@te-river/opencode-alibabatokenplan 0.1.0

package/src/server/index.ts

@@ -0,0 +1,476 @@
+// server 插件入口 —— 移植 bailian-discount-panel.ts 全部行为（三级回退/缓存迁移/
+// 端口粘滞/toast/工具/面板），新增：Qoder 快照并入、status.json 原子写、
+// tokenplan_discounts 工具（旧名委托）、config hook 注入 tokenplan 命令、webpanel 默认关。
+//
+// 模块形态（03-D1 / quota dist/index.js 实证）：default export { id, server }，
+// 避免宿主 getLegacyPlugins 兜底路径把命名导出当第二个插件重复装载。
+
+import * as http from "node:http";
+import * as cp from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import {
+  buildStatus, writeStatusAtomic, loadConfig, cacheFilePath,
+  portFilePath, legacyCacheFile, legacyPortFile,
+  type AtpConfig, type CatalogInput, type QuotaInput,
+} from "../core/status";
+import { parseGroups, bailianSnapshotModels, BAILIAN_SNAPSHOT_AT, CREDITS_PER_YUAN } from "../core/bailian-snapshot";
+import { QODER_SNAPSHOT_DATE, QODER_INSALE_FACTORS } from "../core/qoder-snapshot";
+import { windowState, fmtCountdown } from "../core/rules";
+import { fmtFactor, strikethrough, showStrike } from "../core/text";
+import { isCrossVerified } from "../core/merge";
+import type { ModelEntry, OfferRule, StatusFile } from "../core/types";
+
+const PKG_ID = "@te-river/opencode-alibabatokenplan";
+
+// ─────────────────────────── 数据层状态（旧文件语义不变） ───────────────────────────
+
+const state: CatalogInput = { source: "snapshot", fetchedAt: BAILIAN_SNAPSHOT_AT, models: bailianSnapshotModels() };
+const quotaState: QuotaInput = { available: false, hint: "实时额度需要控制台授权：执行一次 bl auth login --console --console-site domestic 后自动启用" };
+
+// 源1：百炼公开模型目录（匿名 POST，零登录）
+const ZELDA_API = "zeldaHttp.dashscopeModel./zelda/api/v1/modelCenter/listFoundationModels";
+const GATEWAY_URL =
+  "https://bailian-cs.console.aliyun.com/cli/api.json?action=BroadScopeAspnGateway&product=sfm_bailian&api=" +
+  encodeURIComponent(ZELDA_API);
+
+async function fetchCatalogPage(pageNo: number, pageSize: number): Promise<{ total: number; list: any[] }> {
+  const params = JSON.stringify({
+    Api: ZELDA_API,
+    V: "1.0",
+    Data: {
+      input: {
+        pageNo, pageSize, name: "", providers: [], inferenceProviders: [], features: [],
+        group: false, capabilities: [], contextWindows: [],
+        queryPermissions: false, queryApplyStatus: false, queryActivationStatus: false,
+        queryPrice: true, queryQpmInfo: false, supports: { inference: true },
+      },
+      cornerstoneParam: { protocol: "V2", console: "ONE_CONSOLE", productCode: "p_efm", switchUserType: 3, consoleSite: "BAILIAN_ALIYUN" },
+    },
+  });
+  const res = await fetch(GATEWAY_URL, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: "params=" + encodeURIComponent(params) + "&region=cn-beijing",
+    signal: AbortSignal.timeout(20_000),
+  });
+  if (!res.ok) throw new Error(`catalog HTTP ${res.status}`);
+  const j: any = await res.json();
+  const inner = j?.data?.DataV2?.data?.data;
+  if (!inner || !Array.isArray(inner.list)) throw new Error("catalog 响应结构异常: " + JSON.stringify(j).slice(0, 160));
+  return { total: Number(inner.total) || inner.list.length, list: inner.list };
+}
+
+async function fetchCatalogLive(): Promise<ModelEntry[]> {
+  const all: any[] = [];
+  const pageSize = 50;
+  let total = Infinity;
+  for (let page = 1; page <= 15 && all.length < total; page++) {
+    const r = await fetchCatalogPage(page, pageSize);
+    total = r.total;
+    if (!r.list.length) break;
+    all.push(...r.list);
+  }
+  if (!all.length) throw new Error("catalog 返回为空");
+  return parseGroups(all);
+}
+
+// 源2：本机 bl CLI
+/** 组装 bl 子进程调用参数（独立导出便于单测断言 argv 形态，见 test.mjs M1）。
+ * 关键：command 恒为 "bl"、args 传数组——POSIX 下绝不能把整串当 command（shell:false 时
+ * execvp 会把 "bl model list" 整串当可执行名查找 → 永久 ENOENT，cli 源静默失效）。
