dsh-tap 0.20.0

package/scripts/probe-qoder-attribution-arm8.mjs

@@ -0,0 +1,92 @@
+// 臂 8：model_config 携带完整定价元数据（price_factor/promotion/is_free/feature_switches…）
+// 假设：服务端计费归并要求请求侧 model_config 带价格因子（官方客户端从目录投影全带）。
+import { readJson } from '../core/json-store.js'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { randomUUID } from 'node:crypto'
+import { fileURLToPath } from 'node:url'
+import { writeFileSync, mkdirSync } from 'node:fs'
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
+const store = readJson(join(homedir(), '.dsh', 'qoder-plugin-auth.json'))
+const { createCosyRuntime } = await import('../providers/qoder/cosy.js')
+const { fetchQoderCatalog } = await import('../providers/qoder/catalog.js')
+const cosy = createCosyRuntime({ wasmPath: join(ROOT, 'providers', 'qoder', 'qoder_auth.wasm') })
+const cred = { accessToken: store.auth.accessToken, machineId: store.machine.machineId, uid: store.account.uid }
+const INFER = 'https://gateway.qoder.com.cn'
+const OPENAPI = 'https://openapi.qoder.com.cn'
+const MODEL = 'qmodel_38max'
+const PROMPT = '只回复两个字：收到'
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms))
+
+const cat = await fetchQoderCatalog(cosy, cred, INFER)
+const entry = cat.entries[MODEL]
+// 官方归一化形态（bundle 实证字段）：目录条目定价/能力元数据全带
+const modelConfig = {
+  key: entry.key, display_name: entry.display_name, model: '', format: entry.format,
+  is_vl: entry.is_vl === true, is_reasoning: entry.is_reasoning === true,
+  api_key: '', url: '', source: entry.source ?? 'system',
+  max_input_tokens: entry.max_input_tokens,
+  is_default: entry.is_default === true, is_new: entry.is_new === true,
+  is_free: entry.is_free === true,
+  price_factor: entry.price_factor, original_price_factor: entry.original_price_factor,
+  promotion: entry.promotion, feature_switches: entry.feature_switches,
+  context_config: entry.context_config, thinking_config: entry.thinking_config,
+}
+
+const addOnUsed = async () => {
+  const r = await fetch(`${OPENAPI}/api/v2/quota/usage`, { headers: { Authorization: `Bearer ${cred.accessToken}` } })
+  return (JSON.parse(await r.text()))?.addOnQuota?.used
+}
+const evidence = { at: new Date().toISOString(), model: MODEL, modelConfig }
+const before = await addOnUsed()
+console.log('addOnUsed before:', before)
+
+const requestId = randomUUID(), requestSetId = randomUUID(), sessionId = randomUUID()
+const body = JSON.stringify({
+  model: MODEL, stream: true, stream_options: { include_usage: true },
+  messages: [{ role: 'user', content: PROMPT }],
+  request_id: requestId, request_set_id: requestSetId, chat_record_id: requestId,
+  session_id: sessionId, chat_task: 'FREE_INPUT',
+  chat_context: { text: PROMPT, features: [], extra: { context: [], modelConfig: { key: MODEL, is_reasoning: true }, originalContent: PROMPT }, chatPrompt: '', imageUrls: null },
+  is_reply: true, is_retry: false, source: 1, version: '3',
+  agent_id: 'agent_common', task_id: 'common', session_type: 'qoderclicn', aliyun_user_type: '',
+  model_config: modelConfig,
+  business: { product: 'cli', version: '1.1.57', type: 'agent', id: requestSetId, name: PROMPT.slice(0, 10), begin_at: Date.now(), stage: 'processing' },
+})
+const signed = await cosy.prepareChat(cred, { endpoint: INFER, body, modelKey: MODEL, modelSource: 'system' })
+const res = await fetch(signed.url, { method: 'POST', headers: { ...signed.headers, 'Content-Type': 'application/json', Accept: 'text/event-stream' }, body: signed.body })
+const raw = await res.text()
+let usage = null, text = ''
+for (const line of raw.split('\n')) {
+  if (!line.startsWith('data:')) continue
+  let frame; try { frame = JSON.parse(line.slice(5)) } catch { continue }
