dsh-workbuddy-connect 0.6.2 → 0.6.3

package/README.en.md

@@ -145,6 +145,7 @@ dsh plugin --profile web exec dsh-workbuddy-connect doctor --provider workbuddy-
 ## Known limitations
 
 - Verified on macOS with the DSH Web / Desktop / TUI profiles (as of 0.3.2 this requires `0.1.5-rc.1`+ and Node 22+; TUI requires the terminal UI package `0.10.0-beta.5` or newer — see the Install section). Windows probes Local and Roaming AppData in order; WSL first reads credentials from the mounted Windows user profile. If the Windows and Linux user names differ and Windows environment variables are not forwarded into WSL, point `WORKBUDDY_AUTH_FILE` (or `WORKBUDDY_AI_AUTH_FILE` for the international version) at the actual file.
+- **Encrypted desktop credential helper discovery**: the CN version uses the verified app discovery for macOS; on Windows it first checks `%LOCALAPPDATA%\Programs\WorkBuddy\WorkBuddy.exe`, then the WorkBuddy uninstall registry records. If automatic discovery cannot resolve it, set `WORKBUDDY_ELECTRON_BIN` to the actual `WorkBuddy.exe`, then fully quit and restart DSH (the plugin reads this variable when constructed). Linux has no built-in auto-discovery; the card offers Agent Assist when needed, while an explicit environment path remains supported. Windows auto-discovery is not enabled for WorkBuddy AI.
 - **The international version's model catalog comes from the app's own interface**: the service splits it by User-Agent, which is a private implementation detail that a server-side change can break. When that happens the plugin degrades to this account's last successful catalog and then to its built-in roster, showing the source (live / saved / built-in), the fetch time, and the failure reason on the card — but long-term compatibility is not guaranteed. The CN version's catalog uses the same interface as the official CLI and is unaffected.
 - **International-version environments not yet covered**: on Windows / WSL / Linux no reliable source for the international app's version has been located yet, so the saved value or the built-in default is used. On macOS, real-shim checks covered complete GPT-family replies, tool calls, and continued turns.
 - **Behaviour change with no credentials**: a version whose app was never signed in — and that left no plugin-owned copy — no longer shows a model group. The CN version used to display a built-in fallback list, but every model on it failed when selected.

package/README.md

@@ -154,6 +154,7 @@ dsh plugin --profile web exec dsh-workbuddy-connect doctor --provider workbuddy-
 ## 已知限制
 
 - 在 macOS 的 DSH Web / Desktop / TUI 下验证通过（0.3.2 起要求 `0.1.5-rc.1`+、Node 22+；TUI 需终端界面插件 `0.10.0-beta.5` 及以上，见安装章节说明）。Windows 会依次探测 Local 与 Roaming AppData；WSL 会优先从挂载的 Windows 用户目录读取登录凭据。若 Windows 与 Linux 用户名不同且 Windows 环境变量未传入 WSL，请通过 `WORKBUDDY_AUTH_FILE`（国际版为 `WORKBUDDY_AI_AUTH_FILE`）指定实际位置。
+- **加密桌面凭据的解密程序定位**：国内版 macOS 使用已验证的 App 发现；Windows 先检查 `%LOCALAPPDATA%\Programs\WorkBuddy\WorkBuddy.exe`，再检查 WorkBuddy 卸载注册表记录。若自动定位仍不可用，可设置 `WORKBUDDY_ELECTRON_BIN` 指向实际的 `WorkBuddy.exe`，然后完全退出并重启 DSH（插件在构造时读取该变量）。Linux 没有内置自动定位；失败时卡片提供 Agent Assist，显式环境变量仍可用。国际版不启用 Windows 自动定位。
 - **国际版的模型目录来自 App 界面接口**：服务端按 User-Agent 分流下发，属私有实现，上游改动可能使其失效。届时插件按「本账号上次成功目录 → 内置目录」降级，并在卡片上标明来源（实时 / 已保存 / 内置）、更新时间与失败原因，但不能保证长期兼容。国内版目录走官方 CLI 同款接口，不受此影响。
 - **国际版仍未覆盖的环境**：Windows / WSL / Linux 下国际版 App 的版本读取尚未找到可靠来源，会退回最近保存的版本或内置值。macOS 上已通过真实 shim 验证 GPT 系完整回复、工具调用与续轮。
 - **无凭据时的行为变化**：某版 App 从未登录、也没留下插件自留副本时，该版模型分组不再显示。此前国内版会显示一份内置兜底列表，但那些模型选了必然报错。

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { D as WorkBuddyUpstreamClient, E as WorkBuddyAtRestKeyProvider, Y as resolveAppVersion, b as WorkBuddyCredentialStore, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, l as readHostHeartbeat, n as CN_VARIANT, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, u as workbuddyHostHeartbeatPath } from "./variants-B3Pa4EBr.js";
+import { D as electronDiscoveryFor, E as WorkBuddyAtRestKeyProvider, O as WorkBuddyUpstreamClient, X as resolveAppVersion, b as WorkBuddyCredentialStore, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, l as readHostHeartbeat, n as CN_VARIANT, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, u as workbuddyHostHeartbeatPath } from "./variants-D_oxWP_K.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts
@@ -30,8 +30,8 @@ function printJson(value) {
 * One variant's store plus the client that performs its refreshes.
 *
 * The key provider is injected explicitly, and per variant, for the same
-* reason the plugin host does it: discovery is CN/macOS-only, so the provider
-* must not be left to its no-arg default — that default is deliberately
+* reason the plugin host does it: discovery is CN/platform-specific, so the
+* provider must not be left to its no-arg default — that default is deliberately
 * `discovery: 'none'`, and relying on it here would quietly strip the CN CLI
 * of the decryption it has always had.
