mslxdff 0.1.199 → 0.1.203

package/src/providers/globalworkbuddy/device-auth.js

@@ -1,120 +1,120 @@
-// 国际版设备授权流（`-provider globalworkbuddy login` 的协议层）。
-// 三步（入口 2026-10-05 实测可用，见 FINDINGS 结论 A）：
-//   ① POST /v2/plugin/auth/state?platform=workbuddy-ai → {state, authUrl}
-//   ② GET  /v2/plugin/auth/token?state=                → 轮询；业务 code≠0 视为「还没登录」，HTTP 5xx 才抛
-//   ③ GET  /v2/plugin/login/account?state=             → {uid, enterpriseId, nickname}
-// ⚠ 与国内版 `workbuddy-login.js` 的关键差异：本文件**绝不**把凭据写进 `providerConfigs.workbuddy`。
-//   国际号混进国内池 = 把 `.ai` 的 Bearer 与 refreshToken 发给 `copilot.tencent.com`（跨产品泄露，
-//   且 CN 侧会拿它去 refresh）。落盘只走 `./account-store.js`。
-// ⚠ 日志纪律：任何函数都不得打印 accessToken/refreshToken（安全红线）。
-import { compatFetch, timeoutSignal } from "../../compat.js";
-import {
-  BASE, AUTH_STATE_PATH, AUTH_TOKEN_PATH, LOGIN_ACCOUNT_PATH, DEVICE_PLATFORM, DOMAIN, JSON_TIMEOUT_MS,
-} from "./constants.js";
-import { deviceHeaders } from "./headers.js";
-
-async function readEnvelope(res) {
-  const txt = await res.text();
-  try { return JSON.parse(txt); } catch {
-    throw new Error(`国际版返回非 JSON（HTTP ${res.status}）: ${txt.slice(0, 160)}`);
-  }
-}
-
-export async function requestDeviceState({ fetchImpl = compatFetch, platform = DEVICE_PLATFORM } = {}) {
-  const res = await fetchImpl(`${BASE}${AUTH_STATE_PATH}?platform=${encodeURIComponent(platform)}`, {
-    method: "POST",
-    headers: deviceHeaders(),
-    body: "{}",
-    signal: timeoutSignal(JSON_TIMEOUT_MS),
-  });
-  const j = await readEnvelope(res);
-  if (j.code !== 0 || !j.data?.state || !j.data?.authUrl) {
-    throw new Error(`获取授权失败: code=${j.code} ${j.msg || ""}`.trim());
-  }
-  return { state: String(j.data.state), authUrl: String(j.data.authUrl) };
-}
-
-/** 单次轮询。pending 返回 null；HTTP 5xx 抛错；成功返回 token bundle。 */
-export async function pollDeviceToken({ fetchImpl = compatFetch, state } = {}) {
-  const res = await fetchImpl(`${BASE}${AUTH_TOKEN_PATH}?state=${encodeURIComponent(state)}`, {
-    headers: deviceHeaders(),
-    signal: timeoutSignal(JSON_TIMEOUT_MS),
-  });
-  if (res.status >= 500) throw new Error(`token 端点故障: HTTP ${res.status}`);
-  const j = await readEnvelope(res);
-  if (j.code !== 0 || !j.data?.accessToken) return null;
-  return {
-    accessToken: String(j.data.accessToken),
-    refreshToken: String(j.data.refreshToken || ""),
-    expiresIn: Number(j.data.expiresIn) || 5184000,
-    domain: String(j.data.domain || DOMAIN),
-  };
-}
-
-export async function fetchDeviceAccount({ fetchImpl = compatFetch, state, accessToken } = {}) {
-  const res = await fetchImpl(`${BASE}${LOGIN_ACCOUNT_PATH}?state=${encodeURIComponent(state)}`, {
-    headers: { ...deviceHeaders(), Authorization: `Bearer ${accessToken}` },
-    signal: timeoutSignal(JSON_TIMEOUT_MS),
-  });
-  const j = await readEnvelope(res);
-  if (j.code !== 0 || !j.data?.uid) throw new Error(`获取账号失败: code=${j.code} ${j.msg || ""}`.trim());
-  return {
-    uid: String(j.data.uid),
-    enterpriseId: String(j.data.enterpriseId || ""),
