dsh-model 0.0.1 → 0.15.0

package/dist/bridge/workbuddy/catalog.js

@@ -0,0 +1,154 @@
+// Ported from dsh-workbuddy-connect v0.7.1 (commit 390582e04da4e8e8bf746d71997440e4b716ec47),
+// https://github.com/corrinehu/dsh-workbuddy-connect — MIT License, Copyright (c) 2026 Corrine Hu.
+// See LICENSE.dsh-workbuddy-connect in this directory. Changes: imports adapted to dsh-model (./_compat.js).
+/**
+ * WorkBuddy model catalog: a static fallback list captured from the live
+ * endpoint, replaced by the upstream's dynamic answer once it loads.
+ *
+ * @module dsh-workbuddy-connect/catalog
+ */
+import { modelWithCurrentPromotion } from './upstream.js';
+/**
+ * Static CLI models observed on the CN endpoint (re-verified against the live
+ * `/v3/config` document 2026-09-23, including the thinking-effort and billing
+ * metadata). The upstream refresh replaces this list at startup; it exists so
+ * the provider registers with a usable catalog even while the first fetch is
+ * in flight or offline.
+ *
+ * The list tracks the `cli` agent's model roster exactly — the 16 models it
+ * offered that day. The roster churns quickly (`auto`, `kimi-k3-1`,
+ * `minimax-m3` each appeared or vanished within days, and a competing patch's
+ * 2026-09-22 snapshot named three ids that were gone a day later), so this
+ * table is a boot-time placeholder, never a promise: the live fetch
+ * intersects the day's roster with the document's usable rows, and
+ * `tests/upstream.spec.ts` pins this table to the same parse so the two
+ * cannot drift apart silently. Reasoning metadata is verbatim from the live
+ * document, and the `free` flag follows the normalized `x0.00` credits
+ * marker.
+ *
+ * Deliberately NOT baked in: promotional badges. `限时免费` and friends are
+ * dynamic console-side promotions with no reliable validity window, so a
+ * static table would keep them alive long after the offers end. The live
+ * refresh merges the day's badges best-effort from the console document (see
+ * `fetchPromoBadges` in upstream.ts); until then the rows simply ship
+ * without them.
+ */
+export const FALLBACK_WORKBUDDY_MODELS = [
+    // Entries stay in the live roster's order. Rows without `supportedEfforts`
+    // carry only a default effort, so the adapter offers them no thinking
+    // control; see `reasoningFields()` in adapter.ts.
+    { id: 'hy4-preview', name: 'Hy4 preview', contextWindow: 1_000_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['high'], defaultEffort: 'high', canDisableThinking: false }, billing: { credits: 'x0.29 credits', free: false } },
+    { id: 'hy3', name: 'Hy3', contextWindow: 192_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'high', canDisableThinking: false }, billing: { credits: 'x0.00 credits', free: true } },
+    // Distinct display name: the `hy3` row above declares the same 192K window
+    // and the document names both "Hy3", so a shared display name left two rows
+    // of the same list indistinguishable. Display only — the id stays `hy3-x`,
+    // which is what the wire request and the shim route on.
