dsh-workbuddy-bridge 0.5.2 → 0.5.4

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as variantFor, D as WorkBuddyUpstreamClient, S as WORKBUDDY_VARIANTS, X as resolveAppVersion, a as readHostHeartbeat, c as WORKBUDDY_BRIDGE_VERSION, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, x as CN_VARIANT } from "./heartbeat-6xWs7ak3.js";
+import { C as variantFor, D as WorkBuddyUpstreamClient, S as WORKBUDDY_VARIANTS, X as resolveAppVersion, a as readHostHeartbeat, c as WORKBUDDY_BRIDGE_VERSION, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, x as CN_VARIANT } from "./heartbeat-CKHC_c0-.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/cli/bin.ts

package/lib/{heartbeat-6xWs7ak3.js → heartbeat-CKHC_c0-.js}

@@ -839,6 +839,37 @@ function commonHeaders(credential) {
 	};
 }
 /**
+* Per-request channel identity headers the international gateway verifies.
+*
+* Measured 2026-10-23 against `www.workbuddy.ai/v2/chat/completions`: the same
+* account, credential, UA and body answer `400` / `11128` ("request illegal",
+* channel verification) without these headers, and `200` SSE with them. The
+* official desktop app sends this trace/conversation quintet on every chat
+* request; the CN gateway accepts requests without it, so the injection stays
+* global-region-only to keep the CN wire byte-identical to what passes today.
+*
+* `X-Trace-ID` carries a bare 32-hex id (the OTel trace-id form the app uses);
+* the other four are UUIDs minted per request, exactly like the app does.
+*/
+function channelIdentityHeaders() {
+	const uuid = () => {
+		const b = randomBytes(16);
+		const b6 = b[6] ?? 0;
+		const b8 = b[8] ?? 0;
+		b[6] = b6 & 15 | 64;
+		b[8] = b8 & 63 | 128;
+		const h = b.toString("hex");
+		return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+	};
+	return {
+		"X-Trace-ID": randomBytes(16).toString("hex"),
+		"X-Request-ID": uuid(),
+		"X-Conversation-ID": uuid(),
+		"X-Conversation-Request-ID": uuid(),
+		"X-Conversation-Message-ID": uuid()
+	};
+}
+/**
 * Chat request headers, including the X-No-* conventions the official CLI uses.
 *
 * `userAgent` carries the desktop identity for chat and probe requests; when
@@ -853,7 +884,8 @@ function chatHeaders(credential, userAgent) {
 		...credential.uid === "" ? { "X-No-User-Id": "1" } : { "X-User-Id": credential.uid },
 		...credential.enterpriseId === void 0 || credential.enterpriseId === "" ? { "X-No-Enterprise-Id": "1" } : { "X-Enterprise-Id": credential.enterpriseId },
 		...credential.domain === "" ? { "X-No-Department-Info": "1" } : { "X-Domain": credential.domain },
-		"X-Product": "SaaS"
+		"X-Product": "SaaS",
+		...regionOf(credential.domain) === "global" ? channelIdentityHeaders() : {}
 	};
 }
 /** Refresh-endpoint headers; X-Refresh-Token appears here and nowhere else. */
@@ -923,12 +955,12 @@ function prepareChatBody(source) {
 * client signature.
 *
 * Measured 2026-10-21 on `copilot.tencent.com/v2/chat/completions`: a request
-* whose **system/developer** message carries the phrase `DeepSeek Harness`
-* answers `400` / `11128` "Illegal API invocation from an unapproved channel",
-* while the same account, headers and body with the phrase rewritten answers
-* 200. DSH injects exactly that phrase as the head of its system prompt
-* ("You are an AI agent powered by DeepSeek Harness."), so every request the
-* harness sends is affected; the official desktop app never sends it.
+* whose message bodies carry the phrase `DeepSeek Harness` answers `400` /
+* `11128` "Illegal API invocation from an unapproved channel", while the same
+* account, headers and body with the phrase rewritten answers 200. DSH injects
+* exactly that phrase as the head of its system prompt ("You are an AI agent
+* powered by DeepSeek Harness."), so every request the harness sends is
+* affected; the official desktop app never sends it.
 *
 * Two rewrites, in this order, because they solve different halves of it:
 *
@@ -947,10 +979,26 @@ function prepareChatBody(source) {
 * into a silently wrong path. Both rewrites anchor on the surrounding slashes
 * for that reason.
 *
-* Only `system` / `developer` messages are touched: the same measurement shows
-* user messages are not inspected, and rewriting user content would corrupt
-* data the plugin has no business editing. Idempotent — a second pass finds
-* neither the opener nor a bare phrase.
+* **Roles covered** — `system`, `developer` and `assistant`; `user` and `tool`
+* are left alone. Measured 2026-10-21 by ablation against the same gateway
+* (independently reproduced on the CPA-plugin side and published as
+* mmqz/cpa-multi-plugins PR #49 — a sibling fix, not this repo's upstream and
+* not a dependency): the filter reads `system` and `assistant` bodies, and in
+* that request the triggering phrases sat mostly in the **assistant history
+* echo** — a 32 KB compaction summary carried 42 brand occurrences, and
+* rewriting only `system` still answered 400. The same ablation found `user`
+* text, tool results, tool definitions, `tool_calls` arguments and
+* `reasoning_content` did not fire.
+*
+* This stays narrower than "every role" on purpose. The two excluded kinds are
+* the ones whose bytes are ground truth for the model: user input is the user's
+* own words, and a tool result is what a file or command actually returned.
+* Rewriting either would make the transcript disagree with the world the model
+* is reasoning about — a silent correctness bug traded for a filter that, per
+* the measurement, is not looking there. If the filter later widens, that is a
+* decision with fresh evidence, not something to pre-empt.
+*
+* Idempotent — a second pass finds neither the opener nor a bare phrase.
 */
 function neutralizeChannelSignature(obj) {
 	const messages = obj["messages"];
@@ -958,18 +1006,47 @@ function neutralizeChannelSignature(obj) {
 	for (const message of messages) {
 		if (!isObject(message)) continue;
 		const role = message["role"];
-		if (role !== "system" && role !== "developer") continue;
-		const content = message["content"];
-		if (typeof content === "string") {
-			message["content"] = neutralizeSignatureText(content);
-			continue;
-		}
-		if (!Array.isArray(content)) continue;
-		for (const part of content) {
-			if (!isObject(part) || part["type"] !== "text") continue;
-			const text = part["text"];
-			if (typeof text === "string") part["text"] = neutralizeSignatureText(text);
-		}
+		if (role === "user" || role === "tool") continue;
+		neutralizeMessageText(message);
+		if (role === "assistant") neutralizeAssistantExtras(message);
+	}
+}
+/** Rewrite a message's string `content`, or each text part of an array `content`. */
+function neutralizeMessageText(message) {
+	const content = message["content"];
+	if (typeof content === "string") {
+		message["content"] = neutralizeSignatureText(content);
+		return;
+	}
+	if (!Array.isArray(content)) return;
+	for (const part of content) {
+		if (!isObject(part) || part["type"] !== "text") continue;
+		const text = part["text"];
+		if (typeof text === "string") part["text"] = neutralizeSignatureText(text);
+	}
+}
+/**
+* Rewrite the assistant-only carriers that can reach the wire.
+*
+* `reasoning_content` / `reasoning` are the model's own thinking echoed back on
+* a replayed assistant turn, and `tool_calls[].function.arguments` is a JSON
+* string the model wrote earlier. Both are model-generated, so rewriting them
+* keeps the transcript self-consistent, and the path guard still protects any
+* real directory name quoted inside a tool argument.
+*/
+function neutralizeAssistantExtras(message) {
+	for (const key of ["reasoning_content", "reasoning"]) {
+		const value = message[key];
+		if (typeof value === "string") message[key] = neutralizeSignatureText(value);
+	}
+	const toolCalls = message["tool_calls"];
+	if (!Array.isArray(toolCalls)) return;
+	for (const call of toolCalls) {
+		if (!isObject(call)) continue;
+		const fn = call["function"];
+		if (!isObject(fn)) continue;
+		const args = fn["arguments"];
+		if (typeof args === "string") fn["arguments"] = neutralizeSignatureText(args);
 	}
 }
 /** Apply the two signature rewrites to one string; see {@link neutralizeChannelSignature}. */
@@ -3872,7 +3949,7 @@ var WorkBuddyCatalog = class {
 };
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_BRIDGE_VERSION = "0.5.2";
+const WORKBUDDY_BRIDGE_VERSION = "0.5.4";
 //#endregion
 //#region src/web/heartbeat.ts
 /**

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as parseModelCatalog, B as FALLBACK_CN_APP_VERSION, C as variantFor, D as WorkBuddyUpstreamClient, F as probeModel, G as validCliVersion, H as fallbackChatIdentity, I as randomSentinel, J as installedAppVersion, K as WORKBUDDY_APP_VERSION_FILENAME, L as classifyUpstreamError, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as upstreamDisplayMessage, S as WORKBUDDY_VARIANTS, U as readCliVersion, V as chatUserAgent, W as resolveChatIdentity, X as resolveAppVersion, Y as readBundleVersion, Z as validAppVersion, _ as desktopAuthCandidatesFor, a as readHostHeartbeat, b as AI_VARIANT, c as WORKBUDDY_BRIDGE_VERSION, d as WorkBuddyCatalog, f as WORKBUDDY_AUTH_FILENAME, g as defaultDesktopAuthPath, h as defaultDesktopAuthCandidates, i as processStartTimeMs, j as prepareChatBody, k as normalizeCredits, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as WORKBUDDY_AUTH_FILE_ENV, q as appUserAgent, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS, v as parseWorkBuddyAuth, w as WORKBUDDY_CREDIT_PATH, x as CN_VARIANT, y as workbuddyOwnAuthPath, z as CN_APP_VERSION_FILENAME } from "./heartbeat-6xWs7ak3.js";
+import { A as parseModelCatalog, B as FALLBACK_CN_APP_VERSION, C as variantFor, D as WorkBuddyUpstreamClient, F as probeModel, G as validCliVersion, H as fallbackChatIdentity, I as randomSentinel, J as installedAppVersion, K as WORKBUDDY_APP_VERSION_FILENAME, L as classifyUpstreamError, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as upstreamDisplayMessage, S as WORKBUDDY_VARIANTS, U as readCliVersion, V as chatUserAgent, W as resolveChatIdentity, X as resolveAppVersion, Y as readBundleVersion, Z as validAppVersion, _ as desktopAuthCandidatesFor, a as readHostHeartbeat, b as AI_VARIANT, c as WORKBUDDY_BRIDGE_VERSION, d as WorkBuddyCatalog, f as WORKBUDDY_AUTH_FILENAME, g as defaultDesktopAuthPath, h as defaultDesktopAuthCandidates, i as processStartTimeMs, j as prepareChatBody, k as normalizeCredits, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as WORKBUDDY_AUTH_FILE_ENV, q as appUserAgent, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS, v as parseWorkBuddyAuth, w as WORKBUDDY_CREDIT_PATH, x as CN_VARIANT, y as workbuddyOwnAuthPath, z as CN_APP_VERSION_FILENAME } from "./heartbeat-CKHC_c0-.js";
 import z from "@deepseek-ai/schemastery";
 import { dirname, join, resolve } from "node:path";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-bridge",
   "displayName": "DSH WorkBuddy Bridge",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "author": "zlZayn",
   "keywords": [
     "dsh",