+  if (typeof frame?.body !== 'string' || frame.body === '[DONE]') continue
+  let chunk; try { chunk = JSON.parse(frame.body) } catch { continue }
+  if (chunk.usage) usage = chunk.usage
+  if (chunk.choices?.[0]?.delta?.content) text += chunk.choices[0].delta.content
+}
+console.log('chat HTTP', res.status, 'text=', JSON.stringify(text.slice(0, 20)))
+console.log('usage 帧全文:', JSON.stringify(usage))
+evidence.chat = { status: res.status, usage, text: text.slice(0, 100), raw: raw.slice(0, 12_000) }
+
+// business/finish 收尾（与前臂同）
+const inner = { event_time: Date.now(), event_type: 'BUSINESS_FINISH', mid: cred.machineId, aid: '', rid: randomUUID(), oid: '', yid: '', uid: cred.uid, event_data: { session_id: sessionId, business: { product: 'cli', version: '1.1.57', type: 'agent', id: requestSetId, end_at: Date.now(), stage: 'complete', name: PROMPT.slice(0, 10) } } }
+const fin = await cosy.prepareSigned(cred, { endpoint: INFER, path: '/api/v2/service/business/finish?Encode=1', method: 'POST', mode: 'auth', body: JSON.stringify({ payload: JSON.stringify(inner), encodeVersion: '1' }) })
+const finRes = await fetch(fin.url, { method: 'POST', headers: { ...fin.headers, 'Content-Type': 'application/json' }, body: fin.body })
+console.log('business/finish HTTP', finRes.status, (await finRes.text()).slice(0, 80))
+
+// 官方实测计数器 ~1 分钟内动（06:28 官方聊天 06:29 即 +5）：盯 90s，每 15s 一拍
+for (const wait of [15, 15, 15, 15, 30]) {
+  await sleep(wait * 1000)
+  const now = await addOnUsed()
+  console.log(`+${wait}s addOnUsed:`, now, now !== before ? '★ 动了！' : '')
+  if (now !== before) { evidence.counterMoved = true; break }
+}
+evidence.before = before
+evidence.after = await addOnUsed()
+mkdirSync(join(ROOT, 'docs', 'probes'), { recursive: true })
+const out = join(ROOT, 'docs', 'probes', `qoder-attribution-arm8-${Date.now()}.json`)
+writeFileSync(out, JSON.stringify(evidence, null, 2))
+console.log('证据 →', out)
+process.exit(0)

package/scripts/probe-qoder-attribution-arm9.mjs

@@ -0,0 +1,102 @@
+// 臂 9：大额用量 + 整数计数器（addOnQuota.used 只显整数，0.002 级探测不可见）。
+// A = 裸 OpenAI body ×2 大输出；B = 官方归因信封 + business/finish ×2 大输出。
+// 判定：哪一组让整数计数器跳变，即哪条路径被记账。
+import { readJson } from '../core/json-store.js'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { randomUUID } from 'node:crypto'
+import { fileURLToPath } from 'node:url'
+import { writeFileSync, mkdirSync } from 'node:fs'
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
+const store = readJson(join(homedir(), '.dsh', 'qoder-plugin-auth.json'))
+const { createCosyRuntime } = await import('../providers/qoder/cosy.js')
+const { fetchQoderCatalog } = await import('../providers/qoder/catalog.js')
+const cosy = createCosyRuntime({ wasmPath: join(ROOT, 'providers', 'qoder', 'qoder_auth.wasm') })
+const cred = { accessToken: store.auth.accessToken, machineId: store.machine.machineId, uid: store.account.uid }
+const INFER = 'https://gateway.qoder.com.cn'
+const OPENAPI = 'https://openapi.qoder.com.cn'
+const MODEL = process.env.QODER_QUOTA_MODEL ?? 'qmodel_38max'
+const BIG_PROMPT = '用中文写一篇约 2500 字的科普文章，主题是"潮汐是如何形成的"，要求分段详细论述。'
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms))
+const evidence = { at: new Date().toISOString(), model: MODEL, arms: [] }
+
+const addOnUsed = async () => {
+  const r = await fetch(`${OPENAPI}/api/v2/quota/usage`, { headers: { Authorization: `Bearer ${cred.accessToken}` } })
+  return (JSON.parse(await r.text()))?.addOnQuota?.used
+}
+
+const cat = await fetchQoderCatalog(cosy, cred, INFER)
+const entry = cat.entries[MODEL]
+
+async function bigChat(withEnvelope) {
+  const base = {
+    model: MODEL, stream: true, stream_options: { include_usage: true },
+    messages: [{ role: 'user', content: BIG_PROMPT }],
+  }
+  if (withEnvelope) {
