@alilis/k-hat 0.2.4 → 0.2.6

package/dist/admin.js

@@ -4,6 +4,8 @@ import { join } from 'node:path';
 import { UiSessions, serveUi } from './web-ui.js';
 import { ACCESS_TOKEN_REF, generateAccessToken } from './vault.js';
 import { providerUrl } from './config.js';
+import { findRoute, routeUpstreamModel } from './router.js';
+import { readExport, applyImport } from './portable-vault.js';
 // Admin API is the daemon's single-writer surface (ADR-0005). It is reachable
 // only from loopback and behind the proxy access token, so a local non-loopback
 // client or a process without the token cannot mutate config/state/vault.
@@ -76,7 +78,12 @@ function buildStatus(store) {
                 };
             })
         })),
-        routes: store.config.routes.map((route) => route.enabled === false ? { ...route, enabled: false } : { model: route.model, provider: route.provider })
+        routes: store.config.routes.map((route) => ({
+            model: route.model,
+            provider: route.provider,
+            ...(route.upstreamModel ? { upstreamModel: route.upstreamModel } : {}),
+            ...(route.enabled === false ? { enabled: false } : {})
+        }))
     };
 }
 async function route(req, res, store, sessionAuthorized = false) {
@@ -112,6 +119,18 @@ async function route(req, res, store, sessionAuthorized = false) {
     }
     if (sub[0] === 'status' && method === 'GET')
         return json(res, 200, buildStatus(store));
+    if (sub[0] === 'import' && sub.length === 1 && method === 'POST') {
+        const body = await readJsonBody(req);
+        if (typeof body.content !== 'string' || !body.content)
+            throw new Error('content (the export file text) is required');
+        if (typeof body.password !== 'string' || !body.password)
+            throw new Error('password is required');
+        if (body.content.length > 24 * 1024 * 1024)
+            throw new Error('export file is too large');
+        const payload = readExport(body.content, body.password);
+        const result = await store.mutate(() => applyImport(store, payload));
+        return json(res, 200, { ok: true, ...result });
+    }
     if (sub[0] === 'logs' && method === 'GET') {
         const tail = Number.parseInt(url.searchParams.get('tail') ?? '50', 10);
         const logs = await new LogWriter(join(store.dir, 'logs')).recent(Number.isFinite(tail) ? tail : 50);
@@ -181,13 +200,18 @@ async function route(req, res, store, sessionAuthorized = false) {
             if (!provider || !key)
                 throw new Error('unknown provider or key');
             const secret = store.vault.get(key.vaultRef);
-            const model = store.config.routes.find((item) => item.provider === provider.id)?.model;
-            if (!secret || !model)
+            const requestedModel = url.searchParams.get('model');
+            const route = requestedModel
+                ? findRoute(store.config, requestedModel)
+                : store.config.routes.find((item) => item.provider === provider.id);
+            if (!secret || !route || route.provider !== provider.id)
                 throw new Error('a key and route model are required for probing');
+            const model = routeUpstreamModel(route);
             const path = provider.protocol === 'anthropic' ? '/v1/messages' : '/v1/chat/completions';
             const headers = upstreamHeaders(provider.protocol, secret, true);
             const body = provider.protocol === 'anthropic' ? { model, max_tokens: 1, messages: [{ role: 'user', content: 'ping' }] } : { model, max_tokens: 1, messages: [{ role: 'user', content: 'ping' }], stream: false };
             const response = await fetch(providerUrl(provider.baseUrl, path), { method: 'POST', headers: headers, body: JSON.stringify(body), signal: AbortSignal.timeout(30_000) });
+            await response.arrayBuffer();
             if (response.ok)
                 await store.mutate(() => enableKey(store, provider.id, key.id));
             return json(res, response.ok ? 200 : 502, { ok: response.ok, status: response.status });
@@ -198,15 +222,24 @@ async function route(req, res, store, sessionAuthorized = false) {
             const body = await readJsonBody(req);
             if (!body.model || !body.provider)
                 throw new Error('model and provider are required');
-            await store.mutate(() => addRoute(store, body.model, body.provider));
+            if (body.upstreamModel !== undefined && (typeof body.upstreamModel !== 'string' || !body.upstreamModel.trim()))
+                throw new Error('upstreamModel must be a non-empty string');
+            await store.mutate(() => addRoute(store, body.model, body.provider, body.upstreamModel));
             return json(res, 200, { ok: true });
         }
         if (sub.length === 2 && method === 'PUT') {
             const body = await readJsonBody(req);
-            if (body.provider !== undefined)
-                await store.mutate(() => updateRoute(store, decodeURIComponent(sub[1]), body.provider));
+            if (body.provider !== undefined && typeof body.provider !== 'string')
+                throw new Error('provider must be a string');
+            if (body.upstreamModel !== undefined && body.upstreamModel !== null && (typeof body.upstreamModel !== 'string' || !body.upstreamModel.trim()))
+                throw new Error('upstreamModel must be a non-empty string or null');
+            if (body.enabled !== undefined && typeof body.enabled !== 'boolean')
+                throw new Error('enabled must be a boolean');
+            const model = decodeURIComponent(sub[1]);
+            if (body.provider !== undefined || body.upstreamModel !== undefined)
+                await store.mutate(() => updateRoute(store, model, { provider: body.provider, upstreamModel: body.upstreamModel }));
             if (body.enabled !== undefined)
-                await store.mutate(() => setRouteEnabled(store, decodeURIComponent(sub[1]), body.enabled));
+                await store.mutate(() => setRouteEnabled(store, model, body.enabled));
             return json(res, 200, { ok: true });
         }
         if (sub.length === 2 && (sub[1] === 'enable' || sub[1] === 'disable') && method === 'POST') {

