dsh-connect-workbuddy 5.6.3 → 5.8.0

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as prepareChatBody, A as parseWorkBuddyAuth, At as readAtRestKey, B as declaredTools, C as defaultDesktopAuthCandidates, Ct as findWorkbuddyAppExecutable, D as isEncryptedCredentialError, Dt as macosBundleExecutable, E as hasEncryptedCredentialFields, Et as isWorkbuddyBundle, F as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, Ft as writeFileAtomic, G as isFirstMessageGateBody, H as isContextTooLongBody, I as WorkBuddyCredentialRejectedError, J as openingEvidenceOfBody, K as knownRegionOf, L as WorkBuddyUpstreamClient, M as workbuddyOwnAuthPath, N as CONTEXT_OVERFLOW_MARKER, Nt as resolveDshHome, O as isVaultAccountId, Ot as macosNestedAppBundles, P as CREDENTIAL_REJECTED_CODE, Pt as withFileLock, Q as perturbChannelFingerprints, R as channelGateMemberOf, S as authFileName, St as fetchAtRestKeyPayload, T as defaultDesktopAuthPath, Tt as isEncryptedFieldWrapper, U as isConversationIdGateBody, V as forceNeutralHead, W as isCredentialRejectedError, X as parseReasoning, Y as parseCreditMultiplier, Z as parseUpstreamModel, _ as ENCRYPTED_CREDENTIAL_CODE, _t as nativeModalityOf, a as readHostHeartbeat, at as lastRefusalFor, b as WorkBuddyCredentialStore, bt as deriveAtRestKey, c as WORKBUDDY_CONNECT_VERSION, ct as recordRefusal, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, dt as WorkBuddyImageError, et as regionOf, f as WorkBuddyCatalog, ft as pickImageModel, g as withoutRouters, gt as imageDefaultFor, h as fallbackModelsFor, ht as NATIVE_MODALITY_BY_MODEL_ID, i as processStartTimeMs, it as defaultOffModelIds, j as workbuddyAccountId, jt as workbuddyAppExecutableCandidates, k as legacyWorkbuddyOwnAuthPath, kt as openEncryptedField, l as piAiRuntimeInfo, lt as withEffectiveOff, m as deriveCatalog, mt as queueNoticeText, n as clearHostHeartbeat, nt as attachBusyLevels, o as workbuddyHostHeartbeatPath, ot as offDefaultFor, p as applyContextBudgets, pt as parseQueueAnswer, q as modelIdOfBody, r as isHeartbeatProcessAlive, rt as REFUSES_OFF_MODEL_IDS, s as writeHostHeartbeat, st as offRefused, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as requestEvidenceOf, u as FALLBACK_WORKBUDDY_MODELS, ut as DEFAULT_IMAGE_SIZE, v as WORKBUDDY_AUTH_FILENAME, vt as WORKBUDDY_APP_EXECUTABLE_ENV, w as defaultDesktopAuthDirs, x as WorkBuddyEncryptedCredentialError, xt as deriveAtRestKeyId, y as WORKBUDDY_AUTH_FILE_ENV, yt as clearAtRestKeyCache, z as classifyUpstreamError } from "./host-heartbeat-r_icwyw3.js";
+import { $ as parseCreditMultiplier, A as isEncryptedCredentialError, At as isWorkbuddyBundle, B as WorkBuddyCredentialRejectedError, C as WorkBuddyCredentialStore, Ct as clearAtRestKeyCache, D as defaultDesktopAuthDirs, Dt as findWorkbuddyAppExecutable, E as defaultDesktopAuthCandidates, Et as fetchAtRestKeyPayload, F as workbuddyAccountId, Ft as workbuddyAppExecutableCandidates, G as forceNeutralHead, H as channelGateMemberOf, I as workbuddyOwnAuthPath, J as isCredentialRejectedError, K as isContextTooLongBody, L as CONTEXT_OVERFLOW_MARKER, Lt as resolveDshHome, M as legacyWorkbuddyOwnAuthPath, Mt as macosNestedAppBundles, N as parseWorkBuddyAuth, Nt as openEncryptedField, O as defaultDesktopAuthPath, P as