cortico-world-workbuddy 0.3.0 → 0.3.4

package/scripts/contract-regression.mjs

@@ -0,0 +1,221 @@
+#!/usr/bin/env node
+/**
+ * 0.3.1 回归断言（0.3.0 审查报告新发现的问题）。
+ *
+ * 由 scripts/contract.mjs 调用：await runRegression(ok, { pkgDir })。
+ * 单独成文件是为了让「这次新补的防线」和原有 68 条基线一眼分得开；
+ * 它自带依赖与临时目录，不改动 contract.mjs 里的其它断言。
+ */
+import { createServer } from 'node:http';
+import { mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+
+import { WB_DEFAULTS } from '../src/config.js';
+import { attachPromos, parsePromos, priceViewOf } from '../src/promo.js';
+import { UsageLedger } from '../src/usage.js';
+import { WbUpstream, WbUpstreamError } from '../src/upstream.js';
+import { candidateAppExecutables } from '../src/credentials.js';
+import { TOKEN_AUTO, TOKEN_CLEARED, WorkBuddyWorld } from '../src/world.js';
+import { cleanWorkbuddyResidue, WORKBUDDY_DATA_FILES } from './clean-workbuddy.mjs';
+
+/** 造一个可记录密钥库写入的最小 World，避免碰真机凭据。 */
+function makeWorld(initialSecret, credentialsDir) {
+  let stored = initialSecret;
+  const writes = [];
+  const ctx = {
+    id: 'workbuddy',
+    cfg: { ...WB_DEFAULTS, credentialsDir, model: 'deepseek-v4.1-flash' },
+    timezone: 'Asia/Shanghai',
+    botName: 'Coo',
+    botDir: credentialsDir,
+    packageDir: '',
+    dataDir: mkdtempSync(join(tmpdir(), 'wb-reg-data-')),
+    repoRoot: '',
+    secret: () => stored,
+    storeSecret: (name, value) => {
+      writes.push([name, value]);
+      stored = value;
+    },
+    persist: () => {},
+    restart: async () => {},
+  };
+  return { world: new WorkBuddyWorld({ ctx }), writes, getStored: () => stored };
+}
+
+export async function runRegression(ok, { pkgDir } = {}) {
+  console.log('· 0.3.1 回归防线（审查报告新发现）');
+
+  /* ---- 1. /v3/config 401/403：分类、状态码、不降级、标记不残留 ---------- */
+  let configHits = 0;
+  let legacyHits = 0;
+  const authServer = createServer((req, res) => {
+    if (req.url.startsWith('/v3/config')) {
+      configHits += 1;
+      if (configHits === 1) {
+        res.writeHead(401, { 'Content-Type': 'application/json' });
+        res.end('{"msg":"unauthorized"}');
+      } else {
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ data: { models: [{ id: 'glm-5.2', credits: 'x0.79' }] } }));
+      }
+      return;
+    }
+    legacyHits += 1;
+    res.writeHead(200, { 'Content-Type': 'application/json' });
+    res.end('{"data":{"models":[]}}');
+  });
+  await new Promise((resolve) => authServer.listen(0, '127.0.0.1', resolve));
+  const authUrl = `http://127.0.0.1:${authServer.address().port}`;
+  const authUp = new WbUpstream({ baseUrl: authUrl });
+  let deadErr = null;
+  try {
+    await authUp.fetchCatalog({ accessToken: 'dead' });
+  } catch (err) {
+    deadErr = err;
+  }
+  ok(deadErr instanceof WbUpstreamError, '401 抛的是 WbUpstreamError', String(deadErr));
+  ok(deadErr?.kind === 'session_dead', '401 的 kind 是 session_dead（0.3.0 传错参数恒为 server）', deadErr?.kind);
+  ok(deadErr?.status === 401, '401 的 status 是 401（不是 0）', deadErr?.status);
+  ok(configHits === 1, '401 只请求 /v3/config 一次', configHits);
+  ok(legacyHits === 0, '401 不降级到 legacy 目录', legacyHits);
+
+  // 同一个 WbUpstream 复用：上一次的 401 不能污染下一次成功请求
+  const second = await authUp.fetchCatalog({ accessToken: 'ok' });
+  authServer.close();
+  ok(second.source === 'v3-config', '复用 WbUpstream 时上次的 401 标记被重置', second.source);
+  ok(legacyHits === 0, '两次请求都没有降级到 legacy', legacyHits);
+
+  /* ---- 2. 写错的 daily 时段不能当成全天打折 ------------------------------ */
+  const brokenPromos = parsePromos(
+    [
+      {
+        id: 'broken-window',
+        kind: 'discount',
+        enabled: true,
+        priority: 100,
+        modelIds: ['glm-5.2'],
+        discount: { discountedCredits: '0.10x', displayMode: 'replace' },
+        schedule: { timezone: 'Asia/Shanghai', daily: [{ start: 'WHAT', end: 'NOPE' }] },
+      },
+    ],
+    [],
+  );
+  const brokenModel = attachPromos([{ id: 'glm-5.2', credits: 'x0.79' }], brokenPromos)[0];
+  ok(brokenPromos[0].schedule?.dailyUnusable === true, '无效时段被标成 dailyUnusable', brokenPromos[0].schedule);
+  const brokenNoon = priceViewOf(brokenModel, Date.parse('2026-11-03T12:00:00+08:00'));
+  ok(brokenNoon.effective === 0.79, '时段读不懂时按目录价，不误报折扣', brokenNoon.effective);
+  ok(brokenNoon.promoId === undefined, '时段读不懂时不挂促销 id', brokenNoon.promoId);
+
+  /* ---- 3. rediscover 不覆盖手动粘贴的 token ------------------------------ */
+  const emptyDir = mkdtempSync(join(tmpdir(), 'wb-reg-empty-'));
+  const manualW = makeWorld('manual-token-value', emptyDir);
+  const manualResult = await manualW.world.handleInvoke('account', 'rediscover', [], 'zh');
+  ok(manualW.getStored() === 'manual-token-value', '手动 token 下 rediscover 不覆盖密钥库', manualW.getStored());
+  ok(manualW.writes.length === 0, '手动 token 下 rediscover 完全不写密钥库', manualW.writes);
+  ok(
+    manualResult.authed === true && manualResult.source === 'manual',
+    '手动 token 下 rediscover 仍显示 manual 已登录',
+    manualResult,
+  );
+
+  const liveDir = mkdtempSync(join(tmpdir(), 'wb-reg-live-'));
+  writeFileSync(join(liveDir, 'workbuddy-desktop.info'), JSON.stringify({ auth: { accessToken: 'auto-found' } }));
+  const clearedW = makeWorld(TOKEN_CLEARED, liveDir);
+  const clearedResult = await clearedW.world.handleInvoke('account', 'rediscover', [], 'zh');
+  ok(clearedW.getStored() === TOKEN_AUTO, '登出哨兵 + 探测成功 → 改写为 wb-auto', clearedW.getStored());
