dsh-connect-workbuddy 5.13.0 → 5.14.0

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as parseCreditMultiplier, $t as withFileLock, A as isEncryptedCredentialError, At as pickMediaModel, B as WorkBuddyCredentialRejectedError, Bt as deriveAtRestKeyId, C as WorkBuddyCredentialStore, Ct as IMAGE_TAG_TEXT_TO_IMAGE, D as defaultDesktopAuthDirs, Dt as imageMimeForPath, E as defaultDesktopAuthCandidates, Et as imageDataUrl, F as workbuddyAccountId, Ft as imageDefaultFor, G as forceNeutralHead, Gt as isWorkbuddyBundle, H as channelGateMemberOf, Ht as findWorkbuddyAppExecutable, I as workbuddyOwnAuthPath, It as nativeModalityOf, J as isCredentialRejectedError, Jt as openEncryptedField, K as isContextTooLongBody, Kt as macosBundleExecutable, L as CONTEXT_OVERFLOW_MARKER, Lt as WORKBUDDY_APP_EXECUTABLE_ENV, M as legacyWorkbuddyOwnAuthPath, Mt as parseQueueAnswer, N as parseWorkBuddyAuth, Nt as queueNoticeText, O as defaultDesktopAuthPath, Ot as isBareBase64Image, P as preferredAccountName, Pt as NATIVE_MODALITY_BY_MODEL_ID, Q as openingEvidenceOfBody, Qt as resolveDshHome, R as CREDENTIAL_REJECTED_CODE, Rt as clearAtRestKeyCache, S as WORKBUDDY_AUTH_FILE_ENV, St as IMAGE_TAG_IMAGE_TO_IMAGE, T as authFileName, Tt as WorkBuddyImageError, U as classifyUpstreamError, V as WorkBuddyUpstreamClient, Vt as fetchAtRestKeyPayload, W as declaredTools, Wt as isEncryptedFieldWrapper, X as knownRegionOf, Xt as workbuddyAppExecutableCandidates, Y as isFirstMessageGateBody, Yt as readAtRestKey, Z as modelIdOfBody, _ as deriveCatalog, _t as WorkBuddyVideoError, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as resolveVideoParams, c as WORKBUDDY_CONNECT_VERSION, ct as REFUSES_OFF_MODEL_IDS, dt as offDefaultFor, en as writeFileAtomic, et as parseReasoning, f as piAiRuntimeInfo, ft as offRefused, g as applyContextBudgets, gt as VIDEO_TAG_TEXT_TO_VIDEO, h as WorkBuddyCatalog, ht as VIDEO_TAG_IMAGE_TO_VIDEO, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as sniffImageMime, k as hasEncryptedCredentialFields, kt as parseImageDataUrl, l as createFileRosterSeenStore, lt as defaultOffModelIds, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as withEffectiveOff, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as rewriteSessionTitleModel, p as FALLBACK_WORKBUDDY_MODELS, pt as recordRefusal, q as isConversationIdGateBody, qt as macosNestedAppBundles, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as attachBusyLevels, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as parseUpstreamModel, ut as lastRefusalFor, v as fallbackModelsFor, vt as parseSupportedSecondsRange, w as WorkBuddyEncryptedCredentialError, wt as MAX_INPUT_IMAGE_BYTES, x as WORKBUDDY_AUTH_FILENAME, xt as DEFAULT_IMAGE_SIZE, y as withoutRouters, yt as pickVideoModel, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as deriveAtRestKey } from "./host-heartbeat-DLVGPY4k.js";
