dsh-workbuddy-connect 0.5.0 → 0.5.1

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { E as WorkBuddyUpstreamClient, V as resolveAppVersion, b as WorkBuddyCredentialStore, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, l as readHostHeartbeat, n as CN_VARIANT, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, u as workbuddyHostHeartbeatPath } from "./variants-GgLTJgZs.js";
+import { E as WorkBuddyUpstreamClient, J as resolveAppVersion, b as WorkBuddyCredentialStore, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, l as readHostHeartbeat, n as CN_VARIANT, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, u as workbuddyHostHeartbeatPath } from "./variants-CE_2IvEG.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -1456,7 +1456,12 @@ window.__ModuleLoader__.load({
 		* named in the package's `dsh.client.inject` list, so cordis has activated
 		* them before this plugin's fiber starts.
 		*/
-		const inject = ["slots", "locale"];
+		const inject = [
+			"slots",
+			"locale",
+			"remote",
+			"remote.session"
+		];
 		/**
 		* Register card copy and the WorkBuddy card under Plugin configuration.
 		*

package/lib/index.d.ts

@@ -74,6 +74,90 @@ declare function resolveAppVersion(options?: ResolveAppVersionOptions): Promise<
  */
 declare function appUserAgent(version: string): string;
 //#endregion
+//#region src/client-identity.d.ts
+/**
+ * Compiled-in CN fallback for the `WorkBuddy/<v>` tokens.
+ *
+ * Observed on the CN desktop app installed here (research §3.1, verified
+ * 2026-09-11); like the international fallback it is a shape requirement,
+ * not a currency claim — the gateway has not been observed to branch on it.
+ */
+declare const FALLBACK_CN_APP_VERSION = "5.5.6";
+/**
+ * Basename of the CN saved-version cache under `$DSH_HOME`.
+ *
+ * Deliberately not the international `.workbuddy-ai-version.json`: that file
+ * feeds the international catalog's User-Agent, and a CN App writing its
+ * version into it would relabel that request. The two caches stay isolated
+ * the way the per-variant catalog files are.
+ */
+declare const CN_APP_VERSION_FILENAME = ".workbuddy-app-version.json";
+/** The resolved identity a chat request presents as. */
+interface ChatIdentity {
+  /** Desktop App version; drives both `WorkBuddy/<v>` product tokens. */
+  clientVersion: string;
+  /** Bundled agent-CLI version; absent drops the `CLI/…` UA token. */
+  cliVersion?: string;
+}
+/**
+ * Whether a value is a CLI version that may reach a header.
+ *
+ * Tolerates a prerelease suffix (`2.137.1-rc.1`) because the bundled CLI's
+ * own metadata uses that spelling; anything with whitespace, CR or LF never
+ * passes — the value is interpolated into an HTTP header.
+ */
+declare function validCliVersion(value: unknown): value is string;
+/**
+ * The bundled agent CLI's real version, or `undefined` when it does not resolve.
+ *
+ * `cli/package.json` ships a `0.0.0` placeholder in `version` with the real
+ * version in `publishConfig.customPackage.version`; a valid non-placeholder
+ * `version` wins, otherwise the custom-package value applies, and unreadable
+ * or invalid metadata yields `undefined` (the caller drops the `CLI/…` UA
+ * token rather than guessing).
+ */
+declare function readCliVersion(bundle: string): Promise<string | undefined>;
+/**
+ * Build the chat User-Agent for one region.
+ *
+ * Throws on an invalid version rather than interpolating one into a header;
+ * `resolveChatIdentity` never produces such an identity, so the throw is a
+ * last gate against future call-site mistakes, not an expected path.
+ */
+declare function chatUserAgent(identity: ChatIdentity, region: WorkBuddyRegion): string;
+/** Constructor dependencies; every reader is injectable so tests never touch a real App or home. */
+interface ResolveChatIdentityOptions {
+  /** Installed CN desktop-bundle reader; defaults to the macOS probe. */
+  installedCn?: () => Promise<{
+    version: string;
+    bundle: string;
+  } | undefined>;
+  /** International version resolver; defaults to `app-version.ts`'s chain. */
+  resolveIntl?: () => Promise<AppVersionInfo>;
+  /** CLI-version reader; defaults to reading the bundle's `cli/package.json`. */
+  cliVersion?: (bundle: string) => Promise<string | undefined>;
+  /** CN saved-cache path; defaults to `$DSH_HOME/.workbuddy-app-version.json`. */
+  cnSavedPath?: string;
+}
+/**
+ * Resolve the chat identity for one region: installed App → region's saved
+ * value → compiled-in fallback. Never throws — a missing App, an unreadable
+ * plist, a failed cache write, or a reader that throws outright all degrade
+ * to {@link fallbackChatIdentity}; resolution never blocks a message.