+  ok(clearedResult.authed === true, '重新探测后恢复登录态', clearedResult);
+
+  const clearedEmptyW = makeWorld(TOKEN_CLEARED, emptyDir);
+  const clearedEmptyResult = await clearedEmptyW.world.handleInvoke('account', 'rediscover', [], 'zh');
+  ok(clearedEmptyW.getStored() === TOKEN_CLEARED, '探测失败时保留 wb-cleared 登出哨兵', clearedEmptyW.getStored());
+  ok(clearedEmptyResult.authed === false, '探测失败时仍是未登录', clearedEmptyResult);
+
+  const clearW = makeWorld('manual-token-value', emptyDir);
+  await clearW.world.handleInvoke('account', 'clearToken', [], 'zh');
+  ok(/重新探测/.test(String(clearW.world.lastError ?? '')), 'clearToken 当下就给可操作提示', clearW.world.lastError);
+
+  /* ---- 4. 跨午夜后「今日积分」归零 -------------------------------------- */
+  const rollW = makeWorld(TOKEN_AUTO, emptyDir);
+  rollW.world.today = { day: '2020-01-01', credit: 12.5, calls: 3, prompt: 100, completion: 50 };
+  const rolledVars = rollW.world.envPromptVars();
+  ok(rolledVars['workbuddy.todayCredit'] === '0', '跨日后提示词里的今日积分归零', rolledVars['workbuddy.todayCredit']);
+  ok(rollW.world.today.day !== '2020-01-01', '跨日后 today.day 翻到当天', rollW.world.today.day);
+  const rolledUi = rollW.world.webUi('zh');
+  ok(rolledUi.badges.find((b) => b.label === '今日积分')?.value === '0', '跨日后详情页徽标归零');
+  // 断言必须跟宿主机时区走：原先硬编码 +08 的 00:30，在 UTC 的 CI 上会算成前一日而红叉。
+  // 用本地 getter 拼出期望值，仍能抓住「改用 toISOString 的 UTC 日期」这类回归。
+  const midnight = new Date(2026, 10, 3, 0, 30, 0);
+  const localLabel = `${midnight.getFullYear()}-${String(midnight.getMonth() + 1).padStart(2, '0')}-${String(
+    midnight.getDate(),
+  ).padStart(2, '0')}`;
+  ok(
+    rollW.world.localDay(midnight.getTime()) === localLabel,
+    'localDay 按宿主机本地日历取日（不是 toISOString 的 UTC 日期）',
+    rollW.world.localDay(midnight.getTime()),
+  );
+
+  /* ---- 5. 自动解封覆盖两种安装形态 -------------------------------------- */
+  const appExes = candidateAppExecutables();
+  ok(
+    process.platform !== 'win32' || appExes.some((p) => p.endsWith('WorkBuddy AI.exe')),
+    'candidateAppExecutables 覆盖 WorkBuddy AI.exe',
+    appExes.slice(0, 4),
+  );
+
+  /* ---- 6. 余额快照并发写不会互相覆盖 ------------------------------------ */
+  const balLedger = new UsageLedger({ dataDir: mkdtempSync(join(tmpdir(), 'wb-reg-bal-')), log: { warn: () => {} } });
+  await Promise.all(Array.from({ length: 12 }, (_, i) => balLedger.writeBalance({ total: i, at: i })));
+  const bal = await balLedger.readBalance();
+  ok(bal !== null && typeof bal.total === 'number', '并发写余额快照后仍是可读的完整 JSON', bal);
+
+  /* ---- 7. 工具描述 / 面板文案与源码一致 --------------------------------- */
+  const describeJson = JSON.parse(readFileSync(join(pkgDir, 'describe.json'), 'utf8'));
+  const chatDecl = describeJson.tools.find((t) => t.name === 'wb_chat');
+  ok(
+    chatDecl?.description?.includes('Requires the WorkBuddy desktop app to be running') === true,
+    'wb_chat 描述带「需桌面端在运行」前提',
+    chatDecl?.description,
+  );
+  ok(
+    !/Home page/.test(readFileSync(join(pkgDir, 'src', 'webui', 'client.js'), 'utf8')),
+    '英文面板不再提已删除的开始页按钮',
+  );
+  const argsW = makeWorld(TOKEN_AUTO, emptyDir);
+  let argsErr = null;
+  try {
+    await argsW.world.tools()[2].handler(undefined);
+  } catch (err) {
+    argsErr = err;
+  }
+  ok(argsErr === null, 'tools() handler 收到 undefined args 不抛 TypeError', String(argsErr));
+
+  /* ---- 8. 0.3.4 移除开关后：未选模型也能列目录，提示词不再命令每轮调用 -------- */
+  const noModelW = makeWorld(TOKEN_AUTO, emptyDir);
+  noModelW.world.cfg.model = '';
+  noModelW.world.proc = { running: true, pids: [1], mainPid: 1, via: 'test', detail: '', at: Date.now() };
+  noModelW.world.tokens = { accessToken: 'test-only', source: 'test' };
+  ok(/目录为空/.test(noModelW.world.toolListModels({})), '空目录时 wb_list_models 给出可读提示（不再依赖任何开关）');
+  const vars = noModelW.world.envPromptVars();
+  ok(
+    vars['workbuddy.process'] === 'running' && vars['workbuddy.model'] === '(none selected)',
+    '未选模型时环境提示词如实报告进程与占位模型',
+    vars,
+  );
+  ok(!('workbuddy.priority' in vars), '环境提示词变量里不再有 workbuddy.priority');
+
+  /* ---- 9. 显式卸载清理只删本扩展残留，不动其他配置与密钥 ---------------- */
+  const cleanBotDir = mkdtempSync(join(tmpdir(), 'wb-clean-bot-'));
+  const cleanDataDir = mkdtempSync(join(tmpdir(), 'wb-clean-data-'));
+  writeFileSync(join(cleanBotDir, 'config.json'), JSON.stringify({ worlds: { workbuddy: { enabled: true }, other: { enabled: true } }, keep: 7 }, null, 2));
+  writeFileSync(join(cleanBotDir, '.env'), 'OTHER_SECRET=keep\naccessToken=not-printed\n');
+  for (const name of WORKBUDDY_DATA_FILES) writeFileSync(join(cleanDataDir, name), name === 'workbuddy-usage.jsonl' ? '' : '{}');
+  const checked = cleanWorkbuddyResidue({ botDir: cleanBotDir, dataDir: cleanDataDir, clean: false });
+  ok(checked.before.configPresent && checked.before.envPresent && checked.before.dataFiles.length === 3, '清理前能识别配置、凭据与三份数据文件');
+  const cleaned = cleanWorkbuddyResidue({ botDir: cleanBotDir, dataDir: cleanDataDir, clean: true });
+  ok(!cleaned.after.configPresent && !cleaned.after.envPresent && cleaned.after.dataFiles.length === 0, '显式清理后本扩展无配置、凭据与数据残留');
+  const remainingConfig = JSON.parse(readFileSync(join(cleanBotDir, 'config.json'), 'utf8'));
+  const remainingEnv = readFileSync(join(cleanBotDir, '.env'), 'utf8');
+  ok(remainingConfig.keep === 7 && remainingConfig.worlds.other.enabled === true, '清理保留宿主其他配置', remainingConfig);
+  ok(remainingEnv === 'OTHER_SECRET=keep\n', '清理只移除 accessToken 行，保留其他密钥', remainingEnv);
+}