+    { id: 'hy3-x', name: 'Hy3-X', contextWindow: 192_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'high', canDisableThinking: false }, billing: { credits: 'x0.05 credits', free: false } },
+    { id: 'deepseek-v4.1-flash', name: 'Deepseek-V4.1-Flash', contextWindow: 1_000_000, maxTokens: 128_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'high', canDisableThinking: false }, billing: { credits: 'x0.03 credits', free: false } },
+    { id: 'glm-5.3', name: 'GLM-5.3', contextWindow: 1_000_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.79 credits', free: false } },
+    { id: 'glm-5.3-flash', name: 'GLM-5.3-Flash', contextWindow: 1_000_000, maxTokens: 131_072, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'high', 'max'], defaultEffort: 'high', canDisableThinking: true }, billing: { credits: 'x0.06 credits', free: false } },
+    { id: 'glm-5.2', name: 'GLM-5.2', contextWindow: 1_000_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.79 credits', free: false } },
+    { id: 'glm-5.1', name: 'GLM-5.1', contextWindow: 200_000, maxTokens: 48_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.79 credits', free: false } },
+    { id: 'glm-5v-turbo', name: 'GLM-5v-Turbo', contextWindow: 200_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.71 credits', free: false } },
+    { id: 'minimax-m3', name: 'MiniMax-M3', contextWindow: 512_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.25 credits', free: false } },
+    { id: 'minimax-m2.7', name: 'MiniMax-M2.7', contextWindow: 200_000, maxTokens: 48_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.19 credits', free: false } },
+    { id: 'kimi-k3-1', name: 'Kimi-K3', contextWindow: 1_000_000, maxTokens: 32_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x1.62 credits', free: false } },
+    { id: 'kimi-k2.8-preview', name: 'Kimi-K2.8-Preview', contextWindow: 1_000_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'high', 'max'], defaultEffort: 'high', canDisableThinking: true }, billing: { credits: 'x0.77 credits', free: false } },
+    { id: 'kimi-k2.7', name: 'Kimi-K2.7-Code', contextWindow: 256_000, maxTokens: 32_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.57 credits', free: false } },
+    { id: 'kimi-k2.6', name: 'Kimi-K2.6', contextWindow: 256_000, maxTokens: 32_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.52 credits', free: false } },
+    { id: 'deepseek-v4-pro', name: 'Deepseek-V4-Pro', contextWindow: 1_000_000, maxTokens: 128_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'high', canDisableThinking: false }, billing: { credits: 'x0.51 credits', free: false } },
+];
+/**
+ * Static CLI models for the international endpoint, captured 2026-09-11 from
+ * the App-form `/v3/config` document (the 20 ids of its `cli` agent, in order).
+ *
+ * Same purpose and same discipline as {@link FALLBACK_WORKBUDDY_MODELS}: it
+ * covers the window before the first successful fetch and an offline start,
+ * and it is deliberately *not* a promise about the upstream's current state.
+ * Reasoning metadata is verbatim from that snapshot. No promo badge is baked
+ * in: promotions are time-boxed (`modelPromotions` carries `validFrom`/
+ * `validUntil`), so hard-coding a "Free now" label would keep claiming a
+ * discount the upstream may have already ended.
+ */
+export const FALLBACK_WORKBUDDY_AI_MODELS = [
+    { id: 'default-model', name: 'Auto', contextWindow: 176_000, maxTokens: 24_000, supportsImages: true, reasoning: { supports: false, onlyReasoning: false, canDisableThinking: true }, billing: { free: false } },
+    { id: 'fast-model', name: 'Fast', contextWindow: 200_000, maxTokens: 32_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.34', free: false } },
+    { id: 'balanced-model', name: 'Balanced', contextWindow: 256_000, maxTokens: 32_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.59', free: false } },
+    { id: 'primary-model', name: 'Primary', contextWindow: 272_000, maxTokens: 72_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'high', canDisableThinking: false }, billing: { credits: 'x3.31', free: false } },
+    { id: 'deep-model', name: 'Deep', contextWindow: 176_000, maxTokens: 24_000, supportsImages: true, reasoning: { supports: false, onlyReasoning: false, canDisableThinking: true }, billing: { credits: 'x3.33', free: false } },
