feat: 添加文件审核严格模式设置，增强文件上传安全性

internal/deepseek/client/client_upload.go

@@ -60,7 +60,8 @@ func (c *Client) UploadFile(ctx context.Context, a *auth.RequestAuth, req Upload
 	purpose := strings.TrimSpace(req.Purpose)
 	modelType := strings.ToLower(strings.TrimSpace(req.ModelType))
 	// 与 Android 真实客户端一致：upload_file 始终携带 x-model-type（默认 default），
-	// 且不申请/携带 PoW（仅 completion 需要 PoW）。
+	// 且需申请并携带 PoW（target_path=/api/v0/file/upload_file，HAR 实测）。
+	// 缺少 x-ds-pow-response 会被服务端以 MISSING_HEADER 拒绝。
 	if modelType == "" {
 		modelType = "default"
 	}
@@ -78,8 +79,10 @@ func (c *Client) UploadFile(ctx context.Context, a *auth.RequestAuth, req Upload
 	captureSession := c.capture.Start("deepseek_upload_file", dsprotocol.DeepSeekUploadFileURL, a.AccountID, capturePayload)
 	attempts := 0
 	refreshed := false
+	powRefreshed := false
 	lastFailureKind := FailureUnknown
 	lastFailureMessage := ""
+	var powResp string
 	for attempts < maxAttempts {
 		clients := c.requestClientsForAuth(ctx, a)
 		headers := c.authHeadersWithAuth(a)
@@ -87,6 +90,20 @@ func (c *Client) UploadFile(ctx context.Context, a *auth.RequestAuth, req Upload
 		headers["x-model-type"] = modelType
 		headers["x-file-size"] = strconv.Itoa(len(req.Data))
 		headers["x-thinking-enabled"] = "1"
+		// 每次上传尝试前申请 PoW（首次 + 切换账号后重新申请）。
+		if strings.TrimSpace(powResp) == "" || powRefreshed {
+			pow, powErr := c.GetPowForTarget(ctx, a, dsprotocol.DeepSeekUploadTargetPath, maxAttempts)
+			if powErr != nil {
+				config.Logger.Warn("[upload_file] get pow failed", "error", powErr, "account", a.AccountID, "filename", filename)
+				lastFailureKind = FailureUnknown
+				lastFailureMessage = powErr.Error()
+				attempts++
+				continue
+			}
+			powResp = pow
+			powRefreshed = false
+		}
+		headers["x-ds-pow-response"] = powResp
 		resp, err := c.doUpload(ctx, clients.regular, clients.fallback, dsprotocol.DeepSeekUploadFileURL, headers, body)
 		if err != nil {
 			config.Logger.Warn("[upload_file] request error", "error", err, "account", a.AccountID, "filename", filename)
@@ -143,12 +160,14 @@ func (c *Client) UploadFile(ctx context.Context, a *auth.RequestAuth, req Upload
 			if !refreshed && shouldAttemptRefresh(resp.StatusCode, code, bizCode, msg, bizMsg) {
 				if c.Auth.RefreshToken(ctx, a) {
 					refreshed = true
+					powRefreshed = true
 					attempts++
 					continue
 				}
 			}
 			if c.Auth.SwitchAccount(ctx, a) {
 				refreshed = false
+				powRefreshed = true
 				attempts++
 				continue
 			}

internal/deepseek/client/client_upload_test.go

@@ -96,20 +96,26 @@ func TestExtractUploadFileResultSupportsNestedShapes(t *testing.T) {
 	}
 }
 
