@wwkit/llmproxy 1.0.3 → 1.0.5

package/src/providers/deepseek-web/auth.js

@@ -0,0 +1,278 @@
+// providers/deepseek/auth.js — DeepSeek Web 浏览器登录（手动 + CDP 捕获）
+//
+// DeepSeek web 没有面向第三方的 OAuth 回调接口，session token 在内存中，
+// 以 Authorization: Bearer 头携带、cookie 里含 ds_session_id。
+//
+// 登录流程（手动，需手机验证码）：
+//   1. 用 Chrome（优先 @wwkit/cft）带 --remote-debugging-port 打开 chat.deepseek.com
+//   2. 用户在浏览器里手动完成登录（手机号 + 验证码）
+//   3. 通过 CDP Network 拦截，捕获首个携带 Authorization 的 /api/v0/* 请求
+//     —— 登录后页面会自动预计算 PoW（create_guest_challenge），无需用户发消息
+//   4. 凭证存入 ~/.config/llmproxy/.creds.json 的 providers.deepseek 子树
+//
+// TODO(limiting): 上游 x-hif-dliq / x-hif-leim 高频限流头暂未处理。
+
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { getXdgConfigDir } from "@wwkit/shared";
+import { status as cftStatus } from "@wwkit/cft";
+import { AuthProvider } from "../../core/auth.js";
+import { log, sleep } from "../../util.js";
+
+const CREDS_FILE = path.join(getXdgConfigDir("llmproxy"), ".creds.json");
+const LOGIN_URL = "https://chat.deepseek.com";
+// 捕获目标：/api/v0/ 下的任意请求都会携带 Authorization + Cookie
+const CAPTURE_REGEX = /chat\.deepseek\.com\/api\/v0\//;
+const CAPTURE_TIMEOUT_MS = 5 * 60 * 1000; // 5 分钟
+
+function getChromePath() {
+  try {
+    const info = cftStatus();
+    if (info?.chrome_path && fs.existsSync(info.chrome_path)) return info.chrome_path;
+  } catch {}
+  return null;
+}
+
+export default class DeepseekAuth extends AuthProvider {
+  constructor(opts) {
+    super(opts);
+    this._profileDir = path.join(
+      getXdgConfigDir("llmproxy"),
+      "chrome-profiles",
+      this.id.replace(/\//g, "-")
+    );
+  }
+
+  async getCredentials(opts = {}) {
+    const autoLogin = opts.autoLogin !== false;
+    if (this._cred && this._cred.expiresAt > Date.now()) {
+      return this._cred;
+    }
+    if (!this._cred) await this._loadFromFile();
+    if (this._cred) {
+      // 有缓存凭证直接返回；token 是否失效由 upstream 401 暴露
+      return this._cred;
+    }
+    if (!autoLogin) {
+      throw new Error(`auth:${this.id} 无凭证，请先执行 llmproxy login --provider ${this.id}`);
+    }
+    await this.login();
+    return this._cred;
+  }
+
+  async login() {
+    log(`[auth:${this.id}] 启动浏览器手动登录 DeepSeek...`);
+    const chromePath = getChromePath();
+    if (!chromePath) {
+      throw new Error("未找到 Chrome（可先执行 pnpm --filter cft install）");
+    }
+
+    const cdp = await this._launchChrome(chromePath);
+    try {
+      const cred = await this._captureCredentials(cdp);
+      this._cred = { ...cred, expiresAt: Date.now() + 7 * 24 * 3600 * 1000 };
+      await this._saveToFile();
+      log(`[auth:${this.id}] 登录成功，凭证已保存（token=${this._cred.token?.slice(0, 6)}...）`);
+    } finally {
+      try { cdp.close(); } catch {}
+    }
+  }
+
+  async _launchChrome(chromePath) {
+    fs.mkdirSync(this._profileDir, { recursive: true });
+    const port = 9300 + Math.floor(Math.random() * 200);
+    const child = spawn(
+      chromePath,
+      [
+        `--remote-debugging-port=${port}`,
+        `--user-data-dir=${this._profileDir}`,
+        "--no-first-run",
+        "--no-default-browser-check",
+        "--disable-background-networking",
+        "about:blank",
+      ],
+      { stdio: "ignore", detached: true }
+    );
+    child.unref();
+
+    // 等待 CDP 就绪
+    const versionUrl = `http://127.0.0.1:${port}/json/version`;
+    for (let i = 0; i < 60; i++) {
+      try {
