dsh-tap 0.20.0

package/scripts/probe-effort-gaps.mjs

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+/**
+ * probe-effort-gaps.mjs — 「思考档位声明有没有真的到路由条目」缺口检测（免凭据）。
+ *
+ * 为什么需要（踩坑 #64）：宿主输入框的「推理等级」只认模型条目的
+ * `reasoningEfforts`，而声明要一路走过「上游目录 → 适配器投影 → 镜像块」三层，
+ * **任何一层丢掉都表现为"UI 里没入口"且零报错**——0.18.0 之前的 Qoder 14 个模型
+ * 全丢就是这个形态。本脚本把三层对账成一张表，让漏项可见而不是靠人肉发现。
+ *
+ * 检查（只读，零写入）：
+ *   1. 插件侧声明：live 实例 `model-list`（codebuddy）与 GET 视图
+ *      `qoder.models.efforts`（qoder）——这是"适配器投影后"的档位表；
+ *   2. 路由侧实况：宿主配置层（profile 的 cordis.patch.yml / 旧宿主 settings.yaml）
+ *      里 `llm-pi-ai.providers.<route>` 的条目是否带同样的 `reasoningEfforts`，
+ *      以及路由是否声明了 `compat.supportsReasoningEffort`（缺它 pi-ai 出站不写
+ *      `reasoning_effort` = 出档但不生效）；
+ *   3. 缺口 = 插件声明了档位而路由条目没有（或路由缺 compat）⇒ exit 1。
+ *
+ * 用法：
+ *   node scripts/probe-effort-gaps.mjs [--url http://127.0.0.1:19387] [--token <web token>] [--patch <cordis.patch.yml>]
+ * Trae：本机无 state.vscdb 时目录不可用，如实报 SKIP（不伪造）。
+ */
+import { readFileSync, readdirSync, existsSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+import YAML from 'yaml'
+
+const args = process.argv.slice(2)
+const argOf = (n, d) => { const i = args.indexOf(n); return i >= 0 && args[i + 1] !== undefined ? args[i + 1] : d }
+const BASE = argOf('--url', 'http://127.0.0.1:19387').replace(/\/+$/, '')
+const TOKEN = argOf('--token', '')
+const withToken = (u) => (TOKEN ? u + (u.includes('?') ? '&' : '?') + 'token=' + encodeURIComponent(TOKEN) : u)
+
+async function getView() {
+  const res = await fetch(withToken(`${BASE}/dsh-tap/settings`), { signal: AbortSignal.timeout(15000) })
+  if (!res.ok) throw new Error(`GET /dsh-tap/settings HTTP ${res.status}`)
+  return res.json()
+}
+async function action(name) {
+  const res = await fetch(withToken(`${BASE}/dsh-tap/settings`), {
+    method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ action: name }),
+    signal: AbortSignal.timeout(60000),
+  })
+  return res.json().catch(() => null)
+}
+
+/** 宿主配置层：显式 --patch，否则在 ~/.dsh 里找带 llm-pi-ai 条目的那份。 */
+function findPatch(explicit) {
+  if (explicit) return explicit
+  const candidates = []
+  const profiles = join(homedir(), '.dsh', 'profiles')
+  if (existsSync(profiles)) {
+    for (const d of readdirSync(profiles)) {
+      const p = join(profiles, d, 'cordis.patch.yml')
+      if (existsSync(p)) candidates.push(p)
+    }
+  }
+  candidates.push(join(homedir(), '.dsh', 'settings.yaml'))
+  for (const p of candidates) {
+    try {
+      const doc = YAML.parse(readFileSync(p, 'utf8'))
+      const list = Array.isArray(doc) ? doc : [doc]
+      const entry = list.find((e) => e?.id === 'llm-pi-ai')
+      if (entry?.config?.providers) return p
+    } catch { /* next */ }
+  }
+  return null
+}
+
+function routeBlock(patchPath, route) {
+  const doc = YAML.parse(readFileSync(patchPath, 'utf8'))
+  const list = Array.isArray(doc) ? doc : [doc]
+  const entry = list.find((e) => e?.id === 'llm-pi-ai')
+  return entry?.config?.providers?.[route] ?? null
+}
+
+const problems = []
+const notes = []
+const check = (route, declared, block, enabledIds) => {
+  if (!declared) { console.log(`\n[${route}] 插件侧未提供档位声明（旧宿主或未同步）→ SKIP`); return }
+  const enabled = enabledIds ? new Set(enabledIds) : null
