dsh-workbuddy-bridge 0.5.3 → 0.5.5

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as variantFor, D as WorkBuddyUpstreamClient, S as WORKBUDDY_VARIANTS, X as resolveAppVersion, a as readHostHeartbeat, c as WORKBUDDY_BRIDGE_VERSION, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, x as CN_VARIANT } from "./heartbeat-BJrYAacX.js";
+import { C as variantFor, D as WorkBuddyUpstreamClient, S as WORKBUDDY_VARIANTS, Z as resolveAppVersion, a as readHostHeartbeat, c as WORKBUDDY_BRIDGE_VERSION, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, o as workbuddyHostHeartbeatPath, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, x as CN_VARIANT } from "./heartbeat-DYtNMdMm.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/cli/bin.ts

package/lib/{heartbeat-BJrYAacX.js → heartbeat-DYtNMdMm.js}

@@ -839,6 +839,37 @@ function commonHeaders(credential) {
 	};
 }
 /**
+* Per-request channel identity headers the international gateway verifies.
+*
+* Measured 2026-10-23 against `www.workbuddy.ai/v2/chat/completions`: the same
+* account, credential, UA and body answer `400` / `11128` ("request illegal",
+* channel verification) without these headers, and `200` SSE with them. The
+* official desktop app sends this trace/conversation quintet on every chat
+* request; the CN gateway accepts requests without it, so the injection stays
+* global-region-only to keep the CN wire byte-identical to what passes today.
+*
+* `X-Trace-ID` carries a bare 32-hex id (the OTel trace-id form the app uses);
+* the other four are UUIDs minted per request, exactly like the app does.
+*/
+function channelIdentityHeaders() {
+	const uuid = () => {
+		const b = randomBytes(16);
+		const b6 = b[6] ?? 0;
+		const b8 = b[8] ?? 0;
+		b[6] = b6 & 15 | 64;
+		b[8] = b8 & 63 | 128;
+		const h = b.toString("hex");
+		return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+	};
+	return {
+		"X-Trace-ID": randomBytes(16).toString("hex"),
+		"X-Request-ID": uuid(),
+		"X-Conversation-ID": uuid(),
+		"X-Conversation-Request-ID": uuid(),
+		"X-Conversation-Message-ID": uuid()
+	};
+}
+/**
 * Chat request headers, including the X-No-* conventions the official CLI uses.
 *
 * `userAgent` carries the desktop identity for chat and probe requests; when
@@ -853,7 +884,8 @@ function chatHeaders(credential, userAgent) {
 		...credential.uid === "" ? { "X-No-User-Id": "1" } : { "X-User-Id": credential.uid },
 		...credential.enterpriseId === void 0 || credential.enterpriseId === "" ? { "X-No-Enterprise-Id": "1" } : { "X-Enterprise-Id": credential.enterpriseId },
 		...credential.domain === "" ? { "X-No-Department-Info": "1" } : { "X-Domain": credential.domain },
-		"X-Product": "SaaS"
+		"X-Product": "SaaS",
+		...regionOf(credential.domain) === "global" ? channelIdentityHeaders() : {}
 	};
 }
 /** Refresh-endpoint headers; X-Refresh-Token appears here and nowhere else. */
@@ -1017,11 +1049,67 @@ function neutralizeAssistantExtras(message) {
 		if (typeof args === "string") fn["arguments"] = neutralizeSignatureText(args);
 	}
 }
-/** Apply the two signature rewrites to one string; see {@link neutralizeChannelSignature}. */
+/**
+* Rewrite the measured channel-gate fingerprints in one text blob.
+*
+* Exported for tests and for callers that assemble a body themselves.
+* Idempotent: every `to` differs from its `from` and recreates no other `from`.
+*/
+function rewriteChannelGateSentences(text) {
+	let out = text;
+	for (const [from, to] of [...IDENTITY_REWRITES, ...FILE_REFERENCE_REWRITES]) if (out.includes(from)) out = out.split(from).join(to);
+	return out;
+}
+/**
+* Apply the signature rewrites to one string; see {@link neutralizeChannelSignature}.
