dsh-xdpool 2.3.0 → 2.4.0

package/CHANGELOG.md

@@ -1,6 +1,31 @@
 # Changelog
 本项目的所有重要变更都会记录在此文件。
 版本号遵循 [语义化版本](https://semver.org/lang/zh-CN/)。
+## 2.4.0 — 会话身份头、清单不再冻结、中文路由可存
+> 这一版收的是「用着用着就报错」的那一类问题：调用被网关判成非法渠道（11128）、国际版模型清单永远停在启动那一刻、中文名字的路由点了保存却没存下、上下文选择一选就弹回去。
+### 会话身份头：修掉 400 / 11128「Illegal API invocation from an unapproved channel」
+网关对「这一轮对话属于谁」有一组身份头，缺一个就整轮拒绝，报 `11128 Illegal API invocation from an unapproved channel`，看起来像密钥失效，其实是新会话没自报身份。补齐官方客户端的契约：
+- **会话稳定三头**（同一会话内不变）：`X-Conversation-ID`、`X-Conversation-Request-ID`、`acp-connection-id`。
+- **每请求两头**（逐次随机）：`X-Conversation-Message-ID`、`X-Request-ID`。
+- 另附 `X-Agent-Intent`、`X-Agent-Purpose`、`x-codebuddy-request`、`X-Private-Data`、`X-Product` 与 W3C/B3 追踪族。
+
+实测口径：三个稳定头缺任一个即 400 11128，齐全即 200；值本身不校验（非 UUID 字符串也过）。池车道（WorkBuddy 国内/国际）与扫码渠道的 `send` 两条路径都已接上。
+顺带修掉同源的一处：`role: "developer"` 的消息在国内网关同样触发 11128，现统一上送为 `system`。
+### 国际版模型清单：不再冻结在启动那一刻
+`createProvider` 的 `models` 是在创建 provider 时快照下来的数组，而原来的 `invalidate()` 只重排了 profile、复用了同一个 provider 对象，宿主按对象身份记忆化 `current()`，于是**新拿到的模型清单永远送不到选择器**——表现是「重新获取模型」点了没反应、国际版清单停在开机那一刻。现在每次 `invalidate()` 重建 provider 与 profile 两个对象，并通过 adapter handle 的 `replace()` 重新登记路由，由宿主自己发出 `llm/adapters-updated`。
+（附带核查：国际版本来就有独立的 `modelSelectionGlobal` 键，与国内白名单分开读写，这一处无需改动。）
+### 中文路由名现在存得下
+链名 slug 原来是 `[^a-z0-9]+ → '-'`，中文名整串被压成空 id，规范化时被当作无效条目静默丢弃——于是「保存成功」但什么都没存。改为 Unicode 感知的 slug（`\p{L}`/`\p{N}`），拉丁名形态完全不变，已存的路由 id 继续可解析。
+### 上下文大小：选中态不再一选就弹回
+渠道卡把「从未保存过预算」当成了「已收窄到 200K」显示，用户点「完整」清空预算后该行又算回 200K，选中态立刻跳回第一项。现在未保存过预算就显示完整窗口；清空预算时同时保留 `nativeContextWindow`，radio 组不会在指针底下消失。
+### 思考档位：不再只认一档
+pack 兜底表把十几个模型的 `reasoningEfforts` 写成了单档（`["medium"]` / `["high"]`），于是国际版 `Deepseek-V4.1-Flash` 只能选 High。逐模型实测（两网关、五档全跑）后按真实能力补齐：凡是能调通的模型五档都接受、且各档 `reasoning_content` 长度不同。`gpt-5.3-codex` 五档皆 200 但 reasoning 恒空——档位合法而不可观测，已经在表里注明；`gemini-3.5-flash` 与 `primary-model` 的 400 是账号套餐权限（`model [X] is not allowed for user type [personal]`），与档位无关，未动。
+### 重复账号：同一个人不再显示成两个
+桌面端凭据同时带数字 `uin` 与 UUID `uid`，扫码渠道只带 `uid`，而账号 id 是按 `uin` 优先哈希的——同一个人走两条登录路径就整出两个池条目，各自带一部分模型。现在按 `uid` 建次级索引合并到同一个池条目，既不改哈希（否则全部冷却、失效标记、忽略名单、持久化快照一次性作废），也与凭据到达顺序无关。
+### 「重新检测账号」不再静默失败
+`listAllAccounts` 漏了 `await`，拿到的是一个 Promise，随后的 `.filter` 抛 `is not a function` 并被外层 try/catch 吞掉，表现是扫码账号全部并进池、重新检测永远没结果。
+### 其他
+- 测试：新增会话身份头与中文路由名的回归用例，全套 68 文件 910 用例。
 ## 2.3.0 — 扫码渠道接入账号池，免密车道修复，数据看板有了真数
 > 这一版收掉三件大事：扫码登录的账号真正归入账号池并按渠道展示；免费模型车道跟上上游的新校验、不再动辄 403；数据看板不再是一排零。
 ### 账号池：扫码渠道按渠道入池、逐模型可控

package/lib/bin.js

@@ -277,6 +277,80 @@ const CHAT_IDENTITY_HEADERS = Object.freeze({
 	"X-IDE-Type": "WorkBuddy",
 	"X-IDE-Version": "5.5.6"
 });
+/**
+* The conversation-identity headers the gateway's channel check demands.
