dsh-connect-workbuddy 5.13.0 → 5.14.0

package/lib/{host-heartbeat-DLVGPY4k.js → host-heartbeat-DMC9icX8.js}

@@ -1039,6 +1039,47 @@ function imageDefaultFor(info) {
 	if (info.supportsImages === false) return false;
 	return NATIVE_MODALITY_BY_MODEL_ID[info.id] === "multimodal";
 }
+/**
+* Delete the oldest files in `dir`, keeping the newest `keep`.
+*
+* Ordering is by mtime, not filename: the image name embeds an ISO timestamp
+* and the video name embeds one plus a URL tail, so neither sorts reliably as a
+* string once more than one generator writes into the directory.
+*
+* @returns how many files were removed (for tests and for callers that want to
+*   log a real number); `0` when the directory is absent, unreadable, small
+*   enough, or when every removal failed.
+*/
+async function pruneTempDir(dir, keep = 20, extensions = [".png", ".mp4"]) {
+	let names;
+	try {
+		names = (await readdir(dir)).filter((name) => extensions.some((ext) => name.endsWith(ext)));
+	} catch {
+		return 0;
+	}
+	if (names.length <= keep) return 0;
+	const dated = await Promise.all(names.map(async (name) => {
+		const path = join(dir, name);
+		try {
+			return {
+				path,
+				mtimeMs: (await stat(path)).mtimeMs
+			};
+		} catch {
+			return {
+				path,
+				mtimeMs: 0
+			};
+		}
+	}));
+	dated.sort((a, b) => b.mtimeMs - a.mtimeMs);
+	let removed = 0;
+	for (const entry of dated.slice(Math.max(0, keep))) try {
+		await rm(entry.path, { force: true });
+		removed += 1;
+	} catch {}
+	return removed;
+}
 /** Everything the app treats as a queue condition (`isQueueError`). */
 const WORKBUDDY_QUEUE_CODES = [
 	6020,
@@ -3503,6 +3544,104 @@ function scansOpening(role) {
 	return name === "system" || name === "assistant";
 }
 /**
+* The gateway's current content fingerprints, and same-meaning rewrites for
+* them (issue #163).
+*
+* WHY REWRITE INSTEAD OF ZERO-WIDTH. On 2026-10-29 two independent probes
+* measured that the CN gateway normalizes invisible characters before matching:
+* the DSH identity with U+200B at every word boundary still answers 11128.
+* `breakIdentityClauses` and both perturbation rungs therefore cannot help this
+* family. A real wording change is what the same probes measured as 200.
+*
+* WHY SENTENCE-LEVEL, NOT ONE WHOLE-PARAGRAPH LITERAL. The third fingerprint is
+* an eight-sentence, roughly 800-character @-path paragraph. Two reporters
+* measured that each sentence alone answers 200 and the whole paragraph answers
+* 400 — it is a COMBINATION, not a single listed sentence. Replacing the
+* paragraph as one literal would stop matching the moment the host changes one
+* word; replacing every sentence breaks the combination and keeps working when
+* only some of the text moves. The rows below are the table proposed in issue
+* #163 (yicneggima-glitch, 18:56; QIYU-PLUS, 18:57), with the identity and Web
+* GUI rows both probes measured.
+*
+* `from` strings are matched ANYWHERE, not just at an opening, because the
+* measured rule is position-independent. Only a hit is replaced; every other
+* byte is left alone, so an ordinary conversation is unchanged.
+*
+* WHICH HOST PACKAGE TO WATCH WHEN A ROW STOPS MATCHING (issue #164 traced the
+* three paragraphs to their owners in the DSH install): the identity sentence
+* comes from `@deepseek-ai/dsh-system-prompt`, the @-path paragraph from
+* `@deepseek-ai/dsh-file-reference`, and the Web GUI paragraph from
+* `@deepseek-ai/dsh-harness-dev-context`. #164 also bisected the MINIMUM
+* triggering span: the @-path paragraph already fails at its first two sentences
+* (112 chars) and the Web GUI paragraph at its first two (217 chars), each
+* sentence alone answering 200 — so a row must clear the truncated shape too,
+* which is exactly what sentence-level rows do. Pinned by
+* `tests/issue163-sentence-rewrite.spec.ts`.
+*/
+const CHANNEL_GATE_PHRASES = [
+	["You are an AI agent powered by DeepSeek Harness", "You are an AI agent running inside DeepSeek Harness"],
+	["You are a coding agent powered by the ", "You are a coding agent running on the "],
+	["You are interacting with the user through the DeepSeek Harness Web GUI", "You are working with the user inside the DeepSeek Harness Web GUI"],
+	["Agent Teams is available in this session", "Agent Teams is enabled for this session"],
+	["Tokens prefixed with @ are paths the user explicitly referenced.", "Paths that begin with @ are the ones the user explicitly referenced."],
+	["Relative paths resolve from the workspace root;", "Relative paths are resolved against the workspace root;"],
+	["absolute paths identify files or directories on the host.", "absolute paths point at files or directories on the host."],
+	["A trailing slash marks a directory:", "A trailing slash indicates a directory:"],
+	["list it when its contents matter.", "list it whenever its contents matter."],
+	["Anything else is a file:", "Everything else is a file:"],
+	["use the read tool when its contents are needed,", "use the read tool whenever you need its contents,"],
+	["and do not claim to have inspected it before reading.", "and never claim to have inspected it before reading it."],
+	["@\"...\" quotes a path containing spaces.", "A path containing spaces is quoted with @\"...\"."],
+	["without naming another target, they mean this GUI.", "and names no other target, the interface described here is meant."],
+	["they mean this GUI.", "the interface described here is meant."]