 */
@@ -40,7 +40,7 @@ function makeStore(variant) {
 	return new WorkBuddyCredentialStore({
 		variant,
 		refresh: (credential) => client.refreshToken(credential),
-		keyProvider: new WorkBuddyAtRestKeyProvider({ discovery: variant.id === CN_VARIANT.id ? "macos-workbuddy" : "none" })
+		keyProvider: new WorkBuddyAtRestKeyProvider({ discovery: electronDiscoveryFor(variant) })
 	});
 }
 /** The plugin-owned credential copy for one variant, for display. */

package/lib/index.d.ts

@@ -20,9 +20,9 @@ type WorkBuddySignedOutReasonCode =
 'credential-region-mismatch' |
 /** An encrypted credential exists but could not be opened (wrong key, GCM failure, helper crash). */
 'encrypted-credential-unreadable' |
-/** CN/macOS: discovery ran to completion and produced no usable candidate. */
+/** CN on a supported platform: discovery ran to completion and found no usable candidate. */
 'electron-binary-not-found' |
-/** CN/macOS: discovery found more than one distinct usable app. */
+/** CN on a supported platform: discovery found more than one distinct usable app. */
 'electron-binary-ambiguous' |
 /** No auto-discovery for this product/platform and no explicit path configured. */
 'electron-binary-unavailable' |
@@ -31,145 +31,6 @@ type WorkBuddySignedOutReasonCode =
 /** Discovery could not finish: tool missing, timeout, output overflow, unreadable plist. */
 'electron-discovery-incomplete';
 //#endregion
-//#region src/desktop-credential-protection.d.ts
-/** The four states a desktop auth document can be read as. */
-type DesktopAuthFormat = 'absent' | 'plaintext' | 'encrypted' | 'unrecognized';
-/** The spawned helper. Separated from the provider so tests can stand it in. */
-type WorkBuddyKeyPayloadSource = () => Promise<string>;
-/**
- * Which automatic discovery, if any, this provider may run when no explicit
- * binary is configured.
- *
- * `none` is the safe default: a provider that has not been told which product
- * it serves must not reach for another product's app. `macos-workbuddy` is the
- * CN line — the only one whose at-rest credentials and app layout have been
- * verified live — and resolves the platform default and then Spotlight.
- */
-type WorkBuddyElectronDiscovery = 'none' | 'macos-workbuddy';
-/** Seams the discovery flow runs through, so tests never spawn a process. */
-interface WorkBuddyDiscoveryTools {
-  /** Candidate `.app` bundles for the CN bundle id, or a throw for an unusable tool. */
-  findApps: (signal: AbortSignal) => Promise<readonly string[]>;
-  /**
-   * `CFBundleIdentifier` of a bundle, or `undefined` when the tool could not
-   * read it — which is "we could not check this candidate", never "it does not
-   * match". A successful read of a *different* id returns that id, and the
-   * caller excludes the candidate.
-   */
-  bundleIdentifier: (bundlePath: string, signal: AbortSignal) => Promise<string | undefined>;
-  /** Display version, best effort; `undefined` when unavailable. */
-  bundleVersion: (bundlePath: string, signal: AbortSignal) => Promise<string | undefined>;
-}
-/** Provider options. */
-interface WorkBuddyAtRestKeyProviderOptions {
-  /** Explicit Electron binary; overrides the platform default and env. */
-  electronPath?: string;
-  /** Helper timeout in milliseconds; default 10s. */
-  timeoutMs?: number;
-  /**
-   * Where the payload comes from. Defaults to spawning WorkBuddy's own
-   * Electron with `ELECTRON_RUN_AS_NODE=1`; tests supply a stand-in so no
-   * test ever touches the real binary or a real key. Supplying this replaces
-   * path *resolution* too, so tests about resolution use
-   * {@link spawnHelper} instead.
-   */
-  source?: WorkBuddyKeyPayloadSource;
-  /**
-   * Runs the helper at the resolved path. Distinct from {@link source}, which
-   * replaces the whole payload path: this seam keeps resolution — explicit
-   * config, platform default, discovery — real, so tests can exercise it
-   * without spawning anything.
-   */
-  spawnHelper?: (electronPath: string) => Promise<string>;
-  /**
-   * Automatic discovery budget; defaults to `'none'` (see
-   * {@link WorkBuddyElectronDiscovery}). Passed explicitly per variant at the
-   * composition root, never inferred from the environment.
-   */
-  discovery?: WorkBuddyElectronDiscovery;
-  /**
-   * Platform default binary, consulted only when `discovery` is enabled and no
-   * explicit path is configured. Injectable so tests can force the fallback
-   * branch without moving the real app; `null` means "no default here".
-   */
-  defaultElectronPath?: string | undefined;
-  /** Discovery subprocesses; injectable so tests never spawn. */
-  tools?: WorkBuddyDiscoveryTools;
-  /**
-   * Total budget for one discovery run, covering the search and every
-   * candidate check. Injectable so tests can exercise exhaustion without
-   * waiting out the production 10s.
-   */
-  discoveryBudgetMs?: number;
-}
-/**
- * In-memory protector-key resolver: one spawn per key id, single-flight, never
- * persisted. The cache is keyed by the id envelopes ask for, so an envelope
- * sealed under a rotated key triggers exactly one fresh resolution.
- */ declare class WorkBuddyAtRestKeyProvider {
-  /**
-   * The explicit binary, when one was configured. `undefined` here means "the
-   * caller did not name one", which is what lets discovery run — an explicit
-   * path that turns out to be unusable is an error, never a reason to look for
-   * a different app.
-   */
-  private readonly explicitPath;
-  private readonly defaultPath;
-  private readonly discovery;
-  private readonly tools;
-  private readonly discoveryBudgetMs;
-  private readonly timeoutMs;
-  private readonly source;
-  private readonly spawnHelper;
-  /**
-   * The path discovery settled on, cached only on success. A failure leaves
-   * this unset so the next attempt tries again — the user may install or move
-   * the app without restarting DSH.
-   */
-  private discoveredPath;
-  private cache;
-  private inflight;
-  constructor(options?: WorkBuddyAtRestKeyProviderOptions);
-  /**
-   * The binary the default helper would use, for diagnostics.
-   *
-   * Reports a *discovery result* once one exists, so diagnostics describe what
-   * would actually run rather than the default that was bypassed. Discovery
-   * itself stays in {@link resolveElectronPath}: this accessor never triggers a
-   * search (the constructor must remain I/O-free, and callers may ask before
-   * any resolution has happened).
-   */
-  helperPath(): string | undefined;
-  /**
-   * A protector key matching one of the requested envelope key ids. The first
-   * id the cache answers wins; otherwise one spawn resolves the current key,
-   * which must match a request — a mismatch means the envelopes were sealed by
-   * a different install than the one this machine now runs, and no key we can
-   * reach will open them.
-   */
-  protectorKeyFor(requested: readonly string[]): Promise<Buffer>;
-  private ingest;
-  /**
-   * The binary to spawn, or a diagnosable error saying why there is none.
-   *
-   * Order is the contract: an explicit path is used as-is and never falls back;
-   * discovery runs only for a provider that was configured for it, and only
-   * after the platform default has been tried and found unusable.