preferredAccountName, Pt as readAtRestKey, Q as openingEvidenceOfBody, R as CREDENTIAL_REJECTED_CODE, Rt as withFileLock, S as WORKBUDDY_AUTH_FILE_ENV, St as WORKBUDDY_APP_EXECUTABLE_ENV, T as authFileName, Tt as deriveAtRestKeyId, U as classifyUpstreamError, V as WorkBuddyUpstreamClient, W as declaredTools, X as knownRegionOf, Y as isFirstMessageGateBody, Z as modelIdOfBody, _ as deriveCatalog, _t as parseQueueAnswer, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as imageDefaultFor, c as WORKBUDDY_CONNECT_VERSION, ct as defaultOffModelIds, dt as offRefused, et as parseReasoning, f as piAiRuntimeInfo, ft as recordRefusal, g as applyContextBudgets, gt as pickImageModel, h as WorkBuddyCatalog, ht as WorkBuddyImageError, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as macosBundleExecutable, k as hasEncryptedCredentialFields, kt as isEncryptedFieldWrapper, l as createFileRosterSeenStore, lt as lastRefusalFor, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as DEFAULT_IMAGE_SIZE, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as attachBusyLevels, p as FALLBACK_WORKBUDDY_MODELS, pt as withEffectiveOff, q as isConversationIdGateBody, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as REFUSES_OFF_MODEL_IDS, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as parseUpstreamModel, ut as offDefaultFor, v as fallbackModelsFor, vt as queueNoticeText, w as WorkBuddyEncryptedCredentialError, wt as deriveAtRestKey, x as WORKBUDDY_AUTH_FILENAME, xt as nativeModalityOf, y as withoutRouters, yt as NATIVE_MODALITY_BY_MODEL_ID, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as writeFileAtomic } from "./host-heartbeat-BiVFMXGE.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -3280,6 +3280,7 @@ const KIND_STATUS = {
 	model_busy: 429,
 	session_dead: 401,
 	policy_reject: 403,
+	account_restricted: 403,
 	channel_reject: 400,
 	model_queue: 429,
 	not_found: 502,
@@ -3955,6 +3956,7 @@ function failoverReasonText(failure) {
 		case "model_busy": return "该模型当前繁忙（不是账号问题）";
 		case "session_dead": return "登录已失效";
 		case "policy_reject": return "被服务端策略拒绝";
+		case "account_restricted": return "账号被上游限制使用";
 		case "channel_reject": return "被网关的渠道校验拦截（不是账号、额度或网络问题）";
 		case "not_found": return "模型不可用";
 		case "server": return "上游异常";
@@ -4020,7 +4022,8 @@ function channelEvidenceText(bodyJson) {
 	const shown = entries.slice(0, CHANNEL_EVIDENCE_LIMIT);
 	const rendered = shown.map((entry) => {
 		const label = entry.neutralized ? "（插件已加中性头）" : "（不在插件已知名单里，网关可能新增了词条）";
-		return `「${entry.role}：${entry.opening}」${label}`;
+		const span = entry.closing === void 0 ? `，共 ${entry.textLength} 字` : `，首尾为「${entry.closing}」，共 ${entry.textLength} 字`;
+		return `「${entry.role}：${entry.opening}${span}」${label}`;
 	}).join("、");
 	const hidden = entries.length - shown.length;
 	return `请求里被网关扫描的消息开头：${rendered}${hidden > 0 ? `……另有 ${hidden} 条未列出。` : "。"}`;
@@ -4217,6 +4220,15 @@ function createWorkBuddyShim(options) {
 	const onAccountFailure = options.onAccountFailure;
 	const onRequestBody = options.onRequestBody;
 	const onUpstreamUsage = options.onUpstreamUsage;
+	const channelPerturbation = options.channelPerturbation ?? "failure";
+	/**
+	* Whether the harness's injected `user` blocks are moved above the real prompt.
