mslxdff 0.1.203 → 0.1.208

package/src/providers/workbuddy/models.js

@@ -1,126 +1,126 @@
-import { joinModelId } from "../model-id.js";
-import { joinUrl } from "../base.js";
-
-function creditsValue(c) {
-  if (!c || !String(c).trim()) return 0;
-  const m = String(c).match(/x([\d.]+)/);
-  return m ? parseFloat(m[1]) : 999;
-}
-
-export function createModelsService({
-  id = "workbuddy",
-  baseUrl,
-  modelsPath,
-  fetchImpl,
-  dispatcher,
-  getKey,
-  getAuth,
-  maybeProactiveRefresh,
-  refreshTokenFor,
-  isAuthError,
-  clock = Date.now,
-} = {}) {
-  const CACHE_TTL_MS = 10 * 60 * 1000;
-  let cache = null;
-  let fetchedAt = 0;
-
-  async function execList(useKey, useAuth) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(new Error(`${id} models timed out`)), 15_000);
-    try {
-      const headers = {
-        Accept: "application/json",
-        "X-User-Id": useAuth?.uid || "",
-        "X-Domain": useAuth?.domain || "www.codebuddy.cn",
-        "X-Product": "SaaS",
-        "User-Agent": "CLI/2.115.0 WorkBuddy/2.115.0",
-        Origin: "https://www.codebuddy.cn",
-        Referer: "https://www.codebuddy.cn/",
-      };
-      if (useKey) headers["Authorization"] = `Bearer ${useKey}`;
-      const opts = { headers, signal: controller.signal };
-      if (dispatcher) opts.dispatcher = dispatcher;
-      return await fetchImpl(`${joinUrl(baseUrl, modelsPath)}`, opts);
-    } finally {
-      clearTimeout(timer);
-    }
-  }
-
-  async function listModels() {
-    const now = clock();
-    if (cache && now - fetchedAt < CACHE_TTL_MS) return cache;
-    // 逐 key 试到成功：单个 token 被上游撤销时整个目录不该空掉。2026-10-10 实测 4 个 token 里 3 个
-    // 已失效，旧逻辑取 ring.next() 首个 key 401 即 return []，CLI 端表现为 `workbuddy models (0 total)`
-    // → aggLoad 判 `!allowed.length` 把整家 workbuddy 跳过，用户侧就是「模型全没了」。
-    const tried = new Set();
-    let res = null;
-    try {
-      for (let i = 0; i < 8; i++) {
-        const key = getKey ? getKey() : "";
-        if (tried.has(key)) break; // ring 绕回已试过的号 = 没有新号了
-        tried.add(key);
-        const auth = getAuth ? getAuth(key) : null;
-        if (auth && key) maybeProactiveRefresh?.(auth, key);
-        let r = await execList(key, auth);
-        if (!r.ok) {
-          let t = "";
-          try { t = await r.clone().text(); } catch {}
-          if (isAuthError?.(r.status, t)) {
-            const newKey = await refreshTokenFor?.(key, auth);
-            if (newKey && !tried.has(newKey)) {
-              tried.add(newKey);
-              r = await execList(newKey, getAuth ? getAuth(newKey) : auth);
-            }
-          }
-        }
-        if (r.ok) { res = r; break; }
-      }
-      if (!res) return [];
-      const json = await res.json().catch(() => ({}));
-      // `/v3/config` 两种形状都出现过：`{code,msg,data}` 信封 / 产品文档裸放顶层
-      const doc = json && typeof json === "object"
-        ? (json.data && typeof json.data === "object" && !Array.isArray(json.data) ? json.data
-          : (Array.isArray(json.models) || Array.isArray(json.agents) ? json : null))
-        : null;
-      const models = doc?.models;
-      if (!Array.isArray(models)) return [];
-      const sorted = [...models].sort((a, b) => creditsValue(a.credits) - creditsValue(b.credits));
-      cache = sorted.filter((m) => m && typeof m.id === "string").map((m) => ({ ...m, id: joinModelId(id, m.id) }));
-      fetchedAt = now;
-      return cache;
-    } catch {
-      return [];
-    }
-  }
-
-  async function preheat() {
-    const t0 = (typeof performance !== "undefined" && performance.now) ? performance.now() : clock();
-    try {
-      const key = getKey ? getKey() : "";