+];
+/**
+* Rewrite the measured gate phrases in one text part.
+*
+* Exported for the tests and for callers that build a body themselves. It is
+* idempotent: every `to` string is different from its `from` string and no
+* rewrite recreates another `from` string, so a second pass is a no-op.
+*/
+function rewriteChannelFingerprintPhrases(text) {
+	let out = text;
+	for (const [from, to] of CHANNEL_GATE_PHRASES) if (out.includes(from)) out = out.replaceAll(from, to);
+	return out;
+}
+/**
+* Apply {@link rewriteChannelFingerprintPhrases} to every scanned text part.
+*
+* `system` and `assistant` only (the roles the gate reads). `user` and `tool`
+* are deliberately untouched: QIYU-PLUS re-measured both on 2026-10-29 and
+* both answer 200 with the DSH identity at an opening, and rewriting a user's
+* own words would change the conversation for no gate.
+*/
+function rewriteChannelFingerprintPhrasesInBody(obj) {
+	const messages = obj["messages"];
+	if (!Array.isArray(messages)) return;
+	for (const value of messages) {
+		if (typeof value !== "object" || value === null || Array.isArray(value)) continue;
+		const message = value;
+		if (!scansOpening(message["role"])) continue;
+		const content = message["content"];
+		if (typeof content === "string") {
+			const next = rewriteChannelFingerprintPhrases(content);
+			if (next !== content) message["content"] = next;
+			continue;
+		}
+		if (!Array.isArray(content)) continue;
+		for (const part of content) {
+			if (typeof part !== "object" || part === null || Array.isArray(part)) continue;
+			const record = part;
+			const type = record["type"];
+			if (typeof type !== "string" || type.trim().toLowerCase() !== "text") continue;
+			const text = record["text"];
+			if (typeof text !== "string") continue;
+			const next = rewriteChannelFingerprintPhrases(text);
+			if (next !== text) record["text"] = next;
+		}
+	}
+}
+/**
 * Move every scanned message (`system` and `assistant`) off the content
 * fingerprint above by prepending the placeholder head.
 *
@@ -4153,6 +4292,7 @@ function prepareChatBody(source, options) {
 	}
 	ensureSystemHead(obj);
 	if (options?.keepPromptLast === true && Array.isArray(obj["messages"])) keepPromptLast(obj["messages"], injectedPrefixPattern(options.extraInjectedPrefixes));
+	rewriteChannelFingerprintPhrasesInBody(obj);
 	neutralizeChannelFingerprints(obj);
 	normalizeToolChoice(obj);
 	dropRefusedReasoning(obj);
@@ -5158,6 +5298,7 @@ var WorkBuddyUpstreamClient = class {
 		const safeUrl = url.replace(/[^A-Za-z0-9._-]+/g, "_").slice(-32);
 		const path = join(dir, `video-${stamp}-${safeUrl}.mp4`);
 		await writeFile(path, buffer);
+		pruneTempDir(dir, 20, [".mp4"]);
 		return path;
 	}
 	/** Query today's check-in status without changing account state. */
@@ -5544,8 +5685,38 @@ function mergeCredentialDisplayNames(previous, next) {
 const WORKBUDDY_AUTH_FILENAME = ".workbuddy-auth.json";
 /** Env variable that overrides the desktop auth-file location. */
 const WORKBUDDY_AUTH_FILE_ENV = "WORKBUDDY_AUTH_FILE";
-/** Basename of the live WorkBuddy desktop auth file. */
-const WORKBUDDY_LIVE_FILENAME = "workbuddy-desktop.info";
+/**
+* Basenames the live WorkBuddy desktop auth file is known to use.
+*
+* ISSUE #174: the constant used to be ONE name, `workbuddy-desktop.info`, and
+* the 5.7.x Windows app writes `workbuddy-desktop-ai.info` instead — the same
+* directory, the same payload, a different filename (measured by the reporter:
+* `%LOCALAPPDATA%\CodeBuddyExtension\Data\Public\auth\` held
+* `workbuddy-desktop-ai.info` plus timestamped backups of that same name, and no
+* file carrying the constant's name at all). The consequences were both silent:
+* the "live file always wins" rule in {@link fileRank} never matched, so
+* ordering fell back to `lastRefreshAtMs` (correct by luck, not by rule), and
+* `doctor` reported `desktopAuthFile.present: false` with a hint to set
+* `WORKBUDDY_AUTH_FILE` — on a machine whose credential had just been read
+* successfully from the default directory.
+*
+* Ordered, not a set: {@link WORKBUDDY_LIVE_FILENAME} stays the one this build
+* treats as canonical for writing, and the alternatives are probed after it. The
+* FIRST entry is what {@link defaultDesktopAuthCandidates} reports as the
+* expected path, so keep it there.