+  const ids = Object.keys(declared).filter((id) => (declared[id] ?? []).length > 0 && (!enabled || enabled.has(id)))
+  if (!block) { console.log(`\n[${route}] 路由块不在宿主配置层 → SKIP（未启用？）`); return }
+  const compat = block?.compat?.supportsReasoningEffort === true
+  console.log(`\n[${route}] 声明了档位且**已启用**的模型 ${ids.length} 个；路由条目 ${(block.models ?? []).length} 个；compat.supportsReasoningEffort=${compat}`)
+  const byId = new Map((block.models ?? []).map((m) => [m.id, m]))
+  let tiered = 0
+  for (const id of ids) {
+    const entry = byId.get(id)
+    if (!entry) {
+      // 声明了但**路由里没这个模型** ⇒ 选择器不会列出它，谈不上"档位缺口"；
+      // 这是配置分歧（未铺进选择器），单独记一条提示。
+      notes.push(`${route}/${id}: 插件声明了档位，但路由条目里没有这个模型（未铺进选择器）`)
+      continue
+    }
+    tiered += 1
+    const mirrored = entry?.reasoningEfforts && Object.keys(entry.reasoningEfforts).length ? Object.keys(entry.reasoningEfforts) : null
+    const okRow = mirrored && compat
+    console.log(`  ${okRow ? 'ok  ' : 'GAP '} ${id.padEnd(22)} 插件声明=[${declared[id].join('/')}]  路由镜像=${mirrored ? `[${mirrored.join('/')}]` : '（无）'}`)
+    if (!mirrored) problems.push(`${route}/${id}: 插件声明了档位但路由条目没有 reasoningEfforts（宿主选择器不会出档）`)
+    else if (!compat) problems.push(`${route}: 有档位表但路由缺 compat.supportsReasoningEffort（出档也不生效）`)
+  }
+  if (tiered === 0) console.log(`  （声明档位且已启用的模型一个都不在路由里）`)
+}
+
+const view = await getView()
+const patchPath = findPatch(argOf('--patch', null))
+console.log(`实例 ${BASE}｜宿主配置层 ${patchPath ?? '(未找到)'}`)
+if (!patchPath) { console.error('找不到宿主配置层（--patch 指定 profile 的 cordis.patch.yml 或 ~/.dsh/settings.yaml）'); process.exitCode = 2 } else {
+
+const modelList = await action('model-list')
+// 只对账**已启用**的模型（effectiveIds）：用户显式停用的模型本就不该铺进路由，
+// 拿"声明"全集去比会把停用项误报成缺口。
+check('codebuddy', modelList?.efforts ?? null, routeBlock(patchPath, 'codebuddy'), view?.models?.effectiveIds)
+check('qoder', view?.qoder?.models?.efforts ?? null, routeBlock(patchPath, 'qoder'), null)
+// Trae（G3 起出档）：声明 = 目录 reasoning_effort_config 原文拼写；镜像键是
+// 宿主枚举映射（light→low/extra_high→xhigh），对账只看「有表 + 有 compat」，
+// 键名单不同属预期形态。
+check('trae', view?.trae?.models?.efforts ?? null, routeBlock(patchPath, 'trae'), null)
+
+if (notes.length) {
+  console.log('\n=== 提示（不是档位缺口，是配置分歧）===')
+  for (const n of notes) console.log('  ·', n)
+}
+if (problems.length) {
+  console.log('\n=== 缺口 ===')
+  for (const p of problems) console.log('  ✗', p)
+  console.log(`\n共 ${problems.length} 处：声明没走到宿主选择器（重启 dsh 后再跑一次；仍是缺口就是投影/镜像代码漏了）`)
+  process.exitCode = 1
+} else {
+  console.log('\n=== 无档位缺口：所有已铺进路由的声明都到了条目，且路由声明了 compat ===')
+}
+}

package/scripts/probe-media.mjs

@@ -0,0 +1,115 @@
+#!/usr/bin/env node
+/**
+ * Probe the CodeBuddy gateway's media endpoints (item 3): image generation,
+ * video generation, and 3D candidates. Repeatable; every attempt is appended
+ * to the output JSON with the request shape and a SANITIZED response (signed
+ * COS URLs are stripped to their path — the query carries credentials).
+ *
+ * Usage:
+ *   node scripts/probe-media.mjs [--out docs/probes/media-<ts>.json]
+ *                                  [--prompt "..."] [--model hunyuan-image-v3.0-art]
+ *
+ * Credentials come from ~/.dsh/codebuddy-plugin.json (active api key); the
+ * key is never printed or written to the output file.