-      const auth = getAuth ? getAuth(key) : null;
-      const headers = {
-        Accept: "application/json",
-        "X-User-Id": auth?.uid || "",
-        "X-Domain": auth?.domain || "www.codebuddy.cn",
-        "X-Product": "SaaS",
-        "User-Agent": "CLI/2.115.0 WorkBuddy/2.115.0",
-        Origin: "https://www.codebuddy.cn",
-        Referer: "https://www.codebuddy.cn/",
-      };
-      if (key) headers["Authorization"] = `Bearer ${key}`;
-      const opts = { headers };
-      if (dispatcher) opts.dispatcher = dispatcher;
-      const res = await fetchImpl(joinUrl(baseUrl, modelsPath), opts);
-      try { if (res.body) await res.text().catch(() => {}); } catch {}
-      const ms = Math.round(((typeof performance !== "undefined" && performance.now) ? performance.now() : clock()) - t0);
-      return { ok: res.ok, status: res.status, ms };
-    } catch (err) {
-      const ms = Math.round(((typeof performance !== "undefined" && performance.now) ? performance.now() : clock()) - t0);
-      return { ok: false, error: String(err?.message || err), ms };
-    }
-  }
-
-  function clearCache() { cache = null; fetchedAt = 0; }
-
-  return { listModels, preheat, clearCache, _getCache: () => cache };
-}
+import { joinModelId } from "../model-id.js";
+import { joinUrl } from "../base.js";
+
+function creditsValue(c) {
+  if (!c || !String(c).trim()) return 0;
+  const m = String(c).match(/x([\d.]+)/);
+  return m ? parseFloat(m[1]) : 999;
+}
+
+export function createModelsService({
+  id = "workbuddy",
+  baseUrl,
+  modelsPath,
+  fetchImpl,
+  dispatcher,
+  getKey,
+  getAuth,
+  maybeProactiveRefresh,
+  refreshTokenFor,
+  isAuthError,
+  clock = Date.now,
+} = {}) {
+  const CACHE_TTL_MS = 10 * 60 * 1000;
+  let cache = null;
+  let fetchedAt = 0;
+
+  async function execList(useKey, useAuth) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(new Error(`${id} models timed out`)), 15_000);
+    try {
+      const headers = {
+        Accept: "application/json",
+        "X-User-Id": useAuth?.uid || "",
+        "X-Domain": useAuth?.domain || "www.codebuddy.cn",
+        "X-Product": "SaaS",
+        "User-Agent": "CLI/2.115.0 WorkBuddy/2.115.0",
+        Origin: "https://www.codebuddy.cn",
+        Referer: "https://www.codebuddy.cn/",
+      };
+      if (useKey) headers["Authorization"] = `Bearer ${useKey}`;
+      const opts = { headers, signal: controller.signal };
+      if (dispatcher) opts.dispatcher = dispatcher;
+      return await fetchImpl(`${joinUrl(baseUrl, modelsPath)}`, opts);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+
+  async function listModels() {
+    const now = clock();
+    if (cache && now - fetchedAt < CACHE_TTL_MS) return cache;
+    // 逐 key 试到成功：单个 token 被上游撤销时整个目录不该空掉。2026-10-10 实测 4 个 token 里 3 个
+    // 已失效，旧逻辑取 ring.next() 首个 key 401 即 return []，CLI 端表现为 `workbuddy models (0 total)`
+    // → aggLoad 判 `!allowed.length` 把整家 workbuddy 跳过，用户侧就是「模型全没了」。
+    const tried = new Set();
+    let res = null;
+    try {
+      for (let i = 0; i < 8; i++) {
+        const key = getKey ? getKey() : "";
+        if (tried.has(key)) break; // ring 绕回已试过的号 = 没有新号了
+        tried.add(key);
+        const auth = getAuth ? getAuth(key) : null;
+        if (auth && key) maybeProactiveRefresh?.(auth, key);
+        let r = await execList(key, auth);
+        if (!r.ok) {
+          let t = "";
+          try { t = await r.clone().text(); } catch {}
+          if (isAuthError?.(r.status, t)) {
+            const newKey = await refreshTokenFor?.(key, auth);
+            if (newKey && !tried.has(newKey)) {
+              tried.add(newKey);