-   */
-  private resolveElectronPath;
-  /**
-   * Resolve the CN app through Spotlight, then prove each candidate's identity
-   * before it can be executed.
-   *
-   * The whole flow shares one budget: a hang in one candidate must not extend
-   * the wait for the others, and running out of budget is reported as an
-   * unfinished check rather than an absent app.
-   */
-  private discoverMacosApp;
-  private spawnPayload;
-  private spawnAt;
-}
-//#endregion
 //#region src/app-version.d.ts
 /** Basename of the saved version under `$DSH_HOME`. */
 declare const WORKBUDDY_APP_VERSION_FILENAME = ".workbuddy-ai-version.json";
@@ -260,7 +121,7 @@ declare const FALLBACK_CN_APP_VERSION = "5.5.6";
 declare const CN_APP_VERSION_FILENAME = ".workbuddy-app-version.json";
 /** The resolved identity a chat request presents as. */
 interface ChatIdentity {
-  /** Desktop App version; drives both `WorkBuddy/<v>` product tokens. */
+  /** Desktop App version; drives the desktop UA and `X-IDE-Version`. */
   clientVersion: string;
   /** Bundled agent-CLI version; absent drops the `CLI/…` UA token. */
   cliVersion?: string;
@@ -795,6 +656,161 @@ declare const AI_VARIANT: WorkBuddyVariant;
 /** Look up a variant by provider id. */
 declare function variantFor(id: string): WorkBuddyVariant | undefined;
 //#endregion
+//#region src/desktop-credential-protection.d.ts
+/** The four states a desktop auth document can be read as. */
+type DesktopAuthFormat = 'absent' | 'plaintext' | 'encrypted' | 'unrecognized';
+/** The spawned helper. Separated from the provider so tests can stand it in. */
+type WorkBuddyKeyPayloadSource = () => Promise<string>;
+/**
+ * Which automatic discovery, if any, this provider may run when no explicit
+ * binary is configured.
+ *
+ * `none` is the safe default: a provider that has not been told which product
+ * it serves must not reach for another product's app. The CN line selects a
+ * platform-specific discovery only where that platform's app layout has been
+ * verified; Global remains `none`.
+ */
+type WorkBuddyElectronDiscovery = 'none' | 'macos-workbuddy' | 'windows-workbuddy';
+/** Seams the discovery flow runs through, so tests never spawn a process. */
+interface WorkBuddyDiscoveryTools {
+  /** Candidate `.app` bundles for the CN bundle id, or a throw for an unusable tool. */
+  findApps: (signal: AbortSignal) => Promise<readonly string[]>;
+  /**
+   * `CFBundleIdentifier` of a bundle, or `undefined` when the tool could not
+   * read it — which is "we could not check this candidate", never "it does not
+   * match". A successful read of a *different* id returns that id, and the
+   * caller excludes the candidate.
+   */
+  bundleIdentifier: (bundlePath: string, signal: AbortSignal) => Promise<string | undefined>;
+  /** Display version, best effort; `undefined` when unavailable. */
+  bundleVersion: (bundlePath: string, signal: AbortSignal) => Promise<string | undefined>;
+}
+/** Windows-only seam for querying one uninstall registry root. */
+interface WorkBuddyWindowsDiscoveryTools {
+  queryUninstallRoot: (root: string, signal: AbortSignal) => Promise<string>;
+}
+/** Provider options. */
+interface WorkBuddyAtRestKeyProviderOptions {
+  /** Explicit Electron binary; overrides the platform default and env. */
+  electronPath?: string;
+  /** Helper timeout in milliseconds; default 10s. */
+  timeoutMs?: number;
+  /**
+   * Where the payload comes from. Defaults to spawning WorkBuddy's own
+   * Electron with `ELECTRON_RUN_AS_NODE=1`; tests supply a stand-in so no
+   * test ever touches the real binary or a real key. Supplying this replaces
+   * path *resolution* too, so tests about resolution use
+   * {@link spawnHelper} instead.
+   */
+  source?: WorkBuddyKeyPayloadSource;
+  /**
+   * Runs the helper at the resolved path. Distinct from {@link source}, which
+   * replaces the whole payload path: this seam keeps resolution — explicit
+   * config, platform default, discovery — real, so tests can exercise it
+   * without spawning anything.
+   */
+  spawnHelper?: (electronPath: string) => Promise<string>;
+  /**
+   * Automatic discovery budget; defaults to `'none'` (see
+   * {@link WorkBuddyElectronDiscovery}). Passed explicitly per variant at the
+   * composition root, never inferred from the environment.
+   */
+  discovery?: WorkBuddyElectronDiscovery;
+  /**
+   * Platform default binary, consulted only when `discovery` is enabled and no
+   * explicit path is configured. Injectable so tests can force the fallback
+   * branch without moving the real app; `null` means "no default here".
+   */
+  defaultElectronPath?: string | undefined;
+  /** Discovery subprocesses; injectable so tests never spawn. */
+  tools?: WorkBuddyDiscoveryTools;
+  /** Windows registry discovery subprocess; injectable so tests never spawn. */
+  windowsTools?: WorkBuddyWindowsDiscoveryTools;
+  /** Platform override for deterministic discovery tests. */
+  platform?: NodeJS.Platform;
+  /**
+   * Total budget for one discovery run, covering the search and every
+   * candidate check. Injectable so tests can exercise exhaustion without
+   * waiting out the production 10s.
+   */
+  discoveryBudgetMs?: number;
+}
+/**
+ * In-memory protector-key resolver: one spawn per key id, single-flight, never
+ * persisted. The cache is keyed by the id envelopes ask for, so an envelope
+ * sealed under a rotated key triggers exactly one fresh resolution.
+ */ declare class WorkBuddyAtRestKeyProvider {
+  /**
+   * The explicit binary, when one was configured. `undefined` here means "the
+   * caller did not name one", which is what lets discovery run — an explicit
+   * path that turns out to be unusable is an error, never a reason to look for
+   * a different app.
+   */
+  private readonly explicitPath;
+  private readonly defaultPath;
+  private readonly discovery;
+  private readonly tools;
+  private readonly windowsTools;
+  private readonly platform;
+  private readonly discoveryBudgetMs;
+  private readonly timeoutMs;
+  private readonly source;
+  private readonly spawnHelper;
+  /**
+   * The path discovery settled on, cached only on success. A failure leaves
+   * this unset so the next attempt tries again — the user may install or move
+   * the app without restarting DSH.