+    const requestId = randomUUID(), requestSetId = randomUUID()
+    Object.assign(base, {
+      request_id: requestId, request_set_id: requestSetId, chat_record_id: requestId,
+      session_id: randomUUID(), chat_task: 'FREE_INPUT',
+      chat_context: { text: BIG_PROMPT, features: [], extra: { context: [], modelConfig: { key: MODEL, is_reasoning: true }, originalContent: BIG_PROMPT }, chatPrompt: '', imageUrls: null },
+      is_reply: true, is_retry: false, source: 1, version: '3',
+      agent_id: 'agent_common', task_id: 'common', session_type: 'qoderclicn', aliyun_user_type: '',
+      model_config: {
+        key: entry.key, display_name: entry.display_name, model: '', format: entry.format,
+        is_vl: entry.is_vl === true, is_reasoning: entry.is_reasoning === true,
+        api_key: '', url: '', source: entry.source ?? 'system', max_input_tokens: entry.max_input_tokens,
+        is_free: entry.is_free === true, price_factor: entry.price_factor,
+        promotion: entry.promotion, feature_switches: entry.feature_switches,
+        context_config: entry.context_config, thinking_config: entry.thinking_config,
+      },
+      business: { product: 'cli', version: '1.1.57', type: 'agent', id: requestSetId, name: BIG_PROMPT.slice(0, 10), begin_at: Date.now(), stage: 'processing' },
+    })
+    base.__requestSetId = requestSetId
+    base.__sessionId = base.session_id
+  }
+  const { __requestSetId, __sessionId, ...payload } = base
+  const signed = await cosy.prepareChat(cred, { endpoint: INFER, body: JSON.stringify(payload), modelKey: MODEL, modelSource: 'system' })
+  const res = await fetch(signed.url, { method: 'POST', headers: { ...signed.headers, 'Content-Type': 'application/json', Accept: 'text/event-stream' }, body: signed.body })
+  const raw = await res.text()
+  let usage = null, text = ''
+  for (const line of raw.split('\n')) {
+    if (!line.startsWith('data:')) continue
+    let frame; try { frame = JSON.parse(line.slice(5)) } catch { continue }
+    if (typeof frame?.body !== 'string' || frame.body === '[DONE]') continue
+    let chunk; try { chunk = JSON.parse(frame.body) } catch { continue }
+    if (chunk.usage) usage = chunk.usage
+    if (chunk.choices?.[0]?.delta?.content) text += chunk.choices[0].delta.content
+  }
+  // 信封臂补 business/finish（与插件网关同）
+  if (withEnvelope && __requestSetId) {
+    const inner = { event_time: Date.now(), event_type: 'BUSINESS_FINISH', mid: cred.machineId, aid: '', rid: randomUUID(), oid: '', yid: '', uid: cred.uid, event_data: { session_id: __sessionId, business: { product: 'cli', version: '1.1.57', type: 'agent', id: __requestSetId, end_at: Date.now(), stage: 'complete', name: BIG_PROMPT.slice(0, 10) } } }
+    const fin = await cosy.prepareSigned(cred, { endpoint: INFER, path: '/api/v2/service/business/finish?Encode=1', method: 'POST', mode: 'auth', body: JSON.stringify({ payload: JSON.stringify(inner), encodeVersion: '1' }) })
+    await fetch(fin.url, { method: 'POST', headers: { ...fin.headers, 'Content-Type': 'application/json' }, body: fin.body }).catch(() => {})
+  }
+  return { status: res.status, credits: usage?.credits ?? 0, tokens: usage?.total_tokens ?? 0, textLen: text.length, usage }
+}
+
+for (const [arm, withEnvelope] of [['A-bare', false], ['B-envelope', true]]) {
+  const before = await addOnUsed()
+  console.log(`\n══ 臂 ${arm} ══ 开始前 addOnUsed=${before}`)
+  const runs = []
+  for (let i = 0; i < 2; i++) {
+    const r = await bigChat(withEnvelope)
+    console.log(`  chat#${i + 1} HTTP ${r.status} tokens=${r.tokens} credits=${r.credits} 正文长度=${r.textLen}`)
+    runs.push({ status: r.status, credits: r.credits, tokens: r.tokens })
+    await sleep(2000)
+  }
+  await sleep(45_000)