+*/
+const WORKBUDDY_LIVE_FILENAMES = ["workbuddy-desktop.info", "workbuddy-desktop-ai.info"];
+WORKBUDDY_LIVE_FILENAMES[0];
+/**
+* Whether one basename is a LIVE desktop auth file (any of the known names).
+*
+* Every place that asked "is this the live file?" now asks this, so a new
+* spelling is added in one list instead of being chased through the reader, the
+* ranker and `doctor` separately — which is exactly how the three drifted apart.
+*/
+function isLiveDesktopAuthFileName(name) {
+	return WORKBUDDY_LIVE_FILENAMES.includes(name);
+}
 /** Prefix of the plugin-owned per-region credential copies (legacy, read-only). */
 const WORKBUDDY_OWN_PREFIX = ".workbuddy-auth";
 /**
@@ -5789,9 +5960,17 @@ function defaultDesktopAuthDirs(platform = process.platform, home = homedir(), e
 function nonEmptyEnv(value) {
 	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
-/** The live auth file's platform candidates, in probe order. */
+/**
+* The live auth file's platform candidates, in probe order.
+*
+* Every known basename for every platform directory: a machine can hold the old
+* and the new spelling side by side during an app upgrade, and probing only the
+* canonical one is the defect issue #174 reports.
+*/
 function defaultDesktopAuthCandidates() {
-	return defaultDesktopAuthDirs().map((dir) => join(dir, WORKBUDDY_LIVE_FILENAME));
+	const candidates = [];
+	for (const dir of defaultDesktopAuthDirs()) for (const name of WORKBUDDY_LIVE_FILENAMES) candidates.push(join(dir, name));
+	return candidates;
 }
 /** First platform-default candidate; see {@link defaultDesktopAuthCandidates}. */
 function defaultDesktopAuthPath() {
@@ -5939,7 +6118,7 @@ function hasEncryptedCredentialFields(text) {
 * backups, never the primary ordering.
 */
 function fileRank(path) {
-	return authFileName(path) === WORKBUDDY_LIVE_FILENAME ? 0 : 1;
+	return isLiveDesktopAuthFileName(authFileName(path)) ? 0 : 1;
 }
 /**
 * Whether `candidate` is a better pick than `incumbent` for the same account.
@@ -6328,7 +6507,7 @@ var WorkBuddyCredentialStore = class {
 		const fromEnv = process.env[WORKBUDDY_AUTH_FILE_ENV];
 		const explicit = this.desktopPathOverride ?? (fromEnv !== void 0 && fromEnv.trim() !== "" ? fromEnv : void 0);
 		if (explicit !== void 0) return [explicit];
-		return defaultDesktopAuthCandidates();
+		return (this.authDirs ?? defaultDesktopAuthDirs()).flatMap((dir) => WORKBUDDY_LIVE_FILENAMES.map((name) => join(dir, name)));
 	}
 	/** The resolved desktop auth-file path, for diagnostics. */
 	desktopAuthPath() {
@@ -6355,10 +6534,20 @@ var WorkBuddyCredentialStore = class {
 			return files;
 		}
 		const dirs = this.authDirs ?? defaultDesktopAuthDirs();
+		const seen = /* @__PURE__ */ new Set();
 		for (const dir of dirs) {
-			const live = join(dir, WORKBUDDY_LIVE_FILENAME);
-			files.push(live);
-			for (const backup of await this.backupsBeside(live)) files.push(backup);
+			for (const name of WORKBUDDY_LIVE_FILENAMES) {
+				const live = join(dir, name);
+				if (!seen.has(live)) {
+					seen.add(live);
+					files.push(live);
+				}
+			}
+			for (const name of WORKBUDDY_LIVE_FILENAMES) for (const backup of await this.backupsBeside(join(dir, name))) {
+				if (seen.has(backup)) continue;
+				seen.add(backup);
+				files.push(backup);
+			}
 		}
 		return files;
 	}
@@ -6866,8 +7055,33 @@ var WorkBuddyCredentialStore = class {
 	*/
 	async diagnose() {
 		const candidates = [];
-		for (const path of await this.candidateFiles()) {
-			const probe = await probeAuthFile(path, this.resolveAtRestKey);
+		const desktopTried = this.resolveDesktopCandidates();
+		const probed = [];
+		for (const path of await this.candidateFiles()) probed.push({
+			path,
+			probe: await probeAuthFile(path, this.resolveAtRestKey)
+		});
+		/**
+		* Directories that need no `missing` complaint (issue #174).
+		*
+		* A directory is "accounted for" when it either yielded a readable
+		* credential OR produced some other, more specific complaint. The first case
+		* is the healthy machine whose app writes only one of the two known
+		* spellings; the second is a machine holding a broken file — and telling
+		* that user "no auth file at the expected path" would be both false and
+		* less useful than the `invalid` line they already have.