-    nickname: String(j.data.nickname || ""),
-  };
-}
-
-/**
- * 完整登录：拿链接 → 回调把 authUrl 交给调用方渲染 → 轮询 → 落盘。
- * 轮询参数全部可注入，测试里塞假 fetch 零网络；`log` 只收 uid 前缀/domain，永不含 token。
- */
-export async function loginAndSave({
-  fetchImpl = compatFetch,
-  platform = DEVICE_PLATFORM,
-  save,
-  onAuthUrl,
-  log = (m) => console.log(m),
-  deadlineMs = 5 * 60 * 1000,
-  intervalMs = 5000,
-  sleep = (ms) => new Promise((r) => setTimeout(r, ms)),
-  now = Date.now,
-} = {}) {
-  const dev = await requestDeviceState({ fetchImpl, platform });
-  if (typeof onAuthUrl === "function") await onAuthUrl(dev.authUrl);
-  else log(`请在浏览器打开：${dev.authUrl}`);
-
-  const deadline = now() + deadlineMs;
-  let bundle = null;
-  while (now() < deadline) {
-    await sleep(intervalMs);
-    try {
-      bundle = await pollDeviceToken({ fetchImpl, state: dev.state });
-      if (bundle) break;
-      process.stdout.write(".");
-    } catch (e) {
-      log(`\n   轮询出错：${e.message}`);
-    }
-  }
-  if (!bundle) throw new Error("登录超时：未在浏览器完成授权");
-  log("\n✅ 授权成功，取账号信息…");
-
-  const acct = await fetchDeviceAccount({ fetchImpl, state: dev.state, accessToken: bundle.accessToken });
-  const saveFn = save || (await import("./account-store.js")).saveGlobalworkbuddyAccount;
-  const saved = await saveFn({
-    uid: acct.uid,
-    enterpriseId: acct.enterpriseId,
-    nickname: acct.nickname,
-    accessToken: bundle.accessToken,
-    refreshToken: bundle.refreshToken,
-    expiresAt: Math.floor(Date.now() / 1000) + bundle.expiresIn,
-    domain: bundle.domain,
-  });
-  return {
-    uid: acct.uid,
-    nickname: acct.nickname,
-    domain: bundle.domain,
-    file: saved.file,
-    accounts: saved.accounts,
-  };
-}
+// 国际版设备授权流（`-provider globalworkbuddy login` 的协议层）。
+// 三步（入口 2026-10-05 实测可用，见 FINDINGS 结论 A）：
+//   ① POST /v2/plugin/auth/state?platform=workbuddy-ai → {state, authUrl}
+//   ② GET  /v2/plugin/auth/token?state=                → 轮询；业务 code≠0 视为「还没登录」，HTTP 5xx 才抛
+//   ③ GET  /v2/plugin/login/account?state=             → {uid, enterpriseId, nickname}
+// ⚠ 与国内版 `workbuddy-login.js` 的关键差异：本文件**绝不**把凭据写进 `providerConfigs.workbuddy`。
+//   国际号混进国内池 = 把 `.ai` 的 Bearer 与 refreshToken 发给 `copilot.tencent.com`（跨产品泄露，
+//   且 CN 侧会拿它去 refresh）。落盘只走 `./account-store.js`。
+// ⚠ 日志纪律：任何函数都不得打印 accessToken/refreshToken（安全红线）。
+import { compatFetch, timeoutSignal } from "../../compat.js";
+import {
+  BASE, AUTH_STATE_PATH, AUTH_TOKEN_PATH, LOGIN_ACCOUNT_PATH, DEVICE_PLATFORM, DOMAIN, JSON_TIMEOUT_MS,
+} from "./constants.js";
+import { deviceHeaders } from "./headers.js";
+
+async function readEnvelope(res) {
+  const txt = await res.text();
+  try { return JSON.parse(txt); } catch {
+    throw new Error(`国际版返回非 JSON（HTTP ${res.status}）: ${txt.slice(0, 160)}`);
+  }
+}
+
+export async function requestDeviceState({ fetchImpl = compatFetch, platform = DEVICE_PLATFORM } = {}) {
+  const res = await fetchImpl(`${BASE}${AUTH_STATE_PATH}?platform=${encodeURIComponent(platform)}`, {
+    method: "POST",
+    headers: deviceHeaders(),
+    body: "{}",
