dsh-workbuddy-connect 0.5.0 → 0.5.2

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { E as WorkBuddyUpstreamClient, V as resolveAppVersion, b as WorkBuddyCredentialStore, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, l as readHostHeartbeat, n as CN_VARIANT, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, u as workbuddyHostHeartbeatPath } from "./variants-GgLTJgZs.js";
+import { E as WorkBuddyUpstreamClient, J as resolveAppVersion, b as WorkBuddyCredentialStore, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, l as readHostHeartbeat, n as CN_VARIANT, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, u as workbuddyHostHeartbeatPath } from "./variants-CExA7lJt.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -31,6 +31,27 @@ window.__ModuleLoader__.load({
 		const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-connect/ai/status";
 		const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-connect/ai/probe";
 		//#endregion
+		//#region src/client/status-document.ts
+		/**
+		* Whether a parsed status response really is a status document.
+		*
+		* A 200 is not a promise about the body: it may be empty, literal `null`, a
+		* non-JSON page from a proxy, or an array. Both halves of the browser plugin
+		* read the same route, so both must agree on what is valid — storing an
+		* unreadable value puts something in state that the next render dereferences.
+		*
+		* The check is deliberately limited to the discriminator (plus `error`'s
+		* `message`, which the error paragraph renders): validating optional fields
+		* here would reject documents the host legitimately omits fields from.
+		*/
+		function isWorkBuddyWebStatus(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+			const wrapped = value;
+			const status = wrapped["status"];
+			if (status === "signed-out" || status === "signed-in") return true;
+			return status === "error" && typeof wrapped["message"] === "string";
+		}
+		//#endregion
 		//#region src/client/WorkBuddyPluginCard.tsx
 		/** WorkBuddy status card contributed to Harness Plugin configuration. */
 		/** CN WorkBuddy; the plugin's long-standing card and default. */
@@ -291,6 +312,12 @@ window.__ModuleLoader__.load({
 				background: "var(--dsw-alias-brand-primary, #1677ff)"
 			};
 		}
+		/**
+		* Status dot colour. Takes `'loading'` as well as the document's own states:
+		* before the first response the card knows nothing about the account, so it must
+		* not borrow the signed-out grey — that would read as "nothing is wrong, nobody
+		* is signed in" when the truth is "not read yet".
+		*/
 		function dotStyle(status) {
 			return {
 				width: 9,
@@ -309,29 +336,40 @@ window.__ModuleLoader__.load({
 				timeStyle: "short"
 			}).format(new Date(ms));
 		}
-		/** One billing package as a labeled progress bar. */
+		/**
+		* One billing package as a labeled progress bar.
+		*
+		* A package whose allowance the upstream never reported (`size` not positive)
+		* has no percentage to state. It must not fall back to 100%: the plugin would be
+		* claiming a full quota it knows nothing about, which is the opposite of the
+		* honest "remaining N" line printed below it. Unknown size therefore renders the
+		* percent slot as unknown copy and an unfilled, indeterminate track.
+		*/
 		function CreditBar({ label, remain, size, t }) {
-			const detail = size > 0 ? t("exactRemaining", {
+			const sizeKnown = size > 0;
+			const detail = sizeKnown ? t("exactRemaining", {
 				remain: formatNumber(remain),
 				size: formatNumber(size)
 			}) : t("creditPackageUnknownSize", { remain: formatNumber(remain) });
-			const percent = size > 0 ? remain / size * 100 : 100;
-			const display = new Intl.NumberFormat(void 0, { maximumFractionDigits: 1 }).format(percent);
+			const percent = sizeKnown ? remain / size * 100 : void 0;
+			const display = percent === void 0 ? t("percentUnknown") : t("percentRemaining", { percent: new Intl.NumberFormat(void 0, { maximumFractionDigits: 1 }).format(percent) });
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				style: quotaGroupStyle,
 				children: [
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						style: quotaLabelStyle,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("percentRemaining", { percent: display }) })]
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: display })]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 						style: progressTrackStyle,
 						role: "progressbar",
 						"aria-label": label,
-						"aria-valuemin": 0,
-						"aria-valuemax": 100,
-						"aria-valuenow": percent,
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { style: progressFillStyle(percent) })
+						...percent === void 0 ? { "aria-valuetext": detail } : {
+							"aria-valuemin": 0,
+							"aria-valuemax": 100,
+							"aria-valuenow": percent
+						},
+						children: percent === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { style: progressFillStyle(percent) })
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						style: bodyStyle,
@@ -555,17 +593,72 @@ window.__ModuleLoader__.load({
 		function WorkBuddyPluginCard({ t, variant = CN_CARD_VARIANT }) {
 			if (t === void 0) throw new Error("WorkBuddy plugin card requires its translation function");
 			const [open, setOpen] = (0, react.useState)(false);
-			const [status, setStatus] = (0, react.useState)({ status: "signed-out" });
+			/**
+			* The document to render. `undefined` means *not read yet*, which is a
+			* distinct state from "signed out": seeding this with a signed-out document
+			* told an already-signed-in user they were signed out for the whole first
+			* round trip (and forever, if the read never settled).
+			*/
+			const [status, setStatus] = (0, react.useState)();
+			/**
+			* Whether the last **successful** read found a usable credential.
+			*
+			* Kept apart from `status` because the poll's liveness must depend on what the
+			* account actually is, not on what the card last displayed: a failed read
+			* leaves this untouched, so a transient failure cannot disarm the interval,
+			* while a genuine signed-out answer still stops it.
+			*
+			* `undefined` therefore means "no successful read yet", which is also the
+			* condition that decides whether a failed read has anything to preserve.
+			*/
+			const [signedIn, setSignedIn] = (0, react.useState)();
+			/**
+			* Why the most recent read failed, when it did. Rendered as a notice beside
+			* whatever document is still on screen, rather than replacing it.
+			*/
+			const [readFailure, setReadFailure] = (0, react.useState)();
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [tab, setTab] = (0, react.useState)("status");
 			const mounted = (0, react.useRef)(true);
+			/**
+			* Identity of the newest read that may write. Assigned when a read *starts*,
+			* so a response is superseded by anything begun after it — "the response whose
+			* request started last wins". Without this, a slow poll begun before a manual
+			* action could settle after the action's own refresh and restore the older
+			* document.
+			*/
+			const readSeq = (0, react.useRef)(0);
+			/** Manual requests in flight, so unmount can abort them like the poll's. */
+			const manualControllers = (0, react.useRef)(/* @__PURE__ */ new Set());
 			(0, react.useEffect)(() => {
 				mounted.current = true;
 				return () => {
 					mounted.current = false;
+					for (const controller of manualControllers.current) controller.abort();
+					manualControllers.current.clear();
 				};
 			}, []);
+			/** Register a manual request's controller so unmount aborts it. */
+			const trackController = (0, react.useCallback)(() => {
+				const controller = new AbortController();
+				manualControllers.current.add(controller);
+				return controller;
+			}, []);
+			/**
+			* Read the status document and apply it under the two policies the card's
+			* correctness rests on:
+			*
+			* - a non-document body (empty, `null`, a non-JSON page) is a failed read, not
+			*   something to store and then dereference in the render;
+			* - a failed read never discards a document already on screen. It is recorded
+			*   and shown as a notice beside that document; only when nothing has been
+			*   read yet does the failure itself become the rendered state.