+	*
+	* OFF by default (issue #132): the reorder changes the message ORDER the
+	* upstream counts, so it must be the user's deliberate choice rather than a
+	* silent difference after an upgrade.
+	*/
+	const keepPromptLastEnabled = options.keepPromptLast === true;
 	const SHARED_SECRET = randomBytes(32).toString("base64url");
 	/**
 	* Whether this process's prompts have been PROVEN to need the invisible
@@ -4370,7 +4382,7 @@ function createWorkBuddyShim(options) {
 			return;
 		}
 		const raw = (await readBody(req)).toString("utf8");
-		const prepared = prepareChatBody(raw);
+		const prepared = prepareChatBody(raw, { keepPromptLast: keepPromptLastEnabled });
 		const requestModelId = modelIdOfBody(prepared);
 		if (onRequestBody !== void 0) try {
 			onRequestBody(prepared);
@@ -4379,19 +4391,7 @@ function createWorkBuddyShim(options) {
 		}
 		const controller = new AbortController();
 		res.on("close", () => controller.abort());
-		/**
-		* The body to send FIRST, which is the perturbed form once this process has
-		* proven the gateway demands it.
-		*
-		* `perturbChannelFingerprints` is consulted only when the flag is set, so a
-		* fresh process still pays the plain attempt — that is what discovers
-		* whether the gate is on at all (see `channelNeedsPerturbation`).
-		*
-		* The perturbed form is a purely additive transform: it inserts zero-width
-		* spaces and changes no word the model reads, so starting from it is not a
-		* behaviour change, only a saved round trip.
-		*/
-		const preferred = channelNeedsPerturbation ? perturbChannelFingerprints(prepared) ?? prepared : prepared;
+		const preferred = channelPerturbation === "always" || channelNeedsPerturbation ? perturbChannelFingerprints(prepared, channelPerturbation === "always") ?? prepared : prepared;
 		let result = await client.chatStream(credential, preferred, controller.signal);
 		if (channelNeedsPerturbation && !result.ok && result.kind === "channel_reject") {
 			channelNeedsPerturbation = false;
@@ -4432,6 +4432,7 @@ function createWorkBuddyShim(options) {
 		*/
 		let retriedWithForcedHead = false;
 		let retriedWithPerturbation = false;
+		let retriedWithDensePerturbation = false;
 		if (!result.ok && result.kind === "channel_reject" && !controller.signal.aborted) {
 			const forced = forceNeutralHead(prepared);
 			if (forced !== void 0) {
@@ -4448,6 +4449,15 @@ function createWorkBuddyShim(options) {
 					if (result.ok) channelNeedsPerturbation = true;
 				}
 			}
+			if (!result.ok && result.kind === "channel_reject" && !controller.signal.aborted) {
+				const dense = perturbChannelFingerprints(forced ?? prepared, true);
+				if (dense !== void 0) {
+					logger?.warn("dsh-connect-workbuddy: the channel gate refused the sparse perturbation too; retrying once with a dense word-boundary perturbation");
+					result = await client.chatStream(credential, dense, controller.signal);
+					retriedWithDensePerturbation = true;
+					if (result.ok && channelPerturbation === "failure") channelNeedsPerturbation = true;
+				}
+			}
 		}
 		const triedAccountIds = [];
 		/**
@@ -4534,13 +4544,22 @@ function createWorkBuddyShim(options) {
 				writeOpenAIError(res, 429, "model_queue", `${queueNoticeText(queue)}（上游 code ${queue.code}）${note}`, void 0, NO_RETRY_HEADERS);
 				return;
 			}
+			if (result.kind === "account_restricted") {
+				const detail = result.detail;
+				const meta = ["账号被上游限制使用"];
+				if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
+				if (detail?.requestId !== void 0) meta.push(`requestId ${detail.requestId}`);