+    signal: timeoutSignal(JSON_TIMEOUT_MS),
+  });
+  const j = await readEnvelope(res);
+  if (j.code !== 0 || !j.data?.state || !j.data?.authUrl) {
+    throw new Error(`获取授权失败: code=${j.code} ${j.msg || ""}`.trim());
+  }
+  return { state: String(j.data.state), authUrl: String(j.data.authUrl) };
+}
+
+/** 单次轮询。pending 返回 null；HTTP 5xx 抛错；成功返回 token bundle。 */
+export async function pollDeviceToken({ fetchImpl = compatFetch, state } = {}) {
+  const res = await fetchImpl(`${BASE}${AUTH_TOKEN_PATH}?state=${encodeURIComponent(state)}`, {
+    headers: deviceHeaders(),
+    signal: timeoutSignal(JSON_TIMEOUT_MS),
+  });
+  if (res.status >= 500) throw new Error(`token 端点故障: HTTP ${res.status}`);
+  const j = await readEnvelope(res);
+  if (j.code !== 0 || !j.data?.accessToken) return null;
+  return {
+    accessToken: String(j.data.accessToken),
+    refreshToken: String(j.data.refreshToken || ""),
+    expiresIn: Number(j.data.expiresIn) || 5184000,
+    domain: String(j.data.domain || DOMAIN),
+  };
+}
+
+export async function fetchDeviceAccount({ fetchImpl = compatFetch, state, accessToken } = {}) {
+  const res = await fetchImpl(`${BASE}${LOGIN_ACCOUNT_PATH}?state=${encodeURIComponent(state)}`, {
+    headers: { ...deviceHeaders(), Authorization: `Bearer ${accessToken}` },
+    signal: timeoutSignal(JSON_TIMEOUT_MS),
+  });
+  const j = await readEnvelope(res);
+  if (j.code !== 0 || !j.data?.uid) throw new Error(`获取账号失败: code=${j.code} ${j.msg || ""}`.trim());
+  return {
+    uid: String(j.data.uid),
+    enterpriseId: String(j.data.enterpriseId || ""),
+    nickname: String(j.data.nickname || ""),
+  };
+}
+
+/**
+ * 完整登录：拿链接 → 回调把 authUrl 交给调用方渲染 → 轮询 → 落盘。
+ * 轮询参数全部可注入，测试里塞假 fetch 零网络；`log` 只收 uid 前缀/domain，永不含 token。
+ */
+export async function loginAndSave({
+  fetchImpl = compatFetch,
+  platform = DEVICE_PLATFORM,
+  save,
+  onAuthUrl,
+  log = (m) => console.log(m),
+  deadlineMs = 5 * 60 * 1000,
+  intervalMs = 5000,
+  sleep = (ms) => new Promise((r) => setTimeout(r, ms)),
+  now = Date.now,
+} = {}) {
+  const dev = await requestDeviceState({ fetchImpl, platform });
+  if (typeof onAuthUrl === "function") await onAuthUrl(dev.authUrl);
+  else log(`请在浏览器打开：${dev.authUrl}`);
+
+  const deadline = now() + deadlineMs;
+  let bundle = null;
+  while (now() < deadline) {
+    await sleep(intervalMs);
+    try {
+      bundle = await pollDeviceToken({ fetchImpl, state: dev.state });
+      if (bundle) break;
+      process.stdout.write(".");
+    } catch (e) {
+      log(`\n   轮询出错：${e.message}`);
+    }
+  }
+  if (!bundle) throw new Error("登录超时：未在浏览器完成授权");
+  log("\n✅ 授权成功，取账号信息…");
+
+  const acct = await fetchDeviceAccount({ fetchImpl, state: dev.state, accessToken: bundle.accessToken });
+  const saveFn = save || (await import("./account-store.js")).saveGlobalworkbuddyAccount;
+  const saved = await saveFn({
+    uid: acct.uid,
+    enterpriseId: acct.enterpriseId,
+    nickname: acct.nickname,
+    accessToken: bundle.accessToken,
+    refreshToken: bundle.refreshToken,
+    expiresAt: Math.floor(Date.now() / 1000) + bundle.expiresIn,