+    { id: 'hy4-preview-f', name: 'Hy4 preview', contextWindow: 300_000, defaultContextWindow: 300_000, supportedContextWindows: [300_000, 1_000_000], maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['high'], defaultEffort: 'high', canDisableThinking: false }, billing: { free: false, rateUnknown: true } },
+    { id: 'hy3', name: 'Hy3', contextWindow: 192_000, maxTokens: 64_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'high'], defaultEffort: 'high', canDisableThinking: false }, billing: { free: false, rateUnknown: true } },
+    { id: 'deepseek-v4.1-flash', name: 'Deepseek-V4.1-Flash', contextWindow: 300_000, defaultContextWindow: 300_000, supportedContextWindows: [300_000, 1_000_000], maxTokens: 128_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'high', canDisableThinking: false }, billing: { free: false, rateUnknown: true } },
+    { id: 'gpt-6-astra', name: 'GPT-6-Astra', contextWindow: 400_000, defaultContextWindow: 400_000, supportedContextWindows: [400_000, 1_000_000], maxTokens: 128_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'medium', 'high', 'xhigh', 'max'], defaultEffort: 'medium', canDisableThinking: true }, billing: { credits: 'x6.67', free: false } },
+    { id: 'gpt-5.6-sol', name: 'GPT-5.6-Sol', contextWindow: 1_000_000, maxTokens: 128_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'medium', 'high', 'xhigh', 'max'], defaultEffort: 'medium', canDisableThinking: true }, billing: { credits: 'x3.47', free: false } },
+    { id: 'gpt-5.6-terra', name: 'GPT-5.6-Terra', contextWindow: 1_000_000, maxTokens: 128_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'medium', 'high', 'xhigh', 'max'], defaultEffort: 'medium', canDisableThinking: true }, billing: { credits: 'x1.39', free: false } },
+    { id: 'gpt-5.6-luna', name: 'GPT-5.6-Luna', contextWindow: 1_000_000, maxTokens: 128_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'medium', 'high', 'xhigh', 'max'], defaultEffort: 'medium', canDisableThinking: true }, billing: { credits: 'x0.14', free: false } },
+    { id: 'gpt-5.5', name: 'GPT-5.5', contextWindow: 1_000_000, maxTokens: 128_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'medium', 'high', 'xhigh'], defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x3.31', free: false } },
+    { id: 'gpt-5.4', name: 'GPT-5.4', contextWindow: 272_000, maxTokens: 72_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'medium', 'high', 'xhigh'], defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x1.65', free: false } },
+    { id: 'gpt-5.3-codex', name: 'GPT-5.3-Codex', contextWindow: 272_000, maxTokens: 72_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x1.25', free: false } },
+    { id: 'gemini-3.5-flash', name: 'Gemini-3.5-Flash', contextWindow: 1_000_000, maxTokens: 65_536, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.99', free: false } },
+    { id: 'glm-5.3', name: 'GLM-5.3', contextWindow: 1_000_000, maxTokens: 48_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['low', 'high', 'max'], defaultEffort: 'high', canDisableThinking: true }, billing: { credits: 'x0.79', free: false } },
+    { id: 'glm-5.2', name: 'GLM-5.2', contextWindow: 1_000_000, maxTokens: 48_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, supportedEfforts: ['high', 'xhigh'], defaultEffort: 'high', canDisableThinking: true }, billing: { credits: 'x0.79', free: false } },
+    { id: 'kimi-k3', name: 'Kimi-K3', contextWindow: 1_000_000, maxTokens: 32_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x1.62', free: false } },
+    { id: 'kimi-k2.6', name: 'Kimi-K2.6', contextWindow: 256_000, maxTokens: 32_000, supportsImages: true, reasoning: { supports: true, onlyReasoning: true, defaultEffort: 'medium', canDisableThinking: false }, billing: { credits: 'x0.52', free: false } },
+];
+/**
+ * Mutable catalog shared by the shim's `/v1/models` and the adapter.
+ *
+ * Visibility is separate from content. A variant whose app has no credentials
+ * must expose *no* models rather than a fallback roster: the DSH model picker
+ * drops an empty group, so an empty catalog is exactly how a provider hides
+ * without touching registration. Serving the fallback to a signed-out user
+ * instead offers models that can only fail (`store.resolve()` throws on the
+ * first message), which is worse than showing nothing.
+ *
+ * The flag defaults to visible so a directly-constructed catalog behaves as it
+ * always has; the plugin runtime applies the credential gate.