+   */
+  private discoveredPath;
+  private cache;
+  private inflight;
+  constructor(options?: WorkBuddyAtRestKeyProviderOptions);
+  /**
+   * The binary the default helper would use, for diagnostics.
+   *
+   * Reports a *discovery result* once one exists, so diagnostics describe what
+   * would actually run rather than the default that was bypassed. Discovery
+   * itself stays in {@link resolveElectronPath}: this accessor never triggers a
+   * search (the constructor must remain I/O-free, and callers may ask before
+   * any resolution has happened).
+   */
+  helperPath(): string | undefined;
+  /**
+   * A protector key matching one of the requested envelope key ids. The first
+   * id the cache answers wins; otherwise one spawn resolves the current key,
+   * which must match a request — a mismatch means the envelopes were sealed by
+   * a different install than the one this machine now runs, and no key we can
+   * reach will open them.
+   */
+  protectorKeyFor(requested: readonly string[]): Promise<Buffer>;
+  private ingest;
+  /**
+   * The binary to spawn, or a diagnosable error saying why there is none.
+   *
+   * Order is the contract: an explicit path is used as-is and never falls back;
+   * discovery runs only for a provider that was configured for it, and only
+   * after the platform default has been tried and found unusable.
+   */
+  private resolveElectronPath;
+  /**
+   * Resolve the CN app through Spotlight, then prove each candidate's identity
+   * before it can be executed.
+   *
+   * The whole flow shares one budget: a hang in one candidate must not extend
+   * the wait for the others, and running out of budget is reported as an
+   * unfinished check rather than an absent app.
+   */
+  private discoverMacosApp;
+  /**
+   * Resolve the CN app through Windows uninstall records. Registry entries
+   * provide hints, not trust: every DisplayIcon candidate must still be a
+   * WorkBuddy Electron binary with the known Electron layout before execution.
+   */
+  private discoverWindowsApp;
+  private spawnPayload;
+  private spawnAt;
+}
+//#endregion
 //#region src/auth.d.ts
 /** Normalized WorkBuddy credential, timestamps in epoch milliseconds. */
 interface WorkBuddyCredential {

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as normalizeCredits, B as chatUserAgent, C as desktopAuthCandidatesFor, D as WorkBuddyUpstreamClient, E as WorkBuddyAtRestKeyProvider, F as PROBE_EFFORT_CANDIDATES, G as WORKBUDDY_APP_VERSION_FILENAME, H as readCliVersion, I as probeModel, J as readBundleVersion, K as appUserAgent, L as randomSentinel, M as prepareChatBody, N as prepareInternationalChatBody, O as classifyUpstreamError, P as regionOf, R as CN_APP_VERSION_FILENAME, S as defaultDesktopAuthPath, T as workbuddyOwnAuthPath, U as resolveChatIdentity, V as fallbackChatIdentity, W as validCliVersion, X as validAppVersion, Y as resolveAppVersion, _ as WorkBuddyCatalog, a as WORKBUDDY_HOST_HEARTBEAT_FILENAME, b as WorkBuddyCredentialStore, c as processStartTimeMs, d as writeHostHeartbeat, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, j as parseModelCatalog, k as modelWithCurrentPromotion, l as readHostHeartbeat, n as CN_VARIANT, o as clearHostHeartbeat, q as installedAppVersion, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, t as AI_VARIANT, u as workbuddyHostHeartbeatPath, v as WORKBUDDY_AUTH_FILENAME, w as parseWorkBuddyAuth, x as defaultDesktopAuthCandidates, y as WORKBUDDY_AUTH_FILE_ENV, z as FALLBACK_CN_APP_VERSION } from "./variants-B3Pa4EBr.js";
+import { A as modelWithCurrentPromotion, B as FALLBACK_CN_APP_VERSION, C as desktopAuthCandidatesFor, D as electronDiscoveryFor, E as WorkBuddyAtRestKeyProvider, F as regionOf, G as validCliVersion, H as fallbackChatIdentity, I as PROBE_EFFORT_CANDIDATES, J as installedAppVersion, K as WORKBUDDY_APP_VERSION_FILENAME, L as probeModel, M as parseModelCatalog, N as prepareChatBody, O as WorkBuddyUpstreamClient, P as prepareInternationalChatBody, R as randomSentinel, S as defaultDesktopAuthPath, T as workbuddyOwnAuthPath, U as readCliVersion, V as chatUserAgent, W as resolveChatIdentity, X as resolveAppVersion, Y as readBundleVersion, Z as validAppVersion, _ as WorkBuddyCatalog, a as WORKBUDDY_HOST_HEARTBEAT_FILENAME, b as WorkBuddyCredentialStore, c as processStartTimeMs, d as writeHostHeartbeat, f as WORKBUDDY_CONNECT_VERSION, g as FALLBACK_WORKBUDDY_MODELS, h as FALLBACK_WORKBUDDY_AI_MODELS, i as variantFor, j as normalizeCredits, k as classifyUpstreamError, l as readHostHeartbeat, n as CN_VARIANT, o as clearHostHeartbeat, q as appUserAgent, r as WORKBUDDY_VARIANTS, s as isHeartbeatProcessAlive, t as AI_VARIANT, u as workbuddyHostHeartbeatPath, v as WORKBUDDY_AUTH_FILENAME, w as parseWorkBuddyAuth, x as defaultDesktopAuthCandidates, y as WORKBUDDY_AUTH_FILE_ENV, z as CN_APP_VERSION_FILENAME } from "./variants-D_oxWP_K.js";
 import z from "@deepseek-ai/schemastery";
 import { resolveImageAttachmentAccess, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { dirname, join, resolve } from "node:path";
@@ -1766,7 +1766,7 @@ function apply(ctx, config) {
 	* case that must not fall back to a shared preference bucket.