-func TestUploadFileUsesMultipartHeadersWithoutPow(t *testing.T) {
+// powChallengeResponse 是 create_pow_challenge 的最小可用响应：
+// challenge 为 64 位 hex，difficulty=1 让 ComputePow 能立即求解。
+const powChallengeResponse = `{"code":0,"msg":"ok","data":{"biz_code":0,"biz_data":{"challenge":{"algorithm":"DeepSeekHashV1","challenge":"0000000000000000000000000000000000000000000000000000000000000000","salt":"salt","difficulty":1,"expire_at":9999999999,"signature":"sig","target_path":"/api/v0/file/upload_file"}}}}`
+
+func TestUploadFileUsesMultipartHeadersWithPow(t *testing.T) {
 	uploadResponse := `{"code":0,"msg":"ok","data":{"biz_code":0,"biz_data":{"file":{"file_id":"file_789","filename":"demo.txt","bytes":5,"status":"processed","purpose":"assistants","is_image":false}}}}`
 	var seenPow string
 	var seenContentType string
 	var seenFileSize string
 	var seenModelType string
 	var seenBody string
-	call := 0
+	uploadCalled := false
 	client := &Client{
 		regular: doerFunc(func(req *http.Request) (*http.Response, error) {
-			call++
 			bodyBytes, _ := io.ReadAll(req.Body)
-			switch call {
-			case 1:
+			switch {
+			case strings.Contains(req.URL.Path, "create_pow_challenge"):
+				return &http.Response{StatusCode: http.StatusOK, Header: make(http.Header), Body: io.NopCloser(strings.NewReader(powChallengeResponse)), Request: req}, nil
+			case strings.Contains(req.URL.Path, "upload_file"):
+				uploadCalled = true
 				seenPow = req.Header.Get("x-ds-pow-response")
 				seenContentType = req.Header.Get("Content-Type")
 				seenFileSize = req.Header.Get("x-file-size")
@@ -117,7 +123,7 @@ func TestUploadFileUsesMultipartHeadersWithoutPow(t *testing.T) {
 				seenBody = string(bodyBytes)
 				return &http.Response{StatusCode: http.StatusOK, Header: make(http.Header), Body: io.NopCloser(strings.NewReader(uploadResponse)), Request: req}, nil
 			default:
-				t.Fatalf("unexpected request count %d", call)
+				t.Fatalf("unexpected request path %q", req.URL.Path)
 				return nil, nil
 			}
 		}),
@@ -139,9 +145,12 @@ func TestUploadFileUsesMultipartHeadersWithoutPow(t *testing.T) {
 	if result.ID != "file_789" {
 		t.Fatalf("expected uploaded file id file_789, got %#v", result)
 	}
-	// 与 Android 真实客户端一致：upload 不携带 PoW。
-	if seenPow != "" {
-		t.Fatalf("expected no x-ds-pow-response header, got %q", seenPow)
+	if !uploadCalled {
+		t.Fatal("expected upload request to be made")
+	}
+	// 与 Android 真实客户端一致：upload 必须携带 PoW（target_path=/api/v0/file/upload_file）。
+	if seenPow == "" {
+		t.Fatal("expected x-ds-pow-response header on upload, got empty")
 	}
 	if seenFileSize != "5" {
 		t.Fatalf("expected x-file-size=5, got %q", seenFileSize)
@@ -160,16 +169,18 @@ func TestUploadFileUsesMultipartHeadersWithoutPow(t *testing.T) {
 func TestUploadFileDefaultsModelTypeToDefaultWhenAbsent(t *testing.T) {
 	uploadResponse := `{"code":0,"msg":"ok","data":{"biz_code":0,"biz_data":{"file":{"file_id":"file_789","filename":"demo.txt","bytes":5,"status":"processed","purpose":"assistants","is_image":false}}}}`
 	var seenModelType string
-	call := 0
+	uploadCalled := false
 	client := &Client{
 		regular: doerFunc(func(req *http.Request) (*http.Response, error) {
-			call++
-			switch call {
-			case 1:
+			switch {
+			case strings.Contains(req.URL.Path, "create_pow_challenge"):
