dsh-connect-workbuddy 4.13.1 → 4.14.0

package/lib/index.d.ts

@@ -574,6 +574,179 @@ declare class WorkBuddyCredentialStore {
   }>;
 }
 //#endregion
+//#region src/promo.d.ts
+/**
+ * WorkBuddy promotion & tier badges — the upstream's own "this model is on
+ * offer" annotation, parsed and resolved against the wall clock.
+ *
+ * WHY A SEPARATE MODULE, AND WHY IT COSTS NO REQUEST. The upstream ships the
+ * badges inside the SAME `/v3/config` document that already carries the model
+ * roster: `data.modelPromotions` and `data.modelTiers` sit beside
+ * `data.models` (observed on the global feed, 2026-10-21). The plugin already
+ * reads that document for the roster, so drawing a promotion badge adds ZERO
+ * upstream traffic — it only adds a parser, because the document is not a
+ * clean list of promotions: the same `modelPromotions` array also carries
+ * NON-promotion entries (`hy-image-3.5`, `kling-video-v3` — entries with
+ * `tags` / `videoGeneration` and no `modelIds` and no `badge`). Those must be
+ * dropped, not rendered.
+ *
+ * WHY THE RESOLUTION LIVES HERE AND NOT IN THE FETCHER. A badge is a function
+ * of the clock, not of the fetch: the upstream's windows are wall-clock
+ * windows in a named zone (`schedule.daily`, e.g. `23:00`–`7:50` in
+ * `Asia/Shanghai`) and absolute windows (`schedule.validFrom` /
+ * `schedule.validUntil`). Picking the badge once, at parse time, FREEZES it —
+ * a badge read at 22:59 would still claim "night discount" at 08:00 the next
+ * morning. So the parser keeps EVERY candidate and the RENDERER asks for the
+ * one that holds at the moment it draws. The card re-renders at least once a
+ * minute while it is open (it polls the usage route), so a window edge is
+ * picked up within a minute without a second timer.
+ *
+ * THE SHAPES THIS PARSER ACCEPTS (all observed on the global feed's
+ * `/v3/config`, 2026-10-21 — the CN feed publishes the same two arrays, with
+ * Chinese labels and the extra fields listed at the end of this header):
+ *
+ *   {
+ *     id: 'hy3-free-trial-202608',
+ *     kind: 'discount',
+ *     enabled: true,
+ *     priority: 200,
+ *     modelIds: ['hy3'],
+ *     badge: { label: 'Free now', color: '#FF0000', display: 'activeOnly' },
+ *     discount: { discountedCredits: '0x', displayMode: 'replace', factor: 0 },
+ *     hover: { textZh: 'Aug 6 – Oct 31: Free daily use with unlimited credits.' },
+ *     schedule: {
+ *       timezone: 'Asia/Shanghai',
+ *       validFrom: '2026-07-06T00:00:00+08:00',
+ *       validUntil: '2026-11-01T00:00:00+08:00',
+ *     },
+ *   }
+ *
+ * and the tier shape (`data.modelTiers`), which has the same `badge` /
+ * `modelIds` / `priority` core, no `schedule`, and a `requiredUserType`:
+ *
+ *   {
+ *     id: 'gpt-pro-only',
+ *     badge: { label: 'Pro Only', labelEn: 'Pro Only', color: '#009273' },
+ *     hover: { textEn: 'Exclusive to Pro subscribers.', textZh: '模型仅面向 Pro 用户开放。' },
+ *     modelIds: ['gpt-6-astra', …],
+ *     priority: 200,
+ *     requiredUserType: 'standard',
+ *     tier: 'standard',
+ *   }
+ *
+ * THE CN FEED IS THE SAME FEED, READ AS THE APP READS IT. The CN gateway
+ * publishes `modelPromotions` (8 entries, measured 2026-10-21) and
+ * `modelTiers` (1 entry) in the SAME `/v3/config` document — with Chinese
+ * labels (`夜间折扣` / `限时免费` / `夜间免费` / `独家限免` / `限时折扣` /
+ * `订阅优先`), a `schedule.daily` night window, a base64 `badge.icon` and an
+ * optional `badge.display: 'activeOnly'`. Those richer shapes are exactly what
+ * this parser accepts below.