+              r = await execList(newKey, getAuth ? getAuth(newKey) : auth);
+            }
+          }
+        }
+        if (r.ok) { res = r; break; }
+      }
+      if (!res) return [];
+      const json = await res.json().catch(() => ({}));
+      // `/v3/config` 两种形状都出现过：`{code,msg,data}` 信封 / 产品文档裸放顶层
+      const doc = json && typeof json === "object"
+        ? (json.data && typeof json.data === "object" && !Array.isArray(json.data) ? json.data
+          : (Array.isArray(json.models) || Array.isArray(json.agents) ? json : null))
+        : null;
+      const models = doc?.models;
+      if (!Array.isArray(models)) return [];
+      const sorted = [...models].sort((a, b) => creditsValue(a.credits) - creditsValue(b.credits));
+      cache = sorted.filter((m) => m && typeof m.id === "string").map((m) => ({ ...m, id: joinModelId(id, m.id) }));
+      fetchedAt = now;
+      return cache;
+    } catch {
+      return [];
+    }
+  }
+
+  async function preheat() {
+    const t0 = (typeof performance !== "undefined" && performance.now) ? performance.now() : clock();
+    try {
+      const key = getKey ? getKey() : "";
+      const auth = getAuth ? getAuth(key) : null;
+      const headers = {
+        Accept: "application/json",
+        "X-User-Id": auth?.uid || "",
+        "X-Domain": auth?.domain || "www.codebuddy.cn",
+        "X-Product": "SaaS",
+        "User-Agent": "CLI/2.115.0 WorkBuddy/2.115.0",
+        Origin: "https://www.codebuddy.cn",
+        Referer: "https://www.codebuddy.cn/",
+      };
+      if (key) headers["Authorization"] = `Bearer ${key}`;
+      const opts = { headers };
+      if (dispatcher) opts.dispatcher = dispatcher;
+      const res = await fetchImpl(joinUrl(baseUrl, modelsPath), opts);
+      try { if (res.body) await res.text().catch(() => {}); } catch {}
+      const ms = Math.round(((typeof performance !== "undefined" && performance.now) ? performance.now() : clock()) - t0);
+      return { ok: res.ok, status: res.status, ms };
+    } catch (err) {
+      const ms = Math.round(((typeof performance !== "undefined" && performance.now) ? performance.now() : clock()) - t0);
+      return { ok: false, error: String(err?.message || err), ms };
+    }
+  }
+
+  function clearCache() { cache = null; fetchedAt = 0; }
+
+  return { listModels, preheat, clearCache, _getCache: () => cache };
+}

package/src/providers/workbuddy/payload.js

@@ -1,141 +1,141 @@
-// workbuddy 出站 payload 改写（逆向官方客户端行为，参考 Sliverkiss/workbuddy2api 的 payload.go/thinking.go）：
-//  1. developer → system：上游 role 白名单不含 developer（命中 400 code=11128）
-//  2. tool_choice 归一：上游该字段是 string 类型，对象形式 400 code=11101（none 连带删 tools/functions）
-//  3. DeepSeek thinking 注入：必须显式 thinking.type=enabled + 有 effort 档位，否则上游按不思考应答；
-//     显式 disabled 尊重并删 effort；缺档补默认 "high"
-//  4. DeepSeek reasoning_content 回填：会话内任一 assistant 带 reasoning 痕迹时，
-//     所有 assistant 必须带 reasoning_content（string，可空串）——requiresReasoningContentOnAssistantMessages
-//  5. Claude Code 指纹剥离：上游扫 system/assistant 文本，命中官方固定串即 400 code=11128
-//     "Illegal API invocation from an unapproved channel"（拒当 Claude Code 的免费通道）。
-//     实测 2026-10-10（拿真 Claude Code 27KB prompt 二分定位）：触发形态共三种——行首 `x-anthropic-billing-header:` 整行 +
-//     两句官方固定整句（"You are Claude Code, Anthropic's official CLI for Claude." 与
-//     "To give feedback, users should report the issue at https://github.com/anthropics/claude-code/issues"）；
-//     整句为**纯子串匹配**（去掉行首 `- ` 照拦），user/tool 文本不扫、换说法/中间片段/普通长文全放行
-//     → 只剥官方注入物不动用户内容；日后撞见新拦句，加进 CC_SENTENCES 即可
-import { effortFromBody, effortLevelFromBody, isEffortOff } from "../../thinking-effort.js";
-
-const DEEPSEEK_PREFIX = "deepseek";