+*
+* WHY THIS EXISTS
+*
+* `www.workbuddy.ai` turned "channel verification" from a soft check into a
+* hard one. A `POST /v2/chat/completions` missing ANY of `X-Conversation-ID`,
+* `X-Conversation-Request-ID` or `X-Conversation-Message-ID` is rejected with
+* business code 11128 (`msg: "request illegal"` on the international gateway,
+* `msg: "conversation id missing"` in the earlier wording). Verified by
+* elimination against real credentials: delete any one of the three and the
+* call 400s; send all three and it 200s with normal SSE. Every other header the
+* desktop sends (`acp-connection-id`, `X-Request-ID`, `X-Agent-Intent`,
+* `X-Private-Data`, the W3C/B3 tracing family) can be dropped without effect,
+* so only these three are load-bearing.
+*
+* The values are NOT validated — plain non-UUID strings pass — so the gateway
+* is checking for presence and consistency, not for a signature. That lets us
+* derive them from the conversation instead of registering state with upstream.
+*
+* 11128 IS MULTIPLEXED. The domestic gateway returns the same code with
+* `msg: "Illegal API invocation from an unapproved channel"` for a different
+* cause entirely: a `developer`-role message. `prepareChatBody()` already
+* rewrites that role; see its comment. Never branch on the business code alone.
+*/
+const CONVERSATION_STABLE_SALT = "conversation";
+/**
+* The three stable conversation ids for one logical conversation.
+*
+* Stable across every call and every account in a conversation, because the
+* upstream treats the triple as one session: regenerating them per request
+* would read as a new conversation on each turn. Derived rather than stored so
+* the identity survives a restart and needs no registry — the same reasoning
+* `deriveDeviceId` uses for the device id.
+*
+* Falls back to a random seed when the caller has no key (a one-shot compaction
+* outside any conversation), which is safe because presence is all that is
+* checked.
+*/
+function conversationIdentityOf(conversationKey, seed = randomUUID) {
+	const base = conversationKey === void 0 || conversationKey === "" ? seed() : conversationKey;
+	const hash = (suffix) => createHash("sha256").update(`${CONVERSATION_STABLE_SALT}:${suffix}:${base}`).digest("hex");
+	const asUuid = (hex) => `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`;
+	return {
+		conversationId: asUuid(hash("id")),
+		conversationRequestId: asUuid(hash("request")),
+		acpConnectionId: asUuid(hash("acp"))
+	};
+}
+/**
+* Full header set for one chat completion.
+*
+* `chatHeaders()` stays untouched on purpose: it is shared with the
+* points-automation endpoints, which have never been shown to carry
+* conversation identity, and adding it there would change how that traffic is
+* attributed. The per-request ids are fresh UUIDs every call; only the triple
+* from `conversationIdentityOf` is stable.
+*/
+function chatCompletionHeaders(credential, conversationKey) {
+	const identity = conversationIdentityOf(conversationKey);
+	return {
+		...chatHeaders(credential),
+		...CHAT_IDENTITY_HEADERS,
+		"X-Conversation-ID": identity.conversationId,
+		"X-Conversation-Request-ID": identity.conversationRequestId,
+		"acp-connection-id": identity.acpConnectionId,
+		"X-Conversation-Message-ID": randomUUID(),
+		"X-Request-ID": randomUUID(),
+		"X-Agent-Intent": "craft",
+		"X-Agent-Purpose": "conversation",
+		"X-Private-Data": "true",
+		"x-codebuddy-request": "1"
+	};
+}
 /** Refresh-endpoint headers; X-Refresh-Token appears here and nowhere else. */
 function refreshHeaders(credential) {
 	const headers = {
@@ -879,13 +953,10 @@ var WorkBuddyUpstreamClient = class {
 	* single string. Throws on any failure: the compactor then falls back to
 	* plain truncation rather than failing the user's turn.