+  const after = await addOnUsed()
+  console.log(`  45s 后 addOnUsed=${after} ${after !== before ? `★ 动了 ${before}→${after}` : '（不动）'}`)
+  evidence.arms.push({ arm, withEnvelope, before, after, runs })
+}
+
+evidence.verdict = evidence.arms.map((a) => `${a.arm}:${a.after !== a.before ? '计数' : '不动'}`).join(' ')
+console.log('\n【结论】', evidence.verdict)
+mkdirSync(join(ROOT, 'docs', 'probes'), { recursive: true })
+const out = join(ROOT, 'docs', 'probes', `qoder-attribution-arm9-${Date.now()}.json`)
+writeFileSync(out, JSON.stringify(evidence, null, 2))
+console.log('证据 →', out)
+process.exit(0)

package/scripts/probe-qoder-attribution.mjs

@@ -0,0 +1,266 @@
+#!/usr/bin/env node
+/**
+ * Qoder CN — 用量统计归因梯度实验（真实网络、本人账号）。
+ *
+ * 历史结论（2026-09-22 当日晚些时候被臂 9 推翻并修正，见踩坑 #40）：
+ * 本梯度臂 1-7 用 0.002 级小额聊天判"裸 body 不记账"是**假阴性**——
+ * `addOnQuota.used` 只显整数，小额被取整吞掉；臂 9（大额双臂，
+ * scripts/probe-qoder-attribution-arm9.mjs）证明配额扣减与形态无关、
+ * 实时入账。本脚本保留为归因形态回归/上报连通性探针（finish/tracking
+ * 均回 200 success），不要再用小额计数器差分下"是否记账"的结论。
+ *
+ * 官方客户端的统计视图归因链（bundle 逆向实证，见 qoder-worker-runtime.obf.mjs）：
+ *   a) 一轮 query 结束后 POST /algo/api/v2/service/business/finish?Encode=1
+ *      （BUSINESS_FINISH 事件，prepareRequest mode "auth"）；
+ *   b) 聊天 body 明文里的归因字段（request_id/request_set_id/chat_record_id/
+ *      session_id/chat_task/source:1/version:"3"/agent_id/task_id/session_type…）；
+ *   c) 聊天 body 的 business 块（id 与 request_set_id 同源）；
+ *   d) POST /api/v1/tracking（mode "sign"，聚合 total_credits，best-effort 遥测）。
+ *
+ * 梯度（每臂 = 计数器快照 → 动作 → 静置 → 复拍）：
+ *   1 finish-only   裸聊天 + business/finish
+ *   2 envelope      聊天带归因字段（无 business 块），不上报
+ *   3 env-business  聊天带归因字段 + business 块，不上报
+ *   4 env-finish    归因字段 + business 块 + business/finish
+ *   5 tracking      裸聊天 + /api/v1/tracking 回流上报
+ *   6 全保真信封    归因字段 + business 块 + system/parameters/tools
+ *   7 IDE 面        session_type=qoder_work + business.product=ide + finish
+ *
+ * 用法：node scripts/probe-qoder-attribution.mjs [--arm N] [--settle-ms 15000]
+ */
+
+import { mkdirSync, writeFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { randomUUID } from 'node:crypto'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
+const DSH_HOME = process.env.DSH_HOME ?? join(homedir(), '.dsh')
+const PROBES_DIR = join(ROOT, 'docs', 'probes')
+const OPENAPI = process.env.QODER_OPENAPI ?? 'https://openapi.qoder.com.cn'
+const INFER = process.env.QODER_INFER ?? 'https://gateway.qoder.com.cn'
+const MODEL = process.env.QODER_QUOTA_MODEL ?? 'q37fmodel'
+const PROMPT = '只回复两个字：收到'
+
+const args = process.argv.slice(2)
+const optVal = (f, d) => { const i = args.indexOf(f); return i >= 0 ? Number(args[i + 1]) : d }
+const onlyArm = optVal('--arm', 0)
+const SETTLE_MS = optVal('--settle-ms', 15_000)
+
+const { readJson } = await import('../core/json-store.js')
+const { createCosyRuntime } = await import('../providers/qoder/cosy.js')
+
+const store = readJson(join(DSH_HOME, 'qoder-plugin-auth.json'))
+if (!store?.auth?.accessToken) { console.error('未登录：先跑 probe-qoder-live --login'); process.exit(1) }
+const token = store.auth.accessToken
+const machineId = store.machine?.machineId
+const uid = store.account?.uid ?? ''
+const oid = store.account?.organizationId ?? ''
+const cred = { accessToken: token, machineId, uid }
+const cosy = createCosyRuntime({ wasmPath: join(ROOT, 'providers', 'qoder', 'qoder_auth.wasm') })
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms))
+
+// aid/yx_uid 不在令牌仓里，userinfo 现取（取不到就空串，与 service account 形态一致）
+let aid = '', yid = ''
+try {
+  const res = await fetch(`${OPENAPI}/api/v1/userinfo`, { headers: { Authorization: `Bearer ${token}` } })
+  const j = JSON.parse(await res.text())
+  aid = j?.aid ?? j?.data?.aid ?? ''