 	*/
 	const lastAccounts = /* @__PURE__ */ new Map();
-	const atRestKeysFor = (variant) => new WorkBuddyAtRestKeyProvider({ discovery: variant.id === CN_VARIANT.id ? "macos-workbuddy" : "none" });
+	const atRestKeysFor = (variant) => new WorkBuddyAtRestKeyProvider({ discovery: electronDiscoveryFor(variant) });
 	const runtimes = WORKBUDDY_VARIANTS.map((variant) => createVariantRuntime(config, variant, () => current(), (id) => lastIdentities.get(id), (id) => lastAccounts.get(id), atRestKeysFor(variant)));
 	const probeKey = createProbeKey();
 	let setMaximumContextWindow;

package/lib/{variants-B3Pa4EBr.js → variants-D_oxWP_K.js}

@@ -5,7 +5,7 @@ import { withFileLock, writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
 import { createDecipheriv, createHash, randomBytes } from "node:crypto";
 import { execFile, execFileSync } from "node:child_process";
-import { accessSync, constants, realpathSync, statSync } from "node:fs";
+import { accessSync, constants, readFileSync, realpathSync, statSync } from "node:fs";
 //#region src/app-version.ts
 /**
 * The international desktop app's version, used as the `/v3/config` UA.
@@ -18,9 +18,10 @@ import { accessSync, constants, realpathSync, statSync } from "node:fs";
 * removed — returns the 21-model App document. The UA is therefore built from
 * the form verified in code, not from the earlier prose.
 *
-* The version is only ever a UA component: a missing App, an unreadable
-* plist, or a bad cached value degrades to the last saved value and finally to
-* a compiled-in constant, and never blocks credential use or the provider.
+* The version feeds the international catalog UA and the chat identity's
+* `X-IDE-Version`: a missing App, an unreadable plist, or a bad cached value
+* degrades to the last saved value and finally to a compiled-in constant, and
+* never blocks credential use or the provider.
 *
 * @module dsh-workbuddy-connect/app-version
 */
@@ -665,18 +666,21 @@ function commonHeaders(credential) {
 /**
 * Chat request headers, including the X-No-* conventions the official CLI uses.
 *
-* `userAgent` carries the desktop identity for chat and probe requests; when
-* it is absent the shared CLI-form UA applies. Refresh shares `commonHeaders`
-* but never this override, so the two paths cannot drift into each other.
+* `userAgent` and `clientVersion` carry the same resolved desktop identity for
+* chat and probe requests. Refresh shares `commonHeaders` but never this
+* override, so the two paths cannot drift into each other.
 */
-function chatHeaders(credential, userAgent) {
+function chatHeaders(credential, userAgent, clientVersion) {
 	return {
 		...commonHeaders(credential),
-		...userAgent === void 0 ? {} : { "User-Agent": userAgent },
+		"User-Agent": userAgent,
 		"Content-Type": "application/json",
 		...credential.uid === "" ? { "X-No-User-Id": "1" } : { "X-User-Id": credential.uid },
 		...credential.enterpriseId === void 0 || credential.enterpriseId === "" ? { "X-No-Enterprise-Id": "1" } : { "X-Enterprise-Id": credential.enterpriseId },
 		...credential.domain === "" ? { "X-No-Department-Info": "1" } : { "X-Domain": credential.domain },
+		"X-IDE-Type": "WorkBuddy",
+		"X-IDE-Name": "WorkBuddy",
+		"X-IDE-Version": clientVersion,
 		"X-Product": "SaaS"
 	};
 }
@@ -821,18 +825,21 @@ var WorkBuddyUpstreamClient = class {
 	/** POST the chat endpoint; a successful answer is the raw SSE response. */
 	async chatStream(credential, bodyJson, signal) {
 		const region = regionOf(credential.domain);
+		let identity;
 		let userAgent;
 		try {
-			userAgent = chatUserAgent(await this.resolveChatIdentity(region), region);
+			identity = await this.resolveChatIdentity(region);
+			userAgent = chatUserAgent(identity, region);
 		} catch {
-			userAgent = chatUserAgent(fallbackChatIdentity(region), region);
+			identity = fallbackChatIdentity(region);
+			userAgent = chatUserAgent(identity, region);
 		}
 		let response;
 		try {
 			response = await fetch(`${chatBase(credential)}/v2/chat/completions`, {
 				method: "POST",
 				headers: {
-					...chatHeaders(credential, userAgent),
+					...chatHeaders(credential, userAgent, identity.clientVersion),
 					"Authorization": `Bearer ${credential.accessToken}`
 				},
 				body: region === "global" ? prepareInternationalChatBody(bodyJson) : bodyJson,
@@ -1144,11 +1151,14 @@ var WorkBuddyUpstreamClient = class {
 	*/
 	async probeEffort(credential, model, effort, signal) {
 		const international = regionOf(credential.domain) === "global";
+		let identity;
 		let userAgent;
 		try {
-			userAgent = chatUserAgent(await this.resolveChatIdentity(international ? "global" : "cn"), international ? "global" : "cn");
+			identity = await this.resolveChatIdentity(international ? "global" : "cn");
+			userAgent = chatUserAgent(identity, international ? "global" : "cn");
 		} catch {
-			userAgent = chatUserAgent(fallbackChatIdentity(international ? "global" : "cn"), international ? "global" : "cn");
+			identity = fallbackChatIdentity(international ? "global" : "cn");
+			userAgent = chatUserAgent(identity, international ? "global" : "cn");
 		}
 		const payload = {
 			model,
@@ -1168,7 +1178,7 @@ var WorkBuddyUpstreamClient = class {
 			response = await fetch(`${chatBase(credential)}/v2/chat/completions`, {
 				method: "POST",
 				headers: {
-					...chatHeaders(credential, userAgent),
+					...chatHeaders(credential, userAgent, identity.clientVersion),
 					"Authorization": `Bearer ${credential.accessToken}`
 				},
 				body: JSON.stringify(payload),
@@ -1471,16 +1481,19 @@ const INTERNATIONAL_PROBE_MAX_TOKENS = 16;
 */
 /** Env variable that overrides the WorkBuddy Electron binary used as the key helper. */
 const WORKBUDDY_ELECTRON_BIN_ENV = "WORKBUDDY_ELECTRON_BIN";
-/** Platform-default Electron binary, confirmed only on macOS (5.6.2). */
+/** Platform-default Electron binaries confirmed for the CN app (5.6.2). */
 const MACOS_ELECTRON_PATH = "/Applications/WorkBuddy.app/Contents/MacOS/Electron";
 /**
 * The Electron binary the helper would spawn on this platform, or `undefined`
-* where no default has been verified. Other platforms must set
-* {@link WORKBUDDY_ELECTRON_BIN_ENV} explicitly — the layout is simply not
-* known, and guessing would spawn the wrong app's binary.
+* where no default has been verified. Windows requires `LOCALAPPDATA` to be
+* present; platforms without a verified layout must set
+* {@link WORKBUDDY_ELECTRON_BIN_ENV} explicitly.