+		*/
+		const accountedDirs = /* @__PURE__ */ new Set();
+		for (const entry of probed) {
+			if ("credential" in entry.probe) {
+				accountedDirs.add(dirname(entry.path));
+				continue;
+			}
+			if (entry.probe.failure.reason !== "missing") accountedDirs.add(dirname(entry.path));
+		}
+		/** Directories whose `missing` complaint has already been made. */
+		const missingReported = /* @__PURE__ */ new Set();
+		for (const { path, probe } of probed) {
 			if ("credential" in probe) {
 				if (!this.matchesRegion(probe.credential.domain)) candidates.push({
 					path,
@@ -6877,6 +7091,11 @@ var WorkBuddyCredentialStore = class {
 				});
 				continue;
 			}
+			if (probe.failure.reason === "missing") {
+				const dir = dirname(path);
+				if (accountedDirs.has(dir) || missingReported.has(dir)) continue;
+				missingReported.add(dir);
+			}
 			candidates.push({
 				path,
 				source: "desktop",
@@ -6935,7 +7154,7 @@ var WorkBuddyCredentialStore = class {
 			}
 		} catch {}
 		return {
-			tried,
+			tried: [...desktopTried, ...this.ownCandidates()],
 			failures: candidates
 		};
 	}
@@ -7711,7 +7930,7 @@ function describeRosterSeenPayload(raw) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "5.13.0";
+const WORKBUDDY_CONNECT_VERSION = "5.14.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**
@@ -7729,8 +7948,18 @@ const WORKBUDDY_CONNECT_VERSION = "5.13.0";
 */
 /** Basename of the host heartbeat file inside the Harness home. */
 const WORKBUDDY_HOST_HEARTBEAT_FILENAME = ".workbuddy-host-heartbeat.json";
-/** Current on-disk heartbeat format; readers reject others. */
-const HEARTBEAT_FORMAT_VERSION = 1;
+/**
+* On-disk heartbeat formats this build WRITES and READS.
+*
+* 1 → 2 added `hostStartedAt` (issue #174). Version 1 is still READ, on purpose:
+* rejecting it would turn the first `doctor` after an upgrade into a spurious
+* "no heartbeat at all", which is a worse diagnosis than the imprecise
+* comparison version 1 supports. Anything newer than {@link HEARTBEAT_FORMAT_VERSION}
+* is rejected, because a future field could change the meaning of the ones read
+* here.
+*/
+const HEARTBEAT_FORMAT_VERSION = 2;
+const READABLE_HEARTBEAT_VERSIONS = [1, 2];
 /** Absolute path of the host heartbeat file. */
 function workbuddyHostHeartbeatPath() {
 	return join(resolveDshHome(), WORKBUDDY_HOST_HEARTBEAT_FILENAME);
@@ -7815,10 +8044,40 @@ function processStartTimeMs(pid) {
 	}
 }
 /**
+* How close a recorded start time must be to the live process's start time for
+* the two to be considered the SAME process.
+*
+* Two tolerances, for two different comparisons:
+*
+*   - {@link HOST_START_REFERENCE_TOLERANCE_MS} when the heartbeat records
+*     `hostStartedAt` — both sides are then the SAME quantity (a process start
+*     time), so the window only has to absorb the coarse resolution of
+*     `ps -o lstart=` (whole seconds) and PowerShell's string round-trip.
+*   - {@link LEGACY_REFERENCE_TOLERANCE_MS} when it does not, and the only
+*     available reference is `registeredAt`. That is a different quantity
+*     (when the plugin mounted, not when the process started), so it is a
+*     lower bound rather than an answer: a host that started more than this
+*     before the plugin mounted would have looked dead. Kept wide on purpose —
+*     a missed reuse is far less harmful than calling a live host stale.
+*/
+const HOST_START_REFERENCE_TOLERANCE_MS = 12e4;
+const LEGACY_REFERENCE_TOLERANCE_MS = 432e5;
+/**
 * Whether the recorded host process still matches the heartbeat's PID.
 *
 * A PID can be reused after a crash, so the recorded start time is compared
 * against the live process: a different start time means a different process.
+*
+* ISSUE #174 — the reference used to be `registeredAt`, the moment the plugin
+* WROTE the heartbeat, and the comparison was `|startedAt − registeredAt| < 60s`.
+* Those are two different quantities: `registeredAt` is when the host finished
+* booting and mounted this plugin, which on a real machine is minutes after the
+* process started. Measured by the reporter on Windows 11: process start
+* 19:47:20, heartbeat written 19:58:45 — 684,817 ms apart — so `doctor` and
+* `status` reported `hostBundle: "stale"` for a host that was alive and had
+* just written the file. The `hostStartedAt` field exists so the comparison has
+* the right reference; `registeredAt` is only read for heartbeats written by an
+* older build, where it is the sole (and merely near) signal available.