+    domain: bundle.domain,
+  });
+  return {
+    uid: acct.uid,
+    nickname: acct.nickname,
+    domain: bundle.domain,
+    file: saved.file,
+    accounts: saved.accounts,
+  };
+}

package/src/providers/globalworkbuddy/errors.js

@@ -1,98 +1,98 @@
-// 上游错误分型：决定一次失败该「刷新」「换号」「原地重试」还是「直接报错」。
-// 与国内版 `workbuddy/auth.js:20` 的关键区别：**403 不再一律当鉴权失败**。
-// 国际版实测：11140（安全审核）、11128、11133、11101、11102 全是 403/400，refresh 对它们完全无用
-// —— 而 CN 版把 403 当鉴权，等于每命中一次就白烧一次 token 刷新（`global-hi.js:221` 早已发现却从未回流 provider）。
-// Note: 同一个业务码在两区含义不同（11128 在 CN=developer role 被拒、在国际版=缺首条 system），
-//       所以判型只能「码 + 文案」一起看，且**绝不按码单独分支**。
-
-/** 积分不足标记：英文小写形 + 中文原文（词表照参考仓库 upstream.ts:184-189）。 */
-const HARD_CREDIT_MARKERS = [
-  "insufficient credit", "no credit", "credit exhausted", "credits exhausted", "out of credit",
-  "quota exceeded", "quota exhaust", "payment required", "credit not enough", "not enough credit",
-  "积分不足", "额度不足", "余额不足", "积分用完", "额度用尽", "没有积分",
-];
-
-/** 会话失效措辞（403 时用于区分「真鉴权」与「业务拒绝」）。 */
-const SESSION_MARKERS = [
-  "unauthorized", "authenticate", "invalid token", "token expired", "token invalid",
-  "access token", "login expired", "need login", "session expired", "未登录", "登录过期", "会话过期",
-];
-
-/** 安全审核类：11140 是伞形码（实测 displayMsg 既见「内容未通过安全审核」也见「访问受限」）。 */
-const SAFETY_MARKERS = ["request illegal", "safety", "安全审核", "內容未通過", "访问受限"];
-
-/** 参数类业务码（实测：11101 tool_choice 反序列化、11102 模型不存在、11128 首条/角色、11133 参数被模型拒）。 */
-const PARAM_CODES = new Set(["11101", "11102", "11128", "11133"]);
-
-function pickBusinessCode(text) {
-  const m = String(text || "").match(/"code"\s*:\s*"?(\d{4,6})"?/);
-  return m ? m[1] : "";
-}
-
-/** 提取 `displayMsg.zh` → `displayMsg.en` → `msg`（参考仓库 issue #58 的教训：别把整串 JSON 甩给用户）。 */
-export function extractDisplayMessage(text) {
-  let obj;
-  try { obj = JSON.parse(String(text || "")); } catch { return ""; }
-  if (!obj || typeof obj !== "object") return "";
-  const dm = obj.displayMsg;
-  if (dm && typeof dm === "object") {
-    for (const key of ["zh", "en", "zh-hant"]) {
-      if (typeof dm[key] === "string" && dm[key].trim()) return dm[key].trim();
-    }
-  }
-  return typeof obj.msg === "string" ? obj.msg.trim() : "";
-}
-
-export function extErrorCode(text) {
-  try {
-    const obj = JSON.parse(String(text || ""));
-    const code = obj?.extError?.code;
-    return typeof code === "string" ? code : "";
-  } catch { return ""; }
-}
-
-/**
- * 分型入口。返回 `{ kind, code, extCode, displayMsg, detail }`。
- * kind ∈ session_dead | hard_credit | safety | param | rate_limit | server | client | unknown
- */
-export function classifyUpstreamError(status, bodyText) {
-  const text = String(bodyText || "");
-  const lower = text.toLowerCase();
-  const code = pickBusinessCode(text);
-  const extCode = extErrorCode(text);
-  const out = { kind: "unknown", code, extCode, displayMsg: extractDisplayMessage(text), detail: text.slice(0, 200) };
-
-  if (status === 401) { out.kind = "session_dead"; return out; }
-  if (status === 402) { out.kind = "hard_credit"; return out; }
