dsh-workbuddy-bridge 0.5.1 → 0.5.3

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as variantFor, D as WorkBuddyUpstreamClient, S as WORKBUDDY_VARIANTS, Y as resolveAppVersion, a as readHostHeartbeat, c as WORKBUDDY_BRIDGE_VERSION, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, x as CN_VARIANT } from "./heartbeat-DR6QsZ9h.js";
+import { C as variantFor, D as WorkBuddyUpstreamClient, S as WORKBUDDY_VARIANTS, X as resolveAppVersion, a as readHostHeartbeat, c as WORKBUDDY_BRIDGE_VERSION, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, x as CN_VARIANT } from "./heartbeat-BJrYAacX.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/cli/bin.ts

package/lib/{heartbeat-DR6QsZ9h.js → heartbeat-BJrYAacX.js}

@@ -366,13 +366,15 @@ async function resolveGlobalIdentity(options) {
 const UPSTREAM_CODE_KINDS = {
 	"12153": "session_dead",
 	"11128": "client",
-	"11133": "client"
+	"11133": "client",
+	"11140": "client"
 };
 /** 业务码 → 失败类别：信封 code 非 0 时的第一落点。 */
 const ENVELOPE_CODE_KINDS = {
 	12153: "session_dead",
 	11128: "client",
-	11133: "client"
+	11133: "client",
+	11140: "client"
 };
 /**
 * 文案兜底标记。**只在既无机器码也无业务码可依时使用**，且命中后必须记日志：
@@ -396,8 +398,43 @@ const TEXT_MARKERS = [
 	["offline user session not found", "session_dead"],
 	["12153", "session_dead"],
 	["11128", "client"],
-	["11133", "client"]
+	["11133", "client"],
+	["11140", "client"]
 ];
+/**
+* 上游自己的、面向用户的文案：`displayMsg` 优先，其次是 `msg`。
+*
+* 上游把「真正该给人看的那句话」放在 `displayMsg` 里（分别给出 `zh` / `zh-hant` /
+* `en` 三种拼写），而 `msg` 常常是一句机器可读的英文短语（`request illegal`）。
+* 把 `displayMsg` 丢掉的代价不是"少一句说明"：`msg` 本身看不出是封号、限流还是
+* 参数错，使用者只能看到一句无从下手的英文。
+*
+* 读取顺序固定在 `zh` → `zh-hant` → `en`：国内网关的 zh 文案是原始表述，en 是
+* 它的译文；先中文，只有上游没给中文时才退回英文。
+*
+* @param body - 响应体原文。
+* @returns 干净的、可直接展示的一行文案；读不出来返回 undefined。
+*/
+function upstreamDisplayMessage(body) {
+	const parsed = parseJson(body);
+	if (!isRecord(parsed)) return void 0;
+	const display = parsed["displayMsg"];
+	if (isRecord(display)) for (const key of [
+		"zh",
+		"zh-hant",
+		"en"
+	]) {
+		const value = display[key];
+		if (typeof value === "string" && value.trim() !== "") return value.trim();
+	}
+	const msg = parsed["msg"];
+	if (typeof msg === "string" && msg.trim() !== "") return msg.trim();
+	const extError = parsed["extError"];
+	if (isRecord(extError)) {
+		const message = extError["message"];
+		if (typeof message === "string" && message.trim() !== "") return message.trim();
+	}
+}
 /** 上游错误体：只取结构化字段，其余一概不看。 */
 const ErrorBody = z.object({
 	extError: z.object({
@@ -494,6 +531,10 @@ function parseJson(body) {
 		return;
 	}
 }
+/** 是否是一个可按键读取的对象（数组与 null 都不算）。 */
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 //#endregion
 //#region src/probe/probe.ts
 /**
@@ -538,15 +579,31 @@ function randomSentinel() {
 	return `probe_sentinel_${randomBytes(12).toString("hex")}`;
 }
 /**
-* The upstream's "this effort value is not supported" code, measured
-* 2026-09-11 (plan §4.2). It is *not* treated as a permanent protocol promise:
-* anything unrecognized degrades to `unknown` rather than to a capability
-* conclusion.