+ */
+
+import { readFileSync, mkdirSync, writeFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join, dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = dirname(dirname(fileURLToPath(import.meta.url)))
+const args = process.argv.slice(2)
+const opt = (name, dflt) => {
+  const i = args.indexOf(`--${name}`)
+  return i >= 0 ? args[i + 1] : dflt
+}
+const PROMPT = opt('prompt', 'a small red circle centered on a plain white background')
+const IMG_MODEL = opt('model', 'hunyuan-image-v3.0-art')
+const OUT = opt('out', join(ROOT, 'docs', 'probes', `media-${new Date().toISOString().slice(0, 10)}.json`))
+
+const cfg = JSON.parse(readFileSync(join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'codebuddy-plugin.json'), 'utf8'))
+const KEY = cfg.apiKeys?.find((k) => k.name === cfg.activeApiKey)?.key
+if (!KEY) { console.error('no active api key in codebuddy-plugin.json'); process.exit(1) }
+const BASE = cfg.baseURL ?? 'https://copilot.tencent.com'
+
+const CLI_HEADERS = {
+  'User-Agent': 'CLI/unknown CodeBuddy/2.136.0',
+  'X-IDE-Type': 'CLI',
+  'X-IDE-Name': 'CLI',
+  'X-Requested-With': 'XMLHttpRequest',
+}
+
+/** Strip signed-url credentials and cap long values for the sample file. */
+function sanitize(value, depth = 0) {
+  if (typeof value === 'string') {
+    if (/^https?:\/\//.test(value)) {
+      const [base] = value.split('?')
+      return value.includes('?') ? `${base}?<signed-query-stripped>` : value
+    }
+    return value.length > 300 ? `${value.slice(0, 300)}…(${value.length} chars)` : value
+  }
+  if (Array.isArray(value)) return value.map((v) => sanitize(v, depth + 1))
+  if (value && typeof value === 'object') {
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, sanitize(v, depth + 1)]))
+  }
+  return value
+}
+
+const records = []
+
+async function attempt(name, path, payload, { cliHeaders = true } = {}) {
+  const headers = {
+    'Content-Type': 'application/json',
+    Accept: 'application/json',
+    Authorization: 'Bearer <redacted-in-sample>',
+    ...(cliHeaders ? CLI_HEADERS : {}),
+  }
+  const t0 = Date.now()
+  let record
+  try {
+    const res = await fetch(`${BASE}${path}`, {
+      method: 'POST',
+      headers: { ...headers, Authorization: `Bearer ${KEY}` },
+      body: JSON.stringify(payload),
+    })
+    const text = await res.text()
+    let body = null
+    try { body = JSON.parse(text) } catch { body = text.slice(0, 400) }
+    record = { name, path, payload, cliHeaders, status: res.status, ms: Date.now() - t0, body: sanitize(body) }
+  } catch (err) {
+    record = { name, path, payload, cliHeaders, ms: Date.now() - t0, error: String(err?.message ?? err) }
+  }
+  records.push({ ts: new Date().toISOString(), ...record })
+  console.log(`${record.status ?? 'ERR'} ${String(record.ms).padStart(6)}ms  ${name}  ${JSON.stringify(record.body ?? record.error)?.slice(0, 220)}`)
+  return record
+}
+
+async function main() {
+  console.log(`probing ${BASE} → ${OUT}`)
+  // 1. image generation, with and without the CLI-shaped UA
+  await attempt('images/generations (CLI headers)', '/v2/images/generations', {
+    model: IMG_MODEL, prompt: PROMPT, size: '1024x1024', n: 1,
+  })
+  await attempt('images/generations (plain UA)', '/v2/images/generations', {
+    model: IMG_MODEL, prompt: PROMPT, size: '1024x1024', n: 1,
+  }, { cliHeaders: false })
+  // 2. video: the catalog lists no video model; historical probe returned
+  //    14407 "route config not found" — re-confirm.
+  await attempt('videos/generations', '/v2/videos/generations', {
+    model: 'hunyuan-video-t2v', prompt: PROMPT,
+  })
+  // 3. 3D: no CLI trace, no catalog model — probe the obvious candidates.
+  await attempt('3d/generations', '/v2/3d/generations', { model: 'hunyuan-3d', prompt: PROMPT })
+  await attempt('agenttool 3d', '/agenttool/v1/3d', { prompt: PROMPT })
+
+  // close the JSON array
+  mkdirSync(dirname(OUT), { recursive: true })
+  writeFileSync(OUT, JSON.stringify(records, null, 2) + '\n')
+  console.log(`samples → ${OUT}`)
+}
+
+main().catch((err) => {
+  console.error(`probe-media crashed: ${err.stack ?? err.message}`)
+  process.exit(1)
+})

package/scripts/probe-moderation.mjs

@@ -0,0 +1,159 @@
+#!/usr/bin/env node
+/**
+ * Moderation-layer probe (topic 6 of docs/rules/): at WHICH gateway layer
+ * does the role:"developer" rejection fire?