+ *
+ * They are visible only to the APP's product identity: the CLI channel's
+ * answer to the same URL publishes neither array, because it is a strict
+ * subset of the app channel's document. The plugin therefore reads the
+ * product configuration as the app does (`PRODUCT_UA` in `src/upstream.ts`) —
+ * which is why a CN account sees the same badges here as in the WorkBuddy
+ * app, without a second upstream request.
+ *
+ * @module dsh-connect-workbuddy/promo
+ */
+/** How the upstream wants the badge to appear. */
+interface WorkBuddyPromoBadge {
+  /**
+   * The badge's own wording, region-localized ("限时免费" on the CN feed,
+   * "Free now" on the global one).
+   */
+  label: string;
+  /** The English wording, when the upstream publishes one. */
+  labelEn?: string;
+  /** A compact wording, when the upstream publishes one. */
+  shortLabel?: string;
+  /** The English compact wording, when the upstream publishes one. */
+  shortLabelEn?: string;
+  /**
+   * The badge's colour, as a hex string ("#009273").
+   *
+   * The upstream publishes it for most promotions and omits it for others
+   * (the CN tier entry has none), so the renderer treats it as optional.
+   */
+  color?: string;
+  /**
+   * `'activeOnly'` — the badge belongs to the promotion's RUNNING period and
+   * must disappear when the promotion is over.
+   *
+   * Absent — the badge is STANDING: it describes the model for as long as the
+   * promotion itself lasts, while the promotion's daily window governs only
+   * the discount. The upstream uses this for its night-discount pairs, where
+   * one entry carries the badge plus the night hours and a second, separate
+   * entry carries the same badge plus the daytime hours.
+   */
+  display?: 'activeOnly';
+}
+/** One daily window, as wall-clock times in `schedule.timezone`. */
+interface WorkBuddyPromoWindow {
+  /** `'HH:mm'`, inclusive. */
+  start: string;
+  /**
+   * `'HH:mm'`, exclusive.
+   *
+   * `end` at or before `start` means the window CROSSES MIDNIGHT: `23:00` to
+   * `7:50` is the observed CN night window.
+   */
+  end: string;
+}
+/** When a promotion runs. */
+interface WorkBuddyPromoSchedule {
+  /** The IANA zone the daily windows are written in ("Asia/Shanghai"). */
+  timezone?: string;
+  /** Epoch milliseconds; the promotion has not started before it. */
+  validFrom?: number;
+  /** Epoch milliseconds; the promotion is over AT it. */
+  validUntil?: number;
+  /** The daily windows, when the upstream publishes them. */
+  daily?: readonly WorkBuddyPromoWindow[];
+  /**
+   * The upstream PUBLISHED `daily`, but not one entry of it could be evaluated.
+   *
+   * This is deliberately NOT the same as "no `daily`": an entry with no
+   * `daily` is a 24-hour campaign (the discount runs whenever the promotion
+   * does), while an entry whose every window failed to parse says nothing at
+   * all about when it runs. Reading the second as "always" would turn a live
+   * night-only campaign into a badge shown around the clock — the one
+   * direction that overstates what the upstream said. A promotion carrying
+   * this flag therefore never counts as running; the parse failure hides the
+   * badge instead of doubling it.
+   */
+  dailyUnusable?: true;
+}
+/** The upstream's explanatory copy for the badge. */
+interface WorkBuddyPromoHover {
+  /** The Chinese wording. */
+  textZh?: string;
+  /** The English wording. */
+  textEn?: string;
+}
+/** One upstream promotion or tier, resolved into the shape this plugin uses. */
+interface WorkBuddyPromo {
+  /** The upstream's id ("hy3-free-trial-202608"). */
+  id: string;
+  /** Which upstream list the entry came from. */
+  source: 'promotion' | 'tier';
+  /** The models the badge applies to. */
+  modelIds: readonly string[];
+  /** What the badge says and how it looks. */
+  badge: WorkBuddyPromoBadge;
+  /** The upstream's explanatory copy, when it publishes one. */
+  hover?: WorkBuddyPromoHover;
+  /** When the promotion runs, when it publishes that. */
+  schedule?: WorkBuddyPromoSchedule;
+  /**
+   * The upstream's ordering weight: the higher the number, the more the
+   * badge matters. Used to pick ONE badge per model when several apply.