package/dist/cli.js

@@ -688,28 +688,38 @@ try {
         case 'route': {
             const action = positionals[0];
             if (action === 'add') {
-                const [model, providerId] = [positionals[1], positionals[2]];
+                const [model, providerId, upstreamModel] = [positionals[1], positionals[2], positionals[3]];
                 if (!model || !providerId) {
-                    console.error('usage: khat route add <model> <provider>');
+                    console.error('usage: khat route add <model> <provider> [upstream-model]');
                     process.exitCode = 1;
                     break;
                 }
-                await adminRequest('/_keys/routes', { method: 'POST', body: JSON.stringify({ model, provider: providerId }) });
-                console.log(`route added: ${model} -> ${providerId}`);
+                await adminRequest('/_keys/routes', { method: 'POST', body: JSON.stringify({ model, provider: providerId, ...(upstreamModel ? { upstreamModel } : {}) }) });
+                console.log(`route added: ${model}${upstreamModel ? ` -> ${upstreamModel}` : ''} -> ${providerId}`);
             }
             else if (action === 'list') {
                 const store = await openInitializedStore();
                 if (!store.config.routes.length)
                     console.log('(no routes)');
                 for (const route of store.config.routes)
-                    console.log(`${route.model} -> ${route.provider}`);
+                    console.log(`${route.model}${route.upstreamModel ? ` -> ${route.upstreamModel}` : ''} -> ${route.provider}`);
             }
             else if (action === 'update') {
-                const [model, providerId] = [positionals[1], positionals[2]];
-                if (!model || !providerId)
-                    throw new Error('usage: khat route update <model> <provider>');
-                await adminRequest(`/_keys/routes/${encodeURIComponent(model)}`, { method: 'PUT', body: JSON.stringify({ provider: providerId }) });
-                console.log(`route updated: ${model} -> ${providerId}`);
+                const [model, providerId, upstreamModel] = [positionals[1], positionals[2], positionals[3]];
+                const clearUpstream = flags['clear-upstream'] === true;
+                if (!model)
+                    throw new Error('usage: khat route update <model> [provider] [upstream-model] [--clear-upstream]');
+                if (!providerId && !clearUpstream)
+                    throw new Error('usage: khat route update <model> [provider] [upstream-model] [--clear-upstream]');
+                const body = {};
+                if (providerId)
+                    body.provider = providerId;
+                if (clearUpstream)
+                    body.upstreamModel = null;
+                else if (upstreamModel)
+                    body.upstreamModel = upstreamModel;
+                await adminRequest(`/_keys/routes/${encodeURIComponent(model)}`, { method: 'PUT', body: JSON.stringify(body) });
+                console.log(`route updated: ${model}${clearUpstream ? '' : (upstreamModel ? ` -> ${upstreamModel}` : '')} -> ${providerId ?? '(unchanged)'}`);
             }
             else if (action === 'remove') {
                 const model = positionals[1];

package/dist/config.js

@@ -35,7 +35,8 @@ export function providerUrl(baseUrl, path) {
     const base = new URL(baseUrl);
     const prefix = base.pathname.replace(/\/+$/, '');
     const suffix = path.startsWith('/') ? path : `/${path}`;
-    base.pathname = `${prefix}${suffix}` || '/';
+    const overlap = prefix.endsWith('/v1') && (suffix === '/v1' || suffix.startsWith('/v1/')) ? '/v1'.length : 0;
+    base.pathname = `${prefix}${suffix.slice(overlap)}` || '/';
     return base;
 }
 export function validateConfig(config) {
@@ -78,6 +79,8 @@ export function validateConfig(config) {
     for (const route of config.routes) {
         if (!route.model || !route.provider)
             throw new Error('Invalid route: model and provider are required');
+        if (route.upstreamModel !== undefined && (typeof route.upstreamModel !== 'string' || !route.upstreamModel.trim()))
+            throw new Error(`Invalid route ${route.model}: upstreamModel must be a non-empty string`);
         if (route.enabled !== undefined && typeof route.enabled !== 'boolean')
             throw new Error(`Invalid route ${route.model}: enabled must be boolean`);
         if (!config.providers.some((item) => item.id === route.provider))

package/dist/portable-vault.js

@@ -1,7 +1,7 @@
 import { createCipheriv, createDecipheriv, pbkdf2Sync, randomBytes } from 'node:crypto';
 import { access, mkdir, readFile, rename, rm } from 'node:fs/promises';
 import { join } from 'node:path';
-import { saveJsonAtomic, validateConfig } from './config.js';
+import { saveJsonAtomic, validateConfig, defaultConfig } from './config.js';
 import { Vault } from './vault.js';
 const FORMAT = 'khat-vault-export';
 const VERSION = 1;
@@ -144,3 +144,24 @@ export async function importPortable(path, targetDir, protector, password, force
         await rm(stage, { recursive: true, force: true });
     }
 }
+/** Apply a decrypted export payload to a live store: replaces secrets, config and per-key state in place, so references held by the running server stay valid. */
+export async function applyImport(store, payload) {
+    validatePayload(payload);
+    const config = payload.config ?? structuredClone(defaultConfig);
+    // bind/port describe the socket the daemon is already listening on; the import must not claim a different one.
+    const listen = { bind: store.config.bind, port: store.config.port };
+    Object.assign(store.config, config, listen);
+    for (const ref of Object.keys(store.vault.secrets))
+        store.vault.delete(ref);
+    for (const [ref, value] of Object.entries(payload.secrets))
+        store.vault.set(ref, value);
+    for (const key of Object.keys(store.states))
+        delete store.states[key];
+    for (const key of Object.keys(store.counters))
+        delete store.counters[key];
+    // Vault first: the daemon's config watcher fires on config.json and then resolves secrets from the vault.
+    await store.vault.save();
+    await store.saveConfig();
+    await store.saveState();
+    return { secrets: Object.keys(payload.secrets).length, providers: config.providers.length, routes: config.routes.length };
+}

package/dist/router.js

@@ -1,11 +1,15 @@
 export function findRoute(config, model) {
+    // Exact model ids take precedence over provider/model shorthand.
+    const exact = config.routes.find((route) => route.model === model);
+    if (exact)
+        return exact;
     const slash = model.indexOf('/');
     if (slash > 0) {
         const providerId = model.slice(0, slash);
         const routeModel = model.slice(slash + 1);
         return config.routes.find((route) => route.provider === providerId && route.model === routeModel);
     }
-    return config.routes.find((route) => route.model === model);
+    return undefined;
 }
 export function resolveProvider(config, model) {
     const route = findRoute(config, model);
@@ -13,6 +17,9 @@ export function resolveProvider(config, model) {
         return undefined;
     return config.providers.find((item) => item.id === route.provider);
 }
+export function routeUpstreamModel(route) {
+    return route.upstreamModel ?? route.model;
+}
 export function isRouteDisabled(config, model) {
     return findRoute(config, model)?.enabled === false;
 }

package/dist/server.js

@@ -3,7 +3,7 @@ import { watch } from 'node:fs';
 import { readJsonFile, saveJsonAtomic, validateConfig, providerUrl, defaultTimeouts } from './config.js';
 import { LogWriter } from './logger.js';
 import { join, basename } from 'node:path';
-import { resolveProvider, isRouteDisabled } from './router.js';
+import { findRoute, routeUpstreamModel, resolveProvider, isRouteDisabled } from './router.js';
 import { WeightedSelector } from './selector.js';
 import { handleAdmin } from './admin.js';
 import { ACCESS_TOKEN_REF } from './vault.js';
@@ -101,6 +101,7 @@ export function createKhatServer(options) {
             }
             if (!parsed.model || typeof parsed.model !== 'string')
                 return json(res, 400, { error: { message: 'model is required' } });
+            const route = findRoute(options.config, parsed.model);
             const provider = resolveProvider(options.config, parsed.model);
             if (!provider) {
                 if (isRouteDisabled(options.config, parsed.model))
@@ -109,6 +110,7 @@ export function createKhatServer(options) {
             }
             if (provider.protocol !== protocol)
                 return json(res, 400, { error: { message: `Model ${parsed.model} resolves to a ${provider.protocol} provider, but ${req.url} speaks ${protocol}` } });
+            const upstreamBody = JSON.stringify({ ...parsed, model: routeUpstreamModel(route) });
             const tried = new Set();
             while (true) {
                 const key = selector.select(provider.id, provider.keys.filter((item) => !tried.has(item.id)), states);
@@ -124,7 +126,7 @@ export function createKhatServer(options) {
                 const headerTimer = setTimeout(() => upstreamAbort(abort, 'upstream response header timeout'), timeouts().headerMs);
                 let upstream;
                 try {
-                    upstream = await fetch(providerUrl(provider.baseUrl, req.url), { method: 'POST', headers: upstreamHeaders(protocol, secret, req.headers.accept), body: new Uint8Array(body), signal: abort.signal });
+                    upstream = await fetch(providerUrl(provider.baseUrl, req.url), { method: 'POST', headers: upstreamHeaders(protocol, secret, req.headers.accept), body: upstreamBody, signal: abort.signal });
                 }
                 catch (error) {
                     if (error?.upstreamTimeout)