 */
 function isHeartbeatProcessAlive(heartbeat) {
 	if (!Number.isInteger(heartbeat.pid) || heartbeat.pid <= 0) return false;
@@ -7829,7 +8088,9 @@ function isHeartbeatProcessAlive(heartbeat) {
 	}
 	const startedAt = processStartTimeMs(heartbeat.pid);
 	if (startedAt === void 0) return true;
-	return Math.abs(startedAt - heartbeat.registeredAt) < 6e4;
+	const recorded = heartbeat.hostStartedAt;
+	if (recorded !== void 0 && Number.isFinite(recorded)) return Math.abs(startedAt - recorded) < HOST_START_REFERENCE_TOLERANCE_MS;
+	return Math.abs(startedAt - heartbeat.registeredAt) < LEGACY_REFERENCE_TOLERANCE_MS;
 }
 /** Read the heartbeat; absent or unparsable files report undefined. */
 async function readHostHeartbeat() {
@@ -7837,30 +8098,41 @@ async function readHostHeartbeat() {
 		const parsed = JSON.parse(await readFile(workbuddyHostHeartbeatPath(), "utf8"));
 		if (typeof parsed !== "object" || parsed === null) return void 0;
 		const document = parsed;
-		if (document["version"] !== HEARTBEAT_FORMAT_VERSION) return void 0;
+		if (!READABLE_HEARTBEAT_VERSIONS.includes(document["version"])) return void 0;
 		if (document["package"] !== "dsh-connect-workbuddy") return void 0;
 		const pid = document["pid"];
 		const registeredAt = document["registeredAt"];
 		if (typeof pid !== "number" || typeof registeredAt !== "number") return void 0;
+		const hostStartedAt = document["hostStartedAt"];
 		return {
-			version: HEARTBEAT_FORMAT_VERSION,
+			version: document["version"],
 			package: "dsh-connect-workbuddy",
 			pluginVersion: typeof document["pluginVersion"] === "string" ? document["pluginVersion"] : WORKBUDDY_CONNECT_VERSION,
 			registeredAt,
-			pid
+			pid,
+			...typeof hostStartedAt === "number" && Number.isFinite(hostStartedAt) ? { hostStartedAt } : {}
 		};
 	} catch {
 		return;
 	}
 }
-/** Write the heartbeat for the current process. */
+/**
+* Write the heartbeat for the current process.
+*
+* `hostStartedAt` is captured HERE, from this process, so the later staleness
+* check compares like with like (issue #174). Sampled on every write rather
+* than cached: the value is cheap, and a module-level cache would be wrong the
+* moment this function is exercised from a child process.
+*/
 async function writeHostHeartbeat() {
+	const hostStartedAt = processStartTimeMs(process.pid);
 	const heartbeat = {
 		version: HEARTBEAT_FORMAT_VERSION,
 		package: "dsh-connect-workbuddy",
 		pluginVersion: WORKBUDDY_CONNECT_VERSION,
 		registeredAt: Date.now(),
-		pid: process.pid
+		pid: process.pid,
+		...hostStartedAt === void 0 ? {} : { hostStartedAt }
 	};
 	await writeFile(workbuddyHostHeartbeatPath(), `${JSON.stringify(heartbeat, null, 2)}\n`, { mode: 384 });
 }
@@ -7869,4 +8141,4 @@ async function clearHostHeartbeat() {
 	await rm(workbuddyHostHeartbeatPath(), { force: true });
 }
 //#endregion
-export { parseCreditMultiplier as $, withFileLock as $t, isEncryptedCredentialError as A, pickMediaModel as At, WorkBuddyCredentialRejectedError as B, deriveAtRestKeyId as Bt, WorkBuddyCredentialStore as C, IMAGE_TAG_TEXT_TO_IMAGE as Ct, defaultDesktopAuthDirs as D, imageMimeForPath as Dt, defaultDesktopAuthCandidates as E, imageDataUrl as Et, workbuddyAccountId as F, imageDefaultFor as Ft, forceNeutralHead as G, isWorkbuddyBundle as Gt, channelGateMemberOf as H, findWorkbuddyAppExecutable as Ht, workbuddyOwnAuthPath as I, nativeModalityOf as It, isCredentialRejectedError as J, openEncryptedField as Jt, isContextTooLongBody as K, macosBundleExecutable as Kt, CONTEXT_OVERFLOW_MARKER as L, WORKBUDDY_APP_EXECUTABLE_ENV as Lt, legacyWorkbuddyOwnAuthPath as M, parseQueueAnswer as Mt, parseWorkBuddyAuth as N, queueNoticeText as Nt, defaultDesktopAuthPath as O, isBareBase64Image as Ot, preferredAccountName as P, NATIVE_MODALITY_BY_MODEL_ID as Pt, openingEvidenceOfBody as Q, resolveDshHome as Qt, CREDENTIAL_REJECTED_CODE as R, clearAtRestKeyCache as Rt, WORKBUDDY_AUTH_FILE_ENV as S, IMAGE_TAG_IMAGE_TO_IMAGE as St, authFileName as T, WorkBuddyImageError as Tt, classifyUpstreamError as U, findWorkbuddyAppExecutableWithSource as Ut, WorkBuddyUpstreamClient as V, fetchAtRestKeyPayload as Vt, declaredTools as W, isEncryptedFieldWrapper as Wt, knownRegionOf as X, workbuddyAppExecutableCandidates as Xt, isFirstMessageGateBody as Y, readAtRestKey as Yt, modelIdOfBody as Z, hostPeersInfo as Zt, deriveCatalog as _, WorkBuddyVideoError as _t, readHostHeartbeat as a, requestEvidenceOf as at, ENCRYPTED_CREDENTIAL_CODE as b, resolveVideoParams