package/scripts/contract.mjs

@@ -24,6 +24,7 @@ import { classifyModel, CAUTION_MODEL_IDS, SAFE_MODEL_IDS } from '../src/safety.
 import { UsageLedger, dayKey, summarize } from '../src/usage.js';
 import { classifyHttpFailure, WbUpstream } from '../src/upstream.js';
 import { PANEL_METHODS, TOKEN_AUTO, TOKEN_CLEARED, WorkBuddyWorld } from '../src/world.js';
+import { runRegression } from './contract-regression.mjs';
 
 const pkgDir = fileURLToPath(new URL('..', import.meta.url));
 const verbose = process.argv.includes('--verbose');
@@ -86,6 +87,7 @@ const used = new Set([...describe.envPrompt.matchAll(/\{\{(workbuddy\.[A-Za-z]+)
 const missing = [...used].filter((name) => !declared.has(name));
 ok(missing.length === 0, 'envPrompt 里每个 {{workbuddy.x}} 都有对应变量', missing);
 ok(used.size >= 8, `envPrompt 用到了 ${used.size} 个变量`);
+ok(!used.has('workbuddy.priority'), '环境提示词不再引用已删除的「中转站优先」开关', [...used]);
 
 const toolNames = describe.tools.map((t) => t.name).sort();
 ok(
@@ -175,6 +177,23 @@ ok(numeric.promoId === 'numeric', '数字时间戳（Unix 秒）的有效期被
 const badZone = priceViewOf(models[2], NOW);
 ok(badZone.promoId === 'bad-zone', '非法时区退回 UTC 后窗口仍生效', badZone.promoId);
 