+			*
+			* Returns whether this read produced the current document.
+			*/
 			const refresh = (0, react.useCallback)(async (signal) => {
+				const seq = ++readSeq.current;
+				const current = () => mounted.current && signal?.aborted !== true && seq === readSeq.current;
 				try {
 					const response = await fetch(variant.statusPath, {
 						headers: { accept: "application/json" },
@@ -574,12 +667,23 @@ window.__ModuleLoader__.load({
 					});
 					const value = await response.json().catch(() => void 0);
 					if (!response.ok) throw new Error(`HTTP ${response.status}`);
-					if (mounted.current && signal?.aborted !== true) setStatus(value);
+					if (!isWorkBuddyWebStatus(value)) throw new Error(t("statusResponseInvalid"));
+					if (!current()) return false;
+					setStatus(value);
+					if (value.status === "signed-in") setSignedIn(true);
+					else if (value.status === "signed-out") setSignedIn(false);
+					setReadFailure(void 0);
+					return true;
 				} catch (error) {
-					if (mounted.current && signal?.aborted !== true) setStatus({
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					});
+					const message = error instanceof Error ? error.message : t("requestFailed");
+					if (current()) {
+						setReadFailure(message);
+						setStatus((previous) => previous === void 0 ? {
+							status: "error",
+							message
+						} : previous);
+					}
+					return false;
 				}
 			}, [t, variant.statusPath]);
 			(0, react.useEffect)(() => {
@@ -591,7 +695,7 @@ window.__ModuleLoader__.load({
 				};
 			}, [open, refresh]);
 			(0, react.useEffect)(() => {
-				if (!open || status.status !== "signed-in") return;
+				if (!open || signedIn === false) return;
 				const controller = new AbortController();
 				const timer = window.setInterval(() => {
 					refresh(controller.signal);
@@ -603,13 +707,15 @@ window.__ModuleLoader__.load({
 			}, [
 				open,
 				refresh,
-				status.status
+				signedIn
 			]);
 			const manualRefresh = async () => {
 				setBusy(true);
+				const controller = trackController();
 				try {
-					await refresh();
+					await refresh(controller.signal);
 				} finally {
+					manualControllers.current.delete(controller);
 					if (mounted.current) setBusy(false);
 				}
 			};
@@ -622,9 +728,10 @@ window.__ModuleLoader__.load({
 			* than thrown away, so the reason survives the round trip.
 			*/
 			const refreshModels = (0, react.useCallback)(async () => {
-				const key = status.status === "signed-in" ? status.probeKey : void 0;
+				const key = status?.status === "signed-in" ? status.probeKey : void 0;
 				if (key === void 0) return;
 				setBusy(true);
+				const controller = trackController();
 				try {
 					const response = await fetch(variant.probePath, {
 						method: "POST",
@@ -633,23 +740,27 @@ window.__ModuleLoader__.load({
 							"X-WorkBuddy-Probe-Key": key
 						},
 						credentials: "same-origin",
+						signal: controller.signal,
 						body: JSON.stringify({ action: "refresh" })
 					});
 					if (!response.ok) throw new Error(`HTTP ${response.status}`);
 				} catch (error) {
-					if (mounted.current) setStatus((previous) => ({
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					}));
+					if (mounted.current && controller.signal.aborted !== true) setReadFailure(error instanceof Error ? error.message : t("requestFailed"));
+					manualControllers.current.delete(controller);
 					return;
 				} finally {
 					if (mounted.current) setBusy(false);
 				}
-				await refresh();
+				try {
+					await refresh(controller.signal);
+				} finally {
+					manualControllers.current.delete(controller);
+				}
 			}, [
 				refresh,
 				status,
 				t,
+				trackController,
 				variant.probePath
 			]);
 			/**
@@ -660,9 +771,10 @@ window.__ModuleLoader__.load({
 			* catalog from here.
 			*/
 			const control = (0, react.useCallback)(async (action) => {
-				const key = status.status === "signed-in" ? status.probeKey : void 0;
+				const key = status?.status === "signed-in" ? status.probeKey : void 0;
 				if (key === void 0) return;
 				setBusy(true);
+				const controller = trackController();
 				try {
 					const response = await fetch(variant.probePath, {
 						method: "POST",
@@ -671,6 +783,7 @@ window.__ModuleLoader__.load({
 							"X-WorkBuddy-Probe-Key": key
 						},
 						credentials: "same-origin",
+						signal: controller.signal,
 						body: JSON.stringify(action)
 					});
 					const value = await response.json().catch(() => void 0);
@@ -678,19 +791,18 @@ window.__ModuleLoader__.load({
 						const message = typeof value === "object" && value !== null && "error" in value ? String(value["error"]) : `HTTP ${response.status}`;
 						throw new Error(message);
 					}
-					await refresh();
+					await refresh(controller.signal);
 				} catch (error) {
-					if (mounted.current) setStatus((previous) => ({
-						status: "error",
-						message: error instanceof Error ? error.message : t("requestFailed")
-					}));
+					if (mounted.current && controller.signal.aborted !== true) setReadFailure(error instanceof Error ? error.message : t("requestFailed"));
 				} finally {
+					manualControllers.current.delete(controller);
 					if (mounted.current) setBusy(false);
 				}
 			}, [
 				refresh,
 				status,
 				t,
+				trackController,
 				variant.probePath
 			]);
 			/**
@@ -704,7 +816,7 @@ window.__ModuleLoader__.load({
 				});
 			}, [control]);
 			const title = t(variant.titleKey);
-			const label = status.status === "signed-in" ? status.nickname === void 0 ? t("signedInAs", { nickname: "" }).trimEnd().replace(/[:：]$/, "") : t("signedInAs", { nickname: status.nickname }) : status.status === "error" ? t("requestFailed") : t("signedOut");
+			const label = status === void 0 ? t("loading") : status.status === "signed-in" ? status.nickname === void 0 ? t("signedInAs", { nickname: "" }).trimEnd().replace(/[:：]$/, "") : t("signedInAs", { nickname: status.nickname }) : status.status === "error" ? t("requestFailed") : t("signedOut");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				style: cardStyle,
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
@@ -744,9 +856,10 @@ window.__ModuleLoader__.load({
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: statusStyle,
 								role: "status",
+								"aria-busy": status === void 0,
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 									"aria-hidden": "true",
-									style: dotStyle(status.status)
+									style: dotStyle(status === void 0 ? "loading" : status.status)
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label })]
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
@@ -758,7 +871,11 @@ window.__ModuleLoader__.load({
 								children: busy ? t("refreshing") : t("refresh")
 							})]
 						}),
-						status.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+						readFailure === void 0 || signedIn === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: errorStyle,
+							children: t("statusRefreshFailed", { message: readFailure })
+						}),
+						status?.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 							status.expiresAt === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								style: bodyStyle,
 								children: t("accessTokenExpires", { time: formatTime(status.expiresAt) })
@@ -864,11 +981,11 @@ window.__ModuleLoader__.load({
 								})]
 							})
 						] }) : null,
-						status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						status?.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: status.reason === void 0 ? bodyStyle : errorStyle,
 							children: status.reason ?? t(variant.signedOutKey)
 						}) : null,
-						status.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						status?.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: errorStyle,
 							children: status.message
 						}) : null
@@ -1064,15 +1181,24 @@ window.__ModuleLoader__.load({
 		/**
 		* The one-line tooltip: current state first, then what a click does — the same
 		* two-part shape Fast Mode uses.