+* The upstream's "this effort value is not supported" code.
+*
+* Measured 2026-09-11 (plan §4.2) as `invalid_reasoning_effort`. It is *not* a
+* permanent protocol promise: the upstream has since respelled it to the
+* generic `invalid_parameter_value` on both endpoints, which is why that
+* spelling is recognized too. Anything unrecognized still degrades to
+* `unknown` rather than to a capability conclusion.
 */
 const INVALID_EFFORT_CODE = "invalid_reasoning_effort";
+/**
+* Generic rejection code the upstream now uses for every bad field.
+*
+* Because it names no field, a body carrying it is only attributed to the
+* effort when `extError.param` points at the effort; otherwise a rejected
+* `max_tokens` would be misread as "this level is unsupported" and shrink the
+* reported capability set.
+*/
+const GENERIC_INVALID_CODE = "invalid_parameter_value";
 /** Whether an attempt is an attributable rejection of the effort value. */
 function isEffortRejection(attempt) {
-	return attempt.status === 400 && attempt.errorCode === INVALID_EFFORT_CODE;
+	if (attempt.status !== 400) return false;
+	const code = attempt.errorCode;
+	if (code === INVALID_EFFORT_CODE) return true;
+	if (code !== GENERIC_INVALID_CODE) return false;
+	return (attempt.param ?? "").toLowerCase().includes("effort");
 }
 /** Whether an attempt shows the upstream accepted the request and streamed. */
 function isAcceptance(attempt) {
@@ -828,7 +885,8 @@ function billingHeaders(credential) {
 * Normalize an OpenAI chat-completions body for the WorkBuddy upstream:
 * force `stream: true` (the upstream rejects non-streaming), flatten
 * `tool_choice` (the upstream's field is a string; object forms return 400),
-* rewrite `developer` messages as `system`, and drop the adapter's own `off`
+* rewrite `developer` messages as `system`, neutralize the channel signature
+* (see {@link neutralizeChannelSignature}), and drop the adapter's own `off`
 * effort spelling (see {@link dropUnsupportedEffort}).
 *
 * The `developer` rewrite is load-bearing: pi-ai emits the system prompt as
@@ -855,10 +913,132 @@ function prepareChatBody(source) {
 	const obj = body;
 	obj["stream"] = true;
 	normalizeDeveloperRole(obj);
+	neutralizeChannelSignature(obj);
 	normalizeToolChoice(obj);
 	dropUnsupportedEffort(obj);
 	return JSON.stringify(obj);
 }
+/**
+* Strip the product-identity phrase the CN gateway reads as an unofficial
+* client signature.
+*
+* Measured 2026-10-21 on `copilot.tencent.com/v2/chat/completions`: a request
+* whose message bodies carry the phrase `DeepSeek Harness` answers `400` /
+* `11128` "Illegal API invocation from an unapproved channel", while the same
+* account, headers and body with the phrase rewritten answers 200. DSH injects
+* exactly that phrase as the head of its system prompt ("You are an AI agent
+* powered by DeepSeek Harness."), so every request the harness sends is
+* affected; the official desktop app never sends it.
+*
+* Two rewrites, in this order, because they solve different halves of it:
+*
+* 1. **The opener**, when a message starts with it, becomes a plain
+*    "You are an AI agent." — a readable sentence that survives upstream
+*    normalization (unlike an invisible character, which a tokenizer or a
+*    normalizer may simply drop, and which the same measurement showed the
+*    gateway still rejects once an account is restricted).
+* 2. **Any other occurrence** gets a zero-width space between the two words:
+*    lossless, the model reads the same thing, and the substring match no
+*    longer fires.
+*
+* **Path contexts are never rewritten** (`…\DeepSeek Harness\…`,
+* `…/DeepSeek Harness/…`): a real directory name carries this phrase, and a
+* zero-width space inside it would turn every tool call that quotes the path
+* into a silently wrong path. Both rewrites anchor on the surrounding slashes
+* for that reason.
