delete m.reasoning_details
+    changed = true
+  }
+  return changed
+}
+
 function withSystem(body) {
   // a body magpie or OpenCode hands over as bytes is read as the text it is
   if (body instanceof ArrayBuffer || ArrayBuffer.isView(body)) body = new TextDecoder().decode(body)
@@ -723,6 +804,7 @@ function withSystem(body) {
       m.role = "system"
       changed = true
     }
+    if (asReasoning(b.messages)) changed = true
     if (b.messages[0]?.role !== "system") {
       b.messages.unshift({ role: "system", content: "You are a helpful assistant." })
       changed = true
@@ -1428,7 +1510,7 @@ const statusText = (n) => STATUS_TEXT[n] || `HTTP ${n}`
 function meterAsked(site, a, path, body = {}, signal = AbortSignal.timeout(20000)) {
   return fetch(site.endpoint + path, {
     method: "POST",
-    headers: { "Content-Type": "application/json", Accept: "application/json", "User-Agent": "WorkBuddy/" + UA_VERSION,
+    headers: { "Content-Type": "application/json", Accept: "application/json", "User-Agent": "WorkBuddy/" + site.app,
       Authorization: "Bearer " + a.access, "X-User-Id": a.uid ?? "", "X-Domain": domainOf(site, a), "X-Product": "SaaS",
       "X-IDE-Type": "WorkBuddy", ...enterpriseHeaders(a) },
     body: JSON.stringify(body),
@@ -1961,7 +2043,7 @@ function effortsOf(d, site, id) {
 async function liveModels(site, a) {
   const headers = new Headers()
   sign(site, a, headers)
-  headers.set("User-Agent", `CLI/${APP_VERSION} WorkBuddy/${UA_VERSION}`)
+  headers.set("User-Agent", cliAgent(site))
   headers.set("X-Requested-With", "XMLHttpRequest")
   headers.set("Accept", "application/json")
   const res = await fetch(site.endpoint + "/v3/config", { headers, signal: AbortSignal.timeout(15000) })
@@ -2211,6 +2293,7 @@ function makePlugin(site) {
             } else {
               body = withoutUnsigned(body)
             }
+            chatHeaders(site, headers)
             attend(headers, body, session)
             const post = (b) =>
               fetch(req ? req.url : input, { ...init, method: init?.method ?? req?.method, headers, body: b }).catch((e) => unanswered(site, a, b, e, init?.signal))
@@ -2492,4 +2575,4 @@ export const WorkBuddyAuthPlugin = makePlugin(SITES.workbuddy)
 export const WorkBuddyAIAuthPlugin = makePlugin(SITES["workbuddy-ai"])
 
 // for tests
-export const _internal = { FREE_ONLY, PRICE_TTL, keyAccount, remoteConfig, cycleOf, typeUnions, systemAsUser, systemKey, DEFAULT_SYSTEM, EDGE_READS, fitShape, replyAfterTools, AFTER_TOOLS_REFUSED, enterpriseUsageOf, notDesktop, textOnly, runsOutOf, packagesOf, endOf, enterpriseHeaders, enterpriseOf, liveModels, browserSignIn, withSystem, normalizeToolChoice, fitTools, fitted, renamed, unflagged, usageOf, desktopHeld, explained, REFUSED_HINT, RESTRICTED_HINT, EXHAUSTED_HINT, freeCredits, creditsOf, priceOf, fresh, SITES, renewing, renewed, SESSION, attend, turnKey, conversationKey, signatureOf, isMessages, withoutUnsigned, withoutSignedThinking, answeredBefore, nativeOf, modelOf, configModels, API_MESSAGES: NPM_MESSAGES, API_CHAT: NPM }
+export const _internal = { FREE_ONLY, PRICE_TTL, keyAccount, remoteConfig, cycleOf, typeUnions, systemAsUser, systemKey, DEFAULT_SYSTEM, EDGE_READS, fitShape, replyAfterTools, AFTER_TOOLS_REFUSED, enterpriseUsageOf, notDesktop, textOnly, runsOutOf, packagesOf, endOf, enterpriseHeaders, enterpriseOf, liveModels, browserSignIn, withSystem, asReasoning, normalizeToolChoice, fitTools, fitted, renamed, unflagged, usageOf, desktopHeld, explained, REFUSED_HINT, RESTRICTED_HINT, EXHAUSTED_HINT, freeCredits, creditsOf, priceOf, fresh, SITES, renewing, renewed, SESSION, attend, turnKey, conversationKey, signatureOf, isMessages, withoutUnsigned, withoutSignedThinking, answeredBefore, nativeOf, modelOf, configModels, API_MESSAGES: NPM_MESSAGES, API_CHAT: NPM }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magpie-community/opencode-workbuddy-auth",
-  "version": "0.1.38",
+  "version": "0.1.40",
   "description": "OpenCode provider plugins for WorkBuddy's plans: WorkBuddy (CodeBuddy, copilot.tencent.com) and WorkBuddy AI (www.workbuddy.ai)",
   "type": "module",
   "main": "./index.mjs",