+ */
+export class WorkBuddyCatalog {
+    models;
+    visible = true;
+    useMaximumContextWindow = false;
+    constructor(initial = FALLBACK_WORKBUDDY_MODELS) { this.models = initial; }
+    /** Current entries; empty while the variant has no usable credential. */
+    current() {
+        if (!this.visible)
+            return [];
+        return this.models.map(model => {
+            const current = modelWithCurrentPromotion(model);
+            const maximum = current.supportedContextWindows === undefined ? undefined : Math.max(...current.supportedContextWindows);
+            return this.useMaximumContextWindow && maximum !== undefined && maximum > current.contextWindow
+                ? { ...current, defaultContextWindow: current.defaultContextWindow ?? current.contextWindow, contextWindow: maximum }
+                : current;
+        });
+    }
+    /** Replace the list; callers invalidate their adapter snapshot after this. */
+    set(models) {
+        this.models = [...models];
+    }
+    /** Whether this variant's models are exposed at all. */
+    isVisible() {
+        return this.visible;
+    }
+    /**
+     * Show or hide the whole catalog. Returns whether the value changed, so the
+     * caller can skip an invalidation that would re-render an identical list.
+     */
+    setVisible(visible) {
+        if (this.visible === visible)
+            return false;
+        this.visible = visible;
+        return true;
+    }
+    /** Select the largest declared international window where the upstream offers one. */
+    setUseMaximumContextWindow(useMaximum) {
+        if (this.useMaximumContextWindow === useMaximum)
+            return false;
+        this.useMaximumContextWindow = useMaximum;
+        return true;
+    }
+    /** Models to fall back to when the upstream fetch fails; ignores visibility. */
+    fallback() {
+        return this.models;
+    }
+}

package/dist/bridge/workbuddy/client-identity.js

@@ -0,0 +1,234 @@
+// Ported from dsh-workbuddy-connect v0.7.1 (commit 390582e04da4e8e8bf746d71997440e4b716ec47),
+// https://github.com/corrinehu/dsh-workbuddy-connect — MIT License, Copyright (c) 2026 Corrine Hu.
+// See LICENSE.dsh-workbuddy-connect in this directory. Changes: imports adapted to dsh-model (./_compat.js).
+/**
+ * The desktop-client identity chat requests present as (phase 1 of
+ * `docs/upstream-identity-alignment-plan.md`).
+ *
+ * Chat and its probe sibling carry the User-Agent shape the official desktop
+ * client composes — `WorkBuddy/<v> <product>/<v> CLI/<cli>` — where the
+ * product token names the app that owns the region's requests: `WorkBuddy`
+ * for CN, `WorkBuddy AI` for international. Versions come from the installed
+ * App when it can be read, degrade to a per-region saved value, and finally
+ * to a compiled-in constant. A CLI version that does not resolve drops the
+ * `CLI/…` token instead of inventing one (the official client's own rule for
+ * a missing extension).
+ *
+ * Scope: chat and probe requests ONLY. Refresh, catalog, and billing keep
+ * the headers they have always sent; the plan holds the blast radius to this
+ * one variable so the live verification matrix stays readable.
+ *
+ * @module dsh-workbuddy-connect/client-identity
+ */
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { writeFileAtomic } from './_compat.js';
+import { resolveDshHome } from './_compat.js';
+import { FALLBACK_APP_VERSION, readBundleVersion, resolveAppVersion, validAppVersion, } from './app-version.js';
+/**
+ * Compiled-in CN fallback for the `WorkBuddy/<v>` tokens.
+ *
+ * Observed on the CN desktop app installed here (research §3.1, verified
+ * 2026-09-11); like the international fallback it is a shape requirement,
+ * not a currency claim — the gateway has not been observed to branch on it.
+ */
+export const FALLBACK_CN_APP_VERSION = '5.5.6';
+/**
+ * Basename of the CN saved-version cache under `$DSH_HOME`.
+ *
+ * Deliberately not the international `.workbuddy-ai-version.json`: that file
+ * feeds the international catalog's User-Agent, and a CN App writing its
+ * version into it would relabel that request. The two caches stay isolated
+ * the way the per-variant catalog files are.
+ */
+export const CN_APP_VERSION_FILENAME = '.workbuddy-app-version.json';
+/**
+ * Whether a value is a CLI version that may reach a header.
+ *
+ * Tolerates a prerelease suffix (`2.137.1-rc.1`) because the bundled CLI's
+ * own metadata uses that spelling; anything with whitespace, CR or LF never
+ * passes — the value is interpolated into an HTTP header.