-  if (status === 429) { out.kind = "rate_limit"; return out; }
-  if (status >= 500) { out.kind = "server"; return out; }
-
-  // 顺序即优先级：先排掉「刷了也没用」的三类，再谈鉴权。
-  if (SAFETY_MARKERS.some((m) => lower.includes(m.toLowerCase()) || text.includes(m))) { out.kind = "safety"; return out; }
-  if (HARD_CREDIT_MARKERS.some((m) => lower.includes(m.toLowerCase()) || text.includes(m))) { out.kind = "hard_credit"; return out; }
-  if (PARAM_CODES.has(code) || (status === 400 && code && code !== "11140")) { out.kind = "param"; return out; }
-  if (status === 403 && SESSION_MARKERS.some((m) => lower.includes(m))) { out.kind = "session_dead"; return out; }
-  if (status === 400 && lower.includes("token")) { out.kind = "session_dead"; return out; }
-  if (status >= 400 && status < 500) { out.kind = "client"; return out; }
-  return out;
-}
-
-/** 只有这类才值得去刷 token。 */
-export function isSessionDead(kind) { return kind === "session_dead"; }
-/** 只有这类才该把该号冷却并换下一个号（刷 token 与重试都无救）。 */
-export function isCreditExhausted(kind) { return kind === "hard_credit"; }
-/** 这类是「随机拦截」，同请求体原地重试可救（`global-hi.js:229` 实测 11140 按 ~10-25% 概率出现）。 */
-export function isRetryableSafety(kind) { return kind === "safety"; }
-
-/**
- * 给人看的错误文案。
- * ⚠ 非鉴权类刻意**不写裸 `401`/`403` 数字**：下游宿主/适配器常按 `/\b(401|403)\b/` 直接判成
- *   "API Key 无效"，会把真实业务错误覆盖掉（参考仓库 issue #58 原封不动踩过这个坑）。
- */
-export function friendlyMessage(kind, bodyText, providerId = "globalworkbuddy") {
-  const display = extractDisplayMessage(bodyText);
-  const code = pickBusinessCode(bodyText);
-  const label = display || (code ? `code ${code}` : String(bodyText || "").slice(0, 160)) || "上游拒绝";
-  const prefix = kind === "session_dead" ? `${providerId} 会话已失效` : `${providerId} 上游拒绝`;
-  return code ? `${prefix}（${code}）：${label}` : `${prefix}：${label}`;
-}
+// 上游错误分型：决定一次失败该「刷新」「换号」「原地重试」还是「直接报错」。
+// 与国内版 `workbuddy/auth.js:20` 的关键区别：**403 不再一律当鉴权失败**。
+// 国际版实测：11140（安全审核）、11128、11133、11101、11102 全是 403/400，refresh 对它们完全无用
+// —— 而 CN 版把 403 当鉴权，等于每命中一次就白烧一次 token 刷新（`global-hi.js:221` 早已发现却从未回流 provider）。
+// Note: 同一个业务码在两区含义不同（11128 在 CN=developer role 被拒、在国际版=缺首条 system），
+//       所以判型只能「码 + 文案」一起看，且**绝不按码单独分支**。
+
+/** 积分不足标记：英文小写形 + 中文原文（词表照参考仓库 upstream.ts:184-189）。 */
+const HARD_CREDIT_MARKERS = [
+  "insufficient credit", "no credit", "credit exhausted", "credits exhausted", "out of credit",
+  "quota exceeded", "quota exhaust", "payment required", "credit not enough", "not enough credit",
+  "积分不足", "额度不足", "余额不足", "积分用完", "额度用尽", "没有积分",
+];
+
+/** 会话失效措辞（403 时用于区分「真鉴权」与「业务拒绝」）。 */
+const SESSION_MARKERS = [
+  "unauthorized", "authenticate", "invalid token", "token expired", "token invalid",
+  "access token", "login expired", "need login", "session expired", "未登录", "登录过期", "会话过期",
+];
+
+/** 安全审核类：11140 是伞形码（实测 displayMsg 既见「内容未通过安全审核」也见「访问受限」）。 */
+const SAFETY_MARKERS = ["request illegal", "safety", "安全审核", "內容未通過", "访问受限"];
+
+/** 参数类业务码（实测：11101 tool_choice 反序列化、11102 模型不存在、11128 首条/角色、11133 参数被模型拒）。 */
+const PARAM_CODES = new Set(["11101", "11102", "11128", "11133"]);
+