+				return &http.Response{StatusCode: http.StatusOK, Header: make(http.Header), Body: io.NopCloser(strings.NewReader(powChallengeResponse)), Request: req}, nil
+			case strings.Contains(req.URL.Path, "upload_file"):
+				uploadCalled = true
 				seenModelType = req.Header.Get("x-model-type")
 				return &http.Response{StatusCode: http.StatusOK, Header: make(http.Header), Body: io.NopCloser(strings.NewReader(uploadResponse)), Request: req}, nil
 			default:
-				t.Fatalf("unexpected request count %d", call)
+				t.Fatalf("unexpected request path %q", req.URL.Path)
 				return nil, nil
 			}
 		}),
@@ -185,6 +196,9 @@ func TestUploadFileDefaultsModelTypeToDefaultWhenAbsent(t *testing.T) {
 	if err != nil {
 		t.Fatalf("UploadFile error: %v", err)
 	}
+	if !uploadCalled {
+		t.Fatal("expected upload request to be made")
+	}
 	// 上层未传 ModelType 时，应与 Android 客户端一致默认填 default。
 	if seenModelType != "default" {
 		t.Fatalf("expected x-model-type=default, got %q", seenModelType)
@@ -204,20 +218,16 @@ func TestUploadFileWaitsForProcessedFetchFiles(t *testing.T) {
 	client := &Client{
 		regular: doerFunc(func(req *http.Request) (*http.Response, error) {
 			call++
-			switch call {
-			case 1:
-				// upload 不再申请 PoW，第一个请求就是 upload 本身。
-				if req.Header.Get("x-ds-pow-response") != "" {
-					t.Fatalf("upload should not carry PoW header, got %q", req.Header.Get("x-ds-pow-response"))
+			switch {
+			case strings.Contains(req.URL.Path, "create_pow_challenge"):
+				return &http.Response{StatusCode: http.StatusOK, Header: make(http.Header), Body: io.NopCloser(strings.NewReader(powChallengeResponse)), Request: req}, nil
+			case strings.Contains(req.URL.Path, "upload_file"):
+				// upload 必须携带 PoW（HAR 实测 target_path=/api/v0/file/upload_file）。
+				if req.Header.Get("x-ds-pow-response") == "" {
+					t.Fatalf("upload should carry PoW header, got empty")
 				}
 				return &http.Response{StatusCode: http.StatusOK, Header: make(http.Header), Body: io.NopCloser(strings.NewReader(uploadResponse)), Request: req}, nil
-			case 2, 3:
-				if req.Method != http.MethodGet {
-					t.Fatalf("expected GET fetch request, got %s", req.Method)
-				}
-				if req.URL.Path != "/api/v0/file/fetch_files" {
-					t.Fatalf("expected fetch files path /api/v0/file/fetch_files, got %q", req.URL.Path)
-				}
+			case req.Method == http.MethodGet && req.URL.Path == "/api/v0/file/fetch_files":
 				if got := req.URL.Query().Get("file_ids"); got != "file_789" {
 					t.Fatalf("expected file_ids=file_789, got %q", got)
 				}
@@ -227,7 +237,7 @@ func TestUploadFileWaitsForProcessedFetchFiles(t *testing.T) {
 				}
 				return &http.Response{StatusCode: http.StatusOK, Header: make(http.Header), Body: io.NopCloser(strings.NewReader(respBody)), Request: req}, nil
 			default:
-				t.Fatalf("unexpected request count %d", call)
+				t.Fatalf("unexpected request %s %q", req.Method, req.URL.Path)
 				return nil, nil
 			}
 		}),
@@ -251,6 +261,6 @@ func TestUploadFileWaitsForProcessedFetchFiles(t *testing.T) {
 		t.Fatalf("expected final status processed, got %#v", result.Status)
 	}
 	if call != 3 {
-		t.Fatalf("expected 3 requests (upload + 2 fetch), got %d", call)
+		t.Fatalf("expected 3 requests (pow + upload + 1 fetch), got %d", call)
 	}
 }