 	*/
-	async completeChat(credential, prepared, signal) {
+	async completeChat(credential, prepared, signal, conversationKey) {
 		const response = await this.fetchImpl(`${chatBase(credential)}/v2/chat/completions`, {
 			method: "POST",
-			headers: {
-				...chatHeaders(credential),
-				...CHAT_IDENTITY_HEADERS
-			},
+			headers: chatCompletionHeaders(credential, conversationKey),
 			body: prepared,
 			...signal === void 0 ? {} : { signal }
 		});
@@ -897,15 +968,12 @@ var WorkBuddyUpstreamClient = class {
 		return await readCompletionText(response.body);
 	}
 	/** Forward one chat completion. Never throws for upstream failures. */
-	async chatStream(credential, prepared, signal) {
+	async chatStream(credential, prepared, signal, conversationKey) {
 		let response;
 		try {
 			response = await this.fetchImpl(`${chatBase(credential)}/v2/chat/completions`, {
 				method: "POST",
-				headers: {
-					...chatHeaders(credential),
-					...CHAT_IDENTITY_HEADERS
-				},
+				headers: chatCompletionHeaders(credential, conversationKey),
 				body: prepared,
 				...signal === void 0 ? {} : { signal }
 			});
@@ -3325,8 +3393,17 @@ var WorkBuddyAccountPool = class {
 				});
 			}
 		}
+		const byUid = /* @__PURE__ */ new Map();
+		for (const account of byId.values()) {
+			const uid = account.credential.uid;
+			if (typeof uid === "string" && uid !== "" && !byUid.has(uid)) byUid.set(uid, account.id);
+		}
 		for (const credential of found) {
-			const id = workbuddyAccountId(credential);
+			const byIdentity = workbuddyAccountId(credential);
+			const uid = credential.uid;
+			const knownId = typeof uid === "string" && uid !== "" ? byUid.get(uid) : void 0;
+			const id = knownId ?? byIdentity;
+			if (knownId === void 0 && typeof uid === "string" && uid !== "") byUid.set(uid, id);
 			const existing = byId.get(id);
 			if (existing === void 0) {
 				byId.set(id, {

package/lib/client.js

@@ -11674,7 +11674,7 @@ window.__ModuleLoader__.load({
 						...model,
 						...budget === void 0 ? {
 							contextBudget: void 0,
-							nativeContextWindow: void 0
+							contextWindow: model.nativeContextWindow ?? model.contextWindow
 						} : {
 							contextBudget: budget,
 							contextWindow: budget,
@@ -12079,7 +12079,7 @@ window.__ModuleLoader__.load({
 													const recuse = recommendUse(merged);
 													const native = model.nativeContextWindow ?? model.contextWindow;
 													const capped = native !== void 0 && native > CONTEXT_BUDGET_DEFAULT;
-													const budget = model.contextBudget ?? (capped ? CONTEXT_BUDGET_DEFAULT : native);
+													const budget = model.contextBudget ?? native;
 													return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 														className: "dsm-xdpool-cpool-modelrow",
 														"data-off": !on,
@@ -12188,7 +12188,7 @@ window.__ModuleLoader__.load({
 		*
 		* @module dsh-xdpool/version
 		*/
-		const POOL_VERSION = "2.3.0";
+		const POOL_VERSION = "2.4.0";
 		//#endregion
 		//#region src/client/PoolCard.tsx
 		/**

package/lib/index.d.ts

@@ -489,9 +489,9 @@ export declare class WorkBuddyUpstreamClient {
    * single string. Throws on any failure: the compactor then falls back to
    * plain truncation rather than failing the user's turn.
    */
-  completeChat(credential: WorkBuddyCredential, prepared: string, signal?: AbortSignal): Promise<string>;
+  completeChat(credential: WorkBuddyCredential, prepared: string, signal?: AbortSignal, conversationKey?: string): Promise<string>;
   /** Forward one chat completion. Never throws for upstream failures. */
-  chatStream(credential: WorkBuddyCredential, prepared: string, signal?: AbortSignal): Promise<ChatStreamResult>;
+  chatStream(credential: WorkBuddyCredential, prepared: string, signal?: AbortSignal, conversationKey?: string): Promise<ChatStreamResult>;
   /** POST the token-refresh endpoint; the caller merges the outcome. */
   refreshToken(credential: WorkBuddyCredential): Promise<WorkBuddyRefreshOutcome>;
   /**

package/lib/index.js

@@ -328,6 +328,80 @@ const CHAT_IDENTITY_HEADERS = Object.freeze({
 	"X-IDE-Type": "WorkBuddy",
 	"X-IDE-Version": "5.5.6"
 });
+/**
+* The conversation-identity headers the gateway's channel check demands.