+ *
+ * Spell/incident under test (AGENTS.md:32, CHANGELOG 0.7.4): since
+ * 2026-08-18 16:24 UTC the gateway's content moderation answers payloads
+ * containing a role:"developer" message with finish_reason: content_filter
+ * ("您当前输入的信息存在敏感内容"); developer→system passes; deepseek-v3 was
+ * "unaffected" — but ONLY because pi-ai never emits developer for
+ * non-reasoning models. Nobody has yet sent a developer-role message to a
+ * non-reasoning model deliberately.
+ *
+ * Candidate layers:
+ *   L1  gateway pre-routing middleware: a model-agnostic role check
+ *   L2  reasoning-model backend path: only those backends run the check
+ *   L3  output-side moderation (not our case: the refusal is pre-generation)
+ *
+ * Pre-registered predictions (2026-08-19):
+ *   P-M1  deepseek-v3 + developer role → content_filter too (L1: the check
+ *         is model-agnostic; v3's "immunity" was purely a pi-ai artifact)
+ *   P-M2  the rejection is pre-generation but the gateway still meters the
+ *         processed input: usage present, prompt_tokens ≈ input size,
+ *         credit > 0
+ *   P-M3  position independence: a developer message NOT in first position
+ *         (after a user message) is still rejected
+ *   P-M4  control: identical bytes with developer→system pass with normal
+ *         finish_reason (stop/length)
+ *
+ * Understanding-only, no circumvention research: every arm reproduces the
+ * DOCUMENTED rejection surface; the plugin's bridge rewrite stays as-is.
+ * Low rate: 2s spacing, 5 arms, max_tokens=8.
+ *
+ * Usage: node scripts/probe-moderation.mjs [--out docs/probes/moderation-YYYY-MM-DD.jsonl]
+ */
+
+import { readFileSync, existsSync, appendFileSync, mkdirSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join, dirname } from 'node:path'
+
+const DSH_HOME = process.env.DSH_HOME ?? join(homedir(), '.dsh')
+const GATEWAY = 'https://copilot.tencent.com'
+const SPACING_MS = 2000
+const OUT = process.argv.includes('--out')
+  ? process.argv[process.argv.indexOf('--out') + 1]
+  : join('docs', 'probes', `moderation-${new Date().toISOString().slice(0, 10)}.jsonl`)
+
+function resolveKey() {
+  try {
+    const cfg = JSON.parse(readFileSync(join(DSH_HOME, 'codebuddy-plugin.json'), 'utf8'))
+    const active = (cfg.apiKeys ?? []).find((k) => k.name === cfg.activeApiKey)
+    if (active?.key) return active.key
+  } catch { /* fall through */ }
+  if (process.env.CODEBUDDY_API_KEY) return process.env.CODEBUDDY_API_KEY
+  const credFile = join(DSH_HOME, '.credentials.yaml')
+  if (existsSync(credFile)) {
+    const m = readFileSync(credFile, 'utf8').match(/^\s*CODEBUDDY_API_KEY:\s*["']?([^"'\s]+)["']?\s*$/m)
+    if (m) return m[1]
+  }
+  throw new Error('no CodeBuddy credential found')
+}
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms))
+const SYS = 'You are a concise test agent. Answer with exactly: OK'
+const redact = (v) => typeof v === 'string'
+  ? v.replace(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/gi, '<redacted>').replace(/\b\d{6,}\b/g, '<redacted>')
+  : v
+
+const ARMS = [
+  { name: 'M0-control-developer', model: 'glm-5.2', pred: null,
+    messages: [{ role: 'developer', content: SYS }, { role: 'user', content: 'hi' }],
+    note: 'reproduce the documented rejection on a reasoning model' },
+  { name: 'P-M1-v3-developer', model: 'deepseek-v3', pred: 'P-M1',
+    messages: [{ role: 'developer', content: SYS }, { role: 'user', content: 'hi' }],
+    note: 'L1 predicts content_filter even on a non-reasoning model' },
+  { name: 'P-M3-developer-middle', model: 'glm-5.2', pred: 'P-M3',
+    messages: [{ role: 'user', content: 'hi' }, { role: 'developer', content: SYS }, { role: 'user', content: 'reply OK' }],
+    note: 'developer not in first position still rejected' },
+  { name: 'P-M4-control-system', model: 'glm-5.2', pred: 'P-M4',
+    messages: [{ role: 'system', content: SYS }, { role: 'user', content: 'hi' }],
+    note: 'identical bytes with system pass with a normal finish_reason' },
+]
+
+// Round 2 (2026-08-19): the rejection surface has MORPHED since the
+// 2026-08-18 incident — then: 200 SSE + finish_reason content_filter +
+// refusal text; now: HTTP 500 + code 11128 "Illegal API invocation from an
+// unapproved channel", no usage, no credit, on v3 AND glm AND mid-payload
+// positions (P-M1 direction confirmed: model-agnostic; P-M3 confirmed:
+// position-agnostic; P-M2 moot: nothing is metered).