+ *
+ * The production path caches per region (a message must not re-read the
+ * install tree); any injected option bypasses the cache entirely so tests
+ * with different readers cannot observe each other's resolutions.
+ */
+declare function resolveChatIdentity(region: WorkBuddyRegion, options?: ResolveChatIdentityOptions): Promise<ChatIdentity>;
+/**
+ * The region's compiled-in fallback identity: the desktop form with the
+ * built-in version and no `CLI/…` segment. This is the single degraded
+ * shape every failure path converges on — a thrown reader, an unreadable
+ * bundle, or a missing cache all present this, never the legacy CLI UA.
+ */
+declare function fallbackChatIdentity(region: WorkBuddyRegion): ChatIdentity;
+//#endregion
 //#region src/probe.d.ts
 /**
  * The canonical values a probe tests, in a fixed order.
@@ -278,6 +362,12 @@ interface WorkBuddyCatalogFetch {
 interface WorkBuddyUpstreamClientOptions {
   /** App-version resolver for international catalog requests; injectable for tests. */
   resolveAppVersion?: () => Promise<AppVersionInfo>;
+  /**
+   * Chat-identity resolver for chat and probe requests; injectable for tests.
+   * Defaults to `client-identity.ts`'s per-region chain. Refresh, catalog, and
+   * billing never consult it — those requests keep their long-standing headers.
+   */
+  resolveChatIdentity?: (region: WorkBuddyRegion) => Promise<ChatIdentity>;
 }
 /**
  * Upstream HTTP client. One instance serves the whole plugin; requests take
@@ -293,6 +383,8 @@ declare class WorkBuddyUpstreamClient {
    * Injectable so tests never read the real filesystem.
    */
   private readonly resolveAppVersion;
+  /** Chat-identity resolver; see {@link WorkBuddyUpstreamClientOptions.resolveChatIdentity}. */
+  private readonly resolveChatIdentity;
   /** Provenance of the most recent successful catalog fetch, for the card. */
   lastCatalog: WorkBuddyCatalogFetch | undefined;
   constructor(options?: WorkBuddyUpstreamClientOptions);
@@ -1048,4 +1140,4 @@ declare const Config: z<Config>;
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { AI_VARIANT, type AppVersionInfo, CN_VARIANT, Config, FALLBACK_WORKBUDDY_AI_MODELS, FALLBACK_WORKBUDDY_MODELS, PROBE_EFFORT_CANDIDATES, type ProbeAttempt, type ProbeOutcome, type ProbeSender, type UpstreamErrorKind, WORKBUDDY_AI_SETTINGS_NS, WORKBUDDY_APP_VERSION_FILENAME, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CATALOG_FILENAME, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_PROBE_FILENAME, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_VARIANTS, type WorkBuddyAdapter, type WorkBuddyAppVersionSource, type WorkBuddyAuthStatus, WorkBuddyCatalog, type WorkBuddyCatalogFetch, WorkBuddyCatalogStore, type WorkBuddyChatResult, type WorkBuddyCredential, WorkBuddyCredentialStore, type WorkBuddyCredits, type WorkBuddyEffort, type WorkBuddyHostHeartbeat, type WorkBuddyModelBilling, type WorkBuddyModelInfo, type WorkBuddyModelReasoning, type WorkBuddyProbeRecord, WorkBuddyProbeService, type WorkBuddyProbeStatus, WorkBuddyProbeStore, type WorkBuddyProbeValidation, type WorkBuddyPromotion, type WorkBuddyRefreshOutcome, type WorkBuddyShim, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyVariant, appUserAgent, apply, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthPath, desktopAuthCandidatesFor, fingerprintModel, inject, installedAppVersion, isHeartbeatProcessAlive, modelWithCurrentPromotion, name, normalizeCredits, parseModelCatalog, parseWorkBuddyAuth, prepareChatBody, prepareInternationalChatBody, probeModel, processStartTimeMs, randomSentinel, readBundleVersion, readHostHeartbeat, regionOf, resolveAppVersion, validAppVersion, variantFor, workbuddyCatalogPath, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, workbuddyProbePath };