as bt, WORKBUDDY_CONNECT_VERSION as c, REFUSES_OFF_MODEL_IDS as ct, rosterSeenPath as d, offDefaultFor as dt, writeFileAtomic as en, parseReasoning as et, piAiRuntimeInfo as f, offRefused as ft, applyContextBudgets as g, VIDEO_TAG_TEXT_TO_VIDEO as gt, WorkBuddyCatalog as h, VIDEO_TAG_IMAGE_TO_VIDEO as ht, processStartTimeMs as i, regionOf as it, isVaultAccountId as j, sniffImageMime as jt, hasEncryptedCredentialFields as k, parseImageDataUrl as kt, createFileRosterSeenStore as l, defaultOffModelIds as lt, FALLBACK_WORKBUDDY_MODELS_GLOBAL as m, withEffectiveOff as mt, clearHostHeartbeat as n, perturbChannelFingerprints as nt, workbuddyHostHeartbeatPath as o, rewriteSessionTitleModel as ot, FALLBACK_WORKBUDDY_MODELS as p, recordRefusal as pt, isConversationIdGateBody as q, macosNestedAppBundles as qt, isHeartbeatProcessAlive as r, prepareChatBody as rt, writeHostHeartbeat as s, attachBusyLevels as st, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, parseUpstreamModel as tt, describeRosterSeenPayload as u, lastRefusalFor as ut, fallbackModelsFor as v, parseSupportedSecondsRange as vt, WorkBuddyEncryptedCredentialError as w, MAX_INPUT_IMAGE_BYTES as wt, WORKBUDDY_AUTH_FILENAME as x, DEFAULT_IMAGE_SIZE as xt, withoutRouters as y, pickVideoModel as yt, WORKBUDDY_FALLBACK_SYSTEM_PROMPT as z, deriveAtRestKey as zt };
+export { parseCreditMultiplier as $, resolveDshHome as $t, isEncryptedCredentialError as A, pickMediaModel as At, WorkBuddyCredentialRejectedError as B, deriveAtRestKey as Bt, WorkBuddyCredentialStore as C, IMAGE_TAG_TEXT_TO_IMAGE as Ct, defaultDesktopAuthDirs as D, imageMimeForPath as Dt, defaultDesktopAuthCandidates as E, imageDataUrl as Et, workbuddyAccountId as F, NATIVE_MODALITY_BY_MODEL_ID as Ft, forceNeutralHead as G, isEncryptedFieldWrapper as Gt, channelGateMemberOf as H, fetchAtRestKeyPayload as Ht, workbuddyOwnAuthPath as I, imageDefaultFor as It, isCredentialRejectedError as J, macosNestedAppBundles as Jt, isContextTooLongBody as K, isWorkbuddyBundle as Kt, CONTEXT_OVERFLOW_MARKER as L, nativeModalityOf as Lt, legacyWorkbuddyOwnAuthPath as M, parseQueueAnswer as Mt, parseWorkBuddyAuth as N, queueNoticeText as Nt, defaultDesktopAuthPath as O, isBareBase64Image as Ot, preferredAccountName as P, pruneTempDir as Pt, openingEvidenceOfBody as Q, hostPeersInfo as Qt, CREDENTIAL_REJECTED_CODE as R, WORKBUDDY_APP_EXECUTABLE_ENV as Rt, WORKBUDDY_AUTH_FILE_ENV as S, IMAGE_TAG_IMAGE_TO_IMAGE as St, authFileName as T, WorkBuddyImageError as Tt, classifyUpstreamError as U, findWorkbuddyAppExecutable as Ut, WorkBuddyUpstreamClient as V, deriveAtRestKeyId as Vt, declaredTools as W, findWorkbuddyAppExecutableWithSource as Wt, knownRegionOf as X, readAtRestKey as Xt, isFirstMessageGateBody as Y, openEncryptedField as Yt, modelIdOfBody as Z, workbuddyAppExecutableCandidates as Zt, deriveCatalog as _, WorkBuddyVideoError as _t, readHostHeartbeat as a, requestEvidenceOf as at, ENCRYPTED_CREDENTIAL_CODE as b, resolveVideoParams as bt, WORKBUDDY_CONNECT_VERSION as c, REFUSES_OFF_MODEL_IDS as ct, rosterSeenPath as d, offDefaultFor as dt, withFileLock as en, parseReasoning as et, piAiRuntimeInfo as f, offRefused as ft, applyContextBudgets as g, VIDEO_TAG_TEXT_TO_VIDEO as gt, WorkBuddyCatalog as h, VIDEO_TAG_IMAGE_TO_VIDEO as ht, processStartTimeMs as i, regionOf as it, isVaultAccountId as j, sniffImageMime as jt, hasEncryptedCredentialFields as k, parseImageDataUrl as kt, createFileRosterSeenStore as l, defaultOffModelIds as lt, FALLBACK_WORKBUDDY_MODELS_GLOBAL as m, withEffectiveOff as mt, clearHostHeartbeat as n, perturbChannelFingerprints as nt, workbuddyHostHeartbeatPath as o, rewriteSessionTitleModel as ot, FALLBACK_WORKBUDDY_MODELS as p, recordRefusal as pt, isConversationIdGateBody as q, macosBundleExecutable as qt, isHeartbeatProcessAlive as r, prepareChatBody as rt, writeHostHeartbeat as s, attachBusyLevels as st, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, writeFileAtomic as tn, parseUpstreamModel as tt, describeRosterSeenPayload as u, lastRefusalFor as ut, fallbackModelsFor as v, parseSupportedSecondsRange as vt, WorkBuddyEncryptedCredentialError as w, MAX_INPUT_IMAGE_BYTES as wt, WORKBUDDY_AUTH_FILENAME as x, DEFAULT_IMAGE_SIZE as xt, withoutRouters as y, pickVideoModel as yt, WORKBUDDY_FALLBACK_SYSTEM_PROMPT as z, clearAtRestKeyCache as zt };

package/lib/index.d.ts

@@ -208,7 +208,13 @@ declare function legacyWorkbuddyOwnAuthPath(): string;
  * testable on any host without touching a real machine.
