dsh-connect-workbuddy 1.3.0 → 1.4.0

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 1.4.0 (2026-09-11)
+
+### Features
+
+- **🆕 正式支持国际版 WorkBuddy AI（www.workbuddy.ai）**——国内版与国际版账号在本插件中获得完全对等的支持，**零配置、零开关，全自动**：
+
+  - **怎么用**：在插件卡片的账号列表里选中国际版账号（凭据文件 `workbuddy-desktop-ai.info`，Gmail 等邮箱登录的那个）即等于切到国际版；选回手机号账号即回到国内版。区域判定完全跟随凭据文件自带的 `domain` 字段（国际版为 `www.workbuddy.ai`，国内版为 `www.codebuddy.cn` / `www.workbuddy.cn`），无需任何手动设置。
+  - **国际账号可用的完整功能**（全部经真实国际账号端到端实测）：
+    - **模型接入**：**20 个模型**进入 DSH 模型选择器，含国际版独有阵容——GPT-6-Astra、GPT-5.6-Sol / Terra / Luna、GPT-5.5 / 5.4 / 5.3-Codex、Gemini-3.5-Flash、免费的 `deepseek-v4.1-flash` / Hy3 / Hy4 preview 等；与国内版共有的 GLM-5.3 / 5.2、Kimi-K3 / K2.6 也正常列出；
+    - **积分倍率**：20/20 模型全部带倍率展示（GPT-6-Astra x6.67、GPT-5.6-Sol x3.47、Auto x0.79、`deepseek-v4.1-flash` / Hy3 x0.00 免费等），与 WorkBuddy AI 官方客户端展示的是同一个 `credits` 字段（已在其 App bundle 中确认渲染数据源一致）；
+    - **积分概览**：按套餐展示国际账号的剩余积分与到期时间（一次性 Bonus Pack 与月度 Free Plan Subscription 均正确区分），查询走国际网关 `https://www.workbuddy.ai`；
+    - **每日签到**：签到状态与领取端点在国际网关实测可用；活动未开启时按钮自动禁用（409 守卫），开启后即可直接领取；
+    - **对话路由**：chat 请求自动走国际网关，wire 协议与国内版同构（业务码 11128 等语义一致，`prepareChatBody` 的改写逻辑两侧通用）。
+  - **核心修复：按渠道读取模型目录**。原先国际账号读 `/console/enterprises/personal/models`（国内路径，国际网关返回 HTTP 500）。改用两区域各自的正确来源后，国际账号首次拿到**完整 20 个模型**：
+    - **国内**：`copilot.tencent.com/v2/enterprises/personal/models`（保持原样，29 个模型中取 `cli` agent 的 15 个）；
+    - **国际**：`www.workbuddy.ai/v3/config` —— 关键在于**必须用桌面端 User-Agent**：配置服务按客户端渠道返回不同产品配置，`CLI/… CodeBuddy/…` 只给 35 个模型并**缺失 `deepseek-v4.1-flash`、`gpt-6-astra`**（尽管两者都能正常对话），而桌面渠道给出账号真实的 20 个 chat 模型。版本号无关（`WorkBuddy/5.5.2`、`WorkBuddy/1.0.0`、裸 `WorkBuddy` 结果一致），是 `WorkBuddy` 这个产品标识选择渠道。国内网关不需要这个切换：其桌面配置的 `cli` agent 为 0 个模型。
+    - 国际账号此前**只剩 `hy3`、`hy4-preview`** 两个可用模型（`deepseek-v4.1-flash` 被静默丢弃、`gpt-6-astra` 不可见），现在 20 个全部就位，与 WorkBuddy AI 客户端的模型菜单一致。
+
+### Fixes
+
+- **目录与勾选按区域隔离（国内 / 国际各一套）**：此前 `lastCatalog` 与 `enabledModelIds` 是全局单槽。国内账号下勾选的模型（含 `deepseek-v4.1-flash`、`hy3-x`）在切到国际账号后，会与**国际目录**求交集——凡是国际目录里没有的 id 都被静默丢弃：国际账号实际只剩 `hy3`、`hy4-preview` 两个模型可用（`src/index.ts` 启动时 `deriveCatalog(国际目录, 国内勾选)`）。
+  - 现改为 `regions.cn` / `regions.global` 两套独立槽位（目录、勾选、图片开关、上下文预算各一份），互不干扰；切换账号不再覆盖另一区域的配置。
+  - 新增按区域区分的静态 fallback 目录：国际账号在首次拉取前不再被塞入国内模型清单（`FALLBACK_WORKBUDDY_MODELS_GLOBAL`，2026-09-11 从国际网关桌面渠道配置实测捕获 20 个模型及其倍率，含免费的 `deepseek-v4.1-flash`）。
+  - 旧的扁平字段保留为**国内区域的迁移来源**（旧配置一律来自国内端点），国际区域绝不继承——这正是丢勾选的根源。
+  - 卡片保存改为写入当前账号所属区域的槽位；usage 文档新增 `region` 字段供卡片定位。
+- 三个探测脚本（`probe-models` / `probe-credits` / `probe-account-switch`）同步改用 `/v2/...` 路径：此前它们对国际账号同样会 500，导致诊断输出误导。
+- 新增只读评估脚本 `scripts/probe-global-eval.mjs`：对比国际网关 `/v2/...`（500）与 `/v3/config`（200）两条取目录路径，并验证积分与签到端点——本轮的渠道发现即由它得出。
+
+### Tests
+
+- 新增 `fetchModels` 回归测试：stub 上游后断言 CN 凭据（`codebuddy.cn` / `workbuddy.cn`）拼出 `copilot.tencent.com/v2/enterprises/personal/models`、国际凭据（`workbuddy.ai`）拼出 `www.workbuddy.ai/v3/config`，并断言国际请求携带**桌面端 User-Agent**（`WorkBuddy/5.5.2`，CLI UA 会拿到缺模型的 35 个）、CN 请求**不得**携带桌面端 UA（国内桌面配置的 `cli` agent 为空）。把「按渠道取目录」钉死，防止日后退回会丢模型的取法。
+- `regionOf` 测试补上 `www.workbuddy.cn`（国内版新 domain 形态，实测本机存在）。
+- 新增区域隔离测试：`regionStateOf` 断言旧扁平字段只被读作国内状态、国际区域绝不继承、显式槽位优先；`fallbackModelsFor` 断言国内清单不得泄漏进国际（国内无 `gpt-*`/`gemini-*`，且 `default-model` 仅属国际）；web-status 断言文档携带的 `region` 与凭据域一致、且四个区域化访问器收到的都是该区域。
+- **每日签到（领取）路由的守卫逻辑首次获得直接 handler 测试**（实测两区域端点行为后补齐）：
+  - 活动未开启（国际账号实测形态，`active:false`）→ 409 且**绝不调用**上游领取；
+  - 今日已签到 → 200 `alreadyCheckedIn` 且不调用上游领取（幂等保护）；
+  - 活动开启且未签到 → 恰好领取一次、领取后重读状态并返回刷新后的连签天数；
+  - 非回环 Origin → 403、非 POST → 405，两道安全守卫均在触碰上游前拒绝。
+  - 实测依据（全部经插件真实代码路径、零状态变更验证）：CN 网关领取端点对已签到账号返回业务拒绝「今天已签到，请明天再来」；国际网关同路径存在，对未开启活动返回「签到活动未开启或已过期」（均为 HTTP 400 业务码而非 404，证明端点存在、鉴权与协议一致）。国际版 App bundle 中确认签到端点与插件同路径，官方 App 对签到走无前缀形态、`get-user-resource` 才需 `/v2` 前缀——插件统一 `/v2` 形态在两侧网关均实测可用。
+
 ## 1.3.0 (2026-09-10)
 