package/dist/store.js

@@ -227,12 +227,17 @@ export async function enableKey(store, providerId, keyId) {
     delete store.states[`${providerId}/${keyId}`];
     await store.saveState();
 }
-export async function addRoute(store, model, providerId) {
+function normalizeUpstreamModel(upstreamModel) {
+    const normalized = upstreamModel?.trim();
+    return normalized || undefined;
+}
+export async function addRoute(store, model, providerId, upstreamModel) {
     findProvider(store, providerId);
     const existing = store.config.routes.find((route) => route.model === model);
     if (existing)
         throw new Error(`route already exists: ${model} -> ${existing.provider}`);
-    store.config.routes.push({ model, provider: providerId });
+    const normalizedUpstreamModel = normalizeUpstreamModel(upstreamModel);
+    store.config.routes.push({ model, provider: providerId, ...(normalizedUpstreamModel && normalizedUpstreamModel !== model ? { upstreamModel: normalizedUpstreamModel } : {}) });
     try {
         await persistConfig(store);
     }
@@ -241,18 +246,31 @@ export async function addRoute(store, model, providerId) {
         throw error;
     }
 }
-export async function updateRoute(store, model, providerId) {
-    findProvider(store, providerId);
+export async function updateRoute(store, model, input) {
+    if (input.provider !== undefined)
+        findProvider(store, input.provider);
     const route = store.config.routes.find((item) => item.model === model);
     if (!route)
         throw new Error(`unknown route: ${model}`);
-    const previous = route.provider;
-    route.provider = providerId;
+    const previous = { provider: route.provider, upstreamModel: route.upstreamModel };
+    if (input.provider !== undefined)
+        route.provider = input.provider;
+    if (input.upstreamModel !== undefined) {
+        const normalizedUpstreamModel = normalizeUpstreamModel(input.upstreamModel);
+        if (normalizedUpstreamModel && normalizedUpstreamModel !== route.model)
+            route.upstreamModel = normalizedUpstreamModel;
+        else
+            delete route.upstreamModel;
+    }
     try {
         await persistConfig(store);
     }
     catch (error) {
-        route.provider = previous;
+        route.provider = previous.provider;
+        if (previous.upstreamModel === undefined)
+            delete route.upstreamModel;
+        else
+            route.upstreamModel = previous.upstreamModel;
         throw error;
     }
 }

package/dist/tui-client.js

@@ -60,11 +60,11 @@ export class AdminClient {
     async probeKey(providerId, keyId) {
         return this.request(`/_keys/providers/${encodeURIComponent(providerId)}/keys/${encodeURIComponent(keyId)}/probe`, { method: 'POST' });
     }
-    async createRoute(model, provider) {
-        await this.request('/_keys/routes', { method: 'POST', body: { model, provider } });
+    async createRoute(model, provider, upstreamModel) {
+        await this.request('/_keys/routes', { method: 'POST', body: { model, provider, ...(upstreamModel ? { upstreamModel } : {}) } });
     }
-    async updateRoute(model, provider) {
-        await this.request(`/_keys/routes/${encodeURIComponent(model)}`, { method: 'PUT', body: { provider } });
+    async updateRoute(model, provider, upstreamModel) {
+        await this.request(`/_keys/routes/${encodeURIComponent(model)}`, { method: 'PUT', body: { ...(provider ? { provider } : {}), ...(upstreamModel !== undefined ? { upstreamModel } : {}) } });
     }
     async enableRoute(model) { await this.request(`/_keys/routes/enable?model=${encodeURIComponent(model)}`, { method: 'POST' }); }
     async disableRoute(model) { await this.request(`/_keys/routes/disable?model=${encodeURIComponent(model)}`, { method: 'POST' }); }

package/dist/tui.js

@@ -47,7 +47,7 @@ function RoutesBody({ status, cursor, height }) {
     return _jsx(Box, { flexDirection: "column", children: routes.length === 0 ? _jsx(Text, { dimColor: true, children: "\u6682\u65E0\u8DEF\u7531 \u00B7 \u7528 khat route add \u6DFB\u52A0" }) : _jsxs(_Fragment, { children: [view.above > 0 && _jsx(Edge, { text: `  ↑ ${view.above} more` }), view.items.map((index) => {
                     const route = routes[index];
                     const selected = index === cursor;
-                    return (_jsx(Text, { color: selected ? 'yellow' : undefined, children: `${selected ? '›' : ' '} ${cell(route.model, 32)}→ ${route.provider}` }, route.model));
+                    return (_jsx(Text, { color: selected ? 'yellow' : undefined, children: `${selected ? '›' : ' '} ${cell(route.model, 32)}${route.upstreamModel ? ` → ${route.upstreamModel}` : ''} → ${route.provider}` }, route.model));
                 }), view.below > 0 && _jsx(Edge, { text: `  ↓ ${view.below} more` })] }) });
 }
 function LogsBody({ logs, filter, cursor, detailOpen, height }) {