+export { AI_VARIANT, type AppVersionInfo, CN_APP_VERSION_FILENAME, CN_VARIANT, type ChatIdentity, Config, FALLBACK_CN_APP_VERSION, FALLBACK_WORKBUDDY_AI_MODELS, FALLBACK_WORKBUDDY_MODELS, PROBE_EFFORT_CANDIDATES, type ProbeAttempt, type ProbeOutcome, type ProbeSender, type ResolveChatIdentityOptions, type UpstreamErrorKind, WORKBUDDY_AI_SETTINGS_NS, WORKBUDDY_APP_VERSION_FILENAME, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CATALOG_FILENAME, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_PROBE_FILENAME, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_VARIANTS, type WorkBuddyAdapter, type WorkBuddyAppVersionSource, type WorkBuddyAuthStatus, WorkBuddyCatalog, type WorkBuddyCatalogFetch, WorkBuddyCatalogStore, type WorkBuddyChatResult, type WorkBuddyCredential, WorkBuddyCredentialStore, type WorkBuddyCredits, type WorkBuddyEffort, type WorkBuddyHostHeartbeat, type WorkBuddyModelBilling, type WorkBuddyModelInfo, type WorkBuddyModelReasoning, type WorkBuddyProbeRecord, WorkBuddyProbeService, type WorkBuddyProbeStatus, WorkBuddyProbeStore, type WorkBuddyProbeValidation, type WorkBuddyPromotion, type WorkBuddyRefreshOutcome, type WorkBuddyShim, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyVariant, appUserAgent, apply, chatUserAgent, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthPath, desktopAuthCandidatesFor, fallbackChatIdentity, fingerprintModel, inject, installedAppVersion, isHeartbeatProcessAlive, modelWithCurrentPromotion, name, normalizeCredits, parseModelCatalog, parseWorkBuddyAuth, prepareChatBody, prepareInternationalChatBody, probeModel, processStartTimeMs, randomSentinel, readBundleVersion, readCliVersion, readHostHeartbeat, regionOf, resolveAppVersion, resolveChatIdentity, validAppVersion, validCliVersion, variantFor, workbuddyCatalogPath, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, workbuddyProbePath };

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as parseModelCatalog, B as readBundleVersion, C as desktopAuthCandidatesFor, D as classifyUpstreamError, E as WorkBuddyUpstreamClient, F as probeModel, H as validAppVersion, I as randomSentinel, L as WORKBUDDY_APP_VERSION_FILENAME, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as appUserAgent, S as defaultDesktopAuthPath, T as workbuddyOwnAuthPath, V as resolveAppVersion, _ as WorkBuddyCatalog, a as WORKBUDDY_HOST_HEARTBEAT_FILENAME, b as WorkBuddyCredentialStore, c as processStartTimeMs, d as writeHostHeartbeat, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, j as prepareChatBody, k as normalizeCredits, l as readHostHeartbeat, n as CN_VARIANT, o as clearHostHeartbeat, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, t as AI_VARIANT, u as workbuddyHostHeartbeatPath, v as WORKBUDDY_AUTH_FILENAME, w as parseWorkBuddyAuth, x as defaultDesktopAuthCandidates, y as WORKBUDDY_AUTH_FILE_ENV, z as installedAppVersion } from "./variants-GgLTJgZs.js";
+import { A as parseModelCatalog, B as fallbackChatIdentity, C as desktopAuthCandidatesFor, D as classifyUpstreamError, E as WorkBuddyUpstreamClient, F as probeModel, G as appUserAgent, H as resolveChatIdentity, I as randomSentinel, J as resolveAppVersion, K as installedAppVersion, L as CN_APP_VERSION_FILENAME, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as FALLBACK_CN_APP_VERSION, S as defaultDesktopAuthPath, T as workbuddyOwnAuthPath, U as validCliVersion, V as readCliVersion, W as WORKBUDDY_APP_VERSION_FILENAME, Y as validAppVersion, _ as WorkBuddyCatalog, a as WORKBUDDY_HOST_HEARTBEAT_FILENAME, b as WorkBuddyCredentialStore, c as processStartTimeMs, d as writeHostHeartbeat, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, j as prepareChatBody, k as normalizeCredits, l as readHostHeartbeat, n as CN_VARIANT, o as clearHostHeartbeat, q as readBundleVersion, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, t as AI_VARIANT, u as workbuddyHostHeartbeatPath, v as WORKBUDDY_AUTH_FILENAME, w as parseWorkBuddyAuth, x as defaultDesktopAuthCandidates, y as WORKBUDDY_AUTH_FILE_ENV, z as chatUserAgent } from "./variants-CE_2IvEG.js";
 import z from "@deepseek-ai/schemastery";
 import { dirname, join, resolve } from "node:path";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