+*
+* WHY THIS EXISTS
+*
+* `www.workbuddy.ai` turned "channel verification" from a soft check into a
+* hard one. A `POST /v2/chat/completions` missing ANY of `X-Conversation-ID`,
+* `X-Conversation-Request-ID` or `X-Conversation-Message-ID` is rejected with
+* business code 11128 (`msg: "request illegal"` on the international gateway,
+* `msg: "conversation id missing"` in the earlier wording). Verified by
+* elimination against real credentials: delete any one of the three and the
+* call 400s; send all three and it 200s with normal SSE. Every other header the
+* desktop sends (`acp-connection-id`, `X-Request-ID`, `X-Agent-Intent`,
+* `X-Private-Data`, the W3C/B3 tracing family) can be dropped without effect,
+* so only these three are load-bearing.
+*
+* The values are NOT validated — plain non-UUID strings pass — so the gateway
+* is checking for presence and consistency, not for a signature. That lets us
+* derive them from the conversation instead of registering state with upstream.
+*
+* 11128 IS MULTIPLEXED. The domestic gateway returns the same code with
+* `msg: "Illegal API invocation from an unapproved channel"` for a different
+* cause entirely: a `developer`-role message. `prepareChatBody()` already
+* rewrites that role; see its comment. Never branch on the business code alone.
+*/
+const CONVERSATION_STABLE_SALT = "conversation";
+/**
+* The three stable conversation ids for one logical conversation.
+*
+* Stable across every call and every account in a conversation, because the
+* upstream treats the triple as one session: regenerating them per request
+* would read as a new conversation on each turn. Derived rather than stored so
+* the identity survives a restart and needs no registry — the same reasoning
+* `deriveDeviceId` uses for the device id.
+*
+* Falls back to a random seed when the caller has no key (a one-shot compaction
+* outside any conversation), which is safe because presence is all that is
+* checked.
+*/
+function conversationIdentityOf(conversationKey, seed = randomUUID) {
+	const base = conversationKey === void 0 || conversationKey === "" ? seed() : conversationKey;
+	const hash = (suffix) => createHash("sha256").update(`${CONVERSATION_STABLE_SALT}:${suffix}:${base}`).digest("hex");
+	const asUuid = (hex) => `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`;
+	return {
+		conversationId: asUuid(hash("id")),
+		conversationRequestId: asUuid(hash("request")),
+		acpConnectionId: asUuid(hash("acp"))
+	};
+}
+/**
+* Full header set for one chat completion.
+*
+* `chatHeaders()` stays untouched on purpose: it is shared with the
+* points-automation endpoints, which have never been shown to carry
+* conversation identity, and adding it there would change how that traffic is
+* attributed. The per-request ids are fresh UUIDs every call; only the triple
+* from `conversationIdentityOf` is stable.
+*/
+function chatCompletionHeaders(credential, conversationKey) {
+	const identity = conversationIdentityOf(conversationKey);
+	return {
+		...chatHeaders(credential),
+		...CHAT_IDENTITY_HEADERS,
+		"X-Conversation-ID": identity.conversationId,
+		"X-Conversation-Request-ID": identity.conversationRequestId,
+		"acp-connection-id": identity.acpConnectionId,
+		"X-Conversation-Message-ID": randomUUID(),
+		"X-Request-ID": randomUUID(),
+		"X-Agent-Intent": "craft",
+		"X-Agent-Purpose": "conversation",
+		"X-Private-Data": "true",
+		"x-codebuddy-request": "1"
+	};
+}
 /** Refresh-endpoint headers; X-Refresh-Token appears here and nowhere else. */
 function refreshHeaders(credential) {
 	const headers = {
@@ -1039,13 +1113,10 @@ var WorkBuddyUpstreamClient = class {
 	* single string. Throws on any failure: the compactor then falls back to
 	* plain truncation rather than failing the user's turn.