+import { $ as parseCreditMultiplier, $t as resolveDshHome, A as isEncryptedCredentialError, At as pickMediaModel, B as WorkBuddyCredentialRejectedError, Bt as deriveAtRestKey, C as WorkBuddyCredentialStore, Ct as IMAGE_TAG_TEXT_TO_IMAGE, D as defaultDesktopAuthDirs, Dt as imageMimeForPath, E as defaultDesktopAuthCandidates, Et as imageDataUrl, F as workbuddyAccountId, Ft as NATIVE_MODALITY_BY_MODEL_ID, G as forceNeutralHead, Gt as isEncryptedFieldWrapper, H as channelGateMemberOf, Ht as fetchAtRestKeyPayload, I as workbuddyOwnAuthPath, It as imageDefaultFor, J as isCredentialRejectedError, Jt as macosNestedAppBundles, K as isContextTooLongBody, Kt as isWorkbuddyBundle, L as CONTEXT_OVERFLOW_MARKER, Lt as nativeModalityOf, M as legacyWorkbuddyOwnAuthPath, Mt as parseQueueAnswer, N as parseWorkBuddyAuth, Nt as queueNoticeText, O as defaultDesktopAuthPath, Ot as isBareBase64Image, P as preferredAccountName, Pt as pruneTempDir, Q as openingEvidenceOfBody, R as CREDENTIAL_REJECTED_CODE, Rt as WORKBUDDY_APP_EXECUTABLE_ENV, S as WORKBUDDY_AUTH_FILE_ENV, St as IMAGE_TAG_IMAGE_TO_IMAGE, T as authFileName, Tt as WorkBuddyImageError, U as classifyUpstreamError, Ut as findWorkbuddyAppExecutable, V as WorkBuddyUpstreamClient, Vt as deriveAtRestKeyId, W as declaredTools, X as knownRegionOf, Xt as readAtRestKey, Y as isFirstMessageGateBody, Yt as openEncryptedField, Z as modelIdOfBody, Zt as workbuddyAppExecutableCandidates, _ as deriveCatalog, _t as WorkBuddyVideoError, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as resolveVideoParams, c as WORKBUDDY_CONNECT_VERSION, ct as REFUSES_OFF_MODEL_IDS, dt as offDefaultFor, en as withFileLock, et as parseReasoning, f as piAiRuntimeInfo, ft as offRefused, g as applyContextBudgets, gt as VIDEO_TAG_TEXT_TO_VIDEO, h as WorkBuddyCatalog, ht as VIDEO_TAG_IMAGE_TO_VIDEO, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as sniffImageMime, k as hasEncryptedCredentialFields, kt as parseImageDataUrl, l as createFileRosterSeenStore, lt as defaultOffModelIds, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as withEffectiveOff, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as rewriteSessionTitleModel, p as FALLBACK_WORKBUDDY_MODELS, pt as recordRefusal, q as isConversationIdGateBody, qt as macosBundleExecutable, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as attachBusyLevels, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tn as writeFileAtomic, tt as parseUpstreamModel, ut as lastRefusalFor, v as fallbackModelsFor, vt as parseSupportedSecondsRange, w as WorkBuddyEncryptedCredentialError, wt as MAX_INPUT_IMAGE_BYTES, x as WORKBUDDY_AUTH_FILENAME, xt as DEFAULT_IMAGE_SIZE, y as withoutRouters, yt as pickVideoModel, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as clearAtRestKeyCache } from "./host-heartbeat-DMC9icX8.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1745,6 +1745,39 @@ function isForeignAssistant(message, identity, requestModelId) {
 	return typeof model === "string" && model !== requestModelId;
 }
 /**
+* Whether this assistant turn came from a DIFFERENT PROVIDER/route, rather than
+* from a different model on one of this bundle's own routes.
+*
+* WHY THIS DISTINCTION EXISTS (issue #163's live scene). A session switched
+* from `dsh-opencode-go` to a WorkBuddy route mid-turn. The host rebuilt the
+* other provider's assistant turns as `dsh-foreign`, and pi-ai rewrote their
+* unsigned `thinking` blocks into visible `text` — 14,410 / 4,225 / 5,138
+* characters in the measured scene. WorkBuddy's gateway scans every assistant
+* message and refused the turn with business code 11128; all three in-place
+* rescue rungs and three auto-`继续` attempts failed because the bytes never
+* changed.