@@ -1794,4 +1794,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { AI_VARIANT, CN_VARIANT, Config, FALLBACK_WORKBUDDY_AI_MODELS, FALLBACK_WORKBUDDY_MODELS, PROBE_EFFORT_CANDIDATES, WORKBUDDY_AI_SETTINGS_NS, WORKBUDDY_APP_VERSION_FILENAME, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CATALOG_FILENAME, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_PROBE_FILENAME, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_VARIANTS, WorkBuddyCatalog, WorkBuddyCatalogStore, WorkBuddyCredentialStore, WorkBuddyProbeService, WorkBuddyProbeStore, WorkBuddyUpstreamClient, appUserAgent, apply, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthPath, desktopAuthCandidatesFor, fingerprintModel, inject, installedAppVersion, isHeartbeatProcessAlive, modelWithCurrentPromotion, name, normalizeCredits, parseModelCatalog, parseWorkBuddyAuth, prepareChatBody, prepareInternationalChatBody, probeModel, processStartTimeMs, randomSentinel, readBundleVersion, readHostHeartbeat, regionOf, resolveAppVersion, validAppVersion, variantFor, workbuddyCatalogPath, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, workbuddyProbePath };
+export { AI_VARIANT, CN_APP_VERSION_FILENAME, CN_VARIANT, Config, FALLBACK_CN_APP_VERSION, FALLBACK_WORKBUDDY_AI_MODELS, FALLBACK_WORKBUDDY_MODELS, PROBE_EFFORT_CANDIDATES, WORKBUDDY_AI_SETTINGS_NS, WORKBUDDY_APP_VERSION_FILENAME, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CATALOG_FILENAME, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_PROBE_FILENAME, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_VARIANTS, WorkBuddyCatalog, WorkBuddyCatalogStore, WorkBuddyCredentialStore, WorkBuddyProbeService, WorkBuddyProbeStore, WorkBuddyUpstreamClient, appUserAgent, apply, chatUserAgent, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthPath, desktopAuthCandidatesFor, fallbackChatIdentity, fingerprintModel, inject, installedAppVersion, isHeartbeatProcessAlive, modelWithCurrentPromotion, name, normalizeCredits, parseModelCatalog, parseWorkBuddyAuth, prepareChatBody, prepareInternationalChatBody, probeModel, processStartTimeMs, randomSentinel, readBundleVersion, readCliVersion, readHostHeartbeat, regionOf, resolveAppVersion, resolveChatIdentity, validAppVersion, validCliVersion, variantFor, workbuddyCatalogPath, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, workbuddyProbePath };

package/lib/{variants-GgLTJgZs.js → variants-CE_2IvEG.js}

@@ -45,7 +45,7 @@ function validAppVersion(value) {
 	return typeof value === "string" && /^\d{1,6}(?:\.\d{1,6}){1,3}$/u.test(value);
 }
 /** macOS App-bundle roots: system-wide first, then the user's own install. */
-function macAppRoots() {
+function macAppRoots$1() {
 	return ["/Applications", join(homedir(), "Applications")];
 }
 /**
@@ -76,7 +76,7 @@ async function readBundleVersion(plistPath) {
 */
 async function installedAppVersion() {
 	if (process.platform !== "darwin") return void 0;
-	for (const root of macAppRoots()) {
+	for (const root of macAppRoots$1()) {
 		const bundle = join(root, "WorkBuddy AI.app");
 		const version = await readBundleVersion(join(bundle, "Contents", "Info.plist"));
 		if (version !== void 0) return {
@@ -145,6 +145,203 @@ function appUserAgent(version) {
 	return `WorkBuddyAI/${version}`;
 }
 //#endregion
+//#region src/client-identity.ts
+/**
+* The desktop-client identity chat requests present as (phase 1 of
+* `docs/upstream-identity-alignment-plan.md`).
+*
+* Chat and its probe sibling carry the User-Agent shape the official desktop
+* client composes — `WorkBuddy/<v> <product>/<v> CLI/<cli>` — where the
+* product token names the app that owns the region's requests: `WorkBuddy`
+* for CN, `WorkBuddy AI` for international. Versions come from the installed
+* App when it can be read, degrade to a per-region saved value, and finally
+* to a compiled-in constant. A CLI version that does not resolve drops the
+* `CLI/…` token instead of inventing one (the official client's own rule for
+* a missing extension).