+				const message = `${detail?.displayMsg ?? clippedUpstreamText(result.message, 200)}（${meta.join("，")}）${note}${why}。该账号已被 WorkBuddy 上游按账号限制，与本次请求内容、网络和额度无关；插件会记录该测量并改用其他可用账号。该限制是上游对该账号的判定：重新登录不改变插件认的这个账号，需要 WorkBuddy 官方渠道解除后，在卡片上手动「测试」该账号才会回池`;
+				writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, message, hostErrorCode(result.kind));
+				return;
+			}
 			if (result.kind === "policy_reject") {
 				const detail = result.detail;
 				const lead = detail?.displayMsg ?? clippedUpstreamText(result.message, 200);
 				const meta = ["服务端策略拒绝"];
 				if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
 				if (detail?.requestId !== void 0) meta.push(`requestId ${detail.requestId}`);
-				const message = `${lead}（${meta.join("，")}）${note}。该请求被 WorkBuddy 服务端策略拒绝，重新登录不会解决；可在 WorkBuddy 桌面端用同一账号验证，或切换区域/账号后重试`;
+				const message = `${lead}（${meta.join("，")}）${note}。该请求被 WorkBuddy 服务端策略拒绝；若上游的说明指向内容，重新登录不会解决，可在 WorkBuddy 桌面端用同一账号验证；若它指向账号本身，则需要走官方渠道处理，插件会在遇到该措辞时另行标明`;
 				writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, message, hostErrorCode(result.kind));
 				return;
 			}
@@ -4564,6 +4583,7 @@ function createWorkBuddyShim(options) {
 				const retries = [];
 				if (retriedWithForcedHead) retries.push("强制中性头");
 				if (retriedWithPerturbation) retries.push("一次不可见扰动");
+				if (retriedWithDensePerturbation) retries.push("一次密集不可见扰动");
 				const retryNote = retries.length === 0 ? "" : `，并已用${retries.join("与")}重试过`;
 				const member = channelGateMemberOf(result.message, requestEvidenceOf(prepared));
 				const said = detail?.rawMsg ?? detail?.displayMsg;
@@ -7059,7 +7079,9 @@ function cooldownOf(input) {
 */
 function outcomeOfFailure(status, body) {
 	if (status === 401 || status === 403) {
-		if (classifyUpstreamError(status, body) === "policy_reject") return "policy-rejected";
+		const kind = classifyUpstreamError(status, body);
+		if (kind === "policy_reject") return "policy-rejected";
+		if (kind === "account_restricted") return "account-restricted";
 		return "credential-rejected";
 	}
 	switch (classifyUpstreamError(status, body)) {
@@ -7067,6 +7089,7 @@ function outcomeOfFailure(status, body) {
 		case "model_busy": return "model-busy";
 		case "hard_credit": return "out-of-credit";
 		case "session_dead": return "credential-rejected";
+		case "account_restricted": return "account-restricted";
 		case "channel_reject": return "channel-rejected";
 		case "not_found": return "not-found";
 		default: return status === 0 || status >= 500 ? "unavailable" : "failed";
@@ -7607,6 +7630,7 @@ function exclusionOf(probe, nowMs) {
 	switch (probe.outcome) {
 		case "ok": return;
 		case "credential-rejected": return "credential-rejected";
+		case "account-restricted": return "account-restricted";
 		case "not-found": return "not-found";
 		case "unavailable": return retryDue(probe, nowMs) ? void 0 : "unavailable";
 		case "failed": return retryDue(probe, nowMs) ? void 0 : "failed";
@@ -8648,7 +8672,8 @@ function toWebAccount(account) {
 		domain: account.domain,
 		source: account.source,
 		tokenExpiresAtMs: account.tokenExpiresAtMs,
-		selected: account.selected
+		selected: account.selected,
+		...account.enterprise === true ? { enterprise: true } : {}
 	};
 }
 /**
@@ -8758,6 +8783,9 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 	const creditPosition = deps.creditPosition?.(region) ?? "composer";
 	const imageToolEnabled = deps.imageToolEnabled?.(region) ?? false;
 	const cliBridgeEnabled = deps.cliBridgeEnabled?.() === true;
+	const cliBridgeModel = deps.cliBridgeModel?.() ?? "";
+	const cliBridgeEffort = deps.cliBridgeEffort?.() ?? "";
+	const cliBridgeRegionOrder = deps.cliBridgeRegionOrder?.() ?? "";
 	const busyLevels = deps.busyLevels?.(region) ?? {};