+*
+* **Roles covered** — `system`, `developer` and `assistant`; `user` and `tool`
+* are left alone. Measured 2026-10-21 by ablation against the same gateway
+* (independently reproduced on the CPA-plugin side and published as
+* mmqz/cpa-multi-plugins PR #49 — a sibling fix, not this repo's upstream and
+* not a dependency): the filter reads `system` and `assistant` bodies, and in
+* that request the triggering phrases sat mostly in the **assistant history
+* echo** — a 32 KB compaction summary carried 42 brand occurrences, and
+* rewriting only `system` still answered 400. The same ablation found `user`
+* text, tool results, tool definitions, `tool_calls` arguments and
+* `reasoning_content` did not fire.
+*
+* This stays narrower than "every role" on purpose. The two excluded kinds are
+* the ones whose bytes are ground truth for the model: user input is the user's
+* own words, and a tool result is what a file or command actually returned.
+* Rewriting either would make the transcript disagree with the world the model
+* is reasoning about — a silent correctness bug traded for a filter that, per
+* the measurement, is not looking there. If the filter later widens, that is a
+* decision with fresh evidence, not something to pre-empt.
+*
+* Idempotent — a second pass finds neither the opener nor a bare phrase.
+*/
+function neutralizeChannelSignature(obj) {
+	const messages = obj["messages"];
+	if (!Array.isArray(messages)) return;
+	for (const message of messages) {
+		if (!isObject(message)) continue;
+		const role = message["role"];
+		if (role === "user" || role === "tool") continue;
+		neutralizeMessageText(message);
+		if (role === "assistant") neutralizeAssistantExtras(message);
+	}
+}
+/** Rewrite a message's string `content`, or each text part of an array `content`. */
+function neutralizeMessageText(message) {
+	const content = message["content"];
+	if (typeof content === "string") {
+		message["content"] = neutralizeSignatureText(content);
+		return;
+	}
+	if (!Array.isArray(content)) return;
+	for (const part of content) {
+		if (!isObject(part) || part["type"] !== "text") continue;
+		const text = part["text"];
+		if (typeof text === "string") part["text"] = neutralizeSignatureText(text);
+	}
+}
+/**
+* Rewrite the assistant-only carriers that can reach the wire.
+*
+* `reasoning_content` / `reasoning` are the model's own thinking echoed back on
+* a replayed assistant turn, and `tool_calls[].function.arguments` is a JSON
+* string the model wrote earlier. Both are model-generated, so rewriting them
+* keeps the transcript self-consistent, and the path guard still protects any
+* real directory name quoted inside a tool argument.
+*/
+function neutralizeAssistantExtras(message) {
+	for (const key of ["reasoning_content", "reasoning"]) {
+		const value = message[key];
+		if (typeof value === "string") message[key] = neutralizeSignatureText(value);
+	}
+	const toolCalls = message["tool_calls"];
+	if (!Array.isArray(toolCalls)) return;
+	for (const call of toolCalls) {
+		if (!isObject(call)) continue;
+		const fn = call["function"];
+		if (!isObject(fn)) continue;
+		const args = fn["arguments"];
+		if (typeof args === "string") fn["arguments"] = neutralizeSignatureText(args);
+	}
+}
+/** Apply the two signature rewrites to one string; see {@link neutralizeChannelSignature}. */
+function neutralizeSignatureText(text) {
+	return text.replace(CHANNEL_OPENER, "$1You are an AI agent.").replace(CHANNEL_SIGNATURE_PHRASE, `DeepSeek${ZERO_WIDTH_SPACE}$1Harness`);
+}
+/**
+* The opener DSH puts at the head of every system prompt.
+*
+* Leading whitespace and a BOM are tolerated (group 1 carries them through to
+* the replacement, so the rewrite never touches anything but the sentence), and
+* every gap between the words is matched as whitespace so a respelling cannot
+* walk past it. Case-insensitive for the same reason.