+*
+* Scope: chat and probe requests ONLY. Refresh, catalog, and billing keep
+* the headers they have always sent; the plan holds the blast radius to this
+* one variable so the live verification matrix stays readable.
+*
+* @module dsh-workbuddy-connect/client-identity
+*/
+/**
+* Compiled-in CN fallback for the `WorkBuddy/<v>` tokens.
+*
+* Observed on the CN desktop app installed here (research §3.1, verified
+* 2026-09-11); like the international fallback it is a shape requirement,
+* not a currency claim — the gateway has not been observed to branch on it.
+*/
+const FALLBACK_CN_APP_VERSION = "5.5.6";
+/**
+* Basename of the CN saved-version cache under `$DSH_HOME`.
+*
+* Deliberately not the international `.workbuddy-ai-version.json`: that file
+* feeds the international catalog's User-Agent, and a CN App writing its
+* version into it would relabel that request. The two caches stay isolated
+* the way the per-variant catalog files are.
+*/
+const CN_APP_VERSION_FILENAME = ".workbuddy-app-version.json";
+/**
+* Whether a value is a CLI version that may reach a header.
+*
+* Tolerates a prerelease suffix (`2.137.1-rc.1`) because the bundled CLI's
+* own metadata uses that spelling; anything with whitespace, CR or LF never
+* passes — the value is interpolated into an HTTP header.
+*/
+function validCliVersion(value) {
+	return typeof value === "string" && /^\d{1,6}(?:\.\d{1,6}){1,3}(?:-[0-9A-Za-z.]+)?$/u.test(value);
+}
+/** macOS App-bundle roots, searched in the order `app-version.ts` uses. */
+function macAppRoots() {
+	return ["/Applications", join(homedir(), "Applications")];
+}
+/** Path of the bundled agent CLI's package.json inside an App bundle. */
+function cliPackagePath(bundle) {
+	return join(bundle, "Contents", "Resources", "app.asar.unpacked", "cli", "package.json");
+}
+/**
+* The bundled agent CLI's real version, or `undefined` when it does not resolve.
+*
+* `cli/package.json` ships a `0.0.0` placeholder in `version` with the real
+* version in `publishConfig.customPackage.version`; a valid non-placeholder
+* `version` wins, otherwise the custom-package value applies, and unreadable
+* or invalid metadata yields `undefined` (the caller drops the `CLI/…` UA
+* token rather than guessing).
+*/
+async function readCliVersion(bundle) {
+	let document;
+	try {
+		document = JSON.parse(await readFile(cliPackagePath(bundle), "utf8"));
+	} catch {
+		return;
+	}
+	if (typeof document !== "object" || document === null || Array.isArray(document)) return void 0;
+	const pkg = document;
+	const declared = pkg["version"];
+	if (validCliVersion(declared) && declared !== "0.0.0") return declared;
+	const publishConfig = pkg["publishConfig"];
+	const customPackage = typeof publishConfig === "object" && publishConfig !== null && !Array.isArray(publishConfig) ? publishConfig : void 0;
+	const customVersion = (typeof customPackage?.["customPackage"] === "object" && customPackage["customPackage"] !== null && !Array.isArray(customPackage["customPackage"]) ? customPackage["customPackage"] : void 0)?.["version"];
+	return validCliVersion(customVersion) ? customVersion : void 0;
+}
+/**
+* Build the chat User-Agent for one region.
+*
+* Throws on an invalid version rather than interpolating one into a header;
+* `resolveChatIdentity` never produces such an identity, so the throw is a
+* last gate against future call-site mistakes, not an expected path.