 ### Breaking Changes

package/README.en.md

@@ -17,11 +17,11 @@
 
 [English](README.en.md) | 中文
 
-A [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bundle plugin that connects locally signed-in WorkBuddy CN models to the DSH model picker, with a read-only credits overview and selectable model management.
+A [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bundle plugin that connects locally signed-in WorkBuddy models to the DSH model picker — **both the CN app and the international WorkBuddy AI app are supported** — with a read-only credits overview and selectable model management.
 
 ## Features
 
-- **WorkBuddy model provider** — registers locally signed-in WorkBuddy models as the `workbuddy` provider (e.g. `GLM-5.3`, `DeepSeek-V4-Pro`, `Kimi-K3`, `MiniMax-M3`, `Hy3`); model names carry the upstream credit multiplier (e.g. `GLM-5.3 · x0.79`), matching WorkBuddy's own model menu.
+- **WorkBuddy model provider (CN + international)** — registers locally signed-in WorkBuddy models as the `workbuddy` provider: CN accounts expose `GLM-5.3`, `DeepSeek-V4-Pro`, `Kimi-K3`, `MiniMax-M3`, `Hy3`, etc., while international accounts expose `GPT-5.6`, `Gemini-3.5-Flash`, `GLM-5.3`, `Kimi-K3`, etc.; model names carry the upstream credit multiplier (e.g. `GLM-5.3 · x0.79`), matching WorkBuddy's own model menu. **Region routing is fully automatic — no toggle anywhere**: whichever account you select is the region you use.
 - **Model management** — refresh the full catalog from upstream and enable or disable each model individually; refresh is a draft operation that only takes effect on save. Upstream also reports credit multiplier, context/output limits, and reasoning efforts; image input is opted in per model manually (off by default).
 - **Local account switching** — discovers the multiple sign-in credentials WorkBuddy's desktop app leaves behind and lets you switch between them. Tokens are never written to DSH settings.
 - **Read-only credits overview** — remaining credit aggregated per package, plus each model's credit multiplier. Queries consume no credits.
@@ -40,7 +40,7 @@ DSH PiAiAdapter
   -> DSH executes local tools and returns their results
 ```
 
-The model catalog comes from `/console/enterprises/personal/models` and the credits overview from `https://www.codebuddy.cn/v2/billing/meter/get-user-resource`; both are read-only.
+The model catalog comes from each region's correct source: CN reads `/v2/enterprises/personal/models`, while international reads `www.workbuddy.ai/v3/config` — the config service serves a different roster per client channel, and only the desktop user agent yields the account's real 20-model list (including the free `deepseek-v4.1-flash`). The credits overview comes from `https://www.codebuddy.cn/v2/billing/meter/get-user-resource` (international accounts auto-route to `https://www.workbuddy.ai`); all are read-only. No manual region toggle: routing follows the `domain` field inside the credential file (`workbuddy.ai` → international, anything else → CN), and **each region keeps its own directory and selection**, so switching accounts never overwrites the other region's picks.
 
 Credentials are read (read-only) from the WorkBuddy desktop app's own auth file. Refreshed tokens are kept separately in `$DSH_HOME/.workbuddy-auth.json`; the desktop app's file is never written.
 

package/README.md

@@ -23,11 +23,11 @@
   <a href="https://dshfind.com/plugins/dingminhua/dsh-connect-workbuddy"><img src="https://dshfind.com/api/badge/dingminhua/dsh-connect-workbuddy" alt="dshfind plugin"></a>
 </p>
 
-一个独立的 [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bundle 插件。它把本机已登录的 WorkBuddy 中国区账号接到 DSH 的模型选择器，同时提供**只读**的积分概览与可勾选的模型管理界面。
+一个独立的 [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bundle 插件。它把本机已登录的 WorkBuddy 账号（**国内版与国际版 WorkBuddy AI 均支持**）接到 DSH 的模型选择器，同时提供**只读**的积分概览与可勾选的模型管理界面。
 
 ## 功能特性
 
-- **WorkBuddy 模型接入** —— 把本机登录的 WorkBuddy 模型注册为 DSH 的 `workbuddy` provider，模型选择器出现 `GLM-5.3`、`DeepSeek-V4-Pro`、`Kimi-K3`、`MiniMax-M3`、`Hy3` 等；模型名内嵌上游积分倍率（如 `GLM-5.3 · x0.79`），与 WorkBuddy 自身模型菜单一致。
+- **WorkBuddy 模型接入（国内版 + 国际版）** —— 把本机登录的 WorkBuddy 模型注册为 DSH 的 `workbuddy` provider：国内账号出现 `GLM-5.3`、`DeepSeek-V4-Pro`、`Kimi-K3`、`MiniMax-M3`、`Hy3` 等，国际账号出现 `GPT-5.6`、`Gemini-3.5-Flash`、`GLM-5.3`、`Kimi-K3` 等；模型名内嵌上游积分倍率（如 `GLM-5.3 · x0.79`），与 WorkBuddy 自身模型菜单一致。**区域自动路由，无需任何开关**——选中哪个账号就走哪个区域。
 - **模型管理** —— 从上游刷新完整模型目录，逐项勾选启用或禁用；刷新是草稿操作，点保存才生效。上游同时给出积分倍率、上下文/输出上限与推理档位；图片输入按模型手动勾选（默认不勾选）。
 - **本机账号切换** —— 自动发现 WorkBuddy 桌面端留下的多个登录凭据，可切换账号；Token 不写入 DSH 设置。
 - **只读积分概览** —— 按套餐聚合展示剩余积分，并列出每个模型的积分倍率。查询不消耗积分。
@@ -46,7 +46,7 @@ DSH PiAiAdapter
   -> DSH 本地执行工具并回传结果
 ```
 