+*
+* Every rewrite is a **real wording change**. The zero-width-space variant this
+* function used until 2026-10-29 is retired: both reference implementations
+* measured that the CN gateway normalizes invisible characters before matching,
+* so a U+200B separator was equivalent to not rewriting at all.
+*/
 function neutralizeSignatureText(text) {
-	return text.replace(CHANNEL_OPENER, "$1You are an AI agent.").replace(CHANNEL_SIGNATURE_PHRASE, `DeepSeek${ZERO_WIDTH_SPACE}$1Harness`);
+	return rewriteChannelGateSentences(text.replace(CHANNEL_OPENER, "$1You are an AI agent.").replace(CHANNEL_SIGNATURE_PHRASE, "the agent runtime"));
 }
 /**
+* DSH's identity lines. The gate matches each one **independently** (measured
+* 2026-10-29 by two probes on the sibling plugin), so a body whose brand is
+* already neutralized still fails on these.
+*/
+const IDENTITY_REWRITES = [
+	["You are a helpful AI assistant.", "You are a capable AI helper."],
+	["You are an AI assistant", "You are an AI agent."],
+	["You are a coding agent powered by the ", "You are a coding agent running on the "],
+	["You are interacting with the user through the DeepSeek Harness web interface", "You are working with the user inside the DeepSeek Harness web interface"],
+	["Agent Teams is available in this session", "Agent Teams is enabled for this session"]
+];
+/**
+* The @-path paragraph `@deepseek-ai/dsh-file-reference` injects into every
+* system prompt — a **combination** fingerprint, not one magic sentence:
+* every sentence alone answers 200, the paragraph answers 400, and rewriting
+* one sentence breaks it (all three measured on 2026-10-27→29 by the two
+* reference plugins). Hence one row per sentence: a single whole-paragraph
+* literal would stop matching the moment the host rewords one word.
+*
+* The `from` strings come from the upstream reports' wording. A capture of THIS
+* host (issue #25 diagnostic, `~/.dsh/workbuddy-sent-body.json`) shows it
+* already ships several of the neutralized forms, so most rows are no-ops here
+* and are kept for hosts that still send the originals. Only `from` strings a
+* measurement actually produced appear in the table — an unmatched sentence
+* passes through byte-identical rather than being guessed at.
+*/
+const FILE_REFERENCE_REWRITES = [
+	["Paths prefixed with @ point to files the user referenced.", "Tokens starting with @ are locations the user explicitly named."],
+	["Relative paths resolve against the working directory;", "Relative paths are resolved against the workspace root;"],
+	["absolute paths identify files or directories on the host.", "absolute paths point at files or directories on the host."],
+	["A trailing slash marks a directory:", "A trailing slash indicates a directory:"],
+	["list it when its contents matter.", "list it whenever its contents matter."],
+	["Anything else is a file:", "Everything else is a file:"],
+	["use the read tool when its contents are needed,", "use the read tool whenever you need its contents,"],
+	["and do not claim to have inspected it before reading.", "and never claim to have inspected it before reading it."],
+	["@\"...\" quotes a path containing spaces.", "A path containing spaces is quoted with @\"...\"."]
+];
+/**
 * The opener DSH puts at the head of every system prompt.
 *
 * Leading whitespace and a BOM are tolerated (group 1 carries them through to
@@ -1037,8 +1125,24 @@ const CHANNEL_OPENER = /^([\s\uFEFF]*)You\s+are\s+an\s+AI\s+agent\s+powered\s+by
 * sentence reads identically.
 */
 const CHANNEL_SIGNATURE_PHRASE = /(?<![\\/])DeepSeek([\s\u00A0]+)Harness(?![\\/])/gi;
-/** U+200B: invisible to a reader and to the model, breaks a substring match. */
-const ZERO_WIDTH_SPACE = "​";
+/**
+* The upstream refusal that means "content filter", not "bad request".