+ * win32 下 bl 是 .cmd shim 需经 shell，args 里的参数由 Node 逐个加引号安全拼接。 */
+export function blSpawnPlan(args: string[]): { command: string; args: string[]; options: cp.SpawnOptions } {
+  return { command: "bl", args: [...args], options: { shell: process.platform === "win32", env: { ...process.env, NO_COLOR: "1" } } };
+}
+
+function runBl(args: string[], timeoutMs = 30_000): Promise<{ code: number; stdout: string; stderr: string }> {
+  return new Promise((resolve) => {
+    const plan = blSpawnPlan(args);
+    const child = cp.spawn(plan.command, plan.args, plan.options);
+    let stdout = "", stderr = "";
+    let done = false;
+    const timer = setTimeout(() => {
+      if (!done) { done = true; child.kill(); resolve({ code: -1, stdout, stderr: stderr + "\ntimeout" }); }
+    }, timeoutMs);
+    child.stdout!.on("data", (d: Buffer) => (stdout += d.toString()));
+    child.stderr!.on("data", (d: Buffer) => (stderr += d.toString()));
+    child.on("error", (e: Error) => { if (!done) { done = true; clearTimeout(timer); resolve({ code: -1, stdout, stderr: String(e) }); } });
+    child.on("close", (code: number | null) => { if (!done) { done = true; clearTimeout(timer); resolve({ code: code ?? -1, stdout, stderr }); } });
+  });
+}
+
+async function fetchCatalogCli(): Promise<ModelEntry[]> {
+  const r = await runBl(["model", "list", "--page-size", "50", "--page", "1", "--output", "json"]);
+  if (r.code !== 0) throw new Error("bl model list 退出码 " + r.code + " " + r.stderr.slice(0, 120));
+  const j = JSON.parse(r.stdout);
+  const groups = Array.isArray(j) ? j : (j.items || []);
+  const models = parseGroups(groups);
+  if (!models.length) throw new Error("bl model list 无数据");
+  return models;
+}
+
+// 缓存：新命名空间 + 旧路径一次性迁移（03-D7）
+function loadCache(): ModelEntry[] | null {
+  try {
+    const j = JSON.parse(fs.readFileSync(cacheFilePath(), "utf8"));
+    if (Array.isArray(j.models) && j.models.length) return j.models;
+  } catch {}
+  try {
+    const j = JSON.parse(fs.readFileSync(legacyCacheFile(), "utf8"));
+    if (Array.isArray(j.models) && j.models.length) return j.models; // 调用方 saveCache 落到新目录=迁移
+  } catch {}
+  return null;
+}
+
+function saveCache(models: ModelEntry[]) {
+  try {
+    fs.mkdirSync(path.dirname(cacheFilePath()), { recursive: true });
+    fs.writeFileSync(cacheFilePath(), JSON.stringify({ savedAt: new Date().toISOString(), models }, null, 2));
+  } catch {}
+}
+
+// 端口粘滞：避免重启后面板地址漂移（.port 迁新目录，旧文件仅作候选）
+function lastPort(): number {
+  for (const f of [portFilePath(), legacyPortFile()]) {
+    try {
+      const v = Number(fs.readFileSync(f, "utf8").trim());
+      if (Number.isInteger(v) && v >= 1024 && v <= 65535) return v;
+    } catch {}
+  }
+  return 0;
+}
+function savePort(port: number) {
+  try {
+    fs.mkdirSync(path.dirname(portFilePath()), { recursive: true });
+    fs.writeFileSync(portFilePath(), String(port));
+  } catch {}
+}
+
+let refreshing = false;
+async function refreshCatalog(cfg: AtpConfig, force = false): Promise<void> {
+  if (refreshing) return;
+  refreshing = true;
+  try {
+    let models: ModelEntry[] | null = null;
+    let source: CatalogInput["source"] = "snapshot";
+    let err = "";
+    try { models = await fetchCatalogLive(); source = "live"; } catch (e: any) {
+      err = "live: " + String(e?.message || e);
+      try { models = await fetchCatalogCli(); source = "cli"; } catch (e2: any) {
+        err += " | cli: " + String(e2?.message || e2);
+      }
+    }
+    if (models && models.length) {
+      state.source = source;
+      state.fetchedAt = new Date().toISOString();
+      state.models = models;
+      state.error = err || undefined;
+      saveCache(models);
+    } else {