+*
+* A cross-provider thinking block is different from a same-route model switch:
+* it carries no `thinkingSignature` (the host builds `foreignAssistant()`
+* without one), so it could never be replayed as reasoning. Its only possible
+* contribution to the wire is the prose pi-ai manufactures from it. Dropping it
+* is therefore a correctness repair, not a preference — and it must happen
+* even when the user never opted into {@link dropForeignThinking}.
+*
+* Same-route model switches (`hy3` → `deepseek-v4.1-flash`) stay behind the
+* explicit switch, because those turns WERE produced by this bundle and their
+* reasoning may be worth keeping in the transcript for the user to read.
+*/
+function isCrossProviderAssistant(message, identity, ownedRoutes) {
+	if (typeof message !== "object" || message === null) return false;
+	const record = message;
+	if (record["role"] !== "assistant") return false;
+	if (record["api"] === "dsh-foreign") return true;
+	const provider = record["provider"];
+	if (typeof provider !== "string") return true;
+	return provider !== identity && !ownedRoutes.includes(provider);
+}
+/**
 * Every foreign thinking block pi-ai would turn into visible prose (issue #147).
 *
 * THE DEFECT. pi-ai keeps a historical `thinking` block only while
@@ -1801,38 +1834,26 @@ function foreignThinkingOf(context, identity = WORKBUDDY_MODEL_IDENTITY, request
 	return found;
 }
 /**
-* Remove the foreign thinking blocks {@link foreignThinkingOf} finds.
-*
-* WHY REMOVAL IS THE HONEST REPAIR. The alternatives are both worse:
-*
-*   - LEAVE IT: pi-ai publishes the other provider's private working notes as
-*     this turn's answer (the #147 defect), so the user reads reasoning instead
-*     of a reply and the model imitates that shape forever after.
-*   - KEEP IT AS THINKING: impossible from here. `isSameModel` is pi-ai's own
-*     predicate over fields this plugin does not control (`model.provider` /
-*     `model.api` / `model.id` are compared against the MESSAGE's), and the
-*     only way to satisfy it is to claim the foreign turn as this model's own
-*     output — which is exactly the provenance lie issue #111 removed. These
-*     blocks carry no `thinkingSignature` (the host builds them that way), so
-*     they could not be replayed as signed reasoning even if claimed.
+* The subset of {@link foreignThinkingOf} that is safe to repair without asking.
 *
-* Dropping is what the request builder already does with them in every other
-* branch: an unsigned foreign thinking block is never sent as
-* `reasoning_content`, so its only possible contribution to the wire was the
-* flattened prose this function removes. Every other block — text, tool calls —
-* is left exactly where it is, and so is every message's identity.
+* This is the predicate the adapter uses when `dropForeignThinking` is OFF: a
+* turn from another provider/route is dropped unconditionally, because its
+* unsigned thinking block can never be replayed and its flattened prose is what
+* the WorkBuddy gateway refuses (issue #163's provider-switch scene). A turn
+* from this bundle under a different model id is NOT included — that one is
+* still the explicit switch's business.
 *
-* Idempotent: a second pass finds nothing to remove. Returns the SAME context
-* object when nothing changed, so the common case allocates nothing.
-*
-* @param context - a pi-ai context.
-* @param identity - the identity this adapter stamps on its own models.
-* @param requestModelId - model id the request is addressed to (see
-*   {@link isForeignAssistant}); omitted, only the provider/api legs are judged.
-* @returns the repaired context, or the input when no block qualified.
+* Runs after `alignAssistantIdentities`, so a global-region turn this bundle
+* owns has already had its `dsh-foreign` marker repaired away and is not
+* misclassified.