+		*
+		* A recorded result outranks a remembered failure. `failed` only means "the last
+		* run from this control did not complete"; the host can record a result for the
+		* same model at any time (a detection started from the settings card, another
+		* conversation, or a finished sweep), and the levels the user paid for are the
+		* more useful answer than the stale failure. Failure copy is what remains when
+		* there is no result to report.
 		*/
 		function tooltipText(t, model, state) {
 			if (state.busy) return t("probeRunning", { model });
-			if (state.failed) return t("probeTooltipRetry");
 			const result = state.result;
-			if (result === void 0) return t("probeTooltipIdle", { model });
-			if (result.validation === "validating" && result.efforts.length > 0) return t("probeTooltipVerified", { levels: result.efforts.join(" / ") });
-			if (result.validation === "non-validating") return t("probeTooltipNotValidating");
-			return t("probeTooltipRetry");
+			if (result !== void 0) {
+				if (result.validation === "validating" && result.efforts.length > 0) return t("probeTooltipVerified", { levels: result.efforts.join(" / ") });
+				if (result.validation === "non-validating") return t("probeTooltipNotValidating");
+				return t("probeTooltipRetry");
+			}
+			if (state.failed) return t("probeTooltipRetry");
+			return t("probeTooltipIdle", { model });
 		}
 		/** Model-independent shell: resolves the selection, then delegates per model. */
 		function WorkBuddyProbeControl({ directory, t }) {
@@ -1097,17 +1223,20 @@ window.__ModuleLoader__.load({
 			const [note, setNote] = (0, react.useState)();
 			const inFlight = (0, react.useRef)(false);
 			const mounted = (0, react.useRef)(false);
+			const readSeq = (0, react.useRef)(0);
 			const tooltipId = (0, react.useId)();
 			const refresh = (0, react.useCallback)(async (signal) => {
+				const seq = ++readSeq.current;
 				const response = await fetch(card.statusPath, {
 					credentials: "same-origin",
 					headers: { accept: "application/json" },
 					...signal === void 0 ? {} : { signal }
 				});
 				if (!response.ok) throw new Error(`HTTP ${response.status}`);
-				const value = await response.json();
-				if (mounted.current && !signal?.aborted) setStatus(value);
-			}, [card.statusPath]);
+				const value = await response.json().catch(() => void 0);
+				if (!isWorkBuddyWebStatus(value)) throw new Error(t("statusResponseInvalid"));
+				if (mounted.current && !signal?.aborted && seq === readSeq.current) setStatus(value);
+			}, [card.statusPath, t]);
 			(0, react.useEffect)(() => {
 				mounted.current = true;
 				const controller = new AbortController();
@@ -1128,6 +1257,9 @@ window.__ModuleLoader__.load({
 			const key = status?.status === "signed-in" ? status.probeKey : void 0;
 			const result = status === void 0 ? void 0 : resultFor(status, model);
 			const visible = probe?.candidates.includes(model) === true || result !== void 0;
+			(0, react.useEffect)(() => {
+				if (result !== void 0) setFailed(false);
+			}, [result]);
 			(0, react.useEffect)(() => {
 				setConfirming(false);
 				setNote(void 0);
@@ -1314,6 +1446,7 @@ window.__ModuleLoader__.load({
 			creditsDetailHeading: "By package",
 			creditsTotal: "Total: {total}",
 			percentRemaining: "{percent}% remaining",
+			percentUnknown: "Remaining share unknown",
 			exactRemaining: "{remain} / {size} remaining",
 			creditPackageUnknownSize: "{remain} remaining",
 			creditsError: "Credit unavailable: {message}",
@@ -1327,6 +1460,8 @@ window.__ModuleLoader__.load({
 			catalogError: "Last update failed: {message}",
 			catalogAppVersion: "App version {version}",
 			requestFailed: "Request failed",
+			statusRefreshFailed: "Refresh failed: {message} — showing the last known state",
+			statusResponseInvalid: "WorkBuddy returned an unreadable status reply",
 			accountHeading: "Account",
 			modelsHeading: "Model offers",
 			contextHeading: "Context window",
@@ -1387,6 +1522,7 @@ window.__ModuleLoader__.load({
 			creditsDetailHeading: "按套餐",
 			creditsTotal: "合计：{total}",
 			percentRemaining: "剩余 {percent}%",
+			percentUnknown: "剩余占比未知",
 			exactRemaining: "剩余 {remain} / {size}",
 			creditPackageUnknownSize: "剩余 {remain}",
 			creditsError: "积分查询失败：{message}",
@@ -1400,6 +1536,8 @@ window.__ModuleLoader__.load({
 			catalogError: "上次更新失败：{message}",
 			catalogAppVersion: "App 版本 {version}",
 			requestFailed: "请求失败",
+			statusRefreshFailed: "刷新失败：{message} — 当前显示的是上次成功获取的状态",
+			statusResponseInvalid: "WorkBuddy 返回的状态数据无法识别",
 			accountHeading: "账号",
 			modelsHeading: "模型优惠",
 			contextHeading: "上下文窗口",
@@ -1456,7 +1594,12 @@ window.__ModuleLoader__.load({
 		* named in the package's `dsh.client.inject` list, so cordis has activated
 		* them before this plugin's fiber starts.
 		*/
-		const inject = ["slots", "locale"];
+		const inject = [
+			"slots",
+			"locale",
+			"remote",
+			"remote.session"
+		];
 		/**
 		* Register card copy and the WorkBuddy card under Plugin configuration.
 		*

package/lib/index.d.ts

@@ -74,6 +74,90 @@ declare function resolveAppVersion(options?: ResolveAppVersionOptions): Promise<
  */
 declare function appUserAgent(version: string): string;
 //#endregion
+//#region src/client-identity.d.ts
+/**
+ * Compiled-in CN fallback for the `WorkBuddy/<v>` tokens.