+        const res = await fetch(versionUrl);
+        if (res.ok) break;
+      } catch {}
+      await sleep(200);
+      if (i === 59) throw new Error("Chrome CDP 启动超时");
+    }
+    this._chromePort = port;
+    log(`[auth:${this.id}] Chrome 已启动 (cdp=:${port})，请在浏览器中登录`);
+
+    const targets = await (await fetch(`http://127.0.0.1:${port}/json/list`)).json();
+    const page = targets.find((t) => t.type === "page");
+    if (!page) throw new Error("未找到 Chrome page target");
+
+    const ws = new WebSocket(page.webSocketDebuggerUrl);
+    await new Promise((resolve, reject) => {
+      ws.onopen = resolve;
+      ws.onerror = reject;
+    });
+    return new CdpClient(ws, port);
+  }
+
+  async _captureCredentials(cdp) {
+    await cdp.send("Network.enable");
+    await cdp.send("Page.enable");
+
+    // Chrome 将 Cookie 等头放在 requestWillBeSentExtraInfo 中（按 requestId 关联）。
+    // Authorization 在 requestWillBeSent 中携带。二者凑齐即捕获。
+    const urlByReqId = new Map();
+    const partial = new Map();
+    const capturedPromise = new Promise((resolve) => {
+      const tryResolve = (url, auth, cookie) => {
+        if (!url || !CAPTURE_REGEX.test(url) || !auth) return;
+        const cur = partial.get(url) || {};
+        const merged = { ...cur, auth, cookie: cookie || cur.cookie };
+        partial.set(url, merged);
+        if (merged.auth && merged.cookie) {
+          resolve({
+            token: String(merged.auth).replace(/^Bearer\s+/i, ""),
+            cookie: merged.cookie,
+            url,
+          });
+        }
+      };
+      cdp.on("Network.requestWillBeSent", (p) => {
+        const url = p?.request?.url;
+        if (url) urlByReqId.set(p.requestId, url);
+        const h = p?.request?.headers || {};
+        tryResolve(url, h.Authorization || h.authorization, h.Cookie || h.cookie);
+      });
+      cdp.on("Network.requestWillBeSentExtraInfo", (p) => {
+        const h = p?.headers || {};
+        tryResolve(urlByReqId.get(p.requestId), h.Authorization || h.authorization, h.Cookie || h.cookie);
+      });
+    });
+
+    log(`[auth:${this.id}] 打开 ${LOGIN_URL}，请完成登录（手机号 + 验证码）...`);
+    await cdp.send("Page.navigate", { url: LOGIN_URL });
+
+    const cred = await Promise.race([
+      capturedPromise,
+      new Promise((_, reject) =>
+        setTimeout(() => reject(new Error("捕获超时，请确认已完成登录")), CAPTURE_TIMEOUT_MS)
+      ),
+    ]);
+
+    const headers = {
+      Authorization: `Bearer ${cred.token}`,
+      Cookie: cred.cookie,
+      ...deepseekClientHeaders(),
+    };
+    log(`[auth:${this.id}] 已捕获(cred.url) cookie keys=${Object.keys(parseCookieKeys(cred.cookie)).join(",")}`);
+    return { token: cred.token, cookie: cred.cookie, headers };
+  }
+
+  async _saveToFile() {
+    let all = {};
+    if (fs.existsSync(CREDS_FILE)) {
+      try { all = JSON.parse(fs.readFileSync(CREDS_FILE, "utf8")); } catch {}
+    }
+    if (!all.providers) all.providers = {};
+    all.providers[this.id] = {
+      token: this._cred.token,
+      cookie: this._cred.cookie,
+      headers: this._cred.headers,
+      expiresAt: this._cred.expiresAt,
+      loginAt: Date.now(),
+    };
+    fs.writeFileSync(CREDS_FILE, JSON.stringify(all, null, 2), { mode: 0o600 });
+  }
+
+  async _loadFromFile() {
+    if (!fs.existsSync(CREDS_FILE)) return;
+    try {
+      const all = JSON.parse(fs.readFileSync(CREDS_FILE, "utf8"));
+      const data = all.providers?.[this.id];