+      // D1：双败（live+cli 均未产出）时降级原因必须落进 state.error → status.sources.error，
+      // 不再只在 force 分支写——静默的「源失效」会让面板/工具显示成"正常快照态"。
+      state.error = err || state.error;
+      if (force) {
+        const cached = loadCache();
+        if (cached) { state.models = cached; state.fetchedAt = BAILIAN_SNAPSHOT_AT + "（缓存）"; }
+      }
+    }
+    publishStatus();
+    if (cfg.toast) void maybeToast(); // 刷新后推进 toast 状态机（保留旧行为）
+  } finally {
+    refreshing = false;
+  }
+}
+
+async function refreshQuota(): Promise<void> {
+  quotaState.checkedAt = new Date().toISOString();
+  const r = await runBl(["usage", "token-plan", "--output", "json"], 45_000);
+  const out = (r.stdout || "").trim();
+  if (r.code === 0 && out.startsWith("{")) {
+    try {
+      quotaState.data = JSON.parse(out);
+      quotaState.available = true;
+      quotaState.hint = undefined;
+      publishStatus();
+      return;
+    } catch {}
+  }
+  quotaState.data = undefined;
+  quotaState.available = false;
+  const s = r.stderr + " " + r.stdout;
+  quotaState.hint = /console|token|login|auth/i.test(s)
+    ? "实时额度需要控制台授权：执行一次 bl auth login --console --console-site domestic 后自动启用"
+    : "无法获取实时额度（bl CLI 不可用或查询失败：" + (r.stderr || r.stdout || "").slice(0, 120) + "）";
+  publishStatus();
+}
+
+function currentStatus(): StatusFile {
+  return buildStatus(state, new Date(), { ...quotaState });
+}
+
+/** 每次状态变化原子写 status.json（TUI/他器消费的唯一运行时契约）。 */
+function publishStatus(): void {
+  try { writeStatusAtomic(currentStatus()); } catch {}
+}
+
+// ─────────────────────────── toast（边界翻转提醒，双源同窗只弹一次） ───────────────────────────
+
+let client: any = null;
+// 去重键=窗口（非 rule.id）：qoder 与百炼两套单位同窗合并后仍是一个物理窗口 → 恰 2 次/日
+const lastActive = new Map<string, boolean>();
+
+async function maybeToast(): Promise<void> {
+  const st = currentStatus();
+  for (const w of st.windows) {
+    const ws = windowState(w, new Date());
+    const prev = lastActive.get(w.id);
+    // m6：判翻转后先落键再 await showToast——并发/重入（tick 定时器与面板刷新同时触发）时，
+    // 第二个调用读到的 prev 已是新态 → 不会二次弹同窗 toast（旧顺序留有 await 窗口期竞态）。
+    lastActive.set(w.id, ws.active);
+    if (cfgNow?.toast !== false && prev !== undefined && prev !== ws.active && client) {
+      const models = w.models.map((m) => `${m.model}${m.effective ? "→" + m.effective : ""}`);
+      const msg = ws.active
+        ? `${w.label}已开始：${models.join("、")}（至 ${w.end}，北京时间）`
+        : `${w.label}已结束：${models.join("、")}（下次 ${w.start} 开始）`;
+      try {
+        await client.tui?.showToast?.({ body: { title: "Token Plan 优惠提醒", message: msg, variant: ws.active ? "success" : "info", duration: 8000 } });
+      } catch {}
+    }
+  }
+}
+
+// ─────────────────────────── 可选 web 面板（默认关，03-D5） ───────────────────────────
+
+function renderHtml(): string {
+  // 优先读随包 panel.html：改样式只需保存文件并刷新浏览器
+  try {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    for (const p of [path.join(here, "..", "src", "server", "panel.html"), path.join(here, "panel.html")]) {
+      if (fs.existsSync(p)) return fs.readFileSync(p, "utf8");
+    }
+  } catch {}
+  // 兜底：最小内置渲染（真实样式以随包 panel.html 为准）
+  return `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><title>Token Plan 优惠雷达</title></head><body><pre id="p">加载中…</pre><script>async function l(){var r=await fetch("/api/status");document.getElementById("p").textContent=JSON.stringify(await r.json(),null,2)}l();setInterval(l,30000);</script></body></html>`;
+}
+
+let server: http.Server | null = null;
+const REFRESH_THROTTLE_MS = 5_000;
+let lastRefreshAt = 0; // /api/refresh 进程内节流戳（M2）
+
+/** M2 同源校验：Origin 缺省（同源 GET/curl 常不带）或 host 与本服务 Host 完全一致才放行；
+ * 请求带 Sec-Fetch-Site 时额外闸——必须 same-origin（浏览器发起的跨站请求会被标记拦截）。 */
+function isSameOrigin(req: http.IncomingMessage): boolean {