+   */
+  priority: number;
+}
+//#endregion
 //#region src/upstream.d.ts
 /** WorkBuddy region selected by the credential's login domain. */
 type WorkBuddyRegion = 'cn' | 'global';
@@ -609,7 +782,27 @@ type UpstreamErrorKind = 'hard_credit' |
  * retrying, or switch to a less busy model." Both halves are rendered to the
  * user; the second one is the actual remedy.
  */
-'model_busy' | 'session_dead' | 'policy_reject' | 'not_found' | 'server' | 'client';
+'model_busy' | 'session_dead' | 'policy_reject' |
+/**
+ * The gateway's channel gate refused the request itself (business code
+ * 11128, "Illegal API invocation from an unapproved channel").
+ *
+ * Deliberately its own kind, because its `displayTips` — "this call failed
+ * channel verification, possibly because it was not sent from an official
+ * client" — names the account or the client version, and NEITHER is the
+ * cause. The gate matches the OPENING of a `system` message against a list of
+ * known third-party-agent prompts, so the same credential answers 200 to a
+ * probe and 400 to a real chat request one second later (issues #87 / #88 /
+ * #89 / #90). Filing it as `client` was technically true and practically
+ * useless: the generic "refused on its parameters" sentence left the reader
+ * to try another account, which cannot change a byte of the prompt.
+ *
+ * NOT failover-worthy for the same reason: every account sends the same
+ * system prompt, so a second account answers the same 11128 one round trip
+ * later and each attempt teaches the pool a false fact about a credential
+ * that was never the problem.
+ */
+'channel_reject' | 'not_found' | 'server' | 'client';
 /** Reasoning capability as the upstream catalog declares it. */
 interface WorkBuddyReasoning {
   supportedEfforts?: readonly string[];
@@ -657,6 +850,20 @@ interface WorkBuddyUpstreamModel {
   descriptionZh?: string;
   descriptionEn?: string;
   supportsToolCall?: boolean;
+  /**
+   * The upstream's own promotion / tier badges that name THIS model.
+   *
+   * Not a field of the model entry: the upstream publishes the badges in
+   * sibling arrays keyed by `modelIds` (`data.modelPromotions` /
+   * `data.modelTiers`), inside the SAME `/v3/config` document that carries
+   * the roster — so reading them costs no extra request.
+   *
+   * They ride along UNRESOLVED, and that is deliberate: a badge is a function
+   * of the clock (the upstream's windows are wall-clock hours in a named
+   * zone), so the entry that holds NOW is decided where the badge is drawn,
+   * not where the document was read. See `src/promo.ts`.
+   */
+  promos?: readonly WorkBuddyPromo[];
 }
 /** One billing package as the upstream returns it, dates already parsed. */
 interface WorkBuddyCreditPackage {
@@ -998,13 +1205,14 @@ declare class WorkBuddyUpstreamClient {
   /**
    * Read the model directory for the credential's region.
    *
-   * Both regions prefer `/v3/config`, the document the WorkBuddy app itself
-   * consumes, so the plugin's roster and the app's agree. They differ in the
-   * user agent that requests it, and that difference is load-bearing: `/v3`
-   * serves a different roster per client channel. Global asks as the desktop
-   * channel (see {@link DESKTOP_UA}); CN asks as the CLI channel
-   * ({@link CLIENT_UA}), which is the only CN channel whose `/v3` answer
-   * contains the free `hy4-preview-f` (see {@link GLOBAL_CONFIG_PATH}).
+   * Both regions read `/v3/config`, the document the WorkBuddy app itself
+   * consumes, and both read it as the APP's product identity
+   * ({@link PRODUCT_UA}) — the header the app sends, not the CLI channel's.
+   * That is load-bearing, not cosmetic: the CLI channel's answer is a strict
+   * subset of the app channel's and publishes neither `modelPromotions` nor
+   * `modelTiers`, so reading `/v3/config` as the CLI channel is what left the
+   * CN card without a single promotion badge while the app showed one on the
+   * same account (see {@link PRODUCT_UA}).