+      if (!data) return;
+      this._cred = {
+        token: data.token,
+        cookie: data.cookie,
+        headers: data.headers || {},
+        expiresAt: data.expiresAt || 0,
+      };
+      if (!this._cred.headers?.Authorization || !this._cred.headers?.Cookie) {
+        log(`[auth:${this.id}] 凭证文件缺少 Authorization/Cookie，请重新登录`);
+        this._cred = null;
+        return;
+      }
+      log(`[auth:${this.id}] 从 .creds.json 加载凭证 token=${this._cred.token?.slice(0, 6)}...`);
+    } catch (e) {
+      log(`[auth:${this.id}] 加载 .creds.json 失败: ${e.message}`);
+    }
+  }
+}
+
+// DeepSeek web 请求的固定客户端头（offset 单位为秒，如 UTC+8 → 28800）
+function deepseekClientHeaders() {
+  return {
+    "x-client-bundle-id": "com.deepseek.chat",
+    "x-client-locale": "en_US",
+    "x-client-platform": "web",
+    "x-client-timezone-offset": String(-new Date().getTimezoneOffset() * 60),
+    "x-client-version": "2.4.0",
+  };
+}
+
+// 解析 Cookie 字符串为 key→value 映射（仅用于日志）
+function parseCookieKeys(cookie) {
+  const pairs = {};
+  for (const part of cookie.split(";")) {
+    const idx = part.indexOf("=");
+    if (idx > 0) pairs[part.slice(0, idx).trim()] = part.slice(idx + 1).trim();
+  }
+  return pairs;
+}
+
+// ---- 最小 CDP 客户端（基于全局 WebSocket，Node 22+）----
+class CdpClient {
+  constructor(ws, port) {
+    this.ws = ws;
+    this.port = port;
+    this.seq = 0;
+    this.pending = new Map();
+    this.eventHandlers = new Map();
+    ws.onmessage = (ev) => {
+      const msg = JSON.parse(ev.data);
+      if (msg.id) {
+        const p = this.pending.get(msg.id);
+        if (!p) return;
+        this.pending.delete(msg.id);
+        if (msg.error) p.reject(new Error(msg.error.message));
+        else p.resolve(msg.result || {});
+      } else if (msg.method) {
+        const cbs = this.eventHandlers.get(msg.method);
+        if (cbs) for (const cb of cbs) cb(msg.params || {});
+      }
+    };
+  }
+
+  send(method, params = {}) {
+    return new Promise((resolve, reject) => {
+      const id = ++this.seq;
+      this.pending.set(id, { resolve, reject });
+      this.ws.send(JSON.stringify({ id, method, params }));
+    });
+  }
+
+  on(method, cb) {
+    const arr = this.eventHandlers.get(method) || [];
+    arr.push(cb);
+    this.eventHandlers.set(method, arr);
+  }
+
+  close() {
+    try { this.ws.close(); } catch {}
+  }
+}

package/src/providers/deepseek-web/client.js

@@ -0,0 +1,171 @@
+// providers/deepseek-web/client.js — DeepSeek Web 推理客户端
+//
+// 完整管线：
+//   ① auth.getCredentials() 拿 token + cookie
+//   ② PoW: fetch challenge + DeepSeekHashV1 暴力解 → X-DS-PoW-Response 头
+//   ③ POST /api/v0/chat_session/create → 拿 chat_session_id
+//   ④ OpenAI body → DeepSeek web body（chat_session_id / prompt 等）
+//   ⑤ fetch POST /api/v0/chat/completion
+//   ⑥ DeepSeek 自定义 SSE → OpenAI SSE（createSseTransformStream）
+//
+// 会话策略：无状态 —— 每次请求新建 chat_session（单轮对话）。
+// Tool 注入/解析由 openai-tool-bridge 通用层处理，Provider 只负责消息格式化。
+
+import crypto from "node:crypto";
+import { fetch } from "undici";
+import { log } from "../../util.js";
+import { SIGN_CONFIG, MODEL_MAP } from "./config.js";
+import { getPowHeader } from "./pow.js";
+import { createSseTransformStream } from "./sse.js";
+import { buildSimplePrompt } from "./tools.js";
+
+const CHAT_ENDPOINT = "/chat/completion";
+const SESSION_ENDPOINT = "/chat_session/create";
+const TARGET_PATH = "/api/v0/chat/completion";