+ *
+ * Observed on the CN desktop app installed here (research §3.1, verified
+ * 2026-09-11); like the international fallback it is a shape requirement,
+ * not a currency claim — the gateway has not been observed to branch on it.
+ */
+declare const FALLBACK_CN_APP_VERSION = "5.5.6";
+/**
+ * Basename of the CN saved-version cache under `$DSH_HOME`.
+ *
+ * Deliberately not the international `.workbuddy-ai-version.json`: that file
+ * feeds the international catalog's User-Agent, and a CN App writing its
+ * version into it would relabel that request. The two caches stay isolated
+ * the way the per-variant catalog files are.
+ */
+declare const CN_APP_VERSION_FILENAME = ".workbuddy-app-version.json";
+/** The resolved identity a chat request presents as. */
+interface ChatIdentity {
+  /** Desktop App version; drives both `WorkBuddy/<v>` product tokens. */
+  clientVersion: string;
+  /** Bundled agent-CLI version; absent drops the `CLI/…` UA token. */
+  cliVersion?: string;
+}
+/**
+ * Whether a value is a CLI version that may reach a header.
+ *
+ * Tolerates a prerelease suffix (`2.137.1-rc.1`) because the bundled CLI's
+ * own metadata uses that spelling; anything with whitespace, CR or LF never
+ * passes — the value is interpolated into an HTTP header.
+ */
+declare function validCliVersion(value: unknown): value is string;
+/**
+ * The bundled agent CLI's real version, or `undefined` when it does not resolve.
+ *
+ * `cli/package.json` ships a `0.0.0` placeholder in `version` with the real
+ * version in `publishConfig.customPackage.version`; a valid non-placeholder
+ * `version` wins, otherwise the custom-package value applies, and unreadable
+ * or invalid metadata yields `undefined` (the caller drops the `CLI/…` UA
+ * token rather than guessing).
+ */
+declare function readCliVersion(bundle: string): Promise<string | undefined>;
+/**
+ * Build the chat User-Agent for one region.
+ *
+ * Throws on an invalid version rather than interpolating one into a header;
+ * `resolveChatIdentity` never produces such an identity, so the throw is a
+ * last gate against future call-site mistakes, not an expected path.
+ */
+declare function chatUserAgent(identity: ChatIdentity, region: WorkBuddyRegion): string;
+/** Constructor dependencies; every reader is injectable so tests never touch a real App or home. */
+interface ResolveChatIdentityOptions {
+  /** Installed CN desktop-bundle reader; defaults to the macOS probe. */
+  installedCn?: () => Promise<{
+    version: string;
+    bundle: string;
+  } | undefined>;
+  /** International version resolver; defaults to `app-version.ts`'s chain. */
+  resolveIntl?: () => Promise<AppVersionInfo>;
+  /** CLI-version reader; defaults to reading the bundle's `cli/package.json`. */
+  cliVersion?: (bundle: string) => Promise<string | undefined>;
+  /** CN saved-cache path; defaults to `$DSH_HOME/.workbuddy-app-version.json`. */
+  cnSavedPath?: string;
+}
+/**
+ * Resolve the chat identity for one region: installed App → region's saved
+ * value → compiled-in fallback. Never throws — a missing App, an unreadable
+ * plist, a failed cache write, or a reader that throws outright all degrade
+ * to {@link fallbackChatIdentity}; resolution never blocks a message.
+ *
+ * The production path caches per region (a message must not re-read the
+ * install tree); any injected option bypasses the cache entirely so tests
+ * with different readers cannot observe each other's resolutions.
+ */
+declare function resolveChatIdentity(region: WorkBuddyRegion, options?: ResolveChatIdentityOptions): Promise<ChatIdentity>;
+/**
+ * The region's compiled-in fallback identity: the desktop form with the
+ * built-in version and no `CLI/…` segment. This is the single degraded
+ * shape every failure path converges on — a thrown reader, an unreadable
+ * bundle, or a missing cache all present this, never the legacy CLI UA.
+ */
+declare function fallbackChatIdentity(region: WorkBuddyRegion): ChatIdentity;
+//#endregion
 //#region src/probe.d.ts
 /**
  * The canonical values a probe tests, in a fixed order.
@@ -278,6 +362,12 @@ interface WorkBuddyCatalogFetch {
 interface WorkBuddyUpstreamClientOptions {
   /** App-version resolver for international catalog requests; injectable for tests. */
   resolveAppVersion?: () => Promise<AppVersionInfo>;
+  /**
+   * Chat-identity resolver for chat and probe requests; injectable for tests.
+   * Defaults to `client-identity.ts`'s per-region chain. Refresh, catalog, and
+   * billing never consult it — those requests keep their long-standing headers.
+   */
+  resolveChatIdentity?: (region: WorkBuddyRegion) => Promise<ChatIdentity>;
 }
 /**
  * Upstream HTTP client. One instance serves the whole plugin; requests take
@@ -293,6 +383,8 @@ declare class WorkBuddyUpstreamClient {
    * Injectable so tests never read the real filesystem.