+*/
+function chatUserAgent(identity, region) {
+	if (!validAppVersion(identity.clientVersion)) throw new Error(`invalid client version for chat User-Agent: ${JSON.stringify(identity.clientVersion)}`);
+	if (identity.cliVersion !== void 0 && !validCliVersion(identity.cliVersion)) throw new Error(`invalid CLI version for chat User-Agent: ${JSON.stringify(identity.cliVersion)}`);
+	const product = region === "global" ? "WorkBuddy AI" : "WorkBuddy";
+	const parts = [`WorkBuddy/${identity.clientVersion}`, `${product}/${identity.clientVersion}`];
+	if (identity.cliVersion !== void 0) parts.push(`CLI/${identity.cliVersion}`);
+	return parts.join(" ");
+}
+/** The installed CN desktop bundle, or `undefined` when it is not installed (or not readable). */
+async function installedCnApp() {
+	if (process.platform !== "darwin") return void 0;
+	for (const root of macAppRoots()) {
+		const bundle = join(root, "WorkBuddy.app");
+		const version = await readBundleVersion(join(bundle, "Contents", "Info.plist"));
+		if (version !== void 0) return {
+			version,
+			bundle
+		};
+	}
+}
+/** Default CN saved-cache path. */
+function cnSavedVersionPath() {
+	return join(resolveDshHome(), CN_APP_VERSION_FILENAME);
+}
+/**
+* Resolve the chat identity for one region: installed App → region's saved
+* value → compiled-in fallback. Never throws — a missing App, an unreadable
+* plist, a failed cache write, or a reader that throws outright all degrade
+* to {@link fallbackChatIdentity}; resolution never blocks a message.
+*
+* The production path caches per region (a message must not re-read the
+* install tree); any injected option bypasses the cache entirely so tests
+* with different readers cannot observe each other's resolutions.
+*/
+async function resolveChatIdentity(region, options = {}) {
+	const injectable = options.installedCn !== void 0 || options.resolveIntl !== void 0 || options.cliVersion !== void 0 || options.cnSavedPath !== void 0;
+	if (!injectable) {
+		const cached = cache.get(region);
+		if (cached !== void 0) return cached;
+	}
+	let identity;
+	try {
+		identity = region === "global" ? await resolveGlobalIdentity(options) : await resolveCnIdentity(options);
+	} catch {
+		return fallbackChatIdentity(region);
+	}
+	if (!injectable) cache.set(region, identity);
+	return identity;
+}
+const cache = /* @__PURE__ */ new Map();
+/**
+* The region's compiled-in fallback identity: the desktop form with the
+* built-in version and no `CLI/…` segment. This is the single degraded
+* shape every failure path converges on — a thrown reader, an unreadable
+* bundle, or a missing cache all present this, never the legacy CLI UA.
+*/
+function fallbackChatIdentity(region) {
+	return { clientVersion: region === "global" ? FALLBACK_APP_VERSION : FALLBACK_CN_APP_VERSION };
+}
+/** CN: installed `WorkBuddy.app` → CN saved cache → CN fallback. */
+async function resolveCnIdentity(options) {
+	const savedPath = options.cnSavedPath ?? cnSavedVersionPath();
+	const installed = await (options.installedCn ?? installedCnApp)();
+	if (installed !== void 0 && validAppVersion(installed.version)) {
+		const cliVersion = await (options.cliVersion ?? readCliVersion)(installed.bundle);
+		const identity = {
+			clientVersion: installed.version,
+			...cliVersion !== void 0 && validCliVersion(cliVersion) ? { cliVersion } : {}
+		};
+		try {
+			await writeFileAtomic(savedPath, `${JSON.stringify({
+				version: identity.clientVersion,
+				observedAt: Date.now()
+			}, null, 2)}\n`, {
+				mode: 384,
+				dirMode: 448
+			});
+		} catch {}
+		return identity;
+	}
+	try {
+		const saved = JSON.parse(await readFile(savedPath, "utf8"));
+		if (typeof saved === "object" && saved !== null && !Array.isArray(saved)) {
+			const document = saved;
+			if (validAppVersion(document["version"])) return { clientVersion: document["version"] };
+		}
+	} catch {}
+	return fallbackChatIdentity("cn");
+}
+/**
+* International: reuse `app-version.ts`'s installed → saved → fallback chain
+* (its cache format and the catalog's version source stay untouched). The
+* CLI version is read only when that chain reports the installed bundle; a
+* saved or fallback resolution has no bundle path and drops the `CLI/…` token.
+* The CN cache is never read or written on this path.