 */
-function defaultWorkBuddyElectronPath() {
-	return process.platform === "darwin" ? MACOS_ELECTRON_PATH : void 0;
+function defaultWorkBuddyElectronPath(platform = process.platform) {
+	if (platform === "darwin") return MACOS_ELECTRON_PATH;
+	if (platform !== "win32") return void 0;
+	const localAppData = process.env.LOCALAPPDATA?.trim();
+	return localAppData === void 0 || localAppData === "" ? void 0 : join(localAppData, "Programs", "WorkBuddy", "WorkBuddy.exe");
 }
 /** Distinct key ids across the wrapped fields, in field order. */
 function keyIdsOf(fields) {
@@ -1661,11 +1674,26 @@ function parseAtRestPayload(text) {
 function deriveProtectorKey(secret) {
 	return createHash("sha256").update(secret, "utf8").digest();
 }
+/** Select discovery from product and platform at the composition root. */
+function electronDiscoveryFor(variant, platform = process.platform) {
+	if (variant.region !== "cn") return "none";
+	if (platform === "darwin") return "macos-workbuddy";
+	if (platform === "win32") return "windows-workbuddy";
+	return "none";
+}
 /** The CN app's bundle id; the only one this round resolves by discovery. */
 const WORKBUDDY_CN_BUNDLE_ID = "com.tencent.workbuddy.mac";
 /** Absolute tool paths: never resolved through PATH, which a user can change. */
 const MDFIND_BIN = "/usr/bin/mdfind";
 const PLUTIL_BIN = "/usr/bin/plutil";
+const WINDOWS_REGISTRY_ROOTS = [
+	"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall",
+	"HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall",
+	"HKLM\\Software\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall"
+];
+const WINDOWS_REGISTRY_OUTPUT_MAX_BYTES = 1048576;
+const WINDOWS_ELECTRON_VERSION_PATTERN = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/u;
+const WINDOWS_WORKBUDDY_DISPLAY_NAME_PATTERN = /^WorkBuddy(?:\s+\d+(?:\.\d+)+(?:[-+][0-9A-Za-z.-]+)?)?$/u;
 /** One discovery subprocess's own limits; see {@link WorkBuddyAtRestKeyProviderOptions}. */
 const WORKBUDDY_DISCOVERY_STEP_TIMEOUT_MS = 3e3;
 const MDFIND_MAX_OUTPUT_BYTES = 1048576;
@@ -1749,6 +1777,58 @@ function workBuddyDiscoveryTools() {
 	};
 }
 /**
+* The Windows registry discovery tool. It is deliberately separate from the
+* macOS Spotlight/plutil seam: the two platforms have different identity and
+* candidate rules, and neither tool should accidentally become cross-platform.
+*/
+function workBuddyWindowsDiscoveryTools() {
+	const systemRoot = process.env.SystemRoot?.trim();
+	const regPath = systemRoot === void 0 || systemRoot === "" ? void 0 : join(systemRoot, "System32", "reg.exe");
+	const runTool = (root, signal) => new Promise((resolve, reject) => {
+		if (regPath === void 0) {
+			reject(new DiscoveryIncompleteError("SystemRoot is not configured"));
+			return;
+		}
+		if (signal.aborted) {
+			reject(new DiscoveryIncompleteError("reg.exe was not started: the discovery budget was already spent"));
+			return;
+		}
+		let settled = false;
+		const child = execFile(regPath, [
+			"query",
+			root,
+			"/s"
+		], {
+			maxBuffer: WINDOWS_REGISTRY_OUTPUT_MAX_BYTES,
+			timeout: WORKBUDDY_DISCOVERY_STEP_TIMEOUT_MS,
+			windowsHide: true
+		}, (error, stdout, stderr) => {
+			if (settled) return;
+			settled = true;
+			if (error !== null && error !== void 0) {
+				if (error.killed !== true && (error.code === 1 || error.code === "1") && windowsRegistryKeyMissing(stderr)) {
+					resolve("");
+					return;
+				}
+				reject(new DiscoveryIncompleteError(`reg.exe could not complete (${error.killed === true ? "timed out" : String(error.code ?? "unavailable")})`));
+				return;
+			}
+			resolve(stdout);
+		});
+		const abort = () => {
+			if (settled) return;
+			settled = true;
+			child.kill();
+			reject(new DiscoveryIncompleteError("reg.exe was abandoned: the discovery budget was spent"));
+		};
+		signal.addEventListener("abort", abort, { once: true });
+		child.on("close", () => {
+			signal.removeEventListener("abort", abort);
+		});
+	});
+	return { queryUninstallRoot: runTool };
+}
+/**
 * In-memory protector-key resolver: one spawn per key id, single-flight, never
 * persisted. The cache is keyed by the id envelopes ask for, so an envelope
 * sealed under a rotated key triggers exactly one fresh resolution.
@@ -1763,6 +1843,8 @@ function workBuddyDiscoveryTools() {
 	defaultPath;
 	discovery;
 	tools;
+	windowsTools;
+	platform;
 	discoveryBudgetMs;
 	timeoutMs;
 	source;
@@ -1780,8 +1862,10 @@ function workBuddyDiscoveryTools() {
 		const envPath = fromEnv === void 0 || fromEnv === "" ? void 0 : fromEnv;
 		this.explicitPath = options.electronPath ?? envPath;
 		this.discovery = options.discovery ?? "none";
-		this.defaultPath = options.defaultElectronPath === void 0 ? defaultWorkBuddyElectronPath() : options.defaultElectronPath ?? void 0;
+		this.platform = options.platform ?? process.platform;
+		this.defaultPath = this.discovery === "none" ? void 0 : options.defaultElectronPath === void 0 ? defaultWorkBuddyElectronPath(this.platform) : options.defaultElectronPath ?? void 0;
 		this.tools = options.tools ?? workBuddyDiscoveryTools();
+		this.windowsTools = options.windowsTools ?? workBuddyWindowsDiscoveryTools();
 		this.discoveryBudgetMs = options.discoveryBudgetMs ?? 1e4;
 		this.timeoutMs = options.timeoutMs ?? 1e4;
 		this.spawnHelper = options.spawnHelper ?? ((path) => this.spawnAt(path));
@@ -1848,7 +1932,7 @@ function workBuddyDiscoveryTools() {
 			if (isExecutable(this.discoveredPath)) return this.discoveredPath;
 			this.discoveredPath = void 0;
 		}
-		const found = await this.discoverMacosApp();
+		const found = this.discovery === "macos-workbuddy" ? await this.discoverMacosApp() : await this.discoverWindowsApp();
 		this.discoveredPath = found;
 		return found;
 	}
@@ -1861,7 +1945,7 @@ function workBuddyDiscoveryTools() {
 	* unfinished check rather than an absent app.