    */
   private readonly resolveAppVersion;
+  /** Chat-identity resolver; see {@link WorkBuddyUpstreamClientOptions.resolveChatIdentity}. */
+  private readonly resolveChatIdentity;
   /** Provenance of the most recent successful catalog fetch, for the card. */
   lastCatalog: WorkBuddyCatalogFetch | undefined;
   constructor(options?: WorkBuddyUpstreamClientOptions);
@@ -1048,4 +1140,4 @@ declare const Config: z<Config>;
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { AI_VARIANT, type AppVersionInfo, CN_VARIANT, Config, FALLBACK_WORKBUDDY_AI_MODELS, FALLBACK_WORKBUDDY_MODELS, PROBE_EFFORT_CANDIDATES, type ProbeAttempt, type ProbeOutcome, type ProbeSender, type UpstreamErrorKind, WORKBUDDY_AI_SETTINGS_NS, WORKBUDDY_APP_VERSION_FILENAME, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CATALOG_FILENAME, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_PROBE_FILENAME, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_VARIANTS, type WorkBuddyAdapter, type WorkBuddyAppVersionSource, type WorkBuddyAuthStatus, WorkBuddyCatalog, type WorkBuddyCatalogFetch, WorkBuddyCatalogStore, type WorkBuddyChatResult, type WorkBuddyCredential, WorkBuddyCredentialStore, type WorkBuddyCredits, type WorkBuddyEffort, type WorkBuddyHostHeartbeat, type WorkBuddyModelBilling, type WorkBuddyModelInfo, type WorkBuddyModelReasoning, type WorkBuddyProbeRecord, WorkBuddyProbeService, type WorkBuddyProbeStatus, WorkBuddyProbeStore, type WorkBuddyProbeValidation, type WorkBuddyPromotion, type WorkBuddyRefreshOutcome, type WorkBuddyShim, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyVariant, appUserAgent, apply, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthPath, desktopAuthCandidatesFor, fingerprintModel, inject, installedAppVersion, isHeartbeatProcessAlive, modelWithCurrentPromotion, name, normalizeCredits, parseModelCatalog, parseWorkBuddyAuth, prepareChatBody, prepareInternationalChatBody, probeModel, processStartTimeMs, randomSentinel, readBundleVersion, readHostHeartbeat, regionOf, resolveAppVersion, validAppVersion, variantFor, workbuddyCatalogPath, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, workbuddyProbePath };
+export { AI_VARIANT, type AppVersionInfo, CN_APP_VERSION_FILENAME, CN_VARIANT, type ChatIdentity, Config, FALLBACK_CN_APP_VERSION, FALLBACK_WORKBUDDY_AI_MODELS, FALLBACK_WORKBUDDY_MODELS, PROBE_EFFORT_CANDIDATES, type ProbeAttempt, type ProbeOutcome, type ProbeSender, type ResolveChatIdentityOptions, type UpstreamErrorKind, WORKBUDDY_AI_SETTINGS_NS, WORKBUDDY_APP_VERSION_FILENAME, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CATALOG_FILENAME, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_PROBE_FILENAME, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_VARIANTS, type WorkBuddyAdapter, type WorkBuddyAppVersionSource, type WorkBuddyAuthStatus, WorkBuddyCatalog, type WorkBuddyCatalogFetch, WorkBuddyCatalogStore, type WorkBuddyChatResult, type WorkBuddyCredential, WorkBuddyCredentialStore, type WorkBuddyCredits, type WorkBuddyEffort, type WorkBuddyHostHeartbeat, type WorkBuddyModelBilling, type WorkBuddyModelInfo, type WorkBuddyModelReasoning, type WorkBuddyProbeRecord, WorkBuddyProbeService, type WorkBuddyProbeStatus, WorkBuddyProbeStore, type WorkBuddyProbeValidation, type WorkBuddyPromotion, type WorkBuddyRefreshOutcome, type WorkBuddyShim, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyVariant, appUserAgent, apply, chatUserAgent, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthPath, desktopAuthCandidatesFor, fallbackChatIdentity, fingerprintModel, inject, installedAppVersion, isHeartbeatProcessAlive, modelWithCurrentPromotion, name, normalizeCredits, parseModelCatalog, parseWorkBuddyAuth, prepareChatBody, prepareInternationalChatBody, probeModel, processStartTimeMs, randomSentinel, readBundleVersion, readCliVersion, readHostHeartbeat, regionOf, resolveAppVersion, resolveChatIdentity, validAppVersion, validCliVersion, variantFor, workbuddyCatalogPath, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, workbuddyProbePath };

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as parseModelCatalog, B as readBundleVersion, C as desktopAuthCandidatesFor, D as classifyUpstreamError, E as WorkBuddyUpstreamClient, F as probeModel, H as validAppVersion, I as randomSentinel, L as WORKBUDDY_APP_VERSION_FILENAME, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as appUserAgent, S as defaultDesktopAuthPath, T as workbuddyOwnAuthPath, V as resolveAppVersion, _ as WorkBuddyCatalog, a as WORKBUDDY_HOST_HEARTBEAT_FILENAME, b as WorkBuddyCredentialStore, c as processStartTimeMs, d as writeHostHeartbeat, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, j as prepareChatBody, k as normalizeCredits, l as readHostHeartbeat, n as CN_VARIANT, o as clearHostHeartbeat, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, t as AI_VARIANT, u as workbuddyHostHeartbeatPath, v as WORKBUDDY_AUTH_FILENAME, w as parseWorkBuddyAuth, x as defaultDesktopAuthCandidates, y as WORKBUDDY_AUTH_FILE_ENV, z as installedAppVersion } from "./variants-GgLTJgZs.js";
+import { A as parseModelCatalog, B as fallbackChatIdentity, C as desktopAuthCandidatesFor, D as classifyUpstreamError, E as WorkBuddyUpstreamClient, F as probeModel, G as appUserAgent, H as resolveChatIdentity, I as randomSentinel, J as resolveAppVersion, K as installedAppVersion, L as CN_APP_VERSION_FILENAME, M as prepareInternationalChatBody, N as regionOf, O as modelWithCurrentPromotion, P as PROBE_EFFORT_CANDIDATES, R as FALLBACK_CN_APP_VERSION, S as defaultDesktopAuthPath, T as workbuddyOwnAuthPath, U as validCliVersion, V as readCliVersion, W as WORKBUDDY_APP_VERSION_FILENAME, Y as validAppVersion, _ as WorkBuddyCatalog, a as WORKBUDDY_HOST_HEARTBEAT_FILENAME, b as WorkBuddyCredentialStore, c as processStartTimeMs, d as writeHostHeartbeat, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, j as prepareChatBody, k as normalizeCredits, l as readHostHeartbeat, n as CN_VARIANT, o as clearHostHeartbeat, q as readBundleVersion, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, t as AI_VARIANT, u as workbuddyHostHeartbeatPath, v as WORKBUDDY_AUTH_FILENAME, w as parseWorkBuddyAuth, x as defaultDesktopAuthCandidates, y as WORKBUDDY_AUTH_FILE_ENV, z as chatUserAgent } from "./variants-CExA7lJt.js";
 import z from "@deepseek-ai/schemastery";
 import { dirname, join, resolve } from "node:path";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