 	*/
-	async completeChat(credential, prepared, signal) {
+	async completeChat(credential, prepared, signal, conversationKey) {
 		const response = await this.fetchImpl(`${chatBase(credential)}/v2/chat/completions`, {
 			method: "POST",
-			headers: {
-				...chatHeaders(credential),
-				...CHAT_IDENTITY_HEADERS
-			},
+			headers: chatCompletionHeaders(credential, conversationKey),
 			body: prepared,
 			...signal === void 0 ? {} : { signal }
 		});
@@ -1057,15 +1128,12 @@ var WorkBuddyUpstreamClient = class {
 		return await readCompletionText(response.body);
 	}
 	/** Forward one chat completion. Never throws for upstream failures. */
-	async chatStream(credential, prepared, signal) {
+	async chatStream(credential, prepared, signal, conversationKey) {
 		let response;
 		try {
 			response = await this.fetchImpl(`${chatBase(credential)}/v2/chat/completions`, {
 				method: "POST",
-				headers: {
-					...chatHeaders(credential),
-					...CHAT_IDENTITY_HEADERS
-				},
+				headers: chatCompletionHeaders(credential, conversationKey),
 				body: prepared,
 				...signal === void 0 ? {} : { signal }
 			});
@@ -3501,8 +3569,17 @@ var WorkBuddyAccountPool = class {
 				});
 			}
 		}
+		const byUid = /* @__PURE__ */ new Map();
+		for (const account of byId.values()) {
+			const uid = account.credential.uid;
+			if (typeof uid === "string" && uid !== "" && !byUid.has(uid)) byUid.set(uid, account.id);
+		}
 		for (const credential of found) {
-			const id = workbuddyAccountId(credential);
+			const byIdentity = workbuddyAccountId(credential);
+			const uid = credential.uid;
+			const knownId = typeof uid === "string" && uid !== "" ? byUid.get(uid) : void 0;
+			const id = knownId ?? byIdentity;
+			if (knownId === void 0 && typeof uid === "string" && uid !== "") byUid.set(uid, id);
 			const existing = byId.get(id);
 			if (existing === void 0) {
 				byId.set(id, {
@@ -10043,9 +10120,22 @@ function stringList$2(value) {
 	}
 	return out;
 }
-/** The combo id a name slugifies to, or '' when the name cannot form one. */
+/**
+* The combo id a name slugifies to, or '' when the name cannot form one.
+*
+* Unicode-aware on purpose. This used to be `/[^a-z0-9]+/g`, which meant any
+* name that was not ASCII — every Chinese chain name — slugged to the empty
+* string, and `normalizeCombos` then dropped the entry with a bare `continue`.
+* The card reported "saved", the store held nothing, and the chain vanished on
+* the next read: the "new route cannot be saved" report. A name is user data and
+* may be written in any script, so the id has to survive one.
+*
+* Latin names keep the old shape (`writing-fallback`), because ids already
+* stored that way must keep resolving; only characters that used to be stripped
+* to nothing are now kept.
+*/
 function comboId(name) {
-	const slug = text$6(name).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+	const slug = text$6(name).toLowerCase().replace(/[^\p{L}\p{N}]+/gu, "-").replace(/^-+|-+$/gu, "").slice(0, 48).replace(/-+$/u, "");
 	return slug === "" ? "" : `${COMBO_PREFIX}${slug}`;
 }
 /** True when the id names a combo row. */
@@ -10068,7 +10158,9 @@ function isComboRow(row) {
 *
 * A chain with no members is DROPPED rather than kept as an empty row: a model
 * that cannot answer anything is not a model, and showing one in the picker
-* only produces a request that fails with nothing to fix.
+* only produces a request that fails with nothing to fix. The card warns about
+* that case before the save (`route.noMembers`), which is why dropping here is
+* not a silent loss.
 */
 function normalizeCombos(raw) {
 	if (!Array.isArray(raw)) return [];
@@ -11596,7 +11688,6 @@ const NO_COST = {
 	cacheRead: 0,
 	cacheWrite: 0
 };
-/** pi-ai input modalities: images only when the catalog advertises them. */
 function modelInput(info) {
 	return info.supportsImages ? ["text", "image"] : ["text"];
 }
@@ -11773,26 +11864,44 @@ function createWorkBuddyAdapter(options) {
 		if (aggregateCatalog) return [...catalog.providerRows().map((row) => toAggregateModel(row, baseUrl, providerId)), ...catalog.comboRows().map((row) => toComboModel(row, baseUrl, providerId))];
 		return catalog.visible().map((info) => toPiModel(info, baseUrl, providerId));
 	};
-	const provider = {
-		...createProvider({
-			id: providerId,
-			name: displayName,
-			auth: { apiKey: {
-				name: "XD Pool loopback secret",
-				async resolve({ credential }) {
-					const apiKey = credential?.key;
-					return apiKey === void 0 || apiKey.length === 0 ? void 0 : {
-						auth: { apiKey },
-						source: "XD Pool"
-					};
-				}
-			} },
-			models: buildModels(),
-			api: openAICompletionsApi()
-		}),
-		getModels: () => buildModels()
+	/**
+	* Build a fresh provider object whose `models` array is the catalog as it
+	* stands right now.
+	*
+	* `createProvider` snapshots the array it is handed, and the host keeps its
+	* own snapshot keyed by the IDENTITY of the `profiles` map
+	* (`dsh-llm-pi-ai/lib/index.js` `PiAiAdapter.current()`: it rebuilds the
+	* model collection only when `this.snapshot.profiles !== profiles`, then
+	* calls `models.setProvider(profile.piProvider)`). Reusing one provider object
+	* across `invalidate()` therefore could not work: the host would recognise the
+	* unchanged profiles map, hand back its cached snapshot, and re-collect the
+	* very same provider — so a model list that changed upstream (a new model
+	* released, an account's entitlements changing) stayed frozen until restart.