 */
-function dropForeignThinking(context, identity = WORKBUDDY_MODEL_IDENTITY, requestModelId) {
-	const affected = foreignThinkingOf(context, identity, requestModelId);
+function crossProviderThinkingOf(context, identity = WORKBUDDY_MODEL_IDENTITY, ownedRoutes = [WORKBUDDY_PROVIDER, WORKBUDDY_GLOBAL_PROVIDER]) {
+	const messages = context.messages;
+	if (!Array.isArray(messages)) return [];
+	return foreignThinkingOf(context, identity).filter((block) => isCrossProviderAssistant(messages[block.messageIndex], identity, ownedRoutes));
+}
+/** Remove exactly the listed blocks; the one place that edits a transcript. */
+function dropThinkingBlocks(context, affected) {
 	if (affected.length === 0) return context;
 	const messages = context.messages;
 	const byMessage = /* @__PURE__ */ new Map();
@@ -1860,13 +1881,12 @@ function withLegacyContext(api, generation, identity = WORKBUDDY_MODEL_IDENTITY,
 	/** One place so both branches and both entry points agree on the order. */
 	const prepare = (context, requestModelId) => {
 		const aligned = alignAssistantIdentities(generation === "modern" ? foldModernContext(context) : adaptLegacyPiAiContext(context), identity, ownedRoutes);
-		if (repair?.dropForeignThinking !== true) return aligned;
-		const affected = foreignThinkingOf(aligned, identity, requestModelId);
+		const affected = repair?.dropForeignThinking === true ? foreignThinkingOf(aligned, identity, requestModelId) : crossProviderThinkingOf(aligned, identity, ownedRoutes);
 		if (affected.length === 0) return aligned;
 		try {
-			repair.onForeignThinking?.(affected);
+			repair?.onForeignThinking?.(affected);
 		} catch {}
-		return dropForeignThinking(aligned, identity, requestModelId);
+		return dropThinkingBlocks(aligned, affected);
 	};
 	if (generation === "modern") return {
 		...api,
@@ -2232,7 +2252,7 @@ async function foldOnce(deps, agent, measurement, window, target) {
 * 宿主也不会替我们重发：`channel_reject` 走的是 400，`code` 又是它不认识的字符串，
 * 不在 `DEFAULT_RETRYABLE_CODES` 里，于是这一轮直接结束，用户看到的正是上面那句。
 *
-* ## 为什么「再发一次」确实可能成功
+* ## 为什么它过去看起来可能成功（只对随轮次变化的窄情况）
 *
 * `docs/PINNED-11128-RETRY.md` §2 记录了两条互相矛盾的事实：插件自己在
 * `perturbChannelFingerprints` 旁的注释说「给定提示词被拒是确定性的」，而现场报告
@@ -2241,19 +2261,24 @@ async function foldOnce(deps, agent, measurement, window, target) {
 * 可能变化、插件也可能因为学到偏好而从第一发就带扰动。所以「重发一次」不是把被拒
 * 的字节原样再塞一遍（那才是真正的浪费），而是**开一个新回合**。
 *
+* #163 的 2026-10-29 实测把这条解释收窄了：固定 system 指纹每轮逐字节相同，新回合
+* 换不掉它；只有被拒内容恰好落在随轮次变化的段上时才可能碰过。不要把它当成
+* 「11128 只要重发就能过」的承诺。
+*
 * 本模块就是把这个「手动再发一次」自动化，并且**只做这件事**：
 *
 * - 只认 `channel_reject` 这一种失败。配额、限流、网络、内容审核都有各自的处置，
 *   那些失败再发「继续」只会多烧一次请求（`NO_CONTINUE_CODES` 的同一判断）。
-* - 上限默认 3 次，**连续**计数：一次成功回合或一条真实用户消息立即清零。计数在
-*   「发出」时递增，所以用户看到的自动续发次数恰好等于上限。