  */
 declare function defaultDesktopAuthDirs(platform?: NodeJS.Platform, home?: string, env?: NodeJS.ProcessEnv): string[];
-/** The live auth file's platform candidates, in probe order. */
+/**
+ * The live auth file's platform candidates, in probe order.
+ *
+ * Every known basename for every platform directory: a machine can hold the old
+ * and the new spelling side by side during an app upgrade, and probing only the
+ * canonical one is the defect issue #174 reports.
+ */
 declare function defaultDesktopAuthCandidates(): string[];
 /** First platform-default candidate; see {@link defaultDesktopAuthCandidates}. */
 declare function defaultDesktopAuthPath(): string | undefined;
@@ -2334,12 +2340,21 @@ interface WorkBuddyAdapterOptions {
    */
   piAiGeneration?: PiAiGeneration;
   /**
-   * Drop foreign thinking blocks pi-ai would publish as prose (issue #147).
+   * Drop SAME-ROUTE foreign thinking blocks pi-ai would publish as prose
+   * (issue #147).
+   *
+   * CROSS-PROVIDER turns are dropped unconditionally: after a provider switch
+   * the host rebuilds the other provider's assistant turns as `dsh-foreign`,
+   * their unsigned thinking blocks can never be replayed, and pi-ai would
+   * otherwise flatten them into assistant prose that the WorkBuddy gateway
+   * refuses with 11128 (issue #163's measured scene). This switch only widens
+   * the repair to a model switch INSIDE one of this bundle's own routes.
    *
-   * OFF by default, and read LIVE (a getter, not a boolean) so the switch takes
-   * effect on the next request without reloading the plugin: turning it on
-   * mid-session is the whole point — the user sees the working-notes turn,
-   * flips the switch, and the next turn is answered normally.
+   * OFF by default for that same-route leg, and read LIVE (a getter, not a
+   * boolean) so the switch takes effect on the next request without reloading
+   * the plugin: turning it on mid-session is the whole point — the user sees
+   * the working-notes turn, flips the switch, and the next turn is answered
+   * normally.
    */
   dropForeignThinking?: () => boolean;
   /**
@@ -2731,17 +2746,31 @@ declare function resolveCredentialRecovery(options: {
  */
 /** Basename of the host heartbeat file inside the Harness home. */
 declare const WORKBUDDY_HOST_HEARTBEAT_FILENAME = ".workbuddy-host-heartbeat.json";
-/** Current on-disk heartbeat format; readers reject others. */
-declare const HEARTBEAT_FORMAT_VERSION = 1;
+declare const READABLE_HEARTBEAT_VERSIONS: readonly number[];
 /** On-disk shape of the heartbeat. */
 interface WorkBuddyHostHeartbeat {
-  version: typeof HEARTBEAT_FORMAT_VERSION;
+  /** The format actually on disk; this build writes {@link HEARTBEAT_FORMAT_VERSION}. */
+  version: (typeof READABLE_HEARTBEAT_VERSIONS)[number];
   package: 'dsh-connect-workbuddy';
   pluginVersion: string;
   /** Epoch milliseconds when the host registered the provider. */
   registeredAt: number;
   /** Host process PID, to distinguish a stale heartbeat after a crash. */
   pid: number;
+  /**
+   * Epoch milliseconds when THIS process started (issue #174).
+   *
+   * The staleness check needs to recognise a REUSED PID: `process.kill(pid, 0)`
+   * only says "some process has this number", so after a crash the heartbeat
+   * can describe a process that died while the number now belongs to something
+   * else. The way to tell is to compare the live process's start time against
+   * the one recorded HERE.
+   *
+   * Absent on heartbeats written by older builds (`version: 1`): the reader
+   * then falls back to {@link WorkBuddyHostHeartbeat.registeredAt}, which is
+   * what those builds wrote, and is only a last-resort approximation.
+   */
+  hostStartedAt?: number;
 }
 /** Absolute path of the host heartbeat file. */
 declare function workbuddyHostHeartbeatPath(): string;
@@ -2759,11 +2788,29 @@ declare function processStartTimeMs(pid: number): number | undefined;
  *
  * A PID can be reused after a crash, so the recorded start time is compared
  * against the live process: a different start time means a different process.
+ *
+ * ISSUE #174 — the reference used to be `registeredAt`, the moment the plugin
+ * WROTE the heartbeat, and the comparison was `|startedAt − registeredAt| < 60s`.