+	* That is what users saw on the international gateway. Returning a brand-new
+	* provider from a brand-new profile is the only lever the adapter is given.
+	*/
+	const makeProvider = () => {
+		return {
+			...createProvider({
+				id: providerId,
+				name: displayName,
+				auth: { apiKey: {
+					name: "XD Pool loopback secret",
+					async resolve({ credential }) {
+						const apiKey = credential?.key;
+						return apiKey === void 0 || apiKey.length === 0 ? void 0 : {
+							auth: { apiKey },
+							source: "XD Pool"
+						};
+					}
+				} },
+				models: buildModels(),
+				api: openAICompletionsApi()
+			}),
+			getModels: () => buildModels()
+		};
 	};
-	const profile = {
+	const makeProfile = (piProvider) => ({
 		provider: providerId,
 		displayName,
 		streamIdleTimeoutMs: WORKBUDDY_STREAM_IDLE_TIMEOUT_MS,
@@ -11800,8 +11909,9 @@ function createWorkBuddyAdapter(options) {
 		configuredMaxTokens: /* @__PURE__ */ new Map(),
 		modelErrors: /* @__PURE__ */ new Map(),
 		...REQUEST_IMAGE_BUDGETS,
-		piProvider: provider
-	};
+		piProvider
+	});
+	const profile = makeProfile(makeProvider());
 	let profiles = /* @__PURE__ */ new Map([[providerId, profile]]);
 	return {
 		providerId,
@@ -11815,7 +11925,7 @@ function createWorkBuddyAdapter(options) {
 		}),
 		buildModels,
 		invalidate: () => {
-			profiles = /* @__PURE__ */ new Map([[providerId, profile]]);
+			profiles = /* @__PURE__ */ new Map([[providerId, makeProfile(makeProvider())]]);
 		}
 	};
 }
@@ -11968,7 +12078,7 @@ function readPackAccountPool(ctx) {
 */
 async function readPackCredentials(pool) {
 	if (pool === void 0) return [];
-	const entries = pool.listAllAccounts().filter((entry) => {
+	const entries = (await pool.listAllAccounts()).filter((entry) => {
 		const provider = text$3(entry.provider);
 		return provider !== void 0 && PACK_REGION_CHANNELS.includes(provider);
 	});
@@ -18204,6 +18314,7 @@ function createWorkBuddyShim(options) {
 		}
 		const attempts = [];
 		let last;
+		const conversationKey = conversationKeyOf(raw);
 		for (const member of members) {
 			if (signal.aborted) return;
 			attempts.push(member.modelId);
@@ -18219,7 +18330,7 @@ function createWorkBuddyShim(options) {
 					continue;
 				}
 				const prepared = client.prepareChatBody(raw);
-				const result = await client.chatStream(account.credential, prepared, signal);
+				const result = await client.chatStream(account.credential, prepared, signal, conversationKey);
 				if (result.ok) {
 					const turnId = randomBytes(8).toString("hex");
 					await serveSuccessfulStream(res, account, result, logger, refreshBalance, pool, usageRecorder === void 0 ? void 0 : {
@@ -18381,7 +18492,7 @@ function createWorkBuddyShim(options) {
 				return;
 			}
 			tried.push(account.label);
-			const result = await client.chatStream(account.credential, prepared, controller.signal);
+			const result = await client.chatStream(account.credential, prepared, controller.signal, conversationKey);
 			if (result.ok) {
 				await serveSuccessfulStream(res, account, result, logger, refreshBalance, pool, usageContext);
 				return;
@@ -18640,7 +18751,7 @@ async function recoverFromContextOverrun(options) {
 					stream: true,
 					max_tokens: Math.max(256, Math.floor(budget / 2))
 				}, request);
-				return await client.completeChat(summariser.credential, body, signal ?? controller.signal);
+				return await client.completeChat(summariser.credential, body, signal ?? controller.signal, conversationKeyOf(raw));
 			} }, controller.signal);
 			compacted = outcome.messages;
 			summary = outcome.summary;
@@ -18667,7 +18778,7 @@ async function recoverFromContextOverrun(options) {
 			detail: "no account available after compaction"
 		};
 		tried.push(account.label);
-		const result = await client.chatStream(account.credential, retryBody, controller.signal);
+		const result = await client.chatStream(account.credential, retryBody, controller.signal, conversationKeyOf(raw));
 		if (!result.ok) usage?.recorder.record({
 			region: usage.region,
 			model: usage.model,
@@ -20415,6 +20526,19 @@ function apply(ctx, config = {}) {
 				adaptersByRegion.global.invalidate();
 				adaptersByRegion.aggregate.invalidate();