+  yid = j?.yx_uid ?? j?.data?.yx_uid ?? ''
+  console.log(`userinfo HTTP ${res.status}：aid=${aid ? '有' : '无'} yx_uid=${yid ? '有' : '无'}`)
+} catch (e) { console.log('userinfo 拉取失败（继续，aid/yid 空串）：', String(e?.message ?? e)) }
+
+// ── 计数器（高精度哨兵 = creditsSummary.totalCredits）─────────────────────
+async function counters(tag) {
+  const grab = async (name, url, pick) => {
+    try {
+      const res = await fetch(url, { headers: { Authorization: `Bearer ${token}` } })
+      const j = JSON.parse(await res.text())
+      return { name, status: res.status, value: pick(j) }
+    } catch (e) { return { name, netErr: String(e?.message ?? e) } }
+  }
+  const today = new Date().toISOString().slice(0, 10)
+  const snap = {
+    tag, at: new Date().toISOString(),
+    addOnUsed: (await grab('quotaUsage', `${OPENAPI}/api/v2/quota/usage`, (j) => j?.addOnQuota?.used)).value,
+    totalCredits: (await grab('creditsSummary', `${OPENAPI}/sash/api/v1/ai-conversations/credits-summary`, (j) => j?.totalCredits)).value,
+    heatToday: (await grab('creditsHeatmap', `${OPENAPI}/sash/api/v1/ai-conversations/credits-heatmap?days=1`, (j) => j?.items?.find?.((i) => i.date === today)?.value ?? j?.items?.[0]?.value)).value,
+  }
+  console.log(`  [${tag}] addOnUsed=${snap.addOnUsed} totalCredits=${snap.totalCredits} heatToday=${snap.heatToday}`)
+  return snap
+}
+
+// ── 动作原语 ─────────────────────────────────────────────────────────────
+async function chatOnce(extraFields) {
+  const body = JSON.stringify({
+    model: MODEL, stream: true, stream_options: { include_usage: true },
+    messages: [{ role: 'user', content: PROMPT }],
+    ...extraFields,
+  })
+  const signed = await cosy.prepareChat(cred, { endpoint: INFER, body, modelKey: MODEL, modelSource: 'system' })
+  const res = await fetch(signed.url, {
+    method: 'POST',
+    headers: { ...signed.headers, 'Content-Type': 'application/json', Accept: 'text/event-stream' },
+    body: signed.body,
+  })
+  const raw = await res.text()
+  let usage = null, text = '', err = null
+  for (const line of raw.split('\n')) {
+    if (!line.startsWith('data:')) continue
+    let frame; try { frame = JSON.parse(line.slice(5)) } catch { continue }
+    if (typeof frame?.body !== 'string' || frame.body === '[DONE]') continue
+    let chunk; try { chunk = JSON.parse(frame.body) } catch { continue }
+    if (chunk.message && !chunk.choices) { err = `${chunk.code}: ${chunk.message}`; continue }
+    if (chunk.choices?.[0]?.delta?.content) text += chunk.choices[0].delta.content
+    if (chunk.usage) usage = chunk.usage
+  }
+  console.log(`  chat HTTP ${res.status} text=${JSON.stringify(text.slice(0, 20))} credits=${usage?.credits} billable=${usage?.billable} reqId=${usage?.request_id ?? '(无)'} ${err ? 'ERR=' + err : ''}`)
+  return { status: res.status, usage, text: text.slice(0, 100), err, raw: raw.slice(0, 12_000) }
+}
+
+async function businessFinish({ sessionId, requestSetId }) {
+  const inner = {
+    event_time: Date.now(), event_type: 'BUSINESS_FINISH',
+    mid: machineId, aid, rid: randomUUID(), oid, yid, uid,
+    event_data: {
+      session_id: sessionId,
+      business: { product: 'cli', version: '1.1.57', type: 'agent', id: requestSetId, end_at: Date.now(), stage: 'complete', name: PROMPT.slice(0, 10) },
+    },
+  }
+  const bodyJson = JSON.stringify({ payload: JSON.stringify(inner), encodeVersion: '1' })
+  const signed = await cosy.prepareSigned(cred, { endpoint: INFER, path: '/api/v2/service/business/finish?Encode=1', method: 'POST', mode: 'auth', body: bodyJson })
+  const res = await fetch(signed.url, { method: 'POST', headers: { ...signed.headers, 'Content-Type': 'application/json' }, body: signed.body })
+  const text = await res.text()