 	*/
 	async discoverMacosApp() {
-		if (process.platform !== "darwin") throw new WorkBuddyElectronPathError("electron-binary-unavailable", `no WorkBuddy Electron binary is configured for this platform; set ${WORKBUDDY_ELECTRON_BIN_ENV} to the app's Electron binary`);
+		if (this.platform !== "darwin") throw new WorkBuddyElectronPathError("electron-binary-unavailable", `no WorkBuddy Electron binary is configured for this platform; set ${WORKBUDDY_ELECTRON_BIN_ENV} to the app's Electron binary`);
 		const controller = new AbortController();
 		const timer = setTimeout(() => controller.abort(), this.discoveryBudgetMs);
 		try {
@@ -1923,6 +2007,49 @@ function workBuddyDiscoveryTools() {
 			controller.abort();
 		}
 	}
+	/**
+	* Resolve the CN app through Windows uninstall records. Registry entries
+	* provide hints, not trust: every DisplayIcon candidate must still be a
+	* WorkBuddy Electron binary with the known Electron layout before execution.
+	*/
+	async discoverWindowsApp() {
+		if (this.platform !== "win32") throw new WorkBuddyElectronPathError("electron-binary-unavailable", `no WorkBuddy Electron binary is configured for this platform; set ${WORKBUDDY_ELECTRON_BIN_ENV} to the app's Electron binary`);
+		const controller = new AbortController();
+		const timer = setTimeout(() => controller.abort(), this.discoveryBudgetMs);
+		try {
+			const candidates = [];
+			let unresolved = false;
+			for (const root of WINDOWS_REGISTRY_ROOTS) {
+				let output;
+				try {
+					output = await this.windowsTools.queryUninstallRoot(root, controller.signal);
+				} catch {
+					unresolved = true;
+					continue;
+				}
+				const parsed = parseWindowsRegistryOutput(output);
+				candidates.push(...parsed.candidates);
+				unresolved ||= parsed.incomplete;
+			}
+			const seen = /* @__PURE__ */ new Map();
+			for (const candidate of new Set(candidates)) {
+				const inspection = inspectWindowsElectronCandidate(candidate, this.platform);
+				if (inspection === "unresolved") {
+					unresolved = true;
+					continue;
+				}
+				if (inspection === void 0) continue;
+				seen.set(inspection.identity, inspection.electronPath);
+			}
+			if (unresolved) throw discoveryIncomplete("some registry entries or candidates could not be checked");
+			if (seen.size > 1) throw new WorkBuddyElectronPathError("electron-binary-ambiguous", `more than one WorkBuddy application was found, so none was chosen:\n${[...seen.values()].map((path) => `  - ${path}`).join("\n")}\n set ${WORKBUDDY_ELECTRON_BIN_ENV} to the one to use`);
+			if (seen.size === 0) throw new WorkBuddyElectronPathError("electron-binary-not-found", "no usable WorkBuddy Electron binary was found in the default location or Windows uninstall records");
+			return [...seen.values()][0];
+		} finally {
+			clearTimeout(timer);
+			controller.abort();
+		}
+	}
 	async spawnPayload() {
 		return await this.spawnHelper(await this.resolveElectronPath());
 	}
@@ -1951,6 +2078,107 @@ function workBuddyDiscoveryTools() {
 		});
 	}
 };
+/** Only known missing-key diagnostics can safely make a failed query empty. */
+function windowsRegistryKeyMissing(stderr) {
+	const detail = stderr.trim();
+	return /^ERROR:\s*The system was unable to find the specified registry key or value\.?$/iu.test(detail) || /^错误[:：]\s*系统找不到指定的注册表项或值[。.]?$/u.test(detail);
+}
+/** Parse the value columns emitted by `reg query ... /s`. */
+function parseWindowsRegistryOutput(output) {
+	const entries = /* @__PURE__ */ new Map();
+	let currentKey;
+	for (const line of output.split(/\r?\n/u)) {
+		const keyMatch = /^\s*(HKEY_[^\r\n]+?)\s*$/iu.exec(line);
+		if (keyMatch !== null) {
+			currentKey = keyMatch[1];
+			entries.set(currentKey, {});
+			continue;
+		}
+		if (currentKey === void 0) continue;
+		const valueMatch = /^\s+(DisplayName|DisplayIcon)\s+REG_[A-Z0-9_]+\s*(.*?)\s*$/iu.exec(line);
+		if (valueMatch === null) continue;
+		const entry = entries.get(currentKey);
+		if (entry === void 0) continue;
+		const value = valueMatch[2] ?? "";
+		if (valueMatch[1].toLowerCase() === "displayname") entry.displayName = value;
+		else entry.displayIcon = value;
+	}
+	const candidates = [];
+	let incomplete = false;
+	for (const entry of entries.values()) {
+		if (entry.displayName === void 0) continue;
+		if (!WINDOWS_WORKBUDDY_DISPLAY_NAME_PATTERN.test(entry.displayName.trim())) continue;
+		const displayIcon = entry.displayIcon === void 0 ? void 0 : parseWindowsDisplayIcon(entry.displayIcon);
+		if (displayIcon === void 0) incomplete = true;
+		else candidates.push(displayIcon);
+	}
+	return {
+		candidates,
+		incomplete
+	};
+}
+/** Read a quoted DisplayIcon path and remove the Windows icon-index suffix. */
+function parseWindowsDisplayIcon(value) {
+	const raw = value.trim();
+	let path;
+	if (raw.startsWith("\"")) {
+		const closingQuote = raw.indexOf("\"", 1);
+		if (closingQuote < 0) return void 0;
+		const suffix = raw.slice(closingQuote + 1).trim();
+		if (suffix !== "" && !/^,\d+$/u.test(suffix)) return void 0;
+		path = raw.slice(1, closingQuote).replace(/,\d+$/u, "");
+	} else {
+		const match = /^(.+?\.exe)(?:,\d+)?$/iu.exec(raw);
+		if (match === null) return void 0;
+		path = match[1];
+	}
+	path = path.trim();
+	return /\.exe$/iu.test(path) ? path : void 0;
+}
+/**
+* Validate the known WorkBuddy Windows layout. `undefined` is a decidable
+* exclusion; `unresolved` is reserved for errors that prevent checking.
