dsh-connect-workbuddy 5.6.3 → 5.7.0

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 5.7.0 (2026-10-23)
+
+> 特性版本：加强 WorkBuddy 渠道校验（`11128`）的三级自愈救援，并改善失败证据回显。**凭据、计费、provider 注册与普通请求路径均未改动**；默认策略仍只在渠道校验拒绝后启用，可选 `channelPerturbation: "always"` 让已确认普通请求必失败的环境跳过无效首轮。
+
+### Features
+
+- **渠道校验新增密集零宽救援与可配置扰动策略。**
+  - 渠道门现在按「强制中性头 → 稀疏零宽扰动 → 密集零宽扰动」逐级重试；密集模式在被扫描的 `system` / `assistant` 文本字符边界插入 U+200B，能覆盖没有标点的纯 prose 指纹。
+  - 新增全局 `channelPerturbation` 配置：`off` 只保留失败后救援，`failure`（默认）从成功救援中学习形状，`always` 每个请求都从密集救援形状起步。CN 与 global 两个 provider 均由同一配置驱动。
+  - 普通请求仍然逐字节保持原样（除已有的已知指纹归一化）；任何渠道救援都使用同一账号，不触发账号池换号，也不记为账号失败。
+
+### Fixes
+
+- **渠道失败证据不再只显示被扫描消息的首行。**
+  - 证据现在显示首行、尾行（若文本有多行）与总字数，帮助区分「已知开头命中」与「assistant 历史中段存在精确子串」；这避免把插件已中性化的开头误报为网关新增词条。
+  - `OpeningEvidence` 增加 `textLength` 与可选 `closing`，失败回复仍保持原有的 `workbuddy 上游失败：…（http N）` 报告形状。
+
+### Docs
+
+- 新增 [`docs/CHANNEL-FINGERPRINT-RESEARCH.md`](docs/CHANNEL-FINGERPRINT-RESEARCH.md)，整理主流网关、中转站与适配层对客户端指纹的处理方式，并记录本次实现取舍。
+- 更新 [`docs/DESIGN.md`](docs/DESIGN.md)，补充三级渠道救援、扰动策略与证据回显设计。
+
+### Tests
+
+- 新增密集扰动、`always` / `off` 策略、证据回显字段与既有渠道门回归测试；渠道相关测试 80 条全部通过，完整套件 2137 条通过、2 条按平台跳过。
+
 ## 5.6.3 (2026-10-23)
 
 > 补丁版本：修「免费模型测出来可用，却显示 8 天后才能用」。**请求路径、provider 路由、计费与凭据一律未变。**

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as defaultDesktopAuthCandidates, L as WorkBuddyUpstreamClient, M as workbuddyOwnAuthPath, Mt as hostPeersInfo, a as readHostHeartbeat, b as WorkBuddyCredentialStore, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, k as legacyWorkbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, vt as WORKBUDDY_APP_EXECUTABLE_ENV, w as defaultDesktopAuthDirs, wt as findWorkbuddyAppExecutableWithSource, y as WORKBUDDY_AUTH_FILE_ENV } from "./host-heartbeat-r_icwyw3.js";
+import { C as defaultDesktopAuthCandidates, L as WorkBuddyUpstreamClient, M as workbuddyOwnAuthPath, Mt as hostPeersInfo, a as readHostHeartbeat, b as WorkBuddyCredentialStore, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, k as legacyWorkbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, vt as WORKBUDDY_APP_EXECUTABLE_ENV, w as defaultDesktopAuthDirs, wt as findWorkbuddyAppExecutableWithSource, y as WORKBUDDY_AUTH_FILE_ENV } from "./host-heartbeat-CVz2J0Xt.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/{host-heartbeat-r_icwyw3.js → host-heartbeat-CVz2J0Xt.js}

@@ -2832,6 +2832,11 @@ const WORD_INTERNAL_BREAK = /([A-Z][A-Za-z0-9]*)(\s+)(?=[A-Z][A-Za-z0-9])/gu;
 * the request AND the neutral head could not change anything. Requests the
 * gateway answers keep their bytes untouched.
 *
+* `dense` adds word-boundary breaks for the last-resort rescue. The default
+* sparse form is still used first because it is the least invasive and has been
+* measured; dense mode exists for the refusal both the neutral head and the
+* sparse form could not clear.
+*
 * Idempotent: a body that already carries U+200B in a scanned message is left
 * alone, so a retry never stacks perturbations. Returns `undefined` when
 * nothing would change, which is the caller's signal not to spend a request.