@@ -1794,4 +1794,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { AI_VARIANT, CN_VARIANT, Config, FALLBACK_WORKBUDDY_AI_MODELS, FALLBACK_WORKBUDDY_MODELS, PROBE_EFFORT_CANDIDATES, WORKBUDDY_AI_SETTINGS_NS, WORKBUDDY_APP_VERSION_FILENAME, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CATALOG_FILENAME, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_PROBE_FILENAME, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_VARIANTS, WorkBuddyCatalog, WorkBuddyCatalogStore, WorkBuddyCredentialStore, WorkBuddyProbeService, WorkBuddyProbeStore, WorkBuddyUpstreamClient, appUserAgent, apply, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthPath, desktopAuthCandidatesFor, fingerprintModel, inject, installedAppVersion, isHeartbeatProcessAlive, modelWithCurrentPromotion, name, normalizeCredits, parseModelCatalog, parseWorkBuddyAuth, prepareChatBody, prepareInternationalChatBody, probeModel, processStartTimeMs, randomSentinel, readBundleVersion, readHostHeartbeat, regionOf, resolveAppVersion, validAppVersion, variantFor, workbuddyCatalogPath, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, workbuddyProbePath };
+export { AI_VARIANT, CN_APP_VERSION_FILENAME, CN_VARIANT, Config, FALLBACK_CN_APP_VERSION, FALLBACK_WORKBUDDY_AI_MODELS, FALLBACK_WORKBUDDY_MODELS, PROBE_EFFORT_CANDIDATES, WORKBUDDY_AI_SETTINGS_NS, WORKBUDDY_APP_VERSION_FILENAME, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CATALOG_FILENAME, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_PROBE_FILENAME, WORKBUDDY_PROVIDER, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_VARIANTS, WorkBuddyCatalog, WorkBuddyCatalogStore, WorkBuddyCredentialStore, WorkBuddyProbeService, WorkBuddyProbeStore, WorkBuddyUpstreamClient, appUserAgent, apply, chatUserAgent, classifyUpstreamError, clearHostHeartbeat, createWorkBuddyAdapter, createWorkBuddyShim, defaultDesktopAuthCandidates, defaultDesktopAuthPath, desktopAuthCandidatesFor, fallbackChatIdentity, fingerprintModel, inject, installedAppVersion, isHeartbeatProcessAlive, modelWithCurrentPromotion, name, normalizeCredits, parseModelCatalog, parseWorkBuddyAuth, prepareChatBody, prepareInternationalChatBody, probeModel, processStartTimeMs, randomSentinel, readBundleVersion, readCliVersion, readHostHeartbeat, regionOf, resolveAppVersion, resolveChatIdentity, validAppVersion, validCliVersion, variantFor, workbuddyCatalogPath, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, workbuddyProbePath };

package/lib/{variants-GgLTJgZs.js → variants-CExA7lJt.js}

@@ -45,7 +45,7 @@ function validAppVersion(value) {
 	return typeof value === "string" && /^\d{1,6}(?:\.\d{1,6}){1,3}$/u.test(value);
 }
 /** macOS App-bundle roots: system-wide first, then the user's own install. */
-function macAppRoots() {
+function macAppRoots$1() {
 	return ["/Applications", join(homedir(), "Applications")];
 }
 /**
@@ -76,7 +76,7 @@ async function readBundleVersion(plistPath) {
 */
 async function installedAppVersion() {
 	if (process.platform !== "darwin") return void 0;
-	for (const root of macAppRoots()) {
+	for (const root of macAppRoots$1()) {
 		const bundle = join(root, "WorkBuddy AI.app");
 		const version = await readBundleVersion(join(bundle, "Contents", "Info.plist"));
 		if (version !== void 0) return {
@@ -145,6 +145,203 @@ function appUserAgent(version) {
 	return `WorkBuddyAI/${version}`;
 }
 //#endregion
+//#region src/client-identity.ts
+/**
+* The desktop-client identity chat requests present as (phase 1 of
+* `docs/upstream-identity-alignment-plan.md`).
+*
+* Chat and its probe sibling carry the User-Agent shape the official desktop
+* client composes — `WorkBuddy/<v> <product>/<v> CLI/<cli>` — where the
+* product token names the app that owns the region's requests: `WorkBuddy`
+* for CN, `WorkBuddy AI` for international. Versions come from the installed
+* App when it can be read, degrade to a per-region saved value, and finally
+* to a compiled-in constant. A CLI version that does not resolve drops the
+* `CLI/…` token instead of inventing one (the official client's own rule for
+* a missing extension).
+*
+* Scope: chat and probe requests ONLY. Refresh, catalog, and billing keep
+* the headers they have always sent; the plan holds the blast radius to this
+* one variable so the live verification matrix stays readable.
+*
+* @module dsh-workbuddy-connect/client-identity
+*/
+/**
+* Compiled-in CN fallback for the `WorkBuddy/<v>` tokens.
+*
+* Observed on the CN desktop app installed here (research §3.1, verified
+* 2026-09-11); like the international fallback it is a shape requirement,
+* not a currency claim — the gateway has not been observed to branch on it.
+*/
+const FALLBACK_CN_APP_VERSION = "5.5.6";
+/**
+* Basename of the CN saved-version cache under `$DSH_HOME`.
+*
+* Deliberately not the international `.workbuddy-ai-version.json`: that file
+* feeds the international catalog's User-Agent, and a CN App writing its
+* version into it would relabel that request. The two caches stay isolated
+* the way the per-variant catalog files are.
+*/
+const CN_APP_VERSION_FILENAME = ".workbuddy-app-version.json";
+/**
+* Whether a value is a CLI version that may reach a header.
+*
+* Tolerates a prerelease suffix (`2.137.1-rc.1`) because the bundled CLI's
+* own metadata uses that spelling; anything with whitespace, CR or LF never
+* passes — the value is interpolated into an HTTP header.
+*/
+function validCliVersion(value) {
+	return typeof value === "string" && /^\d{1,6}(?:\.\d{1,6}){1,3}(?:-[0-9A-Za-z.]+)?$/u.test(value);
+}
+/** macOS App-bundle roots, searched in the order `app-version.ts` uses. */
+function macAppRoots() {
+	return ["/Applications", join(homedir(), "Applications")];
+}
+/** Path of the bundled agent CLI's package.json inside an App bundle. */
+function cliPackagePath(bundle) {
+	return join(bundle, "Contents", "Resources", "app.asar.unpacked", "cli", "package.json");
+}
+/**
+* The bundled agent CLI's real version, or `undefined` when it does not resolve.
+*
+* `cli/package.json` ships a `0.0.0` placeholder in `version` with the real
+* version in `publishConfig.customPackage.version`; a valid non-placeholder
+* `version` wins, otherwise the custom-package value applies, and unreadable
+* or invalid metadata yields `undefined` (the caller drops the `CLI/…` UA
+* token rather than guessing).
+*/
+async function readCliVersion(bundle) {
+	let document;
+	try {
+		document = JSON.parse(await readFile(cliPackagePath(bundle), "utf8"));
+	} catch {
+		return;
+	}
+	if (typeof document !== "object" || document === null || Array.isArray(document)) return void 0;
+	const pkg = document;
+	const declared = pkg["version"];
+	if (validCliVersion(declared) && declared !== "0.0.0") return declared;
+	const publishConfig = pkg["publishConfig"];
+	const customPackage = typeof publishConfig === "object" && publishConfig !== null && !Array.isArray(publishConfig) ? publishConfig : void 0;
+	const customVersion = (typeof customPackage?.["customPackage"] === "object" && customPackage["customPackage"] !== null && !Array.isArray(customPackage["customPackage"]) ? customPackage["customPackage"] : void 0)?.["version"];
+	return validCliVersion(customVersion) ? customVersion : void 0;
+}
+/**
+* Build the chat User-Agent for one region.
+*
+* Throws on an invalid version rather than interpolating one into a header;
+* `resolveChatIdentity` never produces such an identity, so the throw is a
+* last gate against future call-site mistakes, not an expected path.