+*/
+const CHANNEL_OPENER = /^([\s\uFEFF]*)You\s+are\s+an\s+AI\s+agent\s+powered\s+by\s+DeepSeek[\s\u00A0]+Harness\s*\./i;
+/**
+* The bare phrase, with slash guards on both sides so a real path survives.
+*
+* The capture keeps whatever whitespace the original used, so the rewritten
+* sentence reads identically.
+*/
+const CHANNEL_SIGNATURE_PHRASE = /(?<![\\/])DeepSeek([\s\u00A0]+)Harness(?![\\/])/gi;
+/** U+200B: invisible to a reader and to the model, breaks a substring match. */
+const ZERO_WIDTH_SPACE = "​";
 /** Rewrite `role: "developer"` messages to `role: "system"` (upstream rejects developer). */
 function normalizeDeveloperRole(obj) {
 	const messages = obj["messages"];
@@ -1338,7 +1518,14 @@ var WorkBuddyUpstreamClient = class {
 		};
 	}
 };
-/** Pull `extError.code` out of an upstream error body, if it is shaped that way. */
+/**
+* Pull the structured failure fields out of an upstream error body.
+*
+* `extError.param` matters as much as the code: the upstream reuses one generic
+* code (`invalid_parameter_value`) for every rejected field, so the parameter
+* name is the only thing that attributes the rejection to `reasoning.effort`
+* rather than to `max_tokens` or anything else.
+*/
 function errorCodeOf(text) {
 	try {
 		const parsed = JSON.parse(text);
@@ -1346,7 +1533,12 @@ function errorCodeOf(text) {
 			const extError = parsed["extError"];
 			if (typeof extError === "object" && extError !== null && !Array.isArray(extError)) {
 				const code = extError["code"];
-				if (typeof code === "string") return {
+				const param = extError["param"];
+				if (typeof code === "string") return typeof param === "string" ? {
+					errorCode: code,
+					detail: code,
+					param
+				} : {
 					errorCode: code,
 					detail: code
 				};
@@ -3725,7 +3917,7 @@ var WorkBuddyCatalog = class {
 };
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_BRIDGE_VERSION = "0.5.1";
+const WORKBUDDY_BRIDGE_VERSION = "0.5.3";
 //#endregion
 //#region src/web/heartbeat.ts
 /**
@@ -3896,4 +4088,4 @@ function isHeartbeatProcessAlive(heartbeat) {
 	return startAtMs <= heartbeat.registeredAt;
 }
 //#endregion
-export { parseModelCatalog as A, chatUserAgent as B, variantFor as C, WorkBuddyUpstreamClient as D, WORKBUDDY_STATUS_PATH as E, probeModel as F, WORKBUDDY_APP_VERSION_FILENAME as G, readCliVersion as H, randomSentinel as I, readBundleVersion as J, appUserAgent as K, classifyUpstreamError as L, prepareInternationalChatBody as M, regionOf as N, modelWithCurrentPromotion as O, PROBE_EFFORT_CANDIDATES as P, CN_APP_VERSION_FILENAME as R, WORKBUDDY_VARIANTS as S, WORKBUDDY_PROBE_PATH as T, resolveChatIdentity as U, fallbackChatIdentity as V, validCliVersion as W, validAppVersion as X, resolveAppVersion as Y, desktopAuthCandidatesFor as _, readHostHeartbeat as a, AI_VARIANT as b, WORKBUDDY_BRIDGE_VERSION as c, WorkBuddyCatalog as d, WORKBUDDY_AUTH_FILENAME as f, defaultDesktopAuthPath as g, defaultDesktopAuthCandidates as h, processStartTimeMs