package/dist/web-ui.js

@@ -123,6 +123,10 @@ tbody tr:hover td{background:var(--surface-2)}
 <main class="container">
 <p id="error" class="alert alert-error"></p>
 <p id="poolWarn" class="alert alert-warn"></p>
+<section class="card">
+<div class="card-head"><div><h2 class="card-title" data-i18n="cardImport">导入加密备份</h2><p class="card-sub" data-i18n="cardImportSub">选择 khat export 导出的 .khat 文件并输入导出密码；导入会替换当前的 Provider、Route 与密钥配置。</p></div></div>
+<form id="importForm" class="toolbar" autocomplete="off"><input id="importFile" type="file" accept=".khat,.json,application/json" required data-i18n-aria="importFileAria" aria-label="选择导出文件"><input id="importPassword" type="password" placeholder="导出密码" data-i18n-ph="phImportPassword" autocomplete="new-password" required><button class="btn btn-primary" data-i18n="btnImport">导入</button></form>
+</section>
 <div class="stats">
 <div class="stat"><div class="stat-label" data-i18n="statProviders">Provider 数量</div><div class="stat-value" id="statProviders">—</div><div class="stat-sub" data-i18n="statProvidersSub">已配置的服务商</div></div>
 <div class="stat"><div class="stat-label" data-i18n="statKeys">Key 可用率</div><div class="stat-value" id="statKeys">—</div><div class="stat-sub" id="statKeysSub">—</div></div>
@@ -138,8 +142,8 @@ tbody tr:hover td{background:var(--surface-2)}
 </section>
 <section class="card">
 <div class="card-head"><div><h2 class="card-title" data-i18n="cardRoutes">Routes</h2><p class="card-sub" data-i18n="cardRoutesSub">模型到 Provider 的转发映射规则。</p></div></div>
-<form id="routeForm" class="toolbar" autocomplete="off"><select name="provider" required></select><div class="ms" id="routeModelsMs"><button type="button" class="ms-toggle ms-empty" aria-haspopup="listbox" aria-expanded="false">请先获取模型</button><div class="ms-panel" hidden><input class="ms-search" type="search" placeholder="搜索 model…" data-i18n-ph="msPlaceholder" autocomplete="off"><label class="ms-all"><input type="checkbox" class="ms-all-cb"><span data-i18n="msSelectAll">全选</span></label><div class="ms-list" role="listbox"></div></div></div><button type="button" id="routeModels" class="btn btn-secondary" data-i18n="btnLoadModels">获取模型</button><button class="btn btn-primary" data-i18n="btnAddRoute">批量添加 Route</button></form>
-<div class="table-wrap"><table><thead><tr><th data-i18n="thModel">Model</th><th data-i18n="thProvider">Provider</th><th data-i18n="thStatus">Status</th><th></th></tr></thead><tbody id="routes"></tbody></table></div>
+<form id="routeForm" class="toolbar" autocomplete="off"><select name="provider"></select><button type="button" id="clearRouteProvider" class="btn btn-secondary" data-i18n="btnClearProvider">显示全部 Provider</button><div class="ms" id="routeModelsMs"><button type="button" class="ms-toggle ms-empty" aria-haspopup="listbox" aria-expanded="false">请先获取模型</button><div class="ms-panel" hidden><input class="ms-search" type="search" placeholder="搜索 model…" data-i18n-ph="msPlaceholder" autocomplete="off"><label class="ms-all"><input type="checkbox" class="ms-all-cb"><span data-i18n="msSelectAll">全选</span></label><div class="ms-list" role="listbox"></div></div></div><button type="button" id="routeModels" class="btn btn-secondary" data-i18n="btnLoadModels">获取模型</button><button class="btn btn-primary" data-i18n="btnAddRoute">批量添加 Route</button></form>
+<div class="table-wrap"><table><thead><tr><th data-i18n="thModel">Model</th><th>Upstream Model</th><th data-i18n="thProvider">Provider</th><th data-i18n="thStatus">Status</th><th></th></tr></thead><tbody id="routes"></tbody></table></div>
 </section>
 <section class="card">
 <div class="card-head"><div><h2 class="card-title" data-i18n="cardTraffic">请求成功 / 失败趋势</h2><p class="card-sub" data-i18n="cardTrafficSub">将最近拉取的日志按时间分桶聚合（最多 30 桶），悬停柱体可查看详情。</p></div><span class="legend"><span><i class="swatch ok"></i><span data-i18n="legendOk">成功</span></span><span><i class="swatch bad"></i><span data-i18n="legendFail">失败</span></span></span></div>
@@ -155,15 +159,15 @@ tbody tr:hover td{background:var(--surface-2)}
 const $=s=>document.querySelector(s), error=$('#error');
 const NS='http://www.w3.org/2000/svg';
 const pad2=n=>String(n).padStart(2,'0');
-const state={status:null,logs:[],logTail:'100',keyKeyword:'',keyStatus:'all',logKeyword:'',logStatus:'all',routeModels:[],routeSelected:new Set(),routeFilter:'',routeOpen:false};
+const state={status:null,logs:[],logTail:'100',keyKeyword:'',keyStatus:'all',logKeyword:'',logStatus:'all',routeModels:[],routeSelected:new Set(),routeFilter:'',routeOpen:false,routeProvider:''};
 const I18N={
- zh:{title:'khat 密钥管理',toggleTheme:'切换深色 / 浅色模式',toggleLang:'切换语言',keyFilterAria:'筛选 Key',statusFilterAria:'状态筛选',resultFilterAria:'结果筛选',logCountAria:'日志条数',autoRefresh:'每 30 秒自动刷新',refresh:'刷新',statProviders:'Provider 数量',statProvidersSub:'已配置的服务商',statKeys:'Key 可用率',statReq:'近期请求成功率',statReqSub:'按最近一次拉取的日志统计',statTokens:'近期 Tokens 用量',statTokensSub:'输入 / 输出 合计',cardProviders:'Provider / Key 管理',cardProvidersSub:'维护服务商、密钥池与轮询权重；下方筛选均在本地完成，不会请求服务端。',phProviderId:'provider id',phName:'名称',phBaseUrl:'https://api.example.com',btnAddProvider:'添加 Provider',phKeyId:'key id',weightTitle:'轮询权重：该 key 在 Provider 内多个 key 间被选中的相对占比，默认 1',phKeyValue:'API key 明文（加密存入密钥库）',btnAddKey:'添加 Key',phSearchKey:'搜索 provider 名称 / baseUrl / key id / 错误原因…',allStatus:'全部状态',onlyAvail:'仅可用',onlyUnavail:'仅不可用',cardRoutes:'Routes',cardRoutesSub:'模型到 Provider 的转发映射规则。',phModel:'model',btnAddRoute:'批量添加 Route',btnLoadModels:'获取模型',msEmpty:'请先获取模型',msLoading:'加载中…',msPlaceholder:'搜索 model…',msSelectAll:'全选',msSelected:'已选 {n} / {total}',msNoMatch:'无匹配模型',msNeedProvider:'请先选择 Provider',thModel:'Model',thProvider:'Provider',cardTraffic:'请求成功 / 失败趋势',cardTrafficSub:'将最近拉取的日志按时间分桶聚合（最多 