-const DEFAULT_DEEPSEEK_EFFORT = "high";
-const CC_BILLING_LINE = /^x-anthropic-billing-header:.*\r?\n?/gim;
-// 整句指纹清单：官方固定整句（实测为纯子串匹配，与行首前缀无关；新拦句直接往这里追加整句）
-const CC_SENTENCES = [
-  "You are Claude Code, Anthropic's official CLI for Claude.",
-  "To give feedback, users should report the issue at https://github.com/anthropics/claude-code/issues",
-];
-// 廉价预检：上面三种形态的大小写不敏感超集——只多放行进剥离流程，绝不漏剥
-const CC_MAYBE = /x-anthropic-billing-header|Claude Code|anthropics\/claude-code/i;
-
-export function isDeepSeekModel(model) {
-  return String(model || "").trim().toLowerCase().startsWith(DEEPSEEK_PREFIX);
-}
-
-export function normalizeRoles(obj) {
-  const msgs = obj?.messages;
-  if (!Array.isArray(msgs)) return obj;
-  for (const m of msgs) {
-    if (m && typeof m === "object" && typeof m.role === "string" && m.role.trim().toLowerCase() === "developer") {
-      m.role = "system";
-    }
-  }
-  return obj;
-}
-
-export function normalizeToolChoice(obj) {
-  const tc = obj?.tool_choice;
-  if (tc === undefined || tc === null) return obj;
-  const dropTools = () => { delete obj.tools; delete obj.functions; };
-  if (typeof tc === "string") {
-    if (tc.trim().toLowerCase() === "none") { delete obj.tool_choice; dropTools(); }
-    return obj;
-  }
-  if (typeof tc === "object") {
-    const type = String(tc.type || "").trim().toLowerCase();
-    if (type === "none") { delete obj.tool_choice; dropTools(); }
-    else if (type === "auto" || type === "required") obj.tool_choice = type;
-    else if (type === "function") {
-      const name = String(tc?.function?.name || tc?.name || "").trim();
-      obj.tool_choice = name || "auto";
-    } else delete obj.tool_choice;
-    return obj;
-  }
-  delete obj.tool_choice;
-  return obj;
-}
-
-export function injectThinking(obj) {
-  if (!isDeepSeekModel(obj?.model)) return obj;
-  // 档位词表与关断判定统一走 src/thinking-effort.js：客户端**任一**载体声明 off/none/disabled 都算关思考
-  //（旧版只认 thinking.type，会把新透传进来的 reasoning_effort:"off" 反转为开——change fix-thinking-effort-passthrough）。
-  const th = obj.thinking && typeof obj.thinking === "object" ? obj.thinking : null;
-  const declared = effortFromBody(obj);
-  if (declared && isEffortOff(declared)) {
-    delete obj.reasoning_effort;
-    delete obj.reasoningEffort;
-    delete obj.effort;
-    if (th) th.type = "disabled";
-    else obj.thinking = { type: "disabled" };
-    return obj;
-  }
-  if (!th) obj.thinking = { type: "enabled" };
-  else if (!String(th.type || "").trim()) th.type = "enabled";
-  // 归一档位载体：上游只认 reasoning_effort，故 camel 与 effort 都折成 snake 再删掉（免得未知字段裸奔）。
-  const level = effortLevelFromBody(obj);
-  if (!("reasoning_effort" in obj)) obj.reasoning_effort = level || DEFAULT_DEEPSEEK_EFFORT;
-  delete obj.reasoningEffort;
-  delete obj.effort;
-  return obj;
-}
-
-export function backfillReasoningContent(obj) {
-  if (!isDeepSeekModel(obj?.model)) return obj;
-  const msgs = obj.messages;
-  if (!Array.isArray(msgs) || !msgs.length) return obj;
-  let hasTrace = false;
-  for (const m of msgs) {
-    if (!m || typeof m !== "object") continue;
-    if (typeof m.reasoning === "string" && m.reasoning) { hasTrace = true; break; }
-    if ("reasoning_content" in m) { hasTrace = true; break; }
-  }
-  if (!hasTrace) return obj;
-  for (const m of msgs) {
-    if (!m || m.role !== "assistant") continue;
-    if ("reasoning_content" in m) continue;
-    m.reasoning_content = typeof m.reasoning === "string" ? m.reasoning : "";
-  }
-  return obj;
-}
-
-export function stripClaudeFingerprints(obj) {
-  const msgs = obj?.messages;
-  if (!Array.isArray(msgs)) return obj;
-  const clean = (text) => {