+* - 上限默认 **1** 次，**连续**计数：一次成功回合或一条真实用户消息立即清零。
+*   旧默认是 3；#163 的实测把「新回合会换掉被拒内容」证伪了（固定 system 指纹每轮
+*   相同，3 次只是把同一个 400 付三遍），所以一次足够：1 次救不了，3 次也救不了。
 * - 不做换号、不换区域、不改请求内容、不重试同一份字节：换号对这类拒绝无效，而
 *   篡改请求才是这条功能不该碰的东西。
 * - 子代理会话一律不碰：子代理由父代理驱动，抢跑会打乱执行树。
 *
-* 默认关闭（`channelRejectContinue` 默认 false）。它会在用户没有发消息的情况下
-* 花掉真实请求，属于「必须由用户显式授权」的那一类开关，与 `usageIdentity`、
-* `imageToolEnabled` 的同一条规则。
+* 它是**最后兜底**，不是 11128 的修复：固定指纹由 `prepareChatBody` 的按句改词处理；
+* 改词后仍 11128，多半是新的固定指纹，重发同样无效。只有「被拒内容刚好随轮次变化」
+* 的窄情况才可能靠它碰过去，所以默认关闭、默认只发 1 次。
 *
 * 参考：`dsh-client-auto-continue`（MIT，HsiangNianian/dsh-auto-continue）—
 *   「连续失败上限」这套**语义**取自它：`state.consecutive` 在每次发出时自增、
@@ -2314,7 +2339,7 @@ const SESSION_EVICT = 50;
 * @returns 归一化后的设置。
 */
 function channelContinueSettingsOf(enabled, max, text) {
-	const capped = Math.min(MAX_CONSECUTIVE_CEILING, Math.max(1, typeof max === "number" && Number.isFinite(max) ? Math.trunc(max) : 3));
+	const capped = Math.min(MAX_CONSECUTIVE_CEILING, Math.max(1, typeof max === "number" && Number.isFinite(max) ? Math.trunc(max) : 1));
 	const body = typeof text === "string" && text.trim() !== "" ? text.trim() : DEFAULT_CONTINUE_TEXT;
 	return {
 		enabled: enabled === true,
@@ -4336,7 +4361,36 @@ const NO_RETRY_HEADERS = Object.freeze({
 	"x-should-retry": "false",
 	"retry-after": "0"
 });
-/** Read a request body with a size cap; over-limit bodies fail the request. */
+/**
+* An over-limit request body (issue #174).
+*
+* A named class rather than an `Error` with a magic message, because the two
+* callers must answer it with a DIFFERENT status: the protocol answer is 413,
+* and classifying it as an ordinary internal failure made it a 500. A class
+* survives renaming the message, which is the only reason this is not a
+* string comparison.
+*/
+var RequestBodyTooLargeError = class extends Error {
+	limitBytes;
+	constructor(limitBytes) {
+		super(`request body too large (limit ${limitBytes} bytes)`);
+		this.limitBytes = limitBytes;
+		this.name = "RequestBodyTooLargeError";
+	}
+};
+/**
+* Read a request body with a size cap; over-limit bodies fail the request.
+*
+* AN OVER-LIMIT BODY IS STOPPED, NOT DESTROYED (issue #174). Calling
+* `req.destroy()` here tears down the SOCKET, so the 413 the caller is about to
+* write can never reach the client — it saw a reset connection instead of an
+* answer, which is strictly worse than the 500 this replaced. So the stream is
+* paused and its listeners are dropped: the request is no longer read, the
+* response still goes out, and Node closes the connection once the response
+* ends. Bytes already arriving are discarded with the socket, which is the
+* whole point of a cap (`content-length` is not trusted, so the cap has to be
+* enforced on arrival).