+const MAX_PROMPT_CHARS = 30_000;
+const USER_AGENT =
+  "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Safari/605.1.15";
+
+export default class DeepseekClient {
+  constructor({ id, signProvider, authProvider, host, basePath }) {
+    this.id = id;
+    this.signProvider = signProvider;
+    this.authProvider = authProvider;
+    this.host = host || SIGN_CONFIG.host;
+    this.basePath = basePath || SIGN_CONFIG.basePath;
+    this.powState = {};
+  }
+
+  /**
+   * POST /chat/completion（返回 OpenAI 风格 Response）
+   */
+  async chatCompletions(body, opts = {}) {
+    const cred = await this.authProvider.getCredentials({ autoLogin: false });
+
+    // ① PoW 头
+    const { headerValue } = await getPowHeader(cred, TARGET_PATH, this.powState);
+
+    // ② 创建 chat session
+    const chatSessionId = await this._createSession(cred);
+
+    // ③ 请求体转换
+    const dsBody = this._convertRequest(body, chatSessionId);
+
+    // ④ 发请求
+    const url = `https://${this.host}${this.basePath}${CHAT_ENDPOINT}`;
+    log(`[ds:${this.id}] POST ${url} session=${chatSessionId.slice(0, 8)} model=${body.model} stream=${body.stream === true}`);
+
+    const upstream = await fetch(url, {
+      method: "POST",
+      headers: this._buildHeaders(cred, {
+        "X-DS-PoW-Response": headerValue,
+        "Referer": `https://chat.deepseek.com/a/chat/s/${chatSessionId}`,
+      }),
+      body: JSON.stringify(dsBody),
+      signal: opts.signal || undefined,
+    });
+
+    if (!upstream.ok) {
+      const text = await upstream.text();
+      log(`[ds:${this.id}] 上游错误 ${upstream.status}: ${text.slice(0, 300)}`);
+      return new Response(
+        JSON.stringify({ error: { message: text.slice(0, 500), type: "upstream_error", code: upstream.status } }),
+        { status: upstream.status, headers: { "Content-Type": "application/json" } },
+      );
+    }
+
+    // ⑤ 响应转换：DeepSeek SSE → OpenAI SSE
+    const converted = createSseTransformStream(upstream.body, body.model);
+    return new Response(converted, {
+      status: 200,
+      headers: { "Content-Type": "text/event-stream; charset=utf-8" },
+    });
+  }
+
+  /**
+   * 创建 chat session（DeepSeek 要求 session 先经服务端注册）
+   */
+  async _createSession(cred) {
+    const url = `https://${this.host}${this.basePath}${SESSION_ENDPOINT}`;
+    const res = await fetch(url, {
+      method: "POST",
+      headers: this._buildHeaders(cred),
+      body: "{}",
+    });
+    if (!res.ok) {
+      const text = await res.text();
+      throw new Error(`创建 chat session 失败 ${res.status}: ${text.slice(0, 200)}`);
+    }
+    const json = await res.json();
+    const sessionId = json?.data?.biz_data?.chat_session?.id;
+    if (!sessionId) {
+      throw new Error(`chat session id 缺失: ${JSON.stringify(json).slice(0, 300)}`);
+    }
+    return sessionId;
+  }
+
+  /**
+   * 组装请求头（cred.headers + 固定头 + 额外头）
+   */
+  _buildHeaders(cred, extra = {}) {
+    return {
+      "Content-Type": "application/json",
+      "Origin": "https://chat.deepseek.com",
+      "User-Agent": USER_AGENT,
+      ...(cred.headers || {}),
+      ...extra,
+    };
+  }
+
+  /**
+   * OpenAI 请求体 → DeepSeek web 请求体
+   * 无状态：每次新 session；prompt 由全部 messages 拼接（含 bridge 注入的 tool 指令）
+   */
+  _convertRequest(body, chatSessionId) {
+    const model = body.model || "deepseek-chat";
+    const mapping = MODEL_MAP[model] || MODEL_MAP["deepseek-chat"];