    *
    * CN falls back to the legacy {@link MODELS_CATALOG_PATH} when `/v3` fails,
    * returns a non-zero envelope, or resolves to no usable model, so a gateway
@@ -1015,8 +1223,14 @@ declare class WorkBuddyUpstreamClient {
    *
    * No user-side toggle is involved: the region comes from the credential's
    * `domain`.
+   *
+   * `keepModelIds` is the user's own selection, passed through to
+   * {@link selectCliModels}: a model the upstream roster dropped but the SAME
+   * document still publishes stays in the roster, so reading the directory
+   * never withdraws a model the user is running (issue #32's failure mode,
+   * one step upstream of it).
    */
-  fetchModels(credential: WorkBuddyCredential, signal?: AbortSignal): Promise<readonly WorkBuddyUpstreamModel[]>;
+  fetchModels(credential: WorkBuddyCredential, signal?: AbortSignal, keepModelIds?: readonly string[]): Promise<readonly WorkBuddyUpstreamModel[]>;
   /** Query today's check-in status without changing account state. */
   fetchCheckinStatus(credential: WorkBuddyCredential): Promise<WorkBuddyCheckinStatus>;
   /**
@@ -2034,8 +2248,16 @@ declare function probeRequestBody(modelId: string, inputTokens?: number): string
  * loaded, everywhere, for everyone; a 6004 says THIS ACCOUNT exceeded a volume
  * limit. Reporting both as `rate-limited` made the pool bench every account for
  * the cooldown of one, which is the outage issue #56 describes.
+ *
+ * `channel-rejected` is a third split, and it is the one that answers the
+ * question the probe itself raises: the probe's own system prompt is a neutral
+ * one-liner, so it can return `ok` on a model whose real chat requests are all
+ * refused with `11128`. Filing that as `failed` (the generic bucket) made the
+ * pair "test passes, chat fails, every account" look like a flaky upstream
+ * instead of what it is — the gateway objecting to the PROMPT, not the account
+ * (issues #87–#90).
  */
-type WorkBuddyProbeOutcome = 'ok' | 'rate-limited' | 'model-busy' | 'out-of-credit' | 'credential-rejected' | 'policy-rejected' | 'unavailable' | 'not-found' | 'failed';
+type WorkBuddyProbeOutcome = 'ok' | 'rate-limited' | 'model-busy' | 'out-of-credit' | 'credential-rejected' | 'policy-rejected' | 'channel-rejected' | 'unavailable' | 'not-found' | 'failed';
 /**
  * One probe result, as the card renders it.
  *
@@ -2122,9 +2344,10 @@ declare function cooldownOf(input: {
  * answer means. The extra splits here are `credential-rejected`, which the
  * upstream signals with a non-JSON 401/403 edge page and which needs completely
  * different advice (re-auth, not "wait"), `policy-rejected`, a JSON 403
- * content-policy refusal where re-auth advice would be actively misleading, and
+ * content-policy refusal where re-auth advice would be actively misleading,
  * `model-busy`, the model-scoped 14003 throttle that must NOT be benched as an
- * account failure (issue #56).
+ * account failure (issue #56), and `channel-rejected`, the gateway's 11128 gate
+ * on the PROMPT's opening, which no account can change.
  */
 declare function outcomeOfFailure(status: number, body: string): WorkBuddyProbeOutcome;
 /**
@@ -2364,19 +2587,6 @@ interface WorkBuddyPoolTestRow {
 }
 //#endregion
 //#region src/status-paths.d.ts
-/**
- * Node-free constants and types shared by the Host and browser halves.