+*/
 function readBody(req) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
@@ -4344,8 +4398,11 @@ function readBody(req) {
 		req.on("data", (chunk) => {
 			size += chunk.length;
 			if (size > REQUEST_BODY_LIMIT) {
-				reject(/* @__PURE__ */ new Error("request body too large"));
-				req.destroy();
+				chunks.length = 0;
+				req.removeAllListeners("data");
+				req.removeAllListeners("end");
+				req.pause();
+				reject(new RequestBodyTooLargeError(REQUEST_BODY_LIMIT));
 				return;
 			}
 			chunks.push(chunk);
@@ -5256,8 +5313,10 @@ function createWorkBuddyShim(options) {
 			}
 			writeOpenAIError(res, 404, "not_found", `no such route: ${req.method} ${url}`);
 		} catch (error) {
-			if (!res.headersSent) writeOpenAIError(res, 500, "internal", String(error));
-			else res.end();
+			if (!res.headersSent) {
+				if (error instanceof RequestBodyTooLargeError) writeOpenAIError(res, 413, "client", error.message, "request_too_large");
+				else writeOpenAIError(res, 500, "internal", String(error));
+			} else res.end();
 		}
 	}
 	/**
@@ -5647,14 +5706,16 @@ function isBillableFailure$1(error, sent) {
 	if (error instanceof WorkBuddyImageError) return BILLABLE_FAILURE_CODES$1.has(error.code);
 	return true;
 }
+/** 生成图片的临时目录（issue #174）——清理由 {@link pruneTempDir} 负责。 */
+const TEMP_IMAGE_DIR = join(tmpdir(), "workbuddy-image-gen");
 /** 把 b64 图片落成一个临时文件，返回绝对路径。 */
 async function writeTempImage(b64, model) {
-	const dir = join(tmpdir(), "workbuddy-image-gen");
-	await mkdir(dir, { recursive: true });
+	await mkdir(TEMP_IMAGE_DIR, { recursive: true });
 	const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
 	const safeModel = model.replace(/[^A-Za-z0-9._-]+/g, "_");
-	const path = join(dir, `${safeModel}-${stamp}.png`);
+	const path = join(TEMP_IMAGE_DIR, `${safeModel}-${stamp}.png`);
 	await writeFile(path, Buffer.from(b64, "base64"));
+	pruneTempDir(TEMP_IMAGE_DIR, 20, [".png"]);
 	return path;
 }
 /**
@@ -11216,6 +11277,12 @@ const regionStateConfig = z.object({
 	* ticked correctly without the user having to save.
 	*/
 	offModelIds: z.array(z.string()).default([]).description("Model ids whose \"off\" thinking level is offered; seeded from the built-in rule when first read."),
+	/**
+	* Whether a human has edited the image boxes (issue #168). `false` lets the
+	* vendor-verified table fill ids the saved array does not mention; `true`
+	* makes `imageModelIds` the whole answer, so an explicit untick sticks.
+	*/
+	imageSelectionExplicit: z.boolean().default(false),
 	contextBudgets: z.dict(z.number().step(1).min(1)).default({}),
 	pool: poolConfig.default({})
 });
@@ -11305,16 +11372,16 @@ const Config = z.object({
 	usageIdentity: asVolatile(z.boolean().default(false).description("Make the upstream's usage page record these calls like the official client's: add the X-IDE-* identity headers (which fill the 使用端 column) and send the conversation ids as 32-hex UUIDv7. Off by default — it is a display alignment measured by a reporter, not by this plugin, and the chat channel identity (User-Agent) and request body never change.")),
 	keepPromptLast: asVolatile(z.boolean().default(false).description("Move the harness-injected runtime context above the real prompt, so the WorkBuddy usage page records what you actually typed instead of the injected block. Message count and text are preserved; the one edit is the recorded prompt's own leading <acp> marker. Off by default because it changes the message order the upstream counts.")),
 	extraInjectedPrefixes: asVolatile(z.array(z.string()).default([]).description("Extra literal prefixes (issue #133) treated like the harness-injected context markers when keepPromptLast is on — for blocks a companion plugin injects that the built-in list does not recognize. Each entry matches the start of a trailing user message; read only while keepPromptLast is enabled. Sampled when the plugin mounts: reload the plugin (or restart the host) after changing it.")),
-	dropForeignThinking: asVolatile(z.boolean().default(false).description("Drop foreign thinking blocks that pi-ai would publish as prose (issue #147). After a provider switch the host rebuilds the other provider's assistant turns as dsh-foreign, and pi-ai then rewrites their thinking blocks into visible text, so the model's working notes become the answer and it copies that shape on later turns. On, those unsigned blocks are removed from the request (they could never be replayed as reasoning anyway); text and tool calls are untouched. Off by default because it changes bytes the upstream counts.")),