+  console.log(`  business/finish HTTP ${res.status} url=${signed.url} resp=${text.slice(0, 160)}`)
+  return { url: signed.url, status: res.status, resp: text.slice(0, 2000), plainBody: inner }
+}
+
+async function tracking({ sessionId, requestSetId, usage }) {
+  const envelope = [{
+    uuid: randomUUID(),
+    event_type: 'qodercli-back-flow-agent-query-finish',
+    event_time: Date.now(),
+    uid, oid, mid: machineId, aid,
+    os_arch: process.arch, os_version: '',
+    ide_type: 'CLI', ide_version: '1.1.57', cluster_env: '',
+    business_id: requestSetId, git_remote: '',
+    event_data: {
+      items: [{
+        schema_version: 2, session_id: sessionId, task_id: requestSetId,
+        request_set_id: requestSetId, prompt_id: randomUUID(),
+        entry: 'cli', product: 'cli', client_type: '5', cli_version: '1.1.57', os_type: process.platform,
+        query_callback: 'end', terminal_reason: 'complete', business_state_final: 'complete',
+        duration_ms: 3000, loop_iteration_count: 1,
+        model_request_count: 1, model_request_success_count: 1, actual_model: MODEL,
+        total_input_tokens: usage?.prompt_tokens ?? 0, total_output_tokens: usage?.completion_tokens ?? 0,
+        total_cache_read_tokens: usage?.prompt_tokens_details?.cached_tokens ?? 0, total_cache_write_tokens: 0,
+        total_thinking_tokens: usage?.completion_tokens_details?.reasoning_tokens ?? 0,
+        total_credits: usage?.credits ?? 0, total_original_credits: usage?.original_credits ?? usage?.credits ?? 0,
+        average_ttft_ms: 1000, delivery_mode: 'best_effort_background',
+      }],
+    },
+  }]
+  const signed = await cosy.prepareSigned(cred, { endpoint: INFER, path: '/api/v1/tracking', method: 'POST', mode: 'sign', body: JSON.stringify(envelope) })
+  const res = await fetch(signed.url, { method: 'POST', headers: { ...signed.headers, 'Content-Type': 'application/json' }, body: signed.body })
+  const text = await res.text()
+  console.log(`  tracking HTTP ${res.status} url=${signed.url} resp=${text.slice(0, 160)}`)
+  return { url: signed.url, status: res.status, resp: text.slice(0, 2000) }
+}
+
+/** 归因字段信封（官方 A6e 形态的归因子集，无语义字段）。 */
+function attributionFields({ sessionId, requestId, requestSetId, withBusiness }) {
+  const f = {
+    request_id: requestId, request_set_id: requestSetId, chat_record_id: requestId,
+    session_id: sessionId,
+    chat_task: 'FREE_INPUT',
+    chat_context: { text: PROMPT, features: [], extra: { context: [], modelConfig: { key: MODEL, is_reasoning: false }, originalContent: PROMPT }, chatPrompt: '', imageUrls: null },
+    is_reply: true, is_retry: false,
+    source: 1, version: '3',
+    agent_id: 'agent_common', task_id: 'common',
+    session_type: 'qoderclicn', aliyun_user_type: '',
+    model_config: { key: MODEL, display_name: MODEL, model: '', format: 'openai', is_vl: false, is_reasoning: true, api_key: '', url: '', source: 'system', max_input_tokens: 131072 },
+  }
+  if (withBusiness) {
+    f.business = { product: 'cli', version: '1.1.57', type: 'agent', id: requestSetId, name: PROMPT.slice(0, 10), begin_at: Date.now(), stage: 'processing' }
+  }
+  return f
+}
+
+// ── 梯度 ─────────────────────────────────────────────────────────────────
+const evidence = { at: new Date().toISOString(), model: MODEL, settleMs: SETTLE_MS, arms: [] }
+const ARMS = {
+  1: async () => { // finish-only
+    const ids = { sessionId: randomUUID(), requestSetId: randomUUID() }
+    const chat = await chatOnce({})
+    const finish = await businessFinish(ids)
+    return { ids, chat, finish }
+  },
+  2: async () => { // envelope
+    const ids = { sessionId: randomUUID(), requestId: randomUUID(), requestSetId: randomUUID() }