as i, prepareChatBody as j, normalizeCredits as k, FALLBACK_WORKBUDDY_AI_MODELS as l, WorkBuddyCredentialStore as m, clearHostHeartbeat as n, workbuddyHostHeartbeatPath as o, WORKBUDDY_AUTH_FILE_ENV as p, installedAppVersion as q, isHeartbeatProcessAlive as r, writeHostHeartbeat as s, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, FALLBACK_WORKBUDDY_MODELS as u, parseWorkBuddyAuth as v, WORKBUDDY_CREDIT_PATH as w, CN_VARIANT as x, workbuddyOwnAuthPath as y, FALLBACK_CN_APP_VERSION as z };
+export { parseModelCatalog as A, FALLBACK_CN_APP_VERSION as B, variantFor as C, WorkBuddyUpstreamClient as D, WORKBUDDY_STATUS_PATH as E, probeModel as F, validCliVersion as G, fallbackChatIdentity as H, randomSentinel as I, installedAppVersion as J, WORKBUDDY_APP_VERSION_FILENAME as K, classifyUpstreamError as L, prepareInternationalChatBody as M, regionOf as N, modelWithCurrentPromotion as O, PROBE_EFFORT_CANDIDATES as P, upstreamDisplayMessage as R, WORKBUDDY_VARIANTS as S, WORKBUDDY_PROBE_PATH as T, readCliVersion as U, chatUserAgent as V, resolveChatIdentity as W, resolveAppVersion as X, readBundleVersion as Y, validAppVersion as Z, desktopAuthCandidatesFor as _, readHostHeartbeat as a, AI_VARIANT as b, WORKBUDDY_BRIDGE_VERSION as c, WorkBuddyCatalog as d, WORKBUDDY_AUTH_FILENAME as f, defaultDesktopAuthPath as g, defaultDesktopAuthCandidates as h, processStartTimeMs as i, prepareChatBody as j, normalizeCredits as k, FALLBACK_WORKBUDDY_AI_MODELS as l, WorkBuddyCredentialStore as m, clearHostHeartbeat as n, workbuddyHostHeartbeatPath as o, WORKBUDDY_AUTH_FILE_ENV as p, appUserAgent as q, isHeartbeatProcessAlive as r, writeHostHeartbeat as s, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, FALLBACK_WORKBUDDY_MODELS as u, parseWorkBuddyAuth as v, WORKBUDDY_CREDIT_PATH as w, CN_VARIANT as x, workbuddyOwnAuthPath as y, CN_APP_VERSION_FILENAME as z };

package/lib/index.d.ts

@@ -424,6 +424,13 @@ interface ProbeAttempt {
   streamed: boolean;
   /** `extError.code` from a JSON error body, when present. */
   errorCode?: string;
+  /**
+   * `extError.param` from the same body.
+   *
+   * Load-bearing since the upstream started reusing one generic rejection code
+   * for every field: it is what attributes the rejection to the effort value.
+   */
+  param?: string;
   /** Free-form detail for logs; never shown as a capability claim. */
   detail?: string;
 }
@@ -613,7 +620,8 @@ declare function regionOf(domain: string): WorkBuddyRegion;
  * Normalize an OpenAI chat-completions body for the WorkBuddy upstream:
  * force `stream: true` (the upstream rejects non-streaming), flatten
  * `tool_choice` (the upstream's field is a string; object forms return 400),
- * rewrite `developer` messages as `system`, and drop the adapter's own `off`
+ * rewrite `developer` messages as `system`, neutralize the channel signature
+ * (see {@link neutralizeChannelSignature}), and drop the adapter's own `off`
  * effort spelling (see {@link dropUnsupportedEffort}).