+const defaultZonePromo = parsePromos([{
+  id: 'default-zone', modelIds: ['glm-5.2'], discount: { discountedCredits: '0.50x', displayMode: 'replace' },
+  schedule: { daily: [{ start: '23:00', end: '7:50' }] },
+}], []);
+const defaultZoneModel = attachPromos([{ id: 'glm-5.2', credits: 'x0.79' }], defaultZonePromo)[0];
+ok(priceViewOf(defaultZoneModel, NOW).effective === 0.5, 'daily 省略 timezone 时按 Asia/Shanghai 判定', priceViewOf(defaultZoneModel, NOW));
+
+const dateOnlyPromo = parsePromos([{
+  id: 'date-only', modelIds: ['glm-5.2'], discount: { discountedCredits: '0.20x', displayMode: 'replace' },
+  schedule: { timezone: 'Asia/Shanghai', validFrom: '2026-11-03', validUntil: '2026-11-03' },
+}], []);
+const dateOnlyModel = attachPromos([{ id: 'glm-5.2', credits: 'x0.79' }], dateOnlyPromo)[0];
+ok(priceViewOf(dateOnlyModel, Date.parse('2026-11-03T00:00:00+08:00')).effective === 0.2, '纯日期 validFrom 从当地 00:00 生效', dateOnlyPromo[0].schedule);
+ok(priceViewOf(dateOnlyModel, Date.parse('2026-11-03T09:00:00+08:00')).effective === 0.2, '纯日期 validUntil 覆盖当天 08:00 之后', dateOnlyPromo[0].schedule);
+ok(priceViewOf(dateOnlyModel, Date.parse('2026-11-04T00:00:00+08:00')).effective === 0.79, '纯日期 validUntil 到次日当地 00:00 才失效');
+ok(priceViewOf(dateOnlyModel, Date.parse('2026-11-03T09:00:00+08:00')).absoluteText.endsWith('2026-11-03'), '纯日期有效期展示不写偏一天', priceViewOf(dateOnlyModel, NOW).absoluteText);
+
 /* ------------------------------------------------------------------- 安全 */
 
 console.log('· 安全清单');
@@ -208,7 +227,7 @@ const records = [
   { ts: nowMs - 3 * 864e5, model: 'glm-5.2', ok: true, promptTokens: 100, completionTokens: 50, totalTokens: 150, credit: 1.25, multiplier: 0.5 },
   { ts: nowMs - 40 * 864e5, model: 'hy3', ok: false, promptTokens: 0, completionTokens: 0, totalTokens: 0, credit: 0 },
 ];
-const summary = summarize(records, nowMs, { days: 30 });
+const summary = summarize(records, nowMs);
 ok(summary.totals.today.calls === 1, '今天只统计今天那条', summary.totals.today.calls);
 ok(summary.totals.week.calls === 2, '近 7 天含 3 天前那条', summary.totals.week.calls);
 ok(summary.totals.month.calls === 2, '近 30 天不含 40 天前那条', summary.totals.month.calls);
@@ -220,6 +239,10 @@ ok(
   '最近记录的字段名是 total/prompt/completion（面板按这三个名字读）',
 );
 ok(summary.byModel[0].model === 'glm-5.2', '按模型聚合按积分降序', summary.byModel.map((m) => m.model));
+const creditGap = summarize([{ ts: nowMs, model: 'glm-5.2', ok: true, totalTokens: 3 }], nowMs);
+ok(creditGap.totals.today.creditUnknown === 1, '上游未回传 credit 时计为未知，不静默算 0', creditGap.totals.today);
+ok(creditGap.recent[0].credit === null, '最近调用的未知 credit 保持 null，与明确 0 区分', creditGap.recent[0]);
+ok(!('windowDays' in summary) && !('spanDays' in summary), '未接线的 days/spanDays 参数与字段已删除');
 
 /* --------------------------------------------------------------- 回归防线 */
 
@@ -263,12 +286,10 @@ ok(
   autoWorld.lastError,
 );
 
-// 计费域：按区域，不按 baseUrl 猜；自定义 baseUrl 时跟着走同一出口
-const cnUp = new WbUpstream({ baseUrl: 'https://copilot.tencent.com', region: 'cn' });
-ok(cnUp.billingUrl('/x').startsWith('https://www.codebuddy.cn'), 'cn 计费域是 www.codebuddy.cn', cnUp.billingUrl('/x'));
-const globalUp = new WbUpstream({ baseUrl: 'https://www.workbuddy.ai', region: 'global' });
-ok(globalUp.billingUrl('/x').startsWith('https://www.workbuddy.ai'), 'global 计费域是 www.workbuddy.ai', globalUp.billingUrl('/x'));
-const proxyUp = new WbUpstream({ baseUrl: 'https://proxy.example.com', region: 'cn' });
+// 计费域：固定国内计费域，不按 baseUrl 猜；自定义 baseUrl 时跟着走同一出口
+const cnUp = new WbUpstream({ baseUrl: 'https://copilot.tencent.com' });
+ok(cnUp.billingUrl('/x').startsWith('https://www.codebuddy.cn'), '默认计费域是 www.codebuddy.cn', cnUp.billingUrl('/x'));
+const proxyUp = new WbUpstream({ baseUrl: 'https://proxy.example.com' });
 ok(proxyUp.billingUrl('/x') === 'https://proxy.example.com/x', '自定义 baseUrl 时计费走同一出口', proxyUp.billingUrl('/x'));
 
 // 429 的软/硬区分
@@ -281,11 +302,15 @@ ok(
   '账号面板允许 setToken',
 );
 ok(!PANEL_METHODS.usage.includes('setToken'), '用量面板不能间接写密钥库（白名单生效）');
-ok(
-  !PANEL_METHODS.priority.includes('host') && !PANEL_METHODS.priority.includes('repair'),
-  '0.3.0 删掉主页注入后，priority 面板不再有 host/repair',
-  PANEL_METHODS.priority,
-);
+ok(!('priority' in PANEL_METHODS), '0.3.4 移除「中转站优先」面板后不再有 priority 方法表', Object.keys(PANEL_METHODS));
+
+// 0.3.4：界面只剩 3 个面板，也不再声明 storage（宿主会据此生成空白「数据清理」页签）
+const uiWorld = makeWorld(TOKEN_CLEARED);
+const ui = uiWorld.webUi('zh');
+ok(ui.panels.map((p) => p.id).join(',') === 'models,account,usage', '0.3.4 面板只剩 models/account/usage', ui.panels.map((p) => p.id));
+ok(Array.isArray(ui.lamps) && ui.lamps.length === 2, '灯态只保留 WorkBuddy + 主进程两盏', ui.lamps?.length);
+ok(!('storage' in ui), '不再声明 storage（否则宿主会生成空的「数据清理」页签）');
+ok(!('prefer' in uiWorld.cfg), '配置里不再有 prefer 开关字段', Object.keys(uiWorld.cfg));
 