- *
- * 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
- *   — 「3 条同源只读路由（usage / models:refresh / accounts:refresh）+ 一份
- *     与浏览器共享的 node-free 类型定义」的 host↔client 桥梁形态来自该项目
- *     （其 `status-paths.ts` 亦如此，并注明沿用
- *     corrinehu/dsh-workbuddy-connect 的 status-route 模式）。
- * 改动：路由路径改用本插件 id；类型字段按 WorkBuddy 上游实际给出的能力
- *   （积分倍率、多模态、推理档位）调整，不保留 trae 的 1M 变体字段。
- *
- * @module dsh-connect-workbuddy/status-paths
- */
 /** Plugin-owned usage endpoint consumed by its browser half. */
 declare const WORKBUDDY_USAGE_PATH = "/plugins/dsh-connect-workbuddy/usage";
 /** Plugin-owned live model refresh endpoint. */
@@ -2612,6 +2822,18 @@ interface WorkBuddyWebModel {
     refusesOff?: boolean;
   };
   description?: string;
+  /**
+   * The upstream's promotion / tier badges that name this model, UNRESOLVED.
+   *
+   * Every candidate that names the model rides along, in priority order, so
+   * the card can pick the one that holds at the moment it draws — a badge is a
+   * function of the clock, and a badge frozen at fetch time would keep
+   * claiming a night discount after the night is over. See `src/promo.ts`.
+   *
+   * Persisted inside `lastCatalog` (it rides along in the saved entries) and
+   * read back from there, which is why it must stay JSON-shaped.
+   */
+  promos?: readonly WorkBuddyPromo[];
 }
 /**
  * Project one card row into its persisted `lastCatalog` shape: the native
@@ -2822,7 +3044,17 @@ type WorkBuddyWebProbeOutcome = 'ok' | 'rate-limited' |
  * to learn what the first one already said. The remedy is the upstream's own:
  * wait about a minute, or switch to a less busy model.
  */
-'model-busy' | 'out-of-credit' | 'credential-rejected' | 'policy-rejected' | 'unavailable' | 'not-found' | 'failed';
+'model-busy' | 'out-of-credit' | 'credential-rejected' | 'policy-rejected' |
+/**
+ * The gateway's channel gate refused the request itself (upstream code 11128).
+ *
+ * Kept apart from `failed` because its whole point is the question it answers:
+ * the probe passes and the chat fails on the SAME model and the SAME account,
+ * because the gate matches the OPENING of a `system` message and the probe's
+ * is a neutral one-liner. A generic failure would leave the user swapping
+ * accounts that cannot change a byte of their prompt (issues #87–#90).
+ */
+'channel-rejected' | 'unavailable' | 'not-found' | 'failed';
 /** One model's probe result, as the card renders it. */
 interface WorkBuddyWebProbeResult {
   modelId: string;

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as WORKBUDDY_APP_EXECUTABLE_ENV, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as lastRefusalFor, K as REFUSES_OFF_MODEL_IDS, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, Q as withEffectiveOff, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as offRefused, Y as offDefaultFor, Z as recordRefusal, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as macosBundleExecutable, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, dt as readAtRestKey, et as clearAtRestKeyCache, f as WorkBuddyCatalog, ft as workbuddyAppExecutableCandidates, g as ENCRYPTED_CREDENTIAL_CODE, gt as writeFileAtomic, h as fallbackModelsFor, ht as withFileLock, i as processStartTimeMs, it as findWorkbuddyAppExecutable, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as macosNestedAppBundles, m as deriveCatalog, mt as resolveDshHome, n as clearHostHeartbeat, nt as deriveAtRestKeyId, o as workbuddyHostHeartbeatPath, ot as isEncryptedFieldWrapper, p as applyContextBudgets, q as defaultOffModelIds, r as isHeartbeatProcessAlive, rt as fetchAtRestKeyPayload, s as writeHostHeartbeat, st as isWorkbuddyBundle, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as deriveAtRestKey, u as FALLBACK_WORKBUDDY_MODELS, ut as openEncryptedField, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-CwdR6teZ.js";
+import { $ as withEffectiveOff, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as defaultOffModelIds, K as systemOpeningsOfBody, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, Q as recordRefusal, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as offDefaultFor, Y as lastRefusalFor, Z as offRefused, _ as WORKBUDDY_AUTH_FILENAME, _t as writeFileAtomic, a as readHostHeartbeat, at as findWorkbuddyAppExecutable, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as isWorkbuddyBundle, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, dt as openEncryptedField, et as WORKBUDDY_APP_EXECUTABLE_ENV, f as WorkBuddyCatalog, ft as readAtRestKey, g as ENCRYPTED_CREDENTIAL_CODE, gt as withFileLock, h as fallbackModelsFor, ht as resolveDshHome, i as processStartTimeMs, it as fetchAtRestKeyPayload, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as macosBundleExecutable, m as deriveCatalog, n as clearHostHeartbeat, nt as deriveAtRestKey, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, pt as workbuddyAppExecutableCandidates, q as REFUSES_OFF_MODEL_IDS, r as isHeartbeatProcessAlive, rt as deriveAtRestKeyId, s as writeHostHeartbeat, st as isEncryptedFieldWrapper, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as clearAtRestKeyCache, u as FALLBACK_WORKBUDDY_MODELS, ut as macosNestedAppBundles, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-B1I95fKS.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -2276,6 +2276,7 @@ const KIND_STATUS = {
 	model_busy: 429,
 	session_dead: 401,
 	policy_reject: 403,
+	channel_reject: 400,
 	not_found: 502,
 	server: 502,
 	client: 400
@@ -2344,6 +2345,13 @@ const KIND_STATUS = {
 * reset is hours away, so the retry budget cannot produce an answer and must
 * not be spent. One word, two opposite temporal claims — so the spelling
 * follows the clock, not the status code both share.