  *
  * The `developer` rewrite is load-bearing: pi-ai emits the system prompt as

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as parseModelCatalog, B as chatUserAgent, C as variantFor, D as WorkBuddyUpstreamClient, F as probeModel, G as WORKBUDDY_APP_VERSION_FILENAME, H as readCliVersion, I as randomSentinel, J as readBundleVersion, K as appUserAgent, L as classifyUpstreamError, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as CN_APP_VERSION_FILENAME, S as WORKBUDDY_VARIANTS, U as resolveChatIdentity, V as fallbackChatIdentity, W as validCliVersion, X as validAppVersion, Y as resolveAppVersion, _ as desktopAuthCandidatesFor, a as readHostHeartbeat, b as AI_VARIANT, c as WORKBUDDY_BRIDGE_VERSION, d as WorkBuddyCatalog, f as WORKBUDDY_AUTH_FILENAME, g as defaultDesktopAuthPath, h as defaultDesktopAuthCandidates, i as processStartTimeMs, j as prepareChatBody, k as normalizeCredits, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as WORKBUDDY_AUTH_FILE_ENV, q as installedAppVersion, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS, v as parseWorkBuddyAuth, w as WORKBUDDY_CREDIT_PATH, x as CN_VARIANT, y as workbuddyOwnAuthPath, z as FALLBACK_CN_APP_VERSION } from "./heartbeat-DR6QsZ9h.js";
+import { A as parseModelCatalog, B as FALLBACK_CN_APP_VERSION, C as variantFor, D as WorkBuddyUpstreamClient, F as probeModel, G as validCliVersion, H as fallbackChatIdentity, I as randomSentinel, J as installedAppVersion, K as WORKBUDDY_APP_VERSION_FILENAME, L as classifyUpstreamError, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as upstreamDisplayMessage, S as WORKBUDDY_VARIANTS, U as readCliVersion, V as chatUserAgent, W as resolveChatIdentity, X as resolveAppVersion, Y as readBundleVersion, Z as validAppVersion, _ as desktopAuthCandidatesFor, a as readHostHeartbeat, b as AI_VARIANT, c as WORKBUDDY_BRIDGE_VERSION, d as WorkBuddyCatalog, f as WORKBUDDY_AUTH_FILENAME, g as defaultDesktopAuthPath, h as defaultDesktopAuthCandidates, i as processStartTimeMs, j as prepareChatBody, k as normalizeCredits, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as WORKBUDDY_AUTH_FILE_ENV, q as appUserAgent, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS, v as parseWorkBuddyAuth, w as WORKBUDDY_CREDIT_PATH, x as CN_VARIANT, y as workbuddyOwnAuthPath, z as CN_APP_VERSION_FILENAME } from "./heartbeat-BJrYAacX.js";
 import z from "@deepseek-ai/schemastery";
 import { dirname, join, resolve } from "node:path";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
@@ -805,6 +805,25 @@ function writeOpenAIError(res, status, kind, message) {
 		code: kind
 	} });
 }
+/**
+* The one-line reason a failed upstream request is reported with.
+*
+* The host does not read our HTTP status to classify a failure: `dsh-llm-pi-ai`
+* matches the **message text** (`if (/\b(?:401|403)\b/.test(message)) return
+* "AUTH"`), and the chat UI then replaces whatever we wrote with
+* "API key is invalid". So a status may only appear here when the failure
+* really is an authentication one; every other class keeps its digits out, or
+* a restricted account or a rejected prompt reaches the user as a bad key.
+*
+* The upstream's own `displayMsg` wins over the raw body: it is the sentence
+* written for a human ("账号存在异常行为，已被限制使用"), while the body is a JSON
+* document whose `msg` is often a machine phrase such as `request illegal`.
+*/
+function failureMessage(result) {
+	const reason = upstreamDisplayMessage(result.message) ?? result.message.slice(0, 400);
+	const head = `workbuddy upstream ${result.kind}`;
+	return result.kind === "session_dead" ? `${head} (http ${result.status}): ${reason}` : `${head}: ${reason}`;
+}
 /** Read a request body with a size cap; over-limit bodies fail the request. */
 function readBody$1(req) {
 	return new Promise((resolve, reject) => {
@@ -916,7 +935,7 @@ function createWorkBuddyShim(options) {
 		req.on("close", () => controller.abort());
 		const result = await client.chatStream(credential, prepared, controller.signal);
 		if (!result.ok) {
-			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, `workbuddy upstream ${result.kind} (http ${result.status}): ${result.message.slice(0, 400)}`);
+			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, failureMessage(result));
 			return;
 		}
 		res.writeHead(200, {

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-bridge",
   "displayName": "DSH WorkBuddy Bridge",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "author": "zlZayn",
   "keywords": [
     "dsh",