+  const origin = req.headers.origin;
+  if (origin !== undefined) {
+    let oh: string;
+    try { oh = new URL(String(origin)).host; } catch { return false; }
+    if (oh !== String(req.headers.host ?? "")) return false;
+  }
+  const sfs = req.headers["sec-fetch-site"];
+  if (sfs !== undefined && String(sfs).toLowerCase() !== "same-origin") return false;
+  return true;
+}
+
+function startPanel(port: number): Promise<string> {
+  return new Promise((resolve) => {
+    const handler = (req: http.IncomingMessage, res: http.ServerResponse) => {
+      const url = (req.url || "/").split("?")[0];
+      if (url === "/api/status") {
+        // M2：panel 与本服务同源，删除 CORS 通配头（不再允许任意站点跨源读状态）
+        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify(currentStatus()));
+        return;
+      }
+      if (url === "/api/refresh") {
+        if (!isSameOrigin(req)) {
+          res.writeHead(403, { "Content-Type": "text/plain; charset=utf-8" });
+          res.end("forbidden");
+          return;
+        }
+        const t0 = Date.now();
+        if (t0 - lastRefreshAt < REFRESH_THROTTLE_MS) {
+          res.writeHead(429, { "Retry-After": "5", "Content-Type": "text/plain; charset=utf-8" });
+          res.end("throttled");
+          return;
+        }
+        lastRefreshAt = t0;
+        refreshCatalog(cfgNow ?? loadConfig(), true)
+          .then(() => { res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8" }); res.end("ok"); })
+          .catch(() => { res.writeHead(500); res.end("refresh failed"); });
+        return;
+      }
+      res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+      res.end(renderHtml());
+    };
+    const candidates = [...new Set([lastPort(), port, ...Array.from({ length: 20 }, (_, i) => port + 1 + i)])].filter((p) => p >= 1024 && p <= 65535);
+    let idx = 0;
+    const tryListen = () => {
+      const p = candidates[idx];
+      const s = http.createServer(handler);
+      s.on("error", () => {
+        try { s.close(); } catch {} // m8：失败实例显式 close，不留悬挂句柄
+        if (++idx >= candidates.length) { resolve(""); return; }
+        tryListen();
+      });
+      // m8：只在 listen 成功回调内赋 server 句柄（旧代码把绑定失败的实例也写进 server，dispose 关错对象）
+      s.listen(p, "127.0.0.1", () => { server = s; savePort(p); resolve(`http://127.0.0.1:${p}`); });
+    };
+    tryListen();
+  });
+}
+
+// ─────────────────────────── 工具（新名实现 + 旧名委托） ───────────────────────────
+
+async function loadToolHelper(): Promise<any> {
+  try {
+    const m: any = await import("@opencode-ai/plugin");
+    if (m?.tool) return m.tool;
+  } catch {}
+  const chain: any = function () { return chain; };
+  chain.optional = () => chain;
+  chain.describe = () => chain;
+  const shim: any = (t: any) => t;
+  shim.schema = { string: () => chain, number: () => chain, boolean: () => chain };
+  return shim;
+}
+
+function unitLabel(r: OfferRule): string {
+  return r.unit === "credits-factor" ? "Credits 倍率" : "¥价格倍率";
+}
+
+function renderToolOutput(filter: string): string {
+  const st = currentStatus();
+  const lines: string[] = [];
+  const srcNote = st.sources.catalog === "bailian-live" ? "实时接口" : st.sources.catalog === "bailian-cli" ? "本机 CLI" : "快照";
+  lines.push(`数据源: ${srcNote}（更新于 ${state.fetchedAt}）+ Qoder 快照 ${QODER_SNAPSHOT_DATE}（静态，不调私有端点）；1 元 = ${CREDITS_PER_YUAN} Credits（计费示例换算，非官方汇率）；时区 Asia/Shanghai`);
+  for (const w of st.windows) {
+    const ws = windowState(w, new Date());
+    const cd = ws.active ? `${fmtCountdown(ws.minutesToNextBoundary)}后结束（${w.end}）` : `${fmtCountdown(ws.minutesToNextBoundary)}后开始（${w.start}）`;
+    for (const m of w.models) {
+      if (filter && m.model !== filter && !m.model.includes(filter)) continue;