+*
+* Two shapes reach us and both must be recognised:
+*
+* - the documented gate form, `{"code":11-128,"msg":"Illegal API invocation…"}`;
+* - the shape issue #25 actually renders (reproduced 2026-10-29):
+*   `{"message":"请求被拦截，请重新发送","type":"client","code":"client"}` — **no
+*   `11-128` anywhere**, so a code-only test misses the exact case the hint
+*   exists for.
+*/
+const CHANNEL_GATE_CODE = /\b11-128\b/;
+/** The CN gateway's user-facing block copy, which survives even when the code does not. */
+const CHANNEL_GATE_COPY = /请求被拦截/;
+/** True when an upstream body is a channel-gate refusal; see {@link CHANNEL_GATE_CODE}. */
+function isChannelGateBody(body) {
+	return CHANNEL_GATE_CODE.test(body) || CHANNEL_GATE_COPY.test(body);
+}
 /** Rewrite `role: "developer"` messages to `role: "system"` (upstream rejects developer). */
 function normalizeDeveloperRole(obj) {
 	const messages = obj["messages"];
@@ -3917,7 +4021,7 @@ var WorkBuddyCatalog = class {
 };
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_BRIDGE_VERSION = "0.5.3";
+const WORKBUDDY_BRIDGE_VERSION = "0.5.5";
 //#endregion
 //#region src/web/heartbeat.ts
 /**
@@ -4088,4 +4192,4 @@ function isHeartbeatProcessAlive(heartbeat) {
 	return startAtMs <= heartbeat.registeredAt;
 }
 //#endregion
-export { parseModelCatalog as A, FALLBACK_CN_APP_VERSION as B, variantFor as C, WorkBuddyUpstreamClient as D, WORKBUDDY_STATUS_PATH as E, probeModel as F, validCliVersion as G, fallbackChatIdentity as H, randomSentinel as I, installedAppVersion as J, WORKBUDDY_APP_VERSION_FILENAME as K, classifyUpstreamError as L, prepareInternationalChatBody as M, regionOf as N, modelWithCurrentPromotion as O, PROBE_EFFORT_CANDIDATES as P, upstreamDisplayMessage as R, WORKBUDDY_VARIANTS as S, WORKBUDDY_PROBE_PATH as T, readCliVersion as U, chatUserAgent as V, resolveChatIdentity as W, resolveAppVersion as X, readBundleVersion as Y, validAppVersion as Z, desktopAuthCandidatesFor as _, readHostHeartbeat as a, AI_VARIANT as b, WORKBUDDY_BRIDGE_VERSION as c, WorkBuddyCatalog as d, WORKBUDDY_AUTH_FILENAME as f, defaultDesktopAuthPath as g, defaultDesktopAuthCandidates as h, processStartTimeMs as i, prepareChatBody as j, normalizeCredits as k, FALLBACK_WORKBUDDY_AI_MODELS as l, WorkBuddyCredentialStore as m, clearHostHeartbeat as n, workbuddyHostHeartbeatPath as o, WORKBUDDY_AUTH_FILE_ENV as p, appUserAgent as q, isHeartbeatProcessAlive as r, writeHostHeartbeat as s, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, FALLBACK_WORKBUDDY_MODELS as u, parseWorkBuddyAuth as v, WORKBUDDY_CREDIT_PATH as w, CN_VARIANT as x, workbuddyOwnAuthPath as y, CN_APP_VERSION_FILENAME as z };
+export { normalizeCredits as A, CN_APP_VERSION_FILENAME as B, variantFor as C, WorkBuddyUpstreamClient as D, WORKBUDDY_STATUS_PATH as E, PROBE_EFFORT_CANDIDATES as F, resolveChatIdentity as G, chatUserAgent as H, probeModel as I, appUserAgent as J, validCliVersion as K, randomSentinel as L, prepareChatBody as M, prepareInternationalChatBody as N, isChannelGateBody as O, regionOf as P, validAppVersion as Q, classifyUpstreamError as R, WORKBUDDY_VARIANTS as S, WORKBUDDY_PROBE_PATH as T, fallbackChatIdentity as U, FALLBACK_CN_APP_VERSION as V, readCliVersion as W, readBundleVersion as X, installedAppVersion as Y, resolveAppVersion as Z, desktopAuthCandidatesFor as _, readHostHeartbeat as a, AI_VARIANT as b, WORKBUDDY_BRIDGE_VERSION as c, WorkBuddyCatalog as d, WORKBUDDY_AUTH_FILENAME as