+ * Those are two different quantities: `registeredAt` is when the host finished
+ * booting and mounted this plugin, which on a real machine is minutes after the
+ * process started. Measured by the reporter on Windows 11: process start
+ * 19:47:20, heartbeat written 19:58:45 — 684,817 ms apart — so `doctor` and
+ * `status` reported `hostBundle: "stale"` for a host that was alive and had
+ * just written the file. The `hostStartedAt` field exists so the comparison has
+ * the right reference; `registeredAt` is only read for heartbeats written by an
+ * older build, where it is the sole (and merely near) signal available.
  */
 declare function isHeartbeatProcessAlive(heartbeat: WorkBuddyHostHeartbeat): boolean;
 /** Read the heartbeat; absent or unparsable files report undefined. */
 declare function readHostHeartbeat(): Promise<WorkBuddyHostHeartbeat | undefined>;
-/** Write the heartbeat for the current process. */
+/**
+ * Write the heartbeat for the current process.
+ *
+ * `hostStartedAt` is captured HERE, from this process, so the later staleness
+ * check compares like with like (issue #174). Sampled on every write rather
+ * than cached: the value is cheap, and a module-level cache would be wrong the
+ * moment this function is exercised from a child process.
+ */
 declare function writeHostHeartbeat(): Promise<void>;
 /** Remove the heartbeat; called when the plugin is disposed. */
 declare function clearHostHeartbeat(): Promise<void>;
@@ -4981,8 +5028,35 @@ interface WorkBuddyRegionState {
   lastCatalog?: WorkBuddyModelInfo[];
   /** The user's selection in this region, as model ids. */
   enabledModelIds?: string[];
-  /** Model ids the user explicitly opted into image input. */
+  /**
+   * Model ids the user opted into image input for this region.
+   *
+   * Every id here is honoured. What the SAVED array cannot express is the
+   * difference between "I looked at this model and unticked it" and "this model
+   * did not exist when the list was last refreshed" — so the runtime also adds
+   * a model this build's vendor table classifies as verified-multimodal, UNLESS
+   * {@link imageSelectionExplicit} says the user has edited these boxes. See
+   * `effectiveImageIds` (issue #168); the seed never rewrites this array.
+   */
   imageModelIds?: string[];
+  /**
+   * Whether the image boxes have been edited by a human (issue #168).
+   *
+   * `imageModelIds` alone cannot distinguish a DECISION from a leftover refresh
+   * snapshot: the array is written both by the card's save (a judgement) and by
+   * a catalog refresh (what the roster said on that day). Without that
+   * distinction a model the roster gained after the last refresh was stamped
+   * `multimodal: false` purely by its ABSENCE, `workBuddyModelInput` answered
+   * `['text']`, and the host refused the attachment with
+   * `MODEL_DOES_NOT_SUPPORT_IMAGES` — 「这个模型不支持图片」 — for a model the
+   * plugin's own table calls verified-multimodal.
+   *
+   * `false`/absent means "nobody has chosen yet, so the table may fill the gaps";
+   * a card save sets `true`, after which this array is the whole answer — which
+   * is what keeps an explicit UNTICK of a verified-multimodal model from being
+   * silently re-ticked on the next read.
+   */
+  imageSelectionExplicit?: boolean;
   /**
    * Model ids whose `off` thinking level is offered (issue #34). Seeded from
    * the built-in rule (upstream declaration minus the models known to reject
@@ -5206,12 +5280,13 @@ interface Config {
    *
    * 这条失败**不换号也不重试**（`isFailoverWorthy` 刻意把它排除在外：网关匹配的
    * 是消息开头，换账号只会每个账号白烧一次请求），所以这一轮就此结束，用户看到的
-   * 是「本轮运行失败400: … 被网关的渠道校验拦截 …」。而新开一个回合会让宿主重新
-   * 组装 surface，确实可能通过 —— 这正是 `docs/PINNED-11128-RETRY.md` 里那条
-   * 「把这条消息再发一次」的手动做法。
+   * 是「本轮运行失败400: … 被网关的渠道校验拦截 …」。固定指纹由 `prepareChatBody`
+   * 的按句改词处理；这条开关只是**最后兜底**：只有被拒内容刚好随轮次变化的窄情况
+   * 才可能靠新回合碰过去。固定 system 指纹每轮相同，重发也救不了（#163 实测）。
    *
    * 默认关闭的理由与 {@link Config.usageIdentity} 相同：它会在用户没有发消息的
-   * 情况下花掉真实请求，属于必须显式授权的开销。上限按用户要求默认 3 次。
+   * 情况下花掉真实请求，属于必须显式授权的开销。上限默认 1 次：1 次救不了，3 次也
+   * 救不了，旧默认 3 只会把同一个 400 付三遍。
    */
   channelRejectContinue?: {
     /**
@@ -5219,7 +5294,7 @@ interface Config {
      */
     enabled?: boolean;
     /**
-     * 连续自动续发的次数上限（默认 3，夹在 1..10）。
+     * 连续自动续发的次数上限（默认 1，夹在 1..10）。
      *
      * 「连续」是关键：一次成功回合、或者用户自己发了一条消息，计数立刻清零。
      * 所以上限拦的是「一直过不去就一直试」，而不是这个会话一生的总次数。