+      const strike = showStrike(parseFloat(m.regular ?? ""), parseFloat(m.effective ?? ""));
+      lines.push(`• [${w.start}–${w.end}] ${m.model}: ${strike ? strikethrough(m.regular!) + " " : ""}${m.effective ?? ""} ${m.badge ?? ""}${isCrossVerified(m) ? "（双源印证）" : ""} → ${w.activeNow ? "优惠中，" : ""}${cd}`);
+    }
+  }
+  const flat = st.offers.filter((r) => r.kind === "flat-cut" && (!filter || r.models.some((x) => x === filter || x.includes(filter))));
+  if (flat.length) {
+    lines.push("限时优惠（两套单位不互算）：");
+    for (const r of flat.slice(0, 30)) {
+      const tags = [r.factor !== undefined ? `×${r.factor}` : "", r.batchStack !== undefined ? `Batch叠加×${r.batchStack}` : ""].filter(Boolean).join(" ");
+      lines.push(`• ${r.models.join(", ")}（${unitLabel(r)}）: ${tags}${r.note ? " — " + r.note : ""}`);
+    }
+  }
+  const tms = st.textModels.filter((m) => !filter || m.model.includes(filter));
+  for (const m of tms) {
+    lines.push(`• ${m.model}: 输入 ${m.input} / 缓存 ${m.cache} / 输出 ${m.output} Credits/百万tokens${m.bands ? `（${m.bands}）` : ""}${m.creditsFactor ? ` · Qoder 倍率 ${m.creditsFactor}` : ""}${m.badge ? `（${m.badge.label}，${m.badge.countdown}）` : ""}`);
+  }
+  const inSale = Object.entries(QODER_INSALE_FACTORS).filter(([k]) => !filter || k === filter);
+  if (inSale.length && !filter) lines.push("Qoder 在卖常规倍率（非优惠）：" + inSale.map(([k, v]) => `${k} ${fmtFactor(v.factor)}${v.note ? "(" + v.note + ")" : ""}`).join(" · "));
+  for (const n of st.notices) if (!n.expired || filter) lines.push(`• [${n.kind}] ${n.text}${n.expired ? "（已过期）" : ""} 来源:${n.source}`);
+  if (!st.quota.available) lines.push(`额度: ${st.quota.hint ?? "不可用"}`);
+  else lines.push(`额度: 实时可用（${st.quota.checkedAt}）`);
+  if (st.sources.error) lines.push(`数据源降级: ${st.sources.error}`);
+  lines.push("口径：消耗/Cost 单位 Credit；runtimeConfig 会变实际消耗；折扣以控制台账单为准。");
+  return lines.join("\n");
+}
+
+// ─────────────────────────── 插件入口 ───────────────────────────
+
+let cfgNow: AtpConfig | null = null;
+
+const plugin = async (input: any, options?: any) => {
+  client = input?.client ?? null;
+  const g = globalThis as any;
+  if (g.__atpServerStarted) return { event: async () => {}, dispose: () => {} };
+  g.__atpServerStarted = true;
+
+  // 配置：文件优先，宿主若传 tuple options 则叠加（D5：传了就赢，没传不输）
+  cfgNow = loadConfig();
+  try {
+    const extra = typeof options === "string" ? undefined : options;
+    if (extra && typeof extra === "object") {
+      const merged = JSON.parse(JSON.stringify(cfgNow));
+      for (const k of ["webpanel", "sidebar", "toast", "refresh"]) {
+        const v = (extra as any)[k];
+        if (v === undefined) continue;
+        // m7：toast 等布尔/标量键直接赋值——旧 Object.assign(bool, v) 静默失效/抛错
+        if (typeof v !== "object" || v === null) (merged as any)[k] = v;
+        else Object.assign((merged as any)[k] ?? {}, v);
+      }
+      cfgNow = merged;
+    }
+  } catch {}
+
+  const cfg: AtpConfig = cfgNow ?? loadConfig();
+  cfgNow = cfg;
+  const cached = loadCache();
+  if (cached) { state.models = cached; state.fetchedAt = BAILIAN_SNAPSHOT_AT + "（缓存）"; }
+  publishStatus(); // 先落盘一份（TUI 冷启动即有数据）
+  refreshCatalog(cfg);
+  refreshQuota().catch(() => {});
+
+  let panelUrl = "";
+  if (cfg.webpanel.enabled) {
+    panelUrl = await startPanel(cfg.webpanel.port);
+    console.log(`[alibabatokenplan] 面板已启动: ${panelUrl || "启动失败（端口耗尽）"}`);
+  }
+
+  const catalogTimer = setInterval(() => { refreshCatalog(cfg).catch(() => {}); }, cfg.refresh.catalogMin * 60_000);
+  const quotaTimer = setInterval(() => { refreshQuota().catch(() => {}); }, cfg.refresh.quotaMin * 60_000);
+  const tickTimer = setInterval(() => { if (cfg.toast) maybeToast().catch(() => {}); publishStatus(); }, 60_000);