-模型目录走 `/console/enterprises/personal/models`，积分概览走 `https://www.codebuddy.cn/v2/billing/meter/get-user-resource`，两者均为只读接口。
+模型目录按区域取自各自的正确来源：国内版走 `/v2/enterprises/personal/models`，国际版走 `www.workbuddy.ai/v3/config`（配置服务按客户端渠道返回不同清单，国际版必须用桌面端 User-Agent 才能取到账号真实的 20 个模型，含免费的 `deepseek-v4.1-flash`）。积分概览走 `https://www.codebuddy.cn/v2/billing/meter/get-user-resource`（国际版账号自动路由到 `https://www.workbuddy.ai`），均为只读接口。区域无需手动切换：插件按凭据文件里的 `domain` 字段自动路由（`workbuddy.ai` → 国际版，其余 → 国内版），且**两个区域各自保存一份目录与勾选**，切换账号互不覆盖。
 
 凭据读取自 WorkBuddy 桌面 App 自身的 auth 文件（只读）；刷新得到的 token 单独存放在 `$DSH_HOME/.workbuddy-auth.json`，桌面端文件永不被写入。
 

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as defaultDesktopAuthCandidates, O as workbuddyOwnAuthPath, a as readHostHeartbeat, b as WORKBUDDY_AUTH_FILE_ENV, c as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, l as WorkBuddyUpstreamClient, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, w as defaultDesktopAuthDirs, x as WorkBuddyCredentialStore } from "./host-heartbeat-UlZjd09_.js";
+import { A as workbuddyOwnAuthPath, C as WorkBuddyCredentialStore, E as defaultDesktopAuthDirs, S as WORKBUDDY_AUTH_FILE_ENV, T as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, l as WorkBuddyUpstreamClient, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive } from "./host-heartbeat-DQQwiUtm.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -391,8 +391,10 @@ window.__ModuleLoader__.load({
 			const savedImageIds = status.status === "signed-in" ? new Set(status.imageModelIds) : /* @__PURE__ */ new Set();
 			const activeImageIds = draftImageIds ?? savedImageIds;
 			const configured = settingsScope?.getSnapshot().value;
-			const savedContextBudgets = typeof configured === "object" && configured !== null && typeof configured.contextBudgets === "object" ? configured.contextBudgets : {};
-			const activeContextBudgets = draftContextBudgets ?? savedContextBudgets;
+			const configuredRegion = status.status === "signed-in" ? configured?.regions?.[status.region] : void 0;
+			const legacyContextBudgets = status.status === "signed-in" && status.region === "cn" ? configured?.contextBudgets : void 0;
+			const savedContextBudgetsSource = configuredRegion?.contextBudgets ?? legacyContextBudgets;
+			const activeContextBudgets = draftContextBudgets ?? (typeof savedContextBudgetsSource === "object" && savedContextBudgetsSource !== null ? savedContextBudgetsSource : {});
 			const dirty = draftModels !== void 0 || draftEnabledIds !== void 0 || draftImageIds !== void 0 || draftContextBudgets !== void 0;
 			const toggleModel = (modelId) => {
 				const next = new Set(activeEnabledIds);
@@ -421,13 +423,20 @@ window.__ModuleLoader__.load({
 			};
 			const saveModels = async () => {
 				if (settingsScope === void 0) return;
+				if (status.status !== "signed-in") return;
 				setSaving(true);
 				setSaveError(void 0);
 				try {
-					await settingsScope.set("lastCatalog", visibleModels.map(toPersistedWorkBuddyModel));
-					await settingsScope.set("enabledModelIds", [...activeEnabledIds]);
-					await settingsScope.set("imageModelIds", [...activeImageIds]);
-					await settingsScope.set("contextBudgets", activeContextBudgets);
+					const configuredRegions = configured?.regions;
+					await settingsScope.set("regions", {
+						...typeof configuredRegions === "object" && configuredRegions !== null ? configuredRegions : {},
+						[status.region]: {
+							lastCatalog: visibleModels.map(toPersistedWorkBuddyModel),
+							enabledModelIds: [...activeEnabledIds],
+							imageModelIds: [...activeImageIds],
+							contextBudgets: activeContextBudgets
+						}
+					});
 					discardModels();
 					await refreshUsage();
 				} catch (error) {