+*
+* `channel_reject` is not listed, and the reason is the same rule applied to a
+* third clock: the gate's verdict is DETERMINISTIC for a given prompt, so an
+* in-place retry would spend the budget re-sending bytes it already refused, and
+* cross-provider failover cannot help either (every account sends that same
+* prompt). Its 400 already places it outside the host's retry set, so `type`
+* alone, untranslated, is the honest spelling.
 */
 const KIND_HOST_CODE = { soft_rate: "quota_exceeded" };
 /**
@@ -2916,6 +2924,7 @@ function failoverReasonText(failure) {
 		case "model_busy": return "该模型当前繁忙（不是账号问题）";
 		case "session_dead": return "登录已失效";
 		case "policy_reject": return "被服务端策略拒绝";
+		case "channel_reject": return "被网关的渠道校验拦截（不是账号、额度或网络问题）";
 		case "not_found": return "模型不可用";
 		case "server": return "上游异常";
 		case "client": return "请求被上游拒绝";
@@ -3247,7 +3256,7 @@ function createWorkBuddyShim(options) {
 	* which another account may well survive.
 	*/
 	function isFailoverWorthy(kind) {
-		return kind !== "client" && kind !== "model_busy";
+		return kind !== "client" && kind !== "model_busy" && kind !== "channel_reject";
 	}
 	async function chatCompletions(req, res) {
 		if (!isJsonContentType(req)) {
@@ -3375,6 +3384,18 @@ function createWorkBuddyShim(options) {
 				writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, message, hostErrorCode(result.kind));
 				return;
 			}
+			if (result.kind === "channel_reject") {
+				const detail = result.detail;
+				const meta = [];
+				if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
+				if (detail?.requestId !== void 0) meta.push(`requestId ${detail.requestId}`);
+				const stamp = meta.length === 0 ? "" : `（${meta.join("，")}）`;
+				const openings = systemOpeningsOfBody(prepared);
+				const evidence = openings.length === 0 ? "" : `命中的 system 提示开头：${openings.map((opening) => `「${opening}」`).join("、")}。`;
+				const message = `workbuddy 上游失败：${failoverReasonText(result)}（http ${result.status}）${note}${stamp}。${evidence}该请求被 WorkBuddy 网关的渠道校验拦截，上游把它描述成「不是官方客户端发出的」，但那是误导性文案：网关匹配的是 system 提示的开头，与账号、积分、额度、网络都无关，换账号或换区域也不会改变结果。若这段开头来自宿主或其他插件，请修改该提示；插件已对已知的第三方 agent 指纹做归一化，新的指纹可反馈到 issue 里`;
+				writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, message, hostErrorCode(result.kind));
+				return;
+			}
 			const detail = result.detail;
 			const meta = [];
 			if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
@@ -3734,9 +3755,10 @@ function cooldownOf(input) {
 * answer means. The extra splits here are `credential-rejected`, which the
 * upstream signals with a non-JSON 401/403 edge page and which needs completely
 * different advice (re-auth, not "wait"), `policy-rejected`, a JSON 403
-* content-policy refusal where re-auth advice would be actively misleading, and
+* content-policy refusal where re-auth advice would be actively misleading,
 * `model-busy`, the model-scoped 14003 throttle that must NOT be benched as an
-* account failure (issue #56).