+  for (const t of [catalogTimer, quotaTimer, tickTimer]) t.unref?.();
+
+  const toolHelper = await loadToolHelper();
+  const S: any = toolHelper.schema;
+  const toolDef = (descPrefix: string) => toolHelper({
+    description:
+      descPrefix +
+      "查询百炼 Token Plan 当前优惠策略、优惠时段与开始/结束倒计时（含 Qoder 快照 2026-08-31 静态数据），以及各模型 Credits 消耗倍率。" +
+      "可选参数 model 过滤单个模型。无需登录即可使用。",
+    args: {
+      model: S.string().optional().describe("按模型名过滤，例如 qwen3.8-max"),
+    },
+    async execute(args: any) {
+      return { title: "Token Plan 优惠与倍率", output: renderToolOutput(args?.model ? String(args.model) : "") };
+    },
+  });
+
+  return {
+    event: async () => {},
+    // m8：宿主卸载 → 关面板 server + 清全部定时器，不留端口/句柄/后台刷新泄漏
+    dispose: () => {
+      for (const t of [catalogTimer, quotaTimer, tickTimer]) clearInterval(t);
+      try { server?.close(); } catch {}
+      server = null;
+    },
+    config: async (config: any) => {
+      // 兜底命令（03-D4）：无 opentui 层的宿主经此路径走 LLM，接受其 token 成本并注明
+      config.command = config.command ?? {};
+      config.command.tokenplan = {
+        description: "查询 Token Plan 优惠/倍率/倒计时（由 @te-river/opencode-alibabatokenplan 注入；本兜底路径经 LLM，会消耗 token）",
+        template: "调用 tokenplan_discounts 工具，把当前 Token Plan 优惠窗口、倒计时与各模型倍率原样整理给我，不要额外发挥。$ARGUMENTS",
+      };
+    },
+    tool: {
+      tokenplan_discounts: toolDef(""),
+      bailian_discounts: toolDef("(已并入 tokenplan_discounts) "),
+    },
+  };
+};
+
+export default { id: PKG_ID, server: plugin };
+// 命名导出仅为可测试性；宿主装载契约是 default 的 { id, server } 模块形态。
+export const AliBabaTokenPlanPlugin = plugin;
+/** test.mjs 零宿主回归锚点（M1 argv 形态 / M2 同源校验 / m6 toast 竞态序）。
+ * 只读/受控注入引用，不改变任何运行时行为。 */
+export const __testing = {
+  blSpawnPlan,
+  isSameOrigin,
+  maybeToast,
+  lastActive,
+  getStatus: currentStatus,
+  setClient: (c: any) => { client = c; },
+};

package/src/server/panel.html

@@ -0,0 +1,137 @@
+<!doctype html>
+<html lang="zh-CN"><head><meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Token Plan 优惠雷达</title>
+<style>
+  :root{
+    --bg0:#090b11;--bg1:#0f131c;--card:rgba(21,26,37,.66);--line:rgba(148,163,199,.10);
+    --tx:#e8ecf4;--dim:#7e8798;--faint:#565e70;
+    --ok:#34d399;--warn:#fbbf24;--hot:#f87171;--accent:#7aa2ff;
+    --mono:ui-monospace,"Cascadia Mono",Consolas,"SF Mono",monospace;
+  }
+  *{box-sizing:border-box}
+  html{scrollbar-gutter:stable}
+  body{
+    margin:0;padding:16px 14px 20px;min-height:100vh;color:var(--tx);
+    font:13px/1.5 "Segoe UI","Microsoft YaHei",system-ui,sans-serif;
+    background:radial-gradient(900px 420px at 85% -180px,rgba(99,102,241,.16),transparent 62%),
+               radial-gradient(700px 380px at -10% 8%,rgba(52,211,153,.07),transparent 55%),
+               linear-gradient(180deg,var(--bg0),var(--bg1));
+    background-attachment:fixed;
+  }
+  ::-webkit-scrollbar{width:8px}::-webkit-scrollbar-thumb{background:rgba(148,163,199,.16);border-radius:99px}
+  h1{font-size:15px;margin:0;font-weight:650;letter-spacing:.2px}
+  .sub{color:var(--dim);font-size:11px}
+  .dot{width:7px;height:7px;border-radius:99px;background:var(--warn);box-shadow:0 0 8px currentColor;display:inline-block}
+  .dot.ok{background:var(--ok)} .dot.warn{background:var(--warn)}
+  .pulse{animation:pulse 2.4s ease-in-out infinite}@keyframes pulse{50%{opacity:.35}}
+  header{display:flex;align-items:center;gap:8px;margin-bottom:12px}
+  header .grow{flex:1}
+  .pill{display:inline-flex;align-items:center;gap:5px;border:1px solid var(--line);border-radius:99px;padding:2px 9px;font-size:11px;color:var(--dim);background:rgba(255,255,255,.025);white-space:nowrap}
+  .pill b{color:var(--tx);font-weight:600}
+  .card{