package/lib/{host-heartbeat-UlZjd09_.js → host-heartbeat-DQQwiUtm.js}

@@ -518,6 +518,164 @@ const FALLBACK_WORKBUDDY_MODELS = [
 		maxTokens: 5e4
 	}
 ];
+/**
+* Static CLI models captured from the INTERNATIONAL gateway's desktop-channel
+* product config (`www.workbuddy.ai/v3/config`, 2026-09-11). The two regions
+* expose different rosters — the CN list has no `gpt-*`/`gemini-*` entries —
+* so a global account must never be seeded with the CN list. Like the CN
+* fallback this is replaced by the live refresh; it only keeps the provider
+* usable before the first fetch lands. Order and rates mirror the upstream.
+*/
+const FALLBACK_WORKBUDDY_MODELS_GLOBAL = [
+	{
+		id: "default-model",
+		name: "Auto",
+		contextWindow: 176e3,
+		maxTokens: 24e3,
+		creditMultiplier: .79
+	},
+	{
+		id: "fast-model",
+		name: "Fast",
+		contextWindow: 2e5,
+		maxTokens: 32e3,
+		creditMultiplier: .34
+	},
+	{
+		id: "balanced-model",
+		name: "Balanced",
+		contextWindow: 256e3,
+		maxTokens: 32e3,
+		creditMultiplier: .59
+	},
+	{
+		id: "primary-model",
+		name: "Primary",
+		contextWindow: 272e3,
+		maxTokens: 72e3,
+		creditMultiplier: 3.31
+	},
+	{
+		id: "deep-model",
+		name: "Deep",
+		contextWindow: 176e3,
+		maxTokens: 24e3,
+		creditMultiplier: 3.33
+	},
+	{
+		id: "deepseek-v4.1-flash",
+		name: "Deepseek-V4.1-Flash",
+		contextWindow: 1e6,
+		maxTokens: 128e3,
+		creditMultiplier: 0
+	},
+	{
+		id: "gpt-6-astra",
+		name: "GPT-6-Astra",
+		contextWindow: 1e6,
+		maxTokens: 128e3,
+		creditMultiplier: 6.67
+	},
+	{
+		id: "hy4-preview",
+		name: "Hy4 preview",
+		contextWindow: 1e6,
+		maxTokens: 64e3,
+		creditMultiplier: 0
+	},
+	{
+		id: "hy3",
+		name: "Hy3",
+		contextWindow: 192e3,
+		maxTokens: 64e3,
+		creditMultiplier: 0
+	},
+	{
+		id: "gpt-5.6-sol",
+		name: "GPT-5.6-Sol",
+		contextWindow: 1e6,
+		maxTokens: 128e3,
+		creditMultiplier: 3.47
+	},
+	{
+		id: "gpt-5.6-terra",
+		name: "GPT-5.6-Terra",
+		contextWindow: 1e6,
+		maxTokens: 128e3,
+		creditMultiplier: 1.39
+	},
+	{
+		id: "gpt-5.6-luna",
+		name: "GPT-5.6-Luna",
+		contextWindow: 1e6,
+		maxTokens: 128e3,
+		creditMultiplier: .14
+	},
+	{
+		id: "gpt-5.5",
+		name: "GPT-5.5",
+		contextWindow: 1e6,
+		maxTokens: 128e3,
+		creditMultiplier: 3.31
+	},
+	{
+		id: "gpt-5.4",
+		name: "GPT-5.4",
+		contextWindow: 272e3,
+		maxTokens: 72e3,
+		creditMultiplier: 1.65
+	},
+	{
+		id: "gpt-5.3-codex",
+		name: "GPT-5.3-Codex",
+		contextWindow: 272e3,
+		maxTokens: 72e3,
+		creditMultiplier: 1.25
+	},
+	{
+		id: "gemini-3.5-flash",
+		name: "Gemini-3.5-Flash",
+		contextWindow: 1e6,
+		maxTokens: 65536,
+		creditMultiplier: .99
+	},
+	{
+		id: "glm-5.3",
+		name: "GLM-5.3",
+		contextWindow: 1e6,
+		maxTokens: 48e3,
+		creditMultiplier: .79
+	},
+	{
+		id: "glm-5.2",
+		name: "GLM-5.2",
+		contextWindow: 1e6,
+		maxTokens: 48e3,
+		creditMultiplier: .79
+	},
+	{
+		id: "kimi-k3",
+		name: "Kimi-K3",
+		contextWindow: 1e6,
+		maxTokens: 32e3,
+		creditMultiplier: 1.62
+	},
+	{
+		id: "kimi-k2.6",
+		name: "Kimi-K2.6",
+		contextWindow: 256e3,
+		maxTokens: 32e3,
+		creditMultiplier: .52
+	}
+];
+/**
+* Static fallback directory for a region. Each region keeps its own model
+* slot in settings; the fallback must match the region so an account never
+* shows the other region's roster.
+*/
+function fallbackModelsFor(region) {
+	return region === "global" ? FALLBACK_WORKBUDDY_MODELS_GLOBAL : FALLBACK_WORKBUDDY_MODELS;
+}
 /** Apply the saved local DSH budget; models above 200K default to 200K. */
 function applyContextBudgets(catalog, budgets = {}) {
 	return catalog.map((model) => ({
@@ -546,7 +704,41 @@ var WorkBuddyCatalog = class {
 const CN_CHAT_BASE = "https://copilot.tencent.com";
 const CN_BILLING_BASE = "https://www.codebuddy.cn";
 const GLOBAL_BASE = "https://www.workbuddy.ai";
+/**
+* Model-catalog path used by the CN region (and the global fallback). The CN
+* gateway answers it with the same bytes as its legacy
+* `/console/enterprises/personal/models` alias. See {@link GLOBAL_CONFIG_PATH}
+* for why the international region reads a different document.
+*/
+const MODELS_CATALOG_PATH = "/v2/enterprises/personal/models";
+/**
+* Remote product-config path on the global gateway. This is the document the
+* desktop channel receives; it is the only source that lists the account's
+* full international chat roster (see {@link DESKTOP_UA}).
+*/
+const GLOBAL_CONFIG_PATH = "/v3/config";
 const CLIENT_UA = "CLI/2.63.2 CodeBuddy/2.63.2";
+/**
+* User agent of the WorkBuddy desktop app.
+*
+* The config service serves a DIFFERENT product configuration per client
+* channel, selected by this product token — the version suffix is ignored
+* (`WorkBuddy/5.5.2`, `WorkBuddy/1.0.0` and a bare `WorkBuddy` answer
+* identically). On the INTERNATIONAL gateway the split decides which models
+* exist at all:
+*
+*   - CLI channel (`CLI/… CodeBuddy/…`) → 35 models that OMIT
+*     `deepseek-v4.1-flash` and `gpt-6-astra`, even though both are perfectly
+*     chat-usable (verified: `deepseek-v4.1-flash` streams HTTP 200 and is
+*     billed `x0.00`);
+*   - desktop channel → the account's real 20-model chat roster including both.
+*
+* The plugin emulates the CLI channel for CHAT but reads the desktop channel's
+* configuration to learn the account's actual model list. The CN gateway needs
+* no such switch: its desktop config carries no `cli` agent roster at all, so
+* CN keeps reading the shared `/v2/enterprises/personal/models` path.
+*/
+const DESKTOP_UA = "WorkBuddy/5.5.2";
 const JSON_TIMEOUT_MS = 3e4;
 const ERROR_BODY_LIMIT = 4096;
 /** Insufficient-credit markers, ASCII lowercase plus the original Chinese. */
@@ -775,6 +967,34 @@ function parseUpstreamModel(value) {
 	};
 }
 /**
+* Select the chat-capable models from a catalog-shaped document: parse every
+* entry, then keep the `cli` agent's roster in its declared order.
+*
+* Both the CN personal-models document and the global `/v3/config` document
+* carry `models` plus an `agents` roster with the same entry shape, so one
+* selector serves them. Without a usable `cli` roster the whole parsed catalog
+* is exposed rather than nothing: the roster is an upstream detail that may
+* change, and an empty answer would silently disarm the provider.
+*/
+function selectCliModels(rawModels, agents) {
+	const byId = /* @__PURE__ */ new Map();
+	for (const model of Array.isArray(rawModels) ? rawModels : []) {