-    if (typeof text !== "string" || !CC_MAYBE.test(text)) return text;
-    let out = text.replace(CC_BILLING_LINE, "");
-    for (const s of CC_SENTENCES) out = out.split(s).join("");
-    return out;
-  };
-  for (const m of msgs) {
-    if (!m || typeof m !== "object") continue;
-    if (m.role !== "system" && m.role !== "assistant") continue; // 上游不扫 user/tool，不碰用户内容
-    if (typeof m.content === "string") m.content = clean(m.content);
-    else if (Array.isArray(m.content)) m.content = m.content.map((p) => (p && typeof p === "object" && typeof p.text === "string" ? { ...p, text: clean(p.text) } : p));
-  }
-  return obj;
-}
-
-// 入口：输入 chat body（OpenAI 格式），返回改写后的新对象（messages 浅拷贝，避免污染调用方）。
-export function rewriteWorkbuddyPayload(body) {
-  if (!body || typeof body !== "object") return body;
-  const obj = { ...body };
-  obj.messages = Array.isArray(body.messages)
-    ? body.messages.map((m) => (m && typeof m === "object" ? { ...m } : m))
-    : body.messages;
-  normalizeRoles(obj);
-  stripClaudeFingerprints(obj); // 11128：官方客户端指纹必须出网前剥掉（实测命中即秒拒，不进模型）
-  normalizeToolChoice(obj);
-  if (isDeepSeekModel(obj.model)) {
-    injectThinking(obj);
-    backfillReasoningContent(obj);
-  }
-  return obj;
-}
+// workbuddy 出站 payload 改写（逆向官方客户端行为，参考 Sliverkiss/workbuddy2api 的 payload.go/thinking.go）：
+//  1. developer → system：上游 role 白名单不含 developer（命中 400 code=11128）
+//  2. tool_choice 归一：上游该字段是 string 类型，对象形式 400 code=11101（none 连带删 tools/functions）
+//  3. DeepSeek thinking 注入：必须显式 thinking.type=enabled + 有 effort 档位，否则上游按不思考应答；
+//     显式 disabled 尊重并删 effort；缺档补默认 "high"
+//  4. DeepSeek reasoning_content 回填：会话内任一 assistant 带 reasoning 痕迹时，
+//     所有 assistant 必须带 reasoning_content（string，可空串）——requiresReasoningContentOnAssistantMessages
+//  5. Claude Code 指纹剥离：上游扫 system/assistant 文本，命中官方固定串即 400 code=11128
+//     "Illegal API invocation from an unapproved channel"（拒当 Claude Code 的免费通道）。
+//     实测 2026-10-10（拿真 Claude Code 27KB prompt 二分定位）：触发形态共三种——行首 `x-anthropic-billing-header:` 整行 +
+//     两句官方固定整句（"You are Claude Code, Anthropic's official CLI for Claude." 与
+//     "To give feedback, users should report the issue at https://github.com/anthropics/claude-code/issues"）；
+//     整句为**纯子串匹配**（去掉行首 `- ` 照拦），user/tool 文本不扫、换说法/中间片段/普通长文全放行
+//     → 只剥官方注入物不动用户内容；日后撞见新拦句，加进 CC_SENTENCES 即可
+import { effortFromBody, effortLevelFromBody, isEffortOff } from "../../thinking-effort.js";
+
+const DEEPSEEK_PREFIX = "deepseek";
+const DEFAULT_DEEPSEEK_EFFORT = "high";
+const CC_BILLING_LINE = /^x-anthropic-billing-header:.*\r?\n?/gim;
+// 整句指纹清单：官方固定整句（实测为纯子串匹配，与行首前缀无关；新拦句直接往这里追加整句）
+const CC_SENTENCES = [
+  "You are Claude Code, Anthropic's official CLI for Claude.",
+  "To give feedback, users should report the issue at https://github.com/anthropics/claude-code/issues",
+];
+// 廉价预检：上面三种形态的大小写不敏感超集——只多放行进剥离流程，绝不漏剥
+const CC_MAYBE = /x-anthropic-billing-header|Claude Code|anthropics\/claude-code/i;
+
+export function isDeepSeekModel(model) {
+  return String(model || "").trim().toLowerCase().startsWith(DEEPSEEK_PREFIX);
+}
+
+export function normalizeRoles(obj) {
+  const msgs = obj?.messages;
+  if (!Array.isArray(msgs)) return obj;
+  for (const m of msgs) {
+    if (m && typeof m === "object" && typeof m.role === "string" && m.role.trim().toLowerCase() === "developer") {
+      m.role = "system";
+    }
+  }
+  return obj;
+}
+
+export function normalizeToolChoice(obj) {
+  const tc = obj?.tool_choice;
+  if (tc === undefined || tc === null) return obj;
+  const dropTools = () => { delete obj.tools; delete obj.functions; };
+  if (typeof tc === "string") {
+    if (tc.trim().toLowerCase() === "none") { delete obj.tool_choice; dropTools(); }