 	const authStatus = await store.status();
 	const selectionExplicit = store.hasExplicitSelection();
@@ -8769,6 +8797,9 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 		showCreditsInMainUi,
 		imageToolEnabled,
 		cliBridgeEnabled,
+		cliBridgeModel,
+		cliBridgeEffort,
+		cliBridgeRegionOrder,
 		busyLevels
 	};
 	let credential;
@@ -8787,6 +8818,9 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 			creditPosition,
 			imageToolEnabled,
 			cliBridgeEnabled,
+			cliBridgeModel,
+			cliBridgeEffort,
+			cliBridgeRegionOrder,
 			busyLevels,
 			...await store.selectionLost() ? { selectionLost: true } : {},
 			...webAccounts.length === 0 ? await searchedPaths(store) : {}
@@ -8795,7 +8829,7 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 	const selected = accounts.find((account) => account.selected);
 	const account = {
 		accountId: selected?.id ?? "",
-		accountName: credential.nickname ?? "",
+		accountName: preferredAccountName(credential),
 		...credential.domain === "" ? {} : { domain: credential.domain },
 		region,
 		source: credential.source,
@@ -8806,6 +8840,9 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 		creditPosition,
 		imageToolEnabled,
 		cliBridgeEnabled,
+		cliBridgeModel,
+		cliBridgeEffort,
+		cliBridgeRegionOrder,
 		busyLevels,
 		accounts: accounts.map(toWebAccount),
 		models: deps.displayModels(region).map((model) => toWebModel(model, deps.contextBudgets(region))).map((model) => model.reasoning === void 0 || lastRefusalFor(model.id) === void 0 ? model : {
@@ -8820,6 +8857,7 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 		offModelIds: [...deps.offModelIds(region)]
 	};
 	const figures = fast ? {} : await liveFigures(deps, region, credential, selected);
+	const rosterSeen = deps.rosterSeen === void 0 ? void 0 : await deps.rosterSeen(region);
 	return {
 		status: "signed-in",
 		contextBudgets: Object.fromEntries(Object.entries(deps.contextBudgets(region)).filter(([, value]) => typeof value === "number")),
@@ -8829,6 +8867,10 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 			authFile: volatileFlagOf("authFile")
 		},
 		...account,
+		...rosterSeen === void 0 ? {} : {
+			newModelIds: [...rosterSeen.newModelIds],
+			...rosterSeen.versionNote === void 0 ? {} : { rosterSeenVersionNote: rosterSeen.versionNote }
+		},
 		...figures,
 		...await poolSectionOf(deps, region, fast)
 	};
@@ -8901,6 +8943,7 @@ async function workBuddyWebPool(deps, region, fast = false) {
 		return {
 			accountId: account.id,
 			accountName: account.accountName,
+			...account.enterprise === true ? { enterprise: true } : {},
 			...measured?.credits === void 0 ? {} : {
 				credits: measured.credits.total,
 				expiringSoon: measured.credits.expiringSoon,
@@ -9083,6 +9126,7 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				try {
 					const credential = await deps.store(region).credentialFor(accountId);
 					if (credential === void 0) return json(res, 404, { error: "no credential for this account" });
+					if (credential.enterpriseId !== void 0 && credential.enterpriseId !== "") return json(res, 409, { error: "enterprise-account-unsupported" });
 					const target = (await deps.client.fetchBenefits(credential)).find((benefit) => benefit.kind === kind);
 					if (target === void 0) return json(res, 404, { error: "benefit not available on this account" });
 					if (target.claimed) return json(res, 409, {
@@ -9695,7 +9739,14 @@ const Config = z.object({
 	enabledModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN selection"),
 	imageModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN image opt-in"),