+    position:relative;background:var(--card);border:1px solid var(--line);border-radius:14px;
+    padding:14px;margin-bottom:12px;backdrop-filter:blur(6px);overflow:hidden;
+  }
+  .card::before{content:"";position:absolute;inset:0 0 auto 0;height:1px;background:linear-gradient(90deg,transparent,rgba(255,255,255,.14),transparent)}
+  .hero{padding:16px}
+  .hero .top{display:flex;align-items:center;gap:8px;margin-bottom:10px}
+  .hero .name{font-size:14px;font-weight:650}
+  .factor{font-family:var(--mono);font-weight:700;color:var(--hot);font-size:13px;
+    border:1px solid rgba(248,113,113,.35);background:rgba(248,113,113,.08);border-radius:8px;padding:1px 7px}
+  .cd{display:flex;align-items:baseline;gap:9px;margin:2px 0 4px}
+  .cd .num{font-family:var(--mono);font-size:38px;font-weight:700;letter-spacing:1px;line-height:1;
+    font-variant-numeric:tabular-nums;color:var(--tx)}
+  .cd.on .num{color:var(--ok);text-shadow:0 0 22px rgba(52,211,153,.35)}
+  .cd.off .num{color:#c7cfdf}
+  .cd .lbl{font-size:12px;color:var(--dim);margin-left:4px}
+  .cd .unit{font-size:13px;color:var(--dim);margin:0 10px 0 3px;font-weight:500}
+  .bar{height:4px;border-radius:99px;background:rgba(148,163,199,.14);margin:12px 0 10px;overflow:hidden}
+  .bar i{display:block;height:100%;border-radius:99px;background:linear-gradient(90deg,rgba(52,211,153,.55),var(--ok));transition:width 1s linear}
+  .meta{display:flex;flex-wrap:wrap;gap:6px;align-items:center}
+  .chip{border:1px solid var(--line);border-radius:99px;padding:2.5px 9px;color:var(--tx);background:rgba(255,255,255,.03);font-family:var(--mono);font-size:10.5px}
+  .chip s{color:var(--faint);margin-right:4px}
+  .chip em{color:var(--hot);font-style:normal;font-weight:600}
+  h2{font-size:11px;margin:16px 2px 8px;color:var(--dim);font-weight:600;letter-spacing:.6px}
+  .kv{display:flex;justify-content:space-between;gap:10px;padding:6px 10px;border-radius:8px;font-size:12px}
+  .kv:hover{background:rgba(255,255,255,.03)}
+  .kv .k{color:var(--dim);font-family:var(--mono);font-size:11.5px}
+  .kv .v{font-family:var(--mono);font-variant-numeric:tabular-nums}
+  .kv .v .d{color:var(--hot)}
+  .hint{color:var(--warn);font-size:11.5px;margin:8px 10px 4px}
+  .glab{font-size:10.5px;color:var(--faint);letter-spacing:.5px;padding:8px 10px 2px}
+  .foot{color:var(--faint);font-size:10.5px;margin-top:12px;line-height:1.7}
+  .dimv{color:var(--faint)}
+  .srcq{color:var(--accent)}
+  a{color:var(--accent);text-decoration:none}a:hover{text-decoration:underline}
+</style></head><body>
+<header>
+  <span class="dot pulse" id="dot"></span>
+  <h1>Token Plan 优惠雷达</h1>
+  <span class="grow"></span>
+  <span class="pill" id="src"></span>
+</header>
+<div id="rules"></div>
+<h2 id="offerTitle">优惠明细</h2>
+<div class="card" style="padding:6px 4px"><div id="offers"></div></div>
+<h2>文本模型价目（Credits / 百万 tokens）</h2>
+<div class="card" style="padding:6px 4px"><div id="tms"></div></div>
+<div class="foot" id="foot"></div>
+<script>
+var base=null;
+function esc(s){return String(s).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;")}
+function shMin(){var d=new Date();var cn=new Date(d.getTime()+(d.getTimezoneOffset()+480)*60000);return cn.getHours()*60+cn.getMinutes()+cn.getSeconds()/60}
+function parseHm(s){var p=s.split(":");return (+p[0])*60+(+p[1]||0)}
+function winState(s,e){var m=shMin();var wraps=s>e;var total=wraps?e+1440-s:e-s;var active=wraps?(m>=s||m<e):(m>=s&&m<e);var toNext;
+ if(active){toNext=wraps?(m>=s?e+1440-m:e-m):(e-m)}else{toNext=(m<s?s-m:s+1440-m)}
+ return{active:active,toNext:Math.max(0,toNext),total:total,pct:active?Math.round(100*(total-toNext)/total):0}}
+function durParts(mins){var m=Math.round(mins);var h=Math.floor(m/60);m=m%60;return{h:h,m:m}}