+    return obj;
+  }
+  if (typeof tc === "object") {
+    const type = String(tc.type || "").trim().toLowerCase();
+    if (type === "none") { delete obj.tool_choice; dropTools(); }
+    else if (type === "auto" || type === "required") obj.tool_choice = type;
+    else if (type === "function") {
+      const name = String(tc?.function?.name || tc?.name || "").trim();
+      obj.tool_choice = name || "auto";
+    } else delete obj.tool_choice;
+    return obj;
+  }
+  delete obj.tool_choice;
+  return obj;
+}
+
+export function injectThinking(obj) {
+  if (!isDeepSeekModel(obj?.model)) return obj;
+  // 档位词表与关断判定统一走 src/thinking-effort.js：客户端**任一**载体声明 off/none/disabled 都算关思考
+  //（旧版只认 thinking.type，会把新透传进来的 reasoning_effort:"off" 反转为开——change fix-thinking-effort-passthrough）。
+  const th = obj.thinking && typeof obj.thinking === "object" ? obj.thinking : null;
+  const declared = effortFromBody(obj);
+  if (declared && isEffortOff(declared)) {
+    delete obj.reasoning_effort;
+    delete obj.reasoningEffort;
+    delete obj.effort;
+    if (th) th.type = "disabled";
+    else obj.thinking = { type: "disabled" };
+    return obj;
+  }
+  if (!th) obj.thinking = { type: "enabled" };
+  else if (!String(th.type || "").trim()) th.type = "enabled";
+  // 归一档位载体：上游只认 reasoning_effort，故 camel 与 effort 都折成 snake 再删掉（免得未知字段裸奔）。
+  const level = effortLevelFromBody(obj);
+  if (!("reasoning_effort" in obj)) obj.reasoning_effort = level || DEFAULT_DEEPSEEK_EFFORT;
+  delete obj.reasoningEffort;
+  delete obj.effort;
+  return obj;
+}
+
+export function backfillReasoningContent(obj) {
+  if (!isDeepSeekModel(obj?.model)) return obj;
+  const msgs = obj.messages;
+  if (!Array.isArray(msgs) || !msgs.length) return obj;
+  let hasTrace = false;
+  for (const m of msgs) {
+    if (!m || typeof m !== "object") continue;
+    if (typeof m.reasoning === "string" && m.reasoning) { hasTrace = true; break; }
+    if ("reasoning_content" in m) { hasTrace = true; break; }
+  }
+  if (!hasTrace) return obj;
+  for (const m of msgs) {
+    if (!m || m.role !== "assistant") continue;
+    if ("reasoning_content" in m) continue;
+    m.reasoning_content = typeof m.reasoning === "string" ? m.reasoning : "";
+  }
+  return obj;
+}
+
+export function stripClaudeFingerprints(obj) {
+  const msgs = obj?.messages;
+  if (!Array.isArray(msgs)) return obj;
+  const clean = (text) => {
+    if (typeof text !== "string" || !CC_MAYBE.test(text)) return text;
+    let out = text.replace(CC_BILLING_LINE, "");
+    for (const s of CC_SENTENCES) out = out.split(s).join("");
+    return out;
+  };
+  for (const m of msgs) {
+    if (!m || typeof m !== "object") continue;
+    if (m.role !== "system" && m.role !== "assistant") continue; // 上游不扫 user/tool，不碰用户内容
+    if (typeof m.content === "string") m.content = clean(m.content);
+    else if (Array.isArray(m.content)) m.content = m.content.map((p) => (p && typeof p === "object" && typeof p.text === "string" ? { ...p, text: clean(p.text) } : p));
+  }
+  return obj;
+}
+
+// 入口：输入 chat body（OpenAI 格式），返回改写后的新对象（messages 浅拷贝，避免污染调用方）。
+export function rewriteWorkbuddyPayload(body) {
+  if (!body || typeof body !== "object") return body;
+  const obj = { ...body };
+  obj.messages = Array.isArray(body.messages)
+    ? body.messages.map((m) => (m && typeof m === "object" ? { ...m } : m))
+    : body.messages;
+  normalizeRoles(obj);
+  stripClaudeFingerprints(obj); // 11128：官方客户端指纹必须出网前剥掉（实测命中即秒拒，不进模型）
+  normalizeToolChoice(obj);
+  if (isDeepSeekModel(obj.model)) {
+    injectThinking(obj);
+    backfillReasoningContent(obj);
+  }
+  return obj;
+}