+* account failure (issue #56), and `channel-rejected`, the gateway's 11128 gate
+* on the PROMPT's opening, which no account can change.
 */
 function outcomeOfFailure(status, body) {
 	if (status === 401 || status === 403) {
@@ -3748,6 +3770,7 @@ function outcomeOfFailure(status, body) {
 		case "model_busy": return "model-busy";
 		case "hard_credit": return "out-of-credit";
 		case "session_dead": return "credential-rejected";
+		case "channel_reject": return "channel-rejected";
 		case "not_found": return "not-found";
 		default: return status === 0 || status >= 500 ? "unavailable" : "failed";
 	}
@@ -4096,6 +4119,7 @@ function exclusionOf(probe, nowMs) {
 		case "model-busy": return retryDue(probe, nowMs, 12e4) ? void 0 : "model-busy";
 		case "out-of-credit": return retryDue(probe, nowMs) ? void 0 : "out-of-credit";
 		case "policy-rejected": return;
+		case "channel-rejected": return;
 		default: return "unusable";
 	}
 }
@@ -4976,19 +5000,6 @@ async function writePoolProbes(region, updates) {
 }
 //#endregion
 //#region src/status-paths.ts
-/**
-* Node-free constants and types shared by the Host and browser halves.
-*
-* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
-*   — 「3 条同源只读路由（usage / models:refresh / accounts:refresh）+ 一份
-*     与浏览器共享的 node-free 类型定义」的 host↔client 桥梁形态来自该项目
-*     （其 `status-paths.ts` 亦如此，并注明沿用
-*     corrinehu/dsh-workbuddy-connect 的 status-route 模式）。
-* 改动：路由路径改用本插件 id；类型字段按 WorkBuddy 上游实际给出的能力
-*   （积分倍率、多模态、推理档位）调整，不保留 trae 的 1M 变体字段。
-*
-* @module dsh-connect-workbuddy/status-paths
-*/
 /** Plugin-owned usage endpoint consumed by its browser half. */
 const WORKBUDDY_USAGE_PATH = "/plugins/dsh-connect-workbuddy/usage";
 /**
@@ -5379,7 +5390,8 @@ function toWebModel(model, budgets) {
 			...model.reasoning.canDisableThinking === void 0 ? {} : { canDisableThinking: model.reasoning.canDisableThinking },
 			...offRefused(model.id) ? { offRefused: true } : {},
 			...model.reasoning.refusesOff === true ? { refusesOff: true } : {}
-		} }
+		} },
+		...model.promos === void 0 ? {} : { promos: model.promos }
 	};
 }
 /**
@@ -6609,7 +6621,8 @@ function apply(ctx, config) {
 	const effectiveAccountFor = (region, value) => selectAccountFor(region, value, legacyAccountRegion);
 	const discoverModels = async (region, signal) => {
 		const credential = await stacks[region].store.resolve();
-		return client.fetchModels(credential, signal);
+		const keep = regionStateOf(current(), region).enabledModelIds ?? [];
+		return client.fetchModels(credential, signal, keep);
 	};
 	/** Push the current config into every region's store selection and catalog. */
 	const applySelection = (value) => {
@@ -7611,7 +7624,7 @@ function apply(ctx, config) {
 				try {
 					const credential = await stacks[region].store.resolve();
 					if (stopped) return;
-					const models = await client.fetchModels(credential);
+					const models = await client.fetchModels(credential, void 0, regionStateOf(current(), region).enabledModelIds ?? []);
 					if (stopped) return;
 					const state = regionStateOf(current(), region);
 					stacks[region].catalog.set(withEffectiveOff(withImageSelection(deriveCatalog(models, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])), new Set(savedOffModelIds(state, models))));

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness：每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。",
-  "version": "4.13.1",
+  "version": "4.14.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",