+ */
+export function validCliVersion(value) {
+    return typeof value === 'string' && /^\d{1,6}(?:\.\d{1,6}){1,3}(?:-[0-9A-Za-z.]+)?$/u.test(value);
+}
+/** macOS App-bundle roots, searched in the order `app-version.ts` uses. */
+function macAppRoots() {
+    return ['/Applications', join(homedir(), 'Applications')];
+}
+/** Path of the bundled agent CLI's package.json inside an App bundle. */
+function cliPackagePath(bundle) {
+    return join(bundle, 'Contents', 'Resources', 'app.asar.unpacked', 'cli', 'package.json');
+}
+/**
+ * The bundled agent CLI's real version, or `undefined` when it does not resolve.
+ *
+ * `cli/package.json` ships a `0.0.0` placeholder in `version` with the real
+ * version in `publishConfig.customPackage.version`; a valid non-placeholder
+ * `version` wins, otherwise the custom-package value applies, and unreadable
+ * or invalid metadata yields `undefined` (the caller drops the `CLI/…` UA
+ * token rather than guessing).
+ */
+export async function readCliVersion(bundle) {
+    let document;
+    try {
+        document = JSON.parse(await readFile(cliPackagePath(bundle), 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof document !== 'object' || document === null || Array.isArray(document))
+        return undefined;
+    const pkg = document;
+    const declared = pkg['version'];
+    if (validCliVersion(declared) && declared !== '0.0.0')
+        return declared;
+    const publishConfig = pkg['publishConfig'];
+    const customPackage = typeof publishConfig === 'object' && publishConfig !== null && !Array.isArray(publishConfig)
+        ? publishConfig
+        : undefined;
+    const custom = typeof customPackage?.['customPackage'] === 'object' && customPackage['customPackage'] !== null
+        && !Array.isArray(customPackage['customPackage'])
+        ? customPackage['customPackage']
+        : undefined;
+    const customVersion = custom?.['version'];
+    return validCliVersion(customVersion) ? customVersion : undefined;
+}
+/**
+ * Build the chat User-Agent for one region.
+ *
+ * Throws on an invalid version rather than interpolating one into a header;
+ * `resolveChatIdentity` never produces such an identity, so the throw is a
+ * last gate against future call-site mistakes, not an expected path.
+ */
+export function chatUserAgent(identity, region) {
+    if (!validAppVersion(identity.clientVersion)) {
+        throw new Error(`invalid client version for chat User-Agent: ${JSON.stringify(identity.clientVersion)}`);
+    }
+    if (identity.cliVersion !== undefined && !validCliVersion(identity.cliVersion)) {
+        throw new Error(`invalid CLI version for chat User-Agent: ${JSON.stringify(identity.cliVersion)}`);
+    }
+    const product = region === 'global' ? 'WorkBuddy AI' : 'WorkBuddy';
+    const parts = [`WorkBuddy/${identity.clientVersion}`, `${product}/${identity.clientVersion}`];
+    if (identity.cliVersion !== undefined)
+        parts.push(`CLI/${identity.cliVersion}`);
+    return parts.join(' ');
+}
+/** The installed CN desktop bundle, or `undefined` when it is not installed (or not readable). */
+async function installedCnApp() {
+    if (process.platform !== 'darwin')
+        return undefined;
+    for (const root of macAppRoots()) {
+        const bundle = join(root, 'WorkBuddy.app');
+        const version = await readBundleVersion(join(bundle, 'Contents', 'Info.plist'));
+        if (version !== undefined)
+            return { version, bundle };
+    }
+    return undefined;
+}
+/** Default CN saved-cache path. */
+function cnSavedVersionPath() {
+    return join(resolveDshHome(), CN_APP_VERSION_FILENAME);
+}
+/**
+ * Resolve the chat identity for one region: installed App → region's saved
+ * value → compiled-in fallback. Never throws — a missing App, an unreadable
+ * plist, a failed cache write, or a reader that throws outright all degrade
+ * to {@link fallbackChatIdentity}; resolution never blocks a message.