+    const chat = await chatOnce(attributionFields({ ...ids, withBusiness: false }))
+    return { ids, chat }
+  },
+  3: async () => { // env-business
+    const ids = { sessionId: randomUUID(), requestId: randomUUID(), requestSetId: randomUUID() }
+    const chat = await chatOnce(attributionFields({ ...ids, withBusiness: true }))
+    return { ids, chat }
+  },
+  4: async () => { // env-finish
+    const ids = { sessionId: randomUUID(), requestId: randomUUID(), requestSetId: randomUUID() }
+    const chat = await chatOnce(attributionFields({ ...ids, withBusiness: true }))
+    const finish = await businessFinish(ids)
+    return { ids, chat, finish }
+  },
+  5: async () => { // tracking
+    const ids = { sessionId: randomUUID(), requestSetId: randomUUID() }
+    const chat = await chatOnce({})
+    const track = await tracking({ ...ids, usage: chat.usage })
+    return { ids, chat, track }
+  },
+  6: async () => { // 全保真信封：归因字段 + business 块 + system/parameters/tools（官方 A6e 全字段）
+    const ids = { sessionId: randomUUID(), requestId: randomUUID(), requestSetId: randomUUID() }
+    const chat = await chatOnce({
+      ...attributionFields({ ...ids, withBusiness: true }),
+      system: 'You are Qoder, an AI coding assistant.',
+      tools: [],
+      parameters: { max_tokens: 32768 },
+    })
+    return { ids, chat }
+  },
+  7: async () => { // IDE 面：session_type=qoder_work + business.product=ide（桌面客户端形态）
+    const ids = { sessionId: randomUUID(), requestId: randomUUID(), requestSetId: randomUUID() }
+    const fields = attributionFields({ ...ids, withBusiness: true })
+    fields.session_type = 'qoder_work'
+    fields.business.product = 'ide'
+    const chat = await chatOnce(fields)
+    const finishInner = await businessFinish(ids)
+    return { ids, chat, finish: finishInner }
+  },
+}
+
+for (const n of [1, 2, 3, 4, 5, 6, 7]) {
+  if (onlyArm && n !== onlyArm) continue
+  console.log(`\n══ 臂 ${n} ══`)
+  const before = await counters(`arm${n}-before`)
+  const result = await ARMS[n]()
+  console.log(`  静置 ${SETTLE_MS / 1000}s…`)
+  await sleep(SETTLE_MS)
+  const after = await counters(`arm${n}-after`)
+  const moved = ['addOnUsed', 'totalCredits', 'heatToday'].filter((k) => typeof before[k] === 'number' && typeof after[k] === 'number' && after[k] !== before[k])
+  console.log(`  → ${moved.length ? '★ 动了：' + moved.map((k) => `${k} ${before[k]}→${after[k]}`).join(', ') : '计数器不动'}`)
+  evidence.arms.push({ arm: n, before, after, moved, result })
+  await sleep(2000)
+}
+
+const movedArms = evidence.arms.filter((a) => a.moved.length).map((a) => a.arm)
+evidence.verdict = movedArms.length
+  ? `★ 臂 ${movedArms.join(',')} 让计数器增长——记账归因要素在其中`
+  : '全部臂计数器不动——归因要素未覆盖（候选：system/parameters 语义字段、sub_task、或服务端按日批处理）'
+console.log('\n【总结】', evidence.verdict)
+
+mkdirSync(PROBES_DIR, { recursive: true })
+const out = join(PROBES_DIR, `qoder-attribution-${Date.now()}.json`)
+writeFileSync(out, JSON.stringify(evidence, null, 2))
+console.log('证据 →', out)
+process.exit(0)

package/scripts/probe-qoder-flash-confirm.mjs

@@ -0,0 +1,94 @@
+#!/usr/bin/env node
+/**
+ * Qoder CN — Qwen3.8-Flash（qfmodel）上游节点状态确认探针（幂等、只读）。
+ *
+ * 背景（2026-09-22 定案，证据 docs/diagnosis-qoder-flash.md）：qfmodel 的上游后端节点
+ * `oa_qwen-plus-main` 于 04:21:38–04:21:51 之间进入持久失败——任何客户端形态（含 Qoder
+ * 官方客户端自己的签名器/元数据/body/版本号）都会拿到 HTTP 200 信封装带内业务错误
+ * `{"code":"400","message":"[FAIL]node:oa_qwen-plus-main msg:Execution failed: null"}`。
+ * 本探针只做一件事：3 次 qfmodel + 2 次对照（qmodel_38max/q37fmodel），节点恢复的瞬间
+ * 就会翻绿。
+ *
+ * 用法：
+ *   node scripts/probe-qoder-flash-confirm.mjs            # 打印 + 落证据 docs/probes/
+ *   node scripts/probe-qoder-flash-confirm.mjs --quiet    # 只打印一行结论
+ */
+
+import { mkdirSync, writeFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