+		const parsed = parseUpstreamModel(model);
+		if (parsed !== void 0) byId.set(parsed.id, parsed);
+	}
+	let cliIds;
+	for (const agent of Array.isArray(agents) ? agents : []) if (typeof agent === "object" && agent !== null) {
+		const wrapped = agent;
+		if (wrapped["name"] === "cli" && Array.isArray(wrapped["models"])) {
+			cliIds = wrapped["models"].filter((id) => typeof id === "string");
+			break;
+		}
+	}
+	const models = (cliIds !== void 0 && cliIds.length > 0 ? cliIds : [...byId.keys()]).map((id) => byId.get(id)).filter((model) => model !== void 0);
+	if (models.length === 0) throw new Error("workbuddy model catalog resolved to an empty list");
+	return models;
+}
+/**
 * Upstream HTTP client. One instance serves the whole plugin; requests take
 * the credential explicitly so token refreshes apply on the next call.
 */
@@ -831,11 +1051,38 @@ var WorkBuddyUpstreamClient = class {
 		return outcome;
 	}
 	/**
-	* GET the personal model catalog and keep the `cli` agent's models only,
-	* preserving the capability fields the plugin card displays.
+	* Read the model directory for the credential's region.
+	*
+	* The two regions expose their chat roster through different documents:
+	* CN answers `/v2/enterprises/personal/models`, while the global gateway's
+	* personal-models path returns HTTP 500 and the CLI channel's `/v3/config`
+	* omits chat-usable models — so global reads `/v3/config` as the desktop
+	* channel (see {@link DESKTOP_UA}). Both documents share the entry shape, so
+	* one parser serves them. No user-side toggle is involved: the region comes
+	* from the credential's `domain`.
 	*/
 	async fetchModels(credential, signal) {
-		const response = await fetch(`${chatBase(credential)}/console/enterprises/personal/models`, {
+		const timeout = signal ?? AbortSignal.timeout(JSON_TIMEOUT_MS);
+		if (regionOf(credential.domain) === "global") {
+			const response = await fetch(`${GLOBAL_BASE}${GLOBAL_CONFIG_PATH}`, {
+				headers: {
+					"Authorization": `Bearer ${credential.accessToken}`,
+					"Accept": "application/json",
+					...credential.uid === "" ? {} : { "X-User-Id": credential.uid },
+					...credential.domain === "" ? {} : { "X-Domain": credential.domain },
+					"X-Product": "SaaS",
+					"X-Requested-With": "XMLHttpRequest",
+					"Connection": "close",
+					"User-Agent": DESKTOP_UA
+				},
+				signal: timeout
+			});
+			const envelope = await readEnvelope(response);
+			if (!response.ok || envelope.code !== 0) throw envelopeError(response.status, envelope);
+			const data = typeof envelope.data === "object" && envelope.data !== null ? envelope.data : {};
+			return selectCliModels(data["models"], data["agents"]);
+		}
+		const response = await fetch(`${chatBase(credential)}${MODELS_CATALOG_PATH}`, {
 			headers: {
 				"Authorization": `Bearer ${credential.accessToken}`,
 				"Accept": "application/json",
@@ -843,29 +1090,12 @@ var WorkBuddyUpstreamClient = class {
 				"Referer": `${originReferer(credential)}/`,
 				"User-Agent": CLIENT_UA
 			},
-			signal: signal ?? AbortSignal.timeout(JSON_TIMEOUT_MS)
+			signal: timeout
 		});
 		const envelope = await readEnvelope(response);
 		if (!response.ok || envelope.code !== 0) throw envelopeError(response.status, envelope);
 		const data = typeof envelope.data === "object" && envelope.data !== null ? envelope.data : {};
-		const rawModels = Array.isArray(data["models"]) ? data["models"] : [];
-		const agents = Array.isArray(data["agents"]) ? data["agents"] : [];
-		let cliIds;
-		for (const agent of agents) if (typeof agent === "object" && agent !== null) {
-			const wrapped = agent;
-			if (wrapped["name"] === "cli" && Array.isArray(wrapped["models"])) {
-				cliIds = wrapped["models"].filter((id) => typeof id === "string");
-				break;
-			}
-		}
-		const byId = /* @__PURE__ */ new Map();
-		for (const model of rawModels) {
-			const parsed = parseUpstreamModel(model);
-			if (parsed !== void 0) byId.set(parsed.id, parsed);
-		}
-		const models = (cliIds !== void 0 && cliIds.length > 0 ? cliIds : [...byId.keys()]).map((id) => byId.get(id)).filter((model) => model !== void 0);
-		if (models.length === 0) throw new Error("workbuddy model catalog resolved to an empty list");
-		return models;
+		return selectCliModels(data["models"], data["agents"]);
 	}
 	/** Query today's check-in status without changing account state. */
 	async fetchCheckinStatus(credential) {
@@ -996,7 +1226,7 @@ var WorkBuddyUpstreamClient = class {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "1.3.0";
+const WORKBUDDY_CONNECT_VERSION = "1.4.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**
@@ -1102,4 +1332,4 @@ async function clearHostHeartbeat() {
 	await rm(workbuddyHostHeartbeatPath(), { force: true });
 }
 //#endregion
-export { defaultDesktopAuthCandidates as C, workbuddyAccountId as D, parseWorkBuddyAuth as E, workbuddyOwnAuthPath as O, authFileName as S, defaultDesktopAuthPath as T, WorkBuddyCatalog as _, readHostHeartbeat as a, WORKBUDDY_AUTH_FILE_ENV as b, WORKBUDDY_CONNECT_VERSION as c, parseCreditMultiplier as d, parseReasoning as f, FALLBACK_WORKBUDDY_MODELS as g, regionOf as h, processStartTimeMs as i, WorkBuddyUpstreamClient as l, prepareChatBody as m, clearHostHeartbeat as n, workbuddyHostHeartbeatPath as o, parseUpstreamModel as p, isHeartbeatProcessAlive as r, writeHostHeartbeat as s, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, classifyUpstreamError as u, deriveCatalog as v, defaultDesktopAuthDirs as w, WorkBuddyCredentialStore as x, WORKBUDDY_AUTH_FILENAME as y };
+export { workbuddyOwnAuthPath as A, WorkBuddyCredentialStore as C, defaultDesktopAuthPath as D, defaultDesktopAuthDirs as E, parseWorkBuddyAuth as O, WORKBUDDY_AUTH_FILE_ENV as S, defaultDesktopAuthCandidates as T, FALLBACK_WORKBUDDY_MODELS_GLOBAL as _, readHostHeartbeat as a, fallbackModelsFor as b, WORKBUDDY_CONNECT_VERSION as c, parseCreditMultiplier as d, parseReasoning as f, FALLBACK_WORKBUDDY_MODELS as g, regionOf as h, processStartTimeMs as i, workbuddyAccountId as k, WorkBuddyUpstreamClient as l, prepareChatBody as m, clearHostHeartbeat as n, workbuddyHostHeartbeatPath as o, parseUpstreamModel as p, isHeartbeatProcessAlive as r, writeHostHeartbeat as s, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, classifyUpstreamError as u, WorkBuddyCatalog as v, authFileName as w, WORKBUDDY_AUTH_FILENAME as x, deriveCatalog as y };