@@ -2839,7 +2844,7 @@ const WORD_INTERNAL_BREAK = /([A-Z][A-Za-z0-9]*)(\s+)(?=[A-Z][A-Za-z0-9])/gu;
 * Never throws: a malformed body is the upstream's to reject, and a parse error
 * must not turn a rescue into a crash.
 */
-function perturbChannelFingerprints(bodyJson) {
+function perturbChannelFingerprints(bodyJson, dense = false) {
 	let parsed;
 	try {
 		parsed = JSON.parse(bodyJson);
@@ -2853,8 +2858,14 @@ function perturbChannelFingerprints(bodyJson) {
 	let changed = false;
 	const perturb = (text) => {
 		if (text.includes(ZERO_WIDTH_SPACE)) return void 0;
-		const next = text.replace(/([.!?])(\s+)/gu, `$1${ZERO_WIDTH_SPACE}$2`).replace(/([。！？])/gu, `$1${ZERO_WIDTH_SPACE}`).replace(/([,;])(\s+)/gu, `$1${ZERO_WIDTH_SPACE}$2`).replace(WORD_INTERNAL_BREAK, (whole, head, tail) => `${head}${ZERO_WIDTH_SPACE}${tail}`);
-		return next === text ? void 0 : next;
+		const boundaries = text.replace(/([.!?])(\s+)/gu, `$1${ZERO_WIDTH_SPACE}$2`).replace(/([。！？])/gu, `$1${ZERO_WIDTH_SPACE}`).replace(/([,;])(\s+)/gu, `$1${ZERO_WIDTH_SPACE}$2`).replace(WORD_INTERNAL_BREAK, (whole, head, tail) => `${head}${ZERO_WIDTH_SPACE}${tail}`);
+		if (!dense) return boundaries === text ? void 0 : boundaries;
+		const denseText = boundaries.replace(/(?=\S)/gu, (whole, offset, source) => {
+			if (source.slice(Math.max(0, offset - 1), offset + 1).includes(ZERO_WIDTH_SPACE)) return "";
+			const previous = source.slice(0, offset).match(/\S(?=\S*$)/u)?.[0];
+			return previous !== void 0 && /[A-Za-z0-9぀-ヿ㐀-鿿]/u.test(previous) ? ZERO_WIDTH_SPACE : "";
+		});
+		return denseText === text ? void 0 : denseText;
 	};
 	for (const value of messages) {
 		if (typeof value !== "object" || value === null || Array.isArray(value)) continue;
@@ -2937,8 +2948,11 @@ function openingEvidenceOfBody(bodyJson) {
 			if (evidence.length >= SYSTEM_EVIDENCE_LIMIT) break;
 			const opening = firstNonEmptyLineOf(text).replace(/\s+/gu, " ").trim();
 			if (opening === "") continue;
+			const closing = lastNonEmptyLineOf(text).replace(/\s+/gu, " ").trim();
 			evidence.push({
 				opening: clip(opening, SYSTEM_OPENING_LIMIT),
+				textLength: text.length,
+				...closing === "" || closing === opening ? {} : { closing: clip(closing, SYSTEM_OPENING_LIMIT) },
 				role: roleOfEvidence,
 				neutralized: startsWithNeutralHead(opening) || isUnapprovedChannelOpening(opening),
 				messageIndex: index
@@ -2973,6 +2987,22 @@ function firstNonEmptyLineOf(content) {
 	return "";
 }
 /**
+* The last line of a text that carries something.
+*
+* The gate has also been measured to match an exact substring INSIDE a scanned
+* message, so a first line alone can point at the wrong evidence: a neutralised
+* opening may sit above a fingerprint deeper in the same assistant history
+* message. The closing line is the cheapest observable other end of that text.
+*/
+function lastNonEmptyLineOf(content) {
+	const lines = content.split("\n");
+	for (let index = lines.length - 1; index >= 0; index--) {
+		const line = lines[index];
+		if (line.trim() !== "") return line;
+	}
+	return "";
+}
+/**
 * Make the conversation open with a system message, prepending the fallback
 * when nothing else supplies one.
 *
@@ -6121,7 +6151,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "5.6.3";
+const WORKBUDDY_CONNECT_VERSION = "5.7.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -1864,6 +1864,16 @@ interface WorkBuddyShimOptions {
   client: Pick<WorkBuddyUpstreamClient, 'chatStream'>;
   catalog: WorkBuddyCatalog;
   logger?: ShimLogger;
+  /**
+   * When to perturb scanned messages with invisible characters.