+// The gate's wording is "unapproved channel" — is 11128 a developer-SPECIFIC
+// denylist or a role WHITELIST (system/user/assistant/tool)? One clean
+// discriminator (understanding only — a made-up role has no client value):
+const ARMS_R2 = [
+  { name: 'P-M5-bogus-role', model: 'glm-5.2', pred: 'P-M5',
+    messages: [{ role: 'hacker', content: SYS }, { role: 'user', content: 'hi' }],
+    note: 'whitelist hypothesis → same 500/11128; developer-denylist hypothesis → a different error' },
+]
+
+async function probe(key, arm) {
+  const t0 = Date.now()
+  try {
+    const res = await fetch(`${GATEWAY}/v2/chat/completions`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${key}`,
+        'User-Agent': 'CLI/unknown CodeBuddy/2.136.0',
+      },
+      body: JSON.stringify({
+        model: arm.model, stream: true, stream_options: { include_usage: true },
+        max_tokens: 8, messages: arm.messages,
+      }),
+    })
+    const text = await res.text()
+    let finishReason = null, content = '', usage = null
+    for (const line of text.split('\n')) {
+      const l = line.trim()
+      if (!l.startsWith('data:')) continue
+      let chunk
+      try { chunk = JSON.parse(l.slice(5).trim()) } catch { continue }
+      if (chunk.usage) usage = chunk.usage
+      const ch = chunk.choices?.[0]
+      if (ch?.finish_reason) finishReason = ch.finish_reason
+      if (typeof ch?.delta?.content === 'string') content += ch.delta.content
+    }
+    // Non-SSE bodies (e.g. the 500 envelope) are the rejection surface —
+    // record them verbatim (redacted), they carry the layer's fingerprint.
+    const bodyPreview = finishReason === null && content === '' ? redact(text.slice(0, 300)) : null
+    return {
+      type: 'probe', name: arm.name, model: arm.model, pred: arm.pred, note: arm.note,
+      roles: arm.messages.map((m) => m.role),
+      status: res.status, finishReason,
+      contentPreview: redact(content.slice(0, 80)),
+      bodyPreview,
+      usage: usage ? {
+        prompt_tokens: usage.prompt_tokens, completion_tokens: usage.completion_tokens,
+        credit: usage.credit, prompt_cache_hit_tokens: usage.prompt_cache_hit_tokens,
+      } : null,
+      ms: Date.now() - t0,
+    }
+  } catch (err) {
+    return { type: 'probe', name: arm.name, model: arm.model, pred: arm.pred, note: arm.note, error: String(err?.message ?? err), ms: Date.now() - t0 }
+  }
+}
+
+const key = resolveKey()
+mkdirSync(dirname(OUT), { recursive: true })
+appendFileSync(OUT, JSON.stringify({ type: 'run', at: new Date().toISOString(), gateway: GATEWAY }) + '\n')
+console.log(`evidence → ${OUT}`)
+
+const SET = process.argv.includes('--set') ? process.argv[process.argv.indexOf('--set') + 1] : 'matrix'
+const arms = SET === 'r2' ? ARMS_R2 : ARMS
+for (const arm of arms) {
+  const rec = await probe(key, arm)
+  appendFileSync(OUT, JSON.stringify(rec) + '\n')
+  console.log(`${arm.name.padEnd(24)} status=${rec.status ?? '-'} finish=${rec.finishReason ?? '-'} credit=${rec.usage?.credit ?? '-'} prompt=${rec.usage?.prompt_tokens ?? '-'} body=${(rec.bodyPreview ?? rec.contentPreview ?? rec.error ?? '').slice(0, 90)}`)
+  await sleep(SPACING_MS)
+}
+console.log('done.')