+function pickBusinessCode(text) {
+  const m = String(text || "").match(/"code"\s*:\s*"?(\d{4,6})"?/);
+  return m ? m[1] : "";
+}
+
+/** 提取 `displayMsg.zh` → `displayMsg.en` → `msg`（参考仓库 issue #58 的教训：别把整串 JSON 甩给用户）。 */
+export function extractDisplayMessage(text) {
+  let obj;
+  try { obj = JSON.parse(String(text || "")); } catch { return ""; }
+  if (!obj || typeof obj !== "object") return "";
+  const dm = obj.displayMsg;
+  if (dm && typeof dm === "object") {
+    for (const key of ["zh", "en", "zh-hant"]) {
+      if (typeof dm[key] === "string" && dm[key].trim()) return dm[key].trim();
+    }
+  }
+  return typeof obj.msg === "string" ? obj.msg.trim() : "";
+}
+
+export function extErrorCode(text) {
+  try {
+    const obj = JSON.parse(String(text || ""));
+    const code = obj?.extError?.code;
+    return typeof code === "string" ? code : "";
+  } catch { return ""; }
+}
+
+/**
+ * 分型入口。返回 `{ kind, code, extCode, displayMsg, detail }`。
+ * kind ∈ session_dead | hard_credit | safety | param | rate_limit | server | client | unknown
+ */
+export function classifyUpstreamError(status, bodyText) {
+  const text = String(bodyText || "");
+  const lower = text.toLowerCase();
+  const code = pickBusinessCode(text);
+  const extCode = extErrorCode(text);
+  const out = { kind: "unknown", code, extCode, displayMsg: extractDisplayMessage(text), detail: text.slice(0, 200) };
+
+  if (status === 401) { out.kind = "session_dead"; return out; }
+  if (status === 402) { out.kind = "hard_credit"; return out; }
+  if (status === 429) { out.kind = "rate_limit"; return out; }
+  if (status >= 500) { out.kind = "server"; return out; }
+
+  // 顺序即优先级：先排掉「刷了也没用」的三类，再谈鉴权。
+  if (SAFETY_MARKERS.some((m) => lower.includes(m.toLowerCase()) || text.includes(m))) { out.kind = "safety"; return out; }
+  if (HARD_CREDIT_MARKERS.some((m) => lower.includes(m.toLowerCase()) || text.includes(m))) { out.kind = "hard_credit"; return out; }
+  if (PARAM_CODES.has(code) || (status === 400 && code && code !== "11140")) { out.kind = "param"; return out; }
+  if (status === 403 && SESSION_MARKERS.some((m) => lower.includes(m))) { out.kind = "session_dead"; return out; }
+  if (status === 400 && lower.includes("token")) { out.kind = "session_dead"; return out; }
+  if (status >= 400 && status < 500) { out.kind = "client"; return out; }
+  return out;
+}
+
+/** 只有这类才值得去刷 token。 */
+export function isSessionDead(kind) { return kind === "session_dead"; }
+/** 只有这类才该把该号冷却并换下一个号（刷 token 与重试都无救）。 */
+export function isCreditExhausted(kind) { return kind === "hard_credit"; }
+/** 这类是「随机拦截」，同请求体原地重试可救（`global-hi.js:229` 实测 11140 按 ~10-25% 概率出现）。 */
+export function isRetryableSafety(kind) { return kind === "safety"; }
+
+/**
+ * 给人看的错误文案。
+ * ⚠ 非鉴权类刻意**不写裸 `401`/`403` 数字**：下游宿主/适配器常按 `/\b(401|403)\b/` 直接判成
+ *   "API Key 无效"，会把真实业务错误覆盖掉（参考仓库 issue #58 原封不动踩过这个坑）。
+ */
+export function friendlyMessage(kind, bodyText, providerId = "globalworkbuddy") {
+  const display = extractDisplayMessage(bodyText);
+  const code = pickBusinessCode(bodyText);