+   *
+   * `off` keeps the ordinary fail-then-rescue ladder; `failure` (the default)
+   * remembers a successful rescue and starts later requests with it; `always`
+   * starts every request with the dense rescue. `always` is for users whose
+   * gateway has already made the plain attempt a guaranteed 11128 — it trades a
+   * little prompt byte-level purity for avoiding that doomed round trip.
+   */
+  channelPerturbation?: 'off' | 'failure' | 'always';
   /**
    * Pool failover for chat requests. Absent means no failover at all — the
    * pre-pool behaviour, where the selected account serves and its failure is
@@ -4532,6 +4542,15 @@ interface Config {
    * client-fingerprint workaround, not an account one — see `cli-bridge/runner`.
    */
   cliBridge?: CliBridgeSettings;
+  /**
+   * When scanned messages are perturbed with invisible characters.
+   *
+   * `failure` (default) learns from a successful channel-gate rescue and starts
+   * later requests with the learned form; `always` starts every request with
+   * the dense form for a gateway whose plain attempt is a guaranteed refusal;
+   * `off` keeps only the post-failure rescue ladder.
+   */
+  channelPerturbation?: 'off' | 'failure' | 'always';
 }
 /**
  * Mark a schema's field as volatile on the DSH lines that support it.

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as prepareChatBody, A as parseWorkBuddyAuth, At as readAtRestKey, B as declaredTools, C as defaultDesktopAuthCandidates, Ct as findWorkbuddyAppExecutable, D as isEncryptedCredentialError, Dt as macosBundleExecutable, E as hasEncryptedCredentialFields, Et as isWorkbuddyBundle, F as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, Ft as writeFileAtomic, G as isFirstMessageGateBody, H as isContextTooLongBody, I as WorkBuddyCredentialRejectedError, J as openingEvidenceOfBody, K as knownRegionOf, L as WorkBuddyUpstreamClient, M as workbuddyOwnAuthPath, N as CONTEXT_OVERFLOW_MARKER, Nt as resolveDshHome, O as isVaultAccountId, Ot as macosNestedAppBundles, P as CREDENTIAL_REJECTED_CODE, Pt as withFileLock, Q as perturbChannelFingerprints, R as channelGateMemberOf, S as authFileName, St as fetchAtRestKeyPayload, T as defaultDesktopAuthPath, Tt as isEncryptedFieldWrapper, U as isConversationIdGateBody, V as forceNeutralHead, W as isCredentialRejectedError, X as parseReasoning, Y as parseCreditMultiplier, Z as parseUpstreamModel, _ as ENCRYPTED_CREDENTIAL_CODE, _t as nativeModalityOf, a as readHostHeartbeat, at as lastRefusalFor, b as WorkBuddyCredentialStore, bt as deriveAtRestKey, c as WORKBUDDY_CONNECT_VERSION, ct as recordRefusal, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, dt as WorkBuddyImageError, et as regionOf, f as WorkBuddyCatalog, ft as pickImageModel, g as withoutRouters, gt as imageDefaultFor, h as fallbackModelsFor, ht as NATIVE_MODALITY_BY_MODEL_ID, i as processStartTimeMs, it as defaultOffModelIds, j as workbuddyAccountId, jt as workbuddyAppExecutableCandidates, k as legacyWorkbuddyOwnAuthPath, kt as openEncryptedField, l as piAiRuntimeInfo, lt as withEffectiveOff, m as deriveCatalog, mt as queueNoticeText, n as clearHostHeartbeat, nt as attachBusyLevels, o as workbuddyHostHeartbeatPath, ot as offDefaultFor, p as applyContextBudgets, pt as parseQueueAnswer, q as modelIdOfBody, r as isHeartbeatProcessAlive, rt as REFUSES_OFF_MODEL_IDS, s as writeHostHeartbeat, st as offRefused, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as requestEvidenceOf, u as FALLBACK_WORKBUDDY_MODELS, ut as DEFAULT_IMAGE_SIZE, v as WORKBUDDY_AUTH_FILENAME, vt as WORKBUDDY_APP_EXECUTABLE_ENV, w as defaultDesktopAuthDirs, x as WorkBuddyEncryptedCredentialError, xt as deriveAtRestKeyId, y as WORKBUDDY_AUTH_FILE_ENV, yt as clearAtRestKeyCache, z as classifyUpstreamError } from "./host-heartbeat-r_icwyw3.js";