+*/
+function chatUserAgent(identity, region) {
+	if (!validAppVersion(identity.clientVersion)) throw new Error(`invalid client version for chat User-Agent: ${JSON.stringify(identity.clientVersion)}`);
+	if (identity.cliVersion !== void 0 && !validCliVersion(identity.cliVersion)) throw new Error(`invalid CLI version for chat User-Agent: ${JSON.stringify(identity.cliVersion)}`);
+	const product = region === "global" ? "WorkBuddy AI" : "WorkBuddy";
+	const parts = [`WorkBuddy/${identity.clientVersion}`, `${product}/${identity.clientVersion}`];
+	if (identity.cliVersion !== void 0) parts.push(`CLI/${identity.cliVersion}`);
+	return parts.join(" ");
+}
+/** The installed CN desktop bundle, or `undefined` when it is not installed (or not readable). */
+async function installedCnApp() {
+	if (process.platform !== "darwin") return void 0;
+	for (const root of macAppRoots()) {
+		const bundle = join(root, "WorkBuddy.app");
+		const version = await readBundleVersion(join(bundle, "Contents", "Info.plist"));
+		if (version !== void 0) return {
+			version,
+			bundle
+		};
+	}
+}
+/** Default CN saved-cache path. */
+function cnSavedVersionPath() {
+	return join(resolveDshHome(), CN_APP_VERSION_FILENAME);
+}
+/**
+* Resolve the chat identity for one region: installed App → region's saved
+* value → compiled-in fallback. Never throws — a missing App, an unreadable
+* plist, a failed cache write, or a reader that throws outright all degrade
+* to {@link fallbackChatIdentity}; resolution never blocks a message.
+*
+* The production path caches per region (a message must not re-read the
+* install tree); any injected option bypasses the cache entirely so tests
+* with different readers cannot observe each other's resolutions.
+*/
+async function resolveChatIdentity(region, options = {}) {
+	const injectable = options.installedCn !== void 0 || options.resolveIntl !== void 0 || options.cliVersion !== void 0 || options.cnSavedPath !== void 0;
+	if (!injectable) {
+		const cached = cache.get(region);
+		if (cached !== void 0) return cached;
+	}
+	let identity;
+	try {
+		identity = region === "global" ? await resolveGlobalIdentity(options) : await resolveCnIdentity(options);
+	} catch {
+		return fallbackChatIdentity(region);
+	}
+	if (!injectable) cache.set(region, identity);
+	return identity;
+}
+const cache = /* @__PURE__ */ new Map();
+/**
+* The region's compiled-in fallback identity: the desktop form with the
+* built-in version and no `CLI/…` segment. This is the single degraded
+* shape every failure path converges on — a thrown reader, an unreadable
+* bundle, or a missing cache all present this, never the legacy CLI UA.
+*/
+function fallbackChatIdentity(region) {
+	return { clientVersion: region === "global" ? FALLBACK_APP_VERSION : FALLBACK_CN_APP_VERSION };
+}
+/** CN: installed `WorkBuddy.app` → CN saved cache → CN fallback. */
+async function resolveCnIdentity(options) {
+	const savedPath = options.cnSavedPath ?? cnSavedVersionPath();
+	const installed = await (options.installedCn ?? installedCnApp)();
+	if (installed !== void 0 && validAppVersion(installed.version)) {
+		const cliVersion = await (options.cliVersion ?? readCliVersion)(installed.bundle);
+		const identity = {
+			clientVersion: installed.version,
+			...cliVersion !== void 0 && validCliVersion(cliVersion) ? { cliVersion } : {}
+		};
+		try {
+			await writeFileAtomic(savedPath, `${JSON.stringify({
+				version: identity.clientVersion,
+				observedAt: Date.now()
+			}, null, 2)}\n`, {
+				mode: 384,
+				dirMode: 448
+			});
+		} catch {}
+		return identity;
+	}
+	try {
+		const saved = JSON.parse(await readFile(savedPath, "utf8"));
+		if (typeof saved === "object" && saved !== null && !Array.isArray(saved)) {
+			const document = saved;
+			if (validAppVersion(document["version"])) return { clientVersion: document["version"] };
+		}
+	} catch {}
+	return fallbackChatIdentity("cn");
+}
+/**
+* International: reuse `app-version.ts`'s installed → saved → fallback chain
+* (its cache format and the catalog's version source stay untouched). The
+* CLI version is read only when that chain reports the installed bundle; a
+* saved or fallback resolution has no bundle path and drops the `CLI/…` token.
+* The CN cache is never read or written on this path.
+*/
+async function resolveGlobalIdentity(options) {
+	const info = await (options.resolveIntl ?? resolveAppVersion)();
+	const clientVersion = validAppVersion(info.version) ? info.version : FALLBACK_APP_VERSION;
+	let cliVersion;
+	if (info.bundle !== void 0) {
+		const read = await (options.cliVersion ?? readCliVersion)(info.bundle);
+		if (read !== void 0 && validCliVersion(read)) cliVersion = read;
+	}
+	return {
+		clientVersion,
+		...cliVersion === void 0 ? {} : { cliVersion }
+	};
+}
+//#endregion
 //#region src/probe.ts
 /**
 * The reasoning-effort probe: decide whether a model's `reasoning_effort`
@@ -288,6 +485,7 @@ async function probeModel(options) {
 const CN_CHAT_BASE = "https://copilot.tencent.com";
 const CN_BILLING_BASE = "https://www.codebuddy.cn";
 const GLOBAL_BASE = "https://www.workbuddy.ai";
+/** Shared CLI-form User-Agent for refresh and the CN catalog; chat and probe present the desktop identity (client-identity.ts). */
 const CLIENT_UA = "CLI/2.63.2 CodeBuddy/2.63.2";
 const JSON_TIMEOUT_MS = 3e4;
 const ERROR_BODY_LIMIT = 4096;
@@ -427,10 +625,17 @@ function commonHeaders(credential) {
 		"User-Agent": CLIENT_UA
 	};
 }
-/** Chat request headers, including the X-No-* conventions the official CLI uses. */
-function chatHeaders(credential) {
+/**
+* Chat request headers, including the X-No-* conventions the official CLI uses.
+*
+* `userAgent` carries the desktop identity for chat and probe requests; when
+* it is absent the shared CLI-form UA applies. Refresh shares `commonHeaders`
+* but never this override, so the two paths cannot drift into each other.
+*/
+function chatHeaders(credential, userAgent) {
 	return {
 		...commonHeaders(credential),
+		...userAgent === void 0 ? {} : { "User-Agent": userAgent },
 		"Content-Type": "application/json",
 		...credential.uid === "" ? { "X-No-User-Id": "1" } : { "X-User-Id": credential.uid },
 		...credential.enterpriseId === void 0 || credential.enterpriseId === "" ? { "X-No-Enterprise-Id": "1" } : { "X-Enterprise-Id": credential.enterpriseId },
@@ -568,22 +773,32 @@ var WorkBuddyUpstreamClient = class {
 	* Injectable so tests never read the real filesystem.