+ *
+ * The production path caches per region (a message must not re-read the
+ * install tree); any injected option bypasses the cache entirely so tests
+ * with different readers cannot observe each other's resolutions.
+ */
+export async function resolveChatIdentity(region, options = {}) {
+    const injectable = options.installedCn !== undefined
+        || options.resolveIntl !== undefined
+        || options.cliVersion !== undefined
+        || options.cnSavedPath !== undefined;
+    if (!injectable) {
+        const cached = cache.get(region);
+        if (cached !== undefined)
+            return cached;
+    }
+    let identity;
+    try {
+        identity = region === 'global'
+            ? await resolveGlobalIdentity(options)
+            : await resolveCnIdentity(options);
+    }
+    catch {
+        // A reader that throws (unexpected filesystem error, injected test
+        // double) must not block a message and must not pin this degraded
+        // answer for the process lifetime: return the built-in fallback
+        // without caching it, so a later call can resolve properly again.
+        return fallbackChatIdentity(region);
+    }
+    if (!injectable)
+        cache.set(region, identity);
+    return identity;
+}
+const cache = new Map();
+/**
+ * The region's compiled-in fallback identity: the desktop form with the
+ * built-in version and no `CLI/…` segment. This is the single degraded
+ * shape every failure path converges on — a thrown reader, an unreadable
+ * bundle, or a missing cache all present this, never the legacy CLI UA.
+ */
+export function fallbackChatIdentity(region) {
+    return { clientVersion: region === 'global' ? FALLBACK_APP_VERSION : FALLBACK_CN_APP_VERSION };
+}
+/** CN: installed `WorkBuddy.app` → CN saved cache → CN fallback. */
+async function resolveCnIdentity(options) {
+    const savedPath = options.cnSavedPath ?? cnSavedVersionPath();
+    const installed = await (options.installedCn ?? installedCnApp)();
+    if (installed !== undefined && validAppVersion(installed.version)) {
+        const cliVersion = await (options.cliVersion ?? readCliVersion)(installed.bundle);
+        const identity = {
+            clientVersion: installed.version,
+            ...(cliVersion !== undefined && validCliVersion(cliVersion) ? { cliVersion } : {}),
+        };
+        // Best-effort remember of the App version only: the CLI version is read
+        // live from the bundle whenever the bundle exists, and once the App is
+        // gone the plan's degradation omits the `CLI/…` token instead of
+        // continuing to claim a version whose source no longer exists.
+        try {
+            await writeFileAtomic(savedPath, `${JSON.stringify({ version: identity.clientVersion, observedAt: Date.now() }, null, 2)}\n`, { mode: 0o600, dirMode: 0o700 });
+        }
+        catch {
+            // Identity resolved; losing the memory of it is not a failure.
+        }
+        return identity;
+    }
+    try {
+        const saved = JSON.parse(await readFile(savedPath, 'utf8'));
+        if (typeof saved === 'object' && saved !== null && !Array.isArray(saved)) {
+            const document = saved;
+            if (validAppVersion(document['version'])) {
+                return { clientVersion: document['version'] };
+            }
+        }
+    }
+    catch {
+        // Absent or malformed cache: fall through to the compiled-in constant.
+    }
+    return fallbackChatIdentity('cn');
+}
+/**
+ * International: reuse `app-version.ts`'s installed → saved → fallback chain
+ * (its cache format and the catalog's version source stay untouched). The
+ * CLI version is read only when that chain reports the installed bundle; a
+ * saved or fallback resolution has no bundle path and drops the `CLI/…` token.
+ * The CN cache is never read or written on this path.
+ */
+async function resolveGlobalIdentity(options) {
+    const info = await (options.resolveIntl ?? resolveAppVersion)();
+    const clientVersion = validAppVersion(info.version) ? info.version : FALLBACK_APP_VERSION;
+    let cliVersion;
+    if (info.bundle !== undefined) {
+        const read = await (options.cliVersion ?? readCliVersion)(info.bundle);
+        if (read !== undefined && validCliVersion(read))
+            cliVersion = read;
+    }
+    return { clientVersion, ...cliVersion === undefined ? {} : { cliVersion } };
+}