+import { $ as prepareChatBody, A as parseWorkBuddyAuth, At as readAtRestKey, B as declaredTools, C as defaultDesktopAuthCandidates, Ct as findWorkbuddyAppExecutable, D as isEncryptedCredentialError, Dt as macosBundleExecutable, E as hasEncryptedCredentialFields, Et as isWorkbuddyBundle, F as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, Ft as writeFileAtomic, G as isFirstMessageGateBody, H as isContextTooLongBody, I as WorkBuddyCredentialRejectedError, J as openingEvidenceOfBody, K as knownRegionOf, L as WorkBuddyUpstreamClient, M as workbuddyOwnAuthPath, N as CONTEXT_OVERFLOW_MARKER, Nt as resolveDshHome, O as isVaultAccountId, Ot as macosNestedAppBundles, P as CREDENTIAL_REJECTED_CODE, Pt as withFileLock, Q as perturbChannelFingerprints, R as channelGateMemberOf, S as authFileName, St as fetchAtRestKeyPayload, T as defaultDesktopAuthPath, Tt as isEncryptedFieldWrapper, U as isConversationIdGateBody, V as forceNeutralHead, W as isCredentialRejectedError, X as parseReasoning, Y as parseCreditMultiplier, Z as parseUpstreamModel, _ as ENCRYPTED_CREDENTIAL_CODE, _t as nativeModalityOf, a as readHostHeartbeat, at as lastRefusalFor, b as WorkBuddyCredentialStore, bt as deriveAtRestKey, c as WORKBUDDY_CONNECT_VERSION, ct as recordRefusal, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, dt as WorkBuddyImageError, et as regionOf, f as WorkBuddyCatalog, ft as pickImageModel, g as withoutRouters, gt as imageDefaultFor, h as fallbackModelsFor, ht as NATIVE_MODALITY_BY_MODEL_ID, i as processStartTimeMs, it as defaultOffModelIds, j as workbuddyAccountId, jt as workbuddyAppExecutableCandidates, k as legacyWorkbuddyOwnAuthPath, kt as openEncryptedField, l as piAiRuntimeInfo, lt as withEffectiveOff, m as deriveCatalog, mt as queueNoticeText, n as clearHostHeartbeat, nt as attachBusyLevels, o as workbuddyHostHeartbeatPath, ot as offDefaultFor, p as applyContextBudgets, pt as parseQueueAnswer, q as modelIdOfBody, r as isHeartbeatProcessAlive, rt as REFUSES_OFF_MODEL_IDS, s as writeHostHeartbeat, st as offRefused, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as requestEvidenceOf, u as FALLBACK_WORKBUDDY_MODELS, ut as DEFAULT_IMAGE_SIZE, v as WORKBUDDY_AUTH_FILENAME, vt as WORKBUDDY_APP_EXECUTABLE_ENV, w as defaultDesktopAuthDirs, x as WorkBuddyEncryptedCredentialError, xt as deriveAtRestKeyId, y as WORKBUDDY_AUTH_FILE_ENV, yt as clearAtRestKeyCache, z as classifyUpstreamError } from "./host-heartbeat-CVz2J0Xt.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -4020,7 +4020,8 @@ function channelEvidenceText(bodyJson) {
 	const shown = entries.slice(0, CHANNEL_EVIDENCE_LIMIT);
 	const rendered = shown.map((entry) => {
 		const label = entry.neutralized ? "（插件已加中性头）" : "（不在插件已知名单里，网关可能新增了词条）";
-		return `「${entry.role}：${entry.opening}」${label}`;
+		const span = entry.closing === void 0 ? `，共 ${entry.textLength} 字` : `，首尾为「${entry.closing}」，共 ${entry.textLength} 字`;
+		return `「${entry.role}：${entry.opening}${span}」${label}`;
 	}).join("、");
 	const hidden = entries.length - shown.length;
 	return `请求里被网关扫描的消息开头：${rendered}${hidden > 0 ? `……另有 ${hidden} 条未列出。` : "。"}`;
@@ -4217,6 +4218,7 @@ function createWorkBuddyShim(options) {
 	const onAccountFailure = options.onAccountFailure;
 	const onRequestBody = options.onRequestBody;
 	const onUpstreamUsage = options.onUpstreamUsage;
+	const channelPerturbation = options.channelPerturbation ?? "failure";
 	const SHARED_SECRET = randomBytes(32).toString("base64url");
 	/**
 	* Whether this process's prompts have been PROVEN to need the invisible
@@ -4379,19 +4381,7 @@ function createWorkBuddyShim(options) {
 		}
 		const controller = new AbortController();
 		res.on("close", () => controller.abort());
-		/**
-		* The body to send FIRST, which is the perturbed form once this process has
-		* proven the gateway demands it.