+const DSH_HOME = process.env.DSH_HOME ?? join(homedir(), '.dsh')
+const PROBES_DIR = join(ROOT, 'docs', 'probes')
+const ENDPOINT = process.env.QODER_INFER ?? 'https://gateway.qoder.com.cn'
+const GAP_MS = Number(process.env.QODER_GAP_MS ?? 2000)
+const quiet = process.argv.includes('--quiet')
+
+const { readJson } = await import('../core/json-store.js')
+const { createCosyRuntime } = await import('../providers/qoder/cosy.js')
+
+const store = readJson(join(DSH_HOME, 'qoder-plugin-auth.json'))
+if (!store?.auth?.accessToken) {
+  console.error('未登录：先跑 scripts/probe-qoder-live.mjs --login')
+  process.exit(1)
+}
+const cred = { accessToken: store.auth.accessToken, machineId: store.machine?.machineId, uid: store.account?.uid }
+const cosy = createCosyRuntime({ wasmPath: join(ROOT, 'providers', 'qoder', 'qoder_auth.wasm') })
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms))
+
+/** SSE 信封 → {text, err, frames}。 */
+function dissect(raw) {
+  let text = '', err = null, frames = 0
+  for (const line of raw.split('\n')) {
+    if (!line.startsWith('data:')) continue
+    let frame; try { frame = JSON.parse(line.slice(5)) } catch { continue }
+    if (typeof frame?.body !== 'string' || frame.body === '[DONE]') continue
+    frames++
+    let chunk; try { chunk = JSON.parse(frame.body) } catch { err = frame.body.slice(0, 200); continue }
+    if (chunk.message && !chunk.choices) { err = `${chunk.code}: ${chunk.message}`; continue }
+    if (chunk.choices?.[0]?.delta?.content) text += chunk.choices[0].delta.content
+  }
+  return { text, err, frames }
+}
+
+async function probe(label, modelKey) {
+  const body = JSON.stringify({
+    model: modelKey, stream: true, stream_options: { include_usage: true },
+    messages: [{ role: 'user', content: '只回复两个字：收到' }],
+  })
+  const rec = { label, modelKey, at: new Date().toISOString() }
+  try {
+    const signed = await cosy.prepareChat(cred, { endpoint: ENDPOINT, body, modelKey, modelSource: 'system' })
+    rec.url = signed.url
+    rec.clientType = signed.headers['Cosy-ClientType']
+    const res = await fetch(signed.url, {
+      method: 'POST',
+      headers: { ...signed.headers, 'Content-Type': 'application/json', Accept: 'text/event-stream' },
+      body: signed.body,
+    })
+    rec.status = res.status
+    const raw = await res.text()
+    rec.raw = raw.slice(0, 20_000)
+    Object.assign(rec, dissect(raw))
+  } catch (e) {
+    rec.netErr = String(e?.message ?? e)
+  }
+  const verdict = rec.netErr ? `netErr=${rec.netErr}` : rec.err ? `❌ ${rec.err}` : rec.text?.trim() ? `✅ "${rec.text.trim().slice(0, 30)}"` : '⚠️ 无正文'
+  if (!quiet) console.log(`${(rec.err || rec.netErr) ? '❌' : '✅'} ${label.padEnd(28)} HTTP ${rec.status ?? '-'} frames=${rec.frames ?? 0} ${verdict}`)
+  return rec
+}
+
+const records = []
+for (let i = 1; i <= 3; i++) { records.push(await probe(`qfmodel #${i}`, 'qfmodel')); await sleep(GAP_MS) }
+for (const m of ['qmodel_38max', 'q37fmodel']) { records.push(await probe(`control ${m}`, m)); await sleep(GAP_MS) }
+
+const flashOk = records.filter((r) => r.modelKey === 'qfmodel' && !r.err && !r.netErr && r.text?.trim()).length
+const controlOk = records.filter((r) => r.modelKey !== 'qfmodel' && !r.err && !r.netErr && r.text?.trim()).length
+mkdirSync(PROBES_DIR, { recursive: true })
+const out = join(PROBES_DIR, `qoder-flash-confirm-${Date.now()}.json`)
+writeFileSync(out, JSON.stringify({ at: new Date().toISOString(), endpoint: ENDPOINT, records }, null, 2))
+console.log(`\n【结论】qfmodel 成功 ${flashOk}/3，对照成功 ${controlOk}/2 → ${flashOk > 0 ? '★ 上游节点已恢复，可复测 --suite flash' : (controlOk === 2 ? '上游节点仍故障（对照正常，链路健康）' : '⚠️ 连对照都失败：先查账号/网络')}`)
+console.log('证据 →', out)
+process.exit(0)