 // 账本并发：append 与 prune 串行，不互相覆盖
 const ledger = new UsageLedger({ dataDir: mkdtempSync(join(tmpdir(), 'wb-ledger-')), log: { warn: () => {} } });
@@ -306,21 +331,21 @@ ok(/^\d{4}-\d{2}-\d{2}$/.test(localDay), 'dayKey 输出 YYYY-MM-DD', localDay);
 // SSE：最后一段 data 没有换行时也要把 usage 处理掉（否则积分恒 0）
 const sseServer = createServer((req, res) => {
   res.writeHead(200, { 'Content-Type': 'text/event-stream' });
-  res.write('data: {"code":0,"choices":[{"delta":{"content":"嗨"}}]}\n\n');
-  // 末尾故意不带换行：老实现会把这段丢掉
-  res.write('data: {"code":0,"choices":[{"delta":{},"finish_reason":"stop"}],"usage":{"prompt_tokens":7,"completion_tokens":3,"total_tokens":10,"credit":0.02}}');
+  res.write('data: {"code":0,"choices":[{"delta":{"content":"嗨"}}],"usage":{"prompt_tokens":7,"completion_tokens":3,"total_tokens":10}}\n\n');
+  // 末尾只带 credit 且故意不带换行：既不能丢尾帧，也不能覆盖前帧 token。
+  res.write('data: {"code":0,"choices":[{"delta":{},"finish_reason":"stop"}],"usage":{"credit":0.02}}');
   res.end();
 });
 await new Promise((resolve) => sseServer.listen(0, '127.0.0.1', resolve));
 const sseUrl = `http://127.0.0.1:${sseServer.address().port}`;
-const sseUp = new WbUpstream({ baseUrl: sseUrl, region: 'cn' });
+const sseUp = new WbUpstream({ baseUrl: sseUrl });
 const chatOut = await sseUp.chat({ accessToken: 'test-token' }, { model: 'deepseek-v4.1-flash', messages: [{ role: 'user', content: 'hi' }], maxTokens: 64 }, () => {});
 sseServer.close();
 ok(chatOut.text === '嗨', 'SSE 正文拼接正确', chatOut.text);
 ok(chatOut.usage?.totalTokens === 10, 'SSE 尾行（无换行）里的 usage 被解析', chatOut.usage);
 ok(chatOut.credit === 0.02, 'SSE 尾行里的 credit 被解析', chatOut.credit);
 
-// start() 兜底：pushEvent 失败也不能把 started 卡住（否则四盏灯永远「正在读取登录态…」）
+// start() 兜底：pushEvent 失败也不能把 started 卡住（否则两盏灯永远「正在读取登录态…」）
 const startWorld = makeWorld(TOKEN_CLEARED);
 const failingHost = {
   log: { info: () => {}, warn: () => {}, error: () => {} },
@@ -330,6 +355,9 @@ await startWorld.start(failingHost);
 ok(startWorld.started === true, 'pushEvent 抛错时 start() 仍标记 started（灯态不卡住）');
 await startWorld.stop();
 
+// 0.3.1 审查报告新发现的回归防线（单独成文件，便于与上面 68 条基线区分）
+await runRegression(ok, { pkgDir });
+
 /* ------------------------------------------------------------------- 结果 */
 
 console.log('');

package/scripts/reinstall.ps1

@@ -89,9 +89,20 @@ if ($NoPack) {
     New-Item -ItemType Directory -Force $OutDir | Out-Null
     Push-Location $PackageDir
     try {
-      $out = & $npmCmd.Source pack --pack-destination $OutDir 2>&1 | Out-String
-      if ($LASTEXITCODE -ne 0) { Write-Host $out -ForegroundColor Yellow }
-      $packed = ($LASTEXITCODE -eq 0) -and (Test-Path $tgz)
+      # npm 把 notice 写进 stderr；Windows PowerShell 5.1 在 $ErrorActionPreference='Stop'
+      # 下遇到原生命令的 stderr 会抛 NativeCommandError，把正常的 pack 误判成失败，
+      # 静默退回手工 tar、绕过 prepack（0.3.1 修复，审查报告第 6 条的真正触发点）。
+      # 临时降到 Continue，用真实退出码判断，绝不让一行 notice 改变打包路径。
+      $prevEap = $ErrorActionPreference
+      $ErrorActionPreference = 'Continue'
+      try {
+        $out = & $npmCmd.Source pack --pack-destination $OutDir 2>&1 | Out-String
+        $packCode = $LASTEXITCODE
+      } finally {
+        $ErrorActionPreference = $prevEap
+      }
+      if ($packCode -ne 0) { Write-Host $out -ForegroundColor Yellow }
+      $packed = ($packCode -eq 0) -and (Test-Path $tgz)
     } catch {
       $packed = $false
     } finally { Pop-Location }
@@ -128,7 +139,7 @@ if (-not (Test-Path (Join-Path $packRoot 'package.json'))) { Fail "tgz 里没有
 