-		*
-		* `perturbChannelFingerprints` is consulted only when the flag is set, so a
-		* fresh process still pays the plain attempt — that is what discovers
-		* whether the gate is on at all (see `channelNeedsPerturbation`).
-		*
-		* The perturbed form is a purely additive transform: it inserts zero-width
-		* spaces and changes no word the model reads, so starting from it is not a
-		* behaviour change, only a saved round trip.
-		*/
-		const preferred = channelNeedsPerturbation ? perturbChannelFingerprints(prepared) ?? prepared : prepared;
+		const preferred = channelPerturbation === "always" || channelNeedsPerturbation ? perturbChannelFingerprints(prepared, channelPerturbation === "always") ?? prepared : prepared;
 		let result = await client.chatStream(credential, preferred, controller.signal);
 		if (channelNeedsPerturbation && !result.ok && result.kind === "channel_reject") {
 			channelNeedsPerturbation = false;
@@ -4432,6 +4422,7 @@ function createWorkBuddyShim(options) {
 		*/
 		let retriedWithForcedHead = false;
 		let retriedWithPerturbation = false;
+		let retriedWithDensePerturbation = false;
 		if (!result.ok && result.kind === "channel_reject" && !controller.signal.aborted) {
 			const forced = forceNeutralHead(prepared);
 			if (forced !== void 0) {
@@ -4448,6 +4439,15 @@ function createWorkBuddyShim(options) {
 					if (result.ok) channelNeedsPerturbation = true;
 				}
 			}
+			if (!result.ok && result.kind === "channel_reject" && !controller.signal.aborted) {
+				const dense = perturbChannelFingerprints(forced ?? prepared, true);
+				if (dense !== void 0) {
+					logger?.warn("dsh-connect-workbuddy: the channel gate refused the sparse perturbation too; retrying once with a dense word-boundary perturbation");
+					result = await client.chatStream(credential, dense, controller.signal);
+					retriedWithDensePerturbation = true;
+					if (result.ok && channelPerturbation === "failure") channelNeedsPerturbation = true;
+				}
+			}
 		}
 		const triedAccountIds = [];
 		/**
@@ -4564,6 +4564,7 @@ function createWorkBuddyShim(options) {
 				const retries = [];
 				if (retriedWithForcedHead) retries.push("强制中性头");
 				if (retriedWithPerturbation) retries.push("一次不可见扰动");
+				if (retriedWithDensePerturbation) retries.push("一次密集不可见扰动");
 				const retryNote = retries.length === 0 ? "" : `，并已用${retries.join("与")}重试过`;
 				const member = channelGateMemberOf(result.message, requestEvidenceOf(prepared));
 				const said = detail?.rawMsg ?? detail?.displayMsg;
@@ -9695,7 +9696,12 @@ const Config = z.object({
 	enabledModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN selection"),
 	imageModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN image opt-in"),
 	contextBudgets: z.dict(z.number().step(1).min(1)).default({}).description("Deprecated: pre-region-split CN context budgets"),
-	cliBridge: asVolatile(cliBridgeConfig.default({}).description("Optional CodeBuddy CLI route; off by default and independent of the providers"))
+	cliBridge: asVolatile(cliBridgeConfig.default({}).description("Optional CodeBuddy CLI route; off by default and independent of the providers")),
+	channelPerturbation: asVolatile(z.union([
+		z.const("off"),
+		z.const("failure"),
+		z.const("always")
+	]).default("failure").description("When to perturb scanned messages with invisible characters: \"off\" only rescues after a channel-gate refusal, \"failure\" (default) learns from a successful rescue and starts later requests perturbed, \"always\" starts every request with the dense rescue for a gateway whose plain attempt is guaranteed to fail."))
 });
 /**
 * One region's saved model state. A config written before the region split has
@@ -9855,6 +9861,7 @@ function apply(ctx, config) {
 				client,
 				catalog,
 				logger: ctx.logger,
+				channelPerturbation: unwrapVolatile(config.channelPerturbation) ?? "failure",
 				/**
 				* Pool routing, bound to THIS region.
 				*

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness：每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。",
-  "version": "5.6.3",
+  "version": "5.7.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",