webui/src/features/settings/FileAuditSection.jsx

@@ -0,0 +1,28 @@
+export default function FileAuditSection({ t, form, setForm }) {
+    return (
+        <div className="bg-card border border-border rounded-xl p-5 space-y-4">
+            <div className="space-y-1">
+                <h3 className="font-semibold">{t('settings.fileAuditTitle')}</h3>
+                <p className="text-sm text-muted-foreground">{t('settings.fileAuditDesc')}</p>
+            </div>
+            <label className="flex items-start gap-3 rounded-lg border border-border bg-background/60 p-4">
+                <input
+                    type="checkbox"
+                    checked={Boolean(form.file_audit?.strict)}
+                    onChange={(e) => setForm((prev) => ({
+                        ...prev,
+                        file_audit: {
+                            ...prev.file_audit,
+                            strict: e.target.checked,
+                        },
+                    }))}
+                    className="mt-1 h-4 w-4 rounded border-border"
+                />
+                <div className="space-y-1">
+                    <span className="text-sm font-medium block">{t('settings.fileAuditEnabled')}</span>
+                    <span className="text-xs text-muted-foreground block">{t('settings.fileAuditHelp')}</span>
+                </div>
+            </label>
+        </div>
+    )
+}

webui/src/features/settings/SettingsContainer.jsx

@@ -7,6 +7,7 @@ import PlatformSection from './PlatformSection'
 import RuntimeSection from './RuntimeSection'
 import BehaviorSection from './BehaviorSection'
 import CurrentInputFileSection from './CurrentInputFileSection'
+import FileAuditSection from './FileAuditSection'
 import AutoDeleteSection from './AutoDeleteSection'
 import ModelSection from './ModelSection'
 import BackupSection from './BackupSection'
@@ -100,6 +101,8 @@ export default function SettingsContainer({ onRefresh, onMessage, authFetch, onF
 
             <CurrentInputFileSection t={t} form={form} setForm={setForm} />
 
+            <FileAuditSection t={t} form={form} setForm={setForm} />
+
             <AutoDeleteSection t={t} form={form} setForm={setForm} />
 
             <ModelSection t={t} form={form} setForm={setForm} />

webui/src/locales/en.json

@@ -444,6 +444,10 @@
         "currentInputFileDesc": "Enabled by default. Once the character threshold is reached, upload the full context as a randomly named context file (filename never includes history).",
         "currentInputFileMinChars": "Current input threshold (characters)",
         "currentInputFileHelp": "Default is 0, which uses independent split for any non-empty input.",
+        "fileAuditTitle": "File audit strict mode",
+        "fileAuditEnabled": "Strictly wait for audit pass",
+        "fileAuditDesc": "Default off. DeepSeek audits uploaded files asynchronously (audit_result: unknown→pass/reject); even if not passed, the completion stream is still pushed in full and a recall event is appended at the end (this project consumes the full stream directly, so recall has no effect). When enabled: forces waiting for audit_result=pass before treating the file as ready; audit failure returns an error. File metadata is recorded in chat history regardless of this toggle.",
+        "fileAuditHelp": "Recommended to keep off. Only enable when investigating audit issues.",
         "modelTitle": "Model mapping",
         "modelAliases": "Global model aliases (JSON)",
         "autoDeleteTitle": "Session Cleanup Policy",

webui/src/locales/zh.json

@@ -444,6 +444,10 @@
         "currentInputFileDesc": "默认开启。达到字符阈值后，将完整上下文上传为随机命名的上下文文件（文件名不包含 history）。",
         "currentInputFileMinChars": "当前输入阈值（字符数）",
         "currentInputFileHelp": "默认 0，表示只要有输入就会使用独立拆分。",
+        "fileAuditTitle": "文件审核严格模式",
+        "fileAuditEnabled": "严格等待审核通过",
+        "fileAuditDesc": "默认关闭。DeepSeek 上传文件后会异步审核（audit_result：unknown→pass/reject），即使未通过也会正常推送 completion 流，仅在最后追加撤回事件（本项目直接消费完整流，撤回无影响）。开启后：上传后强制等待 audit_result=pass 才视为就绪，审核失败会返回错误。文件元信息无论开关都会记录到对话历史。",
+        "fileAuditHelp": "建议保持关闭。仅在排查审核问题时开启。",
         "modelTitle": "模型映射",
         "modelAliases": "全局模型映射（JSON）",
         "autoDeleteTitle": "会话删除策略",