+  const label = display || (code ? `code ${code}` : String(bodyText || "").slice(0, 160)) || "上游拒绝";
+  const prefix = kind === "session_dead" ? `${providerId} 会话已失效` : `${providerId} 上游拒绝`;
+  return code ? `${prefix}（${code}）：${label}` : `${prefix}：${label}`;
+}

package/src/providers/globalworkbuddy/headers.js

@@ -1,89 +1,89 @@
-// 三条通道的请求头装配。与国内版（`workbuddy/chat.js:12` 的 buildAuthHeaders）有三处**有意的**不同，
-// 全部来自 2026-10-05 取证与参考仓库 upstream.ts:374-421 的通道隔离纪律：
-//  ① Origin/Referer 与 host 同源 —— 国内版对 `.ai` token 发 `www.codebuddy.cn` 的 Origin 属跨产品指纹错配；
-//  ② chat 通道**绝不**携带 refreshToken（参考仓库注释称「安全红线」，我们国内版没这条约束但同样该守）；
-//  ③ refresh 通道**不带** `Authorization: Bearer`（`global-hi.js:143` 现在带着可能已过期的 token，属错误做法）。
-// 缺值一律走 `X-No-*` 占位：上游区分「字段缺失」与「字段为空」（参考仓库同款处理）。
-
-import {
-  ORIGIN, DOMAIN, CHAT_UA, CATALOG_UA, REFRESH_UA, APP_VERSION,
-} from "./constants.js";
-
-function common(ua) {
-  return {
-    Accept: "application/json, text/plain, */*",
-    "X-Requested-With": "XMLHttpRequest",
-    Origin: ORIGIN,
-    Referer: `${ORIGIN}/`,
-    "User-Agent": ua,
-  };
-}
-
-/** 身份类头：uid/enterpriseId/domain 缺值走 X-No-* 占位。 */
-function identityHeaders(cred) {
-  const uid = String(cred?.uid || "");
-  const ent = String(cred?.enterpriseId || "");
-  const domain = String(cred?.domain || "") || DOMAIN;
-  return {
-    ...(uid ? { "X-User-Id": uid } : { "X-No-User-Id": "1" }),
-    ...(ent ? { "X-Enterprise-Id": ent, "X-Tenant-Id": ent } : { "X-No-Enterprise-Id": "1" }),
-    ...(cred?.domain ? { "X-Domain": domain } : { "X-No-Department-Info": "1" }),
-  };
-}
-
-/** chat：只带 Bearer，永不含 refreshToken。Accept 用「全量族」写法（实测穿得过参数校验）。 */
-export function chatHeaders(cred) {
-  return {
-    ...common(CHAT_UA),
-    "Content-Type": "application/json",
-    "Accept-Language": "en-US",
-    "X-IDE-Name": "WorkBuddy",
-    "X-IDE-Type": "WorkBuddy",
-    "X-IDE-Version": APP_VERSION,
-    "X-Product": "SaaS",
-    ...identityHeaders(cred),
-    Authorization: `Bearer ${cred?.accessToken || ""}`,
-  };
-}
-
-/** 目录（/v3/config）：Bearer + 同源 Origin；UA 独立可覆盖（结论 B 证明上游不据此分流，但留排障口子）。 */
-export function catalogHeaders(cred) {
-  return {
-    Accept: "application/json",
-    Origin: ORIGIN,
-    Referer: `${ORIGIN}/`,
-    "X-Requested-With": "XMLHttpRequest",
-    "X-Product": "SaaS",
-    "User-Agent": CATALOG_UA,
-    Authorization: `Bearer ${cred?.accessToken || ""}`,
-  };
-}
-
-/** refresh：`X-Refresh-Token` 只出现在这里；**不带 Authorization**。 */
-export function refreshHeaders(cred) {
-  return {
-    ...common(REFRESH_UA),
-    "Content-Type": "application/json",
-    "X-Refresh-Token": String(cred?.refreshToken || ""),
-    "X-Auth-Refresh-Source": "workbuddy",
-    ...identityHeaders(cred),
-  };
-}
-
-/** 计费（余额）：Bearer + 身份头，无 IDE 指纹。 */
-export function billingHeaders(cred) {
-  return {
-    Accept: "application/json",
-    "Content-Type": "application/json",
-    Origin: ORIGIN,
-    Referer: `${ORIGIN}/`,
-    "User-Agent": CHAT_UA,
-    ...identityHeaders(cred),
-    Authorization: `Bearer ${cred?.accessToken || ""}`,
-  };
-}
-