 				adaptersByRegion.free.invalidate();
+				for (const [handle, routes] of [
+					[releaseAdapterCn, [POOL_PROVIDER_BY_REGION.cn]],
+					[releaseAdapterGlobal, [POOL_PROVIDER_BY_REGION.global]],
+					[releaseAdapterAggregate, [XDPOOL_AGGREGATE_PROVIDER]],
+					[releaseAdapterFree, [XDPOOL_FREE_PROVIDER]]
+				]) {
+					if (handle === void 0) continue;
+					try {
+						handle.replace([...routes]);
+					} catch (error) {
+						ctx.logger.warn("dsh-xdpool: could not re-announce adapter routes", error);
+					}
+				}
 			};
 			aggregateCatalog.onChange(() => {
 				invalidateCatalog();

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-xdpool",
   "displayName": "DSH XD Pool",
   "description": "One DSH model pool for every free quota you have: merge all locally signed-in WorkBuddy accounts with auto-failover, sign in to 13 vendors by QR/web, aggregate 76 vendors' free tiers, plus a usage dashboard, model routing, a local OpenAI-compatible gateway and a points-automation suite.",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "license": "MIT",
   "author": "XDTrees",
   "homepage": "https://github.com/XDTrees/dsh-xdpool#readme",

package/vendor/channel-pack/pack.js

@@ -34239,7 +34239,11 @@ var CODEBUDDY_FALLBACK_MODELS = [
     name: "GLM-5.1",
     contextWindow: 2e5,
     supportsImages: true,
-    reasoningEfforts: ["medium"],
+    // Measured 2026-10-21 against the live gateway: all five levels answered
+    // 200 with a distinct reasoning_content length per level. The single level
+    // this used to declare was a guess, and it hid four working levels from
+    // the picker.
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
     maxOutputTokens: 48e3
   },
   {
@@ -34247,7 +34251,11 @@ var CODEBUDDY_FALLBACK_MODELS = [
     name: "GLM-5V-Turbo",
     contextWindow: 2e5,
     supportsImages: true,
-    reasoningEfforts: ["medium"],
+    // Measured 2026-10-21 against the live gateway: all five levels answered
+    // 200 with a distinct reasoning_content length per level. The single level
+    // this used to declare was a guess, and it hid four working levels from
+    // the picker.
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
     maxOutputTokens: 64e3
   },
   {
@@ -34255,7 +34263,11 @@ var CODEBUDDY_FALLBACK_MODELS = [
     name: "Kimi-K3-1",
     contextWindow: 1e6,
     supportsImages: true,
-    reasoningEfforts: ["medium"],
+    // Measured 2026-10-21 against the live gateway: all five levels answered
+    // 200 with a distinct reasoning_content length per level. The single level
+    // this used to declare was a guess, and it hid four working levels from
+    // the picker.
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
     maxOutputTokens: 32e3
   },
   {
@@ -34274,7 +34286,11 @@ var CODEBUDDY_FALLBACK_MODELS = [
     name: "Kimi-K2.7",
     contextWindow: 256e3,
     supportsImages: true,
-    reasoningEfforts: ["medium"],
+    // Measured 2026-10-21 against the live gateway: all five levels answered
+    // 200 with a distinct reasoning_content length per level. The single level
+    // this used to declare was a guess, and it hid four working levels from
+    // the picker.
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
     maxOutputTokens: 32e3
   },
   {
@@ -34282,7 +34298,11 @@ var CODEBUDDY_FALLBACK_MODELS = [
     name: "Kimi-K2.6",
     contextWindow: 256e3,
     supportsImages: true,
-    reasoningEfforts: ["medium"],
+    // Measured 2026-10-21 against the live gateway: all five levels answered
+    // 200 with a distinct reasoning_content length per level. The single level
+    // this used to declare was a guess, and it hid four working levels from
+    // the picker.
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
     maxOutputTokens: 32e3
   },
   {
@@ -34290,7 +34310,11 @@ var CODEBUDDY_FALLBACK_MODELS = [
     name: "MiniMax-M3",
     contextWindow: 512e3,
     supportsImages: true,
-    reasoningEfforts: ["medium"],
+    // Measured 2026-10-21 against the live gateway: all five levels answered
+    // 200 with a distinct reasoning_content length per level. The single level
+    // this used to declare was a guess, and it hid four working levels from
+    // the picker.