f, defaultDesktopAuthPath as g, defaultDesktopAuthCandidates as h, processStartTimeMs as i, parseModelCatalog as j, modelWithCurrentPromotion as k, FALLBACK_WORKBUDDY_AI_MODELS as l, WorkBuddyCredentialStore as m, clearHostHeartbeat as n, workbuddyHostHeartbeatPath as o, WORKBUDDY_AUTH_FILE_ENV as p, WORKBUDDY_APP_VERSION_FILENAME as q, isHeartbeatProcessAlive as r, writeHostHeartbeat as s, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, FALLBACK_WORKBUDDY_MODELS as u, parseWorkBuddyAuth as v, WORKBUDDY_CREDIT_PATH as w, CN_VARIANT as x, workbuddyOwnAuthPath as y, upstreamDisplayMessage as z };

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as parseModelCatalog, B as FALLBACK_CN_APP_VERSION, C as variantFor, D as WorkBuddyUpstreamClient, F as probeModel, G as validCliVersion, H as fallbackChatIdentity, I as randomSentinel, J as installedAppVersion, K as WORKBUDDY_APP_VERSION_FILENAME, L as classifyUpstreamError, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as upstreamDisplayMessage, S as WORKBUDDY_VARIANTS, U as readCliVersion, V as chatUserAgent, W as resolveChatIdentity, X as resolveAppVersion, Y as readBundleVersion, Z as validAppVersion, _ as desktopAuthCandidatesFor, a as readHostHeartbeat, b as AI_VARIANT, c as WORKBUDDY_BRIDGE_VERSION, d as WorkBuddyCatalog, f as WORKBUDDY_AUTH_FILENAME, g as defaultDesktopAuthPath, h as defaultDesktopAuthCandidates, i as processStartTimeMs, j as prepareChatBody, k as normalizeCredits, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as WORKBUDDY_AUTH_FILE_ENV, q as appUserAgent, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS, v as parseWorkBuddyAuth, w as WORKBUDDY_CREDIT_PATH, x as CN_VARIANT, y as workbuddyOwnAuthPath, z as CN_APP_VERSION_FILENAME } from "./heartbeat-BJrYAacX.js";
+import { A as normalizeCredits, B as CN_APP_VERSION_FILENAME, C as variantFor, D as WorkBuddyUpstreamClient, F as PROBE_EFFORT_CANDIDATES, G as resolveChatIdentity, H as chatUserAgent, I as probeModel, J as appUserAgent, K as validCliVersion, L as randomSentinel, M as prepareChatBody, N as prepareInternationalChatBody, O as isChannelGateBody, P as regionOf, Q as validAppVersion, R as classifyUpstreamError, S as WORKBUDDY_VARIANTS, U as fallbackChatIdentity, V as FALLBACK_CN_APP_VERSION, W as readCliVersion, X as readBundleVersion, Y as installedAppVersion, Z as resolveAppVersion, _ as desktopAuthCandidatesFor, a as readHostHeartbeat, b as AI_VARIANT, c as WORKBUDDY_BRIDGE_VERSION, d as WorkBuddyCatalog, f as WORKBUDDY_AUTH_FILENAME, g as defaultDesktopAuthPath, h as defaultDesktopAuthCandidates, i as processStartTimeMs, j as parseModelCatalog, k as modelWithCurrentPromotion, l as FALLBACK_WORKBUDDY_AI_MODELS, m as WorkBuddyCredentialStore, n as clearHostHeartbeat, o as workbuddyHostHeartbeatPath, p as WORKBUDDY_AUTH_FILE_ENV, q as WORKBUDDY_APP_VERSION_FILENAME, r as isHeartbeatProcessAlive, s as writeHostHeartbeat, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, u as FALLBACK_WORKBUDDY_MODELS, v as parseWorkBuddyAuth, w as WORKBUDDY_CREDIT_PATH, x as CN_VARIANT, y as workbuddyOwnAuthPath, z as upstreamDisplayMessage } from "./heartbeat-DYtNMdMm.js";
 import z from "@deepseek-ai/schemastery";
 import { dirname, join, resolve } from "node:path";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
@@ -790,6 +790,15 @@ const KIND_STATUS = {
 	server: 502,
 	client: 400
 };
+/**
+* What to do when the gateway refuses a request on content (code `11-128`).