+function srcName(s){return{"bailian-live":"实时接口","bailian-cli":"本机 CLI","bailian-snapshot":"快照","qoder-snapshot":"Qoder 快照"}[s]||s}
+async function load(){try{var r=await fetch("/api/status");base=await r.json();render()}catch(e){document.getElementById("foot").textContent="加载失败: "+e}}
+function render(){
+ if(!base)return;
+ var anyOn=base.windows.some(function(w){var s=winState(parseHm(w.start),parseHm(w.end));return s.active});
+ document.getElementById("dot").className="dot pulse "+(anyOn?"ok":"warn");
+ document.getElementById("src").innerHTML='<b>'+esc(srcName(base.sources.catalog))+'</b> + <span class="srcq">Qoder快照 '+esc(base.sources.qoderSnapshot)+'</span> · '+
+  new Date(base.updatedAt).toLocaleTimeString("zh-CN",{hour:"2-digit",minute:"2-digit",timeZone:"Asia/Shanghai"});
+ // ── 主卡：窗口 ──
+ var R=document.getElementById("rules");R.innerHTML="";
+ base.windows.forEach(function(w){
+  var s=winState(parseHm(w.start),parseHm(w.end));
+  var d=document.createElement("div");d.className="card hero";
+  var chips=w.models.map(function(m){
+    return '<span class="chip">'+esc(m.model)+(m.regular&&m.regular!==m.effective?' <s>'+esc(m.regular)+'</s>':'')+(m.effective?' <em>'+esc(m.effective)+'</em>':'')+'</span>';
+  }).join("");
+  d.innerHTML='<div class="top"><span class="dot '+(s.active?"ok":"warn")+' pulse"></span>'
+   +'<span class="name">'+esc(w.label)+'</span>'
+   +'<span class="grow" style="flex:1"></span><span class="sub">'+esc(w.start)+'–'+esc(w.end)+'（北京时间）</span></div>'
+   +'<div class="cd '+(s.active?"on":"off")+'"><span class="num">'+durParts(s.toNext).h+'</span><span class="unit">小时</span><span class="num">'+durParts(s.toNext).m+'</span><span class="unit">分</span>'
+   +'<span class="lbl">'+(s.active?"后结束 · 优惠进行中":"后开始")+'</span></div>'
+   +'<div class="bar"><i style="width:'+(s.active?s.pct:0)+'%"></i></div>'
+   +'<div class="meta">'+chips+'</div>';
+  R.appendChild(d);
+ });
+ // ── 优惠明细（两套单位各居其 facet） ──
+ var flat=base.offers.filter(function(r){return r.kind==="flat-cut"});
+ document.getElementById("offerTitle").textContent="限时优惠 · "+flat.length+" 项（Credits 倍率与 ¥ 价格倍率不互算）";
+ document.getElementById("offers").innerHTML=flat.length?flat.map(function(r){
+   var tags=(r.factor!==undefined?"×"+r.factor:"")+(r.batchStack!==undefined?" Batch叠加×"+r.batchStack:"");
+   return '<div class="kv"><span class="k">'+esc(r.models.join(", "))+'（'+esc(r.unit==="credits-factor"?"Qoder Credits":"百炼 ¥")+'）</span>'
+     +'<span class="v"><span class="d">'+esc(tags)+'</span> '+esc(r.label)+(r.origins.length>1?' <span class="srcq">[双源印证]</span>':"")+'</span></div>';
+ }).join(""):'<div class="dimv" style="padding:6px 10px;font-size:11.5px">当前没有限时优惠</div>';
+ // ── 文本模型 ──
+ document.getElementById("tms").innerHTML=base.textModels.map(function(m){
+   return '<div class="kv"><span class="k">'+esc(m.model)+(m.bands?'（'+esc(m.bands)+'）':"")+(m.creditsFactor?' · Qoder '+esc(m.creditsFactor):"")+'</span>'
+    +'<span class="v">输入 '+esc(m.input)+' / 缓存 '+esc(m.cache)+' / 输出 '+esc(m.output)
+    +(m.badge?' <span class="d">'+esc(m.badge.label)+' '+esc(m.badge.countdown)+"</span>":"")+'</span></div>';
+ }).join("");
+ // ── 页脚 ──
+ var notices=base.notices.map(function(n){return esc(n.text)+(n.expired?"（已过期）":"")+"　〔"+esc(n.source)+"〕"}).join("<br>");
+ document.getElementById("foot").innerHTML=
+  "1 元 = "+base.creditsPerYuan+" Credits（"+esc(base.creditsRateNote)+"）· 对话里可用 tokenplan_discounts 工具查询 · 折扣以控制台账单为准"
+  +(base.quota.available?"":"<br>"+esc(base.quota.hint||""))
+  +(notices?"<br>"+notices:"")
+  +(base.sources.error?"<br>数据源降级: "+esc(base.sources.error):"");
+}
+setInterval(load,30000);setInterval(render,1000);load();
+</script></body></html>