+	dropForeignThinking: asVolatile(z.boolean().default(false).description("Drop foreign thinking blocks that pi-ai would publish as prose (issue #147). CROSS-PROVIDER turns are dropped automatically: after a provider switch the other provider's unsigned thinking blocks can never be replayed, and pi-ai would flatten them into assistant prose that the gateway refuses with 11128 (issue #163's measured scene). This switch only widens the repair to a model switch inside one of this bundle's own routes. On, those blocks are removed from the request; text and tool calls are untouched. Off by default for the same-route leg because it changes bytes the upstream counts.")),
 	sessionTitle: asVolatile(z.object({
 		enabled: z.boolean().default(false),
 		model: z.string().default("wb-lite")
 	}).default({}).description("Move the host session-title request onto a hidden lightweight model (issues #132/#133). The host fires one real upstream request per new session either way; enabled re-points it at `model` (default wb-lite, measured 0 credits by the reporter) instead of billing the main paid model. Request volume still counts, and the lightweight model is reporter-measured, not reproduced here. Sampled when the plugin mounts: reload the plugin (or restart the host) after changing it.")),
 	channelRejectContinue: asVolatile(z.object({
 		enabled: z.boolean().default(false),
-		maxConsecutive: z.number().step(1).min(1).max(10).default(3),
+		maxConsecutive: z.number().step(1).min(1).max(10).default(1),
 		text: z.string().default("继续")
-	}).default({}).description("After the gateway refuses a turn with `channel_reject` (business code 11128), send 「继续」 once more automatically — optional and capped. Off by default: it spends a real request without the user typing anything. That refusal is deliberately NOT retried in place and NOT failed over (every account sends the same opening), so the turn would otherwise just fail; a new turn rebuilds the request surface, which is the manual \"send it again\" remedy docs/PINNED-11128-RETRY.md already recommends. `maxConsecutive` (default 3) counts CONSECUTIVE auto-sends: one successful turn, or one real user message, resets it. Subagent sessions are never touched. Live: the engine reads this on every failure, so no reload is needed."))
+	}).default({}).description("LAST RESORT, not a fix for 11128. After the gateway refuses a turn with `channel_reject` (business code 11128), send 「继续」 once automatically. Off by default: it spends a real request without the user typing anything. Fixed system fingerprints are handled by prepareChatBody's sentence rewrites; they are byte-identical every turn, so resending only pays for the same 400 again. The narrow case this can help is content that changes between turns. `maxConsecutive` (default 1) counts CONSECUTIVE auto-sends: one successful turn, or one real user message, resets it. Subagent sessions are never touched. Live: the engine reads this on every failure, so no reload is needed."))
 });
 /**
 * One region's saved model state. A config written before the region split has
@@ -11558,10 +11625,51 @@ function apply(ctx, config) {
 		...model,
 		...images.has(model.id) ? { multimodal: true } : { multimodal: false }
 	}));
+	/**
+	* The image selection one region should be stamped with (issue #168).
+	*
+	* The saved array alone cannot answer "does this model take images?", because
+	* it has two writers with different meanings: the user ticking a box (a
+	* DECISION, to be kept forever) and a catalog refresh re-deriving the
+	* vendor-verified defaults (a SNAPSHOT of the roster as it stood that day).
+	* Stamping the snapshot marks every model the roster gained SINCE as
+	* text-only, `workBuddyModelInput` then answers `['text']`, and the host
+	* refuses the attachment outright — `Model "…" does not support image input`
+	* (`MODEL_DOES_NOT_SUPPORT_IMAGES`) — for a model `imageDefaultFor`
+	* classifies as verified-multimodal.
+	*
+	* So the two sides are UNIONED, each contributing exactly what it can know:
+	*
+	*   - the SAVED array states every model the user has ticked. A tick is
+	*     honoured even where the vendor table disagrees (someone may know this
+	*     account refuses images for that model).
+	*   - the VENDOR TABLE states the models this build can vouch for, and is
+	*     consulted only for ids the saved array says nothing about. That is what
+	*     un-breaks a newcomer without touching a single decision already made.
+	*
+	* `imageSelectionExplicit` closes the one gap a union cannot: the array cannot
+	* say whether an ABSENT id was unticked or simply did not exist yet. Once a
+	* human has edited the boxes, absence is a decision again and the table stops
+	* contributing at all.