 	contextBudgets: z.dict(z.number().step(1).min(1)).default({}).description("Deprecated: pre-region-split CN context budgets"),
-	cliBridge: asVolatile(cliBridgeConfig.default({}).description("Optional CodeBuddy CLI route; off by default and independent of the providers"))
+	cliBridge: asVolatile(cliBridgeConfig.default({}).description("Optional CodeBuddy CLI route; off by default and independent of the providers")),
+	channelPerturbation: asVolatile(z.union([
+		z.const("off"),
+		z.const("failure"),
+		z.const("always")
+	]).default("failure").description("When to perturb scanned messages with invisible characters: \"off\" only rescues after a channel-gate refusal, \"failure\" (default) learns from a successful rescue and starts later requests perturbed, \"always\" starts every request with the dense rescue for a gateway whose plain attempt is guaranteed to fail.")),
+	usageIdentity: asVolatile(z.boolean().default(false).description("Make the upstream's usage page record these calls like the official client's: add the X-IDE-* identity headers (which fill the 使用端 column) and send the conversation ids as 32-hex UUIDv7. Off by default — it is a display alignment measured by a reporter, not by this plugin, and the chat channel identity (User-Agent) and request body never change.")),
+	keepPromptLast: asVolatile(z.boolean().default(false).description("Move the harness-injected runtime context above the real prompt, so the WorkBuddy usage page records what you actually typed instead of the injected block. Message count and text are preserved; the one edit is the recorded prompt's own leading <acp> marker. Off by default because it changes the message order the upstream counts."))
 });
 /**
 * One region's saved model state. A config written before the region split has
@@ -9798,7 +9849,7 @@ async function legacyAttributionRegion(value, accountsFor) {
 function apply(ctx, config) {
 	const client = new WorkBuddyUpstreamClient((message) => {
 		ctx.logger.warn(`dsh-connect-workbuddy: ${message}`);
-	});
+	}, { usageIdentity: unwrapVolatile(config.usageIdentity) === true });
 	/**
 	* How long a check-in reading is reused before asking the upstream again.
 	*
@@ -9836,6 +9887,7 @@ function apply(ctx, config) {
 			refresh: (credential) => client.refreshToken(credential)
 		});
 		const catalog = new WorkBuddyCatalog(region);
+		const rosterSeen = createFileRosterSeenStore(region);
 		/**
 		* Where the next upstream `usage` should be written.
 		*
@@ -9855,6 +9907,8 @@ function apply(ctx, config) {
 				client,
 				catalog,
 				logger: ctx.logger,
+				channelPerturbation: unwrapVolatile(config.channelPerturbation) ?? "failure",
+				keepPromptLast: unwrapVolatile(config.keepPromptLast) === true,
 				/**
 				* Pool routing, bound to THIS region.
 				*
@@ -9887,7 +9941,8 @@ function apply(ctx, config) {
 				onAccountFailure: (accountId, failure) => {
 					recordAccountFailure(region, accountId, failure);
 				}
-			})
+			}),
+			rosterSeen
 		};
 	}
 	const accountUsabilityProbe = createAccountUsabilityProbe({
@@ -10303,6 +10358,15 @@ function apply(ctx, config) {
 		offModelIds: (region) => savedOffModelIds(regionStateOf(current(), region), displayModels(current(), region)),
 		contextBudgets: (region) => regionStateOf(current(), region).contextBudgets ?? {},
 		discoverModels,
+		/**
+		* This region's first-sighting readout, the data behind the composer pill's
+		* "· N 新模型" segment.
+		*
+		* READ-ONLY here: only the reconciler's `note` writes first-sighting
+		* history, so no amount of polling by the pill or the card can change who
+		* counts as new — the one property that keeps the marker honest.