 	*/
 	resolveAppVersion;
+	/** Chat-identity resolver; see {@link WorkBuddyUpstreamClientOptions.resolveChatIdentity}. */
+	resolveChatIdentity;
 	/** Provenance of the most recent successful catalog fetch, for the card. */
 	lastCatalog;
 	constructor(options = {}) {
 		this.resolveAppVersion = options.resolveAppVersion ?? (() => resolveAppVersion());
+		this.resolveChatIdentity = options.resolveChatIdentity ?? ((region) => resolveChatIdentity(region));
 	}
 	/** POST the chat endpoint; a successful answer is the raw SSE response. */
 	async chatStream(credential, bodyJson, signal) {
+		const region = regionOf(credential.domain);
+		let userAgent;
+		try {
+			userAgent = chatUserAgent(await this.resolveChatIdentity(region), region);
+		} catch {
+			userAgent = chatUserAgent(fallbackChatIdentity(region), region);
+		}
 		let response;
 		try {
 			response = await fetch(`${chatBase(credential)}/v2/chat/completions`, {
 				method: "POST",
 				headers: {
-					...chatHeaders(credential),
+					...chatHeaders(credential, userAgent),
 					"Authorization": `Bearer ${credential.accessToken}`
 				},
-				body: regionOf(credential.domain) === "global" ? prepareInternationalChatBody(bodyJson) : bodyJson,
+				body: region === "global" ? prepareInternationalChatBody(bodyJson) : bodyJson,
 				...signal === void 0 ? {} : { signal }
 			});
 		} catch (error) {
@@ -751,6 +966,12 @@ var WorkBuddyUpstreamClient = class {
 	*/
 	async probeEffort(credential, model, effort, signal) {
 		const international = regionOf(credential.domain) === "global";
+		let userAgent;
+		try {
+			userAgent = chatUserAgent(await this.resolveChatIdentity(international ? "global" : "cn"), international ? "global" : "cn");
+		} catch {
+			userAgent = chatUserAgent(fallbackChatIdentity(international ? "global" : "cn"), international ? "global" : "cn");
+		}
 		const payload = {
 			model,
 			stream: true,
@@ -769,7 +990,7 @@ var WorkBuddyUpstreamClient = class {
 			response = await fetch(`${chatBase(credential)}/v2/chat/completions`, {
 				method: "POST",
 				headers: {
-					...chatHeaders(credential),
+					...chatHeaders(credential, userAgent),
 					"Authorization": `Bearer ${credential.accessToken}`
 				},
 				body: JSON.stringify(payload),
@@ -1415,7 +1636,7 @@ const FALLBACK_WORKBUDDY_MODELS = [
 	},
 	{
 		id: "hy3-x",
-		name: "Hy3",
+		name: "Hy3-X",
 		contextWindow: 192e3,
 		maxTokens: 64e3,
 		supportsImages: true,
@@ -2123,7 +2344,7 @@ const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-connect/ai/status";
 const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-connect/ai/probe";
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_CONNECT_VERSION = "0.5.0";
+const WORKBUDDY_CONNECT_VERSION = "0.5.2";
 //#endregion
 //#region src/host-heartbeat.ts
 /**
@@ -2318,4 +2539,4 @@ function variantFor(id) {
 	return WORKBUDDY_VARIANTS.find((variant) => variant.id === id);
 }
 //#endregion
-export { parseModelCatalog as A, readBundleVersion as B, desktopAuthCandidatesFor as C, classifyUpstreamError as D, WorkBuddyUpstreamClient as E, probeModel as F, validAppVersion as H, randomSentinel as I, WORKBUDDY_APP_VERSION_FILENAME as L, prepareInternationalChatBody as M, regionOf as N, modelWithCurrentPromotion as O, PROBE_EFFORT_CANDIDATES as P, appUserAgent as R, defaultDesktopAuthPath as S, workbuddyOwnAuthPath as T, resolveAppVersion as V, WorkBuddyCatalog as _, WORKBUDDY_HOST_HEARTBEAT_FILENAME as a, WorkBuddyCredentialStore as b, processStartTimeMs as c, writeHostHeartbeat as d, WORKBUDDY_CONNECT_VERSION as f, FALLBACK_WORKBUDDY_MODELS as g, FALLBACK_WORKBUDDY_AI_MODELS as h, variantFor as i, prepareChatBody as j, normalizeCredits as k, readHostHeartbeat as l, WORKBUDDY_STATUS_PATH as m, CN_VARIANT as n, clearHostHeartbeat as o, WORKBUDDY_PROBE_PATH as p, WORKBUDDY_VARIANTS as r, isHeartbeatProcessAlive as s, AI_VARIANT as t, workbuddyHostHeartbeatPath as u, WORKBUDDY_AUTH_FILENAME as v, parseWorkBuddyAuth as w, defaultDesktopAuthCandidates as x, WORKBUDDY_AUTH_FILE_ENV as y, installedAppVersion as z };
+export { parseModelCatalog as A, fallbackChatIdentity as B, desktopAuthCandidatesFor as C, classifyUpstreamError as D, WorkBuddyUpstreamClient as E, probeModel as F, appUserAgent as G, resolveChatIdentity as H, randomSentinel as I, resolveAppVersion as J, installedAppVersion as K, CN_APP_VERSION_FILENAME as L, prepareInternationalChatBody as M, regionOf as N, modelWithCurrentPromotion as O, PROBE_EFFORT_CANDIDATES as P, FALLBACK_CN_APP_VERSION as R, defaultDesktopAuthPath as S, workbuddyOwnAuthPath as T, validCliVersion as U, readCliVersion as V, WORKBUDDY_APP_VERSION_FILENAME as W, validAppVersion as Y, WorkBuddyCatalog as _, WORKBUDDY_HOST_HEARTBEAT_FILENAME as a, WorkBuddyCredentialStore as b, processStartTimeMs as c, writeHostHeartbeat as d, WORKBUDDY_CONNECT_VERSION as f, FALLBACK_WORKBUDDY_MODELS as g, FALLBACK_WORKBUDDY_AI_MODELS as h, variantFor as i, prepareChatBody as j, normalizeCredits as k, readHostHeartbeat as l, WORKBUDDY_STATUS_PATH as m, CN_VARIANT as n, clearHostHeartbeat as o, WORKBUDDY_PROBE_PATH as p, readBundleVersion as q, WORKBUDDY_VARIANTS as r, isHeartbeatProcessAlive as s, AI_VARIANT as t, workbuddyHostHeartbeatPath as u, WORKBUDDY_AUTH_FILENAME as v, parseWorkBuddyAuth as w, defaultDesktopAuthCandidates as x, WORKBUDDY_AUTH_FILE_ENV as y, chatUserAgent as z };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-connect",
   "displayName": "DSH WorkBuddy Connect",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "author": "corrinehu",
   "keywords": [
     "dsh-plugin",
@@ -56,6 +56,8 @@
     },
     "client": {
       "inject": [
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-api-session-controller",
         "@deepseek-ai/dsh-client-ui-renderer",
         "@deepseek-ai/dsh-client-ui-settings-plugins",
         "@deepseek-ai/dsh-client-ui-conversation",