+*/
+function inspectWindowsElectronCandidate(electronPath, platform) {
+	if (platform !== "win32" || basename(electronPath).toLowerCase() !== "workbuddy.exe") return void 0;
+	let binaryStat;
+	try {
+		binaryStat = statSync(electronPath);
+	} catch (error) {
+		return isENOENT$1(error) ? void 0 : "unresolved";
+	}
+	if (!binaryStat.isFile()) return void 0;
+	try {
+		accessSync(electronPath, constants.X_OK);
+	} catch (error) {
+		return isENOENT$1(error) ? void 0 : "unresolved";
+	}
+	const installRoot = dirname(electronPath);
+	let version;
+	try {
+		version = readFileSync(join(installRoot, "version"), "utf8").trim();
+	} catch (error) {
+		return isENOENT$1(error) ? void 0 : "unresolved";
+	}
+	if (!WINDOWS_ELECTRON_VERSION_PATTERN.test(version)) return void 0;
+	let resourcesStat;
+	try {
+		resourcesStat = statSync(join(installRoot, "resources", "app.asar"));
+	} catch (error) {
+		return isENOENT$1(error) ? void 0 : "unresolved";
+	}
+	if (!resourcesStat.isFile()) return void 0;
+	let identity;
+	try {
+		identity = realpathSync(electronPath);
+	} catch (error) {
+		return isENOENT$1(error) ? void 0 : "unresolved";
+	}
+	return {
+		electronPath,
+		identity: platform === "win32" ? identity.toLowerCase() : identity
+	};
+}
 /** Whether a path exists and is executable; never throws. */
 function isExecutable(path) {
 	try {
@@ -3229,7 +3457,7 @@ const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-connect/ai/status";
 const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-connect/ai/probe";
 //#endregion
 //#region src/version.ts
-const WORKBUDDY_CONNECT_VERSION = "0.6.2";
+const WORKBUDDY_CONNECT_VERSION = "0.6.3";
 //#endregion
 //#region src/host-heartbeat.ts
 /**
@@ -3454,4 +3682,4 @@ function variantFor(id) {
 	return WORKBUDDY_VARIANTS.find((variant) => variant.id === id);
 }
 //#endregion
-export { normalizeCredits as A, chatUserAgent as B, desktopAuthCandidatesFor as C, WorkBuddyUpstreamClient as D, WorkBuddyAtRestKeyProvider as E, PROBE_EFFORT_CANDIDATES as F, WORKBUDDY_APP_VERSION_FILENAME as G, readCliVersion as H, probeModel as I, readBundleVersion as J, appUserAgent as K, randomSentinel as L, prepareChatBody as M, prepareInternationalChatBody as N, classifyUpstreamError as O, regionOf as P, CN_APP_VERSION_FILENAME as R, defaultDesktopAuthPath as S, workbuddyOwnAuthPath as T, resolveChatIdentity as U, fallbackChatIdentity as V, validCliVersion as W, validAppVersion as X, resolveAppVersion as Y, WorkBuddyCatalog as _, WORKBUDDY_HOST_HEARTBEAT_FILENAME as a, WorkBuddyCredentialStore as b, processStartTimeMs as c, writeHostHeartbeat as d, WORKBUDDY_CONNECT_VERSION as f, FALLBACK_WORKBUDDY_MODELS as g, FALLBACK_WORKBUDDY_AI_MODELS as h, variantFor as i, parseModelCatalog as j, modelWithCurrentPromotion as k, readHostHeartbeat as l, WORKBUDDY_STATUS_PATH as m, CN_VARIANT as n, clearHostHeartbeat as o, WORKBUDDY_PROBE_PATH as p, installedAppVersion as q, WORKBUDDY_VARIANTS as r, isHeartbeatProcessAlive as s, AI_VARIANT as t, workbuddyHostHeartbeatPath as u, WORKBUDDY_AUTH_FILENAME as v, parseWorkBuddyAuth as w, defaultDesktopAuthCandidates as x, WORKBUDDY_AUTH_FILE_ENV as y, FALLBACK_CN_APP_VERSION as z };
+export { modelWithCurrentPromotion as A, FALLBACK_CN_APP_VERSION as B, desktopAuthCandidatesFor as C, electronDiscoveryFor as D, WorkBuddyAtRestKeyProvider as E, regionOf as F, validCliVersion as G, fallbackChatIdentity as H, PROBE_EFFORT_CANDIDATES as I, installedAppVersion as J, WORKBUDDY_APP_VERSION_FILENAME as K, probeModel as L, parseModelCatalog as M, prepareChatBody as N, WorkBuddyUpstreamClient as O, prepareInternationalChatBody as P, randomSentinel as R, defaultDesktopAuthPath as S, workbuddyOwnAuthPath as T, readCliVersion as U, chatUserAgent as V, resolveChatIdentity as W, resolveAppVersion as X, readBundleVersion as Y, validAppVersion as Z, WorkBuddyCatalog as _, WORKBUDDY_HOST_HEARTBEAT_FILENAME as a, WorkBuddyCredentialStore as b, processStartTimeMs as c, writeHostHeartbeat as d, WORKBUDDY_CONNECT_VERSION as f, FALLBACK_WORKBUDDY_MODELS as g, FALLBACK_WORKBUDDY_AI_MODELS as h, variantFor as i, normalizeCredits as j, classifyUpstreamError as k, readHostHeartbeat as l, WORKBUDDY_STATUS_PATH as m, CN_VARIANT as n, clearHostHeartbeat as o, WORKBUDDY_PROBE_PATH as p, appUserAgent as q, WORKBUDDY_VARIANTS as r, isHeartbeatProcessAlive as s, AI_VARIANT as t, workbuddyHostHeartbeatPath as u, WORKBUDDY_AUTH_FILENAME as v, parseWorkBuddyAuth as w, defaultDesktopAuthCandidates as x, WORKBUDDY_AUTH_FILE_ENV as y, CN_APP_VERSION_FILENAME as z };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-connect",
   "displayName": "DSH WorkBuddy Connect",
   "description": "将 WorkBuddy 桌面 App 包含的模型自动接入 DeepSeek Harness — bring WorkBuddy desktop app models into DeepSeek Harness with zero configuration.",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "author": "corrinehu",
   "keywords": [
     "dsh-plugin",