 $packedPkg = Get-Content -Raw -Encoding UTF8 (Join-Path $packRoot 'package.json') | ConvertFrom-Json
 if ($packedPkg.version -ne $version) { Fail "tgz 里的版本是 $($packedPkg.version)，与源码 $version 不一致（先 bump 或重新打包）" }
-if (-not (Test-Path (Join-Path $packRoot 'ENV_PROMPT.md'))) { } # 0.2.0 起根 ENV_PROMPT.md 已删除，模板只在 src/ 下
+# 根 ENV_PROMPT.md 自 0.2.0 起已删除，模板只在 src/ 下；这里无需再检查。
 
 # --- 3) 卸载旧的，再装新的 ------------------------------------------------
 Push-Location $extDir

package/scripts/selfcheck.mjs

@@ -27,7 +27,7 @@ const pkg = JSON.parse(readFileSync(join(pkgDir, 'package.json'), 'utf8'));
 /** 没有宿主时能做的检查：语法 + 契约测试。全通过才返回 true。 */
 function offlineChecks() {
   const files = [];
-  for (const dir of ['src', 'src/webui', 'scripts']) {
+  for (const dir of ['src', 'src/webui', 'scripts', 'scripts/lib']) {
     const abs = join(pkgDir, dir);
     if (!existsSync(abs)) continue;
     for (const name of readdirSync(abs)) {

package/scripts/verify-ui.mjs

@@ -114,7 +114,7 @@ async function api(path, init) {
   const res = await fetch(`http://127.0.0.1:${PROXY_PORT}${path}`, init);
   return res.json();
 }
-const panel = (method, args) => api(`/api/webui/providers/world%3Aworkbuddy/panels/priority/${method}`, {
+const panel = (name, method, args) => api(`/api/webui/providers/world%3Aworkbuddy/panels/${name}/${method}`, {
   method: 'POST',
   headers: { 'content-type': 'application/json', origin: `http://127.0.0.1:${PROXY_PORT}` },
   body: JSON.stringify({ args }),
@@ -253,11 +253,12 @@ const readHome = `(() => {
     labels: [...document.querySelectorAll('.home-pickerlabel')].map((n) => n.textContent.trim()) };
 })()`;
 
-const readWorldPage = `(() => {
-  const label = [...document.querySelectorAll('*')].find((n) => n.textContent?.trim() === '是否启用Workbuddy' && n.offsetParent !== null);
-  const box = document.querySelector('input[type="checkbox"]');
-  return { hash: location.hash, routeMounted: /provider\\/world%3Aworkbuddy/.test(location.hash),
-    panelRendered: !!label, checkbox: !!box, checked: box?.checked ?? null,
+const readModelsPage = `(() => {
+  const th = [...document.querySelectorAll('th')].map((n) => n.textContent.trim());
+  const text = document.body.innerText || '';
+  return { policy: th.includes('合规'), headers: th.join('|'),
+    rows: document.querySelectorAll('table tr').length,
+    proc: /WorkBuddy 主进程：(运行中|未检测到)/.test(text),
     tabs: [...document.querySelectorAll('button,a')].map((n) => n.textContent.trim()).filter((t) => t && t.length < 24) };
 })()`;
 
@@ -269,9 +270,6 @@ for (let run = 1; run <= RUNS; run += 1) {
   const row = { run, checks: {} };
   consoleErrors.length = 0;
 
-  // 归零
-  await panel('set', [false]);
-
   // --- 开始页：正常渲染，且确认 0.3.0 已不再注入任何按钮 ---
   await send('Page.navigate', { url: `${HOME}?t=${tag}` });
   try {
@@ -296,32 +294,22 @@ for (let run = 1; run <= RUNS; run += 1) {
     await waitFor('World 页完成加载', async () => (await evaluate(`document.readyState`)) === 'complete');
     await waitFor('World 页路由挂载', async () => evaluate(`/provider\\/world%3Aworkbuddy/.test(location.hash)`));
     row.checks.worldRoute = true;
-    await waitFor('页签出现', async () => evaluate(`[...document.querySelectorAll('button,a')].some((n) => n.textContent.trim() === '是否启用 WorkBuddy')`));
+    await waitFor('页签出现', async () => evaluate(`[...document.querySelectorAll('button,a')].some((n) => n.textContent.trim() === '模型目录')`));
     row.checks.worldTabs = true;
-    await evaluate(clickByText('是否启用 WorkBuddy'));
-    const pane = await waitFor('面板渲染（复选框）', async () => {
-      const v = await evaluate(readWorldPage);
-      return v.panelRendered && v.checkbox ? v : false;
+    // 0.3.4：删掉「中转站优先」页签；不再声明 storage，宿主也不会生成空白「数据清理」页签。
+    const tabs = await evaluate(`[...document.querySelectorAll('button,a')].map((n) => n.textContent.trim()).filter((t) => t && t.length < 24)`);
+    row.checks.noPriorityTab = !tabs.includes('是否启用 WorkBuddy');
+    row.checks.noStorageTab = !tabs.includes('数据清理');
+    await evaluate(clickByText('模型目录'));
+    const modelsHead = await waitFor('模型目录渲染（只读主进程状态）', async () => {
+      const v = await evaluate(readModelsPage);
+      return v.proc ? v : false;
     });
     row.checks.panelRendered = true;
-    // 勾上
-    await evaluate(`document.querySelector('input[type="checkbox"]').click()`);
-    await waitFor('面板勾选 → prefer=true', async () => {
-      const dom = await evaluate(`document.querySelector('input[type="checkbox"]')?.checked ?? null`);
-      const api = await panel('state', []);
-      return dom === true && api.prefer === true ? true : false;
-    });
-    row.checks.panelToggleOn = true;
-    if (SHOTS && run === 1) { await sleep(400); await shot('world-priority-on'); }
-    await evaluate(`document.querySelector('input[type="checkbox"]').click()`);
-    await waitFor('面板取消 → prefer=false', async () => {
-      const dom = await evaluate(`document.querySelector('input[type="checkbox"]')?.checked ?? null`);
-      const api = await panel('state', []);
-      return dom === false && api.prefer === false ? true : false;
-    });
-    row.checks.panelToggleOff = true;
+    row.checks.modelsProcessChip = modelsHead.proc;
+    if (SHOTS && run === 1) { await sleep(300); await shot('world-models'); }
     // --- 用量面板：页签 → 渲染 → 概览表有行 ---
-    await evaluate(clickByText('用量'));
+    await evaluate(clickByText('用量与成本'));
     const usage = await waitFor('用量面板渲染', async () => {
       const v = await evaluate(`(() => {
         const btn = [...document.querySelectorAll('button')].find((b) => b.textContent.trim() === '刷新余额' && b.offsetParent !== null);
@@ -353,7 +341,6 @@ for (let run = 1; run <= RUNS; run += 1) {
     row.checks.modelsHasShowAll = modelsView.checkboxes >= 1;
     if (SHOTS && run === 1) { await sleep(300); await shot('world-models'); }
     if (KEEP) await shot(`run${run}-world`);
-    void pane;
   } catch (err) {
     row.checks.worldError = String(err.message || err);
     hardFailures += 1;
@@ -370,7 +357,6 @@ for (let run = 1; run <= RUNS; run += 1) {
 }
 