30 桶），悬停柱体可查看详情。',legendOk:'成功',legendFail:'失败',chartEmpty:'暂无请求记录',cardLogs:'Logs',cardLogsSub:'最近的转发日志；关键字与结果类型为本地即时筛选，修改“条数”才会重新拉取。',phFilterLog:'按 model / key / provider / status 筛选…',allResult:'全部结果',onlyOk:'仅成功',onlyFail:'仅失败',logTail100:'最近 100 条',logTail300:'最近 300 条',logTail1000:'最近 1000 条',thTime:'Time',thStatus:'Status',thDuration:'Duration',thTokensInOut:'Tokens in/out',thKey:'Key',thWeight:'Weight',thRequests:'Requests',thFailed:'Failed',thErrReason:'错误原因',thActions:'操作',avail:'可用',unavail:'不可用',disabled:'已停用',noKeysMatch:'没有符合筛选条件的 key',noKeysYet:'该 Provider 尚未添加 key，可在上方表单中添加',keyMatchInfo:'匹配 {k} / {t} 个 key · 显示 {p} 个 Provider',noProviderMatch:'没有匹配的 Provider 或 Key，试试调整关键字或状态筛选。',noRoutes:'暂无路由配置',noLogs:'暂无请求日志',noLogMatch:'没有匹配的日志，试试调整筛选条件。',poolWarn:'Provider {p} 没有可用的 Key，请恢复或探活后再重试。',btnDisable:'停用',btnRecover:'恢复',btnProbe:'探活',btnDelete:'删除',confirmDelKey:'删除 key {p}/{k}？',saved:'已保存',errOpenViaUi:'请通过 khat ui 打开此页面',errTicket:'票据无效或已过期',err401:'401 未授权（key 无效或被撤销）',err402:'402 余额不足',err429:'429 限速',errHttp:'HTTP {h} 错误',errOccurredAt:'发生于',trafficTip:'{t}：成功 {ok} 次 · 失败 {bad} 次',showLogs:'显示 {n} / {t} 条',statKeysSubTpl:'可用 {a} 个 · 共 {t} 个',statReqSubTpl:'成功 {ok} 次 · 失败 {fail} 次',keyCountTpl:'{n} 个 key',trafficAria:'请求成功 / 失败趋势'},
- en:{title:'khat Key Manager',toggleTheme:'Toggle dark / light theme',toggleLang:'Switch language',keyFilterAria:'Filter keys',statusFilterAria:'Filter by status',resultFilterAria:'Filter by result',logCountAria:'Log count',autoRefresh:'Auto-refresh every 30s',refresh:'Refresh',statProviders:'Providers',statProvidersSub:'Configured services',statKeys:'Key availability',statReq:'Recent success rate',statReqSub:'From last fetched logs',statTokens:'Recent tokens',statTokensSub:'Input / Output total',cardProviders:'Provider / Key Management',cardProvidersSub:'Manage providers, key pools and weights; filtering is local only.',phProviderId:'provider id',phName:'Name',phBaseUrl:'https://api.example.com',btnAddProvider:'Add Provider',phKeyId:'key id',weightTitle:'Polling weight: relative share among keys in this provider, default 1',phKeyValue:'API key plaintext (stored encrypted)',btnAddKey:'Add Key',phSearchKey:'Search provider / baseUrl / key id / error…',allStatus:'All status',onlyAvail:'Available only',onlyUnavail:'Unavailable only',cardRoutes:'Routes',cardRoutesSub:'Model-to-Provider forwarding rules.',phModel:'model',btnAddRoute:'Batch add Routes',btnLoadModels:'Load models',msEmpty:'Load models first',msLoading:'Loading…',msPlaceholder:'Search model…',msSelectAll:'Select all',msSelected:'{n} / {total} selected',msNoMatch:'No matching models',msNeedProvider:'Select a provider first',thModel:'Model',thProvider:'Provider',cardTraffic:'Request success / failure trend',cardTrafficSub:'Aggregates recent logs into time buckets (max 30). Hover bars for detail.',legendOk:'Success',legendFail:'Failure',chartEmpty:'No request records',cardLogs:'Logs',cardLogsSub:'Recent forwarding logs; keyword & result filtering is local; changing count re-fetches.',phFilterLog:'Filter by model / key / provider / status…',allResult:'All results',onlyOk:'Success only',onlyFail:'Failure only',logTail100:'Last 100',logTail300:'Last 300',logTail1000:'Last 1000',thTime:'Time',thStatus:'Status',thDuration:'Duration',thTokensInOut:'Tokens in/out',thKey:'Key',thWeight:'Weight',thRequests:'Requests',thFailed:'Failed',thErrReason:'Error reason',thActions:'Actions',avail:'Available',unavail:'Unavailable',disabled:'Disabled',noKeysMatch:'No keys match the filters',noKeysYet:'No keys yet for this provider; add via the form above',keyMatchInfo:'{k} / {t} keys matched · {p} providers shown',noProviderMatch:'No matching provider or key; adjust filters.',noRoutes:'No routes configured',noLogs:'No request logs',noLogMatch:'No matching logs; adjust filters.',poolWarn:'Provider {p} has no available keys. Recover or probe a key before retrying.',btnDisable:'Disable',btnRecover:'Enable',btnProbe:'Probe',btnDelete:'Delete',confirmDelKey:'Delete key {p}/{k}?',saved:'Saved',errOpenViaUi:'Please open this page via khat ui',errTicket:'Ticket invalid or expired',err401:'401 Unauthorized (key invalid or revoked)',err402:'402 Insufficient balance',err429:'429 Rate limited',errHttp:'HTTP {h} error',errOccurredAt:'at',trafficTip:'{t}: {ok} ok · {bad} failed',showLogs:'Showing {n} / {t}',statKeysSubTpl:'{a} available · {t} total',statReqSubTpl:'{ok} ok · {fail} failed',keyCountTpl:'{n} keys',trafficAria:'request success/failure trend'}
+ zh:{title:'khat 密钥管理',toggleTheme:'切换深色 / 浅色模式',toggleLang:'切换语言',keyFilterAria:'筛选 Key',statusFilterAria:'状态筛选',resultFilterAria:'结果筛选',logCountAria:'日志条数',autoRefresh:'每 30 秒自动刷新',refresh:'刷新',statProviders:'Provider 数量',statProvidersSub:'已配置的服务商',statKeys:'Key 可用率',statReq:'近期请求成功率',statReqSub:'按最近一次拉取的日志统计',statTokens:'近期 Tokens 用量',statTokensSub:'输入 / 输出 合计',cardProviders:'Provider / Key 管理',cardProvidersSub:'维护服务商、密钥池与轮询权重；下方筛选均在本地完成，不会请求服务端。',phProviderId:'provider id',phName:'名称',phBaseUrl:'https://api.example.com',btnAddProvider:'添加 Provider',phKeyId:'key id',weightTitle:'轮询权重：该 key 在 Provider 内多个 key 间被选中的相对占比，默认 1',phKeyValue:'API key 明文（加密存入密钥库）',btnAddKey:'添加 Key',phSearchKey:'搜索 provider 名称 / baseUrl / key id / 错误原因…',allProviders:'全部 Provider',btnClearProvider:'显示全部 Provider',allStatus:'全部状态',onlyAvail:'仅可用',onlyUnavail:'仅不可用',cardRoutes:'Routes',cardRoutesSub:'模型到 Provider 的转发映射规则。',phModel:'model',btnAddRoute:'批量添加 Route',btnLoadModels:'获取模型',msEmpty:'请先获取模型',msLoading:'加载中…',msPlaceholder:'搜索 model…',msSelectAll:'全选',msSelected:'已选 {n} / {total}',msNoMatch:'无匹配模型',msNeedProvider:'请先选择 Provider',thModel:'Model',thProvider:'Provider',cardTraffic:'请求成功 / 失败趋势',cardTrafficSub:'将最近拉取的日志按时间分桶聚合（最多 