+	*
+	* This keeps every existing shape working: an empty `imageModelIds` on a
+	* never-edited region now means "the user has not chosen any" and is filled
+	* from the verified list; a populated one keeps every id it carries. It is
+	* deliberately NOT a hard gate on the flag alone, because the settings seam
+	* (`ctx.settings.update`) is a public write path and
+	* `tests/settings-integration.spec.ts` pins that writing `imageModelIds`
+	* there must reach the adapter without a second "I edited it" call.
+	*/
+	const effectiveImageIds = (state, models) => {
+		const chosen = new Set(state.imageModelIds ?? []);
+		if (state.imageSelectionExplicit === true) return chosen;
+		for (const model of models) if (!chosen.has(model.id) && imageDefaultFor(model)) chosen.add(model.id);
+		return chosen;
+	};
 	const configuredModels = (value, region, liveModels = []) => {
 		const state = regionStateOf(value, region);
 		const roster = resolveRoster(state.lastCatalog ?? [], liveModels, region, { keepLoadLevel: true });
-		const declared = withImageSelection(deriveCatalog(roster, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? []));
+		const declared = withImageSelection(deriveCatalog(roster, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), effectiveImageIds(state, roster));
 		return withEffectiveOff(declared, new Set(savedOffModelIds(state, declared))).map((model) => model.reasoning === void 0 || lastRefusalFor(model.id) === void 0 ? model : {
 			...model,
 			reasoning: {
@@ -12112,7 +12220,7 @@ function apply(ctx, config) {
 		*/
 		busyLevels: (region) => liveBusyLevels(region),
 		enabledModelIds: (region) => regionStateOf(current(), region).enabledModelIds ?? [],
-		imageModelIds: (region) => regionStateOf(current(), region).imageModelIds ?? [],
+		imageModelIds: (region) => [...effectiveImageIds(regionStateOf(current(), region), displayModels(current(), region))],
 		offModelIds: (region) => savedOffModelIds(regionStateOf(current(), region), displayModels(current(), region)),
 		contextBudgets: (region) => regionStateOf(current(), region).contextBudgets ?? {},
 		discoverModels,
@@ -13086,6 +13194,7 @@ function apply(ctx, config) {
 						blocks,
 						atMs: Date.now()
 					};
+					if (unwrapVolatile(current().dropForeignThinking) !== true) ctx.logger.warn(`dsh-connect-workbuddy: dropped ${blocks.length} cross-provider thinking block(s) before a WorkBuddy request (provider switch); see issue #163`);
 				}
 			});
 			invalidateCatalog = () => {
@@ -13136,7 +13245,7 @@ function apply(ctx, config) {
 				const discovered = await discoverModels(region, signal);
 				const live = await withBusyLevels(region, discovered, signal);
 				const state = regionStateOf(current(), region);
-				return withImageSelection(deriveCatalog(live, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])).map((model) => ({
+				return withImageSelection(deriveCatalog(live, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), effectiveImageIds(state, live)).map((model) => ({
 					id: model.id,
 					name: workBuddyDisplayName(model),
 					contextWindow: model.contextWindow,
@@ -13160,7 +13269,7 @@ function apply(ctx, config) {
 					const models = await withBusyLevels(region, await client.fetchModels(credential, void 0, regionStateOf(current(), region).enabledModelIds ?? []));
 					if (stopped) return;
 					const state = regionStateOf(current(), region);
-					stacks[region].catalog.set(withEffectiveOff(withImageSelection(deriveCatalog(models, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])), new Set(savedOffModelIds(state, models))));
+					stacks[region].catalog.set(withEffectiveOff(withImageSelection(deriveCatalog(models, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), effectiveImageIds(state, models)), new Set(savedOffModelIds(state, models))));
 					adapters[region].invalidate();
 					try {
 						await stacks[region].rosterSeen.note(models.map((model) => model.id));

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness：每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。",
-  "version": "5.13.0",
+  "version": "5.14.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",