 // ---------------------------------------------------------------- 收尾
-await panel('set', [false]);
 ws.close();
 chrome.kill();
 proxy.close();

package/src/ENV_PROMPT.md

@@ -1,19 +1,13 @@
 ## WorkBuddy bridge
 
-This machine has a WorkBuddy desktop sign-in bridged in (region: {{workbuddy.region}}; signed in: {{workbuddy.authed}}).
+This machine has a signed-in WorkBuddy desktop app bridged in (signed in: {{workbuddy.authed}}).
 The model catalog holds {{workbuddy.catalogSize}} models. The currently selected model is `{{workbuddy.model}}` with default credit multiplier {{workbuddy.multiplier}}.
-WorkBuddy desktop main process: {{workbuddy.process}}. Relay-first switch: {{workbuddy.priority}}.
+WorkBuddy desktop main process: {{workbuddy.process}}.
 Spent today through the bridge: {{workbuddy.todayCredit}} credits / {{workbuddy.todayTokens}} tokens (locally recorded).
-The multiplier above already includes any time-limited discount or free window that is active right now; `wb_list_models` also marks which offers are active and their hours.
+The multiplier above is the model's own price plus any time-limited price change this bridge can verify at the moment (including free windows). An offer that only shows a badge may not change the price; `wb_list_models` marks which offers are active and their hours.
 
 - Use `wb_list_models` to see every model with its multiplier before choosing; prefer low-multiplier models for casual tasks.
 - Safe-list gate: {{workbuddy.safeOnly}}. When it is `on`, only the models WorkBuddy publishes as public chat models are callable — `disabled` entries, internal routing aliases (`auto`, `fast-model`, `balanced-model`, `deep-model`), media/code models and delisted ones are refused. Do not try to work around a refusal; tell the user why and offer a safe model instead. `wb_list_models` with `all=true` shows the refused ones with reasons.
 - Use `wb_select_model` when the user asks to switch the WorkBuddy model.
-- `wb_chat` only works while the WorkBuddy desktop main process is running; otherwise it returns「未检测到 WorkBuddy 主进程」. Every call spends the user's own credits at that model's multiplier.
+- `wb_chat` only works while the WorkBuddy desktop main process is running; otherwise it returns「未检测到 WorkBuddy 主进程」. Every call spends the user's own credits at that model's multiplier. Call it when the user asks for WorkBuddy or when a WorkBuddy model would clearly help; do not route every turn through it.
 - `wb_credits` is read-only and costs nothing (also requires the desktop process).
-
-### Relay first: {{workbuddy.priority}}
-
-- Switch `on` **and** process `running`: every user turn that expects a conversational answer (question, chat, writing, reasoning, rewrite, translation, summary) must be answered by a WorkBuddy model first — call `wb_chat` (omit `model` to use `{{workbuddy.model}}`), then speak the returned answer back in your own voice and name the model that answered. Only fall back to your own model if the call fails.
-- Switch `off` (default): do not call `wb_chat`; answer with your own model. If the user explicitly asks for WorkBuddy, `wb_chat` is still allowed — the desktop process must be running.
-- Tool errors and empty answers are not a reason to flip the switch; just say what happened.