30 桶），悬停柱体可查看详情。',legendOk:'成功',legendFail:'失败',chartEmpty:'暂无请求记录',cardLogs:'Logs',cardLogsSub:'最近的转发日志；关键字与结果类型为本地即时筛选，修改“条数”才会重新拉取。',phFilterLog:'按 model / key / provider / status 筛选…',allResult:'全部结果',onlyOk:'仅成功',onlyFail:'仅失败',logTail100:'最近 100 条',logTail300:'最近 300 条',logTail1000:'最近 1000 条',thTime:'Time',thStatus:'Status',thDuration:'Duration',thTokensInOut:'Tokens in/out',thKey:'Key',thWeight:'Weight',thRequests:'Requests',thFailed:'Failed',thErrReason:'错误原因',thActions:'操作',avail:'可用',unavail:'不可用',disabled:'已停用',noKeysMatch:'没有符合筛选条件的 key',noKeysYet:'该 Provider 尚未添加 key，可在上方表单中添加',keyMatchInfo:'匹配 {k} / {t} 个 key · 显示 {p} 个 Provider',noProviderMatch:'没有匹配的 Provider 或 Key，试试调整关键字或状态筛选。',noRoutes:'暂无路由配置',cardImport:'导入加密备份',cardImportSub:'选择 khat export 导出的 .khat 文件并输入导出密码；导入会替换当前的 Provider、Route 与密钥配置。',phImportPassword:'导出密码',btnImport:'导入',confirmImport:'导入将替换当前的 Provider、Route 与密钥配置，且无法撤销。确定继续？',importFileAria:'选择导出文件',imported:'导入成功：{s} 个密钥 · {p} 个 Provider · {r} 条 Route',errChooseFile:'请先选择导出文件',noLogs:'暂无请求日志',noLogMatch:'没有匹配的日志，试试调整筛选条件。',poolWarn:'Provider {p} 没有可用的 Key，请恢复或探活后再重试。',btnDisable:'停用',btnRecover:'恢复',btnProbe:'探活',btnDelete:'删除',confirmDelKey:'删除 key {p}/{k}？',saved:'已保存',errOpenViaUi:'请通过 khat ui 打开此页面',errTicket:'票据无效或已过期',err401:'401 未授权（key 无效或被撤销）',err402:'402 余额不足',err429:'429 限速',errHttp:'HTTP {h} 错误',errOccurredAt:'发生于',trafficTip:'{t}：成功 {ok} 次 · 失败 {bad} 次',showLogs:'显示 {n} / {t} 条',statKeysSubTpl:'可用 {a} 个 · 共 {t} 个',statReqSubTpl:'成功 {ok} 次 · 失败 {fail} 次',keyCountTpl:'{n} 个 key',trafficAria:'请求成功 / 失败趋势'},
+ en:{title:'khat Key Manager',toggleTheme:'Toggle dark / light theme',toggleLang:'Switch language',keyFilterAria:'Filter keys',statusFilterAria:'Filter by status',resultFilterAria:'Filter by result',logCountAria:'Log count',autoRefresh:'Auto-refresh every 30s',refresh:'Refresh',statProviders:'Providers',statProvidersSub:'Configured services',statKeys:'Key availability',statReq:'Recent success rate',statReqSub:'From last fetched logs',statTokens:'Recent tokens',statTokensSub:'Input / Output total',cardProviders:'Provider / Key Management',cardProvidersSub:'Manage providers, key pools and weights; filtering is local only.',phProviderId:'provider id',phName:'Name',phBaseUrl:'https://api.example.com',btnAddProvider:'Add Provider',phKeyId:'key id',weightTitle:'Polling weight: relative share among keys in this provider, default 1',phKeyValue:'API key plaintext (stored encrypted)',btnAddKey:'Add Key',phSearchKey:'Search provider / baseUrl / key id / error…',allProviders:'All providers',btnClearProvider:'Show all providers',allStatus:'All status',onlyAvail:'Available only',onlyUnavail:'Unavailable only',cardRoutes:'Routes',cardRoutesSub:'Model-to-Provider forwarding rules.',phModel:'model',btnAddRoute:'Batch add Routes',btnLoadModels:'Load models',msEmpty:'Load models first',msLoading:'Loading…',msPlaceholder:'Search model…',msSelectAll:'Select all',msSelected:'{n} / {total} selected',msNoMatch:'No matching models',msNeedProvider:'Select a provider first',thModel:'Model',thProvider:'Provider',cardTraffic:'Request success / failure trend',cardTrafficSub:'Aggregates recent logs into time buckets (max 30). Hover bars for detail.',legendOk:'Success',legendFail:'Failure',chartEmpty:'No request records',cardLogs:'Logs',cardLogsSub:'Recent forwarding logs; keyword & result filtering is local; changing count re-fetches.',phFilterLog:'Filter by model / key / provider / status…',allResult:'All results',onlyOk:'Success only',onlyFail:'Failure only',logTail100:'Last 100',logTail300:'Last 300',logTail1000:'Last 1000',thTime:'Time',thStatus:'Status',thDuration:'Duration',thTokensInOut:'Tokens in/out',thKey:'Key',thWeight:'Weight',thRequests:'Requests',thFailed:'Failed',thErrReason:'Error reason',thActions:'Actions',avail:'Available',unavail:'Unavailable',disabled:'Disabled',noKeysMatch:'No keys match the filters',noKeysYet:'No keys yet for this provider; add via the form above',keyMatchInfo:'{k} / {t} keys matched · {p} providers shown',noProviderMatch:'No matching provider or key; adjust filters.',noRoutes:'No routes configured',cardImport:'Import encrypted backup',cardImportSub:'Pick a .khat file produced by khat export and enter its password; importing replaces the current providers, routes and keys.',phImportPassword:'Export password',btnImport:'Import',confirmImport:'Importing replaces the current providers, routes and keys. This cannot be undone. Continue?',importFileAria:'Choose export file',imported:'Imported: {s} secrets · {p} providers · {r} routes',errChooseFile:'Choose an export file first',noLogs:'No request logs',noLogMatch:'No matching logs; adjust filters.',poolWarn:'Provider {p} has no available keys. Recover or probe a key before retrying.',btnDisable:'Disable',btnRecover:'Enable',btnProbe:'Probe',btnDelete:'Delete',confirmDelKey:'Delete key {p}/{k}?',saved:'Saved',errOpenViaUi:'Please open this page via khat ui',errTicket:'Ticket invalid or expired',err401:'401 Unauthorized (key invalid or revoked)',err402:'402 Insufficient balance',err429:'429 Rate limited',errHttp:'HTTP {h} error',errOccurredAt:'at',trafficTip:'{t}: {ok} ok · {bad} failed',showLogs:'Showing {n} / {t}',statKeysSubTpl:'{a} available · {t} total',statReqSubTpl:'{ok} ok · {fail} failed',keyCountTpl:'{n} keys',trafficAria:'request success/failure trend'}
 };
 let lang=(()=>{try{return localStorage.getItem('khatLang')==='en'?'en':'zh'}catch(e){return 'zh'}})();
 function t(key){return (I18N[lang]&&I18N[lang][key])||I18N.zh[key]||key}
 function tf(key,vars){let s=t(key);if(vars)for(const k in vars)s=s.split('{'+k+'}').join(String(vars[k]));return s}