package/lib/index.d.ts

@@ -294,8 +294,15 @@ declare class WorkBuddyUpstreamClient {
   /** POST the token-refresh endpoint; the caller merges the outcome. */
   refreshToken(credential: WorkBuddyCredential): Promise<WorkBuddyRefreshOutcome>;
   /**
-   * GET the personal model catalog and keep the `cli` agent's models only,
-   * preserving the capability fields the plugin card displays.
+   * Read the model directory for the credential's region.
+   *
+   * The two regions expose their chat roster through different documents:
+   * CN answers `/v2/enterprises/personal/models`, while the global gateway's
+   * personal-models path returns HTTP 500 and the CLI channel's `/v3/config`
+   * omits chat-usable models — so global reads `/v3/config` as the desktop
+   * channel (see {@link DESKTOP_UA}). Both documents share the entry shape, so
+   * one parser serves them. No user-side toggle is involved: the region comes
+   * from the credential's `domain`.
    */
   fetchModels(credential: WorkBuddyCredential, signal?: AbortSignal): Promise<readonly WorkBuddyUpstreamModel[]>;
   /** Query today's check-in status without changing account state. */
@@ -320,6 +327,21 @@ type WorkBuddyModelInfo = WorkBuddyUpstreamModel;
  * with a usable catalog even while the first fetch is in flight or offline.
  */
 declare const FALLBACK_WORKBUDDY_MODELS: readonly WorkBuddyModelInfo[];
+/**
+ * Static CLI models captured from the INTERNATIONAL gateway's desktop-channel
+ * product config (`www.workbuddy.ai/v3/config`, 2026-09-11). The two regions
+ * expose different rosters — the CN list has no `gpt-*`/`gemini-*` entries —
+ * so a global account must never be seeded with the CN list. Like the CN
+ * fallback this is replaced by the live refresh; it only keeps the provider
+ * usable before the first fetch lands. Order and rates mirror the upstream.
+ */
+declare const FALLBACK_WORKBUDDY_MODELS_GLOBAL: readonly WorkBuddyModelInfo[];
+/**
+ * Static fallback directory for a region. Each region keeps its own model
+ * slot in settings; the fallback must match the region so an account never
+ * shows the other region's roster.
+ */
+declare function fallbackModelsFor(region: 'cn' | 'global'): readonly WorkBuddyModelInfo[];
 /**
  * Derive the runtime catalog from the last-refreshed directory plus the
  * user's selection. This is the single source of truth for what DSH exposes,
@@ -579,6 +601,12 @@ interface WorkBuddyWebAccount {
   selected: boolean;
 }
 type WorkBuddyWebPackage = WorkBuddyWebCreditPackage;
+/**
+ * Region of the signed-in credential: the CN app (`codebuddy.cn` /
+ * `workbuddy.cn`) or the international WorkBuddy AI app (`workbuddy.ai`).
+ * The card uses this to read and write the matching per-region model slot.
+ */
+type WorkBuddyWebRegion = 'cn' | 'global';
 /** The JSON document the plugin card renders. */
 type WorkBuddyWebUsage = {
   status: 'signed-out';
@@ -590,6 +618,8 @@ type WorkBuddyWebUsage = {
   accountName: string;
   uin?: string;
   domain?: string;
+  /** Which per-region model directory and selection this account owns. */
+  region: WorkBuddyWebRegion;
   source?: 'desktop' | 'dsh';
   tokenExpiresAtMs: number;
   accounts: readonly WorkBuddyWebAccount[];
@@ -610,14 +640,19 @@ type WorkBuddyWebUsage = {
 interface WorkBuddyStatusRouteOptions {
   store: WorkBuddyCredentialStore;
   client: Pick<WorkBuddyUpstreamClient, 'fetchCredits' | 'fetchCheckinStatus' | 'claimDailyCheckin'>;
-  /** The last-refreshed model directory (unfiltered) for card display. */
-  displayModels(): readonly WorkBuddyModelInfo[];
-  /** The user's selection, stored as model ids. */
-  enabledModelIds(): readonly string[];
-  /** Model ids the user opted into image input. */
-  imageModelIds(): readonly string[];
-  /** Saved local DSH context budgets by model id. */
-  contextBudgets(): Readonly<Record<string, number | undefined>>;
+  /**
+   * The selected region's last-refreshed model directory (unfiltered) for card
+   * display. Region-scoped because the CN and international apps expose
+   * different rosters; showing one region's directory on the other account is
+   * the bug this parameter exists to prevent.
+   */
+  displayModels(region: WorkBuddyRegion): readonly WorkBuddyModelInfo[];
+  /** The selected region's selection, stored as model ids. */
+  enabledModelIds(region: WorkBuddyRegion): readonly string[];
+  /** Model ids the user opted into image input, for the selected region. */
+  imageModelIds(region: WorkBuddyRegion): readonly string[];
+  /** Saved local DSH context budgets by model id, for the selected region. */
+  contextBudgets(region: WorkBuddyRegion): Readonly<Record<string, number | undefined>>;
   /** Re-read the live catalog from the upstream. */
   discoverModels?(signal?: AbortSignal): Promise<readonly WorkBuddyModelInfo[]>;
 }
@@ -641,22 +676,54 @@ declare const name = "dsh-connect-workbuddy";
 declare const inject: string[];
 /** Settings namespace for the plugin configuration card. */
 declare const WORKBUDDY_SETTINGS_NS: SettingsNamespace;
+/** One region's model directory and the user's selection within it. */
+interface WorkBuddyRegionState {
+  /** The last-refreshed directory for this region; what the card displays. */
+  lastCatalog?: WorkBuddyModelInfo[];
+  /** The user's selection in this region, as model ids. */
+  enabledModelIds?: string[];
+  /** Model ids the user explicitly opted into image input. */
+  imageModelIds?: string[];
+  /** Local DSH context budget per model in this region. */
+  contextBudgets?: Record<string, WorkBuddyContextBudget>;
+}
 /** Plugin configuration. */
 interface Config {
   /** Explicit WorkBuddy desktop auth-file path, overriding env and platform defaults. */
   authFile?: string;
   /** Stable local account selector; tokens remain outside settings. */
   accountId?: string;
-  /** The last-refreshed model directory; what the plugin card displays. */
+  /**
+   * Per-region model state, keyed `cn` | `global`. The CN app and the
+   * international WorkBuddy AI app expose different rosters, so each keeps its
+   * own directory and selection and switching accounts never drops the other
+   * region's picks.
+   */
+  regions?: Partial<Record<WorkBuddyRegion, WorkBuddyRegionState>>;
+  /**
+   * @deprecated Legacy single-slot fields from before the region split. They
+   * predate international support and are read as the CN region's state when
+   * `regions.cn` is absent; new writes go to `regions`.
+   */
   lastCatalog?: WorkBuddyModelInfo[];
-  /** The user's selection, as model ids. */
+  /** @deprecated See {@link Config.lastCatalog}. */
   enabledModelIds?: string[];
-  /** Model ids the user explicitly opted into image input. */
+  /** @deprecated See {@link Config.lastCatalog}. */
   imageModelIds?: string[];
-  /** Local DSH context budget per model; models above 200K default to 200K. */
+  /** @deprecated See {@link Config.lastCatalog}. */
   contextBudgets?: Record<string, WorkBuddyContextBudget>;
 }
 declare const Config: z<Config>;
+/**
+ * One region's saved model state. A config written before the region split has
+ * only the flat fields: those were always captured from the CN endpoint (the
+ * plugin had no international support), so they are read as the CN state and
+ * only when no explicit CN slot exists. The global region never inherits them —
+ * that inheritance is exactly the bug where a stale CN directory was
+ * intersected with the international catalog and silently dropped the user's
+ * picks.
+ */
+declare function regionStateOf(config: Config, region: WorkBuddyRegion): WorkBuddyRegionState;
 /**
  * Start the loopback endpoint, register the `workbuddy` provider, and
  * refresh the model catalog from the upstream once credentials allow it.
@@ -665,4 +732,4 @@ declare const Config: z<Config>;
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { Config, FALLBACK_WORKBUDDY_MODELS, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyReasoning, type WorkBuddyRefreshOutcome, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyWebAccount, type WorkBuddyWebCheckin, type WorkBuddyWebCredits, type WorkBuddyWebModel, type WorkBuddyWebPackage, type WorkBuddyWebUsage, apply, authFileName, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveCatalog, inject, isHeartbeatProcessAlive, name, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readHostHeartbeat, regionOf, registerWorkBuddyStatusRoute, toPersistedWorkBuddyModel, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { Config, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyReasoning, type WorkBuddyRefreshOutcome, WorkBuddyRegionState, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyWebAccount, type WorkBuddyWebCheckin, type WorkBuddyWebCredits, type WorkBuddyWebModel, type WorkBuddyWebPackage, type WorkBuddyWebUsage, apply, authFileName, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveCatalog, fallbackModelsFor, inject, isHeartbeatProcessAlive, name, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readHostHeartbeat, regionOf, regionStateOf, registerWorkBuddyStatusRoute, toPersistedWorkBuddyModel, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };

package/lib/index.js

@@ -1,4 +1,4 @@
-import { C as defaultDesktopAuthCandidates, D as workbuddyAccountId, E as parseWorkBuddyAuth, O as workbuddyOwnAuthPath, S as authFileName, T as defaultDesktopAuthPath, _ as WorkBuddyCatalog, a as readHostHeartbeat, b as WORKBUDDY_AUTH_FILE_ENV, c as WORKBUDDY_CONNECT_VERSION, d as parseCreditMultiplier, f as parseReasoning, g as FALLBACK_WORKBUDDY_MODELS, h as regionOf, i as processStartTimeMs, l as WorkBuddyUpstreamClient, m as prepareChatBody, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as parseUpstreamModel, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as classifyUpstreamError, v as deriveCatalog, w as defaultDesktopAuthDirs, x as WorkBuddyCredentialStore, y as WORKBUDDY_AUTH_FILENAME } from "./host-heartbeat-UlZjd09_.js";
+import { A as workbuddyOwnAuthPath, C as WorkBuddyCredentialStore, D as defaultDesktopAuthPath, E as defaultDesktopAuthDirs, O as parseWorkBuddyAuth, S as WORKBUDDY_AUTH_FILE_ENV, T as defaultDesktopAuthCandidates, _ as FALLBACK_WORKBUDDY_MODELS_GLOBAL, a as readHostHeartbeat, b as fallbackModelsFor, c as WORKBUDDY_CONNECT_VERSION, d as parseCreditMultiplier, f as parseReasoning, g as FALLBACK_WORKBUDDY_MODELS, h as regionOf, i as processStartTimeMs, k as workbuddyAccountId, l as WorkBuddyUpstreamClient, m as prepareChatBody, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as parseUpstreamModel, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as classifyUpstreamError, v as WorkBuddyCatalog, w as authFileName, x as WORKBUDDY_AUTH_FILENAME, y as deriveCatalog } from "./host-heartbeat-DQQwiUtm.js";
 import z from "@deepseek-ai/schemastery";
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { createProvider } from "@earendil-works/pi-ai";
@@ -530,17 +530,20 @@ async function workBuddyWebStatus(deps) {
 			message: safeMessage(error)
 		};
 	}
+	const selected = accounts.find((account) => account.selected);
+	const region = regionOf(credential.domain);
 	const account = {
-		accountId: accounts.find((account) => account.selected)?.id ?? "",
+		accountId: selected?.id ?? "",
 		accountName: credential.nickname ?? credential.uin ?? credential.uid,
 		...credential.uin === void 0 ? {} : { uin: credential.uin },
 		...credential.domain === "" ? {} : { domain: credential.domain },
+		region,
 		source: credential.source,
 		tokenExpiresAtMs: credential.expiresAtMs,
 		accounts: accounts.map(toWebAccount),
-		models: deps.displayModels().map((model) => toWebModel(model, deps.contextBudgets())),
-		enabledModelIds: [...deps.enabledModelIds()],
-		imageModelIds: [...deps.imageModelIds()]
+		models: deps.displayModels(region).map((model) => toWebModel(model, deps.contextBudgets(region))),
+		enabledModelIds: [...deps.enabledModelIds(region)],
+		imageModelIds: [...deps.imageModelIds(region)]
 	};
 	const [creditsResult, checkinResult] = await Promise.allSettled([deps.client.fetchCredits(credential), deps.client.fetchCheckinStatus(credential)]);
 	return {
@@ -621,7 +624,8 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
 				if (deps.discoverModels === void 0) return json(res, 503, { error: "model refresh unavailable" });
 				try {
-					json(res, 200, { models: (await deps.discoverModels()).map((model) => toWebModel(model, deps.contextBudgets())) });
+					const region = regionOf((await deps.store.resolve()).domain);
+					json(res, 200, { models: (await deps.discoverModels()).map((model) => toWebModel(model, deps.contextBudgets(region))) });
 				} catch (error) {
 					json(res, 500, { error: safeMessage(error) });
 				}
@@ -649,15 +653,42 @@ const modelConfig = z.object({
 	contextWindow: z.number().step(1).min(1),
 	maxTokens: z.number().step(1).min(1)
 });
+const regionStateConfig = z.object({
+	lastCatalog: z.array(modelConfig).default([]),
+	enabledModelIds: z.array(z.string()).default([]),
+	imageModelIds: z.array(z.string()).default([]),
+	contextBudgets: z.dict(z.number().step(1).min(1)).default({})
+});
 const Config = z.object({
 	authFile: z.string().description("WorkBuddy desktop auth file (defaults to the app's own location)"),
 	accountId: z.string().description("Selected local WorkBuddy account id (never a token)"),
-	lastCatalog: z.array(modelConfig).description("Last refreshed WorkBuddy model directory shown by the plugin card"),
-	enabledModelIds: z.array(z.string()).default([]).description("WorkBuddy model ids the user enabled"),
-	imageModelIds: z.array(z.string()).default([]).description("WorkBuddy model ids the user opted into image input"),
-	contextBudgets: z.dict(z.number().step(1).min(1)).default({}).description("Local DSH context budget per WorkBuddy model")
+	regions: z.dict(regionStateConfig).default({}).description("Per-region model directory and selection, keyed cn | global"),
+	lastCatalog: z.array(modelConfig).description("Deprecated: pre-region-split CN model directory"),
+	enabledModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN selection"),
+	imageModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN image opt-in"),
+	contextBudgets: z.dict(z.number().step(1).min(1)).default({}).description("Deprecated: pre-region-split CN context budgets")
 });
 /**
+* One region's saved model state. A config written before the region split has
+* only the flat fields: those were always captured from the CN endpoint (the
+* plugin had no international support), so they are read as the CN state and
+* only when no explicit CN slot exists. The global region never inherits them —
+* that inheritance is exactly the bug where a stale CN directory was
+* intersected with the international catalog and silently dropped the user's
+* picks.
+*/
+function regionStateOf(config, region) {
+	const stored = config.regions?.[region];
+	if (stored !== void 0) return stored;
+	if (region !== "cn") return {};
+	return {
+		...config.lastCatalog === void 0 ? {} : { lastCatalog: config.lastCatalog },
+		...config.enabledModelIds === void 0 ? {} : { enabledModelIds: config.enabledModelIds },
+		...config.imageModelIds === void 0 ? {} : { imageModelIds: config.imageModelIds },