package/src/config.js

@@ -4,31 +4,27 @@
  */
 
 /**
- * @typedef {'cn' | 'global'} WbRegion
  * @typedef {object} WbConfigSection
  * @property {boolean} enabled
- * @property {WbRegion} region 国内版 / 国际版。
  * @property {string} model 当前选用的模型 id；空串 = 未选择。
  * @property {string} credentialsDir 自定义凭据目录（留空 = 自动发现）。
- * @property {string} baseUrl 自定义上游 base URL（留空 = 按 region 取官方域名）。
+ * @property {string} baseUrl 自定义上游 base URL（留空 = WorkBuddy 官方域名）。
  * @property {number} maxTokens 单次 wb_chat 的最大输出 token。
  * @property {boolean} envPrompt 是否把桥接状态写进 system 前缀的环境段。
- * @property {boolean} prefer 「中转站优先」：桌宠每轮对话是否先走 WorkBuddy 模型。默认关。
  * @property {boolean} safeOnly 只允许调用安全清单内的公开对话模型。默认开。
  * 注意：手动粘贴的 access token 走 ctx.storeSecret()，不落配置。
- * 0.3.0 起不再有 hostInject：扩展不再改写宿主任何文件，「中转站优先」只在 World 详情页开关。
+ * 0.3.0 起不再有 hostInject：扩展不再改写宿主任何文件。
+ * 0.3.2 起只桥接本机已登录的 WorkBuddy 客户端。
+ * 0.3.4 起移除「中转站优先」开关：wb_* 工具按需调用，不再每轮强制走 WorkBuddy。
  */
 
 export const WB_DEFAULTS = {
   enabled: false,
-  region: 'cn',
   model: '',
   credentialsDir: '',
   baseUrl: '',
   maxTokens: 2048,
   envPrompt: true,
-  /** 由 World 详情页开关写入（0.3.0 起不再有开始页按钮）。 */
-  prefer: false,
   /**
    * 只允许调用 WorkBuddy 公开对话模型（安全清单）。
    * 关掉后能用 disabled / 内部别名 / 预览等模型，但那属于「已知会违反对方使用建议」的操作，
@@ -45,13 +41,6 @@ export const WB_CONFIG_GROUP = {
     type: 'object',
     title: 'WorkBuddy 桥接',
     properties: {
-      'worlds.workbuddy.region': {
-        type: 'string',
-        title: '区域',
-        description: '国内版（copilot.tencent.com）或国际版（workbuddy.ai），按你登录的客户端选择。改动后需重新读取模型目录。',
-        enum: ['cn', 'global'],
-        'x-hot': true,
-      },
       'worlds.workbuddy.model': {
         type: 'string',
         title: '当前模型',
@@ -67,7 +56,7 @@ export const WB_CONFIG_GROUP = {
       'worlds.workbuddy.baseUrl': {
         type: 'string',
         title: '上游地址（可选）',
-        description: '自定义 WorkBuddy 上游 base URL，留空按区域取官方域名。代理 / 中转场景使用；改完重启生效。',
+        description: '自定义 WorkBuddy 上游 base URL，留空使用WorkBuddy 官方域名（copilot.tencent.com）。代理 / 中转场景使用；改完重启生效。',
         'x-hot': false,
       },
       'worlds.workbuddy.maxTokens': {

package/src/credentials.js

@@ -28,7 +28,7 @@ const FRAMING_FIELD = 2;
 const FORMAT_FIELD = 'WBEV1';
 
 /**
- * WorkBuddy 数据目录候选（按平台）。国内版与国际版都扫。
+ * WorkBuddy 数据目录候选（按平台）。
  * @returns {string[]}
  */
 export function candidateCredentialDirs() {
@@ -294,11 +294,19 @@ export function resolveTokens(credential, payloadJson = process.env.WORKBUDDY_AT
 export function candidateAppExecutables() {
   const exe = [];
   if (platform() === 'win32') {
+    // 桌面端有 WorkBuddy / WorkBuddy AI 两种安装形态，目录名与 exe 名都可能带 AI：
+    // 只找 WorkBuddy.exe 时，另一种形态拿不到 at-rest 密钥（审查报告第 9 条）。
+    const dirs = ['WorkBuddy', 'WorkBuddy AI'];
+    const bins = ['WorkBuddy.exe', 'WorkBuddy AI.exe'];
     for (const env of ['LOCALAPPDATA', 'PROGRAMFILES', 'PROGRAMW6432', 'PROGRAMFILES(X86)']) {
       const root = process.env[env];
       if (!root) continue;
-      exe.push(join(root, 'Programs', 'WorkBuddy', 'WorkBuddy.exe'));
-      exe.push(join(root, 'WorkBuddy', 'WorkBuddy.exe'));
+      for (const dir of dirs) {
+        for (const bin of bins) {
+          exe.push(join(root, 'Programs', dir, bin));
+          exe.push(join(root, dir, bin));
+        }
+      }
     }
   }
   if (platform() === 'darwin') {

package/src/definition.js

@@ -7,7 +7,7 @@ export const WORKBUDDY = {
   id: 'workbuddy',
   label: 'WorkBuddy 桥接',
   defaults: () => ({ ...WB_DEFAULTS }),
-  // ctx.cfg 是 worlds.workbuddy 的活引用：region / model / maxTokens 等热改即生效。
+  // ctx.cfg 是 worlds.workbuddy 的活引用：model / maxTokens 等热改即生效。
   create: (ctx) => new WorkBuddyWorld({ ctx }),
   // 自描述：可能出现的全部工具与会推出的全部事件，不进提示词。
   describe: {
@@ -21,8 +21,8 @@ export const WORKBUDDY = {
         en: 'Selects the default WorkBuddy model for wb_chat.',
       },
       wb_chat: {
-        zh: '用选中的 WorkBuddy 模型回答一个单轮问题（消耗本人账号积分）。',
-        en: 'Asks the selected WorkBuddy model a single-turn question (spends your own credits).',
+        zh: '用选中的 WorkBuddy 模型回答一个单轮问题（消耗本人账号积分；需桌面端主进程在运行）。',
+        en: 'Asks the selected WorkBuddy model a single-turn question (spends your own credits). Requires the WorkBuddy desktop app to be running.',
       },
       wb_credits: {
         zh: '只读查询当前账号的 WorkBuddy 积分余额。',