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
     maxOutputTokens: 64e3
   }
 ];
@@ -34316,8 +34340,8 @@ var WORKBUDDY_FALLBACK_MODELS = [
   // （`node scripts/dump-max-output.mjs`）。该值就是用户在 IDE 里实际拿到的
   // 单次输出额度，远端不可用时由本表顶替。远端未下发的模型保持 undefined。
   { id: "default-model", name: "Auto", contextWindow: 176e3, supportsImages: true, maxOutputTokens: 24e3 },
-  { id: "fast-model", name: "Fast", contextWindow: 2e5, supportsImages: true, reasoningEfforts: ["medium"], maxOutputTokens: 32e3 },
-  { id: "balanced-model", name: "Balanced", contextWindow: 256e3, supportsImages: true, reasoningEfforts: ["medium"], maxOutputTokens: 32e3 },
+  { id: "fast-model", name: "Fast", contextWindow: 2e5, supportsImages: true, reasoningEfforts: ["low", "medium", "high", "xhigh", "max"], maxOutputTokens: 32e3 },
+  { id: "balanced-model", name: "Balanced", contextWindow: 256e3, supportsImages: true, reasoningEfforts: ["low", "medium", "high", "xhigh", "max"], maxOutputTokens: 32e3 },
   { id: "primary-model", name: "Primary", contextWindow: 272e3, supportsImages: true, reasoningEfforts: ["high"], maxOutputTokens: 72e3 },
   { id: "deep-model", name: "Deep", contextWindow: 176e3, supportsImages: true, maxOutputTokens: 24e3 },
   {
@@ -34349,14 +34373,14 @@ var WORKBUDDY_FALLBACK_MODELS = [
     defaultReasoningEffort: "high",
     maxOutputTokens: 64e3
   },
-  { id: "deepseek-v4.1-flash", name: "Deepseek-V4.1-Flash", contextWindow: 1e6, supportsImages: true, reasoningEfforts: ["high"], defaultReasoningEffort: "high", maxOutputTokens: 128e3 },
+  { id: "deepseek-v4.1-flash", name: "Deepseek-V4.1-Flash", contextWindow: 1e6, supportsImages: true, reasoningEfforts: ["low", "medium", "high", "xhigh", "max"], defaultReasoningEffort: "high", maxOutputTokens: 128e3 },
   {
     // 2026-09 补录：新加坡区的同代模型（-sg 后缀），远端下发且实测能看图。
     id: "deepseek-v4.1-flash-sg",
     name: "Deepseek-V4.1-Flash",
     contextWindow: 1e6,
     supportsImages: true,
-    reasoningEfforts: ["high"],
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
     defaultReasoningEffort: "high",
     maxOutputTokens: 128e3
   },
@@ -34416,7 +34440,11 @@ var WORKBUDDY_FALLBACK_MODELS = [
   },
   // gpt-5.3-codex：远端未下发 maxOutputTokens，故不填（保持 undefined，
   // 交由网关默认），不臆造数值。
-  { id: "gpt-5.3-codex", name: "GPT-5.3-Codex", contextWindow: 272e3, supportsImages: true, reasoningEfforts: ["medium"] },
+  // gpt-5.3-codex answered 200 at every level, but returned an EMPTY
+  // reasoning_content at all five — the levels are legal yet not observably
+  // distinct. Declaring the ladder states what may be sent; it does not
+  // claim the model thinks.
+  { id: "gpt-5.3-codex", name: "GPT-5.3-Codex", contextWindow: 272e3, supportsImages: true, reasoningEfforts: ["low", "medium", "high", "xhigh", "max"] },
   { id: "gemini-3.5-flash", name: "Gemini-3.5-Flash", contextWindow: 1e6, supportsImages: true, reasoningEfforts: ["medium"], maxOutputTokens: 65536 },
   {
     id: "glm-5.3",
@@ -34436,7 +34464,7 @@ var WORKBUDDY_FALLBACK_MODELS = [
     defaultReasoningEffort: "high",
     maxOutputTokens: 48e3
   },
-  { id: "kimi-k3", name: "Kimi-K3", contextWindow: 1e6, supportsImages: true, reasoningEfforts: ["medium"], maxOutputTokens: 32e3 },
+  { id: "kimi-k3", name: "Kimi-K3", contextWindow: 1e6, supportsImages: true, reasoningEfforts: ["low", "medium", "high", "xhigh", "max"], maxOutputTokens: 32e3 },
   {
     // 2026-09 补录：远端 /v3/config 的 cli agent 白名单里有它，兜底表原先漏了。
     id: "kimi-k2.8-preview",
@@ -34447,7 +34475,7 @@ var WORKBUDDY_FALLBACK_MODELS = [
     defaultReasoningEffort: "high",
     maxOutputTokens: 32e3
   },
-  { id: "kimi-k2.6", name: "Kimi-K2.6", contextWindow: 256e3, supportsImages: true, reasoningEfforts: ["medium"], maxOutputTokens: 32e3 }
+  { id: "kimi-k2.6", name: "Kimi-K2.6", contextWindow: 256e3, supportsImages: true, reasoningEfforts: ["low", "medium", "high", "xhigh", "max"], maxOutputTokens: 32e3 }
 ];
 var WORKBUDDY = {
   id: "workbuddy",