+		*/
+		rosterSeen: (region) => stacks[region].rosterSeen.readout(),
 		regionEnabled: (region) => regionEnabled(current(), region),
 		/**
 		* The region's committed sidebar-credit flag, read from the same config the
@@ -10328,6 +10392,16 @@ function apply(ctx, config) {
 		*/
 		cliBridgeEnabled: () => unwrapVolatile(current().cliBridge)?.enabled === true,
 		/**
+		* The model / reasoning effort the optional CodeBuddy CLI route runs on.
+		*
+		* `cliBridge` is volatile, hence the unwrap; absent keys read as `''` —
+		* "the CLI's own default" — because an empty pin is a COMMITTED value the
+		* card's pickers can render, not a missing one.
+		*/
+		cliBridgeModel: () => unwrapVolatile(current().cliBridge)?.model ?? "",
+		cliBridgeEffort: () => unwrapVolatile(current().cliBridge)?.effort ?? "",
+		cliBridgeRegionOrder: () => unwrapVolatile(current().cliBridge)?.regionOrder ?? "",
+		/**
 		* WHERE the readout sits, resolved here rather than read from the browser
 		* settings mirror, for the same measured reason as the flag above: on the
 		* affected 0.1.7 deployments that mirror never picks up this plugin's
@@ -10491,7 +10565,8 @@ function apply(ctx, config) {
 				const wanted = new Set(poolPreferencesOf(current(), region).memberAccountIds);
 				return (await stacks[region].store.accounts()).filter((account) => !wanted.has(account.id)).map((account) => ({
 					id: account.id,
-					accountName: account.accountName
+					accountName: account.accountName,
+					...account.enterprise === true ? { enterprise: true } : {}
 				}));
 			},
 			/**
@@ -10564,6 +10639,7 @@ function apply(ctx, config) {
 					if (cached !== void 0 && now - cached.atMs < 18e5) return [account.id, cached.views];
 					const credential = await store.credentialFor(account.id).catch(() => void 0);
 					if (credential === void 0) return void 0;
+					if (credential.enterpriseId !== void 0 && credential.enterpriseId !== "") return [account.id, []];
 					const read = await client.fetchBenefits(credential).catch(() => void 0);
 					if (read === void 0) return void 0;
 					const views = claimableBenefits(read, now);
@@ -10875,6 +10951,7 @@ function apply(ctx, config) {
 			case "out-of-credit": return "账号积分耗尽";
 			case "model-busy": return "账号撞上模型繁忙";
 			case "credential-rejected": return "账号登录已失效";
+			case "account-restricted": return "账号被上游限制使用";
 			case "not-found": return "账号已不存在";
 			case "unusable": return "账号不可用";
 			default: return "账号不可用";
@@ -10914,7 +10991,8 @@ function apply(ctx, config) {
 			return {
 				account: {
 					id: account.id,
-					accountName: account.accountName
+					accountName: account.accountName,
+					...account.enterprise === true ? { enterprise: true } : {}
 				},
 				...reading === void 0 ? {} : { credits: reading },
 				...probes[account.id] === void 0 ? {} : { probe: probes[account.id] },
@@ -11054,7 +11132,8 @@ function apply(ctx, config) {
 			return {
 				account: {
 					id: account.id,
-					accountName: account.accountName
+					accountName: account.accountName,
+					...account.enterprise === true ? { enterprise: true } : {}
 				},
 				...credits === void 0 ? {} : { credits: {
 					total: credits.total,
@@ -11272,6 +11351,11 @@ function apply(ctx, config) {
 					const state = regionStateOf(current(), region);
 					stacks[region].catalog.set(withEffectiveOff(withImageSelection(deriveCatalog(models, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])), new Set(savedOffModelIds(state, models))));
 					adapters[region].invalidate();
+					try {
+						await stacks[region].rosterSeen.note(models.map((model) => model.id));
+					} catch (error) {
+						ctx.logger.warn(`dsh-connect-workbuddy: ${region} first-sighting history not updated`, error);
+					}
 					await regionsFieldHealed;
 					await repairRegionCatalog(region, models);
 				} catch (error) {

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness：每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。",
-  "version": "5.6.3",
+  "version": "5.8.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",