+*/
+async function resolveGlobalIdentity(options) {
+	const info = await (options.resolveIntl ?? resolveAppVersion)();
+	const clientVersion = validAppVersion(info.version) ? info.version : FALLBACK_APP_VERSION;
+	let cliVersion;
+	if (info.bundle !== void 0) {
+		const read = await (options.cliVersion ?? readCliVersion)(info.bundle);
+		if (read !== void 0 && validCliVersion(read)) cliVersion = read;
+	}
+	return {
+		clientVersion,
+		...cliVersion === void 0 ? {} : { cliVersion }
+	};
+}
+//#endregion
 //#region src/probe.ts
 /**
 * The reasoning-effort probe: decide whether a model's `reasoning_effort`
@@ -288,6 +485,7 @@ async function probeModel(options) {
 const CN_CHAT_BASE = "https://copilot.tencent.com";
 const CN_BILLING_BASE = "https://www.codebuddy.cn";
 const GLOBAL_BASE = "https://www.workbuddy.ai";
+/** Shared CLI-form User-Agent for refresh and the CN catalog; chat and probe present the desktop identity (client-identity.ts). */
 const CLIENT_UA = "CLI/2.63.2 CodeBuddy/2.63.2";
 const JSON_TIMEOUT_MS = 3e4;
 const ERROR_BODY_LIMIT = 4096;
@@ -427,10 +625,17 @@ function commonHeaders(credential) {
 		"User-Agent": CLIENT_UA
 	};
 }
-/** Chat request headers, including the X-No-* conventions the official CLI uses. */
-function chatHeaders(credential) {
+/**
+* Chat request headers, including the X-No-* conventions the official CLI uses.
+*
+* `userAgent` carries the desktop identity for chat and probe requests; when
+* it is absent the shared CLI-form UA applies. Refresh shares `commonHeaders`
+* but never this override, so the two paths cannot drift into each other.
+*/
+function chatHeaders(credential, userAgent) {
 	return {
 		...commonHeaders(credential),
+		...userAgent === void 0 ? {} : { "User-Agent": userAgent },
 		"Content-Type": "application/json",
 		...credential.uid === "" ? { "X-No-User-Id": "1" } : { "X-User-Id": credential.uid },
 		...credential.enterpriseId === void 0 || credential.enterpriseId === "" ? { "X-No-Enterprise-Id": "1" } : { "X-Enterprise-Id": credential.enterpriseId },
@@ -568,22 +773,32 @@ var WorkBuddyUpstreamClient = class {
 	* Injectable so tests never read the real filesystem.
 	*/
 	resolveAppVersion;
+	/** Chat-identity resolver; see {@link WorkBuddyUpstreamClientOptions.resolveChatIdentity}. */
+	resolveChatIdentity;
 	/** Provenance of the most recent successful catalog fetch, for the card. */
 	lastCatalog;
 	constructor(options = {}) {
 		this.resolveAppVersion = options.resolveAppVersion ?? (() => resolveAppVersion());
+		this.resolveChatIdentity = options.resolveChatIdentity ?? ((region) => resolveChatIdentity(region));
 	}
 	/** POST the chat endpoint; a successful answer is the raw SSE response. */
 	async chatStream(credential, bodyJson, signal) {
+		const region = regionOf(credential.domain);
+		let userAgent;
+		try {
+			userAgent = chatUserAgent(await this.resolveChatIdentity(region), region);
+		} catch {
+			userAgent = chatUserAgent(fallbackChatIdentity(region), region);
+		}
 		let response;
 		try {
 			response = await fetch(`${chatBase(credential)}/v2/chat/completions`, {
 				method: "POST",
 				headers: {
-					...chatHeaders(credential),
+					...chatHeaders(credential, userAgent),
 					"Authorization": `Bearer ${credential.accessToken}`
 				},
-				body: regionOf(credential.domain) === "global" ? prepareInternationalChatBody(bodyJson) : bodyJson,
+				body: region === "global" ? prepareInternationalChatBody(bodyJson) : bodyJson,
 				...signal === void 0 ? {} : { signal }
 			});
 		} catch (error) {
@@ -751,6 +966,12 @@ var WorkBuddyUpstreamClient = class {
 	*/
 	async probeEffort(credential, model, effort, signal) {
 		const international = regionOf(credential.domain) === "global";
+		let userAgent;
+		try {
+			userAgent = chatUserAgent(await this.resolveChatIdentity(international ? "global" : "cn"), international ? "global" : "cn");
+		} catch {