+		...config.contextBudgets === void 0 ? {} : { contextBudgets: config.contextBudgets }
+	};
+}
+/**
 * Start the loopback endpoint, register the `workbuddy` provider, and
 * refresh the model catalog from the upstream once credentials allow it.
 * The static fallback catalog serves from the first moment, so an offline
@@ -677,27 +708,45 @@ function apply(ctx, config) {
 		catalog,
 		logger: ctx.logger
 	});
-	const enabledSet = (value) => new Set(value.enabledModelIds ?? []);
-	const imageSet = (value) => new Set(value.imageModelIds ?? []);
 	const withImageSelection = (models, images) => models.map((model) => ({
 		...model,
 		...images.has(model.id) ? { multimodal: true } : { multimodal: false }
 	}));
-	const configuredModels = (value) => withImageSelection(deriveCatalog(value.lastCatalog?.length ? value.lastCatalog : FALLBACK_WORKBUDDY_MODELS, enabledSet(value), value.contextBudgets ?? {}), imageSet(value));
-	const displayModels = (value) => value.lastCatalog?.length ? value.lastCatalog : FALLBACK_WORKBUDDY_MODELS;
+	const configuredModels = (value, region) => {
+		const state = regionStateOf(value, region);
+		return withImageSelection(deriveCatalog(state.lastCatalog?.length ? state.lastCatalog : fallbackModelsFor(region), new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? []));
+	};
+	const displayModels = (value, region) => {
+		const state = regionStateOf(value, region);
+		return state.lastCatalog?.length ? state.lastCatalog : fallbackModelsFor(region);
+	};
 	let current = () => config;
 	let invalidateCatalog = () => {};
+	/**
+	* Region of the selected account, tracked so a settings change can recompute
+	* the runtime catalog without re-resolving the credential synchronously.
+	* Every path that reads the credential (startup seed, discovery, card route)
+	* refreshes it, so it converges on the real region.
+	*/
+	let currentRegion = "cn";
+	const regionOfCredential = async () => {
+		try {
+			currentRegion = regionOf((await store.resolve()).domain);
+		} catch {}
+		return currentRegion;
+	};
 	const discoverModels = async (signal) => {
 		const credential = await store.resolve();
+		currentRegion = regionOf(credential.domain);
 		return client.fetchModels(credential, signal);
 	};
 	ctx.inject(["webServer"], (webCtx) => registerWorkBuddyStatusRoute(webCtx, {
 		store,
 		client,
-		displayModels: () => displayModels(current()),
-		enabledModelIds: () => current().enabledModelIds ?? [],
-		imageModelIds: () => current().imageModelIds ?? [],
-		contextBudgets: () => current().contextBudgets ?? {},
+		displayModels: (region) => displayModels(current(), region),
+		enabledModelIds: (region) => regionStateOf(current(), region).enabledModelIds ?? [],
+		imageModelIds: (region) => regionStateOf(current(), region).imageModelIds ?? [],
+		contextBudgets: (region) => regionStateOf(current(), region).contextBudgets ?? {},
 		discoverModels
 	}));
 	ctx.settings.installSection(ctx, WORKBUDDY_SETTINGS_NS, Config, config, {
@@ -708,8 +757,12 @@ function apply(ctx, config) {
 			const next = current();
 			store.setDesktopPath(next.authFile);
 			store.selectAccount(next.accountId);
-			catalog.set(configuredModels(next));
+			catalog.set(configuredModels(next, currentRegion));
 			invalidateCatalog();
+			regionOfCredential().then((region) => {
+				catalog.set(configuredModels(current(), region));
+				invalidateCatalog();
+			});
 		}
 	});
 	let stopped = false;
@@ -760,7 +813,10 @@ function apply(ctx, config) {
 			}
 			ctx.llm.registerModelDiscovery(WORKBUDDY_SETTINGS_NS, async (request, signal) => {
 				if (request.provider !== "workbuddy") return [];
-				return withImageSelection(deriveCatalog(await discoverModels(signal), enabledSet(current()), current().contextBudgets ?? {}), imageSet(current())).map((model) => ({
+				const discovered = await discoverModels(signal);
+				const region = currentRegion;
+				const state = regionStateOf(current(), region);
+				return withImageSelection(deriveCatalog(discovered, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])).map((model) => ({
 					id: model.id,
 					name: workBuddyDisplayName(model),
 					contextWindow: model.contextWindow,
@@ -778,9 +834,11 @@ function apply(ctx, config) {
 			try {
 				const credential = await store.resolve();
 				if (stopped) return;
+				currentRegion = regionOf(credential.domain);
 				const models = await client.fetchModels(credential);
 				if (stopped) return;
-				catalog.set(withImageSelection(deriveCatalog(models, enabledSet(current()), current().contextBudgets ?? {}), imageSet(current())));
+				const state = regionStateOf(current(), currentRegion);
+				catalog.set(withImageSelection(deriveCatalog(models, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])));
 				invalidate?.();
 			} catch (error) {
 				ctx.logger.warn("dsh-connect-workbuddy: dynamic model catalog unavailable; serving the static fallback list", error);
@@ -791,4 +849,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { Config, FALLBACK_WORKBUDDY_MODELS, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialStore, WorkBuddyUpstreamClient, apply, authFileName, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveCatalog, inject, isHeartbeatProcessAlive, name, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readHostHeartbeat, regionOf, registerWorkBuddyStatusRoute, toPersistedWorkBuddyModel, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { Config, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialStore, WorkBuddyUpstreamClient, apply, authFileName, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, deriveCatalog, fallbackModelsFor, inject, isHeartbeatProcessAlive, name, parseCreditMultiplier, parseReasoning, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, processStartTimeMs, readHostHeartbeat, regionOf, regionStateOf, registerWorkBuddyStatusRoute, toPersistedWorkBuddyModel, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "Connect locally signed-in WorkBuddy models to DeepSeek Harness with a read-only credits overview and model management.",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",