-/** 设备授权流（登录时手里还没有凭据）：UA/Origin 齐，但既无 Bearer 也无 X-User-Id。 */
-export function deviceHeaders() {
-  return { ...common(REFRESH_UA), "Content-Type": "application/json" };
-}
+// 三条通道的请求头装配。与国内版（`workbuddy/chat.js:12` 的 buildAuthHeaders）有三处**有意的**不同，
+// 全部来自 2026-10-05 取证与参考仓库 upstream.ts:374-421 的通道隔离纪律：
+//  ① Origin/Referer 与 host 同源 —— 国内版对 `.ai` token 发 `www.codebuddy.cn` 的 Origin 属跨产品指纹错配；
+//  ② chat 通道**绝不**携带 refreshToken（参考仓库注释称「安全红线」，我们国内版没这条约束但同样该守）；
+//  ③ refresh 通道**不带** `Authorization: Bearer`（`global-hi.js:143` 现在带着可能已过期的 token，属错误做法）。
+// 缺值一律走 `X-No-*` 占位：上游区分「字段缺失」与「字段为空」（参考仓库同款处理）。
+
+import {
+  ORIGIN, DOMAIN, CHAT_UA, CATALOG_UA, REFRESH_UA, APP_VERSION,
+} from "./constants.js";
+
+function common(ua) {
+  return {
+    Accept: "application/json, text/plain, */*",
+    "X-Requested-With": "XMLHttpRequest",
+    Origin: ORIGIN,
+    Referer: `${ORIGIN}/`,
+    "User-Agent": ua,
+  };
+}
+
+/** 身份类头：uid/enterpriseId/domain 缺值走 X-No-* 占位。 */
+function identityHeaders(cred) {
+  const uid = String(cred?.uid || "");
+  const ent = String(cred?.enterpriseId || "");
+  const domain = String(cred?.domain || "") || DOMAIN;
+  return {
+    ...(uid ? { "X-User-Id": uid } : { "X-No-User-Id": "1" }),
+    ...(ent ? { "X-Enterprise-Id": ent, "X-Tenant-Id": ent } : { "X-No-Enterprise-Id": "1" }),
+    ...(cred?.domain ? { "X-Domain": domain } : { "X-No-Department-Info": "1" }),
+  };
+}
+
+/** chat：只带 Bearer，永不含 refreshToken。Accept 用「全量族」写法（实测穿得过参数校验）。 */
+export function chatHeaders(cred) {
+  return {
+    ...common(CHAT_UA),
+    "Content-Type": "application/json",
+    "Accept-Language": "en-US",
+    "X-IDE-Name": "WorkBuddy",
+    "X-IDE-Type": "WorkBuddy",
+    "X-IDE-Version": APP_VERSION,
+    "X-Product": "SaaS",
+    ...identityHeaders(cred),
+    Authorization: `Bearer ${cred?.accessToken || ""}`,
+  };
+}
+
+/** 目录（/v3/config）：Bearer + 同源 Origin；UA 独立可覆盖（结论 B 证明上游不据此分流，但留排障口子）。 */
+export function catalogHeaders(cred) {
+  return {
+    Accept: "application/json",
+    Origin: ORIGIN,
+    Referer: `${ORIGIN}/`,
+    "X-Requested-With": "XMLHttpRequest",
+    "X-Product": "SaaS",
+    "User-Agent": CATALOG_UA,
+    Authorization: `Bearer ${cred?.accessToken || ""}`,
+  };
+}
+
+/** refresh：`X-Refresh-Token` 只出现在这里；**不带 Authorization**。 */
+export function refreshHeaders(cred) {
+  return {
+    ...common(REFRESH_UA),
+    "Content-Type": "application/json",
+    "X-Refresh-Token": String(cred?.refreshToken || ""),
+    "X-Auth-Refresh-Source": "workbuddy",
+    ...identityHeaders(cred),
+  };
+}
+
+/** 计费（余额）：Bearer + 身份头，无 IDE 指纹。 */
+export function billingHeaders(cred) {
+  return {
+    Accept: "application/json",
+    "Content-Type": "application/json",
+    Origin: ORIGIN,
+    Referer: `${ORIGIN}/`,
+    "User-Agent": CHAT_UA,
+    ...identityHeaders(cred),
+    Authorization: `Bearer ${cred?.accessToken || ""}`,
+  };
+}
+
+/** 设备授权流（登录时手里还没有凭据）：UA/Origin 齐，但既无 Bearer 也无 X-User-Id。 */
+export function deviceHeaders() {
+  return { ...common(REFRESH_UA), "Content-Type": "application/json" };
+}