-function applyLang(l){lang=l;try{localStorage.setItem('khatLang',l)}catch(e){}document.documentElement.lang=l==='en'?'en':'zh-CN';document.querySelectorAll('[data-i18n]').forEach(el=>{el.textContent=t(el.dataset.i18n)});document.querySelectorAll('[data-i18n-ph]').forEach(el=>{el.placeholder=t(el.dataset.i18nPh)});document.querySelectorAll('[data-i18n-title]').forEach(el=>{el.title=t(el.dataset.i18nTitle)});document.querySelectorAll('[data-i18n-aria]').forEach(el=>{el.setAttribute('aria-label',t(el.dataset.i18nAria))});renderConnection();renderStats();renderProviders();renderRoutes();renderRouteModels();renderLogs();drawTraffic();const b=$('#langToggle');if(b)b.textContent=l==='zh'?'EN':'中'}
+function applyLang(l){lang=l;try{localStorage.setItem('khatLang',l)}catch(e){}document.documentElement.lang=l==='en'?'en':'zh-CN';document.querySelectorAll('[data-i18n]').forEach(el=>{el.textContent=t(el.dataset.i18n)});document.querySelectorAll('[data-i18n-ph]').forEach(el=>{el.placeholder=t(el.dataset.i18nPh)});document.querySelectorAll('[data-i18n-title]').forEach(el=>{el.title=t(el.dataset.i18nTitle)});document.querySelectorAll('[data-i18n-aria]').forEach(el=>{el.setAttribute('aria-label',t(el.dataset.i18nAria))});const allProvider=$('#routeForm [name=provider] option[value=""]');if(allProvider)allProvider.textContent=t('allProviders');renderConnection();renderStats();renderProviders();renderRoutes();renderRouteModels();renderLogs();drawTraffic();const b=$('#langToggle');if(b)b.textContent=l==='zh'?'EN':'中'}
 function toast(msg,type,ms){type=type||'error';ms=ms||3500;const c=$('#toasts');if(!c)return;const el=document.createElement('div');el.className='toast toast-'+type;el.textContent=msg;c.append(el);setTimeout(()=>{el.classList.add('fade');setTimeout(()=>el.remove(),300)},ms)}
 async function api(path,init){init=init||{};const r=await fetch(path,{...init,headers:{authorization:'Bearer '+sessionStorage.khatSession,'content-type':'application/json',...(init.headers||{})}});const body=await r.json().catch(()=>({}));if(!r.ok)throw Error(body.error?.message||r.statusText);return body}
 async function exchange(){const ticket=new URLSearchParams(location.search).get('ticket');if(sessionStorage.khatSession){if(ticket)window.history.replaceState({},'', '/_keys/ui');return}if(ticket){const r=await fetch('/_keys/ticket/session',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({ticket})});if(!r.ok)throw Error(t('errTicket'));sessionStorage.khatSession=(await r.json()).session;window.history.replaceState({},'', '/_keys/ui')}if(!sessionStorage.khatSession)throw Error(t('errOpenViaUi'))}
@@ -175,7 +179,7 @@ function errText(k){const http=k.lastError&&k.lastError.http;if(http===undefined
 function btn(label,className,onclick){const b=document.createElement('button');b.type='button';b.className=className;b.textContent=label;b.onclick=onclick;return b}
 function run(fn){return async arg=>{try{await fn(arg)}catch(e){error.textContent=e.message;toast(e.message)}}}
 function statusCell(ok,text,title){const td=document.createElement('td');const sp=document.createElement('span');sp.className='pill pill-status '+(ok?'pill-ok':'pill-bad');sp.textContent=text;if(title)sp.title=title;td.append(sp);return td}
-function syncProviderSelect(sel,providers){const ids=providers.map(p=>p.id).join(',');if(sel.dataset.ids===ids)return;sel.dataset.ids=ids;const prev=sel.value;sel.replaceChildren(...providers.map(p=>{const o=document.createElement('option');o.value=p.id;o.textContent=p.id;return o}));if(ids.split(',').includes(prev))sel.value=prev}
+function syncProviderSelect(sel,providers,allowEmpty){const ids=providers.map(p=>p.id).join(',');if(sel.dataset.ids===ids&&(!allowEmpty||sel.dataset.allowEmpty==='1'))return;sel.dataset.ids=ids;if(allowEmpty)sel.dataset.allowEmpty='1';const prev=sel.value;const options=providers.map(p=>{const o=document.createElement('option');o.value=p.id;o.textContent=p.id;return o});if(allowEmpty){const o=document.createElement('option');o.value='';o.textContent=t('allProviders');options.unshift(o)}sel.replaceChildren(...options);if(ids.split(',').includes(prev)||allowEmpty&&!prev)sel.value=prev}
 function renderConnection(){if(!state.status)return;const c=$('#connection');c.replaceChildren(Object.assign(document.createElement('i'),{className:'dot'}),document.createTextNode(' '+state.status.listen))}
 function renderStats(){const st=state.status;if(!st)return;const keys=[];for(const p of st.providers)for(const k of p.keys)keys.push(k);const avail=keys.filter(k=>k.enabled!==false&&k.status==='available').length;$('#statProviders').textContent=String(st.providers.length);$('#statKeys').textContent=keys.length?Math.round(avail*100/keys.length)+'%':'—';$('#statKeysSub').textContent=keys.length?tf('statKeysSubTpl',{a:avail,t:keys.length}):'—';let ok=0,fail=0,tIn=0,tOut=0;for(const x of state.logs){if(Number(x.status)<400)ok++;else fail++;tIn+=x.tokensIn||0;tOut+=x.tokensOut||0}const total=ok+fail;$('#statReq').textContent=total?Math.round(ok*100/total)+'%':'—';$('#statReqSub').textContent=tf('statReqSubTpl',{ok:ok,fail:fail});$('#statTokens').textContent=total?fmtNum(tIn)+' / '+fmtNum(tOut):'—'}
 function providerHead(p,keys){const head=document.createElement('div');head.className='provider-head';const nm=document.createElement('h3');nm.className='provider-name';nm.textContent=p.name||p.id;nm.title=p.id;head.append(nm);const pp=document.createElement('span');pp.className='pill protocol-pill';pp.textContent=p.protocol;head.append(pp);const url=document.createElement('span');url.className='provider-url';url.textContent=p.baseUrl||'';url.title=p.baseUrl||'';head.append(url);const cnt=document.createElement('span');cnt.className='provider-count';cnt.textContent=tf('keyCountTpl',{n:keys.length+(keys.length!==p.keys.length?(' / '+p.keys.length):'')});head.append(cnt);return head}