+*
+* Two actions only, and the copy keeps the code spelled `11-128` so that the
+* guidance itself, echoed back into a later request, cannot re-arm the gate.
+* No status digits (see {@link failureMessage}) and no retry advice: retrying
+* the same poisoned conversation reproduces the refusal.
+*/
+const CHANNEL_GATE_HINT = " — 渠道校验拦截（11-128）。请新开会话重试；若持续出现，先更新插件 / blocked by channel verification (11-128): start a new conversation, and update the plugin if it persists";
 function writeJson(res, status, body) {
 	const payload = JSON.stringify(body);
 	res.writeHead(status, {
@@ -818,14 +827,20 @@ function writeOpenAIError(res, status, kind, message) {
 * The upstream's own `displayMsg` wins over the raw body: it is the sentence
 * written for a human ("账号存在异常行为，已被限制使用"), while the body is a JSON
 * document whose `msg` is often a machine phrase such as `request illegal`.
+*
+* The channel-gate code (`11-128`) appends {@link CHANNEL_GATE_HINT}: its raw
+* body is `{"message":"请求被拦截，请重新发送","type":"client","code":"client"}`,
+* which on its own reads as a transient hiccup the user should simply retry —
+* the two actions that actually help (a new conversation; update the plugin)
+* are not guessable from it.
 */
 function failureMessage(result) {
 	const reason = upstreamDisplayMessage(result.message) ?? result.message.slice(0, 400);
 	const head = `workbuddy upstream ${result.kind}`;
-	return result.kind === "session_dead" ? `${head} (http ${result.status}): ${reason}` : `${head}: ${reason}`;
+	const line = result.kind === "session_dead" ? `${head} (http ${result.status}): ${reason}` : `${head}: ${reason}`;
+	return isChannelGateBody(result.message) ? `${line}${CHANNEL_GATE_HINT}` : line;
 }
-/** Read a request body with a size cap; over-limit bodies fail the request. */
-function readBody$1(req) {
+/** Read a request body with a size cap; over-limit bodies fail the request. */ function readBody$1(req) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
 		let size = 0;

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-bridge",
   "displayName": "DSH WorkBuddy Bridge",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "author": "zlZayn",
   "keywords": [
     "dsh",
@@ -90,6 +90,7 @@
     "@deepseek-ai/dsh-host-webserver": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/dsh-llm": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/dsh-llm-pi-ai": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/dsh-settings": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/schemastery": "^3.18.4",
     "@earendil-works/pi-ai": "^1.1.0",
@@ -116,6 +117,7 @@
     "@deepseek-ai/dsh-host-webserver": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/dsh-llm": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/dsh-llm-pi-ai": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/dsh-settings": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/dsh-util-code-language": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "@deepseek-ai/dsh-util-workspace-path": "^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
@@ -127,7 +129,7 @@
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.7",
     "@types/react-test-renderer": "^18.3.1",
-    "@vitest/coverage-v8": "^4.1.11",
+    "@vitest/coverage-v8": "^4.1.12",
     "anser": "^2.3.5",
     "clsx": "^2.1.1",
     "diff": "^9.0.0",
@@ -158,7 +160,7 @@
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.70.1",
     "unrun": "^0.3.1",
-    "vitest": "^4.1.11",
+    "vitest": "^4.1.12",
     "zustand": "^5.0.15"
   },
   "scripts": {