+
+    const msgInfo = (body.messages || []).map((m) => {
+      const c = typeof m.content === "string" ? m.content : m.content?.map?.((p) => p?.text || "").filter(Boolean).join("|") ?? "";
+      return `${m.role}${c ? ":" + c.slice(0, 40) : ""}`;
+    });
+    log(`[ds:${this.id}] msgs=${JSON.stringify(msgInfo)}`);
+
+    const prompt = buildSimplePrompt(body.messages || []);
+    const truncated = prompt.length > MAX_PROMPT_CHARS;
+    if (truncated) {
+      log(`[ds:${this.id}] prompt 截断: ${prompt.length} -> ${MAX_PROMPT_CHARS}`);
+      const keep = MAX_PROMPT_CHARS;
+      const head = prompt.slice(0, Math.floor(keep / 3));
+      const tail = prompt.slice(-Math.floor((keep * 2) / 3));
+      return {
+        chat_session_id: chatSessionId,
+        parent_message_id: null,
+        model_type: mapping.modelType,
+        prompt: head + "\n\n[历史消息过多，已截断]\n\n" + tail,
+        ref_file_ids: [],
+        thinking_enabled: mapping.thinkingEnabled,
+        search_enabled: true,
+        action: null,
+        preempt: false,
+      };
+    }
+    log(`[ds:${this.id}] prompt 长度=${prompt.length} msgs=${(body.messages || []).length} lastRole=${(body.messages || []).at(-1)?.role}`);
+
+    return {
+      chat_session_id: chatSessionId,
+      parent_message_id: null,
+      model_type: mapping.modelType,
+      prompt,
+      ref_file_ids: [],
+      thinking_enabled: mapping.thinkingEnabled,
+      search_enabled: true,
+      action: null,
+      preempt: false,
+    };
+  }
+
+  models() {
+    return Object.keys(MODEL_MAP);
+  }
+}

package/src/providers/deepseek-web/config.js

@@ -0,0 +1,22 @@
+// providers/deepseek/config.js — DeepSeek Web provider 固定配置
+//
+// 端点基于对 chat.deepseek.com web 接口的逆向分析（见 docs/pow-analysis.md）。
+
+// 服务端点（固定，无需用户配置）
+export const SIGN_CONFIG = {
+  host: "chat.deepseek.com",
+  basePath: "/api/v0",
+};
+
+// OpenAI 模型名 → DeepSeek web 请求参数映射
+//  web 端 model_type 始终为 "default"，thinking 由 thinking_enabled 控制
+export const MODEL_MAP = {
+  "deepseek-chat": { modelType: "default", thinkingEnabled: false },
+  "deepseek-reasoner": { modelType: "default", thinkingEnabled: true },
+};
+
+// 可通过 GET /<provider>/v1/models 暴露的模型列表
+export const MODELS = ["deepseek-chat", "deepseek-reasoner"];
+
+// benefit 模型（DeepSeek web 无每日额度白名单，无常量配置）
+export const BENEFIT_MODELS = [];

package/src/providers/deepseek-web/error.js

@@ -0,0 +1,28 @@
+// providers/deepseek/error.js — DeepSeek Web 错误模式识别
+//
+// DeepSeek web 返回的错误：
+//   - 40300 POW_HEADER_ERROR — PoW 头缺失/错误
+//   - 40301 INVALID_POW_RESPONSE — PoW 响应无效
+//   - 429 限流（可能响应 x-hif-dliq/x-hif-leim 头）
+//
+// sessionLimit 语义：DeepSeek web 并发以 429 或服务繁忙体现；
+//   429 + 文本含 rate/session/busy → 视作会话超限，走长重试。
+import { ErrorPatterns } from "../../core/error.js";
+
+export const ERROR_CONFIG = {
+  sessionLimit: "session",          // 429 文本含 session → 会话超限
+  powErrors: ["40300", "40301"],
+};
+
+export default class DeepseekError extends ErrorPatterns {
+  isSessionLimit(status, bodyText) {
+    // 429 且文本含限流/繁忙信号 → 长重试
+    if (status === 429 && bodyText) {
+      if (/session|busy|rate|frequenc|limit|繁忙|频繁/i.test(bodyText)) return true;
+    }
+    // PoW 错误不重试（重试无法解决，需重新计算 PoW）
+    if (/40300|40301/.test(bodyText || "")) return false;
+    const marker = this.config.sessionLimit || ERROR_CONFIG.sessionLimit;
+    return Boolean(bodyText && bodyText.includes(marker));
+  }
+}