+			userAgent = chatUserAgent(fallbackChatIdentity(international ? "global" : "cn"), international ? "global" : "cn");
+		}
 		const payload = {
 			model,
 			stream: true,
@@ -769,7 +990,7 @@ var WorkBuddyUpstreamClient = class {
 			response = await fetch(`${chatBase(credential)}/v2/chat/completions`, {
 				method: "POST",
 				headers: {
-					...chatHeaders(credential),
+					...chatHeaders(credential, userAgent),
 					"Authorization": `Bearer ${credential.accessToken}`
 				},
 				body: JSON.stringify(payload),
@@ -2123,7 +2344,7 @@ const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-connect/ai/status";
 const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-connect/ai/probe";
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_CONNECT_VERSION = "0.5.0";
+const WORKBUDDY_CONNECT_VERSION = "0.5.1";
 //#endregion
 //#region src/host-heartbeat.ts
 /**
@@ -2318,4 +2539,4 @@ function variantFor(id) {
 	return WORKBUDDY_VARIANTS.find((variant) => variant.id === id);
 }
 //#endregion
-export { parseModelCatalog as A, readBundleVersion as B, desktopAuthCandidatesFor as C, classifyUpstreamError as D, WorkBuddyUpstreamClient as E, probeModel as F, validAppVersion as H, randomSentinel as I, WORKBUDDY_APP_VERSION_FILENAME as L, prepareInternationalChatBody as M, regionOf as N, modelWithCurrentPromotion as O, PROBE_EFFORT_CANDIDATES as P, appUserAgent as R, defaultDesktopAuthPath as S, workbuddyOwnAuthPath as T, resolveAppVersion as V, WorkBuddyCatalog as _, WORKBUDDY_HOST_HEARTBEAT_FILENAME as a, WorkBuddyCredentialStore as b, processStartTimeMs as c, writeHostHeartbeat as d, WORKBUDDY_CONNECT_VERSION as f, FALLBACK_WORKBUDDY_MODELS as g, FALLBACK_WORKBUDDY_AI_MODELS as h, variantFor as i, prepareChatBody as j, normalizeCredits as k, readHostHeartbeat as l, WORKBUDDY_STATUS_PATH as m, CN_VARIANT as n, clearHostHeartbeat as o, WORKBUDDY_PROBE_PATH as p, WORKBUDDY_VARIANTS as r, isHeartbeatProcessAlive as s, AI_VARIANT as t, workbuddyHostHeartbeatPath as u, WORKBUDDY_AUTH_FILENAME as v, parseWorkBuddyAuth as w, defaultDesktopAuthCandidates as x, WORKBUDDY_AUTH_FILE_ENV as y, installedAppVersion as z };
+export { parseModelCatalog as A, fallbackChatIdentity as B, desktopAuthCandidatesFor as C, classifyUpstreamError as D, WorkBuddyUpstreamClient as E, probeModel as F, appUserAgent as G, resolveChatIdentity as H, randomSentinel as I, resolveAppVersion as J, installedAppVersion as K, CN_APP_VERSION_FILENAME as L, prepareInternationalChatBody as M, regionOf as N, modelWithCurrentPromotion as O, PROBE_EFFORT_CANDIDATES as P, FALLBACK_CN_APP_VERSION as R, defaultDesktopAuthPath as S, workbuddyOwnAuthPath as T, validCliVersion as U, readCliVersion as V, WORKBUDDY_APP_VERSION_FILENAME as W, validAppVersion as Y, WorkBuddyCatalog as _, WORKBUDDY_HOST_HEARTBEAT_FILENAME as a, WorkBuddyCredentialStore as b, processStartTimeMs as c, writeHostHeartbeat as d, WORKBUDDY_CONNECT_VERSION as f, FALLBACK_WORKBUDDY_MODELS as g, FALLBACK_WORKBUDDY_AI_MODELS as h, variantFor as i, prepareChatBody as j, normalizeCredits as k, readHostHeartbeat as l, WORKBUDDY_STATUS_PATH as m, CN_VARIANT as n, clearHostHeartbeat as o, WORKBUDDY_PROBE_PATH as p, readBundleVersion as q, WORKBUDDY_VARIANTS as r, isHeartbeatProcessAlive as s, AI_VARIANT as t, workbuddyHostHeartbeatPath as u, WORKBUDDY_AUTH_FILENAME as v, parseWorkBuddyAuth as w, defaultDesktopAuthCandidates as x, WORKBUDDY_AUTH_FILE_ENV as y, chatUserAgent as z };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-connect",
   "displayName": "DSH WorkBuddy Connect",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "author": "corrinehu",
   "keywords": [
     "dsh-plugin",
@@ -56,6 +56,8 @@
     },
     "client": {
       "inject": [
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-api-session-controller",
         "@deepseek-ai/dsh-client-ui-renderer",
         "@deepseek-ai/dsh-client-ui-settings-plugins",
         "@deepseek-ai/dsh-client-ui-conversation",