@@ -231,11 +235,11 @@ function renderProviders(){
 }
 function renderRoutes(){
  const tb=$('#routes');tb.replaceChildren();
- const rs=state.status?state.status.routes:[];
- if(!rs.length){const er=document.createElement('tr');er.className='empty-row';const ed=document.createElement('td');ed.colSpan=4;ed.textContent=t('noRoutes');er.append(ed);tb.append(er);return}
- for(const rt of rs){
-  const tr=document.createElement('tr');
-  tr.append(cell(rt.model,'mono-cell'),cell(rt.provider),statusCell(rt.enabled!==false,rt.enabled!==false?t('avail'):t('unavail')));
+ const rs=(state.status?state.status.routes:[]).filter(rt=>!state.routeProvider||rt.provider===state.routeProvider);
+  if(!rs.length){const er=document.createElement('tr');er.className='empty-row';const ed=document.createElement('td');ed.colSpan=5;ed.textContent=t('noRoutes');er.append(ed);tb.append(er);return}
+  for(const rt of rs){
+   const tr=document.createElement('tr');
+   tr.append(cell(rt.model,'mono-cell'),cell(rt.upstreamModel||rt.model,'mono-cell'),cell(rt.provider),statusCell(rt.enabled!==false,rt.enabled!==false?t('avail'):t('unavail')));
   const d=document.createElement('td');
   const toggle=rt.enabled!==false?'disable':'enable';
   d.append(btn(rt.enabled!==false?t('btnDisable'):t('btnRecover'),'btn btn-secondary btn-sm',run(async()=>{await api('/_keys/routes/'+toggle+'?model='+encodeURIComponent(rt.model),{method:'POST'});toast(t('saved'),'ok');load()})));
@@ -352,7 +356,10 @@ async function load(){
   state.status=statusResultValue.value;
   renderConnection();
   syncProviderSelect($('#keyForm [name=provider]'),state.status.providers);
-  syncProviderSelect($('#routeForm [name=provider]'),state.status.providers);
+  syncProviderSelect($('#routeForm [name=provider]'),state.status.providers,true);
+  const routeProvider=$('#routeForm [name=provider]');
+  if(state.routeProvider&&state.status.providers.some(p=>p.id===state.routeProvider))routeProvider.value=state.routeProvider;
+  else {state.routeProvider='';routeProvider.value='';}
   renderProviders();
   renderRoutes();
  }else{error.textContent=statusResultValue.reason?.message||String(statusResultValue.reason);toast(error.textContent)}
@@ -372,7 +379,8 @@ $('#langToggle').onclick=()=>applyLang(lang==='zh'?'en':'zh');
 applyTheme(document.documentElement.getAttribute('data-theme')||'light');
 applyLang(lang);
 $('#routeModels').onclick=()=>loadModels();
-$('#routeForm [name=provider]').onchange=clearRouteModels;
+$('#routeForm [name=provider]').onchange=e=>{state.routeProvider=e.target.value;clearRouteModels();renderRoutes()};
+$('#clearRouteProvider').onclick=()=>{state.routeProvider='';$('#routeForm [name=provider]').value='';clearRouteModels();renderRoutes()};
 $('#routeModelsMs .ms-toggle').onclick=e=>{e.preventDefault();if(!state.routeModels.length)return;openRouteModels(!state.routeOpen)};
 $('#routeModelsMs .ms-search').oninput=e=>{state.routeFilter=e.target.value;buildRouteModelList();syncRouteModelHeader()};
 $('#routeModelsMs .ms-all-cb').onchange=e=>{const kw=state.routeFilter.trim().toLowerCase();const items=state.routeModels.filter(m=>!kw||m.toLowerCase().includes(kw));if(e.target.checked)items.forEach(m=>state.routeSelected.add(m));else items.forEach(m=>state.routeSelected.delete(m));buildRouteModelList();syncRouteModelHeader()};
@@ -380,7 +388,8 @@ document.addEventListener('click',e=>{if(!state.routeOpen)return;const ms=$('#ro
 document.addEventListener('keydown',e=>{if(e.key==='Escape'&&state.routeOpen){openRouteModels(false);const tg=$('#routeModelsMs .ms-toggle');if(tg)tg.focus()}});
 $('#providerForm').onsubmit=run(async e=>{e.preventDefault();const x=Object.fromEntries(new FormData(e.target));await api('/_keys/providers',{method:'POST',body:JSON.stringify(x)});e.target.reset();toast(t('saved'),'ok');load()});
 $('#keyForm').onsubmit=run(async e=>{e.preventDefault();const x=Object.fromEntries(new FormData(e.target));await api('/_keys/providers/'+encodeURIComponent(x.provider)+'/keys',{method:'POST',body:JSON.stringify({id:x.id,value:x.value,weight:Number(x.weight)||1})});e.target.reset();toast(t('saved'),'ok');load()});
-$('#routeForm').onsubmit=run(async e=>{e.preventDefault();const provider=e.target.provider.value;const models=[...state.routeSelected];if(!models.length){toast(t('msEmpty'));return}for(const model of models)await api('/_keys/routes',{method:'POST',body:JSON.stringify({model,provider})});clearRouteModels();e.target.reset();toast(t('saved'),'ok');load()});
+$('#routeForm').onsubmit=run(async e=>{e.preventDefault();const provider=e.target.provider.value;const models=[...state.routeSelected];if(!provider){toast(t('msNeedProvider'));return}if(!models.length){toast(t('msEmpty'));return}for(const model of models)await api('/_keys/routes',{method:'POST',body:JSON.stringify({model,provider})});clearRouteModels();e.target.reset();toast(t('saved'),'ok');load()});
+$('#importForm').onsubmit=run(async e=>{e.preventDefault();const file=$('#importFile').files[0];if(!file){toast(t('errChooseFile'));return}if(!confirm(t('confirmImport')))return;const content=await file.text();const r=await api('/_keys/import',{method:'POST',body:JSON.stringify({content,password:$('#importPassword').value})});e.target.reset();toast(tf('imported',{s:r.secrets,p:r.providers,r:r.routes}),'ok',6000);load()});
 $('#keySearch').oninput=e=>{state.keyKeyword=e.target.value;renderProviders()};
 $('#keyStatus').onchange=e=>{state.keyStatus=e.target.value;renderProviders()};
 $('#logFilter').oninput=e=>{state.logKeyword=e.target.value;renderLogs()};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alilis/k-hat",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },